Report - d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt

Report Overview

Visited public
2025-05-02 06:20:25
Tags
URL
d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt
Finishing URL
d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt
IP / ASN
3.164.240.121
#16509 AMAZON-02
Title
d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com	unknown	2013-05-26	2023-07-25	2025-05-01	1.5 kB	1.8 kB	3.167.2.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-02 06:19:53	low	Client IP	3.167.2.27	ET INFO Observed Commonly Actor Abused Online Service Domain (usrfiles .com in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt	3.167.2.27	403 Forbidden	9 B
URL User Request GET d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt IP 3.167.2.27:443 ASN #0 Certificate IssuerLet's Encrypt Subject.usrfiles.com Fingerprint10:1D:C3:07:8C:1B:ED:FF:C3:CD:2D:61:9A:9F:FA:67:E7:E4:10:3E ValidityThu, 27 Mar 2025 11:03:53 GMT - Wed, 25 Jun 2025 11:03:52 GMT File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers GET /ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt HTTP/1.1 Host: d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 403 Forbidden content-type: text/plain content-length: 9 server: openresty/1.27.1.1 date: Fri, 02 May 2025 06:19:53 GMT access-control-allow-origin: cache-control: no-cache, private, must-revalidate, proxy-revalidate, no-store timing-allow-origin: * x-seen-by: gcp.us-central-1.media-router-549f5bfdd-2l8w9 via: 1.1 google, 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront) x-cache: Error from cloudfront x-amz-cf-pop: OSL50-P2 alt-svc: h3=":443"; ma=86400 x-amz-cf-id: YpKbray4Qr9Mh9nJZ2H0BYvX5moOnJncYOZRlXtGk0E_aP06P54Xeg== X-Firefox-Spdy: h2

	d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt	3.167.2.27	403 Forbidden	9 B
URL User Request GET d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt IP 3.167.2.27:80 ASN #0 File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt HTTP/1.1 Host: d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Content-Type: text/plain Content-Length: 9 Connection: keep-alive Server: openresty/1.27.1.1 Date: Fri, 02 May 2025 06:19:54 GMT Access-Control-Allow-Origin: * Cache-Control: no-cache, private, must-revalidate, proxy-revalidate, no-store Timing-Allow-Origin: * X-Seen-By: gcp.us-central-1.media-router-549f5bfdd-q2249 Via: 1.1 google, 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront) X-Cache: Error from cloudfront X-Amz-Cf-Pop: OSL50-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9xA3NAyHH8Gw_tyEX6Z4Iswaz9cMa6cR_E5OO2MElnRlrQ2kDkXIfQ==

	d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/favicon.ico	3.167.2.27	403 Forbidden	9 B
URL GET d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/favicon.ico IP 3.167.2.27:80 ASN #0 Requested by http://d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://d9e1c3dd-1fee-48c1-9089-09a70580408e.usrfiles.com/ugd/d9e1c3_0ab6514f09984c718f04145bb29f28d5.txt Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Content-Type: text/plain Content-Length: 9 Connection: keep-alive Server: openresty/1.27.1.1 Date: Fri, 02 May 2025 06:19:54 GMT Access-Control-Allow-Origin: * Cache-Control: no-cache, private, must-revalidate, proxy-revalidate, no-store Timing-Allow-Origin: * X-Seen-By: gcp.us-central-1.media-router-549f5bfdd-zlm2c Via: 1.1 google, 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront) X-Cache: Error from cloudfront X-Amz-Cf-Pop: OSL50-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: N7bDdvi9gKKXovbrgEYIfp0XzgHGr6akLen5It01R2Z2FtgQ6rIx9A==