Report - zzz.rng.moe/scripts/get_signal_link

Report Overview

Visitedpublic

2024-10-22 11:55:18

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
zzz.rng.moe	unknown	2023-11-04	2024-10-22	2024-10-22	496 B	5.6 kB	104.26.2.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-10-22 11:54:53	medium	Client IP	104.26.2.239	ETPRO INFO .moe Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	zzz.rng.moe/scripts/get_signal_link_os.ps1	104.26.2.239	200 OK	4.6 kB
URL zzz.rng.moe/scripts/get_signal_link_os.ps1 IP / ASN 104.26.2.239 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeASCII text First Seen2024-07-09 Last Seen2024-12-14 Times Seen5 Size4.6 kB (4589 bytes) MD542aed3e65fe54712edf206ed474490e1 SHA1298ab94e59b3dba77614f61deb7b1ec3bf7786ed SHA256b0962fb34dcdbd4967d52dd1790f732fe81ffe558bb91b091c8ed742aef736ab HTTP Headers `GET /scripts/get_signal_link_os.ps1 HTTP/1.1 Host: zzz.rng.moe User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 22 Oct 2024 11:54:53 GMT content-type: application/octet-stream content-length: 4589 access-control-allow-origin: * cache-control: public, max-age=0, must-revalidate etag: "7c83276adaf7dccb2c9789c0c5bcac78" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OGKY%2BNfkOer5V7weSbabepYUUVaoA7OP8rudj5YatBVekV%2Fo9XADTDXbm%2BSRh0VT78rd6DJWLb7TGcXlUbzIJ6hd6yPvds61R%2BySffftzUf5xhg18DdGKQ84rUNjuQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding cf-cache-status: DYNAMIC server: cloudflare cf-ray: 8d694b927a6756a9-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=22316&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3256&recv_bytes=1260&delivery_rate=261387&cwnd=254&unsent_bytes=0&cid=8eaec775f735ddca&ts=102&x=0" X-Firefox-Spdy: h2

zzz.rng.moe/scripts/get_signal_link_os.ps1

104.26.2.239

200 OK

4.6 kB

URL

zzz.rng.moe/scripts/get_signal_link_os.ps1

IP / ASN

104.26.2.239

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeASCII text

First Seen2024-07-09

Last Seen2024-12-14

Times Seen5

Size4.6 kB (4589 bytes)

MD542aed3e65fe54712edf206ed474490e1

SHA1298ab94e59b3dba77614f61deb7b1ec3bf7786ed

SHA256b0962fb34dcdbd4967d52dd1790f732fe81ffe558bb91b091c8ed742aef736ab

HTTP Headers

GET /scripts/get_signal_link_os.ps1 HTTP/1.1
Host: zzz.rng.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 22 Oct 2024 11:54:53 GMT
content-type: application/octet-stream
content-length: 4589
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7c83276adaf7dccb2c9789c0c5bcac78"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OGKY%2BNfkOer5V7weSbabepYUUVaoA7OP8rudj5YatBVekV%2Fo9XADTDXbm%2BSRh0VT78rd6DJWLb7TGcXlUbzIJ6hd6yPvds61R%2BySffftzUf5xhg18DdGKQ84rUNjuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8d694b927a6756a9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=22316&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3256&recv_bytes=1260&delivery_rate=261387&cwnd=254&unsent_bytes=0&cid=8eaec775f735ddca&ts=102&x=0"
X-Firefox-Spdy: h2