Report - www.raccoon.zip

Report Overview

Submitted URL
www.raccoon.zip
IP
23.21.234.173
ASN
#14618 AMAZON-AES
Submitted
2024-04-25 13:35:46
Access
public
Website Title
vers and lukas
Final URL
raccoon.zip/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
raccoon.zip	unknown	unknown	No data	No data	3.6 kB	3.3 MB	23.21.234.173
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-25	1.6 kB	143 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	481 B	309 kB	142.250.74.106
www.raccoon.zip	unknown	unknown	No data	No data	470 B	475 B	23.21.234.173

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 13:35:16	low	Client IP	23.21.234.173	ET INFO HTTP Request to a *.zip Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	raccoon.zip/	25 kB	2024-04-25	2024-04-25
Pretty URL raccoon.zip/ IP 23.21.234.173 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 15:35:52 Last Seen2024-04-25 15:35:52 Times Seen1 Hash 46f483d57c041e3b23e653fac0c8ab21 29fd557e5326621feadfcaef26312dd9177d8a23 db4e5ab4e6af49d420e066369fe5c0053818bf6e27f9e2114a4e53c4aced806b Loading...

HTTP Transactions (13)

URL IP Response Size

www.raccoon.zip/

23.21.234.173

301 Moved Permanently

227 B

URL User Request GET HTTP/1.1
www.raccoon.zip/
IP
23.21.234.173:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type
HTML document, ASCII text
Size
227 B (227 bytes)
Hash
b5fb8b5830a15955a0def9b596af5b1a
028237137c094daddeaa310aba91645f15ef60a8
4230a128a3d78e299dc8fa5ef54ac188dd1717395918d177fa57534b99097323

HTTP Headers

GET / HTTP/1.1
Host: www.raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
date: Thu, 25 Apr 2024 13:35:16 GMT
server: Apache
location: http://raccoon.zip/
cache-control: max-age=0
expires: Thu, 25 Apr 2024 13:35:16 GMT
content-length: 227
content-type: text/html; charset=iso-8859-1

raccoon.zip/

23.21.234.173

200 OK

0 B

URL User Request GET HTTP/1.1
raccoon.zip/
IP
23.21.234.173:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET / HTTP/1.1
Host: raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://raccoon.zip/

raccoon.zip/

23.21.157.88

200 OK

24 kB

URL User Request GET HTTP/1.1
raccoon.zip/
IP
23.21.157.88:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type
HTML document, ASCII text, with very long lines (65536), with no line terminators
Size
24 kB (23809 bytes)
Hash
07bddea0e149fec8f68907ef1d62a514
b37dda813416da78d5561a7917fb385fd5917a77
d5f50d59d3d383a2da03051209d87b5c5b9073bdeadc2620aeb287ea5bacc7df

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET / HTTP/1.1
Host: raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 13:35:17 GMT
server: Apache
last-modified: Thu, 07 Dec 2023 03:05:50 GMT
etag: "2726d-60be2beb596b0-gzip"
accept-ranges: bytes
cache-control: max-age=0
expires: Thu, 25 Apr 2024 13:35:17 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 23809
content-type: text/html

fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2

142.250.74.131

200 OK

47 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://raccoon.zip/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Size
47 kB (46704 bytes)
Hash
30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42

HTTP Headers

GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://raccoon.zip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 00:18:14 GMT
expires: Wed, 23 Apr 2025 00:18:14 GMT
cache-control: public, max-age=31536000
age: 220623
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2

142.250.74.131

200 OK

47 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://raccoon.zip/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Size
47 kB (46704 bytes)
Hash
30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42

HTTP Headers

GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://raccoon.zip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 00:18:14 GMT
expires: Wed, 23 Apr 2025 00:18:14 GMT
cache-control: public, max-age=31536000
age: 220623
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2

142.250.74.131

200 OK

47 kB

URL GET HTTP/2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://raccoon.zip/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Size
47 kB (46704 bytes)
Hash
30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42

HTTP Headers

GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://raccoon.zip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 00:18:14 GMT
expires: Wed, 23 Apr 2025 00:18:14 GMT
cache-control: public, max-age=31536000
age: 220623
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

raccoon.zip/assets/images/image01.jpg?v=f37e775c

23.21.157.88

200 OK

48 kB

URL GET HTTP/1.1
raccoon.zip/assets/images/image01.jpg?v=f37e775c
IP
23.21.157.88:443
ASN
#14618 AMAZON-AES

Requested by
https://raccoon.zip/
Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Size
48 kB (48076 bytes)
Hash
e359f8532ec85c20c8b13f71097e0852
9f62d489b1450d1d92c398de3878e53666fdeae8
cfe01a0e36a6115d88b47ae62771ef063c229b6f29066a4c046fe57a99a6894e

HTTP Headers

GET /assets/images/image01.jpg?v=f37e775c HTTP/1.1
Host: raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://raccoon.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 13:35:17 GMT
server: Apache
last-modified: Thu, 05 Oct 2023 02:05:31 GMT
etag: "bbcc-606ee8efcb488"
accept-ranges: bytes
content-length: 48076
cache-control: max-age=604800
expires: Thu, 02 May 2024 13:35:17 GMT
content-type: image/jpeg

raccoon.zip/assets/videos/container01.mp4.jpg?v=f37e775c

23.21.157.88

200 OK

297 kB

URL GET HTTP/1.1
raccoon.zip/assets/videos/container01.mp4.jpg?v=f37e775c
IP
23.21.157.88:443
ASN
#14618 AMAZON-AES

Requested by
https://raccoon.zip/
Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3
Size
297 kB (296588 bytes)
Hash
5ebc36d5c949cb281b99db67dad9cb76
6021605c0b424fcce0578d4019f919dbb3d72a44
01a697e3896eed6651ce43879518085a9a2745b3fb89fc6868e1bee3f30a6987

HTTP Headers

GET /assets/videos/container01.mp4.jpg?v=f37e775c HTTP/1.1
Host: raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://raccoon.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 13:35:17 GMT
server: Apache
last-modified: Thu, 12 Oct 2023 12:23:15 GMT
etag: "4868c-60784011b22a8"
accept-ranges: bytes
content-length: 296588
cache-control: max-age=604800
expires: Thu, 02 May 2024 13:35:17 GMT
content-type: image/jpeg

fonts.googleapis.com/css2?display=swap&family=Inter:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700

142.250.74.106

200 OK

309 kB

URL GET HTTP/2
fonts.googleapis.com/css2?display=swap&family=Inter:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://raccoon.zip/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
309 kB (308617 bytes)
Hash
899a9afeb0707a2602de9738cc4a6400
1f24068289126a9a55784dc0463d1ae32afc3a9c
75778b1890bb8215c173b26d121761a3b5d00016ec7b99ab007fff07381e83e2

HTTP Headers

GET /css2?display=swap&family=Inter:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://raccoon.zip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 13:35:17 GMT
date: Thu, 25 Apr 2024 13:35:17 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

raccoon.zip/assets/images/favicon.png?v=f37e775c

23.21.234.173

200 OK

11 kB

URL GET HTTP/1.1
raccoon.zip/assets/images/favicon.png?v=f37e775c
IP
23.21.234.173:443
ASN
#14618 AMAZON-AES

Requested by
https://raccoon.zip/
Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Size
11 kB (11128 bytes)
Hash
273e7b0d24cc75402018fa58d2a1fffe
b5110e4d33754abf615c3a290ba426ea21211c0a
8b7616c3ca678dd72df1fa49134f9d1fa733b38ce80d4121e5aae5b24784fedf

HTTP Headers

GET /assets/images/favicon.png?v=f37e775c HTTP/1.1
Host: raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://raccoon.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 13:35:18 GMT
server: Apache
last-modified: Sun, 14 May 2023 05:35:16 GMT
etag: "2b78-5fba0b3fae240"
accept-ranges: bytes
content-length: 11128
cache-control: max-age=604800
expires: Thu, 02 May 2024 13:35:18 GMT
content-type: image/png

raccoon.zip/assets/images/apple-touch-icon.png?v=f37e775c

23.21.157.88

200 OK

120 kB

URL GET HTTP/1.1
raccoon.zip/assets/images/apple-touch-icon.png?v=f37e775c
IP
23.21.157.88:443
ASN
#14618 AMAZON-AES

Requested by
https://raccoon.zip/
Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type
PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced
Size
120 kB (120331 bytes)
Hash
d18ab0249035dbecff78f0651c3605df
5d627c774c0e3ddf4a9ddf09ae106f73b02c44c0
65838c30b9a86998787a41c987db7e0f82d26d28f9d02dc948be0f5dd1074884

HTTP Headers

GET /assets/images/apple-touch-icon.png?v=f37e775c HTTP/1.1
Host: raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://raccoon.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 13:35:18 GMT
server: Apache
last-modified: Sun, 14 May 2023 05:35:16 GMT
etag: "1d60b-5fba0b3fb2c78"
accept-ranges: bytes
content-length: 120331
cache-control: max-age=604800
expires: Thu, 02 May 2024 13:35:18 GMT
content-type: image/png

raccoon.zip/assets/videos/container01.mp4?v=f37e775c

23.21.234.173

206 Partial Content

2.5 MB

URL GET HTTP/1.1
raccoon.zip/assets/videos/container01.mp4?v=f37e775c
IP
23.21.234.173:443
ASN
#14618 AMAZON-AES

Requested by
https://raccoon.zip/
Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type
ISO Media, MP4 v2 [ISO 14496-14]
Size
2.5 MB (2486300 bytes)
Hash
c7e0a672622135018d73ecce9d586a30
e39dd50e94cfca4af1c961061b3ced00a776d723
83dc3e655f4cec0df64f7163b744ba0ccc384c21c1cfe301843be498773d29b2

HTTP Headers

GET /assets/videos/container01.mp4?v=f37e775c HTTP/1.1
Host: raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://raccoon.zip/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 206 Partial Content
date: Thu, 25 Apr 2024 13:35:17 GMT
server: Apache
last-modified: Thu, 12 Oct 2023 12:23:15 GMT
etag: "25f01c-60784011a4fb8"
accept-ranges: bytes
content-length: 2486300
cache-control: max-age=604800
expires: Thu, 02 May 2024 13:35:17 GMT
content-range: bytes 0-2486299/2486300
content-type: video/mp4

raccoon.zip/assets/images/bg.jpg?v=f37e775c

23.21.234.173

200 OK

308 kB

URL GET HTTP/1.1
raccoon.zip/assets/images/bg.jpg?v=f37e775c
IP
23.21.234.173:443
ASN
#14618 AMAZON-AES

Requested by
https://raccoon.zip/
Certificate
IssuerLet's Encrypt
Subjectraccoon.zip
Fingerprint73:43:EE:FF:6A:EE:E6:8E:F4:E6:8D:60:22:40:54:6C:F1:B1:B6:27
ValidityMon, 22 Apr 2024 16:17:34 GMT - Sun, 21 Jul 2024 16:17:33 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1920x1281, components 3
Size
308 kB (307935 bytes)
Hash
24d4b22fc1e4cc83d784a0e5ef60f926
1a56ea5cdeff33eb553e0918d71b085fc022d33e
a041d11cb77903bf46688ee37ef0574cbdfe0f7052ca36b74858f74df9995756

HTTP Headers

GET /assets/images/bg.jpg?v=f37e775c HTTP/1.1
Host: raccoon.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://raccoon.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 13:35:17 GMT
server: Apache
last-modified: Thu, 05 Oct 2023 02:05:31 GMT
etag: "4b2df-606ee8efc6a50"
accept-ranges: bytes
content-length: 307935
cache-control: max-age=604800
expires: Thu, 02 May 2024 13:35:17 GMT
content-type: image/jpeg

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP