Report - f1e7-124-110-228-162.jp.ngrok.io/sakura.zip

Report Overview

Visited public
2023-12-01 18:20:19
Tags
URL
f1e7-124-110-228-162.jp.ngrok.io/sakura.zip
Finishing URL
f1e7-124-110-228-162.jp.ngrok.io/sakura.zip
IP / ASN
3.125.223.134
#16509 AMAZON-02
Title
ERR_NGROK_3200 - Tunnel f1e7-124-110-228-162.jp.ngrok.io not found

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
f1e7-124-110-228-162.jp.ngrok.io	unknown	2014-05-25	2023-11-01 14:28:30	2023-12-01 19:19:54	1.9 kB	3.8 kB	3.125.223.134
cdn.ngrok.com	unknown	2013-03-18	2022-04-29 09:26:26	2023-12-01 07:26:11	1.6 kB	74 kB	18.158.249.75

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-01 18:20:06	low	Client IP	Internal IP	ET INFO DNS Query to a *.ngrok domain (ngrok.io)
2023-12-01 18:20:06	low	Client IP	Internal IP	ET INFO DNS Query to a *.ngrok domain (ngrok.io)
2023-12-01 18:20:07	high	Client IP	Internal IP	ET POLICY DNS Query to a *.ngrok domain (ngrok.com)
2023-12-01 18:20:07	high	Client IP	Internal IP	ET POLICY DNS Query to a *.ngrok domain (ngrok.com)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	cdn.ngrok.com/static/js/error.js	ScriptElement	860 B	2023-03-13	2025-03-25
Pretty URL cdn.ngrok.com/static/js/error.js IP 18.158.249.75 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:49 Last Seen2025-03-25 09:33 Times Seen360 Hash 5c5d834212dd9658a5c60841108c341d 7406c215e471451606f466f7b962146d9c057204 df31e9909c53fcd8083d9476b265df58848ba92ce857be821d2766bd660992c6 Loading...

	cdn.ngrok.com/static/compiled/js/allerrors.js	ScriptElement	199 kB	2023-11-22	2023-12-13
Pretty URL cdn.ngrok.com/static/compiled/js/allerrors.js IP 18.158.249.75 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-22 22:09 Last Seen2023-12-13 09:05 Times Seen42 Hash 40563b67951e7c208a0a9698b2867337 991d669455eae256ddccfab7b484d6d95e29477a e3b8d1e9fec3bec3475310df9e77a246ca391fe2049b1d8e1b846094a4dc7454 Loading...

HTTP Transactions (8)

	URL	IP	Response	Size
	f1e7-124-110-228-162.jp.ngrok.io/sakura.zip	3.125.223.134		910 B
URL f1e7-124-110-228-162.jp.ngrok.io/sakura.zip IP 3.125.223.134:0 ASN #16509 AMAZON-02 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 910 B (910 bytes) Hash 7c7bcc23f700af64be7da406ef127e4e 7379a03729597ad25c8913608766eae5416ff5e0 c649d702ad7c13977e2456e2bca58a27e79bc65e3c668950f5130a6f6f08f5e7 HTTP Headers `GET /sakura.zip HTTP/1.1 Host: f1e7-124-110-228-162.jp.ngrok.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Connection: close Content-Type: text/html Ngrok-Error-Code: ERR_NGROK_3200 Ngrok-Trace-Id: 69eb3d0f2a205f10eeeefea658a49668 Referrer-Policy: no-referrer Date: Fri, 01 Dec 2023 18:20:02 GMT Content-Length: 910`

	f1e7-124-110-228-162.jp.ngrok.io/sakura.zip	3.124.142.205		87 B
URL f1e7-124-110-228-162.jp.ngrok.io/sakura.zip IP 3.124.142.205:0 ASN #16509 AMAZON-02 File type HTML document, ASCII text Size 87 B (87 bytes) Hash ccdfee8dfef56d590a51e4fef5eaaf79 2562ebfa75a6bc22b7c170c418b87e2b09f72a6c 422c26c5ff1ea97f5f33b003df1cfb263d953446926c3b5cfbe5f15b5d359544 HTTP Headers `GET /sakura.zip HTTP/1.1 Host: f1e7-124-110-228-162.jp.ngrok.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Location: https://f1e7-124-110-228-162.jp.ngrok.io/sakura.zip Ngrok-Trace-Id: 63b142a2b28eee3b4907b832075a80b6 Date: Fri, 01 Dec 2023 18:20:02 GMT Content-Length: 87`

	f1e7-124-110-228-162.jp.ngrok.io/sakura.zip	18.158.249.75		910 B
URL f1e7-124-110-228-162.jp.ngrok.io/sakura.zip IP 18.158.249.75:0 ASN #16509 AMAZON-02 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 910 B (910 bytes) Hash 7c7bcc23f700af64be7da406ef127e4e 7379a03729597ad25c8913608766eae5416ff5e0 c649d702ad7c13977e2456e2bca58a27e79bc65e3c668950f5130a6f6f08f5e7 HTTP Headers `GET /sakura.zip HTTP/1.1 Host: f1e7-124-110-228-162.jp.ngrok.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Connection: close Content-Type: text/html Ngrok-Error-Code: ERR_NGROK_3200 Ngrok-Trace-Id: 197bd513b71dac599128051046fd644e Referrer-Policy: no-referrer Date: Fri, 01 Dec 2023 18:20:02 GMT Content-Length: 910`

	cdn.ngrok.com/static/css/error.css	18.158.249.75		252 B
URL cdn.ngrok.com/static/css/error.css IP 18.158.249.75:0 ASN #16509 AMAZON-02 File type ASCII text Size 252 B (252 bytes) Hash c42c716b376ded94dd03e8e44bda5ee8 ba852d2180f54fcfa7d653013380bf646a936852 6869ce451f90fc72b2858532067907958da651c540d216315984c60fc2ad5fc4 HTTP Headers `GET /static/css/error.css HTTP/1.1 Host: cdn.ngrok.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Content-Encoding: gzip Content-Length: 252 Content-Type: text/css; charset=utf-8 Date: Fri, 01 Dec 2023 18:20:02 GMT Last-Modified: Tue, 21 Nov 2023 21:34:25 GMT Ngrok-Trace-Id: cd60a86fdebb144064158118354160b7, 777555f77bf4cab126e31baa53ac3830 Vary: Accept-Encoding`

	cdn.ngrok.com/static/js/error.js	18.158.249.75		459 B
URL cdn.ngrok.com/static/js/error.js IP 18.158.249.75:0 ASN #16509 AMAZON-02 File type ASCII text, with very long lines (860), with no line terminators Size 459 B (459 bytes) Hash 5c5d834212dd9658a5c60841108c341d 7406c215e471451606f466f7b962146d9c057204 df31e9909c53fcd8083d9476b265df58848ba92ce857be821d2766bd660992c6 HTTP Headers `GET /static/js/error.js HTTP/1.1 Host: cdn.ngrok.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Content-Encoding: gzip Content-Length: 459 Content-Type: text/javascript; charset=utf-8 Date: Fri, 01 Dec 2023 18:20:02 GMT Last-Modified: Tue, 21 Nov 2023 21:34:25 GMT Ngrok-Trace-Id: 78f635f1189c71190d89b5c0c2880420, d4763b86686cbdb702a08a323b596034 Vary: Accept-Encoding`

	cdn.ngrok.com/static/compiled/css/allerrors.css	18.158.249.75	200 OK	6.7 kB
URL GET HTTP/1.1 cdn.ngrok.com/static/compiled/css/allerrors.css IP 18.158.249.75:443 ASN #16509 AMAZON-02 Requested by https://f1e7-124-110-228-162.jp.ngrok.io/sakura.zip Certificate IssuerLet's Encrypt Subject.ngrok.com Fingerprint04:9D:BF:CD:9A:2D:9B:9B:3E:04:30:A7:B1:A8:7D:AC:D8:01:D2:22 ValidityTue, 17 Oct 2023 00:04:12 GMT - Mon, 15 Jan 2024 00:04:11 GMT File type ASCII text Size 6.7 kB (6678 bytes) Hash a7f82ceb0d131b31281afc750a42ef8c 295b944eeb07f5d5debe984341cac59504678820 cb2b0da76a703a8088f429132b2501c1ef76ef0bbbff0efb12e5b581ca501110 HTTP Headers `GET /static/compiled/css/allerrors.css HTTP/1.1 Host: cdn.ngrok.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: Cache-Control: public, max-age=31536000 Content-Encoding: gzip Content-Type: text/css; charset=utf-8 Date: Fri, 01 Dec 2023 18:20:03 GMT Last-Modified: Tue, 21 Nov 2023 21:34:25 GMT Ngrok-Trace-Id: 1751134aa4ad0e0f3dcc6caa30fef609, 89ca8efdcac093b1f0a0fb5ce9f90471 Vary: Accept-Encoding Transfer-Encoding: chunked`

	f1e7-124-110-228-162.jp.ngrok.io/favicon.ico	18.158.249.75		910 B
URL f1e7-124-110-228-162.jp.ngrok.io/favicon.ico IP 18.158.249.75:0 ASN #16509 AMAZON-02 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 910 B (910 bytes) Hash 7c7bcc23f700af64be7da406ef127e4e 7379a03729597ad25c8913608766eae5416ff5e0 c649d702ad7c13977e2456e2bca58a27e79bc65e3c668950f5130a6f6f08f5e7 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: f1e7-124-110-228-162.jp.ngrok.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Connection: close Content-Type: text/html Ngrok-Error-Code: ERR_NGROK_3200 Ngrok-Trace-Id: e44c0a94f3bb662bcafef75e74f4fc98 Referrer-Policy: no-referrer Date: Fri, 01 Dec 2023 18:20:03 GMT Content-Length: 910`

	cdn.ngrok.com/static/compiled/js/allerrors.js	18.158.249.75		65 kB
URL cdn.ngrok.com/static/compiled/js/allerrors.js IP 18.158.249.75:0 ASN #16509 AMAZON-02 File type ASCII text, with very long lines (63458) Size 65 kB (65004 bytes) Hash 40563b67951e7c208a0a9698b2867337 991d669455eae256ddccfab7b484d6d95e29477a e3b8d1e9fec3bec3475310df9e77a246ca391fe2049b1d8e1b846094a4dc7454 HTTP Headers `GET /static/compiled/js/allerrors.js HTTP/1.1 Host: cdn.ngrok.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Content-Encoding: gzip Content-Type: text/javascript; charset=utf-8 Date: Fri, 01 Dec 2023 18:20:03 GMT Last-Modified: Tue, 21 Nov 2023 21:34:25 GMT Ngrok-Trace-Id: 9d319c35b9624816850d05ee978ec0ab, f4e4cdbeb2917410357cb408d3625bbd Vary: Accept-Encoding Transfer-Encoding: chunked`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL