Report Overview

  1. Submitted URL

    tengfeidn.com/down/fw/fw.exe

  2. IP

    139.196.217.38

    ASN

    #37963 Hangzhou Alibaba Advertising Co.,Ltd.

  3. Submitted

    2023-03-19 08:19:54

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    2

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-25T18:12:03Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-25T18:14:26Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-26T05:11:12Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-26T05:11:59Z
tengfeidn.comunknown2017-04-20T11:30:43Z2023-03-24T16:44:50Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-26T05:10:29Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-26T05:09:08Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 139.196.217.38
high 139.196.217.38Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns
SeverityIndicatorAlert
mediumtengfeidn.comSinkholed

Quad9 DNS
SeverityIndicatorAlert
mediumtengfeidn.comSinkholed

ThreatFox

No alerts detected


Files detected

  1. URL

    tengfeidn.com/down/fw/fw.exe

  2. IP

    139.196.217.38

  3. ASN

    #37963 Hangzhou Alibaba Advertising Co.,Ltd.

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed\012- data

    Size

    80 kB (80384 bytes)

  2. Hash

    071189617168638e8466d57caca9fa8c

    7310789d4063bd26719e16f9acc0cdd93347675d

    Detections

    AnalyzerVerdictAlert
    VirusTotal57/71

JavaScript (0)

HTTP Transactions (21)

URLIPResponseSize
r3.o.lencr.org/
184.51.252.176200 OK503 B
r3.o.lencr.org/
184.51.252.176200 OK503 B
r3.o.lencr.org/
184.51.252.176200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
tengfeidn.com/down/fw/fw.exe
139.196.217.38200 OK80 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
184.51.252.176200 OK503 B
push.services.mozilla.com/
52.89.165.246101 Switching Protocols0 B
r3.o.lencr.org/
184.51.252.176200 OK503 B
r3.o.lencr.org/
184.51.252.176200 OK503 B
r3.o.lencr.org/
184.51.252.176200 OK503 B
r3.o.lencr.org/
184.51.252.176200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
34.120.237.76200 OK10 kB
r3.o.lencr.org/
184.51.252.176200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F834645cc-a32c-47ac-a12f-235778429d48.jpeg
34.120.237.76200 OK7.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffb155f3-4b60-4d8c-879f-3b7bd1c5c129.jpeg
34.120.237.76200 OK5.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe323f22e-6800-4578-a34f-a8fa940499e0.jpeg
34.120.237.76200 OK8.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F58bd5191-7eab-437d-a18c-a930f08c6cc6.jpeg
34.120.237.76200 OK7.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae7f77f1-adab-464f-87e7-4a15dcd322ba.jpeg
34.120.237.76200 OK6.3 kB