Report - dl.steam.clngaa.com.p.ngaagslb.net

Report Overview

Submitted URL
dl.steam.clngaa.com.p.ngaagslb.net
IP
150.139.142.18
ASN
#136195 Qingdao, Shandong Province, P.R.China.
Submitted
2024-03-29 01:24:15
Access
public
Website Title
about:privatebrowsing
Final URL
about:blank
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
status.rapidssl.com	6946	2002-04-05	2018-06-15	2024-03-28	331 B	735 B	192.229.221.95
dl.steam.clngaa.com.p.ngaagslb.net	unknown	unknown	No data	No data	405 B	377 B	36.248.38.100

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	status.rapidssl.com/	192.229.221.95		471 B
URL status.rapidssl.com/ IP 192.229.221.95:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 516242edc3966baac89efcf1698d1987 d34a28d6a529a02f505a35a3ac47a82dd9d6acb6 550305fa990889fc807c0d55ee1a4c29d6650e432805b9c9b0b8e43943221bbf HTTP Headers `POST / HTTP/1.1 Host: status.rapidssl.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5782 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Fri, 29 Mar 2024 01:23:51 GMT Last-Modified: Thu, 28 Mar 2024 23:47:29 GMT Server: ECAcc (amb/6B53) X-Cache: HIT Content-Length: 471`

	dl.steam.clngaa.com.p.ngaagslb.net/	36.248.38.100	403 Forbidden	51 B
URL User Request GET HTTP/1.1 dl.steam.clngaa.com.p.ngaagslb.net/ IP 36.248.38.100:80 ASN #4837 CHINA UNICOM China169 Backbone File type ASCII text Size 51 B (51 bytes) Hash 145d0946addb714ddefd85aa8e0926b0 f4f3638549322dd9528214588d7b33fadc064383 18d07d119abf8020abadb199ae5a3c8b8fe4f3576d8ba2d8d685532499e4d1b5 HTTP Headers `GET / HTTP/1.1 Host: dl.steam.clngaa.com.p.ngaagslb.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Server: volc-dcdn Date: Fri, 29 Mar 2024 01:23:51 GMT Content-Type: application/octet-stream Content-Length: 51 Connection: keep-alive via: n172-013-216.fzmp.ToB x-request-ip: 91.90.42.154 x-tt-trace-tag: id=5 x-dsa-trace-id: 17116754312963e355a429216c1c208e18d11ed3af X-Dsa-Origin-Status: -`