Report - supportninja.top/beer/Vxttheubu.mp4

Report Overview

Submitted URL
supportninja.top/beer/Vxttheubu.mp4
IP
159.253.120.145
ASN
#200019 Alexhost Srl
Submitted
2024-04-20 12:44:07
Access
public
Website Title
Vxttheubu.mp4
Final URL
supportninja.top/beer/Vxttheubu.mp4
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
supportninja.top	unknown	2023-09-23	2024-02-01	2024-04-16	766 B	224 kB	159.253.120.145

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-20 12:43:42	high	Client IP	159.253.120.145	URLhaus Known malware download URL detected (2814227)
2024-04-20 12:43:42	medium	Client IP	159.253.120.145	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	supportninja.top	Sinkholed
2024-04-20	medium	supportninja.top	Sinkholed

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	supportninja.top	Sinkholed
2024-04-20	medium	supportninja.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

supportninja.top/favicon.ico

159.253.120.145

404 Not Found

278 B

URL GET HTTP/1.1
supportninja.top/favicon.ico
IP
159.253.120.145:80
ASN
#200019 Alexhost Srl

Requested by
http://supportninja.top/beer/Vxttheubu.mp4

File type
HTML document, ASCII text
Size
278 B (278 bytes)
Hash
2e14fbc4488f019111810e7188dc3564
8a2ab3d94b4198920b23e5d125499199d2c57c7c
e4be38a7f4b7cd4d238698df479bf9fa55d31fec99c51f161913b9474bfd1484

Detections

Analyzer	Verdict	Alert
mnemonic secure dns	malicious	Sinkholed
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: supportninja.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://supportninja.top/beer/Vxttheubu.mp4
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 20 Apr 2024 12:43:43 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 278
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

supportninja.top/beer/Vxttheubu.mp4

159.253.120.145

200 OK

223 kB

URL User Request GET HTTP/1.1
supportninja.top/beer/Vxttheubu.mp4
IP
159.253.120.145:80
ASN
#200019 Alexhost Srl

File type
data
Size
223 kB (223282 bytes)
Hash
e56b5b7524d97240e08be0befa5b5a65
10b593186fb5ce773dcfe832b98878163e504eea
28174063dc22c55517649c8ec8b1e487b77a6331ffa032b37f71cd033918dd0d

Detections

Analyzer	Verdict	Alert
mnemonic secure dns	malicious	Sinkholed
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	URLhaus Known malware download URL detected (2814227)
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET /beer/Vxttheubu.mp4 HTTP/1.1
Host: supportninja.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 12:43:42 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Mon, 08 Apr 2024 16:39:26 GMT
ETag: "2b0208-6159872d46b80"
Accept-Ranges: bytes
Content-Length: 2818568
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: video/mp4

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers