Report - getvideo.su/ffmpeg.zip

Report Overview

Visited public
2023-08-26 11:18:51
Tags
Submit Tags
URL
getvideo.su/ffmpeg.zip
Finishing URL
about:privatebrowsing
IP / ASN
172.67.145.20
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
getvideo.su	unknown	2022-05-16	2019-05-27 19:21:06	2023-08-26 13:18:22	478 B	17 MB	104.21.57.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-08-26 11:18:22	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2023-08-26 11:18:22	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET getvideo.su/ffmpeg.zip	104.21.57.97	200 OK	17 MB
URL User Request GET HTTP/2 getvideo.su/ffmpeg.zip IP 104.21.57.97:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectgetvideo.su Fingerprint3E:D7:1E:92:93:CB:6C:46:EB:1D:5E:D3:9F:0A:12:1F:EF:AE:CC:60 ValidityMon, 03 Jul 2023 16:10:29 GMT - Sun, 01 Oct 2023 16:10:28 GMT File type Zip archive data, at least v2.0 to extract, compression method=store\012- data Size 17 MB (17019565 bytes) Hash 98598442b9d1134d02fa3a19e82a355b f93901e433130da874ac6f16fb6cdc4bb95592b3 c9c55d2dfe89e732f7f4680ac18203ff2fdde9d0fe263644b692d246073dc8ea HTTP Headers `GET /ffmpeg.zip HTTP/1.1 Host: getvideo.su User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Sat, 26 Aug 2023 11:18:32 GMT content-type: application/zip content-length: 17019565 last-modified: Mon, 10 Apr 2017 12:25:04 GMT etag: "58eb79a0-103b2ad" cache-control: max-age=14400 cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BvsoienrIVh5ZISmXaDtiPLArlnn2E0Qwe7kqJOZDJWKM28nyUP1Xb5CUpsf8Uf6rQON3qem98wFiraSt03juKiJqBUsXDnXmwj6x5co7Fk5B01mueXD26DbwU9k4Q%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7fcbacb1e9b4b4fd-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

GET getvideo.su/ffmpeg.zip

104.21.57.97

200 OK

17 MB

URL User Request GET HTTP/2
getvideo.su/ffmpeg.zip
IP
104.21.57.97:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectgetvideo.su
Fingerprint3E:D7:1E:92:93:CB:6C:46:EB:1D:5E:D3:9F:0A:12:1F:EF:AE:CC:60
ValidityMon, 03 Jul 2023 16:10:29 GMT - Sun, 01 Oct 2023 16:10:28 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store\012- data
Size
17 MB (17019565 bytes)
Hash
98598442b9d1134d02fa3a19e82a355b
f93901e433130da874ac6f16fb6cdc4bb95592b3
c9c55d2dfe89e732f7f4680ac18203ff2fdde9d0fe263644b692d246073dc8ea

HTTP Headers

GET /ffmpeg.zip HTTP/1.1
Host: getvideo.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Aug 2023 11:18:32 GMT
content-type: application/zip
content-length: 17019565
last-modified: Mon, 10 Apr 2017 12:25:04 GMT
etag: "58eb79a0-103b2ad"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BvsoienrIVh5ZISmXaDtiPLArlnn2E0Qwe7kqJOZDJWKM28nyUP1Xb5CUpsf8Uf6rQON3qem98wFiraSt03juKiJqBUsXDnXmwj6x5co7Fk5B01mueXD26DbwU9k4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fcbacb1e9b4b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers