Overview

URL down.xiazai2.net/cx/160225/2/CD-CG-@96_208969.exe
IP121.43.97.175
ASNAS37963 Hangzhou Alibaba Advertising Co.,Ltd.
Location China
Report completed2019-01-18 15:47:17 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-01-18 2 down.xiazai2.net/cx/160225/2/CD-CG-@96_208969.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 121.43.97.175

Date UQ / IDS / BL URL IP
2019-04-20 13:07:20 +0200
0 - 0 - 1 down.xiazai2.net/cx/1508314/fx168%D6%BB@66_68 (...) 121.43.97.175
2019-04-20 12:39:17 +0200
0 - 0 - 3 down.xiazai2.net/cx/1508314/360%28360%29v6.5. (...) 121.43.97.175
2019-04-20 04:37:05 +0200
0 - 0 - 3 down.xiazai2.net/cx/1508311/android@59_47217.exe 121.43.97.175
2019-04-20 04:37:05 +0200
0 - 0 - 4 down.xiazai2.net/cx/1508311/microsoft@59_11655.exe 121.43.97.175
2019-04-20 04:37:04 +0200
0 - 0 - 3 down.xiazai2.net/cx/1508311/adobeacrobatxipro (...) 121.43.97.175
2019-04-20 04:37:02 +0200
0 - 0 - 4 down.xiazai2.net/cx/1508314/udpeeipaeoudpfloo (...) 121.43.97.175
2019-04-20 04:37:00 +0200
0 - 0 - 4 down.xiazai2.net/cx/1508314/advancedofficepas (...) 121.43.97.175
2019-04-20 04:36:55 +0200
0 - 0 - 1 down.xiazai2.net/cx/1508314/corelpainter12auo (...) 121.43.97.175
2019-04-20 04:36:55 +0200
0 - 0 - 1 down.xiazai2.net/cx/1508314/aftereffectscs6%E (...) 121.43.97.175
2019-04-20 04:36:54 +0200
0 - 0 - 1 down.xiazai2.net/cx/1508314/v1.0@54_116-40138.exe 121.43.97.175

Last 10 reports on ASN: AS37963 Hangzhou Alibaba Advertising Co.,Ltd.

Date UQ / IDS / BL URL IP
2019-04-20 14:41:39 +0200
0 - 0 - 1 28904.xc.41gw.com/xiaz/%D1%B6qq@155264_3161.exe 120.27.186.114
2019-04-20 14:40:50 +0200
0 - 0 - 1 28869.xc.41gw.com/xiaz/autocad2014%20%C4%B0@3 (...) 120.27.186.114
2019-04-20 14:39:44 +0200
0 - 0 - 1 28809.xc.41gw.com/xiaz/aauto@65358_54145.exe 120.27.186.114
2019-04-20 14:39:26 +0200
0 - 0 - 1 28739.xc.41gw.com/xiaz/%D2%B5@149944_4391.exe 120.27.186.114
2019-04-20 14:31:04 +0200
0 - 0 - 1 28939.xc.41gw.com/xiaz/UsbEAm@34_152991.exe 101.201.62.45
2019-04-20 13:35:37 +0200
0 - 0 - 1 sd.godsoft.cn/jddgnzs/exe.exe 121.40.20.160
2019-04-20 13:23:14 +0200
0 - 0 - 1 sd.godsoft.cn/jddgnzs/exe.exe 121.40.20.160
2019-04-20 13:10:48 +0200
0 - 0 - 1 28915.xc.41gw.com/xiaz/%D1%B6qq@155264_3161.exe 120.27.186.114
2019-04-20 13:07:20 +0200
0 - 0 - 1 down.xiazai2.net/cx/1508314/fx168%D6%BB@66_68 (...) 121.43.97.175
2019-04-20 13:05:54 +0200
0 - 0 - 3 down.xiazai2.net/cx/1508314/Echoapp%D8%BDv1.2 (...) 121.42.224.176

No other reports on domain: xiazai2.net



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /cx/160225/2/CD-CG-@96_208969.exe HTTP/1.1 
Host: down.xiazai2.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware