Report - kereste.moe/b/src/1734466539772-2.zip

Report Overview

Visited public
2024-12-19 16:28:17
Tags
URL
kereste.moe/b/src/1734466539772-2.zip
Finishing URL
about:privatebrowsing
IP / ASN
172.67.171.96
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kereste.moe	unknown	2021-07-02	2021-07-02	2024-11-04	491 B	22 MB	172.67.171.96

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-19 16:27:52	medium	Client IP	172.67.171.96	ETPRO INFO .moe Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
kereste.moe/b/src/1734466539772-2.zip
IP
172.67.171.96
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
22 MB (21935078 bytes)
Hash
f60d983e78942677bc03ecb7cc34bdf1
fe1f2835708c912d9b3f3909381bfa684791d4fe
473048b17aabafcaf102f07637e732a65fe50cdaad48a496439c390e066c92c0

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	kereste.moe/b/src/1734466539772-2.zip	172.67.171.96	200 OK	22 MB
URL User Request GET HTTP/2 kereste.moe/b/src/1734466539772-2.zip IP 172.67.171.96:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectkereste.moe Fingerprint05:24:81:04:F0:B5:1B:86:C2:21:CC:43:C4:39:DE:EE:65:DE:FA:6E ValiditySat, 02 Nov 2024 09:10:54 GMT - Fri, 31 Jan 2025 09:10:53 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 22 MB (21935078 bytes) Hash f60d983e78942677bc03ecb7cc34bdf1 fe1f2835708c912d9b3f3909381bfa684791d4fe 473048b17aabafcaf102f07637e732a65fe50cdaad48a496439c390e066c92c0 HTTP Headers `GET /b/src/1734466539772-2.zip HTTP/1.1 Host: kereste.moe User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Thu, 19 Dec 2024 16:27:52 GMT content-type: application/zip content-length: 21935078 last-modified: Tue, 17 Dec 2024 20:15:39 GMT etag: "6761dbeb-14eb3e6" access-control-allow-origin: * cache-control: max-age=14400 cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lDRjOnFGP8WXSAIX9Ndc8LSdsl%2FH66fwdIdCXaX0lrwQKojMFgMpPXyWh%2FTK9ymbSlWxROXQZ3pybvhfxv%2F4QQWdhKB4dGYqz3gFf2YlUR8g8rpVCPTEhqVFJYLZQw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8f48c334c9af56a3-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6267&min_rtt=504&rtt_var=11550&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3275&recv_bytes=1256&delivery_rate=7086460&cwnd=254&unsent_bytes=0&cid=27b58eeb336eb9a6&ts=385&x=0" X-Firefox-Spdy: h2

kereste.moe/b/src/1734466539772-2.zip

172.67.171.96

200 OK

22 MB

URL User Request GET HTTP/2
kereste.moe/b/src/1734466539772-2.zip
IP
172.67.171.96:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectkereste.moe
Fingerprint05:24:81:04:F0:B5:1B:86:C2:21:CC:43:C4:39:DE:EE:65:DE:FA:6E
ValiditySat, 02 Nov 2024 09:10:54 GMT - Fri, 31 Jan 2025 09:10:53 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
22 MB (21935078 bytes)
Hash
f60d983e78942677bc03ecb7cc34bdf1
fe1f2835708c912d9b3f3909381bfa684791d4fe
473048b17aabafcaf102f07637e732a65fe50cdaad48a496439c390e066c92c0

HTTP Headers

GET /b/src/1734466539772-2.zip HTTP/1.1
Host: kereste.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 19 Dec 2024 16:27:52 GMT
content-type: application/zip
content-length: 21935078
last-modified: Tue, 17 Dec 2024 20:15:39 GMT
etag: "6761dbeb-14eb3e6"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lDRjOnFGP8WXSAIX9Ndc8LSdsl%2FH66fwdIdCXaX0lrwQKojMFgMpPXyWh%2FTK9ymbSlWxROXQZ3pybvhfxv%2F4QQWdhKB4dGYqz3gFf2YlUR8g8rpVCPTEhqVFJYLZQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f48c334c9af56a3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6267&min_rtt=504&rtt_var=11550&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3275&recv_bytes=1256&delivery_rate=7086460&cwnd=254&unsent_bytes=0&cid=27b58eeb336eb9a6&ts=385&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers