Report Overview

  1. URL

    down.xiazai2.net/cx/1508311/360%C3%88%C3%AD%C2%BC%C3%BE%C2%B9%DC%BC%C3%92@59_29378.exe

  2. IP

    209.126.123.12

    ASN

    #30083 AS-30083-GO-DADDY-COM-LLC

  3. Submitted

    2023-06-04T13:07:59Z

    Access

    public

  4. Tags

    None

  5. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    0

Domain Summary

Domain Rank First Seen Last Seen
main.proffering.xyz (1) unknown 2022-10-31 13:23:30 2023-06-03 16:12:25
qwfuu.altairaquilae.top (1) unknown 2023-05-11 14:55:40 2023-06-03 22:55:56
c.runicmaster.top (6) unknown 2023-05-19 11:31:26 2023-06-03 22:55:57
lpmedia.servefilesonly.com (18) unknown 2022-03-22 14:18:13 2023-06-03 14:12:32
fonts.googleapis.com (1) 8877 2013-06-10 22:14:26 2023-06-03 18:44:59
www.milffinder.com (1) unknown 2021-03-25 22:47:16 2023-06-03 20:50:27
maxcdn.bootstrapcdn.com (1) 724 2014-06-18 02:37:31 2023-06-03 18:12:43
down.xiazai2.net (3) unknown 2015-01-26 08:55:17 2023-06-03 17:02:55
spacert-1.info (1) unknown 2023-04-21 22:16:34 2023-06-03 16:12:24
ocsp.pki.goog (8) 175 2018-07-01 08:43:07 2023-06-03 18:12:09
js.streampsh.top (4) unknown 2023-05-01 18:30:12 2023-06-03 14:09:15
feed.streampsh.top (1) unknown 2023-05-01 18:30:13 2023-06-03 14:09:16
cdn.onesignal.com (1) 3015 2015-04-22 15:41:50 2023-06-03 18:28:08
ocsp.r2m01.amazontrust.com (2) unknown 2022-10-12 22:43:53 2023-06-03 19:10:40
atala-apw.com (3) unknown 2023-05-23 14:19:57 2023-06-03 17:38:40
qwfuu.runicmaster.top (16) unknown 2023-05-19 10:27:28 2023-06-03 21:14:43
a.runicmaster.top (3) unknown 2023-05-19 11:31:25 2023-06-03 21:14:44
d.runicmaster.top (12) unknown 2023-05-19 11:31:26 2023-06-03 21:14:43
o-2741.cloudtraff.com (1) 392225 2020-10-21 13:34:14 2023-06-03 16:12:32
fonts.gstatic.com (2) unknown 2014-09-09 02:40:21 2023-06-03 19:05:37
xml-v4.nxthost-2.info (1) unknown 2023-05-31 20:25:37 2023-06-03 16:47:12
www.gstatic.com (6) unknown 2016-07-26 11:37:06 2023-06-03 18:31:41
b.runicmaster.top (15) unknown 2023-05-19 11:31:26 2023-06-03 22:55:56
go.cmtrkg.com (1) unknown 2022-01-24 13:45:18 2023-06-03 21:14:43
imedia.servefilesonly.com (11) unknown 2022-03-22 22:58:22 2023-06-03 14:12:32
ajax.googleapis.com (1) 12905 2013-08-16 11:51:31 2023-06-03 19:04:37

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Severity Source IP Destination IP Alert
medium Client IP Internal IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (17)

HTTP Transactions (121)

URL IP Response Size
down.xiazai2.net/cx/1508311/360%C3%88%C3%AD%C2%BC%C3%BE%C2%B9%DC%BC%C3%92@59_29378.exe
209.126.123.12 547
down.xiazai2.net/favicon.ico
209.126.123.12 9
down.xiazai2.net/cx/1508311/360%C3%88%C3%AD%C2%BC%C3%BE%C2%B9%DC%BC%C3%92@59_29378.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4NTg5MTI1OCwiaWF0IjoxNjg1ODg0MDU4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGluZDdrZWdxb2d1c3ZuMGcwMDZlazgiLCJuYmYiOjE2ODU4ODQwNTgsInRzIjoxNjg1ODg0MDU4ODg4MTc3fQ.ySEGN6mFbvI1F9InHBEN-zcKj9-ispbFmWpkOCaHoVA&sid=c820dd46-02d8-11ee-b04d-17390989e0f8
209.126.123.12 11
ocsp.r2m01.amazontrust.com/
54.230.80.227 471
atala-apw.com/zcvisitor/c8720091-02d8-11ee-82bc-0abc8fcf0321/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=c889a744-02d8-11ee-82bc-0abc8fcf0321
52.86.6.42 1098
atala-apw.com/zcredirect?visitid=c8720091-02d8-11ee-82bc-0abc8fcf0321&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
52.86.6.42 338
atala-apw.com/favicon.ico
52.86.6.42 653
ocsp.r2m01.amazontrust.com/
54.230.80.227 471
spacert-1.info/api/v1/pxcheck?impId=MAHvZZp4c5MdfgjD2QGV7A6m4ifT8YR2GZFpxR0q&minfo=eyJjb29raWVEaXNhYmxlZCI6ZmFsc2UsInVhIjoiTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjoxMDkuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMTEuMCIsImlmcmFtZSI6ZmFsc2UsImRldmljZVBpeGVsUmF0aW8iOjEsInduZExvY0hyZWYiOiJodHRwczovL3NwYWNlcnQtMS5pbmZvL2FwaS92MS9weD94bWxpZD1NQUh2WlpwNGM1TWRmZ2pEMlFHVjdBNm00aWZUOFlSMkdaRnB4UjBxIiwiZGV2aWNlU3JlZW5TaXplIjoiMTAyNHgxMjgwIiwiZGV2aWNlV2luZG93U2l6ZSI6IjEwMjR4MTI4MCIsInduZDJzcmNSYXRpb0x3cjA2IjpmYWxzZSwiaXNCb3QiOiJvZmYifQ==
15.197.224.234 178
xml-v4.nxthost-2.info/click?seat=2495098&i=OjSztOVKOx0_0
173.239.53.32 0
main.proffering.xyz/15GUc7?zoneid=ce6b214f3688a69578387942e&pubfeed=295724/295724.ce6b214f3688a69578387942e&campaign=1030516&cost=0.000433&external_id=295724
20.113.67.50 310
qwfuu.altairaquilae.top/?pl=W7-lkuObDEWXzHM4LgqUhA&sub_id=arzero&click_id=10c7b2a1434e4449a9bd4ae9087a4d39-11246-0604
104.21.94.247 0
qwfuu.runicmaster.top/ph-new/assets/thumb-big.jpg
172.67.128.132 82623
qwfuu.runicmaster.top/favicon.ico
172.67.128.132 0
ocsp.pki.goog/gts1c3
142.250.74.131 471
www.gstatic.com/firebasejs/8.4.1/firebase-app.js
142.250.74.67 6763
ocsp.pki.goog/gts1c3
142.250.74.131 471
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
142.250.74.67 10908
qwfuu.runicmaster.top/ph-new/assets/rec-1.jpg
172.67.128.132 14404
qwfuu.runicmaster.top/ph-new/assets/rec-2.jpg
172.67.128.132 10890
qwfuu.runicmaster.top/ph-new/assets/rec-3.jpg
172.67.128.132 15217
qwfuu.runicmaster.top/ph-new/assets/rec-4.jpg
172.67.128.132 8900
qwfuu.runicmaster.top/ph-new/assets/rec-5.jpg
172.67.128.132 13149
qwfuu.runicmaster.top/ph-new/assets/rec-7.jpg
172.67.128.132 13963
qwfuu.runicmaster.top/ph-new/assets/1.jpg
172.67.128.132 14404
qwfuu.runicmaster.top/ph-new/assets/rec-6.jpg
172.67.128.132 15988
qwfuu.runicmaster.top/ph-new/assets/rec-8.jpg
172.67.128.132 12992
qwfuu.runicmaster.top/ph-new/assets/3.jpg
172.67.128.132 11094
qwfuu.runicmaster.top/ph-new/assets/4.jpg
172.67.128.132 13611
qwfuu.runicmaster.top/ph-new/assets/2.jpg
172.67.128.132 21253
qwfuu.runicmaster.top/ph-new/assets/5.jpg
172.67.128.132 11713
a.runicmaster.top/ph-new/assets/thumb-big.jpg
172.67.128.132 82623
qwfuu.runicmaster.top/ph-new/assets/style.css
172.67.128.132 4088
js.streampsh.top/ps/ps.js?edg=true&fullscreen=true&pl=true&id=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=10c7b2a1434e4449a9bd4ae9087a4d39-11246-0604&sub_id=arzero&appspot=
172.67.169.207 15576
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
142.250.74.67 10908
b.runicmaster.top/ph-new/assets/thumb-big.jpg
188.114.96.1 82623
a.runicmaster.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=10c7b2a1434e4449a9bd4ae9087a4d39-11246-0604&sub_id=arzero&hash=FsIKtiRCQz-NHVtqMbZ6DA&exp=1685884362
172.67.128.132 15788
www.gstatic.com/firebasejs/8.4.1/firebase-app.js
142.250.74.67 6763
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
142.250.74.67 10908
b.runicmaster.top/ph-new/assets/style.css
188.114.96.1 18492
js.streampsh.top/ps/pl.js?edg=true&fullscreen=true
172.67.169.207 12057
b.runicmaster.top/ph-new/assets/rec-5.jpg
188.114.96.1 13149
b.runicmaster.top/ph-new/assets/rec-3.jpg
188.114.96.1 15217