Play interactive tourEdit tour

Windows Analysis Report
http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35dd

Overview

General Information

Sample URL:	http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35dd
Analysis ID:	680978
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Uses known network protocols on non-standard ports

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Compliance

Creates license or readme file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\6140_158424456\LICENSE.txt

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 117.184.226.43:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.184.226.43:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.184.226.1:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.184.226.1:443 -> 192.168.2.4:49822 version: TLS 1.2

Networking

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70
Source: unknown	TCP traffic detected without corresponding DNS query: 117.184.226.70

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govPortals/common/css/common_new.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/head/head.jsp HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/wzabst.png HTTP/1.1Host: lxm.qrcode.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/ico1.png HTTP/1.1Host: lxm.qrcode.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/css/footer.css?v=1.0.0.2 HTTP/1.1Host: lxm.qrcode.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/ico2.png HTTP/1.1Host: lxm.qrcode.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/foot-icp.png HTTP/1.1Host: lxm.qrcode.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/ico3.png HTTP/1.1Host: lxm.qrcode.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govPortals/common/css/common_new.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/head/head.jsp HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/foot-ga.png HTTP/1.1Host: lxm.qrcode.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/footer.jpg HTTP/1.1Host: lxm.qrcode.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lxm.qrcode.sh.gov.cn/uc/zwdtSW/dphead/css/footer.css?v=1.0.0.2Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/plugin/bootstrap/css/bootstrap.min.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/plugin/fontawesome/css/font-awesome.min.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/css/head.css?1660049840950 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govPortals/common/css/common_new.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Range: bytes=17018-17018If-Range: "62da8dd3-d6d9"
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/plugin/jquery-1.7.2.min.js HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govPortals/common/css/common_new.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Range: bytes=17018-55000If-Range: "62da8dd3-d6d9"
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/head/header.js?1660049840950 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/data/dept.json HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveAccept: application/json, text/javascript, */*; q=0.01User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36X-Requested-With: XMLHttpRequestSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/sublogo.png HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/common-logo.png HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/css/head.css?1660049840950Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/header-icon-03.png HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/css/head.css?1660049840950Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/ico2.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: lxm.qrcode.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/wzabst.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: lxm.qrcode.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/location.png HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/css/head.css?1660049840950Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/usercenter/userinfo.jsp HTTP/1.1Host: zwdtuser.sh.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/plugin/bootstrap/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveOrigin: https://zwdt.sh.gov.cnUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zwdt.sh.gov.cn/zwdtSW/dphead/plugin/bootstrap/css/bootstrap.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/ico1.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: lxm.qrcode.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/ico3.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: lxm.qrcode.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/foot-icp.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: lxm.qrcode.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/foot-ga.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: lxm.qrcode.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /uc/zwdtSW/dphead/img/footer.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: lxm.qrcode.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/sublogo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: zwdt.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/common-logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: zwdt.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/header-icon-03.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: zwdt.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/location.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: zwdt.sh.gov.cn
Source: global traffic	HTTP traffic detected: GET /exposure/jiucuo.html?site_code=3100000044&url=https%3A%2F%2Fwww.shanghai.g HTTP/1.1Host: zfwzgl.www.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.g HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://zfwzgl.www.gov.cn/exposure/jiucuo.html?site_code=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /check_web/css/master_cn_v1.0.css HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/css/jquery.dataTables_themeroller.css HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/css/EDM.css HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/flexslider/flexslider.css HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/css/xinxikf.css HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/css/find_mistakes.css HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/css/base.css HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/jquery/jquery-1.10.2.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/kindeditor/themes/default/default.css HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/jquery/jquery.validate.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/jquery/jquery.form.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/jquery/jquery.dataTables.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/jquery/fnReloadAjax.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/placeholder.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/util.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/jquery.tips.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/images/jiuc_header.jpg HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/css/find_mistakes.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/images/jc/jiuc_img8.jpg HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/images/right_doub.png HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/css/find_mistakes.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/images/jc/red_asterisk.png HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/css/find_mistakes.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/jquery/jquery.select.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /2016public/bottom.htm HTTP/1.1Host: www.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/css/base.css HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.gov.cn/2016public/bottom.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/css/common.css HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.gov.cn/2016public/bottom.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/guowuyuan/20190301gwykhd/images/icon_1234.png HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gov.cn/2016public/bottom.