Report - gojun.me/posts/play-reviews-research/

Report Overview

Submitted URL
gojun.me/posts/play-reviews-research/
IP
172.67.185.137
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-05 11:01:56
Access
public
Website Title
使用 Python3 对在 Play 商店应用的评论爬取调研｜ GoJun
Final URL
gojun.me/posts/play-reviews-research/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-05-04	1.4 kB	147 kB	151.101.193.229
gojun.me	unknown	unknown	No data	No data	3.6 kB	255 kB	172.67.185.137
cdn.bootcss.com	44163	2012-11-12	2013-11-06	2024-05-02	886 B	114 kB	104.18.50.162
gojun.mecss	unknown	unknown	No data	No data	408 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-05	medium	gojun.mecss	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	gojun.me/posts/play-reviews-research/sandbox%20eval%20code	147 B	2023-04-11	2024-05-18
Pretty URL gojun.me/posts/play-reviews-research/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-18 19:10:36 Times Seen350356 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	gojun.me/js/jquery-3.5.1.min.js	90 kB	2023-03-07	2024-05-18
Pretty URL gojun.me/js/jquery-3.5.1.min.js IP 172.67.185.137 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-18 19:15:00 Times Seen145322 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	gojun.me/js/zozo.js	1.1 kB	2024-05-05	2024-05-05
Pretty URL gojun.me/js/zozo.js IP 172.67.185.137 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 13:02:03 Last Seen2024-05-05 13:02:03 Times Seen2 Hash 3cb7d84940869ac668a5038f97055cc4 02c38e1c7b3735dd07097fded348ce44e90b878e a00e898a44f0873196a39b80212853631901d20980b16567549637395b98482f Loading...

	gojun.me/js/fancybox.min.js	99 kB	2024-05-05	2024-05-05
Pretty URL gojun.me/js/fancybox.min.js IP 172.67.185.137 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 13:02:03 Last Seen2024-05-05 13:02:03 Times Seen2 Hash af9fa1171e488cf90517f5a9849da765 8f3e7698aabdaa880756a842e679ceae40f031cb 60aa4ee60c753d553a408fb2ae78c5efff224050841010e358e82ea6709e4062 Loading...

	gojun.me/posts/play-reviews-research/	0 B	2023-03-07	2024-05-18
Pretty URL gojun.me/posts/play-reviews-research/ IP 172.67.185.137 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 19:15:24 Times Seen37793795 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.google-analytics.com/analytics.js	4.7 kB	2023-04-11	2024-05-18
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-05-18 19:10:36 Times Seen349842 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

	cdn.bootcss.com/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML	64 kB	2023-03-07	2024-05-11
Pretty URL cdn.bootcss.com/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML IP 104.18.50.162 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17:23 Last Seen2024-05-11 15:17:18 Times Seen208 Hash c32a502b8b4a6bd6bad8ddb1b59e9e72 6c51d2475049a68c197c30e21a6df59ac8749f1e 9ef249bfdc162849bcf2abe8425f5e90bd89fa4fd1588b1a492731c65b2bbfc9 Loading...

	cdn.bootcss.com/mathjax/2.7.5/config/TeX-AMS-MML_HTMLorMML.js?V=2.7.5	245 kB	2023-03-07	2024-05-11
Pretty URL cdn.bootcss.com/mathjax/2.7.5/config/TeX-AMS-MML_HTMLorMML.js?V=2.7.5 IP 104.18.50.162 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17:23 Last Seen2024-05-11 15:17:18 Times Seen76 Hash 151537e3588ab41ce0782ae07386ff5b 418e398d40588bc5b953a4c8238f0b9348491de0 f380ca5d5257b34fc5f0e4cccd7e1447dd3dfa3b65e06ed23f2a4f6af17e19f0 Loading...

		Size	First Seen	Last Seen
	#1 Eval - fab70ed457a253df18da696dd2778b0f	20 B	2023-03-07	2024-05-17
Pretty Observations First Seen2023-03-07 12:06:17 Last Seen2024-05-17 04:08:47 Times Seen264 Hash fab70ed457a253df18da696dd2778b0f fa9fe59924c143abd7d3e3809ba821d7da8b3365 0623d2ad43a9522aac28f143e3fae46035448519e0922d736c8669a2a9fd1a6a Loading...

	#2 Eval - 13a47c5886459708f40ac63d2da0b78a	813 B	2024-05-05	2024-05-05
Pretty Observations First Seen2024-05-05 13:02:03 Last Seen2024-05-05 13:02:03 Times Seen1 Hash 13a47c5886459708f40ac63d2da0b78a cef8e8bba552fe504e18e98c85308ae3fb682523 d402f0c1c28b323fa965df698f775a41e2525389e98099ca581175b13f604cee Loading...

HTTP Transactions (14)

URL IP Response Size

cdn.jsdelivr.net/npm/animate.css@4.1.0/animate.min.css

151.101.193.229

200 OK

5.7 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/animate.css@4.1.0/animate.min.css
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (65346)
Size
5.7 kB (5672 bytes)
Hash
201217c17c7f58f86549030d82f8b4d5
9c483362ebcd2740e666595b70af579ad096b8f5
ea1a8732a5d354476cd51f0780a8ac2e6de5fdda27790b3ead2d5ae4d2e6c30a

HTTP Headers

GET /npm/animate.css@4.1.0/animate.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.1.0
x-jsd-version-type: version
etag: W/"11848-nEgzYuvNJ0DmZllbcK9XmtCWuPU"
content-encoding: br
accept-ranges: bytes
age: 2521225
date: Sun, 05 May 2024 11:01:32 GMT
x-served-by: cache-fra-eddf8230156-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5672
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.css

151.101.193.229

200 OK

14 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.css
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text
Size
14 kB (13745 bytes)
Hash
a8aec561d3b9b905472b815cb2b818c2
300eda4d6282a06d056239258fd3d3c344df4853
13e29a29baade86f4e7a88d8e076d6a6f3ac8950757b50a0f8bbea1c33658d5c

HTTP Headers

GET /npm/remixicon@2.5.0/fonts/remixicon.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 2.5.0
x-jsd-version-type: version
etag: W/"1af66-MA7aTWKCoG0FYjklj9PTw0TfSFM"
content-encoding: br
accept-ranges: bytes
date: Sun, 05 May 2024 11:01:32 GMT
age: 2445242
x-served-by: cache-fra-eddf8230041-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 13745
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.woff2?t=1590207869815

151.101.193.229

200 OK

125 kB

URL GET HTTP/3
cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.woff2?t=1590207869815
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Web Open Font Format (Version 2), TrueType, length 125268, version 1.0
Size
125 kB (125268 bytes)
Hash
9915fef980fa539085da55b84dfde760
4d375abf43ed18aa54264c1b59714b0a59c593a4
e61f0d10c8cac8cd0ecb36790d6cce883380c0b185ff3c9bf849ed336ba8285c

HTTP Headers

GET /npm/remixicon@2.5.0/fonts/remixicon.woff2?t=1590207869815 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gojun.me
DNT: 1
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 125268
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff2
x-jsd-version: 2.5.0
x-jsd-version-type: version
etag: W/"1e954-TTdav0PtGKpUJkwbWXFLClnFk6Q"
accept-ranges: bytes
date: Sun, 05 May 2024 11:01:32 GMT
age: 1672714
x-served-by: cache-fra-eddf8230122-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

gojun.me/images/favicon.ico

172.67.185.137

200 OK

20 kB

URL GET HTTP/3
gojun.me/images/favicon.ico
IP
172.67.185.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectgojun.me
Fingerprint4F:16:D6:42:1B:C3:E7:82:80:07:5B:E4:69:56:13:EC:08:8B:51:EA
ValiditySat, 30 Mar 2024 18:33:42 GMT - Fri, 28 Jun 2024 18:33:41 GMT

File type
MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel
Size
20 kB (20451 bytes)
Hash
1317852bd7e643af87dcb91cf19ac9d0
1db2ca1355b13784a757a73b2f1b16397c3e2fbc
319b0eb8f21a9c93c5e5d11ac3b1b80e1f5c410eac17b287acdb6fc93e040f6f

HTTP Headers

GET /images/favicon.ico HTTP/1.1
Host: gojun.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/posts/play-reviews-research/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: image/vnd.microsoft.icon
last-modified: Wed, 18 May 2022 05:38:44 GMT
access-control-allow-origin: *
etag: W/"62848664-25be"
expires: Sun, 05 May 2024 11:11:32 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: 7DE2:32B785:431226E:44F365A:6637670B
via: 1.1 varnish
x-served-by: cache-osl6534-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714906893.520795,VS0,VE122
vary: Accept-Encoding
x-fastly-request-id: 071859c2852426bf6de8856079c72a7046558b17
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EE1IMYGWaETHEtUxKhlsmRv0Dz9HXbIoE6SvmI2tpgF0nN6vmyQttHlxfgEwZFEMbPaAcr5HFzuCW32S7SuPtu0zK1zBa5M66qW9SoB6qy%2B6dd7kpWJ7Utz18g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f03bae3a2eb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdn.bootcss.com/mathjax/2.7.5/config/TeX-AMS-MML_HTMLorMML.js?V=2.7.5

104.18.50.162

200 OK

86 kB

URL GET HTTP/2
cdn.bootcss.com/mathjax/2.7.5/config/TeX-AMS-MML_HTMLorMML.js?V=2.7.5
IP
104.18.50.162:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectcdn.bootcss.com
Fingerprint20:BD:11:0B:BF:80:17:43:09:C1:5E:26:6D:60:19:73:9B:C2:54:54
ValidityFri, 12 Apr 2024 08:14:15 GMT - Thu, 11 Jul 2024 08:14:14 GMT

File type
gzip compressed data, from Unix
Size
86 kB (86023 bytes)
Hash
c93b5fac64e78f3547eff8d1dfc84a47
154f437fafb89386174e23953beb09619634ebea
a0c080ca819df876afb3424c22a5fc1ac8f6f66edfa6a1a09bc7495558a0abc4

HTTP Headers

GET /mathjax/2.7.5/config/TeX-AMS-MML_HTMLorMML.js?V=2.7.5 HTTP/1.1
Host: cdn.bootcss.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token
cache-control: public, max-age=14400
content-encoding: gzip
last-modified: Fri, 12 Apr 2024 13:17:39 GMT
cf-cache-status: HIT
age: 13333
expires: Sun, 05 May 2024 15:01:32 GMT
server: cloudflare
cf-ray: 87f03bae5c9a712a-OSL
X-Firefox-Spdy: h2

gojun.me/css/fancybox.min.css

172.67.185.137

200 OK

9.2 kB

URL GET HTTP/3
gojun.me/css/fancybox.min.css
IP
172.67.185.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectgojun.me
Fingerprint4F:16:D6:42:1B:C3:E7:82:80:07:5B:E4:69:56:13:EC:08:8B:51:EA
ValiditySat, 30 Mar 2024 18:33:42 GMT - Fri, 28 Jun 2024 18:33:41 GMT

File type
ASCII text, with very long lines (14835), with no line terminators
Size
9.2 kB (9224 bytes)
Hash
6d3834cb269f42f12d538dd5f3b26530
053925e61a782310fa9734fbc9d029db1059f884
7a250b85d7bdb5f3d107d0ac43148aa585eed386eae100d14e2fc53084b96bef

HTTP Headers

GET /css/fancybox.min.css HTTP/1.1
Host: gojun.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/posts/play-reviews-research/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 18 May 2022 05:38:44 GMT
access-control-allow-origin: *
etag: W/"62848664-39f3"
expires: Sun, 05 May 2024 11:11:32 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: 22EC:324D58:3FE59DE:41BAEF6:6637670A
via: 1.1 varnish
x-served-by: cache-osl6536-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714906892.070016,VS0,VE122
vary: Accept-Encoding
x-fastly-request-id: e330d6e1f4b33de2494642a7d0081b9c9a446cc5
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2JXFPi2csYN%2FbmZWvPmHLQ5YbVG3NEWdmBlcHnr4aEaDkUC1hQGL3HM9R2yAyhvfXsSkO3xL%2F%2B3qh7HSVa%2F%2BIoFr1vz9Xr27LDN4torlCVntKnJ%2By5RSWehaDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f03bab5f07b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gojun.me/js/zozo.js

172.67.185.137

200 OK

3.7 kB

URL GET HTTP/3
gojun.me/js/zozo.js
IP
172.67.185.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectgojun.me
Fingerprint4F:16:D6:42:1B:C3:E7:82:80:07:5B:E4:69:56:13:EC:08:8B:51:EA
ValiditySat, 30 Mar 2024 18:33:42 GMT - Fri, 28 Jun 2024 18:33:41 GMT

File type
JavaScript source, ASCII text
Size
3.7 kB (3728 bytes)
Hash
3cb7d84940869ac668a5038f97055cc4
02c38e1c7b3735dd07097fded348ce44e90b878e
a00e898a44f0873196a39b80212853631901d20980b16567549637395b98482f

HTTP Headers

GET /js/zozo.js HTTP/1.1
Host: gojun.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/posts/play-reviews-research/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: application/javascript; charset=utf-8
x-origin-cache: HIT
last-modified: Wed, 18 May 2022 05:38:44 GMT
access-control-allow-origin: *
etag: W/"62848664-444"
expires: Sun, 05 May 2024 11:11:32 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: 0DC2:29D1C9:413DC10:431FF1C:66376708
via: 1.1 varnish
x-served-by: cache-osl6520-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714906892.074644,VS0,VE138
vary: Accept-Encoding
x-fastly-request-id: c95626db31e1626f6ad8da3a885c28ea2f83cb26
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxb7j3NGmu2Ns42xklvWffHmqDoSXVAX6RgVF6K8hajMR%2BleJn43Lb1%2FrtgRgD99hfGtXtFDjkweGsnBvxK5xt8vUeR3iK7lGsh3XKNuu3N6EjVA%2FhYQPOk%2Fwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f03bab6f1cb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

cdn.bootcss.com/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML

104.18.50.162

200 OK

26 kB

URL GET HTTP/2
cdn.bootcss.com/mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML
IP
104.18.50.162:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectcdn.bootcss.com
Fingerprint20:BD:11:0B:BF:80:17:43:09:C1:5E:26:6D:60:19:73:9B:C2:54:54
ValidityFri, 12 Apr 2024 08:14:15 GMT - Thu, 11 Jul 2024 08:14:14 GMT

File type
gzip compressed data, from Unix
Size
26 kB (26507 bytes)
Hash
e1b07868628059f5a1d3644257b4bdbf
66c94bc0c99b48115fe40d3fddc6a98e59b98810
1127cfbe069f97d6876c232ece81b1178810a9c735be75489a1a0076a0170821

HTTP Headers

GET /mathjax/2.7.5/MathJax.js?config=TeX-AMS-MML_HTMLorMML HTTP/1.1
Host: cdn.bootcss.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With,token
content-encoding: gzip
last-modified: Thu, 25 Apr 2024 00:51:58 GMT
cf-cache-status: HIT
age: 294718
expires: Sun, 05 May 2024 15:01:32 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87f03baddc0b712a-OSL
X-Firefox-Spdy: h2

gojun.mecss/normalize.css

0.0.0.0

0 B

URL GET
gojun.mecss/normalize.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://gojun.me/posts/play-reviews-research/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /normalize.css HTTP/1.1
Host: gojun.mecss
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

gojun.me/css/zozo.css

172.67.185.137

200 OK

11 kB

URL GET HTTP/3
gojun.me/css/zozo.css
IP
172.67.185.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectgojun.me
Fingerprint4F:16:D6:42:1B:C3:E7:82:80:07:5B:E4:69:56:13:EC:08:8B:51:EA
ValiditySat, 30 Mar 2024 18:33:42 GMT - Fri, 28 Jun 2024 18:33:41 GMT

File type

Size
11 kB (10913 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /css/zozo.css HTTP/1.1
Host: gojun.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/posts/play-reviews-research/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: text/css; charset=utf-8
x-origin-cache: HIT
last-modified: Wed, 18 May 2022 05:38:44 GMT
access-control-allow-origin: *
etag: W/"62848664-2aa1"
expires: Sun, 05 May 2024 11:11:32 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: 5A1A:38D071:43BF98B:45A27C2:66376709
via: 1.1 varnish
x-served-by: cache-osl6549-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714906892.067374,VS0,VE113
vary: Accept-Encoding
x-fastly-request-id: ba61965f1bbc3c64df4a5abbc4f432a46178492b
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g4%2Fgmsr0E6huy%2FaRUso1jM2BxEKQeDeceqVUYwf%2By7EpRrlEZ8Y9C9Q32LXQBLmrEaZF3afduXuUTg8phFsdwH8QPeH7yl%2FdfTuxSkGqo6epOTZVhnd6OLamcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f03bab5ef6b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gojun.me/js/fancybox.min.js

172.67.185.137

200 OK

99 kB

URL GET HTTP/3
gojun.me/js/fancybox.min.js
IP
172.67.185.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectgojun.me
Fingerprint4F:16:D6:42:1B:C3:E7:82:80:07:5B:E4:69:56:13:EC:08:8B:51:EA
ValiditySat, 30 Mar 2024 18:33:42 GMT - Fri, 28 Jun 2024 18:33:41 GMT

File type
JavaScript source, ASCII text, with very long lines (65496)
Size
99 kB (99222 bytes)
Hash
af9fa1171e488cf90517f5a9849da765
8f3e7698aabdaa880756a842e679ceae40f031cb
60aa4ee60c753d553a408fb2ae78c5efff224050841010e358e82ea6709e4062

HTTP Headers

GET /js/fancybox.min.js HTTP/1.1
Host: gojun.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/posts/play-reviews-research/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 18 May 2022 05:38:44 GMT
access-control-allow-origin: *
etag: W/"62848664-18396"
expires: Sun, 05 May 2024 11:11:32 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: 7BB2:96BD5:13B0C77:14580F0:6637670A
via: 1.1 varnish
x-served-by: cache-osl6542-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714906892.070298,VS0,VE126
vary: Accept-Encoding
x-fastly-request-id: 3bd247d86e5c63a85e737cd4a0e61a0eacc515a3
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DGDPhOqcgVtmpF%2FOSTevWQCPyLpEjzs%2Bts5QAUwG8%2BKE1Prnh6LeRks0XO68AB9kIgSyjvyq6q2l07rakiJOI%2F6zJJ0xYUtF0ym8HQHibHyBdhcez0kCG9yDYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f03bab5f10b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gojun.me/posts/play-reviews-research/

172.67.185.137

200 OK

8.5 kB

URL User Request GET HTTP/2
gojun.me/posts/play-reviews-research/
IP
172.67.185.137:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgojun.me
Fingerprint4F:16:D6:42:1B:C3:E7:82:80:07:5B:E4:69:56:13:EC:08:8B:51:EA
ValiditySat, 30 Mar 2024 18:33:42 GMT - Fri, 28 Jun 2024 18:33:41 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7750), with no line terminators
Size
8.5 kB (8535 bytes)
Hash
87a46c492b1a76b284a2c31994fe2294
9f571aec7f59751b78b73d344ef99e9ac25d39f1
ee02aca1a0a13305f46fb6c05beaa9130bf0ec36f91d0d7143c5a98390c70586

HTTP Headers

GET /posts/play-reviews-research/ HTTP/1.1
Host: gojun.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 11:01:31 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 18 May 2022 05:38:44 GMT
access-control-allow-origin: *
expires: Sun, 05 May 2024 11:11:31 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 1B3A:ED6F4:D89CDD:DF824E:6637670B
age: 0
via: 1.1 varnish
x-served-by: cache-osl6551-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714906891.461365,VS0,VE122
vary: Accept-Encoding
x-fastly-request-id: 3393a8f22fcd1edbc37b0876c87ce68234a3f86b
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gJklQrVJCDj%2BUMh0Wqa3gc%2FYv6nOZ4Q5Dbrzy960Jr3oVCb5fmOy8fzex6PO8iRm0MJ3W6gaWnbsPyQ6%2BkBSk60Z00LyzbZyWC2oxVdmPpg6%2Bvjeq2bNVwNZWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f03ba7897fb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

gojun.me/css/highlight.css

172.67.185.137

200 OK

5.0 kB

URL GET HTTP/3
gojun.me/css/highlight.css
IP
172.67.185.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectgojun.me
Fingerprint4F:16:D6:42:1B:C3:E7:82:80:07:5B:E4:69:56:13:EC:08:8B:51:EA
ValiditySat, 30 Mar 2024 18:33:42 GMT - Fri, 28 Jun 2024 18:33:41 GMT

File type
ASCII text, with very long lines (5041), with no line terminators
Size
5.0 kB (4959 bytes)
Hash
1c2a849105f1d7b296b9244408a8e1c2
5f328ecaeb607b814782ec04ff78fb70c5f068c5
11f0de4b24487299d0037091e83beb818f85b6b08c8d62948719339a611789ef

HTTP Headers

GET /css/highlight.css HTTP/1.1
Host: gojun.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/posts/play-reviews-research/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 18 May 2022 05:38:44 GMT
access-control-allow-origin: *
etag: W/"62848664-135f"
expires: Sun, 05 May 2024 11:11:32 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: 4F72:17F4B9:BE6253:C47628:6637670B
via: 1.1 varnish
x-served-by: cache-osl6522-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714906892.067334,VS0,VE122
vary: Accept-Encoding
x-fastly-request-id: 84ac8cd1b080df8c017ed5ca0692822531cefcd1
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fE294n5axWzSohzG4vfMGBRtBKpEikz7JQ1r%2BmyxqVC0aQQSxdOqY7RM%2BfNRo1pPg%2BXg4c5XB7hQwOAGRK9evCvMQe3%2B0407PjNQ0y0WvKkBsbf71vWATXWATQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f03bab5efab518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gojun.me/js/jquery-3.5.1.min.js

172.67.185.137

200 OK

90 kB

URL GET HTTP/3
gojun.me/js/jquery-3.5.1.min.js
IP
172.67.185.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gojun.me/posts/play-reviews-research/
Certificate
IssuerGoogle Trust Services LLC
Subjectgojun.me
Fingerprint4F:16:D6:42:1B:C3:E7:82:80:07:5B:E4:69:56:13:EC:08:8B:51:EA
ValiditySat, 30 Mar 2024 18:33:42 GMT - Fri, 28 Jun 2024 18:33:41 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
90 kB (89476 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /js/jquery-3.5.1.min.js HTTP/1.1
Host: gojun.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gojun.me/posts/play-reviews-research/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 11:01:32 GMT
content-type: application/javascript; charset=utf-8
x-origin-cache: HIT
last-modified: Wed, 18 May 2022 05:38:44 GMT
access-control-allow-origin: *
etag: W/"62848664-15d84"
expires: Sun, 05 May 2024 11:11:32 GMT
cache-control: max-age=14400
x-proxy-cache: MISS
x-github-request-id: A67A:3AEDCF:2552B45:26715D2:6637670A
via: 1.1 varnish
x-served-by: cache-osl6526-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714906892.069849,VS0,VE127
vary: Accept-Encoding
x-fastly-request-id: 6dbdcfe9226be611ced687d8dc0c6f68a6130a35
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TJTW%2FcqmWaPYPYwPbdpF5nIRHhxHqEB9cIJGqqrSp6kh5MlnuKktzjWfNZ1TVspqto35AzQzJrRPxUWHj8wPcuiiHV0L%2FekqwrRnTBtksrEvzRQk7GHU7V2MEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f03bab5f01b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML