Report - static.czur.cc/czur/usermanual/et24pro/CZUR%20ET%20Series%20User%20Manual%20-English-20220211%20A.pdf.zip

Report Overview

Visited public
2023-09-26 18:21:18
Tags
URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20ET%20Series%20User%20Manual%20-English-20220211%20A.pdf.zip
Finishing URL
about:privatebrowsing
IP / ASN
47.246.44.208
#24429 Zhejiang Taobao Network Co.,Ltd
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.crlocsp.cn	175388	2019-11-13	2020-04-10 16:39:04	2023-09-26 05:09:06	329 B	871 B	101.198.193.5
static.czur.cc	unknown	2015-05-06	2018-10-04 10:20:37	2023-08-22 03:23:54	561 B	641 kB	47.246.44.208

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-26 18:21:01	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-09-26 18:21:01	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20ET%20Series%20User%20Manual%20-English-20220211%20A.pdf.zip
IP
47.246.44.208
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
640 kB (640050 bytes)
Hash
157d32513d5f384ae6d9062ed1facc88
382cdb52913db0d61feae08d7d1fe57c939726fa
8ebb926fdd78c9913107533e9e19ea5e5118b89d283d490bfd0e70812584386c

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	ocsp.crlocsp.cn/	101.198.193.5		471 B
URL ocsp.crlocsp.cn/ IP 101.198.193.5:0 ASN #55992 Beijing Qihu Technology Company Limited File type data Size 471 B (471 bytes) Hash 1e996fd4a61a264dfe082f1e1fadc2e5 a11b37f6bf5aff457b43f17573b69f6c519692d8 f1367b7b94aa316d9b7a95814c4442b4fcc57caf43d15308f95e6fec30d482d0 HTTP Headers `POST / HTTP/1.1 Host: ocsp.crlocsp.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.9.14 Date: Tue, 26 Sep 2023 18:16:44 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Content-Transfer-Encoding: Binary Last-modified: Mon, 25 Sep 2023 18:41:48 GMT Expires: Mon, 02 Oct 2023 18:41:47 GMT ETag: "A11B37F6BF5AFF457B43F17573B69F6C519692D8" cache-control: max-age=172800,public,no-transform,must-revalidate`

	static.czur.cc/czur/usermanual/et24pro/CZUR%20ET%20Series%20User%20Manual%20-English-20220211%20A.pdf.zip	47.246.44.208	200 OK	640 kB
URL User Request GET HTTP/2 static.czur.cc/czur/usermanual/et24pro/CZUR%20ET%20Series%20User%20Manual%20-English-20220211%20A.pdf.zip IP 47.246.44.208:443 ASN #24429 Zhejiang Taobao Network Co.,Ltd Certificate IssuerWoTrus CA Limited Subject.czur.cc Fingerprint6B:07:38:03:6F:6F:AB:94:91:9B:A9:94:D2:78:05:52:5B:83:4F:D9 ValidityTue, 20 Dec 2022 00:00:00 GMT - Tue, 16 Jan 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data Size 640 kB (640050 bytes) Hash 157d32513d5f384ae6d9062ed1facc88 382cdb52913db0d61feae08d7d1fe57c939726fa 8ebb926fdd78c9913107533e9e19ea5e5118b89d283d490bfd0e70812584386c HTTP Headers GET /czur/usermanual/et24pro/CZUR%20ET%20Series%20User%20Manual%20-English-20220211%20A.pdf.zip HTTP/1.1 Host: static.czur.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: Tengine content-type: application/zip content-length: 640050 date: Tue, 26 Sep 2023 18:20:24 GMT x-oss-request-id: 651320E88BA11E3131519930 vary: Origin x-oss-cdn-auth: success accept-ranges: bytes etag: "157D32513D5F384AE6D9062ED1FACC88" last-modified: Wed, 01 Jun 2022 02:11:53 GMT x-oss-object-type: Normal x-oss-storage-class: Standard x-oss-hash-crc64ecma: 14848362055201448902 content-md5: FX0yUT1fOErm2QYu0frMiA== x-oss-server-time: 64 ali-swift-global-savetime: 1695752424 via: cache13.l2fr1[541,563,200-0,H], cache35.l2fr1[565,0], cache4.se1[0,0,200-0,H], cache3.se1[1,0] age: 37 x-cache: HIT TCP_MEM_HIT dirn:4:273320376 x-swift-savetime: Tue, 26 Sep 2023 18:20:24 GMT x-swift-cachetime: 3600 timing-allow-origin: eagleid: 2ff62c9716957524617071793e X-Firefox-Spdy: h2