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/guowuyuan/20190301gwykhd/images/icon_724.png HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gov.cn/2016public/bottom.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /check_web/js/kindeditor/kindeditor-all.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/js/jquery-1.8.3.min.js HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.gov.cn/2016public/bottom.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/guowuyuan/20190301gwykhd/images/icon_1434.png HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gov.cn/2016public/bottom.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/guowuyuan/20190301gwykhd/images/icon_1534.png HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gov.cn/2016public/bottom.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/images/index/2018guohui03.png HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gov.cn/2016public/bottom.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govweb/xhtml/2016gov/images/public/select_jiantou.jpg HTTP/1.1Host: www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.gov.cn/govweb/xhtml/2016gov/css/common.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /check_web/js/flexslider/jquery.flexslider.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/js/slider.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/map/js/echarts.js HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /hm.js?3a125f686abed6dc0209db1fb2efac2b HTTP/1.1Host: hm.baidu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /check_web/js/jcInfoNew.js?v=202002181 HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /check_web/kaptcha.jpg?1563507290545 HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01
Source: global traffic	HTTP traffic detected: GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=913&et=0&ja=0&ln=en-gb&lo=0&rnd=871009239&si=3a125f686abed6dc0209db1fb2efac2b&su=https%3A%2F%2Fzfwzgl.www.gov.cn%2Fexposure%2Fjiucuo.html%3Fsite_code%3D3100000044%26url%3Dhttps%253A%252F%252Fwww.shanghai.g&v=1.2.96&lv=1&sn=48325&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fzfwzzc.www.gov.cn%2Fcheck_web%2FerrorInfo%2FjcInfoNew%3FsiteCode%3D3100000044%26url%3Dhttps%253A%252F%252Fwww.shanghai.g&tt=%E6%88%91%E8%A6%81%E6%89%BE%E9%94%99 HTTP/1.1Host: hm.baidu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: HMACCOUNT_BFESS=60A9DFC3875D1EBF
Source: global traffic	HTTP traffic detected: GET /check_web/errorInfo_querySearch.action?sEcho=1&iColumns=7&sColumns=%2C%2C%2C%2C%2C%2C&iDisplayStart=0&iDisplayLength=10&mDataProp_0=dataNumber&sSearch_0=&bRegex_0=false&bSearchable_0=true&bSortable_0=false&mDataProp_1=sitecode&sSearch_1=&bRegex_1=false&bSearchable_1=true&bSortable_1=false&mDataProp_2=wzmc&sSearch_2=&bRegex_2=false&bSearchable_2=true&bSortable_2=false&mDataProp_3=problem_id&sSearch_3=&bRegex_3=false&bSearchable_3=true&bSortable_3=false&mDataProp_4=bgdate&sSearch_4=&bRegex_4=false&bSearchable_4=true&bSortable_4=false&mDataProp_5=blzt&sSearch_5=&bRegex_5=false&bSearchable_5=true&bSortable_5=false&mDataProp_6=chakan&sSearch_6=&bRegex_6=false&bSearchable_6=true&bSortable_6=false&sSearch=&bRegex=false&iSortCol_0=0&sSortDir_0=asc&iSortingCols=1&status=0%2C1%2C5%2C6%2C7%2C8%2C9%2C16%2C17%2C18&sitecodebg=&problemIdbg=&tt=Tue+Aug+09+2022+14%3A57%3A55+GMT%2B0200+(Central+European+Summer+Time)&size=10&pos=1&pageNo=1&_t=1660049875337 HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveAccept: application/json, text/javascript, */*; q=0.01User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36X-Requested-With: XMLHttpRequestSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; Hm_lvt_3a125f686abed6dc0209db1fb2efac2b=1660049875; Hm_lpvt_3a125f686abed6dc0209db1fb2efac2b=1660049875
Source: global traffic	HTTP traffic detected: GET /check_web/images/jc/bgt.png HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/css/find_mistakes.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; Hm_lvt_3a125f686abed6dc0209db1fb2efac2b=1660049875; Hm_lpvt_3a125f686abed6dc0209db1fb2efac2b=1660049875
Source: global traffic	HTTP traffic detected: GET /check_web/images/magnify-icon.png HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/css/find_mistakes.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; Hm_lvt_3a125f686abed6dc0209db1fb2efac2b=1660049875; Hm_lpvt_3a125f686abed6dc0209db1fb2efac2b=1660049875
Source: global traffic	HTTP traffic detected: GET /check_web/images/jc/down_i.png HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/css/find_mistakes.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; Hm_lvt_3a125f686abed6dc0209db1fb2efac2b=1660049875; Hm_lpvt_3a125f686abed6dc0209db1fb2efac2b=1660049875
Source: global traffic	HTTP traffic detected: GET /check_web/kaptcha.jpg?1660049875267 HTTP/1.1Host: zfwzzc.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzzc.www.gov.cn/check_web/errorInfo/jcInfoNew?siteCode=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=9B1898D213B6788FD98B51B0F20C72C8.tomcat-gongkai-b01; Hm_lvt_3a125f686abed6dc0209db1fb2efac2b=1660049875; Hm_lpvt_3a125f686abed6dc0209db1fb2efac2b=1660049875
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zfwzgl.www.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zfwzgl.www.gov.cn/exposure/jiucuo.html?site_code=3100000044&url=https%3A%2F%2Fwww.shanghai.gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35dd HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/resources/bootstrap-3.3.5/css/bootstrap.min.css HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/resources/layer/2.5/css/layui.css HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/fillform/onething-city2/css/index.css HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/fillform/common/js/jquery-1.11.0.min.js HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /zwdtSW/plugin/fontawesome/css/font-awesome.min.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /govPortals/common/css/common_new.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/head/head.jsp HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/foot/foot.html HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/fillform/notity/js/vue.min.js HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/resources/bootstrap-3.3.5/js/bootstrap.min.js HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/common/js/version.js?time=0.4290670805374541 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/plugin/bootstrap/css/bootstrap.min.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/plugin/fontawesome/css/font-awesome.min.css HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/css/head.css?1660049838314 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/plugin/jquery-1.7.2.min.js HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/resources/layer/2.5/layui.js HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/head/header.js?1660049838314 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/resources/layer/2.5/lay/modules/layer.js HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/head/head.jsp HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/common/js/version.js?time=0.7040889451629797 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/foot/foot.htmlAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/resources/layer/2.5/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /ac-guide-ext/resources/layer/2.5/lay/modules/upload.js HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: JSESSIONID=BCD46D732791F2B858868A31117F5A8E
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/css/head.css?1660049839811 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/head/header.js?1660049839811 HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /zwdtSW/dphead/img/sublogo.png HTTP/1.1Host: zwdt.sh.gov.cnConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Referer: http://zwdt.sh.gov.cn/zwdtSW/dphead/head/head.jspAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 117.184.226.70:9022Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Referer: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35ddAccept-Encoding: gzip, deflateAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 09 Aug 2022 12:58:37 GMTContent-Type: text/html; charset=utf-8Content-Length: 522Connection: closeServer: elb

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.15.6.1 CrowDate: Tue, 09 Aug 2022 12:57:25 GMTContent-Type: text/htmlContent-Length: 562Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 35 2e 36 2e 31 20 43 72 6f 77 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.15.6.1 Crow</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->

URLs found in memory or binary data

Source: History Provider Cache.0.dr	String found in binary or memory: http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=1131
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr, craw_window.js0.0.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://apis.google.com
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr	String found in binary or memory: https://content-autofill.googleapis.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: 4e795b3c-3c2c-49a8-80bb-0db96d6ccb7b.tmp.1.dr, 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 321675e0-8103-480a-a7e8-b38cce85d665.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://dns.google
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: craw_window.js.0.dr, craw_background.js.0.dr, craw_window.js0.0.dr, craw_background.js0.0.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr, craw_window.js0.0.dr, manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://play.google.com
Source: 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://r5---sn-h0jeln7l.gvt1.com
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://redirector.gvt1.com
Source: craw_window.js.0.dr, craw_window.js0.0.dr, manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: craw_window.js.0.dr, craw_background.js.0.dr, craw_window.js0.0.dr, craw_background.js0.0.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.0.dr, craw_window.js0.0.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr, craw_window.js0.0.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr, craw_window.js0.0.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr, craw_window.js0.0.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr, craw_background.js0.0.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: craw_window.js.0.dr, craw_background.js.0.dr, 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, craw_window.js0.0.dr, craw_background.js0.0.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr, manifest.json2.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: 27decaa4-e983-4dfb-b2f0-27c2c068c25f.tmp.1.dr, 1c8eee4e-6528-4e49-a6c0-212bc86c9990.tmp.1.dr	String found in binary or memory: https://www.gstatic.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 117.184.226.43:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.184.226.43:443 -> 192.168.2.4:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.184.226.1:443 -> 192.168.2.4:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.184.226.1:443 -> 192.168.2.4:49822 version: TLS 1.2

System Summary

Creates temporary files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\3f482a4b-2899-4262-be89-6ad22fc4361c.tmp

Jump to behavior

Classification label

Source: classification engine

Classification label: sus20.troj.win@39/159@21/17

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1588,1720915609517302198,2750695470635868226,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1960 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35dd
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1588,1720915609517302198,2750695470635868226,131072 --lang=en-GB --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1960 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://117.184.226.70:9022/ac-guide-ext/fillform/onething/main.do?oneCode=310102144000&itemCode=113101066887499677331010214400001&access_token=43b263fc-3d1d-46c0-91a2-e154caad35dd
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-62F259A9-17FC.pma

Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

Creates license or readme file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\6140_158424456\LICENSE.txt

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9022
Source: unknown	Network traffic detected: HTTP traffic on port 9022 -> 49748