Report - cf44890.zip

Report Overview

Submitted URL
cf44890.zip
IP
194.245.148.189
ASN
#5517 CSL Computer Service Langenbach GmbH
Submitted
2024-04-25 23:13:19
Access
public
Website Title
cf44890.zip -- Domain Name Registration at Joker.com, Easy to use Control Panel and Reseller API Interface
Final URL
cf44890.zip/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
13
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cf44890.zip	unknown	2023-05-21	2023-05-21	2024-03-11	4.5 kB	258 kB	194.245.148.189

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain
2024-04-25 23:12:57	low	Client IP	194.245.148.189	ET INFO HTTP Request to a *.zip Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (13)

URL IP Response Size

cf44890.zip/

194.245.148.189

200 OK

6.2 kB

URL User Request GET HTTP/1.1
cf44890.zip/
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

File type
HTML document, ASCII text, with very long lines (479)
Size
6.2 kB (6215 bytes)
Hash
56cb7f2c7ed699510796556c1dde284a
258f51e67669e197c8c2a5679473b8a1846eb543
07511b98e83be48f9f88c70e06482d0e445ef80d201cee41bb708ce9337319b9

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET / HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

cf44890.zip/

194.245.148.189

200 OK

6.2 kB

URL User Request GET HTTP/1.1
cf44890.zip/
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

File type
HTML document, ASCII text, with very long lines (479)
Size
6.2 kB (6215 bytes)
Hash
56cb7f2c7ed699510796556c1dde284a
258f51e67669e197c8c2a5679473b8a1846eb543
07511b98e83be48f9f88c70e06482d0e445ef80d201cee41bb708ce9337319b9

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET / HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive

cf44890.zip/css/parkingpage.css

194.245.148.189

200 OK

1.9 kB

URL GET HTTP/1.1
cf44890.zip/css/parkingpage.css
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
assembler source, ASCII text
Size
1.9 kB (1885 bytes)
Hash
1b26b0081ed402fe073f26434e4f146d
610d544244a96d46cc233549eae5c1ddca36402e
509784e11ceb68d371e47d7c130a025b6405d5572854a4e0a30c3ace9fa9a4f4

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /css/parkingpage.css HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: text/css
Content-Length: 1885
Last-Modified: Tue, 10 Jan 2017 16:27:27 GMT
Connection: keep-alive
ETag: "58750b6f-75d"
Accept-Ranges: bytes

cf44890.zip/js/ie10-viewport-bug-workaround.js

194.245.148.189

200 OK

1.8 kB

URL GET HTTP/1.1
cf44890.zip/js/ie10-viewport-bug-workaround.js
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
HTML document, ASCII text
Size
1.8 kB (1840 bytes)
Hash
fbe83adbca53f0ceb75e660d3b5dffd7
142e7d26ff75b1e33a9f5b91cc6a04f94178b07d
443cd35bbac1cc8602a347aa0e55a7c26b7e4fe2a84460d38fe91265147ac751

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /js/ie10-viewport-bug-workaround.js HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1840
Last-Modified: Tue, 04 Apr 2017 13:56:46 GMT
Connection: keep-alive
ETag: "58e3a61e-730"
Accept-Ranges: bytes

cf44890.zip/css/bootstrap.min.css

194.245.148.189

200 OK

105 kB

URL GET HTTP/1.1
cf44890.zip/css/bootstrap.min.css
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
ASCII text, with very long lines (65317)
Size
105 kB (105356 bytes)
Hash
5b993e1df812cb265a32bcee07f90858
4e1cc6973c00d980cf76b7ba03f73745c0772a81
9887e1bff87730bab759289295dbae64edec691373cee7f52caf30df3de5dc96

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /css/bootstrap.min.css HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: text/css
Content-Length: 105356
Last-Modified: Tue, 10 Jan 2017 15:04:59 GMT
Connection: keep-alive
ETag: "5874f81b-19b8c"
Accept-Ranges: bytes

cf44890.zip/images/hostingIcons/window-domain.png

194.245.148.189

200 OK

20 kB

URL GET HTTP/1.1
cf44890.zip/images/hostingIcons/window-domain.png
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Size
20 kB (19688 bytes)
Hash
0e4730ccd5f1fcd70c3f1305b17bf446
7b565ac0081e6de79eaef4a79167d66f6a52e020
ee644fe77b2b53eca8847bee2ae06b69524938fa74f454f1c4afea4c7c3ac586

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /images/hostingIcons/window-domain.png HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: image/png
Content-Length: 19688
Last-Modified: Tue, 10 Jan 2017 15:06:21 GMT
Connection: keep-alive
ETag: "5874f86d-4ce8"
Accept-Ranges: bytes

cf44890.zip/images/JokerLogo2x.png

194.245.148.189

200 OK

7.2 kB

URL GET HTTP/1.1
cf44890.zip/images/JokerLogo2x.png
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
PNG image data, 326 x 69, 8-bit/color RGBA, non-interlaced
Size
7.2 kB (7179 bytes)
Hash
fde9a2aa3058a118f429d5c68ba873fe
93def816b9e2993b6dbf0694d424a54a13a2d803
3ec1531c96673596440f17f3e2a068885217b4f46b0d863a4f0334e5909d927e

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /images/JokerLogo2x.png HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: image/png
Content-Length: 7179
Last-Modified: Tue, 10 Jan 2017 15:06:21 GMT
Connection: keep-alive
ETag: "5874f86d-1c0b"
Accept-Ranges: bytes

cf44890.zip/images/hostingIcons/security-shield_dark.png

194.245.148.189

200 OK

20 kB

URL GET HTTP/1.1
cf44890.zip/images/hostingIcons/security-shield_dark.png
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Size
20 kB (20067 bytes)
Hash
8f6e5144a4cda7a91c0c96b5efe9eb05
f67397634d31e83eebb7fad5def81defccb38a06
e36c56f0c216bff27d8190d0041302858d0841c6df427772408f99a03728117a

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /images/hostingIcons/security-shield_dark.png HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: image/png
Content-Length: 20067
Last-Modified: Tue, 10 Jan 2017 15:06:21 GMT
Connection: keep-alive
ETag: "5874f86d-4e63"
Accept-Ranges: bytes

cf44890.zip/images/hostingIcons/rack-server-magnifier.png

194.245.148.189

200 OK

21 kB

URL GET HTTP/1.1
cf44890.zip/images/hostingIcons/rack-server-magnifier.png
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Size
21 kB (21104 bytes)
Hash
535c74cd52b1aab2231c1055a3515180
f04e58eada9267a08d7c1afba3ff7909f274bab4
df8258ecb85e732ef902e363737bdda663b5eca743f854fc4bffc766daf3c275

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /images/hostingIcons/rack-server-magnifier.png HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: image/png
Content-Length: 21104
Last-Modified: Tue, 10 Jan 2017 15:06:21 GMT
Connection: keep-alive
ETag: "5874f86d-5270"
Accept-Ranges: bytes

cf44890.zip/images/hostingIcons/shared-server.png

194.245.148.189

200 OK

21 kB

URL GET HTTP/1.1
cf44890.zip/images/hostingIcons/shared-server.png
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Size
21 kB (20798 bytes)
Hash
62f51361c8457631d747c7035dc232d4
614e19ed69878a3f9c3e8b32ab7065d46b2d923e
12be61393f13ed2f74070ca310e5bc53b3e744a26cd931922932f3763aa942a4

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /images/hostingIcons/shared-server.png HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: image/png
Content-Length: 20798
Last-Modified: Tue, 10 Jan 2017 15:06:21 GMT
Connection: keep-alive
ETag: "5874f86d-513e"
Accept-Ranges: bytes

cf44890.zip/images/hostingIcons/globe-www.png

194.245.148.189

200 OK

23 kB

URL GET HTTP/1.1
cf44890.zip/images/hostingIcons/globe-www.png
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Size
23 kB (22565 bytes)
Hash
f9e7131b2d73d62a91fdc5761515d65e
75ec6e5c379980c5debbab4b82f92836eabab52d
bfad74e2f09ffeebb658d04bfb097deab464c9df4327a384ce20f353ecde5a9a

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /images/hostingIcons/globe-www.png HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: image/png
Content-Length: 22565
Last-Modified: Tue, 10 Jan 2017 15:06:21 GMT
Connection: keep-alive
ETag: "5874f86d-5825"
Accept-Ranges: bytes

cf44890.zip/images/hostingIcons/rack-server-unlock_blue.png

194.245.148.189

200 OK

21 kB

URL GET HTTP/1.1
cf44890.zip/images/hostingIcons/rack-server-unlock_blue.png
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Size
21 kB (20845 bytes)
Hash
7cd1a43fc895c40445b27f7c6b823d38
652f79eb0bbb17932d152aa18a784fd3559c9e0b
0e5a7c550b7a26e6d18a5452fa7376d49e16bbde1c6d71403850a8aacbbaf488

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /images/hostingIcons/rack-server-unlock_blue.png HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: image/png
Content-Length: 20845
Last-Modified: Tue, 10 Jan 2017 15:06:21 GMT
Connection: keep-alive
ETag: "5874f86d-516d"
Accept-Ranges: bytes

cf44890.zip/favicon.ico

194.245.148.189

200 OK

1.8 kB

URL GET HTTP/1.1
cf44890.zip/favicon.ico
IP
194.245.148.189:80
ASN
#5517 CSL Computer Service Langenbach GmbH

Requested by
http://cf44890.zip/

File type
HTML document, ASCII text
Size
1.8 kB (1840 bytes)
Hash
fbe83adbca53f0ceb75e660d3b5dffd7
142e7d26ff75b1e33a9f5b91cc6a04f94178b07d
443cd35bbac1cc8602a347aa0e55a7c26b7e4fe2a84460d38fe91265147ac751

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cf44890.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cf44890.zip/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 23:12:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1840
Last-Modified: Tue, 04 Apr 2017 13:56:46 GMT
Connection: keep-alive
ETag: "58e3a61e-730"
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (13)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1