Report - cdn.nilname.com/NoName.zip

Report Overview

Visitedpublic

2025-01-14 00:33:11

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
cdn.nilname.com	unknown	2023-09-17	2023-11-26	2025-01-10	480 B	4.6 MB	172.67.211.96

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

cdn.nilname.com/NoName.zip

IP / ASN

172.67.211.96

#13335 CLOUDFLARENET

File Overview

File TypeZip archive data, at least v1.0 to extract, compression method=store

Size4.6 MB (4587644 bytes)

MD5563b7b0e61d9dc138dcbce2e32e5dbb2

SHA148ce200cc2ee1e41d59e20fcaaa2af2289d6aec5

SHA256cfa1fd88445b6c0f5290a1a3fb692e348cbf05b08fb64dc15dfce4be1aa4accc

Archive (22)

Modified	Filename	Size	MD5	File type
2024-10-01 10:39	Command Line Examples.txt	712 B	693954a9e36317e1799a8eea7704d44b	ASCII text, with CRLF line terminators
2023-11-26 18:10	license.txt	18 B	d404a922b3b83bd0f6980b81a3865008	ASCII text, with no line terminators
2023-11-26 18:11	account_data.json	233 B	a27966d67e78b03ca38c0a0d5ab781f0	JSON text data
2024-10-01 10:37	reloggerV9.lua	5.5 kB	a2206564aa5c23c4b6a143f758a417f5	ASCII text
2024-04-17 19:10	gatherables.nn	7.5 kB	b2b22f8030c12b2f56fd86072cc289a3	Lua bytecode, version 5.1
2023-11-26 18:10	mmaps.json	109 kB	d9f7eba5f521bc1de9256a24ba56176a	JSON text data
2024-10-01 11:12	slashcommands.nn	591 B	8ce963c2ad224ddc09a0ad40462e9503	Lua bytecode, version 5.1
2024-04-17 19:10	storage.nn	2.2 kB	b4f65e7d879425ad640ea8e8dd196360	Lua bytecode, version 5.1
2024-04-17 19:10	ace3.nn	276 kB	523dd5ea65edec57be3d6ae87884cda8	Lua bytecode, version 5.1
2024-04-17 19:10	AceAddon30.nn	13 kB	af4c60e6d91111d09037be327761c395	Lua bytecode, version 5.1
2024-04-17 19:10	AceComm-30.nn	9.7 kB	7e6039c899f494ceb89cf29026846722	Lua bytecode, version 5.1
2024-04-17 19:10	AceDB30.nn	20 kB	537689aac9eccbd236877fc36338d607	Lua bytecode, version 5.1
2023-11-26 18:10	AESECB.nn	20 kB	1e3e1d92f79928b940520c8f7c660ca3	Lua bytecode, version 5.1
2024-04-17 19:10	antiafk.nn	688 B	b62560fe3c8d71fb2817b32ea238a610	Lua bytecode, version 5.1
2024-04-17 19:10	CallbackHandler10.nn	8.4 kB	db3743c8afcb88cc686c023d439cae97	Lua bytecode, version 5.1
2024-04-17 19:10	LibSharedMedia30.nn	12 kB	005b6797af0bec129e5785e6a1ad15be	Lua bytecode, version 5.1
2024-04-17 19:10	LibStub.nn	1.0 kB	43dc0b5b756d08cb097640ab233ee556	Lua bytecode, version 5.1
2024-10-01 10:41	MMAP download info.txt	214 B	67402ff1ef765ca06a07b19c7d5a325d	ASCII text, with CRLF line terminators
2025-01-13 10:55	NnLoader_RenameMe.exe	2.0 MB	89dff258f389e0b1b2c2caa9b3ecb2fc	PE32+ executable (console) x86-64, for MS Windows, 3 sections
2024-10-05 10:27	NnNavigation_RenameMe.exe	2.2 MB	634a0b8b13c06f87ba58db8bde935e5f	PE32+ executable (console) x86-64, for MS Windows, 3 sections
2023-11-26 18:10	test.lua	2.1 kB	88fa85b13134490b554cb02aca87b7c3	ASCII text, with CRLF line terminators
2023-11-26 18:10	start.bat	396 B	85814010c3768a2cbd6fca5589136ad6	DOS batch file, ASCII text, with CRLF line terminators

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET cdn.nilname.com/NoName.zip	172.67.211.96	200 OK	4.6 MB
URL cdn.nilname.com/NoName.zip IP / ASN 172.67.211.96 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeZip archive data, at least v1.0 to extract, compression method=store First Seen2025-01-14 Last Seen2025-01-18 Times Seen2 Size4.6 MB (4587644 bytes) MD5563b7b0e61d9dc138dcbce2e32e5dbb2 SHA148ce200cc2ee1e41d59e20fcaaa2af2289d6aec5 SHA256cfa1fd88445b6c0f5290a1a3fb692e348cbf05b08fb64dc15dfce4be1aa4accc Certificate Info IssuerGoogle Trust Services Subjectnilname.com Fingerprint24:D8:CC:51:C4:1E:D6:1A:A9:2B:9A:FD:C3:F8:B0:03:4A:AA:9C:BD ValidityWed, 01 Jan 2025 21:56:48 GMT - Tue, 01 Apr 2025 22:55:25 GMT HTTP Headers `GET /NoName.zip HTTP/1.1 Host: cdn.nilname.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 14 Jan 2025 00:32:45 GMT content-type: application/zip content-length: 4587644 last-modified: Mon, 13 Jan 2025 08:56:48 GMT etag: "6784d550-46007c" cache-control: max-age=14400 cf-cache-status: EXPIRED accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FPf8SoP8f9L37aO4956FdGcXPFhOBfBIySQoQmi67V7zwwdvc1xvboH17FreuVdoLubocK9nO9MnfMAVB3GlB9LoSAkHgbHRKzAVS5hUDm%2FCL0l5rne53cdQG9FweFYTGj8%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 901987dd5a440b45-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=5846&min_rtt=432&rtt_var=10808&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3273&recv_bytes=1253&delivery_rate=6642201&cwnd=254&unsent_bytes=0&cid=49df6d1fcb893f36&ts=150&x=0" X-Firefox-Spdy: h2

GET cdn.nilname.com/NoName.zip

172.67.211.96

200 OK

4.6 MB

URL

cdn.nilname.com/NoName.zip

IP / ASN

172.67.211.96

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeZip archive data, at least v1.0 to extract, compression method=store

First Seen2025-01-14

Last Seen2025-01-18

Times Seen2

Size4.6 MB (4587644 bytes)

MD5563b7b0e61d9dc138dcbce2e32e5dbb2

SHA148ce200cc2ee1e41d59e20fcaaa2af2289d6aec5

SHA256cfa1fd88445b6c0f5290a1a3fb692e348cbf05b08fb64dc15dfce4be1aa4accc

Certificate Info

IssuerGoogle Trust Services

Subjectnilname.com

Fingerprint24:D8:CC:51:C4:1E:D6:1A:A9:2B:9A:FD:C3:F8:B0:03:4A:AA:9C:BD

ValidityWed, 01 Jan 2025 21:56:48 GMT - Tue, 01 Apr 2025 22:55:25 GMT

HTTP Headers

GET /NoName.zip HTTP/1.1
Host: cdn.nilname.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 14 Jan 2025 00:32:45 GMT
content-type: application/zip
content-length: 4587644
last-modified: Mon, 13 Jan 2025 08:56:48 GMT
etag: "6784d550-46007c"
cache-control: max-age=14400
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FPf8SoP8f9L37aO4956FdGcXPFhOBfBIySQoQmi67V7zwwdvc1xvboH17FreuVdoLubocK9nO9MnfMAVB3GlB9LoSAkHgbHRKzAVS5hUDm%2FCL0l5rne53cdQG9FweFYTGj8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 901987dd5a440b45-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5846&min_rtt=432&rtt_var=10808&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3273&recv_bytes=1253&delivery_rate=6642201&cwnd=254&unsent_bytes=0&cid=49df6d1fcb893f36&ts=150&x=0"
X-Firefox-Spdy: h2