Help
RSS
API
Feed
Maltego
Contact
Domain > 13w47o5078.goho.co
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
DNS Resolutions
Date
IP Address
2025-11-30
115.236.153.177
(
ClassC
)
Port 443
HTTP/1.1 200 OKCache-Control: privateContent-Type: text/html; charsetutf-8Expires: Sun, 30 Nov 2025 07:43:37 GMTServer: Microsoft-IIS/7.5Set-Cookie: ASP.NET_SessionIdzlimdmcogld450aoblxbx2yo; path/; HttpOnlyX-AspNet-Version: 4.0.30319X-Powered-By: ASP.NETAccess-Control-Allow-Methods: GET, PATCH, POST, DELETE, OPTIONSAccess-Control-Allow-Headers: accept, remember-me,x-requested-with, content-typeAccess-Control-Allow-Origin: *Date: Sun, 30 Nov 2025 07:44:37 GMTContent-Length: 16582 !DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head idhd1>meta http-equivContent-Type contenttext/html; charsetUTF-8 />title>/title>link relstylesheet typetext/css hrefResource/JavaScript/Extjs4.2/resources/ext-theme-gray/ext-theme-gray-all-debug.css />link relstylesheet typetext/css hrefResource/JavaScript/jQuery/jquery-ui-1.8.21/css/style.css?v29396 />link relstylesheet typetext/css hrefResource/CSS/newCSMMainCSS.css?v29396 />link relstylesheet typetext/css href../../Resource/CSS/Themes/templet/templet.css />script typetext/javascript srcResource/JavaScript/jQuery/jquery-1.7.2.min.js?v1>/script>script typetext/javascript srcResource/JavaScript/Extjs4.2/ext-all-debug.js?v5>/script>script typetext/javascript srcResource/JavaScript/Extjs4.2/ext-lang-zh_CN.js?v1>/script>script typetext/javascript srcResource/JavaScript/Controls/Calendar/WdatePicker.js?v3>/script>script typetext/javascript srcResource/JavaScript/store/store.min.js?v29396>/script>script typetext/javascript srcResource/JavaScript/MSTCommom.js?v29396>/script>script typetext/javascript srcResource/JavaScript/ModalDialog.js?v29396>/script>script typetext/javascript srcResource/JavaScript/WebScript.js?v29396>/script> script typetext/javascript srcResource/JavaScript/jKPM6.DateTime.js?v29396>/script> script typetext/javascript srcResource/JavaScript/jDefault.js?v29396>/script> script srcResource/JavaScript/WebEnterprise/jSecurity.js?v29396 typetext/javascript>/script> style typetext/css> body { font-size: 12px; color: #005BAC; text-align: center; padding: 0; margin: 0; } body { height: 94%; /* >94%ie部分机器有滚动条*/ } .userinput { border: 1px solid #bdbdbd; background: url( Resource/images/btnbg.gif ) repeat-x; width: 82px; height: 24px; cursor: pointer; text-align: center; padding-top: 2px; color: #333333; font-size: 12px; } #inner { width: 720px; height: 540px; margin: 0 auto; position: relative; /* for ie only */ } .logininput { border-width: 0px; height: 20px; line-height: 20px; width: 80px; margin-left: 3px; } .logininput2 { border-width: 0px; height: 20px; line-height: 20px; margin-left: 3px; width: 55px; } .STYLE_User { width: 96px; height: 26px; line-height: 26px; font-family: 宋体; font-size: 16px; font-weight: bold; text-align: center; background-color: #005bac; color: #fff; } .chkNew { height: 30px; width: 100px; } /style> script eventOnObjectReady(objObject,objAsyncContext) forfoo> if(objObject.IPEnabled true) { if(objObject.MACAddress ! null && objObject.MACAddress ! undefined) MACAddr objObject.MACAddress; if(objObject.IPEnabled && objObject.IPAddress(0) ! null && objObject.IPAddress(0) ! undefined) IPAddr objObject.IPAddress(0); } /script> script typetext/javascript> var MACAddr; var IPAddr; function init() { try { var isMobile !!navigator.userAgent.match(/AppleWebKit.*Mobile.*/); if (isMobile) return; var isIE MSTCommon.JudgeBrowser() IE; //if (!isIE) { // alert(建议使用IE8及以上版本登录系统!); // return; //} if (isIE) { var service locator.ConnectServer(); service.Security_.ImpersonationLevel 3; service.InstancesOfAsync(foo, Win32_NetworkAdapterConfiguration); } } catch (e) { alert(未将该站点设置成为可信任站点,请按照IE提示下载并执行导入注册表文件,然后关闭后重启打开IE!); var ifr document.getElementById(IFrame); ifr.src SiteRegister.aspx; } } function getAddr() { document.getElementById(hfMac).value unescape(MACAddr); document.getElementById(hfIp).value unescape(IPAddr); } function EncryptPwd() { var security new Security(); document.getElementById(txtPwd).value security.encMe(document.getElementById(txtPwd).value.Trim(), document.getElementById(hfBeinetKey).value.Trim()); } /script>base target_self />/head>body onloadMSTCommon.ShieldingEnterKey true;jDefault.BodyOnLoad();jDefault.InitDevice();jDefault.ClientTime();init();jDefault.OpenM6RegWindow(); onpastereturn false stylebackground-color: White;> object idlocator styleheight: 5px; classidCLSID:76A64158-CB41-11D1-8B02-00600806D9B6 viewastext> /object> object idfoo styleheight: 5px; classidCLSID:75718C9A-F029-11d1-A1AC-00C04FB6C223> /object> form methodpost action idForm1 onsubmitjavascript:return KPOnSubmit(event);>div classaspNetHidden>input typehidden name__VIEWSTATE id__VIEWSTATE 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 />/div>script typetext/javascript languageJavascript >;var popup2 document.createElement(DIV);popup2.id LoadingDiv;popup2.style.displaynone; popup2.innerHTML input idisDisableSubmit typehidden />div styleposition:absolute; right:43%; top:40%; background:#C5C5C5;z-index:1000;>div styleposition:relative; font-size:13px; background:#F0F7FA; padding:6px 8px; border:solid 1px #84AA00; color:#19538E;>img srcResource/Images/Loading.gif border0 alignabsmiddle>span idLoadingDivTip>正在加载系统,请稍候.../span>/img>/div>/div>;document.body.insertBefore(popup2,document.body.firstChild);;/script> table cellpadding0 cellspacing0 stylewidth: 100%; height: 100%;> tr> td> div idinner> table idtbBackGroud cellpadding0 cellspacing0 stylewidth:720px;height:540px;text-align:left;background-image:url(Resource/CSS/Themes/login.jpg);> tr> td>/td> /tr> tr> td colspan2> label idlblVersion styleposition: absolute; font-family: '微软雅黑'; font-size: 14px; left: 395px; top: 260px; color: black; font-weight: 600>/label> /td> /tr> tr styleposition: absolute; top: 380px; left: 0;> td valigntop> table cellpadding0 cellspacing0 width312px stylefloat: left;> tr styleheight: 30px; line-height: 30px; vertical-align: middle;> td stylepadding-right: 9px alignright valignmiddle> div classSTYLE_User infoColor> 用户名: /div> /td> td stylewidth: 96px; alignleft valignmiddle> input nametxtLoginName typetext maxlength20 idtxtLoginName autocompleteoff title stylewidth:96px;background-color:; /> /td> td stylewidth: 14px;> /td> /tr> tr styleheight: 30px; line-height: 30px; vertical-align: middle;> td stylepadding-right: 9px alignright valignmiddle> div classSTYLE_User infoColor> 密 码: /div> /td> td alignleft valignmiddle> input autocompleteoff nametxtPwd typepassword maxlength100 idtxtPwd autocompleteoff stylewidth:96px;background-color:; /> /td> td alignleft valignmiddle> /td> /tr> tr styleheight: 30px; line-height: 30px; vertical-align: middle;> td stylepadding-right: 9px alignright> div classSTYLE_User infoColor> 验证码: /div> /td> td alignleft valignmiddle> input nametxtValidate typetext maxlength4 idtxtValidate autocompleteoff title stylewidth:96px;background-color:; /> /td> td alignleft valignmiddle> /td> /tr> /table> table width160px cellpadding0 cellspacing0 stylefloat: left;> tr styleheight: 30px; line-height: 30px; vertical-align: middle;> td colspan2 styleheight: 24px; line-height: 24px;> input oldValue typehidden namehfIkey idhfIkey /> input oldValue typehidden namehfClientTime idhfClientTime /> input oldValue typehidden namehfMac idhfMac /> input oldValue typehidden namehfIp idhfIp /> input oldValue typehidden namehfIsNeedRegisteredNetLicense idhfIsNeedRegisteredNetLicense value0 /> /td> /tr> tr styleheight: 30px; line-height: 30px; vertical-align: middle;> td stylewidth: 80px; height: 24px; line-height: 24px; alignleft valignmiddle> input typeimage namebtnLogin idbtnLogin srcResource/CSS/Themes/loginBtn.jpg onclickjDefault.InitDevice();jDefault.ClientTime();getAddr();EncryptPwd();WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnLogin", "", true, "LOGIN", "", false, false)) stylewidth: 72px; height: 24px; /> /td> td stylewidth: 80px; height: 24px; line-height: 24px; alignleft valignmiddle> input typeimage namebtnReset idbtnReset srcResource/CSS/Themes/cancelBtn.jpg onclickForm1.reset();return false;WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnReset", "", true, "LOGIN", "", false, false)) stylewidth: 69px; height: 24px; /> /td> /tr> tr styleheight: 30px; line-height: 30px; vertical-align: middle;> td colspan2> table stylemargin-left: -2px;> tr stylepadding-top: 4px;> td colspan2 styleheight: 24px; line-height: 24px; text-align: left; alignleft valignmiddle> img srcascx/ValidateCodeHandler.ashx?r0.109662380586221 idctrlValidateCode_imgCode styleposition: static; top: -49%; left: -50%; vertical-align: top; cursor: hand; onclickvar rnd Math.random() * 1000000; this.src'ascx/ValidateCodeHandler.ashx?'+rnd alt看不清吗?点击我刷新 /> /td> /tr> /table> /td> /tr> tr> td colspan2>/td> /tr> /table> /td> /tr>/table> iframe idIFrame width0 height0>/iframe> /div> /td> /tr> /table> div> /div> input oldValue typehidden namehfBeinetKey idhfBeinetKey value0.196867586670847 /> input oldValue typehidden namehfPrevSessionCode idhfPrevSessionCode /> input oldValue typehidden namehfToken idhfToken /> input oldValue typehidden namehfUrlBefore idhfUrlBefore /> script typetext/javascript> document.getElementById(hfUrlBefore).value MSTCommon.GetUrlBefore(); /script> script typetext/javascript>//!CDATAHideLoading();//>/script>script typetext/javascript srcResource/JavaScript/BottomFunction.js?v29396>/script>link relstylesheet typetext/css hrefResource/CSS/Themes/templet/defaultViSetting.css />link relstylesheet typetext/css hrefResource/CSS/Themes/20200731164351.css />script typetext/javascript srcResource/JavaScript/WebEnterprise/Common/jChineseFirstPY.js?v2>/script>/form>/body>/html>
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]