Report - funtechco.top/beer/Vxttheubu.mp4

Report Overview

Submitted URL
funtechco.top/beer/Vxttheubu.mp4
IP
159.253.120.145
ASN
#200019 Alexhost Srl
Submitted
2024-04-20 12:44:10
Access
public
Website Title
Vxttheubu.mp4
Final URL
funtechco.top/beer/Vxttheubu.mp4
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
funtechco.top	unknown	2024-02-02	2024-02-02	2024-04-17	757 B	225 kB	159.253.120.145

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-20 12:43:45	high	Client IP	159.253.120.145	URLhaus Known malware download URL detected (2814225)
2024-04-20 12:43:45	medium	Client IP	159.253.120.145	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	funtechco.top	Sinkholed
2024-04-20	medium	funtechco.top	Sinkholed

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	funtechco.top	Sinkholed
2024-04-20	medium	funtechco.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

funtechco.top/favicon.ico

159.253.120.145

404 Not Found

275 B

URL GET HTTP/1.1
funtechco.top/favicon.ico
IP
159.253.120.145:80
ASN
#200019 Alexhost Srl

Requested by
http://funtechco.top/beer/Vxttheubu.mp4

File type
HTML document, ASCII text
Size
275 B (275 bytes)
Hash
6c6182094c262d27618c316d3926d732
6b051d62898d4ca39c163c686463a9e7414cd35c
aeb643265e26a8527b73d62172732126301c975f1a79b8b8b80ddc5a7128b444

Detections

Analyzer	Verdict	Alert
mnemonic secure dns	malicious	Sinkholed
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: funtechco.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://funtechco.top/beer/Vxttheubu.mp4
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 20 Apr 2024 12:43:46 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 275
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

funtechco.top/beer/Vxttheubu.mp4

159.253.120.145

200 OK

224 kB

URL User Request GET HTTP/1.1
funtechco.top/beer/Vxttheubu.mp4
IP
159.253.120.145:80
ASN
#200019 Alexhost Srl

File type
data
Size
224 kB (223800 bytes)
Hash
00ee7bb9bef33906eb446d840570ba81
0b75d9214d72a1d35e643a3eb6f5f6c1d061a037
d4a6c254a22560e73482c51400498b3d22a4a3e0e2dcb5aa5b970398865fc018

Detections

Analyzer	Verdict	Alert
mnemonic secure dns	malicious	Sinkholed
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	URLhaus Known malware download URL detected (2814225)
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET /beer/Vxttheubu.mp4 HTTP/1.1
Host: funtechco.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 12:43:45 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Mon, 08 Apr 2024 16:39:26 GMT
ETag: "2b0208-6159872d46b80"
Accept-Ranges: bytes
Content-Length: 2818568
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: video/mp4

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers