Report - sdl.58cdn.com.cn/sdk/meg

Report Overview

Visited public
2025-04-14 11:52:17
Tags
URL
sdl.58cdn.com.cn/sdk/meg_idcard.zip
Finishing URL
about:privatebrowsing
IP / ASN
60.188.66.35
#136190 JINHUA, ZHEJIANG Province, P.R.China.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sdl.58cdn.com.cn	unknown	2014-03-04	2017-02-20	2025-04-13	503 B	1.2 MB	175.12.90.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-14 11:52:07	medium	Client IP	45.194.130.40	ET INFO Executable Download from dotted-quad Host

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
sdl.58cdn.com.cn/sdk/meg_idcard.zip
IP
175.12.90.35
ASN
#151823 China Telecom

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1208079 bytes)
Hash
1e6f021a98d674e6a28e591823971c4a
81017029e7315f13f58ee74cbd3c18036003e55b
b5ef986026c1e06986a4e790a6e9fd60af430c64c50b61951b6bd49c9cdcfbe5

Archive (1)

Modified	Filename	Size	Md5	File type
2019-02-22 14:25	meg_idcard	1.2 MB	76ec0ce412c8d3b47da4594b2a46a9c8	SIMH tape data

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	sdl.58cdn.com.cn/sdk/meg_idcard.zip	175.12.90.35	200 OK	1.2 MB
URL User Request GET sdl.58cdn.com.cn/sdk/meg_idcard.zip IP 175.12.90.35:443 ASN #151823 China Telecom Certificate IssuerGlobalSign nv-sa Subject.58cdn.com.cn Fingerprint84:E8:D7:77:51:36:10:52:A5:3C:85:55:36:C8:A9:E9:BB:59:37:2C ValidityTue, 28 May 2024 02:46:01 GMT - Sun, 29 Jun 2025 02:46:00 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 1.2 MB (1208079 bytes) Hash 1e6f021a98d674e6a28e591823971c4a 81017029e7315f13f58ee74cbd3c18036003e55b b5ef986026c1e06986a4e790a6e9fd60af430c64c50b61951b6bd49c9cdcfbe5 HTTP Headers `GET /sdk/meg_idcard.zip HTTP/1.1 Host: sdl.58cdn.com.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Mon, 14 Apr 2025 11:51:56 GMT content-type: application/zip content-length: 1208079 expires: Thu, 17 Apr 2025 13:14:14 GMT last-modified: Wed, 09 Oct 2019 05:45:33 GMT etag: "5d9d73fd-126f0f" cache-control: max-age=2592000 age: 363632 accept-ranges: bytes ohc-global-saved-time: Tue, 18 Mar 2025 13:14:14 GMT ohc-cache-hit: cs5ct116 [4], xaix228 [2] ohc-file-size: 1208079 x-cache-status: HIT access-control-expose-headers: cdn-from,Date cdn-from: bd X-Firefox-Spdy: h2

sdl.58cdn.com.cn/sdk/meg_idcard.zip

175.12.90.35

200 OK

1.2 MB

URL User Request GET
sdl.58cdn.com.cn/sdk/meg_idcard.zip
IP
175.12.90.35:443
ASN
#151823 China Telecom

Certificate
IssuerGlobalSign nv-sa
Subject*.58cdn.com.cn
Fingerprint84:E8:D7:77:51:36:10:52:A5:3C:85:55:36:C8:A9:E9:BB:59:37:2C
ValidityTue, 28 May 2024 02:46:01 GMT - Sun, 29 Jun 2025 02:46:00 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1208079 bytes)
Hash
1e6f021a98d674e6a28e591823971c4a
81017029e7315f13f58ee74cbd3c18036003e55b
b5ef986026c1e06986a4e790a6e9fd60af430c64c50b61951b6bd49c9cdcfbe5

HTTP Headers

GET /sdk/meg_idcard.zip HTTP/1.1
Host: sdl.58cdn.com.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 14 Apr 2025 11:51:56 GMT
content-type: application/zip
content-length: 1208079
expires: Thu, 17 Apr 2025 13:14:14 GMT
last-modified: Wed, 09 Oct 2019 05:45:33 GMT
etag: "5d9d73fd-126f0f"
cache-control: max-age=2592000
age: 363632
accept-ranges: bytes
ohc-global-saved-time: Tue, 18 Mar 2025 13:14:14 GMT
ohc-cache-hit: cs5ct116 [4], xaix228 [2]
ohc-file-size: 1208079
x-cache-status: HIT
access-control-expose-headers: cdn-from,Date
cdn-from: bd
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers