Report - a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com

Report Overview

Visited public
2025-01-22 12:25:16
Tags
URL
a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com
Finishing URL
a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/
IP / ASN
54.240.174.69
#16509 AMAZON-02
Title
a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com	unknown	unknown	2022-06-02	2023-02-12	1.3 kB	1.8 kB	54.240.174.98

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-01-22 12:24:51	low	Client IP	54.240.174.98	ET INFO Observed Commonly Actor Abused Online Service Domain (usrfiles .com in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/	54.240.174.98	403 Forbidden	9 B
URL User Request GET HTTP/1.1 a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/ IP 54.240.174.98:80 ASN #16509 AMAZON-02 File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET / HTTP/1.1 Host: a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 403 Forbidden content-type: text/plain content-length: 9 server: openresty/1.27.1.1 date: Wed, 22 Jan 2025 12:24:52 GMT access-control-allow-origin: * cache-control: no-cache, private, must-revalidate, proxy-revalidate, no-store timing-allow-origin: * x-seen-by: gcp.us-central-1.media-router-66f677bb5d-4dxgj via: 1.1 google, 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) x-cache: Error from cloudfront x-amz-cf-pop: OSL50-P1 alt-svc: h3=":443"; ma=86400 x-amz-cf-id: IoJc_VYVnZiTwhy-aSuVrCtuxtnAIvnrmU2--F9JIArpuPK7JB6FmQ== X-Firefox-Spdy: h2

	a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/	54.240.174.98	403 Forbidden	9 B
URL User Request GET HTTP/1.1 a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/ IP 54.240.174.98:80 ASN #16509 AMAZON-02 File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET / HTTP/1.1 Host: a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Content-Type: text/plain Content-Length: 9 Connection: keep-alive Server: openresty/1.27.1.1 Date: Wed, 22 Jan 2025 12:24:52 GMT Access-Control-Allow-Origin: * Cache-Control: no-cache, private, must-revalidate, proxy-revalidate, no-store Timing-Allow-Origin: * X-Seen-By: gcp.us-central-1.media-router-66f677bb5d-mwjgk Via: 1.1 google, 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront) X-Cache: Error from cloudfront X-Amz-Cf-Pop: OSL50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: k-QPd-eSAOKvoli-2yKywzWbTSwtisHLD17CSAo8DW-kFJouqexgCg==

	a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/favicon.ico	54.240.174.98	403 Forbidden	9 B
URL GET HTTP/1.1 a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/favicon.ico IP 54.240.174.98:80 ASN #16509 AMAZON-02 Requested by http://a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/ File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://a6126490-5505-42b4-8eca-ed17361b6f4b.usrfiles.com/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Content-Type: text/plain Content-Length: 9 Connection: keep-alive Server: openresty/1.27.1.1 Date: Wed, 22 Jan 2025 12:24:53 GMT Access-Control-Allow-Origin: * Cache-Control: no-cache, private, must-revalidate, proxy-revalidate, no-store Timing-Allow-Origin: * X-Seen-By: gcp.us-central-1.media-router-66f677bb5d-j9v28 Via: 1.1 google, 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront) X-Cache: Error from cloudfront X-Amz-Cf-Pop: OSL50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ij-wuG_7g6ohlSjAL9CKuT_Cz2AG-8EKUlnuARCw4a73X0Rgww-0CQ==