Report - epicwizardry.it/launcher/update.zip

Report Overview

Visitedpublic

2024-12-28 03:57:54

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
epicwizardry.it	unknown	2024-10-06	2024-12-28	2024-12-28	489 B	38 MB	104.21.76.174

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-28 03:57:35	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-12-28 03:57:42	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-12-28 03:57:43	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

epicwizardry.it/launcher/update.zip

IP / ASN

104.21.76.174

#13335 CLOUDFLARENET

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size38 MB (38292984 bytes)

MD5ba81c2b166be8cae39c3de55e82847c6

SHA111b9a7ba5e4fb1a245613721a2e0a8114dd1d408

SHA2564fd754a5b9fd6d98c7c900cb658f7e1433028835eaabab3036cf5f4fd95bdd1a

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET epicwizardry.it/launcher/update.zip	104.21.76.174	200 OK	38 MB
URL epicwizardry.it/launcher/update.zip IP / ASN 104.21.76.174 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeZip archive data, at least v2.0 to extract, compression method=deflate First Seen2024-12-28 Last Seen2024-12-28 Times Seen1 Size38 MB (38292984 bytes) MD5ba81c2b166be8cae39c3de55e82847c6 SHA111b9a7ba5e4fb1a245613721a2e0a8114dd1d408 SHA2564fd754a5b9fd6d98c7c900cb658f7e1433028835eaabab3036cf5f4fd95bdd1a Certificate Info IssuerGoogle Trust Services Subjectepicwizardry.it Fingerprint54:BF:E6:FD:46:F3:29:02:E7:1F:52:65:48:7B:F6:3A:00:39:EA:BF ValiditySat, 14 Dec 2024 18:29:09 GMT - Fri, 14 Mar 2025 19:27:42 GMT HTTP Headers `GET /launcher/update.zip HTTP/1.1 Host: epicwizardry.it User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Sat, 28 Dec 2024 03:57:26 GMT content-type: application/zip content-length: 38292984 last-modified: Sat, 28 Dec 2024 00:51:28 GMT etag: "2484df8-62a49fac2cc97" cache-control: max-age=14400 cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=btTYyYAhnAuyZGTfdugFJwv3igtZMqCzy96T0gT1ZW56HUiGaotJw%2BK1%2BBv2ukCMPkkkMypkfc4IKj%2Bj86lAYTBJKgV6ueYuB4qswZRnH%2FxHX9CjZd%2FY8UwSgsrAry0BL5k%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8f8ea0527823569c-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6490&min_rtt=444&rtt_var=12079&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3282&recv_bytes=1259&delivery_rate=7337837&cwnd=254&unsent_bytes=0&cid=a42285acb6a50e40&ts=149&x=0" X-Firefox-Spdy: h2

GET epicwizardry.it/launcher/update.zip

104.21.76.174

200 OK

38 MB

URL

epicwizardry.it/launcher/update.zip

IP / ASN

104.21.76.174

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=deflate

First Seen2024-12-28

Last Seen2024-12-28

Times Seen1

Size38 MB (38292984 bytes)

MD5ba81c2b166be8cae39c3de55e82847c6

SHA111b9a7ba5e4fb1a245613721a2e0a8114dd1d408

SHA2564fd754a5b9fd6d98c7c900cb658f7e1433028835eaabab3036cf5f4fd95bdd1a

Certificate Info

IssuerGoogle Trust Services

Subjectepicwizardry.it

Fingerprint54:BF:E6:FD:46:F3:29:02:E7:1F:52:65:48:7B:F6:3A:00:39:EA:BF

ValiditySat, 14 Dec 2024 18:29:09 GMT - Fri, 14 Mar 2025 19:27:42 GMT

HTTP Headers

GET /launcher/update.zip HTTP/1.1
Host: epicwizardry.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 28 Dec 2024 03:57:26 GMT
content-type: application/zip
content-length: 38292984
last-modified: Sat, 28 Dec 2024 00:51:28 GMT
etag: "2484df8-62a49fac2cc97"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=btTYyYAhnAuyZGTfdugFJwv3igtZMqCzy96T0gT1ZW56HUiGaotJw%2BK1%2BBv2ukCMPkkkMypkfc4IKj%2Bj86lAYTBJKgV6ueYuB4qswZRnH%2FxHX9CjZd%2FY8UwSgsrAry0BL5k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f8ea0527823569c-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6490&min_rtt=444&rtt_var=12079&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3282&recv_bytes=1259&delivery_rate=7337837&cwnd=254&unsent_bytes=0&cid=a42285acb6a50e40&ts=149&x=0"
X-Firefox-Spdy: h2