Report Overview

  1. Submitted URL

    xl.ku280.com/down/%E5%A4%8F%E7%8E%B2%E7%94%B5%E8%A7%864.9.exe

  2. IP

    54.67.42.145

    ASN

    #16509 AMAZON-02

  3. Submitted

    2023-06-02 00:40:49

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    7

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
senbackkg.kz4702q.comunknown2021-04-162022-02-162023-05-28
senbackkg.salinent.comunknown2021-02-102021-08-192023-05-28
ocsp2.globalsign.com15441999-04-192012-05-232023-06-01
xl.ku280.comunknown2019-03-152012-08-082018-05-22
zo5858.netunknown2023-03-132023-04-022023-05-14
ocsp.sectigo.com4872018-08-162019-11-292023-06-02
senbackkg.smlldom.comunknown2021-02-102022-02-162023-05-28
8.134.91.135:29700unknownunknownNo dataNo data
unknown
g.alicdn.com67872008-06-252014-10-062023-06-01
fpnpmcdn.netunknown2022-03-232022-03-232023-05-31

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 108.177.14.127
lowClient IP 108.177.14.127
lowClient IP 108.177.14.127
lowClient IP 108.177.14.127
lowClient IP 108.177.14.127
lowClient IP 108.177.14.127
lowClient IP 108.177.14.127

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium8.134.91.135
medium8.134.91.135

ThreatFox

No alerts detected


JavaScript (20)

HTTP Transactions (58)

URLIPResponseSize
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226 1.4 kB
xl.ku280.com/down/%E5%A4%8F%E7%8E%B2%E7%94%B5%E8%A7%864.9.exe
52.8.134.32 0 B
zo5858.net/
192.232.249.25200 OK926 B
ocsp.sectigo.com/
104.18.15.101 472 B
8.134.91.135:29700/kok/icon.ico
8.134.91.135 4.3 kB
8.134.91.135:29700/kok/logo.png
8.134.91.135 13 kB
www.zoty1131.com:30501/register/?i_code=5612131
38.47.131.99200 OK1.8 kB
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.21.226 1.5 kB
g.alicdn.com/AWSC/AWSC/awsc.js
47.246.44.252200 OK3.6 kB
www.zoty1131.com:30501/lib/font/font.css?v=1685421970238&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK653 B
www.zoty1131.com:30501/client/css/antd~index~81ba8019.7d6cd91c.css?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK41 kB
www.zoty1131.com:30501/client/css/index~493df0b3.f4c96fd3.css?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK51 kB
www.zoty1131.com:30501/client/runtime.af19128a.bundle.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK4.1 kB
www.zoty1131.com:30501/client/css/index~83218900.8cf70c22.css?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK20 kB
www.zoty1131.com:30501/client/css/index~5366e8ae.5b1f15cb.css?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK43 kB
www.zoty1131.com:30501/client/js/fnUtils~index~9b1fde68.ff6db461.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK48 kB
www.zoty1131.com:30501/client/js/antd~index~81ba8019.cf901afe.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK118 kB
www.zoty1131.com:30501/client/js/vendors~index~9b1fde68.2682a568.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK179 kB
www.zoty1131.com:30501/client/js/vendors~index~34e3d95a.37a30246.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK118 kB
www.zoty1131.com:30501/client/js/vendors~index~e4dfd1bd.684c01ec.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK148 kB
www.zoty1131.com:30501/client/js/index~5366e8ae.0e3bd208.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK149 kB
www.zoty1131.com:30501/client/js/index~83218900.5f4bc6c6.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK217 kB
www.zoty1131.com:30501/client/js/index~493df0b3.aeab890d.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK145 kB
www.zoty1131.com:30501/client/js/index~cfb9e35e.500a246b.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK366 kB
fpnpmcdn.net/v3/N8SS4vV88WAMKvWcnRm2/loader_v3.7.1.js
54.230.111.100200 OK45 kB
www.zoty1131.com:30501/favicon.ico
38.47.131.99200 OK1.8 kB
www.zoty1131.com:30501/timeServer
38.47.131.99200 OK89 B
www.zoty1131.com:30501/client/assets/loading.2fc8c952.png
38.47.131.99200 OK8.5 kB
www.zoty1131.com:30501/client/css/Register~81ba8019.fc154fa2.css?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK18 kB
www.zoty1131.com:30501/scytale/o555dzqde5iloznepncnzoyvh54nsbsq
38.47.131.99200 OK280 B
www.zoty1131.com:30501/fpapi-tls/
38.47.131.99200 OK134 B
www.zoty1131.com:30501/scytale/fzffdzqe57yhrvr2p247dt8v7ga2lltv
38.47.131.99200 OK632 B
www.zoty1131.com:30501/scytale/jfffdzriphckgwaqguv2bfjpl2mezrw8
38.47.131.99200 OK192 B
www.zoty1131.com:30501/scytale/qwffdzc4x8qngwruj5lu5viblahlnulv
38.47.131.99200 OK2.0 kB
www.zoty1131.com:30501/client/js/Register~81ba8019.36018c09.chunk.js?v=v1&nginx-cdn-origin=https://senbackkg.kz4702q.com
38.47.131.99200 OK26 kB
www.zoty1131.com:30501/scytale/8zffdzcno2i5gph5k5kzlxkthml75rdc
38.47.131.99200 OK400 B
www.zoty1131.com:30501/scytale/8wffdzjh82774n4cdvnp4s2rwjnpjrfz
38.47.131.99200 OK1.5 kB
www.zoty1131.com:30501/scytale/llffdzc1riirujbmqptv8sys1kis1n71
38.47.131.99200 OK1.7 kB
www.zoty1131.com:30501/scytale/2lffdzrfrkvknzxy2kfkmu5vkzbstgkr
38.47.131.99200 OK720 B
www.zoty1131.com:30501/scytale/gaf5dzjwt7wnbzm1sp77ucoq2vlto2xu
38.47.131.99200 OK408 B
www.zoty1131.com:30501/scytale/jwffdzj1opehvrwijjj11dpxgvrnlt4p
38.47.131.99200 OK3.7 kB
www.zoty1131.com:30501/scytale/ccafdzrybvod78eqqb75kuwss45o1qmo
38.47.131.99200 OK792 B
www.zoty1131.com:30501/scytale/n5afdz42vsidefgsppnacnaoms2jsqmy
38.47.131.99200 OK320 B
www.zoty1131.com:30501/scytale/4tafdz4wuq8f7rm5u1yccqw7vqxsvvbe
38.47.131.99200 OK328 B
www.zoty1131.com:30501/scytale/olafdzneeo25opzqj7xle422gasf1sgs
38.47.131.99200 OK2.2 kB
senbackkg.kz4702q.com/main-consumer-web/assets-oss/zhongou/images/v4_logoEntry/sign-icon-user_2@2x.8d79fdcdccc5a9fc172411d25af00378.svg
213.176.35.16200 OK437 B
senbackkg.salinent.com/clientManage/cb2dd15c51ab48b0bc1760b1db4e799d.png
213.176.34.157200 OK12 kB
senbackkg.kz4702q.com/main-consumer-web/assets-oss/zhongou/images/v4_logoEntry/bg.32e3e220b417e821394917c729fd291f.webp
213.176.35.16200 OK183 kB
senbackkg.kz4702q.com/main-consumer-web/assets-oss/zhongou/images/v4_logoEntry/icon_password.5996ece196e8f0fb8c1267007e7fa912.webp
213.176.35.16200 OK534 B
senbackkg.kz4702q.com/main-consumer-web/assets-oss/zhongou/images/v4_logoEntry/sign-icon-dun.d3973b6ec6b0f88c129590aa57294773.webp
213.176.35.16200 OK570 B
senbackkg.kz4702q.com/main-consumer-web/assets-oss/zhongou/images/v4_logoEntry/eye_close.5e1e199ea8779f41119069e654b8eb70.webp
213.176.35.16200 OK340 B
senbackkg.salinent.com/clientManage/ce906ce9d30f414a83430b8c1125e50f.png
213.176.34.157200 OK2.5 kB
senbackkg.salinent.com/clientManage/3bf05bf84f184029aeffcf8cdc38a1d8.png
213.176.34.157200 OK12 kB
senbackkg.kz4702q.com/main-consumer-web/assets-oss/zhongou/images/v4_logoEntry/icon_user.f2f17565494eda9256b2c886d14629b9.webp
213.176.35.16200 OK496 B
senbackkg.kz4702q.com/main-consumer-web/assets-oss/commons/images/login/icon-online-service.7a0ac40b09d8c68e8fdb7bb1ea91fc29.svg
213.176.35.16200 OK1.7 kB
senbackkg.kz4702q.com/main-consumer-web/resource/font/DINPro-Medium.ttf
213.176.35.16200 OK89 kB
senbackkg.kz4702q.com/main-consumer-web/assets-oss/zhongou/videos/login/video.0d15943ba0bd709b5c56e4c3d7f3cd1f.mp4
213.176.35.16206 Partial Content180 kB
senbackkg.smlldom.com/s/b5tflzqji5atstjttjqnoc5f1hpefnuu
0.0.0.0 0 B