Report - sxbjky6enx.3355799com-dh.top/

Report Overview

Visited public
2025-04-17 18:20:15
Tags
URL
sxbjky6enx.3355799com-dh.top/
Finishing URL
4ddytpjb6j.3355799com-dh.top/demo/
IP / ASN
154.40.48.249
#979 NETLAB-SDN
Title
热文资讯,致力打造,火热全网！

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sxbjky6enx.3355799com-dh.top	unknown	2024-12-11	2025-04-17	2025-04-17	497 B	23 kB	154.40.48.249
4ddytpjb6j.3355799com-dh.top	unknown	2024-12-11	2025-04-17	2025-04-17	3.4 kB	64 kB	154.40.48.249

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-17 18:19:56	medium	Client IP	154.40.48.249	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-17	medium	3355799com-dh.top	Sinkholed
2025-04-17	medium	3355799com-dh.top	Sinkholed
2025-04-17	medium	3355799com-dh.top	Sinkholed
2025-04-17	medium	3355799com-dh.top	Sinkholed
2025-04-17	medium	3355799com-dh.top	Sinkholed
2025-04-17	medium	3355799com-dh.top	Sinkholed
2025-04-17	medium	3355799com-dh.top	Sinkholed
2025-04-17	medium	3355799com-dh.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (14)

	URL	From	Size	First Seen	Last Seen
	4ddytpjb6j.3355799com-dh.top/demo/zz/zy.js	ScriptElement	1.1 kB	2024-12-12	2025-04-17
Pretty URL 4ddytpjb6j.3355799com-dh.top/demo/zz/zy.js IP 154.40.48.249 ASN #979 NETLAB-SDN Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-12 23:45 Last Seen2025-04-17 23:51 Times Seen10545 Hash e93a26fc5dd543d3f99d89617ddf471e 5e1b536ae9206ded03a419b1f2758acd6d3a8214 72c9ee4df98b391cb0134dfc94b51a002b13a3371494c31d82bbcc1625eeff8f Loading...

	4ddytpjb6j.3355799com-dh.top/demo/tz2.php	Eval	73 B	2023-05-10	2025-04-19
Pretty URL 4ddytpjb6j.3355799com-dh.top/demo/tz2.php IP 154.40.48.249 ASN #979 NETLAB-SDN Introduced by eval Embedded in HTML false Observations First Seen2023-05-10 13:00 Last Seen2025-04-19 06:44 Times Seen56059 Hash 7d462f7480676d2a149569e9db13a53c d434c83449ccfdcd5bf0e0a40a7968bd52593598 9110ec446c6b807e9f71f741b62558e2fb8e0c49d8d4e09d1ebe92c006040b6e Loading...

		Size	First Seen	Last Seen
	#1 Write - 0a3a0b592b9c285e050805307cee87c2	6 B	2023-03-07 01:02	2025-04-19 06:44
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-04-19 06:44 Times Seen46188 Hash 0a3a0b592b9c285e050805307cee87c2 125a168e24b2bd38aadb84cbb5f87f316b073c41 aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23 Loading...

	#2 Write - 308065b5078a49f986fc3c9f9b66e5d3	7 B	2023-03-07 12:56	2025-04-17 23:51
Pretty Observations First Seen2023-03-07 12:56 Last Seen2025-04-17 23:51 Times Seen21641 Hash 308065b5078a49f986fc3c9f9b66e5d3 be1628c3c7d88ddfb243f216545e780b98cc4386 fdfe0993e6e9e9917554bb95b1137af5870146fd38da5f13bea1b530ac05b296 Loading...

	#3 Write - 166248a6129a1e4370d20adc2d4c23f3	6 B	2023-03-07 12:56	2025-04-17 23:51
Pretty Observations First Seen2023-03-07 12:56 Last Seen2025-04-17 23:51 Times Seen21428 Hash 166248a6129a1e4370d20adc2d4c23f3 0fe0bb445f51fad57f3fc4115d7c66cf18545107 b7d082ee12e91b756ea22e8513b8594eebcf5d39fab813da3cb55794dc888ad7 Loading...

	#4 Write - bc1d3a136e6f54eff73adaf5669b9be3	6 B	2023-03-07 01:02	2025-04-17 23:51
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-04-17 23:51 Times Seen16559 Hash bc1d3a136e6f54eff73adaf5669b9be3 1a0f53998a4dd4c3f5e9a6fbadc64d21046d1295 9aabfd165cfb96fc5e170862e4fd9c90cfa2a5705af401617c836f152398fce1 Loading...

	#5 Write - ff3ca8e44ba47f1016fd362db9486bde	129 B	2023-03-10 10:18	2025-04-17 23:51
Pretty Observations First Seen2023-03-10 10:18 Last Seen2025-04-17 23:51 Times Seen15393 Hash ff3ca8e44ba47f1016fd362db9486bde bcebecfff3ce470efacdfd1edc1884435dfa5e84 d7481a0669ae9bde1f31170054562f7aa4390f00b8b59a100ccaa3c1525889ec Loading...

	#6 Write - 0efa13d18e21e1c280569064dccd2d9f	7 B	2023-03-07 01:02	2025-04-17 23:51
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-04-17 23:51 Times Seen16601 Hash 0efa13d18e21e1c280569064dccd2d9f 0656901371cc259791bd253dc8835dc44b0575fd 69eb3111ab6500088bcc0f5cb043f452bd7b7801bdcd7b0e478c2fc454fdba0a Loading...

	#7 Write - 9567c2967d7c5c5494d00644691d2fa4	94 B	2024-12-12 23:37	2025-04-17 23:51
Pretty Observations First Seen2024-12-12 23:37 Last Seen2025-04-17 23:51 Times Seen10609 Hash 9567c2967d7c5c5494d00644691d2fa4 6ddfa5537063e872c6fddd5ffb3e47da3cce9968 370c8d05a3935df950aa4ced2c9c79af30159b12a21cb0f71e2e98059694f6b2 Loading...

	#8 Write - 7bbb9a425b192a3a671909a2294e819e	26 B	2023-03-07 01:19	2025-04-19 06:44
Pretty Observations First Seen2023-03-07 01:19 Last Seen2025-04-19 06:44 Times Seen38393 Hash 7bbb9a425b192a3a671909a2294e819e caaa351a98fa028a2358c203e76ee929e3483c10 c848e1cc5599d00de1273069d5fd1610dd47a137da896e219ffe1283bb415b90 Loading...

	#9 Write - d923d625a6069ca47e88b353d65317c5	150 B	2023-03-10 10:18	2025-04-19 06:44
Pretty Observations First Seen2023-03-10 10:18 Last Seen2025-04-19 06:44 Times Seen38130 Hash d923d625a6069ca47e88b353d65317c5 b8fe40a5f05f41b31610abf10083f502f5c7c5a3 54879948a8244eaefbd28a09c10228feb96b8016f4fbe15a81b21e66bc4297f9 Loading...

	#10 Write - a0bf95a38cb701564c34134431943259	7 B	2023-03-07 12:56	2025-04-17 23:51
Pretty Observations First Seen2023-03-07 12:56 Last Seen2025-04-17 23:51 Times Seen16610 Hash a0bf95a38cb701564c34134431943259 0187395c6d7697a45f0464905d967396748b2194 124207d84bdc8a107cbcc04212a091e85157e09d7bf208f7afb4839498fef083 Loading...

	#11 Write - babd0daf38a8ba8a6c33c4d1d354eb56	6 B	2023-03-07 12:56	2025-04-17 23:51
Pretty Observations First Seen2023-03-07 12:56 Last Seen2025-04-17 23:51 Times Seen16561 Hash babd0daf38a8ba8a6c33c4d1d354eb56 c64904f4f0bdb995912fdd1667d538cff4dee6e2 ce519cccc38cf22bd82579910ddfdcb00f5726373dae5af87048b157303e8f27 Loading...

	#12 Write - 650a8a865e53b4874d534b737b4f1adb	68 B	2023-03-07 12:24	2025-04-17 23:51
Pretty Observations First Seen2023-03-07 12:24 Last Seen2025-04-17 23:51 Times Seen15355 Hash 650a8a865e53b4874d534b737b4f1adb debf3d84db7fee67f540f8bf4c1efc606c456814 becf4ff9b69150621d1550d7c45b59372f47cd07bd3bd4274bd98b2cab8606e1 Loading...

HTTP Transactions (8)

URL IP Response Size

sxbjky6enx.3355799com-dh.top/

154.40.48.249

302 Found

23 kB

URL User Request GET
sxbjky6enx.3355799com-dh.top/
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Certificate
IssuerLet's Encrypt
Subjectwww.3355799.com
Fingerprint4E:6A:0A:7A:BD:E5:B8:26:40:3F:15:A8:C2:74:12:6F:03:0F:8F:16
ValidityTue, 11 Mar 2025 04:04:09 GMT - Mon, 09 Jun 2025 04:04:08 GMT

File type

Size
23 kB (22944 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET / HTTP/1.1
Host: sxbjky6enx.3355799com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Thu, 17 Apr 2025 18:19:50 GMT
content-type: text/html; charset=UTF-8
location: https://4DDYTPJB6J.3355799com-dh.top/demo/
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

4ddytpjb6j.3355799com-dh.top/demo/

154.40.48.249

200 OK

23 kB

URL User Request GET
4ddytpjb6j.3355799com-dh.top/demo/
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Certificate
IssuerLet's Encrypt
Subjectwww.3355799.com
Fingerprint4E:6A:0A:7A:BD:E5:B8:26:40:3F:15:A8:C2:74:12:6F:03:0F:8F:16
ValidityTue, 11 Mar 2025 04:04:09 GMT - Mon, 09 Jun 2025 04:04:08 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
23 kB (22944 bytes)
Hash
c74a98b299ef7734f3da18c288be6d0a
da7c472dd59be484cec314f89eaf40729b032cd7
f158a5294613aa5ec87d747dbf0e699eaffffdc7c770767f734fc6bc88661161

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /demo/ HTTP/1.1
Host: 4ddytpjb6j.3355799com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 17 Apr 2025 18:19:52 GMT
content-type: text/html
last-modified: Tue, 15 Oct 2024 11:02:57 GMT
vary: Accept-Encoding
etag: W/"670e4be1-59a0"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

4ddytpjb6j.3355799com-dh.top/demo/zz/zy.js

154.40.48.249

200 OK

1.1 kB

URL GET
4ddytpjb6j.3355799com-dh.top/demo/zz/zy.js
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://4ddytpjb6j.3355799com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.3355799.com
Fingerprint4E:6A:0A:7A:BD:E5:B8:26:40:3F:15:A8:C2:74:12:6F:03:0F:8F:16
ValidityTue, 11 Mar 2025 04:04:09 GMT - Mon, 09 Jun 2025 04:04:08 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
1.1 kB (1145 bytes)
Hash
e93a26fc5dd543d3f99d89617ddf471e
5e1b536ae9206ded03a419b1f2758acd6d3a8214
72c9ee4df98b391cb0134dfc94b51a002b13a3371494c31d82bbcc1625eeff8f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /demo/zz/zy.js HTTP/1.1
Host: 4ddytpjb6j.3355799com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4ddytpjb6j.3355799com-dh.top/demo/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 17 Apr 2025 18:19:52 GMT
content-type: application/javascript
last-modified: Tue, 15 Oct 2024 11:07:18 GMT
vary: Accept-Encoding
etag: W/"670e4ce6-479"
expires: Fri, 18 Apr 2025 06:19:52 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

4ddytpjb6j.3355799com-dh.top/demo/zz/style.css

154.40.48.249

200 OK

30 kB

URL GET
4ddytpjb6j.3355799com-dh.top/demo/zz/style.css
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://4ddytpjb6j.3355799com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.3355799.com
Fingerprint4E:6A:0A:7A:BD:E5:B8:26:40:3F:15:A8:C2:74:12:6F:03:0F:8F:16
ValidityTue, 11 Mar 2025 04:04:09 GMT - Mon, 09 Jun 2025 04:04:08 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
30 kB (30240 bytes)
Hash
5581f62c6abce9111cae182b183876b0
c1725c079dff681b709c78aadd64e47e3fa070f8
9c0219446014bd754f79fa89779ef3c55231802a2c007f19bb2e5a65f4a8b843

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /demo/zz/style.css HTTP/1.1
Host: 4ddytpjb6j.3355799com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4ddytpjb6j.3355799com-dh.top/demo/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 17 Apr 2025 18:19:52 GMT
content-type: text/css
last-modified: Fri, 03 Nov 2023 06:44:03 GMT
vary: Accept-Encoding
etag: W/"654496b3-7620"
expires: Fri, 18 Apr 2025 06:19:52 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

4ddytpjb6j.3355799com-dh.top/demo/tz2.php

154.40.48.249

200 OK

7.7 kB

URL GET
4ddytpjb6j.3355799com-dh.top/demo/tz2.php
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://4ddytpjb6j.3355799com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.3355799.com
Fingerprint4E:6A:0A:7A:BD:E5:B8:26:40:3F:15:A8:C2:74:12:6F:03:0F:8F:16
ValidityTue, 11 Mar 2025 04:04:09 GMT - Mon, 09 Jun 2025 04:04:08 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (343)
Size
7.7 kB (7652 bytes)
Hash
4f153bd429719bef8eabf52afffa4e6b
34d5366ec43513561b37e0e35134073084f140c6
31b55b33ebec5ac0455811db3f1ee5237c93bce8128655fe91236c22ce6a85c8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /demo/tz2.php HTTP/1.1
Host: 4ddytpjb6j.3355799com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4ddytpjb6j.3355799com-dh.top/demo/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 17 Apr 2025 18:19:53 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

4ddytpjb6j.3355799com-dh.top/images/search.jpg

154.40.48.249

404 Not Found

146 B

URL GET
4ddytpjb6j.3355799com-dh.top/images/search.jpg
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://4ddytpjb6j.3355799com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.3355799.com
Fingerprint4E:6A:0A:7A:BD:E5:B8:26:40:3F:15:A8:C2:74:12:6F:03:0F:8F:16
ValidityTue, 11 Mar 2025 04:04:09 GMT - Mon, 09 Jun 2025 04:04:08 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/search.jpg HTTP/1.1
Host: 4ddytpjb6j.3355799com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4ddytpjb6j.3355799com-dh.top/demo/zz/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Thu, 17 Apr 2025 18:19:53 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

4ddytpjb6j.3355799com-dh.top/favicon.ico

154.40.48.249

404 Not Found

146 B

URL GET
4ddytpjb6j.3355799com-dh.top/favicon.ico
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://4ddytpjb6j.3355799com-dh.top/demo/
Certificate
IssuerLet's Encrypt
Subjectwww.3355799.com
Fingerprint4E:6A:0A:7A:BD:E5:B8:26:40:3F:15:A8:C2:74:12:6F:03:0F:8F:16
ValidityTue, 11 Mar 2025 04:04:09 GMT - Mon, 09 Jun 2025 04:04:08 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 4ddytpjb6j.3355799com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4ddytpjb6j.3355799com-dh.top/demo/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Thu, 17 Apr 2025 18:19:53 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

4ddytpjb6j.3355799com-dh.top/style.css

154.40.48.249

404 Not Found

146 B

URL GET
4ddytpjb6j.3355799com-dh.top/style.css
IP
154.40.48.249:443
ASN
#979 NETLAB-SDN

Requested by
https://4ddytpjb6j.3355799com-dh.top/demo/tz2.php
Certificate
IssuerLet's Encrypt
Subjectwww.3355799.com
Fingerprint4E:6A:0A:7A:BD:E5:B8:26:40:3F:15:A8:C2:74:12:6F:03:0F:8F:16
ValidityTue, 11 Mar 2025 04:04:09 GMT - Mon, 09 Jun 2025 04:04:08 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /style.css HTTP/1.1
Host: 4ddytpjb6j.3355799com-dh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://4ddytpjb6j.3355799com-dh.top/demo/tz2.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Thu, 17 Apr 2025 18:19:53 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET