| ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js |  216.58.211.10 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js IP216.58.211.10:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30462
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:15:30 GMT
expires: Wed, 16 Apr 2025 03:15:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 267083
last-modified: Tue, 12 Sep 2023 02:38:22 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/css/chunk-62172722.063c0a9d.css?version=2222 |  117.18.3.84 | 200 OK | 883 B |
URL GET HTTP/2xxabg.cn/index/web/css/chunk-62172722.063c0a9d.css?version=2222 IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeASCII text, with very long lines (883), with no line terminators Hashc98e5cdb06fcf84251695a812c212e2f 23ca350e7dd03cfc784feefec65e69b95d81310b 23a2ca7fbc35172a3e0e4b717530f08472326c6b1aad555f3acbbe5812e19729
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index/web/css/chunk-62172722.063c0a9d.css?version=2222 HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: text/css
content-length: 883
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
etag: "6145e2da-373"
expires: Fri, 19 Apr 2024 17:26:54 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/img/logo_login.6761cf5f.svg | 117.18.3.84 | 200 OK | 2.4 kB |
URL GET HTTP/2xxabg.cn/index/web/img/logo_login.6761cf5f.svg IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeSVG Scalable Vector Graphics image Hash6761cf5f98cc93627bb2007b32a637b8 248123f5a1e59a195215596541f6628a058e97d1 f4c823301da0441f633837b7b207f4711269ff5c49e8d82f66df3324031a30cc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/img/logo_login.6761cf5f.svg HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:55 GMT
content-type: image/svg+xml
content-length: 2355
last-modified: Sat, 18 Sep 2021 13:00:12 GMT
etag: "6145e2dc-933"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/img/logo-gray.e6cc370e.svg | 117.18.3.84 | 200 OK | 2.3 kB |
URL GET HTTP/2xxabg.cn/index/web/img/logo-gray.e6cc370e.svg IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeSVG Scalable Vector Graphics image Hashe6cc370ea3c907ac5486f772698326de 614d02483aadc6ab7f531bfb411bb0449fc8d3ab 0f34f7d169129d40b428ac87ea520dce5c3acafe7d25699aaddf13a3b381d150
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/img/logo-gray.e6cc370e.svg HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:55 GMT
content-type: image/svg+xml
content-length: 2302
last-modified: Sat, 18 Sep 2021 13:00:12 GMT
etag: "6145e2dc-8fe"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/index/getStatus | 117.18.3.84 | 200 OK | 14 kB |
URL GET HTTP/2xxabg.cn/index/index/getStatus IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
Hashf9afb078e85e51f7eb7fea1a09edbe3b 77be08208e42438bda5e14f1e6e463d88485e1e3 8b9251abc21bf5841e431f09aaefdd72b74f123509499600381fab4c790f3437
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/index/getStatus HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin:
access-control-allow-methods: GET,POST,PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With,X_Requested_With,Content-Type,token,X-Token,authorization
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/favicon.ico | 117.18.3.84 | 404 Not Found | 9.2 kB |
URL GET HTTP/2xxabg.cn/index/favicon.ico IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typegzip compressed data, from Unix Hash4395115dd2c08eeb9322015f93b8d16d 599b6ab6d13a82d21eaa2af9aa2dc2dc15229a71 8bb81082f9f8b2645cbad310aa54c21cb8160ea8bcb936b276ccc359f64a2d40
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/favicon.ico HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin:
access-control-allow-methods: GET,POST,PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With,X_Requested_With,Content-Type,token,X-Token,authorization
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/js/chunk-vendors.6902600f.js | 117.18.3.84 | 200 OK | 299 kB |
URL GET HTTP/2xxabg.cn/index/web/js/chunk-vendors.6902600f.js IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
Size299 kB (298864 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/js/chunk-vendors.6902600f.js HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:52 GMT
content-type: application/javascript
last-modified: Sat, 18 Sep 2021 13:00:14 GMT
vary: Accept-Encoding
etag: W/"6145e2de-48f70"
expires: Fri, 19 Apr 2024 17:26:52 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/js/chunk-vendors.6902600f.js?version=2222 | 117.18.3.84 | 200 OK | 299 kB |
URL GET HTTP/2xxabg.cn/index/web/js/chunk-vendors.6902600f.js?version=2222 IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
Size299 kB (298864 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index/web/js/chunk-vendors.6902600f.js?version=2222 HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:52 GMT
content-type: application/javascript
last-modified: Sat, 18 Sep 2021 13:00:14 GMT
vary: Accept-Encoding
etag: W/"6145e2de-48f70"
expires: Fri, 19 Apr 2024 17:26:52 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/js/chunk-62172722.c683da35.js?version=2222 | 117.18.3.84 | 200 OK | 5.4 kB |
URL GET HTTP/2xxabg.cn/index/web/js/chunk-62172722.c683da35.js?version=2222 IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5500), with no line terminators Hashe13dbc2a58d381a676b088eda4c00516 5575bd05bc1683a63c937ca848eb684621a7271a 9c10d2e8e1e9417c1bf1bef49f078bf70ec5078fb0a32b84f1fcfd94270a11b6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/js/chunk-62172722.c683da35.js?version=2222 HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 05:29:52 GMT
vary: Accept-Encoding
etag: W/"65d58a50-14fd"
expires: Fri, 19 Apr 2024 17:26:54 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/css/chunk-59a76fbc.ee42fe5e.css | 117.18.3.84 | 200 OK | 2.7 kB |
URL GET HTTP/2xxabg.cn/index/web/css/chunk-59a76fbc.ee42fe5e.css IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeASCII text, with very long lines (2739), with no line terminators Hash81f4fcc18612ff8fb360b48b3b084dc2 92c7dfd5863cc556e716ee21c99683a799d399f0 b4ad71a4324373eaf29a1057f8e66bb3fc487793fe70899eee74869aa4a43fb1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/css/chunk-59a76fbc.ee42fe5e.css HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
vary: Accept-Encoding
etag: W/"6145e2da-ab3"
expires: Fri, 19 Apr 2024 17:26:54 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/css/app.08fda6cd.css | 117.18.3.84 | 200 OK | 2.8 kB |
URL GET HTTP/2xxabg.cn/index/web/css/app.08fda6cd.css IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeASCII text, with very long lines (2768), with no line terminators Hash03fc25129f894a3b9f3d849ec704269b 060e76eba5728a815fc6fd18943e2dcc548fd56c 95b8636c39d7b471567e5e5655e44b881159d7f8ed38a5a6ed1985f70a5be3b3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/css/app.08fda6cd.css HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:52 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:08 GMT
vary: Accept-Encoding
etag: W/"6145e2d8-ad0"
expires: Fri, 19 Apr 2024 17:26:52 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/js/app.46d27c9f.js?version=2222 | 117.18.3.84 | 200 OK | 10 kB |
URL GET HTTP/2xxabg.cn/index/web/js/app.46d27c9f.js?version=2222 IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/js/app.46d27c9f.js?version=2222 HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:52 GMT
content-type: application/javascript
last-modified: Sat, 18 Sep 2021 13:00:12 GMT
vary: Accept-Encoding
etag: W/"6145e2dc-28bb"
expires: Fri, 19 Apr 2024 17:26:52 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/js/chunk-59a76fbc.4c541c77.js | 117.18.3.84 | 200 OK | 4.1 kB |
URL GET HTTP/2xxabg.cn/index/web/js/chunk-59a76fbc.4c541c77.js IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4100), with no line terminators Hashb1691750f4fa4e3f3500d72110c0cde8 1ab80cfcc56d9a6a282dc39c950b8a022bcb70d5 6b469374a26e78e0ea5db7357b1c3489a5739a2cac1e38bd71654807651c8b64
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/js/chunk-59a76fbc.4c541c77.js HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: application/javascript
last-modified: Mon, 18 Dec 2023 11:22:26 GMT
vary: Accept-Encoding
etag: W/"65802b72-1001"
expires: Fri, 19 Apr 2024 17:26:54 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/css/chunk-vendors.663cee71.css | 117.18.3.84 | 200 OK | 82 kB |
URL GET HTTP/2xxabg.cn/index/web/css/chunk-vendors.663cee71.css IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashb5ee09b5dd48e46e1fee53eee1ed2d7f 6b3f7806b47ed39d71a7e0ed4c468baf9f570687 b9444d49f5429eb9893d00b66292dab12efaaeeb7e015072cfcef378dd066199
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/css/chunk-vendors.663cee71.css HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:52 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
vary: Accept-Encoding
etag: W/"6145e2da-141fc"
expires: Fri, 19 Apr 2024 17:26:52 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/js/allInit.js?version=2222 | 117.18.3.84 | 200 OK | 1.4 kB |
URL GET HTTP/2xxabg.cn/index/web/js/allInit.js?version=2222 IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeASCII text, with very long lines (1416), with no line terminators Hash79260f76e75a011e49ec7032c383de12 ccc0d72674c709212a188be422dbd302a0a48b81 a1ede74722940a594aac9a9a226b41ab0eca1bcbdff287995762c6bc6a6e16ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index/web/js/allInit.js?version=2222 HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:52 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 04:57:54 GMT
vary: Accept-Encoding
etag: W/"65d582d2-564"
expires: Fri, 19 Apr 2024 17:26:52 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/css/chunk-59a76fbc.ee42fe5e.css | 117.18.3.84 | 200 OK | 2.7 kB |
URL GET HTTP/2xxabg.cn/index/web/css/chunk-59a76fbc.ee42fe5e.css IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeASCII text, with very long lines (2739), with no line terminators Hash81f4fcc18612ff8fb360b48b3b084dc2 92c7dfd5863cc556e716ee21c99683a799d399f0 b4ad71a4324373eaf29a1057f8e66bb3fc487793fe70899eee74869aa4a43fb1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/css/chunk-59a76fbc.ee42fe5e.css HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
vary: Accept-Encoding
etag: W/"6145e2da-ab3"
expires: Fri, 19 Apr 2024 17:26:54 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/js/chunk-33e067a3.0a730f71.js?version=2222 | 117.18.3.84 | 200 OK | 4.2 kB |
URL GET HTTP/2xxabg.cn/index/web/js/chunk-33e067a3.0a730f71.js?version=2222 IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4158), with no line terminators Hash86e143476f743785008a850bb76b6708 70b296eeb2e61f1d54a9ea2fda1c4d2c19464745 7ff7ce78a45f2f183b9f39ee7dd88d04149b66d432db05781f1ec39c0b1f5514
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/js/chunk-33e067a3.0a730f71.js?version=2222 HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 05:28:25 GMT
vary: Accept-Encoding
etag: W/"65d589f9-104e"
expires: Fri, 19 Apr 2024 17:26:54 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 117.18.3.84 | 200 OK | 1.6 kB |
URL User Request GET HTTP/2IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1684), with no line terminators Hashcacdb168f9d478390207a387382d9794 ae551e70a897559962f284ab62ced0c53a0bb708 e6a1c3e5cd5a3f6d11bb2beb8ccadd1f1ed5dc9e7426eae6d7c4f2635f43bbba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:52 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin:
access-control-allow-methods: GET,POST,PUT
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With,X_Requested_With,Content-Type,token,X-Token,authorization
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/css/chunk-33e067a3.3db98e59.css | 117.18.3.84 | 200 OK | 2.3 kB |
URL GET HTTP/2xxabg.cn/index/web/css/chunk-33e067a3.3db98e59.css IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeASCII text, with very long lines (2339), with no line terminators Hash5b21585d48dfa0e1ae8204096290301a aad7f79028e855182d6096489f2301d4ac67aeba e953f2f6cd08b2f53c91c3ee80b89ce3226930c9b50f90a7a5ae81abd65fe268
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/css/chunk-33e067a3.3db98e59.css HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: text/css
last-modified: Sat, 18 Sep 2021 13:00:10 GMT
vary: Accept-Encoding
etag: W/"6145e2da-923"
expires: Fri, 19 Apr 2024 17:26:54 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| xxabg.cn/index/web/js/chunk-59a76fbc.4c541c77.js?version=2222 | 117.18.3.84 | 200 OK | 4.1 kB |
URL GET HTTP/2xxabg.cn/index/web/js/chunk-59a76fbc.4c541c77.js?version=2222 IP117.18.3.84:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectxxakr.cn Fingerprint88:25:E6:FE:26:56:57:2D:BD:32:BA:DF:5C:CE:65:3C:B0:A2:56:BA ValidityThu, 21 Mar 2024 21:03:25 GMT - Wed, 19 Jun 2024 21:03:24 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4100), with no line terminators Hashb1691750f4fa4e3f3500d72110c0cde8 1ab80cfcc56d9a6a282dc39c950b8a022bcb70d5 6b469374a26e78e0ea5db7357b1c3489a5739a2cac1e38bd71654807651c8b64
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Mercari | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /index/web/js/chunk-59a76fbc.4c541c77.js?version=2222 HTTP/1.1
Host: xxabg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://xxabg.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 05:26:54 GMT
content-type: application/javascript
last-modified: Mon, 18 Dec 2023 11:22:26 GMT
vary: Accept-Encoding
etag: W/"65802b72-1001"
expires: Fri, 19 Apr 2024 17:26:54 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|