Overview

URL 029smt.com/html/zwgkarticleshow_article.asparticleid37379.html
IP104.223.149.92
ASNAS46573 Global Frag Networks
Location United States
Report completed2019-01-14 16:08:03 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2019-01-14 16:07:32 CET 1  104.223.149.92 Client IP ET TROJAN RAMNIT.A M1
2019-01-14 16:07:30 CET 1  104.223.149.92 Client IP ET TROJAN PE EXE or DLL Windows file download Text
2019-01-14 16:07:30 CET 1  104.223.149.92 Client IP ET TROJAN RAMNIT.A M2
2019-01-14 16:07:30 CET 1  104.223.149.92 Client IP ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-01-14 2 029smt.com/yesads.js Malware
2019-01-14 2 029smt.com/html/zwgkarticleshow_article.asparticleid37379.html Malware
2019-01-14 2 029smt.com/images/imagesindex.swf Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.223.149.92

Date UQ / IDS / BL URL IP
2019-02-16 11:22:40 +0100
0 - 0 - 1 029smt.com/html/zwgkarticlearticle_search.asp.html 104.223.149.92
2019-02-11 13:33:07 +0100
0 - 0 - 1 029smt.com/html/hdjlzxft4.asp.html 104.223.149.92
2019-01-30 13:58:22 +0100
0 - 0 - 1 029smt.com/html/zwgkzwgkclass.aspclassid343.html 104.223.149.92
2019-01-20 05:44:19 +0100
0 - 0 - 3 029smt.com/html/zwgkzwgkclass.aspClassID38.html 104.223.149.92
2019-01-20 04:05:53 +0100
0 - 0 - 3 029smt.com/html/zwgkarticleshow_article.aspAr (...) 104.223.149.92
2019-01-20 00:59:57 +0100
0 - 0 - 1 029smt.com/html/mailwrite.asptitle%E6%95%99%E (...) 104.223.149.92
2019-01-20 00:59:55 +0100
0 - 0 - 1 029smt.com/html/mailwrite.asptitle%E6%95%99%E (...) 104.223.149.92
2019-01-15 21:36:16 +0100
0 - 0 - 2 lrlvshi.com/html/content2016-1019......node_1 (...) 104.223.149.92
2019-01-14 18:14:25 +0100
0 - 0 - 1 029smt.com/html/mailwrite.asptitle%E6%95%99%E (...) 104.223.149.92
2019-01-14 18:06:24 +0100
0 - 0 - 1 029smt.com/html/mailwrite.asptitle%E6%95%99%E (...) 104.223.149.92

Last 10 reports on ASN: AS46573 Global Frag Networks

Date UQ / IDS / BL URL IP
2019-02-22 18:12:24 +0100
0 - 0 - 2 21ppjm.com/server.exe 104.223.244.55
2019-02-22 18:12:00 +0100
0 - 0 - 1 https://www.21ppjm.com/server.exe 104.223.244.55
2019-02-22 12:08:08 +0100
0 - 0 - 1 jiyuanmuju.cn/html/html2016shijing_0319150.html 107.179.119.242
2019-02-22 12:07:52 +0100
0 - 0 - 15 qianmolipin.com.cn/html/jxgz1..jxgz11jxgcxy.html 107.179.119.106
2019-02-22 12:07:50 +0100
0 - 0 - 1 shouzhenfur.cn/html/info1955....bggkdsj.html 107.179.119.82
2019-02-22 12:07:46 +0100
0 - 0 - 1 shoping8-no1.cn/html/info11191199_7.html 107.179.119.83
2019-02-22 12:07:30 +0100
0 - 0 - 1 143.fdwhctyy.cn/8/7.html 104.148.124.108
2019-02-22 12:07:22 +0100
0 - 0 - 1 jb0591.cn/html/hdlt..xyfcindex.html 107.179.119.232
2019-02-22 06:56:18 +0100
0 - 0 - 1 jx7858686.com.cn/Korea.html 107.179.119.6
2019-02-21 15:13:37 +0100
0 - 0 - 2 www.imdetect.com/download/IcqMonitor_trial_se (...) 104.148.62.172

Last 10 reports on domain: 029smt.com

Date UQ / IDS / BL URL IP
2019-02-16 11:22:40 +0100
0 - 0 - 1 029smt.com/html/zwgkarticlearticle_search.asp.html 104.223.149.92
2019-02-11 13:33:07 +0100
0 - 0 - 1 029smt.com/html/hdjlzxft4.asp.html 104.223.149.92
2019-01-30 13:58:22 +0100
0 - 0 - 1 029smt.com/html/zwgkzwgkclass.aspclassid343.html 104.223.149.92
2019-01-20 05:44:19 +0100
0 - 0 - 3 029smt.com/html/zwgkzwgkclass.aspClassID38.html 104.223.149.92
2019-01-20 04:05:53 +0100
0 - 0 - 3 029smt.com/html/zwgkarticleshow_article.aspAr (...) 104.223.149.92
2019-01-20 00:59:57 +0100
0 - 0 - 1 029smt.com/html/mailwrite.asptitle%E6%95%99%E (...) 104.223.149.92
2019-01-20 00:59:55 +0100
0 - 0 - 1 029smt.com/html/mailwrite.asptitle%E6%95%99%E (...) 104.223.149.92
2019-01-14 18:14:25 +0100
0 - 0 - 1 029smt.com/html/mailwrite.asptitle%E6%95%99%E (...) 104.223.149.92
2019-01-14 18:06:24 +0100
0 - 0 - 1 029smt.com/html/mailwrite.asptitle%E6%95%99%E (...) 104.223.149.92
2019-01-14 16:09:12 +0100
0 - 0 - 3 029smt.com/html/zwgkarticleshowbmzn.asparticl (...) 104.223.149.92


JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 87, repeated: 1) - SHA256: a72b285b9287c1181927cd290a6f6c08d519ebc6754bc9f04fce904ca106945e

                                        < script src = 'https://s95.b9823852351323h.com/by/dz.js'
type = 'text/javascript' > < /script>
                                    


HTTP Transactions (29)


Request Response
                                        
                                            GET /yesads.js HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 106
Last-Modified: Thu, 13 Apr 2017 15:53:11 GMT
Accept-Ranges: bytes
Etag: "c0989dd6eb4d21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:37 GMT


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   106
Md5:    17a8754edf85068082f8b1ac1519d80e
Sha1:   33a9c0cccfe3d299c1ebb6d77fc4e0097b35f5a9
Sha256: 85965e1cee169e6ea1129285cafdd3c90f4e7b046207290c9ad9bc51bc58afdf

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /images/zwgkarticlecssheadcss.css HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 3904
Last-Modified: Wed, 30 Nov 2016 01:34:52 GMT
Accept-Ranges: bytes
Etag: "644eb5f2a94ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:37 GMT


--- Additional Info ---
Magic:  ISO-8859 text, with CRLF line terminators
Size:   3904
Md5:    d7ef22420e1ebafa307a344760d327a0
Sha1:   253766d485a72db24e2f6658f01d30888e0c6a9c
Sha256: 091ec775bcc4a5d2ef76c79ff5b37a88cb23196a41a581aa9dc5f76337d4580a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Fri, 11 Jan 2019 14:28:28 GMT
Etag: 42FC8472AFCB0947096AE6A30D1728FE92F6FFE3
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=342678
Expires: Fri, 18 Jan 2019 14:18:49 GMT
Date: Mon, 14 Jan 2019 15:07:31 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    66a82df22d4bea5324e08d58c1caa600
Sha1:   42fc8472afcb0947096ae6a30d1728fe92f6ffe3
Sha256: 26e4f6c4cdb88d833cd1ca99c6fb1230dabc7b64ec2f5987ef54c3bc6f254474
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 09 Jan 2019 12:16:54 GMT
Etag: 02F9B30EAEF0F028F6EE3427C3F699783E764EC5
X-OCSP-Responder-ID: mcdpcaocsp15
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=161936
Expires: Wed, 16 Jan 2019 12:06:27 GMT
Date: Mon, 14 Jan 2019 15:07:31 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    a6da0886648821eddccad7f6544afb68
Sha1:   02f9b30eaef0f028f6ee3427c3f699783e764ec5
Sha256: aec997fcd93eb53205a5e430f398e59a536a4b9ac5e29c15bfe3e643e07e072f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 09 Jan 2019 12:16:54 GMT
Etag: 95BE75F0E4AA813FC03A85A43139108C1DE1A2C8
X-OCSP-Responder-ID: mcdpcaocsp4
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=161911
Expires: Wed, 16 Jan 2019 12:06:02 GMT
Date: Mon, 14 Jan 2019 15:07:31 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c4f25816d60da7ce6a444604e3620dc9
Sha1:   95be75f0e4aa813fc03a85a43139108c1de1a2c8
Sha256: aa1656ba91b335c8a33ad9e319fc167365d343d443819d4a5b1cd5dcc8a5bdb7
                                        
                                            GET /html/zwgkarticleshow_article.asparticleid37379.html HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 149296
Last-Modified: Sat, 04 Aug 2018 16:59:17 GMT
Accept-Ranges: bytes
Etag: "829797b142cd41:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:37 GMT


--- Additional Info ---
Magic:  ISO-8859 HTML document text, with very long lines, with CRLF line terminators
Size:   149296
Md5:    8ea64b03d2987b888c4e3045b57f6d7f
Sha1:   ecdc6755db36628c9961b0d0d3437782a6980b6f
Sha256: 5d58be7f48937329763795b5dbc1ad33bd1aa4aeda4c9e42e03c92911c4e2875

Alerts:
  Blacklists:
    - fortinet: Malware
  IDS:
    - ET TROJAN RAMNIT.A M1
    - ET TROJAN PE EXE or DLL Windows file download Text
    - ET TROJAN RAMNIT.A M2
    - ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
                                        
                                            GET /images/imagesnbedulogo.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 20024
Last-Modified: Tue, 29 Nov 2016 22:39:21 GMT
Accept-Ranges: bytes
Etag: "bac5a86d914ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:39 GMT


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   20024
Md5:    a84d15a4cba4d1d8f881fd60b0b09d17
Sha1:   5a71daed45ae3e859d02becdfa7dfabf2f5d8c52
Sha256: dd7103b8a2983937bf86eeaaf9061b7aab9b35aca7ee77ac10c7155af3bcf8fe
                                        
                                            GET /images/default_02.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:39 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/topbg.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:39 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/imagesjt.gif HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 55
Last-Modified: Wed, 30 Nov 2016 01:34:10 GMT
Accept-Ranges: bytes
Etag: "e7c29d9a94ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 7 x 4
Size:   55
Md5:    5e4bb332105e8a96b324e2092ec50f2d
Sha1:   4b459a3041c04945327930bd9256d2d9c56234aa
Sha256: 8408106aa51982c86b85c6747388ac564f9339fc248b80b567ed95a852f68790
                                        
                                            GET /images/default_06.gif HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/default_08.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/zwgkimageszwgklm_17.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 414
Last-Modified: Wed, 30 Nov 2016 01:34:15 GMT
Accept-Ranges: bytes
Etag: "30c9a2dca94ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   414
Md5:    25f9acb7f35bc054e8e971d66961218b
Sha1:   ff406a5806289ef215efb6e1410176ae668c3518
Sha256: 3bd1094a225905ab8f85301cc191ed389f8e0497d626fdc26e1b5cb276f5cc4d
                                        
                                            GET /images/jyzcimagesjyzclm_06.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 6648
Last-Modified: Wed, 30 Nov 2016 01:34:18 GMT
Accept-Ranges: bytes
Etag: "e6f130dea94ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   6648
Md5:    ef455043187da779ac370d9cf759180b
Sha1:   5e86b3270f5310c36e83eacf934ba74228f0c2e7
Sha256: 05049f822a5e16edd0498ded74637120fc70b7c4ec34634cf4188af5968187e1
                                        
                                            GET /images/imagestj.gif HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 1482
Last-Modified: Wed, 30 Nov 2016 01:40:38 GMT
Accept-Ranges: bytes
Etag: "9a1cb5c0aa4ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 91 x 22
Size:   1482
Md5:    4aac7a31eed15afce5ac0f004e8e68a5
Sha1:   70ea66262226655f95ea5554176f806421869e4a
Sha256: 19db80545d0849f09a22648168094d7e1f0bbb0b5e90bc707e81e0e1f4da002c
                                        
                                            GET /images/zwgkimageszwgklm_14.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 787
Last-Modified: Wed, 30 Nov 2016 01:34:16 GMT
Accept-Ranges: bytes
Etag: "a8b0bdda94ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   787
Md5:    933df1631c8b72edb92681a6cc668a40
Sha1:   65c92a589de7b69d814d14a19111a42b9a2f8551
Sha256: 9e0107c61b96c128517e688986fc32ea6f8bdad2ae2d65533a94f6a4570f9c6b
                                        
                                            GET /images/zwgkimageszwgklm1_26.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 836
Last-Modified: Wed, 30 Nov 2016 01:34:17 GMT
Accept-Ranges: bytes
Etag: "c63572dda94ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   836
Md5:    281fbfc791abac17e7c38ba54ff98844
Sha1:   16c31d182d0d06526d415c2ad417cd3db9b8f375
Sha256: 43965f8a57028dbeef2c9cd7b6427ef47d84e4a461607fd5a66ecba5fb311f9a
                                        
                                            GET /images/show/3_10.gif HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /jyzc/images/jyzclm_07.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/zwgkimageszwgklm_03.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 6511
Last-Modified: Wed, 30 Nov 2016 01:34:14 GMT
Accept-Ranges: bytes
Etag: "fa36addba94ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   6511
Md5:    0acdea1a31b8f25c180387c784464d16
Sha1:   aa1b6474433714ba4d3e245f767d079fcff5aa10
Sha256: e1ec5b37f8875100c0255337aaf3f492969022e12884a5057d0890fba196fb84
                                        
                                            GET /images/zwgklm_05.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/default_246.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /images/imagesba.png HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 19256
Last-Modified: Tue, 29 Nov 2016 22:41:32 GMT
Accept-Ranges: bytes
Etag: "bea0d5bb914ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  PNG image, 20 x 20, 8-bit/color RGBA, non-interlaced
Size:   19256
Md5:    d0289dc0a46fc5b15b3363ffa78cf6c7
Sha1:   29c400bc3b89f6085766dac4e0330ded5cb73d52
Sha256: a20583c81805fe64f7fa210851ce29754af9d25fd6aa5a3225a9557529602513
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.135.34.8
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 08 Jan 2019 09:46:12 GMT
Etag: "60e-57eef373e43fe"
Accept-Ranges: bytes
Content-Length: 1550
Date: Mon, 14 Jan 2019 15:07:33 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1550
Md5:    f71c58a085832ecab19d3d4f0bee72cf
Sha1:   0e75158f91704f40502217714155c348d92d051f
Sha256: 82b3bfeadac792dc7e71061019d470a5e3a9e1b1521f92a584e377ef15e1f885
                                        
                                            GET /images/imagesindex.swf HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Content-Length: 26393
Last-Modified: Wed, 30 Nov 2016 01:34:09 GMT
Accept-Ranges: bytes
Etag: "f66e9ad8a94ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:41 GMT


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 7
Size:   26393
Md5:    b5a372e68d2f64ffdf31a58b0fd5a79a
Sha1:   c5d99dd73a654d8e8c7e3eef4793d71636d214fd
Sha256: edd1ce02ee2f662b969a74f62f1315b88afc0952b970a26b3c4d485df378a414

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /images/imageswxwb.jpg HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         104.223.149.92
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 54550
Last-Modified: Tue, 29 Nov 2016 22:41:55 GMT
Accept-Ranges: bytes
Etag: "20a124c9914ad21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:40 GMT


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   54550
Md5:    6ec07eb9c6bba2b51b230bdb9d23da22
Sha1:   434bf43961650c0d363a216c8756cb7fa4ba9634
Sha256: 303a26869b7423a451db23c768c3a2ff1b3ad695a48f46f2ae3ff6659c0a12a3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:43 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 029smt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.92
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Mon, 14 Jan 2019 15:07:45 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /by/dz.js HTTP/1.1 
Host: s95.b9823852351323h.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://029smt.com/html/zwgkarticleshow_article.asparticleid37379.html

                                         
                                         0.0.0.0
                                        


--- Additional Info ---