Report - cef.pdfxd.com/xundu/cef.7z

Report Overview

Submitted URL
cef.pdfxd.com/xundu/cef.7z
IP
221.178.98.190
ASN
#9808 China Mobile Communications Group Co., Ltd.
Submitted
2024-04-18 14:25:28
Access
public
Website Title
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cef.pdfxd.com	unknown	2019-10-31	2022-07-09	2024-04-16	396 B	25 MB	101.206.163.36

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-18 14:24:51	medium	221.178.98.190	Client IP	ET INFO TLS Handshake Failure
2024-04-18 14:24:52	medium	221.178.98.190	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
cef.pdfxd.com/xundu/cef.7z
IP
101.206.163.36
ASN
#4837 CHINA UNICOM China169 Backbone

File type
7-zip archive data, version 0.4
Size
25 MB (25267162 bytes)
Hash
991e65870961cc9031d577a6f66f3498
06d6c8402b366f19c158a85425ed8b59b70abf62
7092ce696f0f4cadb99afadbbd69899e1bbdaf6534fdbb29b038c948c8996a36

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Size
	cef.pdfxd.com/xundu/cef.7z	101.206.163.36	25 MB
URL cef.pdfxd.com/xundu/cef.7z IP 101.206.163.36:0 ASN #4837 CHINA UNICOM China169 Backbone File type 7-zip archive data, version 0.4 Size 25 MB (25267162 bytes) Hash 991e65870961cc9031d577a6f66f3498 06d6c8402b366f19c158a85425ed8b59b70abf62 7092ce696f0f4cadb99afadbbd69899e1bbdaf6534fdbb29b038c948c8996a36 HTTP Headers `GET /xundu/cef.7z HTTP/1.1 Host: cef.pdfxd.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:24:52 GMT Content-Type: application/octet-stream Content-Length: 25267162 Connection: keep-alive Server: openresty ETag: "991E65870961CC9031D577A6F66F3498" Last-Modified: Tue, 26 Nov 2019 04:36:54 GMT x-oss-hash-crc64ecma: 7241555731215018456 x-oss-object-type: Normal x-oss-request-id: 63A56CB05FCE0B313932EC1A x-oss-server-time: 12 x-oss-storage-class: Standard nginx-vary: Origin X-CCDN-Expires: 1627688 Vary: Origin via: CHN-SCchengdu-CUCC4-CACHE1[14],CHN-SCchengdu-CUCC4-CACHE42[0,TCP_HIT,10],CHN-GDdongguan-GLOBAL1-CACHE115[27],CHN-GDdongguan-GLOBAL1-CACHE87[0,TCP_HIT,24] x-hcs-proxy-type: 1 X-CCDN-CacheTTL: 2592000 nginx-hit: 1 Age: 40714429 Accept-Ranges: bytes

cef.pdfxd.com/xundu/cef.7z

101.206.163.36

25 MB

URL
cef.pdfxd.com/xundu/cef.7z
IP
101.206.163.36:0
ASN
#4837 CHINA UNICOM China169 Backbone

File type
7-zip archive data, version 0.4
Size
25 MB (25267162 bytes)
Hash
991e65870961cc9031d577a6f66f3498
06d6c8402b366f19c158a85425ed8b59b70abf62
7092ce696f0f4cadb99afadbbd69899e1bbdaf6534fdbb29b038c948c8996a36

HTTP Headers

GET /xundu/cef.7z HTTP/1.1
Host: cef.pdfxd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 14:24:52 GMT
Content-Type: application/octet-stream
Content-Length: 25267162
Connection: keep-alive
Server: openresty
ETag: "991E65870961CC9031D577A6F66F3498"
Last-Modified: Tue, 26 Nov 2019 04:36:54 GMT
x-oss-hash-crc64ecma: 7241555731215018456
x-oss-object-type: Normal
x-oss-request-id: 63A56CB05FCE0B313932EC1A
x-oss-server-time: 12
x-oss-storage-class: Standard
nginx-vary: Origin
X-CCDN-Expires: 1627688
Vary: Origin
via: CHN-SCchengdu-CUCC4-CACHE1[14],CHN-SCchengdu-CUCC4-CACHE42[0,TCP_HIT,10],CHN-GDdongguan-GLOBAL1-CACHE115[27],CHN-GDdongguan-GLOBAL1-CACHE87[0,TCP_HIT,24]
x-hcs-proxy-type: 1
X-CCDN-CacheTTL: 2592000
nginx-hit: 1
Age: 40714429
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (1)

URL

IP

ASN

File type

Size

Hash

HTTP Headers