Report Overview

  1. Submitted URL

    utilbada.com/down2/file_down.php?u=33-11140_units1[기_그].35a.zip.exe

  2. IP

    94.229.72.121

    ASN

    #42831 UK Dedicated Servers Limited

  3. Submitted

    2023-05-30 07:30:02

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    6

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.globalsign.com20751999-04-192012-07-202023-05-29
au.web3ads.netunknown2021-08-102022-03-222023-05-29
lib.wtg-ads.com461362017-11-092018-06-142023-05-29
utilbada.comunknown2020-01-212012-05-232023-05-29
spacert-1.infounknown2023-04-212023-04-212023-05-29
www.googletagmanager.com752011-11-112013-05-222023-05-29
app.flyersquare.comunknown2019-03-192022-07-122023-05-29
appsha-prm.ctengine.iounknown2021-05-112022-05-242023-05-29
au.flyersquare.comunknown2019-03-192021-12-012023-05-29
apps-prm.ctengine.iounknown2021-05-112022-04-262023-05-29
ocsp.r2m01.amazontrust.comunknown2007-05-112022-10-122023-05-29
trk.konistrk.xyzunknown2023-04-222023-04-222023-05-29
fonts.gstatic.comunknown2008-02-112014-09-092023-05-29
zerossl.ocsp.sectigo.com40492018-08-162020-05-092023-05-29
webscrypto.comunknown2022-01-282018-10-012023-05-29
app.web3ads.netunknown2021-08-102022-01-112023-05-29
app.adaround.netunknown2019-03-192022-07-102023-05-29
cdn.jsdelivr.net4392012-05-162012-09-302023-05-29
au.adaround.netunknown2019-03-192022-09-082023-05-29
ib.adnxs.com2412008-05-272012-05-202023-05-29
ws.coincap.io2307862014-06-172018-10-162023-05-29
atala-apw.comunknown2023-05-152023-05-232023-05-29
xml-v4.nxthost-1.infounknown2023-04-132023-05-092023-05-29
ocsp.pki.goog1752016-06-132018-07-012023-05-29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
low 37.48.87.182Client IP
low 37.48.87.182Client IP
low 37.48.87.182Client IP
low 37.48.87.182Client IP
low 37.48.87.182Client IP
low 37.48.87.182Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (55)

HTTP Transactions (102)

URLIPResponseSize
utilbada.com/down2/file_down.php?u=33-11140_units1[기_그].35a.zip.exe
94.229.72.121 618 B
utilbada.com/favicon.ico
94.229.72.121 9 B
utilbada.com/down2/file_down.php?Acirc%3B=&Atilde%3B=&cedil%3B=&cedil%3B%5D.35a.zip.exe=&ch=1&deg%3B_=&fnof%3B=&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4NTQzODk4MSwiaWF0IjoxNjg1NDMxNzgxLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGh0bWhrNTMyYjMwamcyMzQwM2VrZ2QiLCJuYmYiOjE2ODU0MzE3ODEsInRzIjoxNjg1NDMxNzgxNDkzODI1fQ.hi96ANYLFbNUd0qMJw02VndxPOF8aCpUkmBtQT_ojI0&middot%3B=&ordf%3B=&sbquo%3B=&sid=bdcb02b6-febb-11ed-bf30-a07b507e4b58&u=33-11140_units1%5B
94.229.72.121 11 B
ocsp.r2m01.amazontrust.com/
54.230.80.227 471 B
atala-apw.com/zcvisitor/be15e9c0-febb-11ed-8411-129bfff22221/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=be263d73-febb-11ed-8411-129bfff22221
34.238.227.119 1.1 kB
atala-apw.com/zcredirect?visitid=be15e9c0-febb-11ed-8411-129bfff22221&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
34.238.227.119 340 B
atala-apw.com/favicon.ico
34.238.227.119 653 B
ocsp.r2m01.amazontrust.com/
54.230.80.227 471 B
spacert-1.info/api/v1/pxcheck?impId=qaideGNBfEcwvGILnr2uNZrk4XFvAmzWfROAdD9A&minfo=eyJjb29raWVEaXNhYmxlZCI6ZmFsc2UsInVhIjoiTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjoxMDkuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMTEuMCIsImlmcmFtZSI6ZmFsc2UsImRldmljZVBpeGVsUmF0aW8iOjEsInduZExvY0hyZWYiOiJodHRwczovL3NwYWNlcnQtMS5pbmZvL2FwaS92MS9weD94bWxpZD1xYWlkZUdOQmZFY3d2R0lMbnIydU5acms0WEZ2QW16V2ZST0FkRDlBIiwiZGV2aWNlU3JlZW5TaXplIjoiMTAyNHgxMjgwIiwiZGV2aWNlV2luZG93U2l6ZSI6IjEwMjR4MTI4MCIsInduZDJzcmNSYXRpb0x3cjA2IjpmYWxzZSwiaXNCb3QiOiJvZmYifQ==
3.33.192.145302 Found178 B
xml-v4.nxthost-1.info/click?seat=2529251&i=TzvILPvNCxg_0
173.239.53.32302 Found0 B
zerossl.ocsp.sectigo.com/
104.18.14.101 728 B
trk.konistrk.xyz/644fc8c6b3e652000108b640?sub1=692f61bb5f30625a6043057e8&sub2=91.90.42.154&sub3=5819261&sub4=Blix+Solutions&sub5=utilbada.com&sub6=1064802&sub7=utilbada%252Cutilbada.com%252Cu%2520tildada&sub8=03&ref_id=QYnWGKBPpDE&cost=0.0005
37.48.87.182302 Found267 B
webscrypto.com/wp-content/uploads/2023/01/webscrypto_logo_dark_18230.webp
188.114.96.1200 OK3.4 kB
webscrypto.com/wp-content/uploads/2023/01/webscrypto_logo_light_transparent_33455.webp
188.114.96.1200 OK15 kB
webscrypto.com/wp-content/uploads/2023/01/webscrypto_logo_light_transparent_18230.webp
188.114.96.1200 OK8.2 kB
webscrypto.com/wp-content/uploads/2022/12/webscrypto_black_transparent_180_30webp.webp
188.114.96.1200 OK2.9 kB
ocsp.pki.goog/gts1c3
142.250.74.131 472 B
webscrypto.com/wp-content/plugins/massive-cryptocurrency-widgets/assets/public/js/selectize.min.js?ver=0.12.4
188.114.96.1200 OK16 kB
www.googletagmanager.com/gtag/js?id=G-F68NE1ZJ92
142.250.74.168200 OK76 kB
webscrypto.com/wp-content/themes/smart-mag/css/icons/fonts/ts-icons.woff2?v2.4
188.114.96.1200 OK10 kB
ocsp.pki.goog/gts1c3
142.250.74.131 472 B
webscrypto.com/wp-content/uploads/2023/05/Outer-Ring-1200x900-2-300x225.jpg
188.114.96.1200 OK22 kB
webscrypto.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
188.114.96.1200 OK63 kB
webscrypto.com/wp-content/uploads/2023/05/1684471912-300x215.jpg
188.114.96.1200 OK8.9 kB
webscrypto.com/wp-content/uploads/2023/05/1684247474-300x187.jpg
188.114.96.1200 OK6.5 kB
ocsp.pki.goog/gts1c3
142.250.74.131 472 B
webscrypto.com/wp-content/themes/smart-mag/js/lazyload.js?ver=9.1.0
188.114.96.1200 OK4.6 kB
ocsp.pki.goog/gts1c3
142.250.74.131 472 B
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.131200 OK48 kB
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.131200 OK48 kB
fonts.gstatic.com/s/opensans/v35/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.131200 OK48 kB
webscrypto.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
188.114.96.1200 OK63 kB
ocsp.pki.goog/gts1c3
142.250.74.131 472 B
app.flyersquare.com/supply/find
188.114.97.1204 No Content0 B
app.adaround.net/supply/find
104.21.76.61200 OK0 B
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20230530
151.101.1.229200 OK847 B
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.20.226 1.5 kB
webscrypto.com/wp-content/uploads/2023/05/1684167015-300x179.jpg
188.114.96.1200 OK9.3 kB
webscrypto.com/wp-content/plugins/sphere-post-views/assets/js/post-views.js?ver=1.0.1
188.114.96.1200 OK1.2 kB
app.flyersquare.com/supply/find
188.114.97.1204 No Content2.6 kB
zerossl.ocsp.sectigo.com/
104.18.14.101 728 B
webscrypto.com/wp-content/uploads/2023/03/cropped-icononly_transparent_nobuffer-192x192.png
188.114.96.1200 OK13 kB
appsha-prm.ctengine.io/static/inpage.js?v=1680173650807
109.109.136.186200 OK7.8 kB
au.adaround.net/js/fp.min.js
104.21.76.61200 OK14 kB
app.web3ads.net/serve/x0d9b9f04a86146f7b81e82e24d0796d9.doc?v=0747
188.114.96.1200 OK136 kB
webscrypto.com/wp-content/uploads/2023/05/1683388297-300x168.jpg
188.114.96.1200 OK14 kB
webscrypto.com/wp-content/uploads/2023/05/1683196635-300x214.jpg
188.114.96.1200 OK9.7 kB
webscrypto.com/wp-content/uploads/2023/05/1683900497-300x195.jpg
188.114.96.1200 OK24 kB
trk.konistrk.xyz/view?clickid=6475a5e998894500016df51b&referrer=
37.48.87.182204 No Content0 B
au.adaround.net/fp/71eee97c995167b56ab33a81182c883e/ce2f9c87.html
104.21.76.61204 No Content0 B
au.flyersquare.com/js/fp.min.js
188.114.97.1200 OK14 kB
ib.adnxs.com/ut/v3/prebid
185.83.142.19200 OK139 B
au.flyersquare.com/fp/4f67aefc5d69b08c986e486f5e0ef688/248b696f.html
188.114.97.1204 No Content0 B
ib.adnxs.com/ut/v3/prebid
185.83.142.19200 OK140 B
ib.adnxs.com/ut/v3/prebid
185.83.142.19200 OK145 B
ib.adnxs.com/ut/v3/prebid
185.83.142.19200 OK140 B
ib.adnxs.com/ut/v3/prebid
185.83.142.19200 OK140 B
app.web3ads.net/-/view.js
188.114.96.1200 OK1.3 kB
au.web3ads.net/fp/b491537338b32012419f2d152d222c12/9ce3eef9.html
188.114.96.1200 OK0 B
trk.konistrk.xyz/uniclick.js?attribution=lastpaid&cookiedomain=&cookieduration=90&defaultcampaignid=643e8fe2c39d510001ddf0c7&regviewonce=false
37.48.87.182200 OK5.1 kB
app.adaround.net/supply/register?iid=w43DjgQXwrpwwqDCtAnCvsOCGQ_DhDxG
104.21.76.61302 Found253 B
webscrypto.com/wp-content/themes/smart-mag/js/jquery.mfp-lightbox.js?ver=9.1.0
188.114.96.1200 OK20 kB
appsha-prm.ctengine.io/static/sticky.js?v=1680173650807
109.109.136.186200 OK16 kB
webscrypto.com/wp-content/uploads/2023/03/cropped-icononly_transparent_nobuffer-32x32.png
188.114.96.1200 OK2.0 kB
lib.wtg-ads.com/publisher/webscrypto.com/6e72e3fece22978c0768.js
172.67.70.115200 OK69 kB
au.web3ads.net/fp/b491537338b32012419f2d152d222c12/88e2c88f.html
188.114.96.1204 No Content0 B
app.adaround.net/l/n/view/7b0fdcadffa841b5a95f6b4fafd453f3?iid=c38dc38e0417c2ba70c2a0c2b409c2be&r=aHR0cHM6Ly9hcHAud2ViM2Fkcy5uZXQvdmlldy8wZDliOWYwNGE4NjE0NmY3YjgxZTgyZTI0ZDA3OTZkOQ&zid=cc5031769c324e0aa2f54dd7a0d39938&cid=c6ee9c6e315879dd11a8b97b78cf9c00
104.21.76.61302 Found215 B
webscrypto.com/wp-content/themes/smart-mag/js/jquery.sticky-sidebar.js?ver=9.1.0
188.114.96.1200 OK12 kB
apps-prm.ctengine.io/tmp
109.109.135.173204 No Content0 B
webscrypto.com/wp-content/themes/smart-mag/js/theme.js?ver=9.1.0
188.114.96.1200 OK53 kB
lib.wtg-ads.com/lib.single.wtg.min.js
172.67.70.115200 OK41 kB
ws.coincap.io/prices?assets=ALL
104.18.230.2101 Switching Protocols0 B
app.web3ads.net/view/0d9b9f04a86146f7b81e82e24d0796d9?iid=c38dc38e0417c2ba70c2a0c2b409c2be&zid=cc5031769c324e0aa2f54dd7a0d39938&cid=c6ee9c6e315879dd11a8b97b78cf9c00&pto=0001-00000028-3E05&pid=614cc23f0cc24c00881e4c4b28080640&ctx=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
188.114.96.1200 OK215 B
au.web3ads.net/register/0cbf1c3d417e250a/t-71dsk8chbLrpyr9SwzQUr8G7yPiA/c38dc38e0417c2ba70c2a0c2b409c2be.html
188.114.96.1200 OK252 B
webscrypto.com/wp-content/plugins/coinpress/assets/public/js/common.min.js?ver=2.3.2
188.114.96.1200 OK38 kB
app.flyersquare.com/supply/register?iid=wrkEw4cgDcK-woTDt8K9OsKHQsK4w5zDhUA
188.114.97.1302 Found256 B
www.googletagmanager.com/gtm.js?id=GTM-579VPHK
142.250.74.168200 OK164 kB
app.web3ads.net/context/c6ee9c6e315879dd11a8b97b78cf9c02?k=eyJmcmFtZSI6MCwid2lkdGgiOjEyODAsImhlaWdodCI6MTAyNCwidXJsIjoiaHR0cHM6Ly93ZWJzY3J5cHRvLmNvbS8iLCJtZXRhbWFzayI6MCwicG9wIjowfQ
188.114.96.1200 OK43 B
au.adaround.net/register/_fa7cdd4c68507744/DGDvz45NSY45zwuhomZMFgty7LuJow/c38dc38e0417c2ba70c2a0c2b409c2be.html
104.21.76.61200 OK253 B
app.web3ads.net/view/0d9b9f04a86146f7b81e82e24d0796d9?iid=c2b904c387200dc2bec284c3b7c2bd3a&zid=f8b40a69d6ce41adb2093e2546b30a72&cid=12188b7d37c3bb390059a23663a03900&pto=0001-00000050-C19A&pid=3d64e88a4d544478bcb9526249777d47&ctx=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
188.114.96.1200 OK215 B
au.web3ads.net/fp/b491537338b32012419f2d152d222c12/88e2c88f.html
188.114.96.1200 OK261 B
appsha-prm.ctengine.io/js/script.js?wkey=VL5qnT4j1r
109.109.136.186200 OK6.1 kB
app.adaround.net/main.js
104.21.76.61200 OK48 kB
lib.wtg-ads.com/prebid/wtg_prebid_7.12.0.js
172.67.70.115200 OK391 kB
au.web3ads.net/js/fp.min.js
188.114.96.1200 OK33 kB
webscrypto.com/wp-content/plugins/coinpress/assets/public/js/vendor.min.js?ver=2.3.2
188.114.96.1200 OK90 kB
au.flyersquare.com/register/xc449bad4854773ff/UXP6enNUcLxFGVDqqNcIALqZ_yJ8OQ/c2b904c387200dc2bec284c3b7c2bd3a.html
188.114.97.1200 OK256 B
au.web3ads.net/js/fp.min.js
188.114.96.1200 OK33 kB
webscrypto.com/wp-content/plugins/massive-cryptocurrency-widgets/assets/public/js/socket.io.js?ver=2.1.0
188.114.96.1200 OK62 kB
webscrypto.com/wp-admin/admin-ajax.php
188.114.96.1200 OK0 B
app.flyersquare.com/main.js
188.114.97.1200 OK48 kB
webscrypto.com/wp-content/plugins/link-whisper-premium/js/frontend.min.js?ver=1683483433
188.114.96.1200 OK4.8 kB
app.flyersquare.com/l/n/view/1ddfb0e49fb2461d9c3f1fdd3f48415a?iid=c2b904c387200dc2bec284c3b7c2bd3a&r=aHR0cHM6Ly9hcHAud2ViM2Fkcy5uZXQvdmlldy8wZDliOWYwNGE4NjE0NmY3YjgxZTgyZTI0ZDA3OTZkOQ&zid=f8b40a69d6ce41adb2093e2546b30a72&cid=12188b7d37c3bb390059a23663a03900
188.114.97.1302 Found215 B
app.web3ads.net/context/12188b7d37c3bb390059a23663a03902?k=eyJmcmFtZSI6MCwid2lkdGgiOjEyODAsImhlaWdodCI6MTAyNCwidXJsIjoiaHR0cHM6Ly93ZWJzY3J5cHRvLmNvbS8iLCJtZXRhbWFzayI6MCwicG9wIjowfQ
188.114.96.1200 OK43 B
webscrypto.com/wp-content/plugins/massive-cryptocurrency-widgets/assets/public/js/common.min.js?ver=3.2.6
188.114.96.1200 OK39 kB
webscrypto.com/wp-content/uploads/2023/05/1684247578-300x191.jpg
188.114.96.1200 OK11 kB
app.web3ads.net/init-context/12188b7d37c3bb390059a23663a03902
188.114.96.1200 OK283 B
app.web3ads.net/init-context/c6ee9c6e315879dd11a8b97b78cf9c02
188.114.96.1200 OK283 B
lib.wtg-ads.com/publisher/webscrypto.com/standard.publisher.config.min.js
172.67.70.115200 OK38 kB
webscrypto.com/tag/nft/?rtkcid=6475a5e998894500016df51b&clickid=6475a5e998894500016df51b&cmpid=644fc8c6b3e652000108b640&utm_source=facebook&utm_medium=cpa&utm_campaign=AC_WL_zerocdesktop_0.5_692f61bb5f30625a6043057e8
188.114.96.1200 OK690 kB
au.web3ads.net/register/0cbf1c3d417e250a/TdCeiDYTKci_XIPvtFvBdT2Po7S4XQ/c2b904c387200dc2bec284c3b7c2bd3a.html
188.114.96.1200 OK252 B
apps-prm.ctengine.io/tmp
109.109.135.173200 OK88 B