Report - gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt

Report Overview

Submitted URL
gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt
IP
172.65.251.78
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 01:28:32
Access
public
Website Title
gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt
Final URL
gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gitlab.com	17719	2004-01-15	2014-06-06	2024-04-24	1.7 kB	3.6 MB	172.65.251.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt	APT 10 / Cloud Hopper malware campaign

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt

172.65.251.78

200 OK

3.6 MB

URL User Request GET HTTP/2
gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt
IP
172.65.251.78:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerSectigo Limited
Subjectgitlab.com
FingerprintFB:07:E4:E6:21:FA:07:5C:96:1B:66:1A:E2:99:AD:E7:68:1D:F5:D5
ValidityThu, 14 Dec 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT

File type
Adblock Plus . rules file
Size
3.6 MB (3574612 bytes)
Hash
74c0195ef3541cd97904287758fc98c3
bab105f3de4647295f5cbae8d9188bcdcc472cb1
8316353e3149953d4252e511de0bb105532cce2117143127b40af6300b87fa2f

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	APT 10 / Cloud Hopper malware campaign

HTTP Headers

GET /hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt HTTP/1.1
Host: gitlab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 01:28:07 GMT
content-type: text/plain; charset=utf-8
content-length: 3574612
cache-control: max-age=60, public, must-revalidate, stale-while-revalidate=60, stale-if-error=300, s-maxage=60
content-disposition: inline
content-security-policy: base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' https://gitlab.com/assets/ blob: data:; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com snowplow.trx.gitlab.net; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-HsjVjB3RBi6L96SpOr0VHQ=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data:
etag: "c4a896a25edcc75ac9c9eb8623b40b4f"
permissions-policy: interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gitlab-meta: {"correlation_id":"01HW7ZS3QKB48BTSBTR4558BY5","version":"1"}
x-permitted-cross-domain-policies: none
x-request-id: 01HW7ZS3QKB48BTSBTR4558BY5
x-runtime: 0.115523
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
gitlab-lb: haproxy-main-47-lb-gprd
gitlab-sv: web-gke-us-east1-d
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DM6EAH5wmLSEbecz4FW0jjyCVwdbl5DHxNA8lFNa49BxNTwHYkG02Z4Qhqmt%2BqK6YlmWv0gutDwC3%2ByKy2IbJP1EpnuZwwOcC5u7Vj6CzDdtsZQiUxTp2e%2B55K4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000
set-cookie: _cfuvid=TWZQCCsczLJoy_9FrcYqfHnkP3OCDw7j8yOZDUrJVdY-1714008487686-0.0.1.1-604800000; path=/; domain=.gitlab.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 879a8df47bde56ba-OSL
X-Firefox-Spdy: h2

gitlab.com/favicon.ico

172.65.251.78

301 Moved Permanently

168 B

URL GET HTTP/2
gitlab.com/favicon.ico
IP
172.65.251.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt
Certificate
IssuerSectigo Limited
Subjectgitlab.com
FingerprintFB:07:E4:E6:21:FA:07:5C:96:1B:66:1A:E2:99:AD:E7:68:1D:F5:D5
ValidityThu, 14 Dec 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT

File type
HTML document, ASCII text, with no line terminators
Size
168 B (168 bytes)
Hash
6f275076fd9f61de8a091370de8e8e09
26951ea9fb91ad8fe90393e7d9abf0beca070c78
8a2dd93bbe2a756ae680d87021c938211233f6b21303c2ca3b40cb84b0649980

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: gitlab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt
DNT: 1
Connection: keep-alive
Cookie: _cfuvid=TWZQCCsczLJoy_9FrcYqfHnkP3OCDw7j8yOZDUrJVdY-1714008487686-0.0.1.1-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 25 Apr 2024 01:28:08 GMT
content-type: text/html
content-length: 168
location: https://gitlab.com/assets/favicon-72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef.png
cache-control: no-cache
content-security-policy: base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' https://gitlab.com/assets/ blob: data:; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-+ydlSxLDQB9T1dlPIovQpQ=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data:
x-gitlab-meta: {"correlation_id":"01HW9DVYAKZVPVQPBAHXBQ8ZAX","version":"1"}
x-request-id: 01HW9DVYAKZVPVQPBAHXBQ8ZAX
x-runtime: 0.026715
gitlab-lb: haproxy-main-19-lb-gprd
gitlab-sv: web-gke-us-east1-c
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3MVhrEhAA5A8pxqoIs9Ujsg%2FnNDGhqK9rnBV2qu%2BVxJe160xzMr%2BBH6Om7khmdnM0bQlAwgFd5FHSh%2FcMa1Sig%2B6SHCV3KXt%2FDuM7Nuct4Z9rn1yW%2BxU32AewWk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879a8dfb1d9756ba-OSL
X-Firefox-Spdy: h2

gitlab.com/assets/favicon-72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef.png

172.65.251.78

200 OK

591 B

URL GET HTTP/2
gitlab.com/assets/favicon-72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef.png
IP
172.65.251.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt
Certificate
IssuerSectigo Limited
Subjectgitlab.com
FingerprintFB:07:E4:E6:21:FA:07:5C:96:1B:66:1A:E2:99:AD:E7:68:1D:F5:D5
ValidityThu, 14 Dec 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
591 B (591 bytes)
Hash
66f9a1c3f2cfd0df1b570990e86d3095
1b9ed5c9db3047a561e2ca4cbcbc8a1623700ed9
72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef

HTTP Headers

GET /assets/favicon-72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef.png HTTP/1.1
Host: gitlab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/pro.txt
DNT: 1
Connection: keep-alive
Cookie: _cfuvid=TWZQCCsczLJoy_9FrcYqfHnkP3OCDw7j8yOZDUrJVdY-1714008487686-0.0.1.1-604800000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 25 Apr 2024 01:28:12 GMT
content-type: image/png
content-length: 591
x-guploader-uploadid: ABPtcPr5zD6YtiS8gTGp68Px7bclbEG89AkNgko_tuRKLQMSdYaAieLELpxIL_oTc-8w3BJuXUfsMUhmgA
cache-control: public,max-age=31536000
expires: Tue, 04 Mar 2025 20:15:36 GMT
last-modified: Mon, 04 Mar 2024 16:35:13 GMT
etag: "66f9a1c3f2cfd0df1b570990e86d3095"
x-goog-generation: 1709570113713532
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 591
x-goog-hash: crc32c=6pSU8g==, md5=Zvmhw/LP0N8bVwmQ6G0wlQ==
x-goog-storage-class: STANDARD
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 1937578
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fTJBx4AVDDo7Bo3Z8hJ46DYzWsV%2FdUX4SKNTHv3njUPjJxRMCSyHdVObytXEi2KsIAYnMPmWJO4psU4lcqxluKVEP%2F3O6%2FMLBZtmzOpbJ%2BFLPlYkIi9GqPtGBro%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879a8e153cd756ba-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers