Report - 7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/

Report Overview

Visited public
2025-03-30 23:10:45
Tags
URL
7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/
Finishing URL
7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/
IP / ASN
3.164.240.121
#16509 AMAZON-02
Title
7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com	unknown	unknown	2022-06-20	2023-02-08	1.4 kB	1.8 kB	54.240.174.39

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-03-30 23:10:23	low	Client IP	54.240.174.39	ET INFO Observed Commonly Actor Abused Online Service Domain (usrfiles .com in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/favicon.ico	54.240.174.39	403 Forbidden	9 B
URL GET 7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/favicon.ico IP 54.240.174.39:80 ASN #16509 AMAZON-02 Requested by http://7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/ File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: 7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Content-Type: text/plain Content-Length: 9 Connection: keep-alive Server: openresty/1.27.1.1 Date: Sun, 30 Mar 2025 23:10:24 GMT Access-Control-Allow-Origin: * Cache-Control: no-cache, private, must-revalidate, proxy-revalidate, no-store Timing-Allow-Origin: * X-Seen-By: gcp.us-central-1.media-router-549f5bfdd-9zm7l Via: 1.1 google, 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront) X-Cache: Error from cloudfront X-Amz-Cf-Pop: OSL50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: gJDhW91cki9eAIghxFA8cUOi9LKX00KcDHmJUbSkYtaYHlzXT-LDYg==

	7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/	54.240.174.39	403 Forbidden	9 B
URL User Request GET 7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/ IP 54.240.174.39:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subject.usrfiles.com Fingerprint10:1D:C3:07:8C:1B:ED:FF:C3:CD:2D:61:9A:9F:FA:67:E7:E4:10:3E ValidityThu, 27 Mar 2025 11:03:53 GMT - Wed, 25 Jun 2025 11:03:52 GMT File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers GET / HTTP/1.1 Host: 7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 403 Forbidden content-type: text/plain content-length: 9 server: openresty/1.27.1.1 date: Sun, 30 Mar 2025 23:10:23 GMT access-control-allow-origin: cache-control: no-cache, private, must-revalidate, proxy-revalidate, no-store timing-allow-origin: * x-seen-by: gcp.us-central-1.media-router-549f5bfdd-m5n6z via: 1.1 google, 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront) x-cache: Error from cloudfront x-amz-cf-pop: OSL50-P1 alt-svc: h3=":443"; ma=86400 x-amz-cf-id: QlUuofzhtWN_Uemmg6c4XFDgQOdEqeO3BT2mnlZFjym01qH2nAs5Pw== X-Firefox-Spdy: h2

	7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/	54.240.174.39	403 Forbidden	9 B
URL User Request GET 7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com/ IP 54.240.174.39:80 ASN #16509 AMAZON-02 File type ASCII text, with no line terminators Size 9 B (9 bytes) Hash 722969577a96ca3953e84e3d949dee81 3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5 78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3 HTTP Headers `GET / HTTP/1.1 Host: 7d7e43ac-3405-45b3-9687-7862fa51f345.usrfiles.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Content-Type: text/plain Content-Length: 9 Connection: keep-alive Server: openresty/1.27.1.1 Date: Sun, 30 Mar 2025 23:10:23 GMT Access-Control-Allow-Origin: * Cache-Control: no-cache, private, must-revalidate, proxy-revalidate, no-store Timing-Allow-Origin: * X-Seen-By: gcp.us-central-1.media-router-549f5bfdd-cfzqj Via: 1.1 google, 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront) X-Cache: Error from cloudfront X-Amz-Cf-Pop: OSL50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OBCKpklQtmLVVI0ScmLUfAWs4q8q-IxKA1yKz0vf3xFX51WdI-9OlA==