Report Overview

  1. Visited public
    2023-09-23 17:52:05
    Tags
  2. URL

    www.temu.com/u/3KwoltrH9MQbU2aI

  3. Finishing URL

    www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&btn_active=1&fish_banner=no&gs_code_way=3&gs_comp_expired=1695494837&needs_login=1&login_scene=7&_p_login_channel=activity&_x_campaign=mkt_activity&_x_sid=free_goods_invite&_x_share_id=ab88qEWzpvdJrz4LLP4valWEOIo0Ktw3&_x_cid=mkt_activity_goods&refer_share_id=coGdlTLAUUe0NGSH77X9fxa7uDruK8Ul&refer_share_channel=snapchat_chat&refer_share_suin=BA7FC4ZNSF3LYORQGAZ2S57O3YPMH6ZCAKACQDOGHFDSE&group_sn=230922-64AAB88D5ECF6B9A1492&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=454262528&gs_og_title=Peux-tu%20accepter%20mon%20invitation%20afin%20que%20je%20puisse%20obtenir%20un%20cadeau%20gratuit%3F&gs_og_description=Clique%20sur%20le%20lien%20maintenant%20et%20participe%20%26agrave%3B%20cet%20%26eacute%3Bv%26egrave%3Bnement.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2F8ef0924c-446d-4ed3-8e7e-fa2a442685bf.png.slim.png

  4. IP / ASN
    20.105.12.146

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

    Title
    Get Free Gifts
Detections
urlquery
0
Network Intrusion Detection
73
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
eu.pftk.temu.comunknown2003-04-292023-04-25 17:58:502023-09-22 18:39:14
ocsp.godaddy.com6981999-03-022012-05-20 21:28:572023-09-23 05:11:26
www.temu.comunknown2003-04-292021-09-28 09:23:292023-09-22 19:15:47
aimg.kwcdn.comunknown2022-08-082022-09-05 12:50:082023-09-22 18:40:22
static.kwcdn.comunknown2022-08-082022-09-05 12:50:072023-09-22 18:40:22
eu.thtk.temu.comunknown2003-04-292023-04-25 17:58:492023-09-22 18:17:28
locale.temu.comunknown2003-04-292022-09-05 12:50:082023-09-22 18:17:27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 74.125.24.127
lowClient IP 64.233.163.127
lowClient IP 216.93.246.18
lowClient IP 62.71.2.168
lowClient IP 74.125.24.127
lowClient IP 64.233.163.127
lowClient IP 212.227.67.33
lowClient IP 216.93.246.18
lowClient IP 77.72.169.210
lowClient IP 77.72.169.212
lowClient IP 62.71.2.168
lowClient IP 185.53.178.50
lowClient IP 172.253.121.127
lowClient IP 212.227.67.33
lowClient IP 74.125.204.127
lowClient IP 77.72.169.210
lowClient IP 172.217.213.127
lowClient IP 77.72.169.212
lowClient IP 75.2.81.221
lowClient IP 185.53.178.50
lowClient IP 74.125.24.127
lowClient IP 172.253.121.127
lowClient IP 64.233.163.127
lowClient IP 74.125.204.127
lowClient IP 216.93.246.18
lowClient IP 172.217.213.127
lowClient IP 75.2.81.221
lowClient IP 62.71.2.168
lowClient IP 212.227.67.33
lowClient IP 77.72.169.210
lowClient IP 77.72.169.212
lowClient IP 185.53.178.50
lowClient IP 172.253.121.127
lowClient IP 74.125.204.127
lowClient IP 172.217.213.127
lowClient IP 75.2.81.221
lowClient IP 74.125.24.127
lowClient IP 64.233.163.127
lowClient IP 216.93.246.18
lowClient IP 62.71.2.168
lowClient IP 212.227.67.33
lowClient IP 77.72.169.210
lowClient IP 77.72.169.212
lowClient IP 185.53.178.50
lowClient IP 172.253.121.127
lowClient IP 74.125.204.127
lowClient IP 172.217.213.127
lowClient IP 75.2.81.221
lowClient IP 74.125.24.127
lowClient IP 64.233.163.127
lowClient IP 216.93.246.18
lowClient IP 62.71.2.168
lowClient IP 212.227.67.33
lowClient IP 77.72.169.210
lowClient IP 77.72.169.212
lowClient IP 185.53.178.50
lowClient IP 172.253.121.127
lowClient IP 74.125.204.127
lowClient IP 172.217.213.127
lowClient IP 75.2.81.221
lowClient IP 74.125.24.127
lowClient IP 64.233.163.127
lowClient IP 216.93.246.18
lowClient IP 62.71.2.168
lowClient IP 212.227.67.33
lowClient IP 77.72.169.210
lowClient IP 77.72.169.212
lowClient IP 185.53.178.50
lowClient IP 172.253.121.127
lowClient IP 74.125.204.127
lowClient IP 172.217.213.127
lowClient IP 75.2.81.221
lowClient IP 74.125.24.127

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (22)

HTTP Transactions (38)

URLIPResponseSize
ocsp.godaddy.com/
192.124.249.22 2.1 kB
www.temu.com/u/3KwoltrH9MQbU2aI
20.105.12.146302 Found0 B
ocsp.godaddy.com/
192.124.249.24 2.1 kB
aimg.kwcdn.com/upload_aimg/dawn/5ea8a749-5879-4749-8a81-0e69cd361303.png.slim.png
172.64.152.105200 OK19 kB
ocsp.godaddy.com/
192.124.249.22 2.1 kB
ocsp.godaddy.com/
192.124.249.41 2.1 kB
ocsp.godaddy.com/
192.124.249.41 2.1 kB
ocsp.godaddy.com/
192.124.249.22 2.1 kB
ocsp.godaddy.com/
192.124.249.41 2.1 kB
static.kwcdn.com/m-assets/assets/css/ruby_free_goods_ec87f750b6bcc0e1ec15.css
104.18.35.151200 OK1.0 MB
eu.thtk.temu.com/c/th.gif
4.207.236.117200 OK0 B
static.kwcdn.com/m-assets/assets/js/react_webpack_runtime_8c824c6e84db878024ea.js
104.18.35.151200 OK27 kB
static.kwcdn.com/m-assets/assets/js/4208_e4378c30181ed52d121f.js
104.18.35.151200 OK85 kB
www.temu.com/api/phantom/xg/pfb/a4
20.105.12.146200 OK194 B
eu.thtk.temu.com/c/th.gif
4.207.236.117200 OK0 B
locale.temu.com/api/bg/huygens/region/locate
20.67.142.53200 OK0 B
locale.temu.com/api/bg/huygens/region/locate
20.105.12.146200 OK778 B
www.temu.com/api/phantom/xg/pfb/b
20.105.12.146200 OK161 B
eu.pftk.temu.com/pmm/api/pmm/api
20.123.108.148200 OK0 B
static.kwcdn.com/m-assets/assets/js/vendors_3af600f6a0cdf0bf5aa6.js
104.18.35.151200 OK455 kB
www.temu.com/api/phantom/dm/wl/cg
20.105.12.146200 OK112 B
www.temu.com/api/phantom/xg/pfb/l1
20.105.12.146200 OK114 B
www.temu.com/api/phantom/xg/pfb/l1
20.105.12.146200 OK114 B
www.temu.com/favicon.ico
20.105.12.146200 OK17 kB
eu.pftk.temu.com/pmm/api/pmm/defined
20.123.108.148200 OK0 B
www.temu.com/api/phantom/xg/pfb/a4
20.105.12.146200 OK194 B
static.kwcdn.com/m-assets/assets/js/biz_vendors_92ff55f2af4cf0983848.js
104.18.35.151200 OK300 kB
www.temu.com/api/server/_stm
20.105.12.146200 OK29 B
eu.thtk.temu.com/c/th.gif
4.207.236.117200 OK0 B
eu.thtk.temu.com/c/th.gif
4.207.236.117200 OK0 B
www.temu.com/api/phantom/xg/pfb/a3
20.105.12.146200 OK65 B
eu.thtk.temu.com/c/th.gif
4.207.236.117200 OK0 B
static.kwcdn.com/m-assets/assets/js/ruby_free_goods_cc0ad6f387a3ce07d207.js
104.18.35.151200 OK3.5 MB
static.kwcdn.com/m-assets/assets/js/risk-finger-h5_25b7481b04f85f00493b.js
104.18.35.151200 OK100 kB
eu.thtk.temu.com/c/th.gif
4.207.236.117200 OK0 B
eu.pftk.temu.com/pmm/api/pmm/api
20.123.108.148200 OK0 B
eu.thtk.temu.com/c/th.gif
4.207.236.117200 OK0 B
www.temu.com/ruby_free_goods.html?_bg_fs=1&_p_rfs=1&btn_active=1&fish_banner=no&gs_code_way=3&gs_comp_expired=1695494837&needs_login=1&login_scene=7&_p_login_channel=activity&_x_campaign=mkt_activity&_x_sid=free_goods_invite&_x_share_id=ab88qEWzpvdJrz4LLP4valWEOIo0Ktw3&_x_cid=mkt_activity_goods&refer_share_id=coGdlTLAUUe0NGSH77X9fxa7uDruK8Ul&refer_share_channel=snapchat_chat&refer_share_suin=BA7FC4ZNSF3LYORQGAZ2S57O3YPMH6ZCAKACQDOGHFDSE&group_sn=230922-64AAB88D5ECF6B9A1492&_ex_campaign=mkt_activity&_ex_cid=mkt_activity_goods&_ex_sid=free_goods_invite&gs_invite_code=454262528&gs_og_title=Peux-tu%20accepter%20mon%20invitation%20afin%20que%20je%20puisse%20obtenir%20un%20cadeau%20gratuit%3F&gs_og_description=Clique%20sur%20le%20lien%20maintenant%20et%20participe%20%26agrave%3B%20cet%20%26eacute%3Bv%26egrave%3Bnement.&gs_og_image=https%3A%2F%2Faimg.kwcdn.com%2Fupload_aimg%2Fdawn%2F8ef0924c-446d-4ed3-8e7e-fa2a442685bf.png.slim.png
20.105.12.146200 OK236 kB