Overview

URL dl.kkdownload.com/kzsx/KuaiZip_Setup_1430448341_sx_002.exe
IP121.194.7.3
ASNAS4538 China Education and Research Network Center
Location China
Report completed2018-12-29 09:02:26 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-29 2 dl.kkdownload.com/kzsx/KuaiZip_Setup_1430448341_sx_002.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 121.194.7.3

Date UQ / IDS / BL URL IP
2019-02-25 11:00:28 +0100
0 - 0 - 1 sp.ulxue.com/Uploads/apk/2/def.apk 121.194.7.3
2018-12-29 11:28:12 +0100
0 - 0 - 1 sp.ulxue.com/Uploads/apk/1/5577/233946.apk 121.194.7.3
2018-12-26 03:01:55 +0100
0 - 0 - 1 i.kpzip.com/n/tui/brush/v1.0.0.1/brush-9.exe 121.194.7.3
2018-12-24 06:24:45 +0100
0 - 0 - 1 odynuanru.bkt.clouddn.com/yueren.apk 121.194.7.3
2018-12-11 19:58:39 +0100
0 - 0 - 1 down1.xiaoyu.shzhanmeng.com/tui/tips/v1.1.8.2 (...) 121.194.7.3
2018-11-24 05:03:30 +0100
0 - 0 - 1 rtrt.zhudazhanzuiman.com/ysbb_915871002_psign (...) 121.194.7.3
2018-09-22 02:02:41 +0200
0 - 0 - 1 sp.ulxue.com/Uploads/apk/1/5577/234941.apk 121.194.7.3
2018-05-22 17:51:24 +0200
0 - 0 - 1 sp.ulxue.com/Uploads/apk/1/5577/263225.apk 121.194.7.3
2018-05-05 08:02:13 +0200
0 - 0 - 1 xza.198424.com/hshdhydamm.apk 121.194.7.3
2018-05-05 05:35:11 +0200
0 - 0 - 1 xza.198424.com/zskcxxxrj.apk 121.194.7.3

Last 10 reports on ASN: AS4538 China Education and Research Network Center

Date UQ / IDS / BL URL IP
2019-06-25 20:28:40 +0200
0 - 0 - 0 rcb.hfut.edu.cn 121.251.19.228
2019-06-21 00:29:54 +0200
0 - 0 - 0 bbs.xjtu.edu.cn 202.117.1.8
2019-06-18 11:05:30 +0200
0 - 0 - 0 bbs.xjtu.edu.cn 202.117.1.8
2019-06-14 10:01:58 +0200
0 - 0 - 0 bbs.xjtu.edu.cn 202.117.1.8
2019-06-10 14:23:17 +0200
0 - 0 - 1 xy.scau.edu.cn/yyx/yyxf/ 202.116.160.44
2019-06-10 10:33:42 +0200
0 - 0 - 4 eco.hkxy.edu.cn/notice/02201.html 59.68.228.250
2019-06-09 12:49:40 +0200
0 - 0 - 4 dxit.sdjtu.edu.cn/articleview/102 211.64.120.85
2019-06-09 10:11:35 +0200
0 - 0 - 1 jsj.hkxy.edu.cn/xuegongzaixian/xueyuanxinwen/ (...) 59.68.228.250
2019-06-09 10:11:34 +0200
0 - 0 - 1 jsj.hkxy.edu.cn/xuegongzaixian/xueyuanxinwen/ (...) 59.68.228.250
2019-06-09 10:09:41 +0200
0 - 0 - 1 jsj.hkxy.edu.cn/xuegongzaixian/xueyuanxinwen/ (...) 59.68.228.250

No other reports on domain: kkdownload.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /kzsx/KuaiZip_Setup_1430448341_sx_002.exe HTTP/1.1 
Host: dl.kkdownload.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware