Report - download.zggwy.org/%E7%82%B9%E5%87%BB%E4%B8%8B%E8%BD%BD%EF%BC%9A2017%E5%B9%B4%E4%B8%8B%E5%8D%8A%E5%B9%B4%E6%BA%A7%E6%B0%B4%E5%8C%BA%E9%83%A8%E5%88%86%E6%9C%BA%E5%85%B3%E4%BA%8B%E4%B8%9A%E5%8D%95%E4%BD%8D%E3%80%81%E5%9B%BD%E4%BC%81%E5%85%AC%E5%BC%80%E6%8B%9B%E8%81%98%E7%BC%96%E5%A4%96%E4%BA%BA%E5%91%98%E7%AC%94%E8%AF%95%E6%88%90%E7%BB%A9%E5%85%AC%E7%A4%BA.xls

Report Overview

Submitted URL
download.zggwy.org/%E7%82%B9%E5%87%BB%E4%B8%8B%E8%BD%BD%EF%BC%9A2017%E5%B9%B4%E4%B8%8B%E5%8D%8A%E5%B9%B4%E6%BA%A7%E6%B0%B4%E5%8C%BA%E9%83%A8%E5%88%86%E6%9C%BA%E5%85%B3%E4%BA%8B%E4%B8%9A%E5%8D%95%E4%BD%8D%E3%80%81%E5%9B%BD%E4%BC%81%E5%85%AC%E5%BC%80%E6%8B%9B%E8%81%98%E7%BC%96%E5%A4%96%E4%BA%BA%E5%91%98%E7%AC%94%E8%AF%95%E6%88%90%E7%BB%A9%E5%85%AC%E7%A4%BA.xls
IP
113.125.192.147
ASN
#58519 Cloud Computing Corporation
Submitted
2023-06-01 11:24:44
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download.zggwy.org	unknown	2009-07-31	2017-09-25	2023-06-01	732 B	239 kB	113.125.192.151

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-01 11:24:27	medium	113.125.192.147	Client IP	ET INFO TLS Handshake Failure
2023-06-01 11:24:27	medium	113.125.192.147	Client IP	ET INFO TLS Handshake Failure
2023-06-01 11:24:28	high	113.125.192.151	Client IP	ETPRO WEB_CLIENT Microsoft Excel corrupted/hostile file invalid MergeCells.rgref.ref8.colLast value

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
download.zggwy.org/%E7%82%B9%E5%87%BB%E4%B8%8B%E8%BD%BD%EF%BC%9A2017%E5%B9%B4%E4%B8%8B%E5%8D%8A%E5%B9%B4%E6%BA%A7%E6%B0%B4%E5%8C%BA%E9%83%A8%E5%88%86%E6%9C%BA%E5%85%B3%E4%BA%8B%E4%B8%9A%E5%8D%95%E4%BD%8D%E3%80%81%E5%9B%BD%E4%BC%81%E5%85%AC%E5%BC%80%E6%8B%9B%E8%81%98%E7%BC%96%E5%A4%96%E4%BA%BA%E5%91%98%E7%AC%94%E8%AF%95%E6%88%90%E7%BB%A9%E5%85%AC%E7%A4%BA.xls
IP
113.125.192.151
ASN
#58519 Cloud Computing Corporation

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1200, Locale ID: 2052, Author: Adminis, Last Saved By: j, Create Time/Date: Thu Apr 27 10:29:00 2017, Last Saved Time/Date: Mon Oct 23 06:58:29 2017, Last Printed: Fri Apr 28 00:53:00 2017, Name of Creating Application: Microsof\012- OLE 2 Compound Document, v3.62, SecID 0x1, 4 FAT sectors, Mini FAT start sector 0x1c9 : Microsoft Excel 97-2003 worksheet or template\012- data
Size
238 kB (237568 bytes)
Hash
fd09933ea68616f376cedd2b4c4ac25f
c4ad9ef0d58e0692d2517f4a78c740cfd923968b
0831c8c333dd4fcddf6fb2604e41010b3d3ba44fa0aaf61e8181f65403915edd

Detections

Analyzer	Verdict	Alert
VirusTotal	0/61	VirusTotal -

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

download.zggwy.org/%E7%82%B9%E5%87%BB%E4%B8%8B%E8%BD%BD%EF%BC%9A2017%E5%B9%B4%E4%B8%8B%E5%8D%8A%E5%B9%B4%E6%BA%A7%E6%B0%B4%E5%8C%BA%E9%83%A8%E5%88%86%E6%9C%BA%E5%85%B3%E4%BA%8B%E4%B8%9A%E5%8D%95%E4%BD%8D%E3%80%81%E5%9B%BD%E4%BC%81%E5%85%AC%E5%BC%80%E6%8B%9B%E8%81%98%E7%BC%96%E5%A4%96%E4%BA%BA%E5%91%98%E7%AC%94%E8%AF%95%E6%88%90%E7%BB%A9%E5%85%AC%E7%A4%BA.xls

113.125.192.151

200 OK

238 kB

URL User Request GET HTTP/1.1
download.zggwy.org/%E7%82%B9%E5%87%BB%E4%B8%8B%E8%BD%BD%EF%BC%9A2017%E5%B9%B4%E4%B8%8B%E5%8D%8A%E5%B9%B4%E6%BA%A7%E6%B0%B4%E5%8C%BA%E9%83%A8%E5%88%86%E6%9C%BA%E5%85%B3%E4%BA%8B%E4%B8%9A%E5%8D%95%E4%BD%8D%E3%80%81%E5%9B%BD%E4%BC%81%E5%85%AC%E5%BC%80%E6%8B%9B%E8%81%98%E7%BC%96%E5%A4%96%E4%BA%BA%E5%91%98%E7%AC%94%E8%AF%95%E6%88%90%E7%BB%A9%E5%85%AC%E7%A4%BA.xls
IP
113.125.192.151:80
ASN
#58519 Cloud Computing Corporation

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1200, Locale ID: 2052, Author: Adminis, Last Saved By: j, Create Time/Date: Thu Apr 27 10:29:00 2017, Last Saved Time/Date: Mon Oct 23 06:58:29 2017, Last Printed: Fri Apr 28 00:53:00 2017, Name of Creating Application: Microsof\012- OLE 2 Compound Document, v3.62, SecID 0x1, 4 FAT sectors, Mini FAT start sector 0x1c9 : Microsoft Excel 97-2003 worksheet or template\012- data
Size
238 kB (237568 bytes)
Hash
fd09933ea68616f376cedd2b4c4ac25f
c4ad9ef0d58e0692d2517f4a78c740cfd923968b
0831c8c333dd4fcddf6fb2604e41010b3d3ba44fa0aaf61e8181f65403915edd

Detections

Analyzer	Verdict	Alert
VirusTotal	0/61	VirusTotal -

NIDS	Severity	Alert
suricata	high	ETPRO WEB_CLIENT Microsoft Excel corrupted/hostile file invalid MergeCells.rgref.ref8.colLast value

HTTP Headers

GET /%E7%82%B9%E5%87%BB%E4%B8%8B%E8%BD%BD%EF%BC%9A2017%E5%B9%B4%E4%B8%8B%E5%8D%8A%E5%B9%B4%E6%BA%A7%E6%B0%B4%E5%8C%BA%E9%83%A8%E5%88%86%E6%9C%BA%E5%85%B3%E4%BA%8B%E4%B8%9A%E5%8D%95%E4%BD%8D%E3%80%81%E5%9B%BD%E4%BC%81%E5%85%AC%E5%BC%80%E6%8B%9B%E8%81%98%E7%BC%96%E5%A4%96%E4%BA%BA%E5%91%98%E7%AC%94%E8%AF%95%E6%88%90%E7%BB%A9%E5%85%AC%E7%A4%BA.xls HTTP/1.1
Host: download.zggwy.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Thu, 01 Jun 2023 11:24:28 GMT
Content-Type: application/vnd.ms-excel
Content-Length: 237568
Connection: keep-alive
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
Age: 8
Cache-Control: public, max-age=31536000
Content-Disposition: inline; filename="点击下载：2017年下半年溧水区部分机关事业单位、国企公开招聘编外人员笔试成绩公示.xls"; filename*=utf-8''%E7%82%B9%E5%87%BB%E4%B8%8B%E8%BD%BD%EF%BC%9A2017%E5%B9%B4%E4%B8%8B%E5%8D%8A%E5%B9%B4%E6%BA%A7%E6%B0%B4%E5%8C%BA%E9%83%A8%E5%88%86%E6%9C%BA%E5%85%B3%E4%BA%8B%E4%B8%9A%E5%8D%95%E4%BD%8D%E3%80%81%E5%9B%BD%E4%BC%81%E5%85%AC%E5%BC%80%E6%8B%9B%E8%81%98%E7%BC%96%E5%A4%96%E4%BA%BA%E5%91%98%E7%AC%94%E8%AF%95%E6%88%90%E7%BB%A9%E5%85%AC%E7%A4%BA.xls
Content-Transfer-Encoding: binary
Etag: "FsStnvDVjgaS0lF_SnjHQM_ZI5aL"
Last-Modified: Thu, 26 Oct 2017 03:45:12 GMT
X-Log: X-Log
X-M-Log: QNM:cdn-cache-dls-gzgy-gy-6;QNM3:17
X-M-Reqid: CJQaJAhe8
X-Qiniu-Zone: 0
X-Qnm-Cache: Hit
X-Reqid: r8gAAAC1Kbo9hWQX
X-Svr: IO

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers