server_name_session

Domain 'aabf03.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'aabf03' is 6 characters long with two vowels and 2 consonants, plus two digits. Word splitting yields 4 words: a, a, bf, 03. Average segment length settles at 1.5 characters. No strong language cues emerged from the frequency lists.

html/04/b4/04b49f47-a6c6-4f75-b9fa-17c280649eea.html.gz

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-EdsUoafQ';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

fb18d849d8255333974e53a4530a6f4f31db77eec04a5b9328f28919eb500ef3

61bb727b780db2c39a41a5249f840cf17d198d769dbc9576c5a24cf8e6ec09f2

3674c374cf6325743ec0d85b5e5454cda3e9f4ddb0e0cbde121e5aebc841f472

a97621b7ef17efb9d821857eac1c96aad998a4f00b551b1d4cff44f40fc0a622

viewport

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-rPv0E3th';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;

Gname.com Pte. Ltd.

AABF03.COM

Operations

Facebook, Inc.

THEFA-3

!function (e, n, t, o, c, s, a) { e.fbq || (c = e.fbq = function () { c.callMethod ? c.callMethod.apply(c, arguments) : c.queue.push(arguments) }, e._fbq || (e._fbq = c), c.push = c, c.loaded = !0, c.version = "2.0", c.queue = [], (s = n.createElement(t)).async = !0, s.src = "https://connect.facebook.net/en_US/fbevents.js", (a = n.getElementsByTagName(t)[0]).parentNode.insertBefore(s, a)) }(window, document, "script")


    // 创建 URLSearchParams 对象
    const urlParams = new URLSearchParams(window.location.search);
    let p1 = p2 = p0 = p4 = p5= p6 = '';
    let fbclid = 'null';
    let fbpid = 'null';
    let adjhref = "https://app.adjust.com/";
    // 下载链接
    let downurl = encodeURI("https://htzy02.top/apps/com.hokitime01.app.apk");
    let downloadApk  = "";
     // adjust 
    p0 = urlParams.get('p0');
    p1 = urlParams.get('p1');
    p2 = urlParams.get('p2');
    p3 = urlParams.get('p3');
    p4 = urlParams.get('p4');
    p5 = urlParams.get('p5');
    p6 = urlParams.get('p6');
    fbclid = urlParams.get('fbclid')||'null';
    fbpid = getFbpid();
   
    downloadApk = adjhref + buildUrl(p0,p1,p2,p3,p4,p5,p6);
    if(fbclid=='null'){
       downloadApk = downloadApk +"&fbclid=";
     }else{
        downloadApk = downloadApk +"&fbclid="+fbclid;
     }
     if(fbpid=='null'){
         downloadApk = downloadApk+"&fbpid=";
     }else{
          downloadApk = downloadApk+"&fbpid="+fbpid;
     }
     
     downloadApk = downloadApk +"&redirect="+downurl;
     //downloadApk=downurl;
    function buildUrl(a,b,c,d,e,f,g,type=1,fbp=''){
        let querystr
        querystr = a+"?"+"campaign="+b+"("+c+")"+"&adgroup="+d+"("+e+")"+"&creative="+f+"("+g+")";
       return querystr;
    }
    function getFbpid() {
      let Pid = document.cookie.match(/(^|;) ?_fbp=([^;]*)(;|$)/);
      if (Pid) {
        return Pid[2];
      } else {
        return 'null';
      }
    }




// 当文档加载完成后执行
document.addEventListener('DOMContentLoaded', function () {
// 获取所有具有 "my-button" 类的元素
var buttons = document.querySelectorAll('#Download_app');
// 为每个按钮添加点击事件监听器
buttons.forEach(function (button) {
    button.addEventListener('click', function () {
         var xhr = new XMLHttpRequest();
                   xhr.onreadystatechange = () => {
                    if (xhr.readyState == 4) {
                        if (xhr.status == 200) {
                            console.log(1111)
                        }
                        
                    }
                                   
                  }
                  xhr.open('GET', downloadApk, true);
            xhr.send();
        // 当按钮被点击时执行的操作
        document.getElementById("iframId").src=downurl;
        
    });
});
});



Requests	IP Address	Location	AS Autonomous System
8	157.240.0.35	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	16.78.84.129	Jakarta, Jakarta, Indonesia	AS16509Amazon.com, Inc.
7	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	188.114.96.3	United States	AS13335Cloudflare, Inc.
29	4	-	-

Security Scan Report: aabf03.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History