Overview

URL cqyunin.com/html/xsgz1..info10271946.html
IP104.223.149.113
ASNAS46573 Global Frag Networks
Location United States
Report completed2018-11-22 16:06:51 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-11-22 16:06:14 CET 1  104.223.149.113 Client IP ET TROJAN PE EXE or DLL Windows file download Text
2018-11-22 16:06:14 CET 1  104.223.149.113 Client IP ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
2018-11-22 16:06:14 CET 1  104.223.149.113 Client IP ET TROJAN RAMNIT.A M2
2018-11-22 16:06:15 CET 1  104.223.149.113 Client IP ET TROJAN RAMNIT.A M1


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-22 2 cqyunin.com/yesads.js Malware
2018-11-22 2 cqyunin.com/html/xsgz1..info10271946.html Malware
2018-11-22 2 cqyunin.com/images/systemresourceswfflvplayer.swf Malware
2018-11-22 2 cqyunin.com/_mediafile/jxgc/2016/07/09/15py853fy6.flv Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.223.149.113

Date UQ / IDS / BL URL IP
2019-01-15 15:21:26 +0100
0 - 0 - 2 cqyunin.com/html/jxky1..xbgk1xbjs1.html 104.223.149.113
2019-01-12 03:53:11 +0100
0 - 4 - 2 cqyunin.com/html/jxky1..xbgk1xbjs2.html 104.223.149.113
2019-01-03 23:33:20 +0100
0 - 0 - 2 cqyunin.com/html/info1051....zsjy1szdw.html 104.223.149.113
2018-12-27 21:00:41 +0100
0 - 4 - 2 cqyunin.com/html/jxky1..zsjy1szdw.html 104.223.149.113
2018-12-27 12:55:16 +0100
0 - 0 - 2 cqyunin.com/html/info1036....shfw11.html 104.223.149.113
2018-12-16 12:20:31 +0100
0 - 4 - 2 cqyunin.com/html/jxky1..djgzjxhd.html 104.223.149.113
2018-12-15 23:26:30 +0100
0 - 0 - 2 cqyunin.com/html/jxky1..djgzjxhd.html 104.223.149.113
2018-12-09 15:48:36 +0100
0 - 0 - 2 cqyunin.com/html/djgz..xbgk1xbjs3.html 104.223.149.113
2018-12-09 15:47:25 +0100
0 - 0 - 2 cqyunin.com/html/info1051....jxky1jxhd.html 104.223.149.113
2018-12-04 15:23:27 +0100
0 - 4 - 2 cqyunin.com/html/jxky1..xbgk1xbjs3.html 104.223.149.113

Last 10 reports on ASN: AS46573 Global Frag Networks

Date UQ / IDS / BL URL IP
2019-01-16 08:03:19 +0100
0 - 0 - 1 qdycfoods.cn/html/info1025....xxgkpy.html 107.179.119.164
2019-01-16 07:50:43 +0100
0 - 0 - 12 shuntaibearing.com.cn/html/zsgzbkszs....zyjsj (...) 107.179.119.104
2019-01-16 07:47:23 +0100
0 - 0 - 8 szzshf.cn/html/gzzzbmzz.html 107.179.119.101
2019-01-16 07:42:06 +0100
0 - 0 - 1 jxmr168.cn/html/xsgzsksjindex.html 107.179.119.72
2019-01-16 07:25:02 +0100
0 - 0 - 1 jxmr168.cn/html/xxgkxxjj....xsgzindex.html 107.179.119.72
2019-01-16 06:52:03 +0100
0 - 0 - 2 9k1g.cn/rlz 157.52.224.182
2019-01-16 00:37:16 +0100
0 - 4 - 6 sbanglp.com/html/tiyushiping2012-11-023463.html 104.223.149.98
2019-01-16 00:37:11 +0100
0 - 4 - 5 sbanglp.com/html/wudaodupiwu2009-10-05528375.html 104.223.149.98
2019-01-15 22:29:57 +0100
0 - 2 - 1 o07g2v.top/ 104.148.64.150
2019-01-15 22:29:00 +0100
0 - 0 - 1 csodufu.cn/ 157.52.228.111

Last 10 reports on domain: cqyunin.com

Date UQ / IDS / BL URL IP
2019-01-15 15:21:26 +0100
0 - 0 - 2 cqyunin.com/html/jxky1..xbgk1xbjs1.html 104.223.149.113
2019-01-12 03:53:11 +0100
0 - 4 - 2 cqyunin.com/html/jxky1..xbgk1xbjs2.html 104.223.149.113
2019-01-03 23:33:20 +0100
0 - 0 - 2 cqyunin.com/html/info1051....zsjy1szdw.html 104.223.149.113
2018-12-27 21:00:41 +0100
0 - 4 - 2 cqyunin.com/html/jxky1..zsjy1szdw.html 104.223.149.113
2018-12-27 12:55:16 +0100
0 - 0 - 2 cqyunin.com/html/info1036....shfw11.html 104.223.149.113
2018-12-16 12:20:31 +0100
0 - 4 - 2 cqyunin.com/html/jxky1..djgzjxhd.html 104.223.149.113
2018-12-15 23:26:30 +0100
0 - 0 - 2 cqyunin.com/html/jxky1..djgzjxhd.html 104.223.149.113
2018-12-09 15:48:36 +0100
0 - 0 - 2 cqyunin.com/html/djgz..xbgk1xbjs3.html 104.223.149.113
2018-12-09 15:47:25 +0100
0 - 0 - 2 cqyunin.com/html/info1051....jxky1jxhd.html 104.223.149.113
2018-12-04 15:23:27 +0100
0 - 4 - 2 cqyunin.com/html/jxky1..xbgk1xbjs3.html 104.223.149.113


JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 87, repeated: 1) - SHA256: a72b285b9287c1181927cd290a6f6c08d519ebc6754bc9f04fce904ca106945e

                                        < script src = 'https://s95.b9823852351323h.com/by/dz.js'
type = 'text/javascript' > < /script>
                                    


HTTP Transactions (23)


Request Response
                                        
                                            GET /images/xsgz1info1027_sitegray_sitegray_dcss.css HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 20
Last-Modified: Sat, 03 Dec 2016 02:29:02 GMT
Accept-Ranges: bytes
Etag: "1049ee2d4dd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:16 GMT


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   20
Md5:    311749c1d5f9bcf240ca9c25eae61f47
Sha1:   29703f0938cab5945db52e553f3f22cbd7f0b478
Sha256: 183f83b69b6f7ced023f06bc9b98b2d00c9e08b5c627c1f6e9002f48f0bbfb5c
                                        
                                            GET /yesads.js HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 106
Last-Modified: Thu, 13 Apr 2017 15:53:10 GMT
Accept-Ranges: bytes
Etag: "848ed0c6eb4d21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:16 GMT


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   106
Md5:    17a8754edf85068082f8b1ac1519d80e
Sha1:   33a9c0cccfe3d299c1ebb6d77fc4e0097b35f5a9
Sha256: 85965e1cee169e6ea1129285cafdd3c90f4e7b046207290c9ad9bc51bc58afdf

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /images/xsgz1info1027imagesstylecss.css HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 4620
Last-Modified: Sat, 03 Dec 2016 02:29:02 GMT
Accept-Ranges: bytes
Etag: "1c399d2d4dd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:16 GMT


--- Additional Info ---
Magic:  UTF-8 Unicode text, with CRLF line terminators
Size:   4620
Md5:    e3e0a6a1ef956f37074b04163facc3eb
Sha1:   5b7c3925375e7801c211e854ed7d0dbebacaf382
Sha256: 2867b69f7c8c0bb589f2162917509321d33a0e9bfafe8fde08ddab230f81c6a8
                                        
                                            GET /images/xsgz1info1027contentvsbcss.css HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 3462
Last-Modified: Sat, 03 Dec 2016 02:29:02 GMT
Accept-Ranges: bytes
Etag: "261f253d4dd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:16 GMT


--- Additional Info ---
Magic:  UTF-8 Unicode text, with CRLF line terminators
Size:   3462
Md5:    2354c0514f12b655ef1a39e39e8836e8
Sha1:   259c251969a8cdc60f10dc0ac32214a3b3bc4d07
Sha256: ac0ddcdb8240b0fca93b61fe547f39caecbb6cd8293581624a37bebd732c7a7a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 20 Nov 2018 02:28:35 GMT
Etag: 281546448D18A27354CF5533548333D40BA6A0B2
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=385940
Expires: Tue, 27 Nov 2018 02:18:34 GMT
Date: Thu, 22 Nov 2018 15:06:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    67756d53ceabec4d464837b912a6f956
Sha1:   281546448d18a27354cf5533548333d40ba6a0b2
Sha256: 0743e6fcef69111a94b082f2a3257048157004869f2d30097dedc5e1c55b1f8b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sat, 17 Nov 2018 02:14:26 GMT
Etag: 1B9CD31C1E059B1544C6445D9E74E330147018FD
X-OCSP-Responder-ID: (null)
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=125913
Expires: Sat, 24 Nov 2018 02:04:47 GMT
Date: Thu, 22 Nov 2018 15:06:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    9ddac668231f6e67ea3a64be7b4bf7c4
Sha1:   1b9cd31c1e059b1544c6445d9e74e330147018fd
Sha256: 1fd367e33b4004679c985ab5b2e8a837c3ffe7f638f5ebe2fa50cf03571ee449
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sat, 17 Nov 2018 02:14:26 GMT
Etag: DC76D31E1DF5A2A6AC6B2A7742DCB5BE62E073FE
X-OCSP-Responder-ID: (null)
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=125862
Expires: Sat, 24 Nov 2018 02:03:56 GMT
Date: Thu, 22 Nov 2018 15:06:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a137c4cb8e98f3522e30cab015e1adee
Sha1:   dc76d31e1df5a2a6ac6b2a7742dcb5be62e073fe
Sha256: d16e5423666ddd3211a8f51b546b629dfae2573a0720357e9ad711c07e2dd350
                                        
                                            GET /html/xsgz1..info10271946.html HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 134686
Last-Modified: Fri, 03 Aug 2018 18:25:55 GMT
Accept-Ranges: bytes
Etag: "e28cb96a572bd41:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:15 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   134686
Md5:    7b813c622021dfb6307a318ab8a5d5db
Sha1:   06f4c7fe199904f6866d497ffa55aea98333ca99
Sha256: 6da220f3775f2f13c59cbfb7eb345754c6999ac59dc506f8d8e015915828836f

Alerts:
  Blacklists:
    - fortinet: Malware
  IDS:
    - ET TROJAN PE EXE or DLL Windows file download Text
    - ET CURRENT_EVENTS DRIVEBY EXE Embeded in Page Likely Evil M1
    - ET TROJAN RAMNIT.A M2
    - ET TROJAN RAMNIT.A M1
                                        
                                            GET /images/nav.jpg HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/images/xsgz1info1027imagesstylecss.css

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1225
Last-Modified: Thu, 01 Dec 2016 02:36:16 GMT
Accept-Ranges: bytes
Etag: "70c8a3b07b4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1225
Md5:    2da22f2ef7e0b792387962ff60392697
Sha1:   33ae48d992f19e031879c7e63821a320547b218b
Sha256: 02fcf705f26c54cba92e16698efdbc58c2feedd4d13b88ac7e79394478d41922
                                        
                                            GET /images/systemresourceimagesloading.gif HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 4254
Last-Modified: Thu, 01 Dec 2016 02:35:41 GMT
Accept-Ranges: bytes
Etag: "6c5daf9b7b4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   4254
Md5:    325ec06a64ff169daf8c71b38a415022
Sha1:   8a7588850ebd7c0a4c183aa06904de1236284508
Sha256: 67f89d2ade63e332acfc944711a5ee17243cf23972b229aea422b23af16656b7
                                        
                                            GET /images/imagesline-nav.jpg HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1140
Last-Modified: Thu, 01 Dec 2016 02:35:00 GMT
Accept-Ranges: bytes
Etag: "bc5552837b4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1140
Md5:    780590dc3f031e2ffc3c00dac3923fa0
Sha1:   20fafdc404c5422d1da3b1777886c7850a24b818
Sha256: 850ddf37603c3de1b5432dd40b00b1d440c11e3a1d7973589f915c9386dc5118
                                        
                                            GET /images/bg.jpg HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/images/xsgz1info1027imagesstylecss.css

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1541
Last-Modified: Thu, 01 Dec 2016 02:35:57 GMT
Accept-Ranges: bytes
Etag: "f2d3a8a57b4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1541
Md5:    9b5ccc572e9c1e2260c64860bff510d3
Sha1:   1aad27c004497a5285302613c19160c48f4db682
Sha256: db1742be63c7d7c92cb8db8116e9e04e86e123a631d4412a5fd5566f2a370ef4
                                        
                                            GET /images/imagescontop-01.gif HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 1115
Last-Modified: Thu, 01 Dec 2016 02:38:34 GMT
Accept-Ranges: bytes
Etag: "fc6f2c37c4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 10 x 11
Size:   1115
Md5:    09b79d14f45499a8c85ca00f5d6d0895
Sha1:   efef53e24648d46f4808fe04d478f9d2f56cd95e
Sha256: a51a1d6efe17bf5c8667f0e820fc09f53670463ef92a37ddb01790f0fef80d1a
                                        
                                            GET /images/imagescontop-02.gif HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 1118
Last-Modified: Thu, 01 Dec 2016 02:38:35 GMT
Accept-Ranges: bytes
Etag: "f07f7d37c4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 12 x 12
Size:   1118
Md5:    b92c37fdb18cd046934558bd462a0fd0
Sha1:   bb440f6f0f3ae74af83f753db2c2456234a7f489
Sha256: 6c6553459508139e25b54a7788e37a52006db57c4cddb25d906fd23112c773f0
                                        
                                            GET /images/bg-tit.jpg HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/images/xsgz1info1027imagesstylecss.css

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1208
Last-Modified: Thu, 01 Dec 2016 02:36:02 GMT
Accept-Ranges: bytes
Etag: "a82968a87b4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1208
Md5:    f14c4b982bcf20ff7c6ca1167498b4be
Sha1:   218b772c3f52bc3c990d75056f97ba62cc763d3a
Sha256: 8bfd71fc4bddfb71b43a909f52e392f39715087fc176f6679f669500f5ad4420
                                        
                                            GET /images/xsgz1info1027systemresourcestylecomponentnewscontenttitlecss.css HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 1208
Last-Modified: Sat, 03 Dec 2016 02:29:03 GMT
Accept-Ranges: bytes
Etag: "7491783d4dd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) text, with CRLF line terminators
Size:   1208
Md5:    7401d3ad21a12f063065db3c70e58f31
Sha1:   5a474a10a6b1792902255992eaeb444878fe2dc5
Sha256: 8c04e7a62ae6a31cd14a1f60478f84aeb09faf7068e877bbef8765ab1dcd4930
                                        
                                            GET /images/header.jpg HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/images/xsgz1info1027imagesstylecss.css

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 159152
Last-Modified: Thu, 01 Dec 2016 02:36:07 GMT
Accept-Ranges: bytes
Etag: "b8e129ab7b4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:17 GMT


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   159152
Md5:    903fb4b56978d649c139b543a81c810d
Sha1:   c992f44ea519837c86f8d486ba370b51da2b8ff3
Sha256: 83f93b7acfb4ffa534b3ce7585d00fd51e3f874e39cccbbd07fce50b9311975a
                                        
                                            GET /images/systemresourceswfflvplayer.swf HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         104.223.149.113
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Content-Length: 29646
Last-Modified: Thu, 01 Dec 2016 02:38:36 GMT
Accept-Ranges: bytes
Etag: "26127347c4bd21:106e0"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:19 GMT


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 8
Size:   29646
Md5:    ca48e968ed4c7e17a27fcf62d8eb2461
Sha1:   6c8e9a96f560ab209a24a5272d29403b68796820
Sha256: 0b7797d22da61ad22fc099b5d2630b9649acca4f29e1ccbef984918d84edfd31

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.135.34.8
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 20 Nov 2018 06:13:48 GMT
Etag: "60e-57b12896a0602"
Accept-Ranges: bytes
Content-Length: 1550
Date: Thu, 22 Nov 2018 15:06:18 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1550
Md5:    a2e8e89e9111a9f1d6bda9aa1c1ba8a8
Sha1:   17d6d6ecfb0ae2d2981e77641fe44b97d5df98d8
Sha256: f707e4415756215ea61d47cbe251b31d4d98faa13b0b8b5f400c39dd575e777d
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.113
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:20 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /_mediafile/jxgc/2016/07/09/15py853fy6.flv HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.113
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:20 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: cqyunin.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.223.149.113
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Content-Length: 1308
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Thu, 22 Nov 2018 15:06:23 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1308
Md5:    2923b250a3660c034aa7831d5e6d7f3c
Sha1:   646f109012bac000fe1bc58f40d112f77483f22a
Sha256: e682dfcdde010f6e15bae0d843696f6ae8d5a85e75441660b782789ee747f075
                                        
                                            GET /by/dz.js HTTP/1.1 
Host: s95.b9823852351323h.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cqyunin.com/html/xsgz1..info10271946.html

                                         
                                         0.0.0.0
                                        


--- Additional Info ---