Overview

URL dl.kkdownload.com/kzsx/KuaiZip_Setup_1430448341_sx_002.exe
IP121.194.7.3
ASNAS4538 China Education and Research Network Center
Location China
Report completed2018-12-29 09:02:26 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-29 2 dl.kkdownload.com/kzsx/KuaiZip_Setup_1430448341_sx_002.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 121.194.7.3

Date UQ / IDS / BL URL IP
2019-02-25 11:00:28 +0100
0 - 0 - 1 sp.ulxue.com/Uploads/apk/2/def.apk 121.194.7.3
2018-12-29 11:28:12 +0100
0 - 0 - 1 sp.ulxue.com/Uploads/apk/1/5577/233946.apk 121.194.7.3
2018-12-26 03:01:55 +0100
0 - 0 - 1 i.kpzip.com/n/tui/brush/v1.0.0.1/brush-9.exe 121.194.7.3
2018-12-24 06:24:45 +0100
0 - 0 - 1 odynuanru.bkt.clouddn.com/yueren.apk 121.194.7.3
2018-12-11 19:58:39 +0100
0 - 0 - 1 down1.xiaoyu.shzhanmeng.com/tui/tips/v1.1.8.2 (...) 121.194.7.3
2018-11-24 05:03:30 +0100
0 - 0 - 1 rtrt.zhudazhanzuiman.com/ysbb_915871002_psign (...) 121.194.7.3
2018-09-22 02:02:41 +0200
0 - 0 - 1 sp.ulxue.com/Uploads/apk/1/5577/234941.apk 121.194.7.3
2018-05-22 17:51:24 +0200
0 - 0 - 1 sp.ulxue.com/Uploads/apk/1/5577/263225.apk 121.194.7.3
2018-05-05 08:02:13 +0200
0 - 0 - 1 xza.198424.com/hshdhydamm.apk 121.194.7.3
2018-05-05 05:35:11 +0200
0 - 0 - 1 xza.198424.com/zskcxxxrj.apk 121.194.7.3

Last 10 reports on ASN: AS4538 China Education and Research Network Center

Date UQ / IDS / BL URL IP
2019-04-24 05:01:39 +0200
0 - 0 - 1 lncc.jiaozhichu.com/ksxt/files/plugins.exe 202.199.184.45
2019-04-22 17:03:53 +0200
0 - 0 - 1 lncc.jiaozhichu.com/ksxt/files/plugins.exe 202.199.184.45
2019-04-21 20:50:22 +0200
0 - 0 - 0 cgma.scu.edu.cn/CTLPScanner/ 202.115.43.69
2019-04-21 02:53:26 +0200
0 - 0 - 1 hkxy.edu.cn/school/showarticle.asp 59.68.228.250
2019-04-20 20:05:06 +0200
0 - 0 - 1 hkxy.edu.cn/jpkc/jjc/book/03/033.pdf 59.68.228.250
2019-04-20 04:31:47 +0200
0 - 0 - 1 cd.md.cmbst.cn/offer/20181229/201812291315199.apk 222.24.122.123
2019-04-19 15:03:02 +0200
0 - 0 - 0 210.45.123.200 210.45.123.200
2019-04-19 14:37:25 +0200
0 - 0 - 0 bbs.xjtu.edu.cn 202.117.1.8
2019-04-18 19:33:28 +0200
0 - 0 - 1 staff.ustc.edu.cn/~billzeng/ns/chapter07.zip 202.38.64.11
2019-04-18 16:50:01 +0200
0 - 0 - 3 bbs.stuhome.net/attachment/Mon_0810/70_2189_7 (...) 202.115.22.221

No other reports on domain: kkdownload.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /kzsx/KuaiZip_Setup_1430448341_sx_002.exe HTTP/1.1 
Host: dl.kkdownload.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware