Report Overview

  1. Submitted URL

    www.temu.com/ruby_free_goods.html?group_sn=240418-B83718CAA5FBE1CA3279&_bg_fs=1&_p_rfs=1&fish_banner=no&gs_comp_expired=1713565905&copy_color=no&gs_pelican_id=10030&gs_pelican_double=1&landing_ios_two_steps=1&refer_share_suin=RSSBBYGVKJUNTQSBMBQGAZYENPPOPEU6Y2RYH4TIHEB6YATGEPKWR7WUDSWJGQPMHQ3YZ3DSPY&refer_share_id=wm4Jb9Q2Be7WTUHIDan1RWGi5dVnHC0y&refer_share_channel=whatsapp_chat&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&needs_login=1&login_scene=7&_p_login_channel=activity&_x_cid=mkt_activity_goods&_x_campaign=mkt_activity&_x_share_id=f4DR47c5iAV6UBiJyI65jzjOgvpICGC1&_x_sid=free_goods_invite&gs_invite_code=206674301&gs_og_title=¿Puedes%20aceptar%20mi%20invitación%20así%20que%20puedo%20obtener%20un%20regalo%20gratis?&gs_og_description=Haz%20clic%20en%20este%20link%20ahora%20y%20participa%20en%20esta%20actividad.&gs_og_image=https://aimg.kwcdn.com/upload_aimg/dawn/a6488baa-5078-4eed-9950-29e2c3404d51.png.slim.png

  2. IP

    20.223.39.110

    ASN

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

  3. Submitted

    2024-04-18 22:41:25

    Access

    public

  4. Website Title

    Get Free Gifts

  5. Final URL

    www.temu.com/ruby_free_goods.html?group_sn=240418-B83718CAA5FBE1CA3279&_bg_fs=1&_p_rfs=1&fish_banner=no&gs_comp_expired=1713565905&copy_color=no&gs_pelican_id=10030&gs_pelican_double=1&landing_ios_two_steps=1&refer_share_suin=RSSBBYGVKJUNTQSBMBQGAZYENPPOPEU6Y2RYH4TIHEB6YATGEPKWR7WUDSWJGQPMHQ3YZ3DSPY&refer_share_id=wm4Jb9Q2Be7WTUHIDan1RWGi5dVnHC0y&refer_share_channel=whatsapp_chat&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&needs_login=1&login_scene=7&_p_login_channel=activity&_x_cid=mkt_activity_goods&_x_campaign=mkt_activity&_x_share_id=f4DR47c5iAV6UBiJyI65jzjOgvpICGC1&_x_sid=free_goods_invite&gs_invite_code=206674301&gs_og_title=&iquest%3BPuedes%20aceptar%20mi%20invitaci=&oacute%3Bn%20as=&iacute%3B%20que%20puedo%20obtener%20un%20regalo%20gratis=

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    72

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
aimg.kwcdn.comunknown2022-08-082022-09-052024-04-17
static.kwcdn.comunknown2022-08-082022-09-052024-04-18
www.temu.comunknown2003-04-292021-09-282024-04-17
eu.pftk.temu.comunknown2003-04-292023-04-252024-04-18
eu.thtk.temu.comunknown2003-04-292023-04-252024-04-18

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 74.125.250.129
lowClient IP 216.93.246.18
lowClient IP 74.125.27.12
lowClient IP 142.251.125.127
lowClient IP 74.125.250.129
lowClient IP 172.253.121.127
lowClient IP 216.93.246.18
lowClient IP 142.250.118.127
lowClient IP 74.125.27.12
lowClient IP 104.21.67.209
lowClient IP 142.251.125.127
lowClient IP 62.71.2.168
lowClient IP 77.72.169.211
lowClient IP 172.253.121.127
lowClient IP 77.72.169.211
lowClient IP 142.250.118.127
lowClient IP 104.21.67.209
lowClient IP 212.227.67.34
lowClient IP 62.71.2.168
lowClient IP 74.125.250.129
lowClient IP 77.72.169.211
lowClient IP 75.2.81.221
lowClient IP 216.93.246.18
lowClient IP 77.72.169.211
lowClient IP 74.125.27.12
lowClient IP 212.227.67.34
lowClient IP 142.251.125.127
lowClient IP 172.253.121.127
lowClient IP 75.2.81.221
lowClient IP 142.250.118.127
lowClient IP 104.21.67.209
lowClient IP 62.71.2.168
lowClient IP 77.72.169.211
lowClient IP 77.72.169.211
lowClient IP 212.227.67.34
lowClient IP 75.2.81.221
lowClient IP 74.125.250.129
lowClient IP 216.93.246.18
lowClient IP 74.125.27.12
lowClient IP 142.251.125.127
lowClient IP 172.253.121.127
lowClient IP 142.250.118.127
lowClient IP 104.21.67.209
lowClient IP 62.71.2.168
lowClient IP 77.72.169.211
lowClient IP 77.72.169.211
lowClient IP 212.227.67.34
lowClient IP 75.2.81.221
lowClient IP 74.125.250.129
lowClient IP 216.93.246.18
lowClient IP 74.125.27.12
lowClient IP 142.251.125.127
lowClient IP 172.253.121.127
lowClient IP 142.250.118.127
lowClient IP 104.21.67.209
lowClient IP 62.71.2.168
lowClient IP 77.72.169.211
lowClient IP 77.72.169.211
lowClient IP 212.227.67.34
lowClient IP 75.2.81.221
lowClient IP 74.125.250.129
lowClient IP 216.93.246.18
lowClient IP 74.125.27.12
lowClient IP 142.251.125.127
lowClient IP 172.253.121.127
lowClient IP 142.250.118.127
lowClient IP 104.21.67.209
lowClient IP 62.71.2.168
lowClient IP 77.72.169.211
lowClient IP 77.72.169.211
lowClient IP 212.227.67.34
lowClient IP 75.2.81.221

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (31)

HTTP Transactions (31)

URLIPResponseSize
aimg.kwcdn.com/upload_aimg/dawn/5ea8a749-5879-4749-8a81-0e69cd361303.png.slim.png
104.18.10.132200 OK20 kB
static.kwcdn.com/m-assets/assets/js/ruby_free_goods_1341f33217270aea2173.js
104.18.10.132200 OK882 kB
www.temu.com/favicon.ico
20.67.142.53200 OK28 kB
www.temu.com/api/phantom/xg/pfb/l1
20.67.142.53200 OK7.1 kB
www.temu.com/api/server/_stm
20.67.142.53200 OK4.3 kB
eu.pftk.temu.com/pmm/api/pmm/defined
20.33.40.121200 OK0 B
static.kwcdn.com/m-assets/assets/js/9761_11ef924dd710a7cb75fa.js
104.18.10.132200 OK85 kB
eu.thtk.temu.com/c/th.gif
20.157.217.74200 OK0 B
www.temu.com/api/phantom/xg/pfb/a4
20.67.142.53200 OK194 B
static.kwcdn.com/m-assets/assets/css/ruby_free_goods-7f03257ceff99cb52b69.css
104.18.10.132200 OK1.7 MB
static.kwcdn.com/m-assets/assets/js/5497_861740e17e8dd8ae6bc6.js
104.18.10.132200 OK365 kB
www.temu.com/api/phantom/dm/wl/cg
20.67.142.53200 OK216 B
eu.thtk.temu.com/c/th.gif
20.157.217.74200 OK0 B
eu.thtk.temu.com/c/th.gif
20.157.217.74200 OK0 B
eu.pftk.temu.com/pmm/api/pmm/defined
20.33.40.121200 OK0 B
eu.thtk.temu.com/c/th.gif
20.157.217.74200 OK0 B
www.temu.com/api/phantom/xg/pfb/a3
20.67.142.53200 OK65 B
eu.pftk.temu.com/pmm/api/pmm/defined
20.33.40.121200 OK0 B
www.temu.com/api/phantom/xg/pfb/b
20.67.142.53200 OK161 B
eu.pftk.temu.com/pmm/api/pmm/api
20.33.40.121200 OK0 B
www.temu.com/api/phantom/xg/pfb/a4
20.67.142.53200 OK194 B
www.temu.com/ruby_free_goods.html?group_sn=240418-B83718CAA5FBE1CA3279&_bg_fs=1&_p_rfs=1&fish_banner=no&gs_comp_expired=1713565905&copy_color=no&gs_pelican_id=10030&gs_pelican_double=1&landing_ios_two_steps=1&refer_share_suin=RSSBBYGVKJUNTQSBMBQGAZYENPPOPEU6Y2RYH4TIHEB6YATGEPKWR7WUDSWJGQPMHQ3YZ3DSPY&refer_share_id=wm4Jb9Q2Be7WTUHIDan1RWGi5dVnHC0y&refer_share_channel=whatsapp_chat&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&needs_login=1&login_scene=7&_p_login_channel=activity&_x_cid=mkt_activity_goods&_x_campaign=mkt_activity&_x_share_id=f4DR47c5iAV6UBiJyI65jzjOgvpICGC1&_x_sid=free_goods_invite&gs_invite_code=206674301&gs_og_title=¿Puedes%20aceptar%20mi%20invitación%20así%20que%20puedo%20obtener%20un%20regalo%20gratis?&gs_og_description=Haz%20clic%20en%20este%20link%20ahora%20y%20participa%20en%20esta%20actividad.&gs_og_image=https://aimg.kwcdn.com/upload_aimg/dawn/a6488baa-5078-4eed-9950-29e2c3404d51.png.slim.png
20.67.142.53200 OK297 kB
static.kwcdn.com/m-assets/assets/js/react_webpack_runtime_78196888e27cb71603c3.js
104.18.10.132200 OK58 kB
eu.thtk.temu.com/c/th.gif
20.157.217.74200 OK0 B
static.kwcdn.com/m-assets/assets/css/5497-fbde54542d8c0865ed8d.css
104.18.10.132200 OK101 kB
static.kwcdn.com/m-assets/assets/js/biz_vendors_947657e8707a1808406f.js
104.18.10.132200 OK584 kB
eu.thtk.temu.com/c/th.gif
20.157.217.74200 OK0 B
eu.thtk.temu.com/c/th.gif
20.157.217.74200 OK0 B
static.kwcdn.com/m-assets/assets/css/biz_vendors-cb01fb01b90eaf3a0a73.css
104.18.10.132200 OK70 kB
static.kwcdn.com/m-assets/assets/js/vendors_c77bded8d7692129b578.js
104.18.10.132200 OK526 kB
static.kwcdn.com/m-assets/assets/js/1344_af2fa9c8c1ca56e9d70c.js
104.18.10.132200 OK100 kB