Overview

URL zggcjl.org/hyqy/928.html
IP103.216.216.53
ASN
Location Unknown
Report completed2019-04-16 12:15:03 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-04-16 2 zggcjl.org/hyqy/928.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 8 reports on IP: 103.216.216.53

Date UQ / IDS / BL URL IP
2019-04-16 06:13:25 +0200
0 - 0 - 1 xwchn.net/whxw/620.html 103.216.216.53
2019-03-19 05:25:42 +0100
0 - 0 - 1 chinascnme.com/download/canzhanbaomin.doc 103.216.216.53
2019-03-10 08:47:54 +0100
0 - 0 - 1 xwchn.net/itxw/796.html 103.216.216.53
2019-03-10 08:08:00 +0100
0 - 0 - 1 xwchn.net/jdxw/1182.html 103.216.216.53
2019-03-10 06:04:22 +0100
0 - 0 - 3 tbricw.com/znaf 103.216.216.53
2019-03-10 05:28:13 +0100
0 - 0 - 1 zggcjlxh.net/xinxizhongxin/20150723_464.html 103.216.216.53
2019-03-10 05:27:39 +0100
0 - 0 - 1 chinascnme.com/download/canzhanbaomin.doc 103.216.216.53
2019-03-09 16:51:09 +0100
0 - 0 - 9 chinascnme.com/czqyxc/775.html 103.216.216.53

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-04-20 01:11:07 +0200
0 - 0 - 11 mentorfreight.co.za/ 164.160.126.18
2019-04-20 01:07:15 +0200
0 - 0 - 1 thereadysitegoodforcontentingall.stream/ 198.54.117.200
2019-04-20 01:05:37 +0200
0 - 0 - 4 edu-zjol-com-cn.litedownloadseek.cn/jyjsb/zh/ (...) 128.1.212.185
2019-04-20 01:05:24 +0200
0 - 0 - 3 login.outlook-mail-microsoftonlnecom.help-off (...) 34.239.144.247
2019-04-20 01:04:07 +0200
0 - 0 - 1 fantasyforeigner.com/_df_andbook_f_oal_nalysi (...) 46.101.127.31
2019-04-20 01:04:04 +0200
0 - 0 - 1 fantasyforeigner.com/_amsung_efrigerator_odel (...) 46.101.127.31
2019-04-20 01:03:03 +0200
0 - 0 - 1 marilenaeventos.com/ 68.66.248.29
2019-04-20 01:02:08 +0200
0 - 0 - 1 fantasyforeigner.com/_conomics_hapter_4_est_n (...) 46.101.127.31
2019-04-20 01:01:17 +0200
0 - 0 - 2 lisfest.se/ 192.165.9.110
2019-04-20 01:00:41 +0200
0 - 0 - 4 planasdis.com/ 137.74.93.229

No other reports on domain: zggcjl.org



JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 24, repeated: 1) - SHA256: 5d312a05e6f154efa746f6fd643809f8013717d9c6d3a853802380922aefa9e2

                                        �) / 2019 t4 16��
                                    


HTTP Transactions (8)


Request Response
                                        
                                            GET /hyqy/928.html HTTP/1.1 
Host: zggcjl.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         103.216.216.53
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx/1.11.5
Date: Tue, 16 Apr 2019 10:14:00 GMT
Last-Modified: Mon, 15 Apr 2019 08:19:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5cb43e7c-3026"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3536
Md5:    a4b229fe0000866d59285ec4e798efe4
Sha1:   901027cf4efa35d47de9402d0acd1aa405c9c0a8
Sha256: d2ef60c626495e8b93a2451a288a638a86e59f974c1a4fb03a241bc9b28ca92f

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /templets/ruifeng_zggcjl/images/WEI.jpg HTTP/1.1 
Host: zggcjl.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zggcjl.org/hyqy/928.html

                                         
                                         103.216.216.53
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.11.5
Date: Tue, 16 Apr 2019 10:14:01 GMT
Content-Length: 1067
Last-Modified: Wed, 25 Apr 2018 08:53:31 GMT
Connection: keep-alive
Etag: "5ae0420b-42b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1067
Md5:    5435bfee659216afdb6865d1f04f518b
Sha1:   80ce4f44a2e2569a2ef898f08dcc2bce94f4316f
Sha256: 8a03b312497db390be3db64edcdb29a17d08a1df679368fc93c963a129a26709
                                        
                                            GET /templets/ruifeng_zggcjl/images/ei_r1_c2.jpg HTTP/1.1 
Host: zggcjl.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zggcjl.org/hyqy/928.html

                                         
                                         103.216.216.53
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.11.5
Date: Tue, 16 Apr 2019 10:14:01 GMT
Content-Length: 453
Last-Modified: Wed, 25 Apr 2018 08:53:30 GMT
Connection: keep-alive
Etag: "5ae0420a-1c5"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   453
Md5:    f1f4363f1439380f31f9ddd7e6c3a098
Sha1:   43e37e7d2ec62e1a7c3a407cf874c9b84fce3aec
Sha256: 95bae1e69d370e38e7ca2d3e61ed5df9aa6d3649ac58c9c0cb57117b09ac2b1a
                                        
                                            GET /templets/ruifeng_zggcjl/images/gonggaobg.png HTTP/1.1 
Host: zggcjl.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zggcjl.org/hyqy/928.html

                                         
                                         103.216.216.53
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.11.5
Date: Tue, 16 Apr 2019 10:14:01 GMT
Content-Length: 212
Last-Modified: Wed, 25 Apr 2018 08:53:31 GMT
Connection: keep-alive
Etag: "5ae0420b-d4"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text
Size:   212
Md5:    b9cd30aca2da7850559780c075db54f2
Sha1:   ff62dc3b5e6ec319996d794f5a783f19fbb8addd
Sha256: fac673db094068885942bbeb24a342a38f2f02998d709d4feaf2a9bdb740e26e
                                        
                                            GET /templets/ruifeng_zggcjl/images/bj.jpg HTTP/1.1 
Host: zggcjl.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zggcjl.org/hyqy/928.html

                                         
                                         103.216.216.53
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.11.5
Date: Tue, 16 Apr 2019 10:14:01 GMT
Content-Length: 11286
Last-Modified: Thu, 26 Apr 2018 01:29:03 GMT
Connection: keep-alive
Etag: "5ae12b5f-2c16"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   11286
Md5:    6a8fc507369d3b3115374f621ba2f569
Sha1:   a5d92e8acc9a91f4d33809f1439d971c1093cc6c
Sha256: 0564a412e71e1636f0fc172184b40f1b2dc237418b52898a46bccecc1ecefd5d
                                        
                                            GET /templets/ruifeng_zggcjl/images/logo2.jpg HTTP/1.1 
Host: zggcjl.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zggcjl.org/hyqy/928.html

                                         
                                         103.216.216.53
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.11.5
Date: Tue, 16 Apr 2019 10:14:01 GMT
Content-Length: 182971
Last-Modified: Wed, 06 Mar 2019 08:22:43 GMT
Connection: keep-alive
Etag: "5c7f8353-2cabb"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 950 x 150, 8-bit/color RGBA, non-interlaced
Size:   182971
Md5:    0dbcc3b470fbfe7d3d721302467f48ce
Sha1:   b48cc6729b7e1d4a1ef5863860f9c4147a56fc92
Sha256: 50fee6ec074279f97c779aa315abb6f82b6d6e206210e758035c257eb07db32c
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: zggcjl.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         103.216.216.53
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.11.5
Date: Tue, 16 Apr 2019 10:14:04 GMT
Content-Length: 169
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   169
Md5:    0c33d8df2cc2944764b2aab47b4170a4
Sha1:   915e4f688e53b87f87b5f50a91113eacfe2cda35
Sha256: f5aef0c99f60a7829372b306c93c8a8ccbb71c28d42b1380a4818dd123f8c9cd
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: zggcjl.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         103.216.216.53
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx/1.11.5
Date: Tue, 16 Apr 2019 10:14:07 GMT
Content-Length: 169
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   169
Md5:    0c33d8df2cc2944764b2aab47b4170a4
Sha1:   915e4f688e53b87f87b5f50a91113eacfe2cda35
Sha256: f5aef0c99f60a7829372b306c93c8a8ccbb71c28d42b1380a4818dd123f8c9cd