Overview

URL www.bjhlsj.com/rev_383_1876.exe
IP180.101.252.145
ASNAS4134 Chinanet
Location China
Report completed2018-07-13 04:40:37 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-07-13 2 www.bjhlsj.com/rev_383_1876.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 180.101.252.145

Date UQ / IDS / BL URL IP
2018-07-14 11:17:43 +0200
0 - 0 - 1 www.bjhlsj.com/qktp_383_7506.exe 180.101.252.145
2018-07-13 01:03:35 +0200
0 - 0 - 1 www.bjhlsj.com/gyjl_383_3798.exe 180.101.252.145
2018-07-12 13:58:00 +0200
0 - 0 - 1 www.bjhlsj.com/alpk_383_8746.exe 180.101.252.145
2018-07-11 12:32:00 +0200
0 - 0 - 1 www.bjhlsj.com/j4aKaM_426_119.exe 180.101.252.145
2018-07-10 01:31:53 +0200
0 - 0 - 1 www.bjhlsj.com/gld_383_1248.exe 180.101.252.145
2018-07-09 12:01:19 +0200
0 - 0 - 1 www.bjhlsj.com/pnRkMy_426_111.exe 180.101.252.145
2018-07-09 11:59:40 +0200
0 - 0 - 1 www.bjhlsj.com/YPBsNi_426_111.exe 180.101.252.145
2018-07-09 11:58:14 +0200
0 - 0 - 1 www.bjhlsj.com/Jh37xp_426_111.exe 180.101.252.145
2018-07-09 11:57:08 +0200
0 - 0 - 1 www.bjhlsj.com/5mQ8Q5_426_111.exe 180.101.252.145
2018-07-09 11:57:02 +0200
0 - 0 - 1 www.bjhlsj.com/ZJWHGN_426_111.exe 180.101.252.145

Last 10 reports on ASN: AS4134 Chinanet

Date UQ / IDS / BL URL IP
2018-10-16 16:30:43 +0200
0 - 0 - 0 220.243.136.191 220.243.136.191
2018-10-16 15:55:10 +0200
0 - 0 - 0 www.dgstb.gov.cn/ 61.145.199.133
2018-10-16 14:07:35 +0200
0 - 0 - 0 bos.pgzs.com 59.48.165.149
2018-10-16 12:46:08 +0200
0 - 0 - 0 wanglaiwen.com 61.164.246.154
2018-10-16 11:16:12 +0200
0 - 1 - 0 shouhu205201.3322.org/ 59.42.71.178
2018-10-16 08:24:18 +0200
0 - 0 - 1 lwyzzx.cn/asp/xxjs/yxzp/gp1/web/web_07/yuanch (...) 122.228.189.9
2018-10-16 04:00:08 +0200
0 - 1 - 0 c.img001.com/re58/girlshow_21560001891.exe 180.101.56.226
2018-10-16 01:48:25 +0200
0 - 1 - 0 sqdownb.onlinedown.net/down/KuaiwanSetup_V3.5 (...) 222.85.25.66
2018-10-16 01:31:56 +0200
0 - 0 - 0 7vzr59.com1.z0.glb.clouddn.com/95zz.mp3 58.51.130.27
2018-10-16 00:17:15 +0200
0 - 1 - 3 www.51wh.top/10XPAYMENT/UH63790YHDB/77500/FDI (...) 183.131.200.72

No other reports on domain: bjhlsj.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /rev_383_1876.exe HTTP/1.1 
Host: www.bjhlsj.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware