Report - static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-French-20220211%20A.pdf.zip

Report Overview

Visited public
2023-09-26 18:20:53
Tags
URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-French-20220211%20A.pdf.zip
Finishing URL
about:privatebrowsing
IP / ASN
47.246.44.208
#24429 Zhejiang Taobao Network Co.,Ltd
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.crlocsp.cn	175388	2019-11-13	2020-04-10 16:39:04	2023-09-26 05:09:06	329 B	871 B	101.198.193.5
static.czur.cc	unknown	2015-05-06	2018-10-04 10:20:37	2023-08-22 03:23:54	563 B	656 kB	47.246.44.208

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-26 18:20:35	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-09-26 18:20:35	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-French-20220211%20A.pdf.zip
IP
47.246.44.208
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
655 kB (655096 bytes)
Hash
6b9e6f3ab644a20d1d729770b8b769f6
b9ee6946ca5f97ee381fe865f781d65d626b8aa9
0051220add6a7b3ef65ba7b3be1994960eb18da27cddba8f993a387d35b40407

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	ocsp.crlocsp.cn/	101.198.193.5		471 B
URL ocsp.crlocsp.cn/ IP 101.198.193.5:0 ASN #55992 Beijing Qihu Technology Company Limited File type data Size 471 B (471 bytes) Hash 1e996fd4a61a264dfe082f1e1fadc2e5 a11b37f6bf5aff457b43f17573b69f6c519692d8 f1367b7b94aa316d9b7a95814c4442b4fcc57caf43d15308f95e6fec30d482d0 HTTP Headers `POST / HTTP/1.1 Host: ocsp.crlocsp.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.9.14 Date: Tue, 26 Sep 2023 18:12:21 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Content-Transfer-Encoding: Binary Last-modified: Mon, 25 Sep 2023 18:41:48 GMT Expires: Mon, 02 Oct 2023 18:41:47 GMT ETag: "A11B37F6BF5AFF457B43F17573B69F6C519692D8" cache-control: max-age=172800,public,no-transform,must-revalidate`

	static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-French-20220211%20A.pdf.zip	47.246.44.208	200 OK	655 kB
URL User Request GET HTTP/2 static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-French-20220211%20A.pdf.zip IP 47.246.44.208:443 ASN #24429 Zhejiang Taobao Network Co.,Ltd Certificate IssuerWoTrus CA Limited Subject.czur.cc Fingerprint6B:07:38:03:6F:6F:AB:94:91:9B:A9:94:D2:78:05:52:5B:83:4F:D9 ValidityTue, 20 Dec 2022 00:00:00 GMT - Tue, 16 Jan 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data Size 655 kB (655096 bytes) Hash 6b9e6f3ab644a20d1d729770b8b769f6 b9ee6946ca5f97ee381fe865f781d65d626b8aa9 0051220add6a7b3ef65ba7b3be1994960eb18da27cddba8f993a387d35b40407 HTTP Headers GET /czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-French-20220211%20A.pdf.zip HTTP/1.1 Host: static.czur.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: Tengine content-type: application/zip content-length: 655096 date: Tue, 26 Sep 2023 18:20:25 GMT x-oss-request-id: 651320E99979C7343049C646 vary: Origin x-oss-cdn-auth: success accept-ranges: bytes etag: "6B9E6F3AB644A20D1D729770B8B769F6" last-modified: Wed, 01 Jun 2022 02:12:30 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 14875334980350653550 x-oss-storage-class: Standard content-md5: a55vOrZEog0dcpdwuLdp9g== x-oss-server-time: 9 ali-swift-global-savetime: 1695752425 via: cache35.l2fr1[616,615,200-0,M], cache36.l2fr1[617,0], cache5.se1[0,0,200-0,H], cache2.se1[2,0] age: 13 x-cache: HIT TCP_MEM_HIT dirn:4:187543423 x-swift-savetime: Tue, 26 Sep 2023 18:20:26 GMT x-swift-cachetime: 3600 timing-allow-origin: eagleid: 2ff62c9616957524380855563e X-Firefox-Spdy: h2