Report - kz-rush.ru/xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki

Report Overview

Submitted URL
kz-rush.ru/xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki_0721.24.zip
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 22:25:26
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kz-rush.ru	unknown	2015-11-17	2015-11-19	2022-11-02	533 B	6.5 MB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 22:24:55	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-04-25 22:24:57	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-04-25 22:25:04	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
kz-rush.ru/xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki_0721.24.zip
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
6.5 MB (6529595 bytes)
Hash
49995eb26adb64957612ce8fff8e5aac
63c162bf390810ecbc13f882a0ea3ecbb67d2e3f
c7d9474ddb751d5dfa70b09f9a2af4a79763e877e75800fc5ecb8f8ec5266447

Archive (1)

Modified	Filename	Size	Md5	File type
2024-03-27 19:30	kzro_brick1337_smieszneznaczki_0721.24.dem	27 MB	e3fcb7e5a0e7a0db34a08416fe737426	data

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	kz-rush.ru/xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki_0721.24.zip	188.114.97.1	200 OK	6.5 MB
URL User Request GET HTTP/2 kz-rush.ru/xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki_0721.24.zip IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectkz-rush.ru FingerprintE1:E8:02:E2:71:EE:58:69:36:C3:57:67:7D:68:4E:F8:A0:5A:84:D4 ValidityMon, 25 Mar 2024 15:59:23 GMT - Sun, 23 Jun 2024 15:59:22 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 6.5 MB (6529595 bytes) Hash 49995eb26adb64957612ce8fff8e5aac 63c162bf390810ecbc13f882a0ea3ecbb67d2e3f c7d9474ddb751d5dfa70b09f9a2af4a79763e877e75800fc5ecb8f8ec5266447 HTTP Headers GET /xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki_0721.24.zip HTTP/1.1 Host: kz-rush.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Thu, 25 Apr 2024 22:24:57 GMT content-type: application/zip content-length: 6529595 last-modified: Wed, 27 Mar 2024 18:34:10 GMT etag: "660466a2-63a23b" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: public, max-age=31536000 cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qjWIelROCOogeVjnJaV%2BQM8oVZQp48pz8Kfed0gNdgCQAK4uNUvlx8gSXW5JV9e1VC44Cfzl8za8oghovqTk6hH%2BRHJks7wCMeO5FRjC4vvsFPaYqrDJ5qwfw%2BYW"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 87a1bf071b3956bf-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

kz-rush.ru/xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki_0721.24.zip

188.114.97.1

200 OK

6.5 MB

URL User Request GET HTTP/2
kz-rush.ru/xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki_0721.24.zip
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectkz-rush.ru
FingerprintE1:E8:02:E2:71:EE:58:69:36:C3:57:67:7D:68:4E:F8:A0:5A:84:D4
ValidityMon, 25 Mar 2024 15:59:23 GMT - Sun, 23 Jun 2024 15:59:22 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
6.5 MB (6529595 bytes)
Hash
49995eb26adb64957612ce8fff8e5aac
63c162bf390810ecbc13f882a0ea3ecbb67d2e3f
c7d9474ddb751d5dfa70b09f9a2af4a79763e877e75800fc5ecb8f8ec5266447

HTTP Headers

GET /xr_public/demos/maps/cs16/kzro_brick1337_smieszneznaczki_0721.24.zip HTTP/1.1
Host: kz-rush.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 22:24:57 GMT
content-type: application/zip
content-length: 6529595
last-modified: Wed, 27 Mar 2024 18:34:10 GMT
etag: "660466a2-63a23b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qjWIelROCOogeVjnJaV%2BQM8oVZQp48pz8Kfed0gNdgCQAK4uNUvlx8gSXW5JV9e1VC44Cfzl8za8oghovqTk6hH%2BRHJks7wCMeO5FRjC4vvsFPaYqrDJ5qwfw%2BYW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a1bf071b3956bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers