Domain > xzspj.nc.gov.cn

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-01-17	120.72.45.196 (ClassC)
2026-02-16	124.238.251.150 (ClassC)

HTTP/1.1 403 ForbiddenDate: Mon, 16 Feb 2026 06:57:59 GMTConnection: keep-aliveContent-Length: 7382Connection: closeX-Via-JSL: 679faae,-Set-Cookie: __jsluid_h13340b85e93111304cf7533d7034d991; max-age31536000; path/; HttpOnlyX-Cache: error

!DOCTYPE html>html>head>meta charsetutf-8 />style>body{ background:#fff; font-family: microsoft yahei; color:#969696; font-size:14px;}.online-desc-con { text-align:center; }.r-tip01 { color: #333; font-size: 18px; display: block; text-align: center; width: 600px; padding: 0 10px; overflow: hidden; text-overflow: ellipsis; margin: 0 auto 15px; }.r-tip02 { color: #585858; font-size: 14px; display: block; margin-top: 20px; margin-bottom: 20px; }#notice-jiasule {  word-wrap: break-word;  word-break: normal;  color:#585858;  border:1px solid #ddd;  padding:0px 20px 0px 20px}img { border: 0; }.u-ico{ vertical-align: middle; margin-right: 12px;}.btn{ padding: 8px 22px; border-radius: 3px; border: 0; display: inline-block;vertical-align: middle;text-decoration: none;}.btn-g{ background-color: #61b25e; color: #fff;}.report {color: #858585; text-decoration: none;}.report:hover {text-decoration: underline; color: #0088CC;}hr{ border-top: 1px dashed #ddd;}center{ line-height: 48px; color: #919191;}.b-box {display: none;background: #0B6FD6;margin: -8px -8px 0 -8px;height: 32px;}.b-body {position: relative;left:50%;max-width: 1200px;transform: translateX(-50%);padding-top: 5px;white-space:nowrap;}.b-ico-box {display: inline-block;margin-right: 4px;}.b-ico {height: 18px;width: 18px;}.b-msg-box {display: inline-block;font-size: 14px;color: #fff;width: 96%;white-space:nowrap;overflow:hidden;}.b-msg {display: inline-block;font-size: 14px;color: #fff;padding-right: 20px;}#second {font-style: normal;}.dn {display: none;}/style>/head>body>div classb-box>div classb-body>div classb-ico-box>img classb-ico src/cdn-cgi/image/alt.svg alt>/div>div idmsg-box classb-msg-box>a idflink classb-msg href#>/a>a idslink classb-msg href#>/a>/div>/div>/div>div classonline-desc-con stylewidth:640px;padding-top:15px;margin:34px auto; >    img idwafblock alt stylemargin: 0 auto 17px auto; />    div idcontent_rendered>        span classr-tip01 iderror_403>/span>        span classr-tip01 iderror_403_en>/span>        div idnotice-jiasule>            p>当前网址：span idurl>/span>/p>            p>客户端特征：span iduser_agent>/span>/p>            p>拦截时间：span idnow>/span>  本次事件ID span idrule_id>/span>/p>        /div>        span classr-tip02>            img classu-ico alt src/cdn-cgi/image/guest.png />如果您是网站管理员，请登录知道创宇云防御             a classbtn btn-g iddetail-link href# target_blank>查看详情/a>             或者             a classreport idreport-link href# target_blank>反馈误报/a>        /span>        !-- span classr-tip02 dn idsecond-box>em idsecond>/em>秒后进入帮助页面/span> -->    /div>    hr />    center>client: span idclient_ip>/span>, server: 679faae, time: span idtime_error>/span>/center>/div>script>    void(function fuckie6(){if(location.hash && /MSIE 6/.test(navigator.userAgent) && !/jsl_sec/.test(location.href)){location.href  location.href.split(#)0 + &jsl_sec + location.hash}})();    var data  {time_error:16\/Feb\/2026:14:57:59 +0800,t_msg:,t_link:,display:false,error_403_en:Knownsec CloudWAF: Your request has been blocked due to suspected hacking,error_403_type:,rule_id:81000,error_403:,client_ip:52.40.234.105};    var from  encodeURIComponent(document.referrer.substr(0, 1024));    var rule_id  parseInt(datarule_id) || ;    var client_ip  dataclient_ip;    if (!(display in data) || datadisplay  true) {        var divs  document.getElementsByClassName(b-box);        for (var i  0; i  divs.length; i++) {            divsi.style.display  block;        }    }    var ref  encodeURIComponent(document.URL.substr(0, 1024));    document.getElementById(wafblock).src  /cdn-cgi/image/ + (dataerror_403_type || hacker) + .png;    document.getElementById(error_403).innerText  dataerror_403 || 创宇盾提示您：当前访问疑似黑客攻击，已被网站管理员设置为拦截;    document.getElementById(error_403_en).innerText  dataerror_403_en;    document.getElementById(url).innerText  document.URL.replace(/\/g,%3C).replace(/\>/g,%3E);    document.getElementById(user_agent).innerText  navigator.userAgent;    document.getElementById(now).innerText  new Date(new Date() - -8 * 3600000).toISOString().substr(0, 19).replace(T,  );    document.getElementById(rule_id).innerText  rule_id;    document.getElementById(client_ip).innerText  client_ip;    document.getElementById(time_error).innerText  datatime_error;    document.getElementById(detail-link).href  http://help.yunaq.com/feedback.html?from + from + &rule_id + rule_id + &client_ip + client_ip + &referrer + ref + #pus;    document.getElementById(report-link).href  http://help.yunaq.com/feedback.html?from + from + &rule_id + rule_id + &client_ip + client_ip + &referrer + ref + #hus;    // if (dataerror_403_type  pac || dataerror_403_type  frequency_high) {    //     var sbox  document.getElementById(second-box);    //     sbox.classList.remove(dn);    //     var second  2;    //     var ele  document.getElementById(second);    //     ele.innerText  second;    //     var link_url;    //     if (dataerror_403_type  pac) {    //         link_url  https://help.yunaq.com/pac.html;    //     } else if (dataerror_403_type  frequency_high) {    //         link_url  https://help.yunaq.com/limit_rate.html;    //     }    //     var eid  setInterval(function() {    //         second--;    //         ele.innerText  second;    //         if (second  0) {    //             clearInterval(eid);    //             sbox.outerHTML  ;    //             window.location.href  link_url;    //         }    //     }, 1000);    //     document.getElementById(detail-link).addEventListener(click, function() {    //         clearInterval(eid);    //         sbox.outerHTML  ;    //     });    //     document.getElementById(report-link).addEventListener(click, function() {    //         clearInterval(eid);    //         sbox.outerHTML  ;    //     });    // }    function getOffsetLimit(msgW, boxW, pad) {var limit  init  0;if (msgW+pad>boxW){limit  msgW+pad;if (msgW + pad - boxW > 20){init  pad}}else{limit  (msgW+pad)*2;init  -boxW}return {limit: limit, init: init}};    var fst  document.getElementById(flink);    var last  document.getElementById(slink);    fst.innerText  last.innerText  datat_msg;    fst.href  last.href  datat_link;    var msgW  fst.getBoundingClientRect().width;    var msgBox  document.getElementById(msg-box);    var boxW  msgBox.getBoundingClientRect().width;    var run  getOffsetLimit(msgW, boxW, 20);    var ofst  0;    function runner() {ofst  ofst > run.limit ? run.init : (ofst + 2);fst.style.transform  translateX(+(-ofst)+px);last.style.transform  translateX(+(-ofst)+px);};    setInterval(runner, 100);/script>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenDate: Mon, 16 Feb 2026 06:58:00 GMTConnection: keep-aliveContent-Length: 7382Connection: closeX-Via-JSL: 79c4080,-Set-Cookie: __jsluid_sbdb1f620d470951cab434ce37b915662; max-age31536000; path/; HttpOnly; SameSiteNone; secureX-Cache: error

