Report Overview

  1. Submitted URL

    12254.url.tudown.com/down/%E6%88%BF%E6%80%9D%E7%90%AA%E7%9A%84%E5%88%9D%E6%81%8B%E4%B9%90%E5%9B%AD@306_248332.exe

  2. IP

    168.206.200.52

    ASN

    #137951 Clayer Limited

  3. Submitted

    2023-03-12 05:38:59

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
img0.baidu.com501262021-03-25T13:17:59Z2023-03-25T08:04:27Z
js.passport.qihucdn.com2737952014-08-12T03:08:07Z2023-03-24T23:35:11Z
s22.cnzz.com876352012-05-30T12:09:17Z2023-03-24T23:35:09Z
img2.baidu.com507862021-03-25T13:17:58Z2023-03-25T01:52:23Z
t13.baidu.com326532021-01-09T14:57:25Z2023-03-24T19:26:18Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-24T16:33:49Z
hm.baidu.com82542012-05-26T10:38:45Z2023-03-25T05:10:23Z
ocsp2.globalsign.com15442012-05-23T20:10:04Z2023-03-25T05:10:23Z
img1.baidu.com501582021-03-25T13:17:58Z2023-03-25T08:04:27Z
s.360.cn198142012-07-10T18:01:51Z2023-03-25T07:16:23Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-25T05:09:02Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-24T18:14:23Z
api.share.baidu.com446292013-04-25T16:45:11Z2023-03-25T05:47:10Z
push.zhanzhang.baidu.com571392015-07-22T07:44:02Z2023-03-25T05:49:06Z
t15.baidu.com330502021-01-09T17:16:17Z2023-03-25T01:52:23Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-25T05:09:25Z
12254.url.tudown.comunknown2018-10-29T14:13:47Z2023-03-24T06:47:13Z
ocsp.globalsign.com20752012-07-20T19:46:16Z2023-03-25T05:09:35Z
t14.baidu.com325592021-01-22T21:20:42Z2023-03-25T01:52:24Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-24T18:20:20Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-24T18:17:07Z
s8.qhres2.com9022032022-10-05T15:43:19Z2023-03-24T23:35:13Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
medium12254.url.tudown.com/down/%E6%88%BF%E6%80%9D%E7%90%AA%E7%9A%84%E5%88%9D%E6%81%8B%E4%B9%90%E5%9B%AD@306_248332.exeMalware
medium12254.url.tudown.com/js/orsxg5a.scriptMalware
medium12254.url.tudown.com/template/company/42xz/js/soft.jsMalware
medium12254.url.tudown.com/template/company/42xz/js/jquery.jsMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (120)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
12254.url.tudown.com/down/%E6%88%BF%E6%80%9D%E7%90%AA%E7%9A%84%E5%88%9D%E6%81%8B%E4%B9%90%E5%9B%AD@306_248332.exe
168.206.200.52200 OK6.6 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
push.services.mozilla.com/
52.40.68.141101 Switching Protocols0 B
12254.url.tudown.com/template/company/42xz/css/common.css
168.206.200.52200 OK1.9 kB
12254.url.tudown.com/js/orsxg5a.script
168.206.200.52200 OK527 B
12254.url.tudown.com/template/company/42xz/css/soft.css
168.206.200.52200 OK6.6 kB
12254.url.tudown.com/template/company/42xz/js/soft.js
168.206.200.52200 OK3.6 kB
12254.url.tudown.com/template/company/42xz/images/tab_line.png
168.206.200.52200 OK1.2 kB
12254.url.tudown.com/uploads/images/559194.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/562795.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/53138.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/logo.png?n=5gkknznxt3s3raxgswm6ravs46tzdzukqdsyrnxjqcqolduc&w=250
168.206.200.52200 OK3.5 kB
12254.url.tudown.com/uploads/images/978119.jpg
168.206.200.52301 Moved Permanently0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK1.4 kB
12254.url.tudown.com/uploads/images/955710.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/537627.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/472479.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/257252.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/662887.jpg
168.206.200.52301 Moved Permanently0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6dda5706-64c5-467d-9645-a46dedb81818.jpeg
34.120.237.76200 OK6.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13023a0e-6076-492b-85f7-561f44c10dbc.jpeg
34.120.237.76200 OK8.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae3c2980-a44e-45c6-a99d-629945594f8f.jpeg
34.120.237.76200 OK11 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F232cdb17-98f3-4be0-b78a-14393eef7fa1.jpeg
34.120.237.76200 OK5.2 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
12254.url.tudown.com/template/company/42xz/js/jquery.js
168.206.200.52200 OK46 kB
12254.url.tudown.com/uploads/images/308528.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/250505.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/941218.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/247108.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/580042.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/597571.jpg
168.206.200.52301 Moved Permanently0 B
push.zhanzhang.baidu.com/push.js
182.61.201.94200 OK227 B
12254.url.tudown.com/uploads/images/24441.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/93376.jpg
168.206.200.52301 Moved Permanently0 B
hm.baidu.com/hm.js?dd9836db2e433f487a0aa434b7b3deb7
103.235.46.191200 OK11 kB
12254.url.tudown.com/uploads/images/270121.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/50699.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/767263.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/219058.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/621402.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/932771.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/937615.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/379292.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/147352.jpg
168.206.200.52301 Moved Permanently0 B
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=2063948676&si=dd9836db2e433f487a0aa434b7b3deb7&v=1.3.0&lv=1&sn=51577&r=0&ww=1280&u=http%3A%2F%2F12254.url.tudown.com%2Fdown%2F%25E6%2588%25BF%25E6%2580%259D%25E7%2590%25AA%25E7%259A%2584%25E5%2588%259D%25E6%2581%258B%25E4%25B9%2590%25E5%259B%25AD%40306_248332.exe&tt=%E7%88%B1%E8%B5%A2%E4%BD%93%E8%82%B2app%E4%B8%8B%E8%BD%BD%E6%BE%B3%E9%97%A8(%E4%B8%AD%E5%9B%BD)%E5%AE%98%E6%96%B9%E7%BD%91%E7%AB%99v5.5.31
103.235.46.191200 OK43 B
12254.url.tudown.com/template/company/42xz/images/dian1.png
168.206.200.52200 OK1.1 kB
api.share.baidu.com/s.gif?l=http://12254.url.tudown.com/down/%E6%88%BF%E6%80%9D%E7%90%AA%E7%9A%84%E5%88%9D%E6%81%8B%E4%B9%90%E5%9B%AD@306_248332.exe
182.61.201.93200 OK0 B
12254.url.tudown.com/template/company/42xz/images/dian2.png
168.206.200.52200 OK1.1 kB
ocsp2.globalsign.com/gsorganizationvalsha2g3
104.18.20.226200 OK1.5 kB
img0.baidu.com/it/u=3879927139,327649193&fm=253&fmt=auto&app=138&f=JPEG?w=354&h=500
175.6.243.35200 OK25 kB
12254.url.tudown.com/uploads/images/984466.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/9063.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/669955.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/748150.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/200464.jpg
168.206.200.52301 Moved Permanently0 B
js.passport.qihucdn.com/11.0.1.js?d10ea2610e3a9b90fa9990ffc6bf559d
104.192.110.245200 OK117 B
t15.baidu.com/it/u=1511202857,3964488049&fm=224&app=112&f=JPEG?w=500&h=500
185.10.104.124200 OK50 kB
img0.baidu.com/it/u=2649818390,3631363123&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=312
175.6.243.35200 OK24 kB
img1.baidu.com/it/u=3919443128,1808455130&fm=253&fmt=auto&app=138&f=JPEG?w=224&h=224
175.6.243.35200 OK3.1 kB
12254.url.tudown.com/uploads/images/374408.jpg
168.206.200.52301 Moved Permanently0 B
img1.baidu.com/it/u=3860193544,4111283646&fm=253&fmt=auto&app=138&f=JPEG?w=365&h=500
175.6.243.35200 OK26 kB
12254.url.tudown.com/uploads/images/246935.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/247120.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/868026.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/563327.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/650215.jpg
168.206.200.52301 Moved Permanently0 B
t15.baidu.com/it/u=1617651569,1110449370&fm=224&app=112&f=JPEG?w=500&h=500&s=B085DB14550642E44E8062D8030050B2
185.10.104.124200 OK32 kB
t15.baidu.com/it/u=2401905200,1762955414&fm=224&app=112&f=JPEG?w=500&h=500
185.10.104.124200 OK22 kB
img1.baidu.com/it/u=4062455783,3283285497&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=1084
175.6.243.35200 OK38 kB
s22.cnzz.com/z_stat.php?id=1275003130&web_id=1275003130
106.119.193.217200 OK20 B
img0.baidu.com/it/u=3347399911,480973484&fm=253&app=138&f=JPEG?w=500&h=889
175.6.243.35200 OK55 kB
img2.baidu.com/it/u=396887868,238860106&fm=253&fmt=auto&app=138&f=JPEG?w=542&h=500
175.6.243.35200 OK12 kB
img1.baidu.com/it/u=1062674779,247533530&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=500
175.6.243.35200 OK12 kB
img1.baidu.com/it/u=1875326278,3972451444&fm=253&app=138&f=JPEG?w=800&h=500
175.6.243.35200 OK54 kB
12254.url.tudown.com/uploads/images/479248.jpg
168.206.200.52301 Moved Permanently0 B
s8.qhres2.com/static/ab77b6ea7f3fbf79.js
54.230.111.35200 OK478 B
t15.baidu.com/it/u=2382841459,2778013980&fm=224&app=112&f=JPEG?w=500&h=500
185.10.104.124200 OK54 kB
img2.baidu.com/it/u=648896954,2537565643&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=750
175.6.243.35200 OK30 kB
12254.url.tudown.com/uploads/images/671696.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/164470.jpg
168.206.200.52301 Moved Permanently0 B
12254.url.tudown.com/uploads/images/18807.jpg
168.206.200.52301 Moved Permanently0 B
img2.baidu.com/it/u=4150659980,2653165631&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=889
175.6.243.35200 OK58 kB
img1.baidu.com/it/u=3976526279,1574086724&fm=253&fmt=auto&app=120&f=JPEG?w=1280&h=800
175.6.243.35200 OK82 kB
img2.baidu.com/it/u=2475096660,2644517219&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=603
175.6.243.35200 OK39 kB
img2.baidu.com/it/u=3165672432,1163045020&fm=253&app=138&f=PNG?w=500&h=800
124.239.243.35200 OK396 kB
img2.baidu.com/it/u=606166360,4004582932&fm=253&fmt=auto&app=138&f=JPEG?w=527&h=500
175.6.243.35200 OK9.3 kB
img0.baidu.com/it/u=2522746013,3257611493&fm=253&app=120&f=JPEG?w=1280&h=800
175.6.243.35200 OK127 kB
img2.baidu.com/it/u=1985517073,447975328&fm=253&fmt=auto?w=1280&h=800
175.6.243.35200 OK74 kB
img2.baidu.com/it/u=2268678062,4221220499&fm=253&fmt=auto&app=138&f=JPEG?w=130&h=170
175.6.243.35200 OK4.5 kB
img0.baidu.com/it/u=307986375,177628273&fm=253&app=120&f=PNG?w=800&h=1280
175.6.243.35200 OK922 kB
img2.baidu.com/it/u=1903058838,3471988754&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=658
175.6.243.35200 OK38 kB
img2.baidu.com/it/u=253336021,925506439&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=281
175.6.243.35200 OK19 kB
s.360.cn/so/zz.gif?url=http%3A%2F%2F12254.url.tudown.com%2Fdown%2F%25E6%2588%25BF%25E6%2580%259D%25E7%2590%25AA%25E7%259A%2584%25E5%2588%259D%25E6%2581%258B%25E4%25B9%2590%25E5%259B%25AD%40306_248332.exe&sid=d10ea2610e3a9b90fa9990ffc6bf559d&token=de1x0ee.a223631804e23_a690b39@0D
171.8.167.90200 OK0 B
img1.baidu.com/it/u=3792299447,1207792583&fm=253&fmt=auto&app=138&f=JPEG?w=735&h=314
175.6.243.35200 OK21 kB
img0.baidu.com/it/u=1890333994,2700406796&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500
175.6.243.35200 OK63 kB
img0.baidu.com/it/u=1044765638,1941870469&fm=253&fmt=auto&app=120&f=JPEG?w=448&h=252
175.6.243.35200 OK23 kB
img0.baidu.com/it/u=2755809886,440258571&fm=253&fmt=auto&app=138&f=JPEG?w=228&h=302
175.6.243.35200 OK9.8 kB
img0.baidu.com/it/u=2231353858,294808761&fm=253&fmt=auto&app=138&f=JPEG?w=800&h=500
175.6.243.35200 OK26 kB
img0.baidu.com/it/u=924351922,3177371266&fm=253&app=120&f=JPEG?w=1280&h=800
125.74.1.35200 OK129 kB
img0.baidu.com/it/u=4094714741,3265251617&fm=253&fmt=auto&app=138&f=JPEG?w=500&h=1043
175.6.243.35200 OK35 kB
img2.baidu.com/it/u=1192998448,3576190731&fm=253&fmt=auto?w=640&h=220
175.6.243.35200 OK10 kB
img2.baidu.com/it/u=4241892396,2786208654&fm=253&fmt=auto&app=138&f=JPEG?w=889&h=500
175.6.243.35200 OK55 kB
img2.baidu.com/it/u=556391668,2468105701&fm=253&fmt=auto&app=138&f=JPEG?w=150&h=94
175.6.243.35200 OK4.3 kB
img2.baidu.com/it/u=1099339887,639831898&fm=253&app=120&f=JPEG?w=1280&h=800
124.239.243.35200 OK136 kB
12254.url.tudown.com/favicon.ico
168.206.200.52200 OK0 B
t14.baidu.com/it/u=3780010149,641055172&fm=224&app=112&f=JPEG?w=402&h=500
185.10.104.124200 OK30 kB
t14.baidu.com/it/u=1338558106,1913865723&fm=224&app=112&f=JPEG?w=500&h=500&s=1A106C8004C772F8DEAC49DA030090A2
185.10.104.124200 OK54 kB
t13.baidu.com/it/u=1858255056,1367665810&fm=224&app=112&f=JPEG?w=500&h=500
185.10.104.124200 OK31 kB
t13.baidu.com/it/u=924540176,93292248&fm=224&app=112&f=JPEG?w=500&h=500&s=79B7B7BA4006C3FB1005087C03008064
185.10.104.124200 OK66 kB