Report - files.catbox.moe/hyvbao.zip

Report Overview

URL

files.catbox.moe/hyvbao.zip
IP

107.160.74.131

ASN

#40676 AS40676
Submitted

2023-06-10T03:04:34Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

2
Threat Detection Systems

0

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
files.catbox.moe (1)	174913	2015-06-30 01:27:11	2023-06-09 08:13:20	485	553	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-10T03:04:16Z	medium	Client IP	107.160.74.131	ET INFO Observed File Sharing Service Download Domain (files .catbox .moe in TLS SNI)
2023-06-10T03:04:16Z	medium	Client IP	107.160.74.131	ETPRO INFO .moe Domain in TLS SNI

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Size
	files.catbox.moe/hyvbao.zip	0.0.0.0	0
Search urlquery URL files.catbox.moe/hyvbao.zip DOMAIN catbox.moe FQDN files.catbox.moe IP 0.0.0.0 Hash d41d8cd98f00b204e9800998ecf8427e External sources Mnemonic PDNS FQDN files.catbox.moe DOMAIN catbox.moe IP 0.0.0.0 VirusTotal HASH da39a3ee5e6b4b0d3255bfef95601890afd80709 FQDN files.catbox.moe DOMAIN catbox.moe IP 0.0.0.0 crt.sh FQDN files.catbox.moe DOMAIN catbox.moe Fingerprint 02:61:DC:8A:E5:85:7D:48:A9:EF:3E:F8:E4:34:F1:B4:9D:6C:89:F0 URL User Request GET files.catbox.moe/hyvbao.zip IP 0.0.0.0:0 ASN #0 Certificate IssuerLet's Encrypt Subjectcatbox.moe Fingerprint02:61:DC:8A:E5:85:7D:48:A9:EF:3E:F8:E4:34:F1:B4:9D:6C:89:F0 ValiditySat, 18 Mar 2023 02:13:58 GMT - Fri, 16 Jun 2023 02:13:57 GMT Magic Size 0 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /hyvbao.zip HTTP/1.1 Host: files.catbox.moe User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx/1.21.3 date: Sat, 10 Jun 2023 03:04:17 GMT content-type: application/zip content-length: 159145827 last-modified: Sat, 27 May 2023 23:55:22 GMT etag: "6472986a-97c5f63" x-content-type-options: nosniff content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self'; access-control-allow-origin: * access-control-allow-methods: GET, HEAD accept-ranges: bytes X-Firefox-Spdy: h2

files.catbox.moe/hyvbao.zip

0.0.0.0

URL User Request GET

files.catbox.moe/hyvbao.zip
IP

0.0.0.0:0
ASN

#0

Certificate

IssuerLet's Encrypt

Subjectcatbox.moe

Fingerprint02:61:DC:8A:E5:85:7D:48:A9:EF:3E:F8:E4:34:F1:B4:9D:6C:89:F0

ValiditySat, 18 Mar 2023 02:13:58 GMT - Fri, 16 Jun 2023 02:13:57 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /hyvbao.zip HTTP/1.1
Host: files.catbox.moe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
server: nginx/1.21.3
date: Sat, 10 Jun 2023 03:04:17 GMT
content-type: application/zip
content-length: 159145827
last-modified: Sat, 27 May 2023 23:55:22 GMT
etag: "6472986a-97c5f63"
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self';
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

Magic

Size

Hash

HTTP Headers