Report - 122.228.91.62/download.12371.cn/fzdy/9.1.doc?wsiphost=local

Report Overview

Submitted URL
122.228.91.62/download.12371.cn/fzdy/9.1.doc?wsiphost=local
IP
122.228.91.62
ASN
#134771 WENZHOU, ZHEJIANG Province, P.R.China.
Submitted
2024-05-10 11:21:24
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.digicert.cn	37572	2006-01-24	2020-03-20	2024-05-08	328 B	961 B	47.246.3.231
122.228.91.62	unknown	unknown	2023-01-09	2023-01-09	429 B	24 kB	122.228.91.62

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	122.228.91.62	Sinkholed

ThreatFox

No alerts detected

Files detected

URL
122.228.91.62/download.12371.cn/fzdy/9.1.doc?wsiphost=local
IP
122.228.91.62
ASN
#134771 WENZHOU, ZHEJIANG Province, P.R.China.

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1200, Locale ID: 2052, Author: adm, Template: Normal, Last Saved By: aqu, Total Editing Time: Mon Jan 1 16:00:00 1900, Create Time/Date: Wed Oct 29 12:08:00 2014, Last Saved Time/Date: Fri Feb 22 03:02:37 2019, Number of Pages: 1, Number of Words: 0, Number of Characters: 0, Name of Creating Application: WPS Office_11.1.0.8214_F1E327B, Security: 0
Size
24 kB (23552 bytes)
Hash
74f87691353f4227a43d4125d2a30f55
af8e24197881afacb362025d2db339ee4bdc3a0d
4fc422aeaa47a38a041596ec12f1a76b4c8695466d8677e325ee366023ad75b9

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

ocsp.digicert.cn/

47.246.3.231

471 B

URL
ocsp.digicert.cn/
IP
47.246.3.231:0
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
data
Size
471 B (471 bytes)
Hash
16f729460641e969d5e50eb0b174e59c
0e998a889f7afa1657d809637984102fdb99db34
9763485fff41cb2ac90d3082cd13c5f22f69b2b5396a75bdb86e63e0004e6baf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 11:21:00 GMT
Ali-Swift-Global-Savetime: 1715340060
Via: cache16.l2de2[6,5,200-0,M], cache16.l2de2[6,0], cache8.ru4[39,38,200-0,M], cache8.ru4[39,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Fri, 10 May 2024 11:21:00 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039c17153400602642675e

122.228.91.62/download.12371.cn/fzdy/9.1.doc?wsiphost=local

122.228.91.62

200 OK

24 kB

URL User Request GET HTTP/1.1
122.228.91.62/download.12371.cn/fzdy/9.1.doc?wsiphost=local
IP
122.228.91.62:80
ASN
#134771 WENZHOU, ZHEJIANG Province, P.R.China.

File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1200, Locale ID: 2052, Author: adm, Template: Normal, Last Saved By: aqu, Total Editing Time: Mon Jan 1 16:00:00 1900, Create Time/Date: Wed Oct 29 12:08:00 2014, Last Saved Time/Date: Fri Feb 22 03:02:37 2019, Number of Pages: 1, Number of Words: 0, Number of Characters: 0, Name of Creating Application: WPS Office_11.1.0.8214_F1E327B, Security: 0
Size
24 kB (23552 bytes)
Hash
74f87691353f4227a43d4125d2a30f55
af8e24197881afacb362025d2db339ee4bdc3a0d
4fc422aeaa47a38a041596ec12f1a76b4c8695466d8677e325ee366023ad75b9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /download.12371.cn/fzdy/9.1.doc?wsiphost=local HTTP/1.1
Host: 122.228.91.62
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 11:21:00 GMT
Content-Type: application/msword
Content-Length: 23552
Connection: keep-alive
Expires: Fri, 10 May 2024 06:54:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=600
ETag: "5c7361d3-5c00"
Last-Modified: Mon, 25 Feb 2019 03:32:35 GMT
Server: CCTV_WebServer
X-Ua-Compatible: IE=EmulateIE7
x-via: 1.1 PS-FOC-011jO18:9 (Cdn Cache Server V2.0), 1.1 ianxin167:11 (Cdn Cache Server V2.0)
Age: 16607
X-Ws-Request-Id: 663e031c_ianxin167_25949-6687

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers