Report - simviation.com/1/download?file=SoNevada.zip

Report Overview

Visited public
2023-09-21 18:20:14
Tags
URL
simviation.com/1/download?file=SoNevada.zip
Finishing URL
about:privatebrowsing
IP / ASN
198.143.185.238
#32475 SINGLEHOP-LLC
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
simviation.com	unknown	1999-02-07	2012-06-26 03:06:18	2023-09-20 23:19:07	499 B	636 B	198.143.185.238
dl.simviation.com	unknown	1999-02-07	2018-11-12 20:19:06	2023-09-20 23:19:08	584 B	87 kB	198.143.185.238

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-21 18:20:01	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dl.simviation.com/download?file=SoNevada.zip&sessionId=d5o63vk89r7ok8ke471sta4420
IP
198.143.185.238
ASN
#32475 SINGLEHOP-LLC

File type
Zip archive data, at least v1.0 to extract, compression method=store\012- data
Size
87 kB (86653 bytes)
Hash
9f173e1a6124a3375d01103dc2f38633
558106ca3eb6c94961e1827d2cf599fb04e4702c
65cde49e939f4c7f377b87f2e2029c15aaec5494052211a355dc685542e7585e

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	simviation.com/1/download?file=SoNevada.zip	198.143.185.238	302 Found	20 B
URL User Request GET HTTP/1.1 simviation.com/1/download?file=SoNevada.zip IP 198.143.185.238:443 ASN #32475 SINGLEHOP-LLC Certificate IssuerLet's Encrypt Subjectsimviation.com Fingerprint15:6A:EA:14:78:03:2A:6A:A8:63:1E:D6:2F:68:4C:2D:0D:17:B9:18 ValidityTue, 29 Aug 2023 02:04:57 GMT - Mon, 27 Nov 2023 02:04:56 GMT File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `GET /1/download?file=SoNevada.zip HTTP/1.1 Host: simviation.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Server: nginx/1.2.1 Date: Thu, 21 Sep 2023 18:19:58 GMT Content-Type: text/html Content-Length: 20 Connection: keep-alive X-Powered-By: PHP/5.4.4-14+deb7u14 Set-Cookie: simviation=d5o63vk89r7ok8ke471sta4420; expires=Fri, 20-Sep-2024 18:19:58 GMT; path=/; domain=simviation.com Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache X-Strngr: not downloading Location: https://dl.simviation.com/download?file=SoNevada.zip&sessionId=d5o63vk89r7ok8ke471sta4420 Vary: Accept-Encoding Content-Encoding: gzip

	dl.simviation.com/download?file=SoNevada.zip&sessionId=d5o63vk89r7ok8ke471sta4420	198.143.185.238	200 OK	87 kB
URL User Request GET HTTP/1.1 dl.simviation.com/download?file=SoNevada.zip&sessionId=d5o63vk89r7ok8ke471sta4420 IP 198.143.185.238:443 ASN #32475 SINGLEHOP-LLC Certificate IssuerLet's Encrypt Subjectdl.simviation.com Fingerprint39:76:C9:E4:D7:60:FB:D4:52:44:A8:61:F1:64:BC:68:0B:CD:9D:BC ValidityFri, 01 Sep 2023 02:04:27 GMT - Thu, 30 Nov 2023 02:04:26 GMT File type Zip archive data, at least v1.0 to extract, compression method=store\012- data Size 87 kB (86653 bytes) Hash 9f173e1a6124a3375d01103dc2f38633 558106ca3eb6c94961e1827d2cf599fb04e4702c 65cde49e939f4c7f377b87f2e2029c15aaec5494052211a355dc685542e7585e HTTP Headers GET /download?file=SoNevada.zip&sessionId=d5o63vk89r7ok8ke471sta4420 HTTP/1.1 Host: dl.simviation.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: simviation=d5o63vk89r7ok8ke471sta4420 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx/1.2.1 Date: Thu, 21 Sep 2023 18:19:59 GMT Content-Type: application/zip Content-Length: 86653 Connection: keep-alive Content-disposition: attachment; filename=SoNevada.zip`