IP
ASN #4812 China Telecom Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 72fa0fca20c82853e6dbbc1f13c78100
4e9b01e3ad0b56c9409bb02e5700430792fecacd
4555de589ff9b307e20c708d6f112bc47bb377df29ff0a5914f8fb0932926887
GET / HTTP/1.1
Host: 3g.7723.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: Tengine
Date: Mon, 25 Sep 2023 08:08:13 GMT
Content-Type: text/html
Content-Length: 262
Connection: keep-alive
Location: https://3g.7723.cn/
Via: vcache9.cn6012[,0]
Timing-Allow-Origin: *
EagleId: 3daa501d16956292933378015e
IP
ASN #4812 China Telecom Group
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash e60d293b384590f1e559e19dc997b831
85369e26d859be62dbe6132766a3aaeb91ad7dcb
e113cc2f5536cf539d69051ecfdb23ce7493e7d4946512aefb483622be16760b
GET / HTTP/1.1
Host: 3g.7723.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/html; charset=utf-8
content-length: 7648
date: Mon, 25 Sep 2023 08:00:51 GMT
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
ali-swift-global-savetime: 1695628851
via: cache16.l2cn1807[0,0,200-0,H], cache43.l2cn1807[1,0], vcache8.cn6012[0,0,200-0,H], vcache6.cn6012[1,0]
age: 443
x-cache: HIT TCP_MEM_HIT dirn:11:43561938
x-swift-savetime: Mon, 25 Sep 2023 08:03:17 GMT
x-swift-cachetime: 3454
timing-allow-origin: *
eagleid: 3daa501a16956292944522810e
X-Firefox-Spdy: h2
apk12-auth.bazhang.com/202309261608/101f41d9f604b06d7b4ca5c54ff49abe/bigfiles/apk/116/20210518/649259e7f9e0d59c3876f0c8c3d806631621325540.apk
200 OK 41 MB URL User Request GET HTTP/2 apk12-auth.bazhang.com/202309261608/101f41d9f604b06d7b4ca5c54ff49abe/bigfiles/apk/116/20210518/649259e7f9e0d59c3876f0c8c3d806631621325540.apk
IP
Certificate IssuerDigiCert Inc
Subjectapk12-auth.bazhang.com
Fingerprint4C:BB:DB:B2:0D:21:4A:61:4B:A5:66:7E:66:6C:B7:F9:EC:24:CE:46
ValidityWed, 11 Jan 2023 00:00:00 GMT - Wed, 10 Jan 2024 23:59:59 GMT
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 41 MB (41413167 bytes)
Hash 746ed0085c9df3bbe5e7525aa7d2c157
38e59b3a8f8f47c50c5aad6ae864d6ebfd91d083
24f8e28b496750ebccc58d46657d9d17e2ca3d6c532945505b962098e9fd608e
Analyzer Verdict Alert VirusTotal suspicious
GET /202309261608/101f41d9f604b06d7b4ca5c54ff49abe/bigfiles/apk/116/20210518/649259e7f9e0d59c3876f0c8c3d806631621325540.apk HTTP/1.1
Host: apk12-auth.bazhang.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Byte-nginx
content-type: application/vnd.android.package-archive
content-length: 41413167
accept-ranges: bytes
age: 16752319
cache-control: max-age=31536000
etag: "746ed0085c9df3bbe5e7525aa7d2c157"
last-modified: Tue, 18 May 2021 08:13:50 GMT
x-amz-meta-md5: 746ed0085c9df3bbe5e7525aa7d2c157
x-amz-meta-s2-size: 41413167
x-amz-meta-sha1: 38e59b3a8f8f47c50c5aad6ae864d6ebfd91d083
x-amz-request-id: 56ba476c-2209-2520-0055-e8611f1b287d
x-amz-s2-requester: GRPS000000ANONYMOUSE
x-bdcdn-cache-status: TCP_HIT
x-request-id: 304a69f273cdcfbc08f09d467d359214
x-request-ip: 91.90.42.154
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
x-ser: BC161_dx-lt-yd-jiangsu-zhenjiang-3-cache-2, BC20_dx-zhejiang-quzhou-7-cache-1
x-tt-trace-tag: id=5
date: Mon, 25 Sep 2023 08:08:13 GMT
via: cache10.hbczct03
X-Firefox-Spdy: h2
3g.7723.cn/apps/download/202309160951/aeda77d49e96124aa444b10a089d0e73/83260.apk/
302 Found 41 MB URL User Request GET HTTP/2 3g.7723.cn/apps/download/202309160951/aeda77d49e96124aa444b10a089d0e73/83260.apk/
IP
ASN #4812 China Telecom Group
Certificate IssuerDigiCert, Inc.
Subject*.7723.cn
Fingerprint66:8A:43:D6:1B:75:DE:65:FE:E3:4A:FF:60:DD:A9:D8:D6:03:C2:9C
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT
Size 41 MB (41413167 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /apps/download/202309160951/aeda77d49e96124aa444b10a089d0e73/83260.apk/ HTTP/1.1
Host: 3g.7723.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: Tengine
content-type: text/html; charset=utf-8
location: https://apk12-auth.bazhang.com/202309261608/101f41d9f604b06d7b4ca5c54ff49abe/bigfiles/apk/116/20210518/649259e7f9e0d59c3876f0c8c3d806631621325540.apk
date: Mon, 25 Sep 2023 08:08:12 GMT
set-cookie: HWWAFSESID=c35ae73656abf2d050; path=/
HWWAFSESTIME=1695629292079; path=/
cache-control: no-cache,must-revalidate
ali-swift-global-savetime: 1695629292
via: cache24.l2cn1807[231,231,302-0,M], cache4.l2cn1807[233,0], vcache4.cn6012[246,246,302-0,M], vcache3.cn6012[248,0]
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Mon, 25 Sep 2023 08:08:12 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 3daa501716956292920443844e
X-Firefox-Spdy: h2
61.170.80.248