Report Overview

  1. Submitted URL

    fztksw.com/vpp

  2. IP

    154.221.155.235

    ASN

    #134175 UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD

  3. Submitted

    2023-03-28 07:27:11

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  2. urlquery

    0

  3. Network Intrusion Detection

    7

  4. Threat Detection Systems

    48

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-29T05:09:31Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-29T05:09:31Z
154.23.152.106unknown
154.82.84.179unknown2019-06-05T15:22:53Z2020-10-13T19:01:35Z
662aaa.usunknown2023-02-15T17:31:11Z2023-03-28T09:27:27Z
push.zhanzhang.baidu.com571392015-07-22T07:44:02Z2023-03-29T11:27:38Z
154.82.85.49unknown2019-04-13T00:24:53Z2023-03-29T06:22:47Z
www.tukky.vipunknown2022-11-04T15:42:28Z2023-03-28T09:27:04Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-29T05:09:11Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-29T05:09:03Z
fztksw.comunknown2015-12-18T15:10:38Z2023-03-20T04:17:48Z
154.23.152.109unknown
taiwtp1.comunknown2022-04-08T09:06:08Z2023-03-28T10:13:07Z
ia.51.la596072017-10-31T09:01:51Z2023-03-29T11:26:02Z
aooacctp.vipunknown2022-04-15T19:51:21Z2023-03-29T11:43:40Z
d.dcvbnzss.xyzunknown2023-03-11T10:57:28Z2023-03-28T09:46:54Z
p26.toutiaoimg.com752862021-01-20T18:21:02Z2023-03-29T15:23:01Z
tukudhgg.vipunknown2022-08-24T12:58:55Z2023-03-28T09:27:07Z
667aaa.usunknown2023-02-17T06:50:57Z2023-03-28T09:27:25Z
665aaa.usunknown2023-02-15T10:44:04Z2023-03-29T17:25:22Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-29T05:09:12Z
api.share.baidu.com446292013-04-25T16:45:11Z2023-03-29T11:27:40Z
ocsp.globalsign.com20752012-07-20T19:46:16Z2023-03-29T05:11:35Z
js.users.51.la530242012-05-30T17:10:11Z2023-03-29T10:04:13Z
ocsp.digicert.cn375722020-03-20T18:45:56Z2023-03-29T14:33:03Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-29T11:45:01Z
tupkku.topunknown2022-07-03T19:27:30Z2023-03-28T09:37:36Z
www.fztksw.comunknown2017-02-26T13:38:11Z2023-01-16T14:52:27Z
u22088.comunknown2023-01-11T05:41:26Z2023-03-29T13:28:21Z
ocsp.sectigo.com4872019-11-29T12:50:24Z2023-03-29T08:59:28Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-29T05:09:32Z
154.91.83.214unknown2018-08-16T19:07:02Z2019-01-20T01:59:23Z
si1.go2yd.com3259182017-02-02T12:37:19Z2023-03-28T10:13:08Z
ocsp.r2m01.amazontrust.comunknown2022-10-12T22:43:53Z2023-03-29T09:11:41Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
ET DNS Query to a *.top domain - Likely Hostile
mediumClient IPInternal IP
ET DNS Query for .cc TLD
mediumClient IPInternal IP
ET DNS Query for .cc TLD
mediumClient IPInternal IP
ET DNS Query for .cc TLD
mediumClient IPInternal IP
ET DNS Query for .cc TLD
mediumClient IPInternal IP
ET DNS Query for .cc TLD
mediumClient IPInternal IP
ET DNS Query for .cc TLD

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium154.91.83.214Sinkholed
medium154.82.85.49Sinkholed
medium154.23.152.109Sinkholed
medium154.23.152.106Sinkholed
medium154.23.152.109Sinkholed
medium154.23.152.109Sinkholed
medium154.82.84.179Sinkholed
medium154.82.84.179Sinkholed
medium154.82.84.179Sinkholed
medium154.82.84.179Sinkholed
medium154.82.84.179Sinkholed
medium154.82.84.179Sinkholed
medium154.23.152.109Sinkholed
medium154.82.84.179Sinkholed
medium154.82.84.179Sinkholed
medium154.82.84.179Sinkholed
medium154.23.152.109Sinkholed
medium154.82.84.179Sinkholed
medium154.82.84.179Sinkholed
medium154.23.152.109Sinkholed
medium154.82.84.179Sinkholed
mediumdcvbnzss.xyzSinkholed
medium154.82.84.179Sinkholed
mediumdcvbnzss.xyzSinkholed

ThreatFox

No alerts detected


JavaScript (299)

HTTP Transactions (76)

URLIPResponseSize
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
fztksw.com/vpp
154.221.155.235301 Moved Permanently0 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
www.fztksw.com/vpp
154.221.155.235200 OK796 B
push.services.mozilla.com/
54.184.253.181101 Switching Protocols0 B
www.fztksw.com/tj.js
154.221.155.235200 OK206 B
www.fztksw.com/common.js
154.221.155.235200 OK1.0 kB
154.91.83.214/tj/gjc.js
154.91.83.214200 OK279 B
push.zhanzhang.baidu.com/push.js
39.156.68.163200 OK227 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F008df6b4-92c5-423a-a32e-4ab5016464ba.jpeg
34.120.237.76200 OK7.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK9.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53327ce0-8541-4bc8-bd51-59cee099b396.jpeg
34.120.237.76200 OK7.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa16d29e1-ef79-4edc-b710-c5c9d84af51a.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6469f625-03ad-45a7-a918-5f220169711a.png
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72713d4b-dac7-4d4c-bfff-c16bd305c5b1.jpeg
34.120.237.76200 OK6.5 kB
api.share.baidu.com/s.gif?l=http://www.fztksw.com/vpp
182.61.201.93200 OK0 B
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.21.226200 OK1.4 kB
js.users.51.la/21230571.js
103.143.19.103200 OK2.3 kB
api.share.baidu.com/s.gif?l=http://www.fztksw.com/vpp
182.61.201.93200 OK0 B
www.fztksw.com/favicon.ico
154.221.155.235200 OK796 B
154.82.85.49/new/yhys2.html
154.82.85.49200 OK740 B
js.users.51.la/21580081.js
103.143.19.103200 OK2.3 kB
154.23.152.109/0.5014655528483106
154.23.152.109404 Not Found146 B
154.23.152.106/0.39052928413329524
154.23.152.106404 Not Found146 B
ia.51.la/go1?id=21230571&rt=1679988442320&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1679988442320&tt=%25E5%25A4%25A9%25E9%2597%25A8%25E6%2587%25A6%25E4%25BC%25B0%25E5%25B9%25BF%25E5%2591%258A%25E4%25BC%25A0%25E5%25AA%2592%25E6%259C%2589%25E9%2599%2590%25E5%2585%25AC%25E5%258F%25B8&kw=&cu=http%253A%252F%252Fwww.fztksw.com%252Fvpp&pu=
103.143.19.103200 0 B
154.23.152.109/
154.23.152.109200 OK4.8 kB
154.23.152.109/template/m1938/css/ate.css
154.23.152.109200 OK6.0 kB
154.82.84.179/yhys/tb.js
154.82.84.179200 OK727 B
154.82.84.179/cpa/sp1.js
154.82.84.179200 OK556 B
154.82.84.179/yhys/dh.js
154.82.84.179200 OK1.3 kB
154.82.84.179/yhys/qq1.js
154.82.84.179200 OK804 B
154.82.84.179/yhys/dht.js
154.82.84.179200 OK785 B
154.82.84.179/cpa/sp.js
154.82.84.179200 OK593 B
154.23.152.109/template/m1938/css/zui.css
154.23.152.109200 OK30 kB
www.tukky.vip/lm/dxsdcd7.gif
172.67.142.245200 OK704 kB
154.82.84.179/cpa/gg.js
154.82.84.179404 Not Found146 B
154.82.84.179/cpa/tz.js
154.82.84.179404 Not Found146 B
154.82.84.179/yhys/tj/z2.js
154.82.84.179200 OK258 B
154.23.152.109/template/m1938/images/1.gif
154.23.152.109200 OK254 B
154.82.84.179/yhys/qq2.js
154.82.84.179200 OK2.7 kB
154.82.84.179/cpa/qq3.js
154.82.84.179404 Not Found146 B
aooacctp.vip/logotp/xfb63.gif
172.67.161.53200 OK801 kB
154.23.152.109/template/m1938/images/video-play.png
154.23.152.109200 OK1.6 kB
154.82.84.179/cpa/dl.js
154.82.84.179200 OK23 kB
ocsp.digicert.cn/
47.246.44.205200 OK471 B
si1.go2yd.com/get-image/0yFVWR9AM6k
163.171.140.79200 OK140 kB
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK471 B
u22088.com/12254d62e577cc799bfa2afb50465f4e.gif
13.227.254.111200 OK392 kB
ocsp.digicert.com/
192.229.221.95200 OK727 B
ocsp.sectigo.com/
172.64.155.188200 OK472 B
ocsp.sectigo.com/
172.64.155.188200 OK472 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
d.dcvbnzss.xyz/ty/E7634B96-67B3-17986-33-5EC00276BFD2.alpha
23.225.154.19200 OK195 B
154.82.84.179/cpa/qq3.js
154.82.84.179404 Not Found146 B
ocsp.sectigo.com/
172.64.155.188200 OK472 B
p26.toutiaoimg.com/img/tos-cn-i-siecs4i2o7/8c2e2faca3334d7cbd282d7fd4381cd7~noop.image
123.6.111.110200 OK678 kB
tukudhgg.vip/logotp/klm29.gif
172.67.208.179200 OK707 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
tupkku.top/logotp/tiangx01.gif
104.21.51.97200 OK193 kB
667aaa.us/2a4a89aa3963414da3ca8297b3d9e7ac.gif
103.170.15.73200 OK787 kB
ocsp.sectigo.com/
172.64.155.188200 OK472 B
662aaa.us/1de1ddaeff6445fc9968b4ce8bfb3630.gif
103.170.15.98200 OK18 kB
d.dcvbnzss.xyz/ty/7735AE6A-2D7B-16416-34-3777E45063B1.alpha
23.225.154.19200 OK0 B
665aaa.us/6d5fc7258e2f4ab2a00f07ad6263df3b.gif
103.170.15.109200 OK0 B
taiwtp1.com/xin/200200sas.gif
220.128.218.220200 OK0 B