Report Overview

  1. Submitted URL

    gus168.com/cso/csol_gg88_v48_pe3.rar

  2. IP

    103.224.212.221

    ASN

    #133618 Trellian Pty. Limited

  3. Submitted

    2023-05-15 01:42:17

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    6

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
d38psrni17bvxu.cloudfront.netunknown2008-04-252022-09-222023-05-14
ocsp.r2m01.amazontrust.comunknown2007-05-112022-10-122023-05-14
gus168.comunknown2023-03-222012-08-042023-05-14
ww38.gus168.comunknown2023-03-222023-03-012023-04-11
d.crystalcrafter.topunknown2023-04-292023-05-092023-05-14
cdn-dimi.akamaized.netunknown2014-03-182022-07-072023-05-13
oxbnr.amouronllne.comunknown2023-05-092023-05-112023-05-14
fonts.googleapis.com88772005-01-252013-06-102023-05-14
qwfuu.crystalcrafter.topunknown2023-04-292023-05-102023-05-14
js.streampsh.topunknown2022-11-182023-05-012023-05-14
a.crystalcrafter.topunknown2023-04-292023-05-092023-05-14
c.crystalcrafter.topunknown2023-04-292023-05-092023-05-14
fonts.gstatic.comunknown2008-02-112014-09-092023-05-14
b.crystalcrafter.topunknown2023-04-292023-05-092023-05-14
fulbe-whs.comunknown2023-05-022023-05-022023-05-14
go.proffering.xyzunknown2022-06-072022-06-082023-05-13
qwfuu.altairaquilae.topunknown2023-05-032023-05-112023-05-14
ocsp.pki.goog1752016-06-132018-07-012023-05-14
www.gstatic.comunknown2008-02-112016-07-262023-05-14
feed.streampsh.topunknown2022-11-182023-05-012023-05-14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumgus168.com/cso/csol_gg88_v48_pe3.rar
mediumww38.gus168.com/cso/csol_gg88_v48_pe3.rar
mediumoxbnr.amouronllne.com/ortb

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (8)

HTTP Transactions (79)

URLIPResponseSize
gus168.com/cso/csol_gg88_v48_pe3.rar
103.224.212.221 0 B
ww38.gus168.com/cso/csol_gg88_v48_pe3.rar
13.248.148.254 1.4 kB
d38psrni17bvxu.cloudfront.net/scripts/js3.js
54.230.245.8 1.1 kB
ww38.gus168.com/track.php?domain=gus168.com&toggle=browserjs&uid=MTY4NDExNDkyMC4xMTA5OjBlN2M3YjY3YmFkYTViNGVkMTQ2ZTQxNDE2M2NkZjY0ZjNiZWJlMjg3ZWVjMWFiYTU3YWZmYjc4OTQ5Mzg3ZWU6NjQ2MThkZTgxYjEyNw%3D%3D
13.248.148.254 20 B
ww38.gus168.com/ls.php?t=64618de8&token=07d7e49e0a366f25a1f47e35dc934041e2da05cc
13.248.148.254 16 B
ww38.gus168.com/favicon.ico
13.248.148.254 0 B
ww38.gus168.com/track.php?click=5f91c3ec687beba0dd5147fc491e95ff166fd5a4&domain=gus168.com&uid=MTY4NDExNDkyMC4xMTA5OjBlN2M3YjY3YmFkYTViNGVkMTQ2ZTQxNDE2M2NkZjY0ZjNiZWJlMjg3ZWVjMWFiYTU3YWZmYjc4OTQ5Mzg3ZWU6NjQ2MThkZTgxYjEyNw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NDYxOGRlODFiMTAwfHx8MTY4NDExNDkyMC40MjA4fGJmMTVmYjI1ODBkZTlmOWZiNGFhODFlOGQ3ZWI4N2JjODUyODk2NGJ8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXwwN2Q3ZTQ5ZTBhMzY2ZjI1YTFmNDdlMzVkYzkzNDA0MWUyZGEwNWNjfDB8ZHAtdGVhbWludGVybmV0MDlfM3BofDB8MA%3D%3D&kw=&search=&pcat=&bucket=&clientID=&adtest=off
13.248.148.254 20 B
ocsp.r2m01.amazontrust.com/
143.204.48.16 471 B
fulbe-whs.com/zcvisitor/af57cc1b-f2c1-11ed-a892-0ac864ebb01b/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=e1920750-cd68-11ed-857c-0a918cbcbb97
54.165.180.165 1.1 kB
fulbe-whs.com/zcredirect?visitid=af57cc1b-f2c1-11ed-a892-0ac864ebb01b&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
54.165.180.165 462 B
fulbe-whs.com/favicon.ico
54.165.180.165 653 B
go.proffering.xyz/15GUIL?zoneid=lateritious-falcon&campaignid=2069719&target=lima-not-vqplrm6jg4&cost=0.001200&external_id=NON-ADULT
20.113.67.50 312 B
qwfuu.altairaquilae.top/?pl=W7-lkuObDEWXzHM4LgqUhA&sub_id=parkdom&click_id=c2a69c481401bfccd7a8cbd0bc3d4786-11246-0515
172.67.142.37 0 B
qwfuu.crystalcrafter.top/ph-new/assets/thumb-big.jpg
104.21.7.3 83 kB
qwfuu.crystalcrafter.top/favicon.ico
104.21.7.3 0 B
ocsp.pki.goog/gts1c3
142.250.74.131 471 B
www.gstatic.com/firebasejs/8.4.1/firebase-app.js
142.250.74.35 6.8 kB
ocsp.pki.goog/gts1c3
142.250.74.131 471 B
qwfuu.crystalcrafter.top/ph-new/assets/rec-1.jpg
104.21.7.3 14 kB
qwfuu.crystalcrafter.top/ph-new/assets/rec-2.jpg
104.21.7.3 11 kB
qwfuu.crystalcrafter.top/ph-new/assets/rec-3.jpg
104.21.7.3 15 kB
qwfuu.crystalcrafter.top/ph-new/assets/rec-4.jpg
104.21.7.3 8.9 kB
qwfuu.crystalcrafter.top/ph-new/assets/rec-5.jpg
104.21.7.3 13 kB
qwfuu.crystalcrafter.top/ph-new/assets/rec-6.jpg
104.21.7.3 16 kB
qwfuu.crystalcrafter.top/ph-new/assets/rec-8.jpg
104.21.7.3 13 kB
qwfuu.crystalcrafter.top/ph-new/assets/rec-7.jpg
104.21.7.3 14 kB
qwfuu.crystalcrafter.top/ph-new/assets/1.jpg
104.21.7.3 14 kB
qwfuu.crystalcrafter.top/ph-new/assets/2.jpg
104.21.7.3 21 kB
qwfuu.crystalcrafter.top/ph-new/assets/3.jpg
104.21.7.3 11 kB
qwfuu.crystalcrafter.top/ph-new/assets/4.jpg
104.21.7.3 14 kB
qwfuu.crystalcrafter.top/ph-new/assets/5.jpg
104.21.7.3 12 kB
js.streampsh.top/ps/pl.js?edg=true&fullscreen=true
172.67.169.207 12 kB
a.crystalcrafter.top/ph-new/assets/thumb-big.jpg
104.21.7.3 83 kB
qwfuu.crystalcrafter.top/ph-new/assets/trls.js
104.21.7.3 2.9 kB
feed.streampsh.top/ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA
172.67.169.207 7.0 kB
a.crystalcrafter.top/ph-new/assets/trls.js
104.21.7.3 14 kB
a.crystalcrafter.top/ph-new/assets/style.css
104.21.7.3 87 kB
b.crystalcrafter.top/ph-new/assets/trls.js
104.21.7.3 4.0 kB
feed.streampsh.top/ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA
172.67.169.207 7.0 kB
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
142.250.74.35 11 kB
a.crystalcrafter.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=c2a69c481401bfccd7a8cbd0bc3d4786-11246-0515&sub_id=parkdom&hash=7goXiZv9aMpoEQSxDyPcwg&exp=1684115223
104.21.7.3 98 kB
qwfuu.crystalcrafter.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=c2a69c481401bfccd7a8cbd0bc3d4786-11246-0515&sub_id=parkdom&hash=7goXiZv9aMpoEQSxDyPcwg&exp=1684115223
104.21.7.3 21 kB
www.gstatic.com/firebasejs/8.4.1/firebase-app.js
142.250.74.35 6.8 kB
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
142.250.74.35 11 kB
d.crystalcrafter.top/ph-new/assets/thumb-big.jpg
104.21.7.3 83 kB
a.crystalcrafter.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=c2a69c481401bfccd7a8cbd0bc3d4786-11246-0515&sub_id=parkdom&hash=7goXiZv9aMpoEQSxDyPcwg&exp=1684115223
104.21.7.3 20 kB
www.gstatic.com/firebasejs/8.4.1/firebase-app.js
142.250.74.35 6.8 kB
www.gstatic.com/firebasejs/8.4.1/firebase-messaging.js
142.250.74.35 11 kB
feed.streampsh.top/ps/config.js?id=W7-lkuObDEWXzHM4LgqUhA
172.67.169.207 15 kB
c.crystalcrafter.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=c2a69c481401bfccd7a8cbd0bc3d4786-11246-0515&sub_id=parkdom&hash=7goXiZv9aMpoEQSxDyPcwg&exp=1684115223
104.21.7.3 33 kB
d.crystalcrafter.top/ph-new/assets/rec-3.jpg
104.21.7.3 15 kB
d.crystalcrafter.top/ph-new/assets/style.css
104.21.7.3 13 kB
d.crystalcrafter.top/ph-new/assets/trls.js
104.21.7.3 16 kB
d.crystalcrafter.top/ph-new/assets/rec-6.jpg
104.21.7.3 16 kB
d.crystalcrafter.top/ph-new/assets/rec-7.jpg
104.21.7.3 14 kB
d.crystalcrafter.top/ph-new/assets/rec-8.jpg
104.21.7.3 13 kB
b.crystalcrafter.top/ph-new/assets/style.css
104.21.7.3 18 kB
c.crystalcrafter.top/ph-new/?pl=W7-lkuObDEWXzHM4LgqUhA&sm=ph-new&click_id=c2a69c481401bfccd7a8cbd0bc3d4786-11246-0515&sub_id=parkdom&hash=7goXiZv9aMpoEQSxDyPcwg&exp=1684115223
104.21.7.3 38 kB
c.crystalcrafter.top/ph-new/assets/trls.js
104.21.7.3 29 kB
d.crystalcrafter.top/ph-new/assets/3.jpg
104.21.7.3 11 kB
d.crystalcrafter.top/ph-new/assets/5.jpg
104.21.7.3 12 kB
cdn-dimi.akamaized.net/landings/279205/1680702419/css/reset.min.css?1680702420
88.221.27.74200 OK527 B
cdn-dimi.akamaized.net/landings/279205/1680702419/js/translates.js?1680702420
88.221.27.74200 OK8.6 kB
cdn-dimi.akamaized.net/landings/279205/1680702419/css/style.css?1680702420
88.221.27.74200 OK1.8 kB
cdn-dimi.akamaized.net/landings/279205/1680702419/js/jquery.min.js?1680702420
88.221.27.74200 OK30 kB
cdn-dimi.akamaized.net/landings/279205/1680702419/js/scripts.js?1680702420
88.221.27.74200 OK511 B
cdn-dimi.akamaized.net/landings/279205/1680702419/images/logo.svg
88.221.27.74200 OK11 kB
cdn-dimi.akamaized.net/landings/279205/1680702419/images/girl-ico.png
88.221.27.74200 OK1.5 kB
ocsp.pki.goog/gts1c3
142.250.74.131 472 B
ocsp.pki.goog/gts1c3
142.250.74.131 472 B
ocsp.pki.goog/gts1c3
142.250.74.131 471 B
oxbnr.amouronllne.com/ortb
63.32.216.166200 OK29 B
cdn-dimi.akamaized.net/landings/279205/1680702419/images/video-1.mp4
88.221.27.74206 Partial Content1.1 MB
ocsp.pki.goog/gts1c3
142.250.74.131 471 B
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.227200 OK24 kB
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
216.58.207.227200 OK23 kB
cdn-dimi.akamaized.net/landings/279205/1680702419/images/favicon.ico?t=20230515014207
88.221.27.74200 OK14 kB
oxbnr.amouronllne.com/?utm_source=da57dc555e50572d&s1=43431&s2=1106323&s5=back&j1=1&j5=1
63.32.216.166200 OK35 kB
fonts.googleapis.com/css2?family=Lato:wght@400;700&display=swap
142.250.74.106200 OK1.5 kB