urlquery.net - Report

Overview

URL	jxliulang.com.cn/html/zsgzyjszs....xydtindex.html
IP	209.99.40.223
ASN	AS40034 Confluence Networks Inc
Location	United States
Report completed	2018-10-13 04:54:58 CEST
Status	Loading report..
urlquery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Blacklists

MDL

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Added / Verified	Severity	Host	Comment
2018-10-13	2	jxliulang.com.cn/html/zsgzyjszs....xydtindex.html	Malware

DNS-BH

No alerts detected

mnemonic secure dns

No alerts detected

Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 209.99.40.223

Date	UQ / IDS / BL	URL	IP
2019-02-22 17:04:42 +0100	0 - 2 - 0	fusion.fsay.net/test/bot.exe	209.99.40.223
2019-02-22 11:51:51 +0100	0 - 0 - 1	gk-higheredu.com/office/office.php	209.99.40.223
2019-02-22 07:38:11 +0100	0 - 0 - 1	himalayan-organic.com/IlOysTgNjFrGtHtEAwVo/in (...)	209.99.40.223
2019-02-22 05:57:28 +0100	0 - 0 - 1	geminimarketingservices.com/jdr	209.99.40.223
2019-02-22 03:09:37 +0100	0 - 0 - 1	itedubd.com/Payment-and-address/Order-8434749362/	209.99.40.223
2019-02-22 03:00:07 +0100	0 - 0 - 1	alankarbazar.com/tnn	209.99.40.223
2019-02-21 23:32:03 +0100	0 - 0 - 1	pacharaorchidsintertrade.com/	209.99.40.223
2019-02-21 21:25:17 +0100	0 - 0 - 1	grouopsra.com/cleanerp.exe	209.99.40.223
2019-02-21 14:37:40 +0100	0 - 0 - 1	grouopsra.com/exploeren.exe	209.99.40.223
2019-02-21 14:37:14 +0100	0 - 0 - 1	grouopsra.com/windowsed.exe	209.99.40.223

Last 10 reports on ASN: AS40034 Confluence Networks Inc

Date	UQ / IDS / BL	URL	IP
2019-02-22 18:33:10 +0100	0 - 0 - 1	antivirus-pro.us/downloads/antiviruspro.apk	199.191.50.184
2019-02-22 18:30:33 +0100	0 - 0 - 1	www.website-force.com/zip/roofing.exe	199.191.50.188
2019-02-22 18:15:48 +0100	0 - 0 - 1	weoption.com/wp-content/uploads/2011/01/dot__ (...)	209.99.64.44
2019-02-22 18:13:46 +0100	0 - 0 - 1	techsupportall.net/downloads/Spooler_1068_Fix (...)	162.210.70.23
2019-02-22 18:11:49 +0100	0 - 0 - 1	laglessproxy.com/download/LaglessProxy1.4.exe	204.11.56.37
2019-02-22 18:11:12 +0100	0 - 1 - 1	bookmarkingbeast.com/wp-content/uploads/2012/ (...)	204.11.56.48
2019-02-22 18:07:04 +0100	0 - 0 - 1	minecraft.launcherfiles.com/mediaload.io.exe	204.11.56.48
2019-02-22 18:02:21 +0100	0 - 0 - 1	kingoftits.com/Adobe_Flash_2017.apk	204.11.56.48
2019-02-22 17:34:26 +0100	0 - 0 - 2	glochemindia.com/modules/mod_roknavmenu/lib/l (...)	103.53.40.33
2019-02-22 17:23:12 +0100	0 - 0 - 0	softwaremanager.com	208.91.197.39

Last 10 reports on domain: jxliulang.com.cn

Date	UQ / IDS / BL	URL	IP
2019-02-17 08:42:43 +0100	0 - 0 - 1	jxliulang.com.cn/html/kygz..jyjxgzsjxindex.html	107.179.119.79
2018-11-20 02:26:45 +0100	0 - 0 - 2	jxliulang.com.cn/html/zsgzbkszs....jlhzgnjlin (...)	107.179.119.79
2018-10-13 10:09:10 +0200	0 - 0 - 1	jxliulang.com.cn/html/xygkxxjj....jyjxbksjxin (...)	209.99.40.222
2018-10-13 05:54:30 +0200	0 - 0 - 1	jxliulang.com.cn/html/jyjxgzsjx....xygkxxldin (...)	209.99.40.222
2018-10-12 20:16:23 +0200	0 - 0 - 1	jxliulang.com.cn/html/jyjxgzsjx....xydtxyxwin (...)	209.99.40.222
2018-10-12 18:46:01 +0200	0 - 0 - 1	jxliulang.com.cn/html/jlhzgnjl....tzgg82179.html	209.99.40.222
2018-10-12 17:10:40 +0200	0 - 0 - 1	jxliulang.com.cn/html/xydt..xsgzgzdtindex.html	209.99.40.222
2018-10-12 15:38:10 +0200	0 - 0 - 1	jxliulang.com.cn/html	209.99.40.222
2018-10-12 00:00:26 +0200	0 - 0 - 1	jxliulang.com.cn/html/jlhzgnjl....zhxw67933.html	209.99.40.222
2018-10-11 17:55:45 +0200	0 - 0 - 1	jxliulang.com.cn/html/zsgzyjszs....xydtindex.html	209.99.40.222

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (3)

Request	Response
GET /html/zsgzyjszs....xydtindex.html HTTP/1.1 Host: jxliulang.com.cn User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	209.99.40.223 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 13 Oct 2018 02:54:24 GMT Server: Apache ntCoent-Length: 272 Keep-Alive: timeout=5, max=125 Connection: Keep-Alive Cache-Control: private Content-Encoding: gzip Content-Length: 196 --- Additional Info --- Magic: gzip compressed data, from Unix Size: 196 Md5: e0698dae3ade1f5cc1d7614aeaa9939b Sha1: e907f8b75f352b87245dd8c3fbec4a29de3d9117 Sha256: 3396aa8f6a541378072f2de22baa11d8728733fa5d9c67a557e319f8afc2e073 Alerts: Blacklists: - fortinet: Malware
GET /favicon.ico HTTP/1.1 Host: jxliulang.com.cn User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: image/png,image/;q=0.8,/;q=0.5 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7 Keep-Alive: 115 Connection: keep-alive	209.99.40.223 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Sat, 13 Oct 2018 02:54:24 GMT Server: Apache Cteonnt-Length: 10 Keep-Alive: timeout=5, max=104 Connection: Keep-Alive Cache-Control: private Content-Encoding: gzip Content-Length: 30 --- Additional Info --- Magic: gzip compressed data, from Unix Size: 30 Md5: c4609c83d6054d974c265b208bdc2a21 Sha1: 7e963e7185900347babd1f2797312c0ca21fa4ae Sha256: 6cd85e3008758f2e06eeff9efdf9b4ad2981f6654f87918d155b0aced68d959a
GET /favicon.ico HTTP/1.1 Host: jxliulang.com.cn User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	209.99.40.223 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Sat, 13 Oct 2018 02:54:27 GMT Server: Apache Cteonnt-Length: 10 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Cache-Control: private Content-Encoding: gzip Content-Length: 30 --- Additional Info --- Magic: gzip compressed data, from Unix Size: 30 Md5: c4609c83d6054d974c265b208bdc2a21 Sha1: 7e963e7185900347babd1f2797312c0ca21fa4ae Sha256: 6cd85e3008758f2e06eeff9efdf9b4ad2981f6654f87918d155b0aced68d959a

Request

Response

                                        
                                            GET /html/zsgzyjszs....xydtindex.html HTTP/1.1 

                                        
                                            
Host: jxliulang.com.cn

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive

                                         
                                         209.99.40.223

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Sat, 13 Oct 2018 02:54:24 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
ntCoent-Length: 272 

                                        
                                            
Keep-Alive: timeout=5, max=125 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
Cache-Control: private 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 196 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  gzip compressed data, from Unix

                                                Size:   196

                                                Md5:    e0698dae3ade1f5cc1d7614aeaa9939b

                                                Sha1:   e907f8b75f352b87245dd8c3fbec4a29de3d9117

                                                Sha256: 3396aa8f6a541378072f2de22baa11d8728733fa5d9c67a557e319f8afc2e073

                                            

                                            
                                                
Alerts:

                                                

                                                
                                                      Blacklists:

                                                    
                                                            - fortinet: Malware

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: jxliulang.com.cn

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: image/png,image/*;q=0.8,*/*;q=0.5 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive

                                         
                                         209.99.40.223

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html; charset=iso-8859-1

                                        

                                        
                                            
Date: Sat, 13 Oct 2018 02:54:24 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Cteonnt-Length: 10 

                                        
                                            
Keep-Alive: timeout=5, max=104 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
Cache-Control: private 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 30 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  gzip compressed data, from Unix

                                                Size:   30

                                                Md5:    c4609c83d6054d974c265b208bdc2a21

                                                Sha1:   7e963e7185900347babd1f2797312c0ca21fa4ae

                                                Sha256: 6cd85e3008758f2e06eeff9efdf9b4ad2981f6654f87918d155b0aced68d959a

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: jxliulang.com.cn

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive

                                         
                                         209.99.40.223

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html; charset=iso-8859-1

                                        

                                        
                                            
Date: Sat, 13 Oct 2018 02:54:27 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Cteonnt-Length: 10 

                                        
                                            
Keep-Alive: timeout=5, max=127 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
Cache-Control: private 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 30 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  gzip compressed data, from Unix

                                                Size:   30

                                                Md5:    c4609c83d6054d974c265b208bdc2a21

                                                Sha1:   7e963e7185900347babd1f2797312c0ca21fa4ae

                                                Sha256: 6cd85e3008758f2e06eeff9efdf9b4ad2981f6654f87918d155b0aced68d959a