Report - gitea.tendokyu.moe/Hay1tsme/WhisperWolf3/archive/master.zip

Report Overview

Submitted URL
gitea.tendokyu.moe/Hay1tsme/WhisperWolf3/archive/master.zip
IP
172.67.145.238
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-23 22:19:35
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gitea.tendokyu.moe	unknown	2020-09-08	2023-01-16	2024-03-19	513 B	24 kB	104.21.95.162

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-23	medium	tendokyu.moe	Sinkholed

ThreatFox

No alerts detected

Files detected

URL
gitea.tendokyu.moe/Hay1tsme/WhisperWolf3/archive/master.zip
IP
104.21.95.162
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
23 kB (23213 bytes)
Hash
ba48de9740556a585e11e1681a2af140
f15a2f94b18aa85e23101a2532744eca7cc6429d
95cffda55e383c956e1ca1a7115996eb08fa4b53870febca67d6e8f5adb5adcb

Archive (17)

Modified	Filename	Size	Md5	File type
2024-04-01 03:35	.gitignore	58 B	3c424dbc5b9a8a0a9b147f8008468150	ASCII text
2024-04-01 03:35	Cargo.lock	47 kB	c5a5f55b5955fcc1a186026a7daf0bd6	ASCII text
2024-04-01 03:35	Cargo.toml	678 B	91fa99ea4c7e474cde96871e654604b0	ASCII text
2024-04-01 03:35	diesel.toml	247 B	1eafdfb08f4145e6d8553fb5d43b99b1	ASCII text
2024-04-01 03:35	example_config.yaml	150 B	92e00965357936df431d490cebcc58ca	ASCII text
2024-04-01 03:35	.keep	0 B	d41d8cd98f00b204e9800998ecf8427e
2024-04-01 03:35	down.sql	81 B	3bc108734c40de298552d86af229ccd4	ASCII text
2024-04-01 03:35	up.sql	541 B	d1978c0088fa6cb0faa833a76df09699	ASCII text
2024-04-01 03:35	mod.rs	143 B	c0bc3d4beda71d943192ea7690d08d2c	ASCII text
2024-04-01 03:35	notify.rs	583 B	14c02eadda36703408a6ce12c0644a3a	ASCII text
2024-04-01 03:35	config.rs	2.0 kB	89008b98e8401239749074ab5897941b	ASCII text
2024-04-01 03:35	mod.rs	2.0 kB	368173a4d121a1499798a8ca487c1e80	ASCII text
2024-04-01 03:35	schema.rs	612 B	1828960ac3b90ced5a9d9c844026e726	ASCII text
2024-04-01 03:35	user.rs	5.1 kB	eda0d6dc5e6037dd7a7e89da38f37d04	ASCII text
2024-04-01 03:35	handlers.rs	3.2 kB	ce28cf51c92af2068664d3f930d78d6c	ASCII text
2024-04-01 03:35	logging.rs	4.1 kB	066a727115417fb8ad54fef88fc49891	ASCII text
2024-04-01 03:35	main.rs	2.0 kB	db3785ebab6b2a25d27970c1c5151e83	C source, ASCII text

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

gitea.tendokyu.moe/Hay1tsme/WhisperWolf3/archive/master.zip

104.21.95.162

200 OK

23 kB

URL User Request GET HTTP/2
gitea.tendokyu.moe/Hay1tsme/WhisperWolf3/archive/master.zip
IP
104.21.95.162:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttendokyu.moe
Fingerprint67:93:FB:24:8F:7E:6A:89:82:27:77:86:99:BE:EB:9C:97:DD:C8:69
ValidityFri, 29 Mar 2024 15:13:29 GMT - Thu, 27 Jun 2024 15:13:28 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
23 kB (23213 bytes)
Hash
ba48de9740556a585e11e1681a2af140
f15a2f94b18aa85e23101a2532744eca7cc6429d
95cffda55e383c956e1ca1a7115996eb08fa4b53870febca67d6e8f5adb5adcb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Hay1tsme/WhisperWolf3/archive/master.zip HTTP/1.1
Host: gitea.tendokyu.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 23 Apr 2024 22:19:10 GMT
content-type: application/octet-stream
content-length: 23213
access-control-expose-headers: Content-Disposition
cache-control: private, max-age=300
content-disposition: attachment; filename="WhisperWolf3-master.zip"; filename*=UTF-8''WhisperWolf3-master.zip
last-modified: Tue, 23 Apr 2024 22:19:05 GMT
x-content-type-options: nosniff, nosniff
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: BYPASS
set-cookie: i_like_gitea=e52273bbc0f6d1e4; Path=/; HttpOnly; Secure; SameSite=Lax
_csrf=0Y_7DECenG5wFo54PuZXeeV1sjI6MTcxMzkxMDc1MDUxMzU3OTUzNQ; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MD3Nr3QADu5QjLZ2NuFyRtSZpvJFvt7VIp7vHWwScMLXBjWkoegWP0adK5P3%2B3ubjk5thQ6J1F0N864Rj6ACkeqoFwfooUmniF4iOORavt9ouY%2BIX59Tw9EJkFPic%2FJP4%2Fda3JE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87913bce8839712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (17)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers