Report Overview

  1. Submitted URL

    12684.url.tudown.com/down/AutoCAD2012+x64%E4%BD%8D%E7%AE%80%E4%BD%93%E4%B8%AD%E6%96%87%E7%A0%B4%E8%A7%A3%E7%89%88@86_65809.exe

  2. IP

    154.218.151.71

    ASN

    #137951 Clayer Limited

  3. Submitted

    2023-02-04 15:55:43

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    16

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
12684.url.tudown.comunknown2017-06-17T11:55:11Z2023-03-10T04:55:49Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
code.jquerycdns.comunknown2022-09-13T19:17:20Z2023-03-12T11:35:33Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
medium 154.218.151.71Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
medium12684.url.tudown.com/down/AutoCAD2012+x64%E4%BD%8D%E7%AE%80%E4%BD%93%E4%B8%AD%E6%96%87%E7%A0%B4%E8%A7%A3%E7%89%88@86_65809.exeMalware
medium12684.url.tudown.com/js/orsxg5a.scriptMalware
medium12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/public.jsMalware
medium12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/jquery.superslide.2.1.2.jsMalware
medium12684.url.tudown.com/js/orsxg5a.scriptMalware
medium12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/base.jsMalware
medium12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/swiper.min.jsMalware
medium12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/jquery.jsMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (12)

HTTP Transactions (42)

URLIPResponseSize
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
12684.url.tudown.com/down/AutoCAD2012+x64%E4%BD%8D%E7%AE%80%E4%BD%93%E4%B8%AD%E6%96%87%E7%A0%B4%E8%A7%A3%E7%89%88@86_65809.exe
154.218.151.71200 OK4.4 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.pki.goog/s/gts1p5/EyqW1AyOPLo
142.250.74.163200 OK471 B
push.services.mozilla.com/
34.208.31.97101 Switching Protocols0 B
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/css/animate.min.css
154.218.151.71200 OK203 B
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/css/base.css
154.218.151.71200 OK805 B
12684.url.tudown.com/js/orsxg5a.script
154.218.151.71200 OK531 B
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/css/index.css
154.218.151.71200 OK9.7 kB
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/css/swiper.min.css
154.218.151.71200 OK3.6 kB
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/public.js
154.218.151.71200 OK987 B
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/jquery.superslide.2.1.2.js
154.218.151.71200 OK4.6 kB
ocsp.pki.goog/s/gts1p5/EyqW1AyOPLo
142.250.74.163200 OK471 B
12684.url.tudown.com/js/orsxg5a.script
154.218.151.71200 OK531 B
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/base.js
154.218.151.71200 OK0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/swiper.min.js
154.218.151.71200 OK41 kB
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/images/dh.png
154.218.151.71200 OK1.4 kB
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/js/jquery.js
154.218.151.71200 OK42 kB
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/picture/logo.png
154.218.151.71200 OK31 kB
12684.url.tudown.com/template/company/fanmoban/images/picture/banner3.jpg
154.218.151.71200 OK4.4 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg
34.120.237.76200 OK9.1 kB
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/images/dz.png
154.218.151.71200 OK4.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
34.120.237.76200 OK5.2 kB
code.jquerycdns.com/jquery-2.3.1.min.js?h=http://12684.url.tudown.com/
188.114.97.1200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd74fd89c-32f8-4ed4-ab23-e95f810fbc57.jpeg
34.120.237.76200 OK9.3 kB
12684.url.tudown.com/api.php?m=Hits&catid=18&id=283
154.218.151.71404 Not Found146 B
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/images/yx.png
154.218.151.71200 OK4.4 kB
12684.url.tudown.com/template/company/fanmoban/baiduzhongyuandianzi/images/zk.png
154.218.151.71200 OK4.5 kB
12684.url.tudown.com/favicon.ico
154.218.151.71200 OK0 B
12684.url.tudown.com/template/company/fanmoban/images/banner3.jpg
154.218.151.71200 OK264 kB