Overview

URLjs.9553.com/soft/tzjzt20zcj_20160825.rar?crazycache=1
IP221.235.190.99
ASNAS4134 Chinanet
Location China
Report completed2017-04-21 16:05:52 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com
Added / Verified Severity Host Comment
2017-04-212js.9553.com/soft/tzjzt20zcj_20160825.rar?crazycache=1Malware
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 221.235.190.99

Date UQ / IDS / BL URL IP
2017-04-28 15:34:110 - 0 - 1js.9553.com/soft/wangbao.v3.6.2_20151009.rar221.235.190.99
2017-04-28 14:44:070 - 0 - 1js.9553.com/soft/zmxy4zhizhefz.v0.2_20150706.rar221.235.190.99
2017-04-28 14:24:230 - 0 - 1zj.9553.com/soft/HA-HDTunePro_V5.5_20140615.rar221.235.190.99
2017-04-28 13:21:110 - 0 - 1js.9553.com/soft/qfwyjs_3.8_20150623.rar221.235.190.99
2017-04-28 12:52:050 - 0 - 1zj.9553.com/soft/ldqqyxrj_v8.1_20161130.rar221.235.190.99
2017-04-27 15:05:400 - 0 - 1zj.9553.com/soft/weixinjiefeng.all_20160321.rar221.235.190.99

Last 6 reports on ASN: AS4134 Chinanet

Date UQ / IDS / BL URL IP
2017-04-29 11:04:170 - 0 - 1down23.7r7z.com/down/setup_523i66b.exe221.234.40.46
2017-04-29 10:59:550 - 0 - 1xz1.uzzf.com/adesk2012zc.zip61.183.52.15
2017-04-29 10:53:240 - 0 - 1down23.7r7z.com/down/setup_524jehh.exe122.228.207.246
2017-04-29 10:53:190 - 0 - 1down23.7r7z.com/down/game_358b1cx.exe122.228.207.246
2017-04-29 10:51:270 - 0 - 1down23.7r7z.com/down/setup_540ezw5.exe122.228.207.246
2017-04-29 10:44:010 - 0 - 1hgsfgw.gov.cn/d/file/tzgg/2012-04-06/bfc5131bea850ef835db13a416970877.rar61.184.136.213

Last 6 reports on domain: js.9553.com

Date UQ / IDS / BL URL IP
2017-04-28 15:34:110 - 0 - 1js.9553.com/soft/wangbao.v3.6.2_20151009.rar221.235.190.99
2017-04-28 15:27:540 - 0 - 1js.9553.com/soft/jswbrzxt_v1.7_20160113.rar116.208.127.38
2017-04-28 14:44:070 - 0 - 1js.9553.com/soft/zmxy4zhizhefz.v0.2_20150706.rar221.235.190.99
2017-04-28 13:21:110 - 0 - 1js.9553.com/soft/qfwyjs_3.8_20150623.rar221.235.190.99
2017-04-28 12:02:060 - 0 - 1js.9553.com/soft/yjhipzs_20160614.rar116.208.127.38
2017-04-26 16:02:240 - 0 - 1js.9553.com/soft/mfwzsdfz_20160803.rar221.235.190.99



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
GET /soft/tzjzt20zcj_20160825.rar?crazycache=1 HTTP/1.1

Host: js.9553.com

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 221.235.190.99
HTTP/1.1 200 OK
Content-Type: application/x-rar-compressed
Server: nginx/1.9.13
Date: Fri, 21 Apr 2017 14:04:49 GMT
Content-Length: 726278
Last-Modified: Thu, 25 Aug 2016 02:57:30 GMT
Connection: keep-alive
Etag: "57be5e9a-b1506"
Accept-Ranges: bytes