Report - moronicesare.biz/VV/XaouFi-V5.zip

Report Overview

Visited public
2025-04-10 18:06:19
Tags
URL
moronicesare.biz/VV/XaouFi-V5.zip
Finishing URL
ww1.moronicesare.biz/
IP / ASN
134.119.176.24
#29066 velia.net Internetdienste GmbH
Title
ww1.moronicesare.biz/

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
moronicesare.biz	unknown	2016-04-07	2017-02-05	2025-03-20	918 B	361 B	192.155.108.155
ww1.moronicesare.biz	unknown	2016-04-07	2025-04-10	2025-04-10	2.3 kB	4.5 kB	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-10 18:05:56	medium	192.155.108.155	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	moronicesare.biz/VV/XaouFi-V5.zip	192.155.108.155	302 Found	0 B
URL User Request GET moronicesare.biz/VV/XaouFi-V5.zip IP 192.155.108.155:80 ASN #29066 velia.net Internetdienste GmbH File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /VV/XaouFi-V5.zip HTTP/1.1 Host: moronicesare.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found cache-control: max-age=0, private, must-revalidate connection: close content-length: 11 date: Thu, 10 Apr 2025 18:05:55 GMT location: http://ww1.moronicesare.biz server: nginx set-cookie: sid=7341e3ff-1636-11f0-825a-bfa62fbd1dec; path=/; domain=.moronicesare.biz; expires=Tue, 28 Apr 2093 21:20:03 GMT; max-age=2147483647; HttpOnly`

	ww1.moronicesare.biz/	0.0.0.0		0 B
URL User Request GET ww1.moronicesare.biz/ IP 0.0.0.0:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: ww1.moronicesare.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: sid=7341e3ff-1636-11f0-825a-bfa62fbd1dec Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache

	ww1.moronicesare.biz/	208.91.196.145	200 OK	2.0 kB
URL User Request GET ww1.moronicesare.biz/ IP 208.91.196.145:80 ASN #40034 CONFLUENCE-NETWORK-INC File type HTML document, ASCII text, with very long lines (458), with CRLF line terminators Size 2.0 kB (1967 bytes) Hash add2f0a09eb2e7c9dff3507b02fca42e b6b7f68c2b7270e1231a6b1def79fe26475390b3 05b71eaf96fc21c283a5749f72ee651fe3a4afe63b31e06ddd999fa38d6dec0e HTTP Headers `GET / HTTP/1.1 Host: ww1.moronicesare.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Cookie: sid=7341e3ff-1636-11f0-825a-bfa62fbd1dec Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Thu, 10 Apr 2025 18:05:52 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_QLLEAaChKdjeAWaA5J6w4s12rmE51kaoF/ql1oJkaJ0X9pCHecdEtu+tRXPdzzW7UcTqpNsTTVQQuoaZl0i7iA== Content-Length: 1967 Keep-Alive: timeout=5, max=107 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

	ww1.moronicesare.biz/?fp=gDaYSYqlcsKPReEc33CcJYoaC1moQuYWpqN7iOzxpi5hL3rAMF9aDOmYoB567VU9TSVzpsAjXVwoxV6mnIJCDeNxdFr6Nne7LRd0PrHJI4JtKyrV3pNtEz3M%2F%2FpAOCftwj3xBwqm8TEK4Dv%2Bvtqd7NFhQG1DxRKAKRL9I7FV%2Fon%2BffK06iS4I3NhWeP1g3ouBrioVPGvqEi5PBAeAH0zaY0iN2KLvZ%2BM00NHZfExscNViyNSJGlEa%2Ff4ieA%2FiH3wfzeB0VMF1KhvM%2B9%2Fcfgn2E1nqhgycq56mQg9vEvwJAc%3D&poru=cCoUi0RJdcxEH%2BTKcsUbjY85w0YIcPpfPtbST03HcOc%3D&_opnslfp=1&	208.91.196.145	403 Forbidden	299 B
URL GET ww1.moronicesare.biz/?fp=gDaYSYqlcsKPReEc33CcJYoaC1moQuYWpqN7iOzxpi5hL3rAMF9aDOmYoB567VU9TSVzpsAjXVwoxV6mnIJCDeNxdFr6Nne7LRd0PrHJI4JtKyrV3pNtEz3M%2F%2FpAOCftwj3xBwqm8TEK4Dv%2Bvtqd7NFhQG1DxRKAKRL9I7FV%2Fon%2BffK06iS4I3NhWeP1g3ouBrioVPGvqEi5PBAeAH0zaY0iN2KLvZ%2BM00NHZfExscNViyNSJGlEa%2Ff4ieA%2FiH3wfzeB0VMF1KhvM%2B9%2Fcfgn2E1nqhgycq56mQg9vEvwJAc%3D&poru=cCoUi0RJdcxEH%2BTKcsUbjY85w0YIcPpfPtbST03HcOc%3D&_opnslfp=1& IP 208.91.196.145:80 ASN #40034 CONFLUENCE-NETWORK-INC Requested by http://ww1.moronicesare.biz/ File type HTML document, ASCII text, with CRLF line terminators Size 299 B (299 bytes) Hash e34794eb620a142251ce1c0f45211d15 287845e17a02ad1b7b582b0afc0fd448b9f39529 750087442c04b3724c5a78366435c991728751ab45dc56d4dc858670e6fe8ec9 HTTP Headers GET /?fp=gDaYSYqlcsKPReEc33CcJYoaC1moQuYWpqN7iOzxpi5hL3rAMF9aDOmYoB567VU9TSVzpsAjXVwoxV6mnIJCDeNxdFr6Nne7LRd0PrHJI4JtKyrV3pNtEz3M%2F%2FpAOCftwj3xBwqm8TEK4Dv%2Bvtqd7NFhQG1DxRKAKRL9I7FV%2Fon%2BffK06iS4I3NhWeP1g3ouBrioVPGvqEi5PBAeAH0zaY0iN2KLvZ%2BM00NHZfExscNViyNSJGlEa%2Ff4ieA%2FiH3wfzeB0VMF1KhvM%2B9%2Fcfgn2E1nqhgycq56mQg9vEvwJAc%3D&poru=cCoUi0RJdcxEH%2BTKcsUbjY85w0YIcPpfPtbST03HcOc%3D&_opnslfp=1& HTTP/1.1 Host: ww1.moronicesare.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://ww1.moronicesare.biz/ DNT: 1 Connection: keep-alive Cookie: sid=7341e3ff-1636-11f0-825a-bfa62fbd1dec Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 403 Forbidden Date: Thu, 10 Apr 2025 18:05:53 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Content-Length: 299 Keep-Alive: timeout=5, max=121 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

	ww1.moronicesare.biz/favicon.ico	208.91.196.145	404 Not Found	10 B
URL GET ww1.moronicesare.biz/favicon.ico IP 208.91.196.145:80 ASN #40034 CONFLUENCE-NETWORK-INC Requested by http://ww1.moronicesare.biz/ File type ASCII text, with no line terminators Size 10 B (10 bytes) Hash 6608dd3e21ca3beabd4bdfa625a0b221 e926d0f8694a4bc4013308afaca7af51e4c9fd9f c75eb01138771bfb2a5517aeae882356733782767c4560cc9601c34d2591ca75 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: ww1.moronicesare.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://ww1.moronicesare.biz/ DNT: 1 Connection: keep-alive Cookie: sid=7341e3ff-1636-11f0-825a-bfa62fbd1dec Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 404 Not Found Date: Thu, 10 Apr 2025 18:05:53 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Content-Length: 10 Keep-Alive: timeout=5, max=126 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1

	moronicesare.biz/VV/XaouFi-V5.zip	0.0.0.0		0 B
URL User Request GET moronicesare.biz/VV/XaouFi-V5.zip IP 0.0.0.0:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /VV/XaouFi-V5.zip HTTP/1.1 Host: moronicesare.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache`