WEBSITE ANALYSIS REPORT

http://f7u0s.com/

12 Sep 2026 · 22:43:22.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

22:42:49.160 GET 302 document 0 B 1224 ms 1 alerts

22:42:50.393 GET 200 document 1.2 KB 1245 ms 1 alerts

22:42:51.848 GET 200 script 380 B 217 ms 1 alerts

22:42:51.853 GET 200 script 239.5 KB 2815 ms 1 alerts

22:42:51.855 GET 200 stylesheet 14.0 KB 645 ms 1 alerts

22:42:53.705 GET 200 img 4.2 KB 212 ms 1 alerts

22:42:54.716 POST 200 xhr 1.5 KB 242 ms 1 alerts

22:42:54.983 GET 200 script 2.4 KB 217 ms 1 alerts

22:42:54.985 GET 200 stylesheet 851 B 212 ms 1 alerts

22:42:55.386 GET 200 img 1.44 MB 2677 ms 1 alerts

Transaction #11

Request / response

URL

GET HTTPS

https://ld1y12.oss-cn-shenzhen.aliyuncs.com/images/ojUC9OoyiM6OQJ8u.js

IP / ASN

112.74.1.135

AS37963 · Hangzhou Alibaba Advertising Co.,Ltd.

Requested by: https://f03oj.com/?9gJwP6Q2lpR4dHc6

Resource information

File type: GIF image data, version 89a, 44739 x 17922
MIME type: application/javascript
First seen (UTC): 06 Jul 2026 · 11:49:14.676 UTC
Last seen (UTC): 12 Sep 2026 · 22:43:36.361 UTC
Times seen: 3

Size: 1.44 MB (1510681 bytes)
MD5: fea718dcd61e01ff3daacc3c7f6ab3fb
SHA1: edb079edc716e9be1833abb0b2b13b4db8e27db9
SHA256: 30d37f1ad9ed15bf182fa89b3ecf889c6241d51864bbd1454ab61e19d6d1d614

Certificate information

Issuer: GlobalSign nv-sa · GlobalSign GCC R3 OV TLS CA 2024
Subject: *.oss-cn-shenzhen.aliyuncs.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: AF:BC:3F:F4:D3:10:E0:92:05:5D:16:71:57:01:1A:82:BE:AE:ED:16
Valid from: Tue, 06 Jan 2026 03:11:13 GMT
Valid until: Sun, 07 Feb 2027 03:11:12 GMT

Technology fingerprints

Alibaba Cloud Object Storage Service (IaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Nextron YARA rules Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type	medium	malware

HTTP headers

Request headers

GET /images/ojUC9OoyiM6OQJ8u.js HTTP/1.1
Host: ld1y12.oss-cn-shenzhen.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://f03oj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=4, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: AliyunOSS
Date: Sat, 12 Sep 2026 22:42:56 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-oss-request-id: 6AA5D5702A75193931954327
Last-Modified: Sun, 28 Dec 2025 22:47:54 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7122507676621922922
x-oss-storage-class: Standard
x-oss-ec: 0048-00000113
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: 0sYtkmxldvH2hzmeIX+9eg==
x-oss-server-time: 63
Content-Encoding: gzip

22:42:55.389 GET 200 script 48.1 KB 433 ms 1 alerts

22:42:55.391 GET 200 img 1.6 KB 1308 ms —

22:42:55.392 GET 200 img 99 B 1279 ms —

22:42:55.393 GET 200 img 71.1 KB 1325 ms —

22:42:56.153 POST 200 xhr 824 B 648 ms —

22:42:56.214 GET No response script 0 B 0 ms —

22:43:05.253 GET 200 document 1.1 KB 2021 ms 1 alerts

22:43:05.265 POST 200 beacon 0 B 223 ms —

22:43:07.721 GET No response document 0 B 0 ms —

http://f7u0s.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #11

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://f7u0s.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #11

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://f7u0s.com/

Domain graph

Network requests