Report - 933883com-kqtab.933883a.buzz/demo/

Report Overview

Visited public
2024-12-23 15:23:25
Tags
URL
933883com-kqtab.933883a.buzz/demo/
Finishing URL
933883com-kqtab.933883a.buzz/demo/
IP / ASN
38.22.89.164
#979 NETLAB-SDN
Title
导航

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary


933883com-kqtab.933883a.buzz	unknown	2024-10-26	2024-12-23	2024-12-23	2.4 kB	17 kB	38.22.89.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-23 15:23:01	medium	Client IP	38.22.89.164	ET INFO HTTP Request to a *.buzz domain
2024-12-23 15:23:01	medium	Client IP	38.22.89.164	ET INFO HTTP Request to a *.buzz domain
2024-12-23 15:23:02	medium	Client IP	38.22.89.164	ET INFO HTTP Request to a *.buzz domain
2024-12-23 15:23:02	medium	Client IP	38.22.89.164	ET INFO HTTP Request to a *.buzz domain
2024-12-23 15:23:02	medium	Client IP	38.22.89.164	ET INFO HTTP Request to a *.buzz domain
2024-12-23 15:23:02	medium	Client IP	38.22.89.164	ET INFO HTTP Request to a *.buzz domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (13)

	URL	From	Size	First Seen	Last Seen
	933883com-kqtab.933883a.buzz/demo/zy/zy.js	ScriptElement	969 B	2024-12-17	2025-03-17
Pretty URL 933883com-kqtab.933883a.buzz/demo/zy/zy.js IP 38.22.89.164 ASN #174 COGENT-174 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-17 06:35 Last Seen2025-03-17 23:10 Times Seen8751 Hash cc9876eb538d74e73ca3f7fd516f6a57 5ab5d54f8528dba934c72c0a188b68f6c631888a 326a0a309fe5b90fe62f8f8adc5b9a25e868a7baf33a36dc09ff5a719b372e63 Loading...

	933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117	ScriptElement	0 B	0001-01-01	2025-03-18
Pretty URL 933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117 IP 38.22.89.164 ASN #174 COGENT-174 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-03-18 03:12 Times Seen4148770 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117	ScriptElement	0 B	0001-01-01	2025-03-18
Pretty URL 933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117 IP 38.22.89.164 ASN #174 COGENT-174 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-03-18 03:12 Times Seen4148770 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117	ScriptElement	0 B	0001-01-01	2025-03-18
Pretty URL 933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117 IP 38.22.89.164 ASN #174 COGENT-174 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-03-18 03:12 Times Seen4148770 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117	ScriptElement	0 B	0001-01-01	2025-03-18
Pretty URL 933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117 IP 38.22.89.164 ASN #174 COGENT-174 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-03-18 03:12 Times Seen4148770 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117	ScriptElement	0 B	0001-01-01	2025-03-18
Pretty URL 933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117 IP 38.22.89.164 ASN #174 COGENT-174 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-03-18 03:12 Times Seen4148770 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117	ScriptElement	0 B	0001-01-01	2025-03-18
Pretty URL 933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117 IP 38.22.89.164 ASN #174 COGENT-174 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-03-18 03:12 Times Seen4148770 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 7d462f7480676d2a149569e9db13a53c	73 B	2023-05-10 13:00	2025-03-17 23:10
Pretty Observations First Seen2023-05-10 13:00 Last Seen2025-03-17 23:10 Times Seen25129 Hash 7d462f7480676d2a149569e9db13a53c d434c83449ccfdcd5bf0e0a40a7968bd52593598 9110ec446c6b807e9f71f741b62558e2fb8e0c49d8d4e09d1ebe92c006040b6e Loading...

		Size	First Seen	Last Seen
	#1 Write - d923d625a6069ca47e88b353d65317c5	150 B	2023-03-10 10:18	2025-03-17 23:10
Pretty Observations First Seen2023-03-10 10:18 Last Seen2025-03-17 23:10 Times Seen10100 Hash d923d625a6069ca47e88b353d65317c5 b8fe40a5f05f41b31610abf10083f502f5c7c5a3 54879948a8244eaefbd28a09c10228feb96b8016f4fbe15a81b21e66bc4297f9 Loading...

	#2 Write - 0a3a0b592b9c285e050805307cee87c2	6 B	2023-03-07 01:02	2025-03-18 03:05
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-03-18 03:05 Times Seen17507 Hash 0a3a0b592b9c285e050805307cee87c2 125a168e24b2bd38aadb84cbb5f87f316b073c41 aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23 Loading...

	#3 Write - be90ea76e5371edfaf8c74f408fafaf1	155 B	2024-08-19 20:00	2025-03-17 23:10
Pretty Observations First Seen2024-08-19 20:00 Last Seen2025-03-17 23:10 Times Seen8682 Hash be90ea76e5371edfaf8c74f408fafaf1 d0681b90c03adc56b41afc0d00acc16d701b0192 b7ef0b887f89b351b76bff6a1907ddfd031645b512fb2491b3f4a7faed96c126 Loading...

	#4 Write - aa992f2a66c99e843e0bd39ecf46016e	123 B	2024-12-23 15:23	2024-12-23 15:23
Pretty Observations First Seen2024-12-23 15:23 Last Seen2024-12-23 15:23 Times Seen1 Hash aa992f2a66c99e843e0bd39ecf46016e 2a40b4e2cba905b3183d95936e94961d9c02a6dc cebe98ea1914a4d66d5c06072d56f08358641adb4a7bfeb41ecc0b18c1aab9be Loading...

	#5 Write - 7bbb9a425b192a3a671909a2294e819e	26 B	2023-03-07 01:19	2025-03-17 23:10
Pretty Observations First Seen2023-03-07 01:19 Last Seen2025-03-17 23:10 Times Seen10250 Hash 7bbb9a425b192a3a671909a2294e819e caaa351a98fa028a2358c203e76ee929e3483c10 c848e1cc5599d00de1273069d5fd1610dd47a137da896e219ffe1283bb415b90 Loading...

HTTP Transactions (6)

URL IP Response Size

933883com-kqtab.933883a.buzz/demo/

38.22.89.164

200 OK

3.7 kB

URL User Request GET HTTP/1.1
933883com-kqtab.933883a.buzz/demo/
IP
38.22.89.164:80
ASN
#174 COGENT-174

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
3.7 kB (3722 bytes)
Hash
387ef06b4d8343fbe4008051093a171a
4f18a92d13565f2a04b7dd7eec898087fcaba93e
0609fd6d8f7a7dc76ff469bb4c834fb66c40f4a3bc31aee7c2d9da5aefdd7905

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET /demo/ HTTP/1.1
Host: 933883com-kqtab.933883a.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Dec 2024 15:23:01 GMT
Content-Type: text/html
Last-Modified: Sat, 26 Oct 2024 16:13:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"671d1513-969b"
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

933883com-kqtab.933883a.buzz/demo/css/style.css

38.22.89.164

200 OK

6.2 kB

URL GET HTTP/1.1
933883com-kqtab.933883a.buzz/demo/css/style.css
IP
38.22.89.164:80
ASN
#174 COGENT-174

Requested by
http://933883com-kqtab.933883a.buzz/demo/

File type
Unicode text, UTF-8 text, with very long lines (28702), with no line terminators
Size
6.2 kB (6229 bytes)
Hash
9d3406698b2981342c19f13f801b0eb5
15430941408813f1f7f09f04c3ed7bac4083325f
ea3e737cc586886366522cd809da667a4c9a2bf3b493da4afe9b955bc5f4cde4

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET /demo/css/style.css HTTP/1.1
Host: 933883com-kqtab.933883a.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://933883com-kqtab.933883a.buzz/demo/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Dec 2024 15:23:01 GMT
Content-Type: text/css
Last-Modified: Sat, 26 Oct 2024 16:13:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"671d1514-7020"
Expires: Tue, 24 Dec 2024 03:23:01 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

933883com-kqtab.933883a.buzz/demo/zy/zy.js

38.22.89.164

200 OK

969 B

URL GET HTTP/1.1
933883com-kqtab.933883a.buzz/demo/zy/zy.js
IP
38.22.89.164:80
ASN
#174 COGENT-174

Requested by
http://933883com-kqtab.933883a.buzz/demo/

File type
HTML document, Unicode text, UTF-8 text
Size
969 B (969 bytes)
Hash
cc9876eb538d74e73ca3f7fd516f6a57
5ab5d54f8528dba934c72c0a188b68f6c631888a
326a0a309fe5b90fe62f8f8adc5b9a25e868a7baf33a36dc09ff5a719b372e63

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET /demo/zy/zy.js HTTP/1.1
Host: 933883com-kqtab.933883a.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://933883com-kqtab.933883a.buzz/demo/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Dec 2024 15:23:01 GMT
Content-Type: application/javascript
Content-Length: 969
Last-Modified: Mon, 23 Dec 2024 15:00:15 GMT
Connection: keep-alive
ETag: "67697aff-3c9"
Expires: Tue, 24 Dec 2024 03:23:01 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117

38.22.89.164

200 OK

1.6 kB

URL GET HTTP/1.1
933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117
IP
38.22.89.164:80
ASN
#174 COGENT-174

Requested by
http://933883com-kqtab.933883a.buzz/demo/

File type
HTML document, Unicode text, UTF-8 text
Size
1.6 kB (1600 bytes)
Hash
c4dbe0d05071a1417be7480f9f5dd614
13cb6a4d5e0b0b2c28f0986422f2a9fd37abf4db
bac00474551c860b6f7be8120909aef6482c73826f0f19096f03e11f27f23222

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET /demo/zy/88.html?t=1734967382117 HTTP/1.1
Host: 933883com-kqtab.933883a.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://933883com-kqtab.933883a.buzz/demo/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Dec 2024 15:23:02 GMT
Content-Type: text/html
Last-Modified: Sat, 26 Oct 2024 16:13:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"671d1523-132a"
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

933883com-kqtab.933883a.buzz/favicon.ico

38.22.89.164

404 Not Found

138 B

URL GET HTTP/1.1
933883com-kqtab.933883a.buzz/favicon.ico
IP
38.22.89.164:80
ASN
#174 COGENT-174

Requested by
http://933883com-kqtab.933883a.buzz/demo/

File type
HTML document, ASCII text
Size
138 B (138 bytes)
Hash
7389d931c86b3d7bb6b8af46d8c4172b
8d2a4760aa0b47984d11cd1a66448719177fb791
301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 933883com-kqtab.933883a.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://933883com-kqtab.933883a.buzz/demo/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 23 Dec 2024 15:23:02 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
ETag: "671d123f-8a"

933883com-kqtab.933883a.buzz/demo/zy/list.css

38.22.89.164

200 OK

2.2 kB

URL GET HTTP/1.1
933883com-kqtab.933883a.buzz/demo/zy/list.css
IP
38.22.89.164:80
ASN
#174 COGENT-174

Requested by
http://933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117

File type
Unicode text, UTF-8 text, with very long lines (938)
Size
2.2 kB (2244 bytes)
Hash
9f28de2cd20d8d89ec9d5f5f5cccb586
b8bfd64a20c7b921464243d5aca35577960948c8
1029ac936610e971496fb2eeb441f71fc44260f2246143c6c47f1927af1c4779

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET /demo/zy/list.css HTTP/1.1
Host: 933883com-kqtab.933883a.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://933883com-kqtab.933883a.buzz/demo/zy/88.html?t=1734967382117
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Dec 2024 15:23:02 GMT
Content-Type: text/css
Last-Modified: Sat, 26 Oct 2024 16:13:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"671d1514-1090"
Expires: Tue, 24 Dec 2024 03:23:02 GMT
Cache-Control: max-age=43200
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (6)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash