分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
URL win7-sp1-x64-shaapp02-1 2022-05-24 15:02:53 2022-05-24 15:04:59 126 秒

魔盾分数

正常的

URL详细信息

URL
URL专业沙箱检测 -> http://666java.com

登录查看威胁特征

运行截图


访问主机纪录 (可点击查询WPING实时安全评级)

直接 IP 安全评级 地理位置
122.228.238.100 未知 中国
144.123.31.194 中国
220.181.33.11 中国
23.44.51.33 未知 美国
31.13.95.169 未知 爱尔兰
43.132.155.124 未知 日本
91.199.212.52 英国

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
666java.com 未知 A 43.132.155.124
at.alicdn.com CNAME at.alicdn.com.danuoyi.alicdn.com
A 144.123.31.194
A 144.123.31.193
cdn.jsdelivr.net A 31.13.95.169
aqyzmedia.yunaq.com A 59.63.226.17
A 122.228.238.100
static.anquan.org 未知 CNAME b4ec0679ed478db7.cdn.jiashule.com
crt.usertrust.com A 91.199.212.52
CNAME crt.comodoca.com
apps.identrust.com A 23.44.51.33
CNAME a1952.dscq.akamai.net
CNAME identrust.edgesuite.net
A 23.44.51.17
hm.baidu.com CNAME hm.e.shifen.com
A 220.181.33.11

摘要

登录查看详细行为信息

WHOIS 信息

Name: REDACTED FOR PRIVACY
Country: CN
State: None
City: REDACTED FOR PRIVACY
ZIP Code: REDACTED FOR PRIVACY
Address: REDACTED FOR PRIVACY

Orginization: REDACTED FOR PRIVACY
Domain Name(s):
    666JAVA.COM
    666java.com
Creation Date:
    2020-05-29 06:41:47
Updated Date:
    2022-03-07 14:21:24
    2021-11-29 11:35:31
Expiration Date:
    2023-05-29 06:41:47
Email(s):
    abuse@dnspod.com

Registrar(s):
    DNSPod, Inc.
Name Server(s):
    F1G1NS1.DNSPOD.NET
    F1G1NS2.DNSPOD.NET
    f1g1ns1.dnspod.net
    f1g1ns2.dnspod.net
Referral URL(s):
    None
没有防病毒引擎扫描信息!

进程树


iexplore.exe, PID: 2444, 上一级进程 PID: 2172

访问主机纪录 (可点击查询WPING实时安全评级)

直接 IP 安全评级 地理位置
122.228.238.100 未知 中国
144.123.31.194 中国
220.181.33.11 中国
23.44.51.33 未知 美国
31.13.95.169 未知 爱尔兰
43.132.155.124 未知 日本
91.199.212.52 英国

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49170 104.104.244.81 80
192.168.122.201 49174 122.228.238.100 aqyzmedia.yunaq.com 443
192.168.122.201 49175 122.228.238.100 aqyzmedia.yunaq.com 443
192.168.122.201 49176 122.228.238.100 aqyzmedia.yunaq.com 443
192.168.122.201 49168 144.123.31.194 at.alicdn.com 80
192.168.122.201 49184 220.181.33.11 hm.baidu.com 443
192.168.122.201 49180 23.44.51.33 apps.identrust.com 80
192.168.122.201 49181 23.44.51.33 apps.identrust.com 80
192.168.122.201 49182 23.44.51.33 apps.identrust.com 80
192.168.122.201 49159 43.132.155.124 666java.com 80
192.168.122.201 49161 43.132.155.124 666java.com 80
192.168.122.201 49162 43.132.155.124 666java.com 80
192.168.122.201 49163 43.132.155.124 666java.com 80
192.168.122.201 49164 43.132.155.124 666java.com 80
192.168.122.201 49165 43.132.155.124 666java.com 80
192.168.122.201 49166 43.132.155.124 666java.com 80
192.168.122.201 49172 43.132.155.124 666java.com 443
192.168.122.201 49177 43.132.155.124 666java.com 443
192.168.122.201 49178 43.132.155.124 666java.com 443
192.168.122.201 49183 43.132.155.124 666java.com 443
192.168.122.201 49185 43.132.155.124 666java.com 443
192.168.122.201 49186 43.132.155.124 666java.com 80
192.168.122.201 49189 43.132.155.124 666java.com 443
192.168.122.201 49179 91.199.212.52 crt.usertrust.com 80

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 51304 192.168.122.1 53
192.168.122.201 53118 192.168.122.1 53
192.168.122.201 53759 192.168.122.1 53
192.168.122.201 53947 192.168.122.1 53
192.168.122.201 57526 192.168.122.1 53
192.168.122.201 59277 192.168.122.1 53
192.168.122.201 60155 192.168.122.1 53
192.168.122.201 61447 192.168.122.1 53
192.168.122.201 63246 192.168.122.1 53
192.168.122.201 63472 192.168.122.1 53
192.168.122.201 63902 192.168.122.1 53

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
666java.com 未知 A 43.132.155.124
at.alicdn.com CNAME at.alicdn.com.danuoyi.alicdn.com
A 144.123.31.194
A 144.123.31.193
cdn.jsdelivr.net A 31.13.95.169
aqyzmedia.yunaq.com A 59.63.226.17
A 122.228.238.100
static.anquan.org 未知 CNAME b4ec0679ed478db7.cdn.jiashule.com
crt.usertrust.com A 91.199.212.52
CNAME crt.comodoca.com
apps.identrust.com A 23.44.51.33
CNAME a1952.dscq.akamai.net
CNAME identrust.edgesuite.net
A 23.44.51.17
hm.baidu.com CNAME hm.e.shifen.com
A 220.181.33.11

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49170 104.104.244.81 80
192.168.122.201 49174 122.228.238.100 aqyzmedia.yunaq.com 443
192.168.122.201 49175 122.228.238.100 aqyzmedia.yunaq.com 443
192.168.122.201 49176 122.228.238.100 aqyzmedia.yunaq.com 443
192.168.122.201 49168 144.123.31.194 at.alicdn.com 80
192.168.122.201 49184 220.181.33.11 hm.baidu.com 443
192.168.122.201 49180 23.44.51.33 apps.identrust.com 80
192.168.122.201 49181 23.44.51.33 apps.identrust.com 80
192.168.122.201 49182 23.44.51.33 apps.identrust.com 80
192.168.122.201 49159 43.132.155.124 666java.com 80
192.168.122.201 49161 43.132.155.124 666java.com 80
192.168.122.201 49162 43.132.155.124 666java.com 80
192.168.122.201 49163 43.132.155.124 666java.com 80
192.168.122.201 49164 43.132.155.124 666java.com 80
192.168.122.201 49165 43.132.155.124 666java.com 80
192.168.122.201 49166 43.132.155.124 666java.com 80
192.168.122.201 49172 43.132.155.124 666java.com 443
192.168.122.201 49177 43.132.155.124 666java.com 443
192.168.122.201 49178 43.132.155.124 666java.com 443
192.168.122.201 49183 43.132.155.124 666java.com 443
192.168.122.201 49185 43.132.155.124 666java.com 443
192.168.122.201 49186 43.132.155.124 666java.com 80
192.168.122.201 49189 43.132.155.124 666java.com 443
192.168.122.201 49179 91.199.212.52 crt.usertrust.com 80

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 51304 192.168.122.1 53
192.168.122.201 53118 192.168.122.1 53
192.168.122.201 53759 192.168.122.1 53
192.168.122.201 53947 192.168.122.1 53
192.168.122.201 57526 192.168.122.1 53
192.168.122.201 59277 192.168.122.1 53
192.168.122.201 60155 192.168.122.1 53
192.168.122.201 61447 192.168.122.1 53
192.168.122.201 63246 192.168.122.1 53
192.168.122.201 63472 192.168.122.1 53
192.168.122.201 63902 192.168.122.1 53

HTTP 请求

URI HTTP数据
URL专业沙箱检测 -> http://666java.com/
GET / HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/css/external.css?ver=5.9
GET /wp-content/themes/ripro/assets/css/external.css?ver=5.9 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/css/app.css?ver=5.9
GET /wp-content/themes/ripro/assets/css/app.css?ver=5.9 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/diy.css?ver=5.4.2
GET /wp-content/themes/jizhi-chlid/diy.css?ver=5.4.2 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/js/html5shiv.js
GET /wp-content/themes/ripro/assets/js/html5shiv.js HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/css/diy.css?ver=5.9
GET /wp-content/themes/ripro/assets/css/diy.css?ver=5.9 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://at.alicdn.com/t/font_1208165_7qnah1qoq8w.js
GET /t/font_1208165_7qnah1qoq8w.js HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: at.alicdn.com
Connection: Keep-Alive

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/zhankr/inc/shortcodes/shortcodes.css?ver=5.4.2
GET /wp-content/themes/jizhi-chlid/zhankr/inc/shortcodes/shortcodes.css?ver=5.4.2 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/css/sweetalert2.min.css?ver=5.9
GET /wp-content/themes/ripro/assets/css/sweetalert2.min.css?ver=5.9 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/js/jquery-2.2.4.min.js?ver=2.2.4
GET /wp-content/themes/ripro/assets/js/jquery-2.2.4.min.js?ver=2.2.4 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/js/plugins/sweetalert2.min.js?ver=5.9
GET /wp-content/themes/ripro/assets/js/plugins/sweetalert2.min.js?ver=5.9 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/js/respond.min.js
GET /wp-content/themes/ripro/assets/js/respond.min.js HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://acroipm.adobe.com/11/rdr/CHS/win/nooem/none/message.zip
GET /11/rdr/CHS/win/nooem/none/message.zip HTTP/1.1
Accept: */*
If-Modified-Since: Mon, 08 Nov 2017 08:44:36 GMT
User-Agent: IPM
Host: acroipm.adobe.com
Connection: Keep-Alive
Cache-Control: no-cache

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/css/fonts/materialdesignicons-webfont.eot?
GET /wp-content/themes/ripro/assets/css/fonts/materialdesignicons-webfont.eot? HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/fonts/fontawesome-webfont.eot?
GET /wp-content/themes/ripro/assets/fonts/fontawesome-webfont.eot? HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/images/svg/rings.svg
GET /wp-content/themes/ripro/assets/images/svg/rings.svg HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/css/zhankr-jizhi.css?ver=5.4.2
GET /wp-content/themes/jizhi-chlid/css/zhankr-jizhi.css?ver=5.4.2 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/zhankr/inc/shortcodes/shortcodes.js?ver=2.0
GET /wp-content/themes/jizhi-chlid/zhankr/inc/shortcodes/shortcodes.js?ver=2.0 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/js/plugins.js?ver=5.9
GET /wp-content/themes/ripro/assets/js/plugins.js?ver=5.9 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/ripro/assets/js/app.js?ver=5.9
GET /wp-content/themes/ripro/assets/js/app.js?ver=5.9 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/css/zhankr-jizhi.js?ver=5.4.2
GET /wp-content/themes/jizhi-chlid/css/zhankr-jizhi.js?ver=5.4.2 HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/images/index_icons.png
GET /wp-content/themes/jizhi-chlid/images/index_icons.png HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/images/icon5.png
GET /wp-content/themes/jizhi-chlid/images/icon5.png HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/images/icon2.png
GET /wp-content/themes/jizhi-chlid/images/icon2.png HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/images/icon1.png
GET /wp-content/themes/jizhi-chlid/images/icon1.png HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/images/icon3.png
GET /wp-content/themes/jizhi-chlid/images/icon3.png HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://apps.identrust.com/roots/dstrootcax3.p7c
GET /roots/dstrootcax3.p7c HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: apps.identrust.com

URL专业沙箱检测 -> http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
GET /USERTrustRSAAddTrustCA.crt HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: crt.usertrust.com

URL专业沙箱检测 -> http://666java.com/wp-content/themes/jizhi-chlid/images/zhankr-vip.svg
GET /wp-content/themes/jizhi-chlid/images/zhankr-vip.svg HTTP/1.1
Accept: */*
Referer: http://666java.com/
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3

URL专业沙箱检测 -> http://666java.com/favicon.ico
GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: 666java.com
Connection: Keep-Alive
Cookie: PHPSESSID=ckgevrua4u1ohrvnvenbnavjj3; Hm_lvt_1f43835170b4149de053b197f1b2c6bf=1653375810; Hm_lpvt_1f43835170b4149de053b197f1b2c6bf=1653375810

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

Timestamp Source IP Source Port Destination IP Destination Port Version Issuer Subject Fingerprint
2022-05-24 15:03:46.152871+0800 192.168.122.201 49175 122.228.238.100 443 TLS 1.2 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust RSA CA 2018 C=CN, ST=四川省, L=成都市, O=成都知道创宇信息技术有限公司, CN=*.anquan.org 66:66:e5:f2:8b:14:22:55:e2:3d:55:13:a1:9b:70:fc:c2:71:95:c1
2022-05-24 15:03:45.983576+0800 192.168.122.201 49172 43.132.155.124 443 TLS 1.2 C=US, O=Let's Encrypt, CN=R3 CN=666java.com 40:9c:3e:27:6d:9b:17:59:12:6b:9d:63:94:0a:66:37:b8:4f:e6:cf
2022-05-24 15:03:46.090200+0800 192.168.122.201 49174 122.228.238.100 443 TLS 1.2 C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA CN=*.yunaq.com fe:76:09:58:ae:6f:58:42:a6:13:bf:ce:a2:39:da:94:a6:51:87:de
2022-05-24 15:03:46.154429+0800 192.168.122.201 49176 122.228.238.100 443 TLS 1.2 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust RSA CA 2018 C=CN, ST=四川省, L=成都市, O=成都知道创宇信息技术有限公司, CN=*.anquan.org 66:66:e5:f2:8b:14:22:55:e2:3d:55:13:a1:9b:70:fc:c2:71:95:c1
2022-05-24 15:03:48.958647+0800 192.168.122.201 49184 220.181.33.11 443 TLS 1.2 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2 C=CN, ST=beijing, L=beijing, OU=service operation department, O=Beijing Baidu Netcom Science Technology Co., Ltd, CN=baidu.com fb:4b:a4:66:e6:0f:38:bb:d2:9d:92:e7:fc:53:5e:31:c5:cd:ef:0c

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
抱歉! 没有任何文件投放。
HTML 总结报告
(需15-60分钟同步)
下载

Processing ( 37.292 seconds )

  • 21.329 NetworkAnalysis
  • 11.526 Suricata
  • 4.413 Static
  • 0.018 AnalysisInfo
  • 0.004 BehaviorAnalysis
  • 0.002 Memory

Signatures ( 0.0 seconds )

Reporting ( 0.0 seconds )

Task ID 691980
Mongo ID 628c83ecdc327b343126ffab
Cuckoo release 1.4-Maldun