!DOCTYPE html>html>head>meta charsetutf-8 />style>body{ background:#fff; font-family: microsoft yahei; color:#969696; font-size:14px;}.online-desc-con { text-align:center; }.r-tip01 { color: #333; font-size: 18px; display: block; text-align: center; width: 600px; padding: 0 10px; overflow: hidden; text-overflow: ellipsis; margin: 0 auto 15px; }.r-tip02 { color: #585858; font-size: 14px; display: block; margin-top: 20px; margin-bottom: 20px; }#notice-jiasule {  word-wrap: break-word;  word-break: normal;  color:#585858;  border:1px solid #ddd;  padding:0px 20px 0px 20px}img { border: 0; }.u-ico{ vertical-align: middle; margin-right: 12px;}.btn{ padding: 8px 22px; border-radius: 3px; border: 0; display: inline-block;vertical-align: middle;text-decoration: none;}.btn-g{ background-color: #61b25e; color: #fff;}.report {color: #858585; text-decoration: none;}.report:hover {text-decoration: underline; color: #0088CC;}hr{ border-top: 1px dashed #ddd;}center{ line-height: 48px; color: #919191;}.b-box {display: none;background: #0B6FD6;margin: -8px -8px 0 -8px;height: 32px;}.b-body {position: relative;left:50%;max-width: 1200px;transform: translateX(-50%);padding-top: 5px;white-space:nowrap;}.b-ico-box {display: inline-block;margin-right: 4px;}.b-ico {height: 18px;width: 18px;}.b-msg-box {display: inline-block;font-size: 14px;color: #fff;width: 96%;white-space:nowrap;overflow:hidden;}.b-msg {display: inline-block;font-size: 14px;color: #fff;padding-right: 20px;}#second {font-style: normal;}.dn {display: none;}/style>/head>body>div classb-box>div classb-body>div classb-ico-box>img classb-ico src/cdn-cgi/image/alt.svg alt>/div>div idmsg-box classb-msg-box>a idflink classb-msg href#>/a>a idslink classb-msg href#>/a>/div>/div>/div>div classonline-desc-con stylewidth:640px;padding-top:15px;margin:34px auto; >    img idwafblock alt stylemargin: 0 auto 17px auto; />    div idcontent_rendered>        span classr-tip01 iderror_403>/span>        span classr-tip01 iderror_403_en>/span>        div idnotice-jiasule>            p>当前网址：span idurl>/span>/p>            p>客户端特征：span iduser_agent>/span>/p>            p>拦截时间：span idnow>/span>  本次事件ID span idrule_id>/span>/p>        /div>        span classr-tip02>            img classu-ico alt src/cdn-cgi/image/guest.png />如果您是网站管理员，请登录知道创宇云防御             a classbtn btn-g iddetail-link href# target_blank>查看详情/a>             或者             a classreport idreport-link href# target_blank>反馈误报/a>        /span>        !-- span classr-tip02 dn idsecond-box>em idsecond>/em>秒后进入帮助页面/span> -->    /div>    hr />    center>client: span idclient_ip>/span>, server: 79c4080, time: span idtime_error>/span>/center>/div>script>    void(function fuckie6(){if(location.hash && /MSIE 6/.test(navigator.userAgent) && !/jsl_sec/.test(location.href)){location.href  location.href.split(#)0 + &jsl_sec + location.hash}})();    var data  {client_ip:52.40.234.105,time_error:16\/Feb\/2026:14:58:00 +0800,t_msg:,t_link:,display:false,error_403_en:Knownsec CloudWAF: Your request has been blocked due to suspected hacking,error_403:,rule_id:81000,error_403_type:};    var from  encodeURIComponent(document.referrer.substr(0, 1024));    var rule_id  parseInt(datarule_id) || ;    var client_ip  dataclient_ip;    if (!(display in data) || datadisplay  true) {        var divs  document.getElementsByClassName(b-box);        for (var i  0; i  divs.length; i++) {            divsi.style.display  block;        }    }    var ref  encodeURIComponent(document.URL.substr(0, 1024));    document.getElementById(wafblock).src  /cdn-cgi/image/ + (dataerror_403_type || hacker) + .png;    document.getElementById(error_403).innerText  dataerror_403 || 创宇盾提示您：当前访问疑似黑客攻击，已被网站管理员设置为拦截;    document.getElementById(error_403_en).innerText  dataerror_403_en;    document.getElementById(url).innerText  document.URL.replace(/\/g,%3C).replace(/\>/g,%3E);    document.getElementById(user_agent).innerText  navigator.userAgent;    document.getElementById(now).innerText  new Date(new Date() - -8 * 3600000).toISOString().substr(0, 19).replace(T,  );    document.getElementById(rule_id).innerText  rule_id;    document.getElementById(client_ip).innerText  client_ip;    document.getElementById(time_error).innerText  datatime_error;    document.getElementById(detail-link).href  http://help.yunaq.com/feedback.html?from + from + &rule_id + rule_id + &client_ip + client_ip + &referrer + ref + #pus;    document.getElementById(report-link).href  http://help.yunaq.com/feedback.html?from + from + &rule_id + rule_id + &client_ip + client_ip + &referrer + ref + #hus;    // if (dataerror_403_type  pac || dataerror_403_type  frequency_high) {    //     var sbox  document.getElementById(second-box);    //     sbox.classList.remove(dn);    //     var second  2;    //     var ele  document.getElementById(second);    //     ele.innerText  second;    //     var link_url;    //     if (dataerror_403_type  pac) {    //         link_url  https://help.yunaq.com/pac.html;    //     } else if (dataerror_403_type  frequency_high) {    //         link_url  https://help.yunaq.com/limit_rate.html;    //     }    //     var eid  setInterval(function() {    //         second--;    //         ele.innerText  second;    //         if (second  0) {    //             clearInterval(eid);    //             sbox.outerHTML  ;    //             window.location.href  link_url;    //         }    //     }, 1000);    //     document.getElementById(detail-link).addEventListener(click, function() {    //         clearInterval(eid);    //         sbox.outerHTML  ;    //     });    //     document.getElementById(report-link).addEventListener(click, function() {    //         clearInterval(eid);    //         sbox.outerHTML  ;    //     });    // }    function getOffsetLimit(msgW, boxW, pad) {var limit  init  0;if (msgW+pad>boxW){limit  msgW+pad;if (msgW + pad - boxW > 20){init  pad}}else{limit  (msgW+pad)*2;init  -boxW}return {limit: limit, init: init}};    var fst  document.getElementById(flink);    var last  document.getElementById(slink);    fst.innerText  last.innerText  datat_msg;    fst.href  last.href  datat_link;    var msgW  fst.getBoundingClientRect().width;    var msgBox  document.getElementById(msg-box);    var boxW  msgBox.getBoundingClientRect().width;    var run  getOffsetLimit(msgW, boxW, 20);    var ofst  0;    function runner() {ofst  ofst > run.limit ? run.init : (ofst + 2);fst.style.transform  translateX(+(-ofst)+px);last.style.transform  translateX(+(-ofst)+px);};    setInterval(runner, 100);/script>/body>/html>

Subdomains

Date	Domain	IP
anyi.nc.gov.cn	2026-02-12	111.62.149.134
sjj.nc.gov.cn	2026-02-09	27.155.113.162
xzspj.nc.gov.cn	2026-02-16	124.238.251.150
bnr.nc.gov.cn	2026-02-12	27.155.113.110
edu.nc.gov.cn	2026-02-10	116.211.128.151
www.nc.gov.cn	2023-07-19	118.212.233.222

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > xzspj.nc.gov.cn

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains