Report - megurre666.zip

Report Overview

Submitted URL
megurre666.zip
IP
172.67.192.34
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 23:13:10
Access
public
Website Title
Error 404 (Not Found)!!1
Final URL
megurre666.zip/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
megurre666.zip	unknown	2023-05-19	2023-07-16	2024-02-23	1.3 kB	8.9 kB	172.67.192.34
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	900 B	11 kB	142.250.74.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 23:12:45	low	Client IP	172.67.192.34	ET INFO HTTP Request to a *.zip Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

megurre666.zip/

172.67.192.34

404 Not Found

167 B

URL User Request GET HTTP/3
megurre666.zip/
IP
172.67.192.34:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmegurre666.zip
FingerprintC7:D2:B8:BB:F7:DC:72:F4:83:87:AD:FA:3E:F0:D9:80:F2:67:9A:E4
ValidityWed, 03 Apr 2024 14:53:37 GMT - Tue, 02 Jul 2024 14:53:36 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
167 B (167 bytes)
Hash
0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET / HTTP/1.1
Host: megurre666.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Thu, 25 Apr 2024 23:12:45 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 26 Apr 2024 00:12:45 GMT
Location: https://megurre666.zip/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BeDSZOQXEbIuiUSScgFk6Wg7sTlylvtrMbZ47xEE0%2FxixEYEoKThBLiPjLLg%2FJRK%2FqKwkBN%2FoMBWqgn6zlR332PzjOan%2FgXdxPNzEapRUoPQ%2BOoV0FLjjEng3eIf2ZWIpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87a2050c7a760afe-OSL
alt-svc: h2=":443"; ma=60

www.google.com/images/errors/robot.png

142.250.74.164

200 OK

6.3 kB

URL GET HTTP/2
www.google.com/images/errors/robot.png
IP
142.250.74.164:443
ASN
#15169 GOOGLE

Requested by
https://megurre666.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73
ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT

File type
PNG image data, 171 x 213, 8-bit colormap, non-interlaced
Size
6.3 kB (6327 bytes)
Hash
4c9acf280b47cef7def3fc91a34c7ffe
c32bb847daf52117ab93b723d7c57d8b1e75d36b
5f9fc5b3fbddf0e72c5c56cdcfc81c6e10c617d70b1b93fbe1e4679a8797bff7

HTTP Headers

GET /images/errors/robot.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megurre666.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 6327
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 17:25:02 GMT
expires: Fri, 25 Apr 2025 17:25:02 GMT
cache-control: public, max-age=31536000
age: 20863
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png

142.250.74.164

200 OK

3.2 kB

URL GET HTTP/2
www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
IP
142.250.74.164:443
ASN
#15169 GOOGLE

Requested by
https://megurre666.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73
ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT

File type
PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Size
3.2 kB (3170 bytes)
Hash
9d73b3aa30bce9d8f166de5178ae4338
d0cbc46850d8ed54625a3b2b01a2c31f37977e75
dbef5e5530003b7233e944856c23d1437902a2d3568cdfd2beaf2166e9ca9139

HTTP Headers

GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megurre666.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 3170
date: Thu, 25 Apr 2024 23:12:45 GMT
expires: Thu, 25 Apr 2024 23:12:45 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

megurre666.zip/

104.21.81.245

404 Not Found

5.2 kB

URL User Request GET HTTP/3
megurre666.zip/
IP
104.21.81.245:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmegurre666.zip
FingerprintC7:D2:B8:BB:F7:DC:72:F4:83:87:AD:FA:3E:F0:D9:80:F2:67:9A:E4
ValidityWed, 03 Apr 2024 14:53:37 GMT - Tue, 02 Jul 2024 14:53:36 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Size
5.2 kB (5231 bytes)
Hash
b81150861bf911f947660cf73bce77f6
905146c739943ce189795e234f1c6ebcab2f57a9
23926e9185d8d43c02807a838ffb373cc1977726094a4e46807c66ada9dd7660

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET / HTTP/1.1
Host: megurre666.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 25 Apr 2024 23:12:45 GMT
content-type: text/html; charset=UTF-8
x-xss-protection: 0
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LzSTmjLFgubFgXiiFdShYo0uLs%2BaJj5S4P%2B8wV7xUThSjG13Bz3ZSWZJ%2BD1aJoWyojmrKR0dEXgd1tRJhBneFimZ%2FooISE60D2IqtN5YnnhxGH%2FT55qGF5iOQ7lU%2F8OqRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a2050c991956ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

megurre666.zip/favicon.ico

104.21.81.245

404 Not Found

1.6 kB

URL GET HTTP/3
megurre666.zip/favicon.ico
IP
104.21.81.245:443
ASN
#13335 CLOUDFLARENET

Requested by
https://megurre666.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectmegurre666.zip
FingerprintC7:D2:B8:BB:F7:DC:72:F4:83:87:AD:FA:3E:F0:D9:80:F2:67:9A:E4
ValidityWed, 03 Apr 2024 14:53:37 GMT - Tue, 02 Jul 2024 14:53:36 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1581), with no line terminators
Size
1.6 kB (1572 bytes)
Hash
ca61f29c94e6e0548aa4da9d93553f72
f7ba6eaddf6d3d6b039f34be59a8cc196ec4b7a5
45080784741b15a99a39162b531d0116aa7a4b2f1f7b7bb17c5df9c4039225b0

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: megurre666.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megurre666.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 25 Apr 2024 23:12:45 GMT
content-type: text/html; charset=UTF-8
x-xss-protection: 0
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PL3g9SGDb5C5Acf%2BeQmbVHdBbENzWH1azpTytwu%2FZGiF6v29iR1m0DhSLM5iZBVcnuaztu%2BqHg8Vxqx%2B5wIGHYMJFfH%2FwBkC50rOuqUBFKJT7A8AkTX9NpqTe57owgxDDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a2050d796e56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers