Overview

URL www.shangtianbi.com/V540831112487643853.zip
IP50.62.194.30
ASNAS26496 GoDaddy.com, LLC
Location United States
Report completed2019-03-25 08:40:46 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 50.62.194.30

Date UQ / IDS / BL URL IP
2019-04-06 18:43:48 +0200
0 - 0 - 39 ozypay.com/ 50.62.194.30
2019-03-30 01:21:35 +0100
0 - 0 - 10 votebirney.com/ 50.62.194.30
2019-03-22 04:36:37 +0100
0 - 0 - 4 delegatesoftware.net/wp-content/plugins/custo (...) 50.62.194.30
2019-02-25 17:44:22 +0100
0 - 0 - 2 commercialplumbernyc.com/tag/hot-water-heater 50.62.194.30
2019-02-22 06:37:07 +0100
0 - 0 - 1 https://www.iland.ca/images/Merciful/AOL/inde (...) 50.62.194.30
2019-02-19 23:53:13 +0100
0 - 4 - 1 ozypay.com/search 50.62.194.30
2019-02-18 03:59:07 +0100
0 - 0 - 31 ozypay.com/xrf 50.62.194.30
2019-02-18 03:55:29 +0100
0 - 4 - 6 ozypay.com/xrr 50.62.194.30
2019-02-18 03:55:20 +0100
0 - 0 - 1 ozypay.com/rll 50.62.194.30
2019-02-18 03:53:49 +0100
0 - 0 - 31 ozypay.com/pjj 50.62.194.30

Last 10 reports on ASN: AS26496 GoDaddy.com, LLC

Date UQ / IDS / BL URL IP
2019-04-19 21:19:00 +0200
0 - 0 - 0 www.xrcmi.com/xrcpayment 50.63.127.1
2019-04-19 21:17:19 +0200
0 - 0 - 1 www.chicagobuymyride.com/sellmycar.php/ 184.168.46.19
2019-04-19 21:12:25 +0200
0 - 0 - 117 teamsofer.com/store/qzum-jmya49p7lc0mcc_huvow (...) 107.180.24.235
2019-04-19 20:57:26 +0200
0 - 0 - 1 www.unnaticreations.in/wp-content/uploads/201 (...) 166.62.27.148
2019-04-19 20:45:07 +0200
0 - 0 - 1 hbs-properties.com/install.php 160.153.47.201
2019-04-19 20:43:42 +0200
0 - 0 - 2 www.akqp.com/bet365ty 184.168.221.57
2019-04-19 20:41:43 +0200
0 - 0 - 1 cocktailsk.com/ 107.180.1.250
2019-04-19 20:29:43 +0200
0 - 0 - 2 mysprint.shop/wp-content/yomS-WBG5r12lZbuvfP8 (...) 23.229.176.164
2019-04-19 20:17:24 +0200
0 - 0 - 15 teachingenglishcolombia.org/ 107.180.24.240
2019-04-19 20:14:26 +0200
0 - 0 - 1 hundgenn.com/hbb 184.168.131.241

No other reports on domain: shangtianbi.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /V540831112487643853.zip HTTP/1.1 
Host: www.shangtianbi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         50.62.194.30
HTTP/1.1 200 OK
Content-Type: application/zip
                                        
Last-Modified: Sun, 24 Mar 2019 23:28:32 GMT
Etag: W/"9de99-584df7239e1b9"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=300
X-Port: port_10514
X-Cacheable: YES
Content-Length: 646809
Date: Mon, 25 Mar 2019 07:40:13 GMT
Age: 29500
X-Cache: cached
X-Cache-Hit: HIT
X-Backend: all_requests
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Zip archive data, at least v2.0 to extract
Size:   646809
Md5:    faff02adda16de76cbae5c61f6ee379d
Sha1:   e7de6e9760e68201e65dfbb25a61c2c540ef9d05
Sha256: c02006bddb03c945b32968c0fedf50536976efa14c87283bbad2fb2b32b12027