Report - g4u.to/25460-palworld-early-access-multi11-p2p/download/nzb

Report Overview

Visited public
2024-01-21 18:28:23
Tags
URL
g4u.to/25460-palworld-early-access-multi11-p2p/download/nzb
Finishing URL
about:privatebrowsing
IP / ASN
77.73.67.124
#43317 FNK LLC
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

3

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
g4u.to	unknown	unknown	2019-03-28 14:04:46	2024-01-21 18:25:55	1.1 kB	507 kB	77.73.67.124

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-01-21 18:27:58	medium	Client IP	Internal IP	ET DNS Query for .to TLD
2024-01-21 18:27:58	medium	Client IP	Internal IP	ET DNS Query for .to TLD
2024-01-21 18:27:58	medium	Client IP	Internal IP	ET DNS Query for .to TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
g4u.to/tmp/25460-dd389dce0a5c3ae1de2e2c43c4396e297fb358e37b24471cf0d31f03324287cf.nzb.7z
IP
77.73.67.124
ASN
#43317 FNK LLC

File type
7-zip archive data, version 0.4
Size
506 kB (505810 bytes)
Hash
59fdf157c1a4b3ae38e0d0ddf762d8c4
166dadc9acca5e3fbd92a45ff4199cc0a2823e64
6bba332ee3003f6544648d9b02dbb7bfa7342d7dfc7c82ea1bc53a971a686ece

Archive (1)

Modified	Filename	Size	Md5	File type
2024-01-19 22:45	Palworld.EARLY.ACCESS.MULTi11-P2P.nzb	2.5 MB	c801fadefd7823e9e67eb569b3477520	XML 1.0 document, ASCII text, with CRLF line terminators

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	g4u.to/25460-palworld-early-access-multi11-p2p/download/nzb	77.73.67.124	302 Found	20 B
URL User Request GET HTTP/1.1 g4u.to/25460-palworld-early-access-multi11-p2p/download/nzb IP 77.73.67.124:443 ASN #43317 FNK LLC Certificate IssuerLet's Encrypt Subjectg4u.to Fingerprint7D:2F:99:97:21:72:FB:62:08:A2:B8:84:BB:B5:FF:1A:F7:2D:0E:36 ValidityFri, 22 Dec 2023 08:53:56 GMT - Thu, 21 Mar 2024 08:53:55 GMT File type gzip compressed data, from Unix Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `GET /25460-palworld-early-access-multi11-p2p/download/nzb HTTP/1.1 Host: g4u.to User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Date: Sun, 21 Jan 2024 18:27:57 GMT Server: Apache/2.4.38 (Debian) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Encoding: gzip Vary: Accept-Encoding Set-Cookie: PHPSESSID=at4hi024e2o8dbcrdct0ostan0; path=/ Location: /tmp/25460-dd389dce0a5c3ae1de2e2c43c4396e297fb358e37b24471cf0d31f03324287cf.nzb.7z Keep-Alive: timeout=5, max=500 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

	g4u.to/tmp/25460-dd389dce0a5c3ae1de2e2c43c4396e297fb358e37b24471cf0d31f03324287cf.nzb.7z	77.73.67.124	200 OK	506 kB
URL User Request GET HTTP/1.1 g4u.to/tmp/25460-dd389dce0a5c3ae1de2e2c43c4396e297fb358e37b24471cf0d31f03324287cf.nzb.7z IP 77.73.67.124:443 ASN #43317 FNK LLC Certificate IssuerLet's Encrypt Subjectg4u.to Fingerprint7D:2F:99:97:21:72:FB:62:08:A2:B8:84:BB:B5:FF:1A:F7:2D:0E:36 ValidityFri, 22 Dec 2023 08:53:56 GMT - Thu, 21 Mar 2024 08:53:55 GMT File type 7-zip archive data, version 0.4 Size 506 kB (505810 bytes) Hash 59fdf157c1a4b3ae38e0d0ddf762d8c4 166dadc9acca5e3fbd92a45ff4199cc0a2823e64 6bba332ee3003f6544648d9b02dbb7bfa7342d7dfc7c82ea1bc53a971a686ece HTTP Headers GET /tmp/25460-dd389dce0a5c3ae1de2e2c43c4396e297fb358e37b24471cf0d31f03324287cf.nzb.7z HTTP/1.1 Host: g4u.to User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: PHPSESSID=at4hi024e2o8dbcrdct0ostan0 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Sun, 21 Jan 2024 18:27:57 GMT Server: Apache/2.4.38 (Debian) Last-Modified: Sun, 21 Jan 2024 18:27:57 GMT ETag: W/"7b7d2-60f78df545544" Accept-Ranges: bytes Content-Length: 505810 Keep-Alive: timeout=5, max=499 Connection: Keep-Alive Content-Type: application/x-7z-compressed`