Report - n4.kemono.su/data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip

Report Overview

Visited public
2025-05-01 21:47:11
Tags
URL
n4.kemono.su/data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip
Finishing URL
about:privatebrowsing
IP / ASN
91.149.227.13
#200508 Sorok76 Ltd
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
n4.kemono.su	unknown	2022-08-25	2024-07-25	2025-04-28	583 B	38 MB	91.149.227.13

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-01 21:46:41	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2025-05-01 21:46:47	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2025-05-01 21:47:10	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
n4.kemono.su/data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip
IP
91.149.227.13
ASN
#200508 Sorok76 Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
38 MB (38512635 bytes)
Hash
282d8e9d98d65a45d2a9c95d97e36eab
7680292975afae04acf3183f53cfaf19e7ebf795
d982926759f5d89f54d31f80a3855615ce736bbe23ec5075917b270da256e046

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	n4.kemono.su/data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip	91.149.227.13	200 OK	38 MB
URL User Request GET n4.kemono.su/data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip IP 91.149.227.13:443 ASN #200508 Sorok76 Ltd File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 38 MB (38512635 bytes) Hash 282d8e9d98d65a45d2a9c95d97e36eab 7680292975afae04acf3183f53cfaf19e7ebf795 d982926759f5d89f54d31f80a3855615ce736bbe23ec5075917b270da256e046 HTTP Headers GET /data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip HTTP/1.1 Host: n4.kemono.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: nginx date: Thu, 01 May 2025 21:46:39 GMT content-type: application/zip content-length: 38512635 last-modified: Sun, 30 Mar 2025 15:12:36 GMT etag: "67e95f64-24ba7fb" x-cache-status: HIT x-cache-range: bytes=0-4194303 content-disposition: inline; filename=Cum+Covered+Etna.zip access-control-allow-origin: https://kemono.su access-control-allow-methods: GET, OPTIONS access-control-allow-headers: * cache-control: public, max-age=2592000, s-maxage=2592000 accept-ranges: bytes X-Firefox-Spdy: h2

n4.kemono.su/data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip

91.149.227.13

200 OK

38 MB

URL User Request GET
n4.kemono.su/data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip
IP
91.149.227.13:443
ASN
#200508 Sorok76 Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
38 MB (38512635 bytes)
Hash
282d8e9d98d65a45d2a9c95d97e36eab
7680292975afae04acf3183f53cfaf19e7ebf795
d982926759f5d89f54d31f80a3855615ce736bbe23ec5075917b270da256e046

HTTP Headers

GET /data/67/a6/67a631b5e0332f60fb187b97a1ac115bd126c0e795160fc948fd1aa5b2c0bff1.zip?f=Cum+Covered+Etna.zip HTTP/1.1
Host: n4.kemono.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Thu, 01 May 2025 21:46:39 GMT
content-type: application/zip
content-length: 38512635
last-modified: Sun, 30 Mar 2025 15:12:36 GMT
etag: "67e95f64-24ba7fb"
x-cache-status: HIT
x-cache-range: bytes=0-4194303
content-disposition: inline; filename=Cum+Covered+Etna.zip
access-control-allow-origin: https://kemono.su
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
cache-control: public, max-age=2592000, s-maxage=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers