Report - www.genceo.com/Print.aspx?id=1452

Report Overview

Visited public
2023-10-01 20:23:17
Tags
URL
www.genceo.com/Print.aspx?id=1452
Finishing URL
www.genceo.com/Print.aspx?id=1452
IP / ASN
38.53.31.229
#54600 PEGTECHINC
Title
一个班级,一个家-郑州信息技术学校

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.genceo.com	unknown	2016-11-26	2017-03-26 22:03:44	2023-09-30 05:32:10	7.9 kB	902 kB	38.53.31.229
sdk.51.la	88367	2005-01-17	2021-03-08 17:03:51	2023-09-30 06:21:05	320 B	14 kB	47.246.44.205
collect-v6.51.la	91421	2005-01-17	2021-03-08 17:03:54	2023-10-01 06:10:22	378 B	486 B	203.107.86.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-01 20:23:01	high	38.53.31.229	Client IP	ET WEB_CLIENT DRIVEBY EXE Embeded in Page Likely Evil M1
2023-10-01 20:23:01	high	38.53.31.229	Client IP	ET MALWARE PE EXE or DLL Windows file download Text
2023-10-01 20:23:01	high	38.53.31.229	Client IP	ET WEB_CLIENT Generic Attempted Executable Drop via VBScript

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	sdk.51.la/js-sdk-pro.min.js	ScriptElement	34 kB	2023-04-05	2025-05-09
Pretty URL sdk.51.la/js-sdk-pro.min.js IP 47.246.44.205 ASN #24429 Zhejiang Taobao Network Co.,Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 07:31 Last Seen2025-05-09 04:56 Times Seen8540 Hash 8fc0b01d35300e8398d6e957987c01e7 f1eb32c75b8d8e4b0555ebc2a5f5d1d60296f41e b164aafa0bb83dfe511912ca2ca475880bfffac8d8f098c947fd3d4af440d3a4 Loading...

	www.genceo.com/ads/188/js/jquery-1.11.0.min.js	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL www.genceo.com/ads/188/js/jquery-1.11.0.min.js IP 38.53.31.229 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 12:38 Times Seen4635915 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.genceo.com/JS/Common.js	ScriptElement	21 kB	2023-08-27	2024-08-21
Pretty URL www.genceo.com/JS/Common.js IP 38.53.31.229 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-27 21:20 Last Seen2024-08-21 07:58 Times Seen137 Hash 3545f85448b4e28ef1c21ef1627d7df2 461b16708b0c4ad1c6107337e0d3721f4a4fac70 9abbe1832107aa38caf344262e338f00747982c82f505dddc850b01532171b5b Loading...

	www.genceo.com/js/jquery.3.0.0.min.old.js	ScriptElement	6.2 kB	2023-09-23	2024-08-21
Pretty URL www.genceo.com/js/jquery.3.0.0.min.old.js IP 38.53.31.229 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-23 20:40 Last Seen2024-08-21 05:55 Times Seen119 Hash eb866956a0b62ff59fa3c5147edea494 fafc89d48b5c9bb7e4e6fdf9e23ae130b456e574 11183ceea44cdc6ce9b9fa49547fd0655b81c4d799c78232fc18642609109bbc Loading...

	unknown	ScriptElement	502 B	2023-09-29	2024-08-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-29 12:57 Last Seen2024-08-21 05:32 Times Seen103 Hash dda7f45839b6b877dab4b9a960806688 7d76f9e6907f12031dcc621616e87fa6a08e5362 a08548b782ca6f1262cad6e9f28876be5cb3ef19c181e653cc0de114d1a3d3e1 Loading...

	www.genceo.com/Print.aspx?id=1452	ScriptElement	854 B	2023-08-27	2024-08-21
Pretty URL www.genceo.com/Print.aspx?id=1452 IP 38.53.31.229 ASN #54600 PEGTECHINC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-27 21:20 Last Seen2024-08-21 07:58 Times Seen149 Hash 37f329ed772b609622d18df38e0c5683 f24aa6c7a48b6d5e2dac2f4b070bb38b4f6b456a 30bdc4553c09375937b1c545ef1cea3e6a82b119f26ab4cf1108546b962eb617 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 1108f37d8f23d33bbf78e44862785dfd	9.2 kB	2023-09-23 20:40	2024-08-21 05:55
Pretty Observations First Seen2023-09-23 20:40 Last Seen2024-08-21 05:55 Times Seen117 Hash 1108f37d8f23d33bbf78e44862785dfd 09ff4b100527cb098809f1a59a9418623cebe5f9 3835725912ff26b7d3ef1f8a319e8e4aa8949ad55dcb0ee4db3a4790d26e7640 Loading...

		Size	First Seen	Last Seen
	#1 Write - 922fa56bd0eae3587d4b0e26cbbf40fe	283 B	2023-03-09 17:16	2025-04-10 19:58
Pretty Observations First Seen2023-03-09 17:16 Last Seen2025-04-10 19:58 Times Seen252 Hash 922fa56bd0eae3587d4b0e26cbbf40fe 8e23923ba83312e530dd7ee01bd521e8ec9bfe06 65203add0d5672576eca378e87473a083cfb33201e830972b3b8bcf28f197934 Loading...

	#2 Write - 1082686e1da7676d4c9fda52c3f68746	508 B	2023-06-09 21:40	2025-01-28 06:18
Pretty Observations First Seen2023-06-09 21:40 Last Seen2025-01-28 06:18 Times Seen124 Hash 1082686e1da7676d4c9fda52c3f68746 dbbb35d9cbd7cf4f80f0523b588a510aed3e2405 445c253e6a40432893ade672e4c89e08200249aa8234529860a8e476a0073353 Loading...

HTTP Transactions (19)

URL IP Response Size

www.genceo.com/Print.aspx?id=1452

38.53.31.229

71 kB

URL User Request GET
www.genceo.com/Print.aspx?id=1452
IP
38.53.31.229:0
ASN
#54600 PEGTECHINC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49331), with CRLF line terminators
Size
71 kB (71268 bytes)
Hash
df41183f1bc4634c0467822ded109581
a0ce99c419b242bcc4fff8e33481b321eaeba3b4
95f7b7ceb2c0010d171f09c84d7c820b58221737fb64fb9284443fd2184cc7c3

Detections

NIDS	Severity	Alert
suricata	high	ET WEB_CLIENT DRIVEBY EXE Embeded in Page Likely Evil M1
suricata	high	ET MALWARE PE EXE or DLL Windows file download Text
suricata	high	ET WEB_CLIENT Generic Attempted Executable Drop via VBScript

HTTP Headers

GET /Print.aspx?id=1452 HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:00 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

www.genceo.com/js/jquery.3.0.0.min.old.js

38.53.31.229

200 OK

6.2 kB

URL GET HTTP/1.1
www.genceo.com/js/jquery.3.0.0.min.old.js
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
ASCII text, with very long lines (6217)
Size
6.2 kB (6218 bytes)
Hash
eb866956a0b62ff59fa3c5147edea494
fafc89d48b5c9bb7e4e6fdf9e23ae130b456e574
11183ceea44cdc6ce9b9fa49547fd0655b81c4d799c78232fc18642609109bbc

HTTP Headers

GET /js/jquery.3.0.0.min.old.js HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Print.aspx?id=1452
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:01 GMT
Content-Type: application/javascript
Content-Length: 6218
Last-Modified: Wed, 20 Sep 2023 12:41:33 GMT
Connection: keep-alive
ETag: "650ae87d-184a"
Accept-Ranges: bytes

www.genceo.com/Template/Default/Skin/default.css

38.53.31.229

200 OK

10 kB

URL GET HTTP/1.1
www.genceo.com/Template/Default/Skin/default.css
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (375), with CRLF line terminators
Size
10 kB (10099 bytes)
Hash
0bb044422f54d86dd80a973f572f0589
ede78bef3bae59bb15fcbbe8b9c2e111a42ccd8d
23f6a9063f92f313f5b8f9dff6753734572a9c8d1cfd8b8a46e07b909b925458

HTTP Headers

GET /Template/Default/Skin/default.css HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Print.aspx?id=1452
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:01 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

www.genceo.com/Template/Default/Skin/article.css

38.53.31.229

200 OK

1.3 kB

URL GET HTTP/1.1
www.genceo.com/Template/Default/Skin/article.css
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
1.3 kB (1299 bytes)
Hash
12a9a63f28b0774d412f528f94e79c69
3e27eac7b5808076ec1c9788c5d25e23e84391e3
45c5d73194b384c2e5c30a57a167827f12fc224be790c99be7a96555ca0002fb

HTTP Headers

GET /Template/Default/Skin/article.css HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Print.aspx?id=1452
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:01 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

www.genceo.com/JS/Common.js

38.53.31.229

200 OK

21 kB

URL GET HTTP/1.1
www.genceo.com/JS/Common.js
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
21 kB (20762 bytes)
Hash
406a2d0f5f9f09cb1c71bff96dfdecbe
75d24a940b8ef79276c65eede00be63e1f1999b0
f7b907797d7a77a1ddfa83b6b5cdc17658c6dd89efa57e1db009c0f70317ceae

HTTP Headers

GET /JS/Common.js HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Print.aspx?id=1452
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:01 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive

www.genceo.com/Images/printpage.gif

38.53.31.229

200 OK

214 B

URL GET HTTP/1.1
www.genceo.com/Images/printpage.gif
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
GIF image data, version 89a, 14 x 14\012- data
Size
214 B (214 bytes)
Hash
58a0176c472354b0ce3a79d9d817f98e
18d6ceb6d8cdcfca9172445ddfd420478174c3cd
d56a31b4e592718334012fb95dc3c4d222404c64b47fe3c1ea3ff4160cdf2504

HTTP Headers

GET /Images/printpage.gif HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Print.aspx?id=1452
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:01 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

www.genceo.com/Images/pageclose.gif

38.53.31.229

200 OK

211 B

URL GET HTTP/1.1
www.genceo.com/Images/pageclose.gif
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
GIF image data, version 89a, 14 x 14\012- data
Size
211 B (211 bytes)
Hash
ce7d12d6fa17200182bbe626511117fb
f5fcfab61a9bb78b33bc5b6605cfaa7f96efb777
97e5141d35841fcda5f9b935df2613d35191222a1fcd923f4d5e785d7bc7249b

HTTP Headers

GET /Images/pageclose.gif HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Print.aspx?id=1452
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:01 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

www.genceo.com/Template/Default/Skin/Images/bodyBg.gif

38.53.31.229

200 OK

1.0 kB

URL GET HTTP/1.1
www.genceo.com/Template/Default/Skin/Images/bodyBg.gif
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
GIF image data, version 89a, 3 x 451\012- data
Size
1.0 kB (1012 bytes)
Hash
173db92c94389ed07da0dbaf6c387553
7c931543e76ab93b8b1545d4026e3994b82b5adf
8c9198294af4eac8ee300aa9e9b0e7f84944c17f95faa09f218441a89f22d1ab

HTTP Headers

GET /Template/Default/Skin/Images/bodyBg.gif HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Template/Default/Skin/default.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:01 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

www.genceo.com/ads/188/index.html

38.53.31.229

200 OK

1.1 kB

URL GET HTTP/1.1
www.genceo.com/ads/188/index.html
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
1.1 kB (1051 bytes)
Hash
7029ea159906ec3d1b26822ca103a0ba
89d27c9a2522b6060f56e9f97e47cc6c448413fd
561cfb2d594bdab804ce245f077ff79a5e9f23aab3afe4f44af58c775a8799d4

HTTP Headers

GET /ads/188/index.html HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Print.aspx?id=1452
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:01 GMT
Content-Type: text/html
Last-Modified: Wed, 20 Sep 2023 12:41:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"650ae87b-a57"
Content-Encoding: gzip

www.genceo.com/ads/188/css/yabo.min.css

38.53.31.229

200 OK

792 B

URL GET HTTP/1.1
www.genceo.com/ads/188/css/yabo.min.css
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/ads/188/index.html

File type
ASCII text, with very long lines (1813), with no line terminators
Size
792 B (792 bytes)
Hash
918bae3dde1f011116932555477e1ed2
7009536f864cf728b570c98cc00e062cb9c49e3d
fb4a01356d4ac1915eb79700ef4b8f407214f4411c8560596a034e2921397d07

HTTP Headers

GET /ads/188/css/yabo.min.css HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/ads/188/index.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:02 GMT
Content-Type: text/css
Last-Modified: Wed, 20 Sep 2023 12:41:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"650ae87b-715"
Content-Encoding: gzip

www.genceo.com/ads/188/css/diversion.min.css

38.53.31.229

200 OK

1.6 kB

URL GET HTTP/1.1
www.genceo.com/ads/188/css/diversion.min.css
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/ads/188/index.html

File type
ASCII text, with very long lines (6433), with no line terminators
Size
1.6 kB (1603 bytes)
Hash
6310ccef9e43e8246a8e52a586c9fd08
9f3865d5f70a00e8e45ab75fd49ae3dda0f36dc8
fb594b734f830514152af438c42cf80afc04f2446318861a67c28638afece90b

HTTP Headers

GET /ads/188/css/diversion.min.css HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/ads/188/index.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:02 GMT
Content-Type: text/css
Last-Modified: Wed, 20 Sep 2023 12:41:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"650ae87b-1921"
Content-Encoding: gzip

sdk.51.la/js-sdk-pro.min.js

47.246.44.205

200 OK

13 kB

URL GET HTTP/1.1
sdk.51.la/js-sdk-pro.min.js
IP
47.246.44.205:80
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
Unicode text, UTF-8 text, with very long lines (34110)
Size
13 kB (12846 bytes)
Hash
24bb520e9517f2ed3ed987b46aeaf723
846723563d7dd2bff3954f93633b11af0103adc8
d1f1bfe698f2ffb7b3e7a885a301d58f9554d45df0a31c3e8b53c84b33c80d27

HTTP Headers

GET /js-sdk-pro.min.js HTTP/1.1
Host: sdk.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 12846
Connection: keep-alive
Date: Thu, 21 Sep 2023 16:07:27 GMT
x-oss-request-id: 650C6A3F4EAD113135E809B9
x-oss-cdn-auth: success
Accept-Ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
Content-MD5: JLtSDpUX8u0+2Ye0aur3Iw==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1695312447
Via: cache15.l2de2[1289,1153,304-0,C], cache11.l2de2[1155,0], cache3.se1[0,0,200-0,H], cache8.se1[1,0]
ETag: "24BB520E9517F2ED3ED987B46AEAF723"
Last-Modified: Thu, 08 Jun 2023 02:24:34 GMT
Vary: Accept-Encoding
x-oss-hash-crc64ecma: 5143829838470429443
Content-Encoding: gzip
Age: 879335
X-Cache: HIT TCP_MEM_HIT dirn:7:153294850
X-Swift-SaveTime: Thu, 21 Sep 2023 16:07:27 GMT
X-Swift-CacheTime: 1296000
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
EagleId: 2ff62c9c16961917825775104e

www.genceo.com/favicon.ico

38.53.31.229

200 OK

36 kB

URL GET HTTP/1.1
www.genceo.com/favicon.ico
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type
MS Windows icon resource - 1 icon, 256x256, 24 bits/pixel\012- data
Size
36 kB (36117 bytes)
Hash
9ae64130b4f42aeac12203177af01ed1
dacf1fdbdd5f21569129fcd60941f6e78d8b4f22
f9221350a1b8b79252806963dad73460d812d584b0510160c097f70d44aaf72c

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/Print.aspx?id=1452
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:02 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

www.genceo.com/ads/188/js/jquery-1.11.0.min.js

38.53.31.229

200 OK

0 B

URL GET HTTP/1.1
www.genceo.com/ads/188/js/jquery-1.11.0.min.js
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/ads/188/index.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ads/188/js/jquery-1.11.0.min.js HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/ads/188/index.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:03 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive

collect-v6.51.la/v6/collect?dt=4

203.107.86.226

403

0 B

URL POST HTTP/1.1
collect-v6.51.la/v6/collect?dt=4
IP
203.107.86.226:80
ASN
#0

Requested by
http://www.genceo.com/Print.aspx?id=1452

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /v6/collect?dt=4 HTTP/1.1
Host: collect-v6.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Length: 320
Origin: http://www.genceo.com
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 
Date: Sun, 01 Oct 2023 20:23:03 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=f0fdce787ee864b033143a9f01e78b495ad48dc4b606aa990fee1e50c12a81a7; Path=/; HttpOnly
acw_tc=0a6fd24516961917831647355ee0b92776b9039b3eb6560a1e25904d0eee6c;path=/;HttpOnly;Max-Age=1800
Server: nginx
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: http://www.genceo.com
Access-Control-Allow-Credentials: true

www.genceo.com/ads/188/images/bg.png

38.53.31.229

200 OK

748 kB

URL GET HTTP/1.1
www.genceo.com/ads/188/images/bg.png
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/ads/188/index.html

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size
748 kB (747679 bytes)
Hash
831fbeb7829a96173d702f8b3b40cff8
7cfbd96de66270a564139495ccc68eeda69e46df
32901a7dcd216245b9fd09089f7627636380e77dc2f3f5879b51bee26ed61211

HTTP Headers

GET /ads/188/images/bg.png HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/ads/188/css/diversion.min.css
Cookie: __vtins__K0lycW9sct3IKS76=%7B%22sid%22%3A%20%22eac54cc4-dcd9-59e7-97d7-5a052f2ce546%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201696193583003%2C%20%22ct%22%3A%201696191783003%7D; __51uvsct__K0lycW9sct3IKS76=1; __51vcke__K0lycW9sct3IKS76=275af272-38f3-5c53-a90c-77b0a2b69415; __51vuft__K0lycW9sct3IKS76=1696191783008
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:03 GMT
Content-Type: image/png
Content-Length: 747679
Last-Modified: Wed, 20 Sep 2023 12:41:31 GMT
Connection: keep-alive
ETag: "650ae87b-b689f"
Accept-Ranges: bytes

www.genceo.com/ads/188/images/liner.png

38.53.31.229

200 OK

0 B

URL GET HTTP/1.1
www.genceo.com/ads/188/images/liner.png
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/ads/188/index.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ads/188/images/liner.png HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/ads/188/css/diversion.min.css
Cookie: __vtins__K0lycW9sct3IKS76=%7B%22sid%22%3A%20%22eac54cc4-dcd9-59e7-97d7-5a052f2ce546%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201696193583003%2C%20%22ct%22%3A%201696191783003%7D; __51uvsct__K0lycW9sct3IKS76=1; __51vcke__K0lycW9sct3IKS76=275af272-38f3-5c53-a90c-77b0a2b69415; __51vuft__K0lycW9sct3IKS76=1696191783008
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:04 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive

www.genceo.com/ads/188/images/icon01.png

38.53.31.229

200 OK

0 B

URL GET HTTP/1.1
www.genceo.com/ads/188/images/icon01.png
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/ads/188/index.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ads/188/images/icon01.png HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/ads/188/css/diversion.min.css
Cookie: __vtins__K0lycW9sct3IKS76=%7B%22sid%22%3A%20%22eac54cc4-dcd9-59e7-97d7-5a052f2ce546%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201696193583003%2C%20%22ct%22%3A%201696191783003%7D; __51uvsct__K0lycW9sct3IKS76=1; __51vcke__K0lycW9sct3IKS76=275af272-38f3-5c53-a90c-77b0a2b69415; __51vuft__K0lycW9sct3IKS76=1696191783008
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:04 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive

www.genceo.com/ads/188/images/logo.png

38.53.31.229

200 OK

0 B

URL GET HTTP/1.1
www.genceo.com/ads/188/images/logo.png
IP
38.53.31.229:80
ASN
#54600 PEGTECHINC

Requested by
http://www.genceo.com/ads/188/index.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ads/188/images/logo.png HTTP/1.1
Host: www.genceo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.genceo.com/ads/188/css/diversion.min.css
Cookie: __vtins__K0lycW9sct3IKS76=%7B%22sid%22%3A%20%22eac54cc4-dcd9-59e7-97d7-5a052f2ce546%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201696193583003%2C%20%22ct%22%3A%201696191783003%7D; __51uvsct__K0lycW9sct3IKS76=1; __51vcke__K0lycW9sct3IKS76=275af272-38f3-5c53-a90c-77b0a2b69415; __51vuft__K0lycW9sct3IKS76=1696191783008
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Oct 2023 20:23:04 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (19)

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type