Report - litter.catbox.moe/foobdt.zip

Report Overview

Visited public
2024-08-28 15:54:45
Tags
URL
litter.catbox.moe/foobdt.zip
Finishing URL
about:privatebrowsing
IP / ASN
108.181.20.36
#40676 AS40676
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-08-27 18:12:09	654 B	1.8 kB	23.36.76.226
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-08-27 18:12:12	981 B	2.7 kB	23.33.119.57
litter.catbox.moe	unknown	2015-04-06	2020-08-09 13:41:18	2024-07-19 22:25:56	484 B	565 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-08-28 15:54:20	medium	Client IP	108.181.20.36	ET INFO Observed Temporary File Sharing Service Domain (litter .catbox .moe in TLS SNI)
2024-08-28 15:54:20	medium	Client IP	108.181.20.36	ETPRO INFO .moe Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	r11.o.lencr.org/	23.36.76.226		504 B
URL r11.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 306aab38a2968d69d5d5dbc017f4277a b32d9d7854e04d53418b56571cafb87065e3556f 2e6610a974cefd8ed9bab356e7e166e41b4e4955f4da39f5d400cdeeb286f88c HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "2E6610A974CEFD8ED9BAB356E7E166E41B4E4955F4DA39F5D400CDEEB286F88C" Last-Modified: Mon, 26 Aug 2024 02:37:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13404 Expires: Wed, 28 Aug 2024 19:37:43 GMT Date: Wed, 28 Aug 2024 15:54:19 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL r10.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 35888f142e8c995a2a992b24009a2cee 8315b1d92f868af492e04ea1d0846ee9fc0328e7 5a2f5a87f6408bbc11020231759db8eeb24c28c0890da8f3ee2565d87b0e1e4c HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5A2F5A87F6408BBC11020231759DB8EEB24C28C0890DA8F3EE2565D87B0E1E4C" Last-Modified: Mon, 26 Aug 2024 02:36:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8581 Expires: Wed, 28 Aug 2024 18:17:20 GMT Date: Wed, 28 Aug 2024 15:54:19 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL r10.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 3c415be21fd13680f4c76a79399af82e cc6afc7d2b2fd8451b793b01435087409e677f4c 5385c52f0502864e92da08547aefa7ce05ec21ff081c7413ce54723f3ab73303 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5385C52F0502864E92DA08547AEFA7CE05EC21FF081C7413CE54723F3AB73303" Last-Modified: Mon, 26 Aug 2024 02:37:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11768 Expires: Wed, 28 Aug 2024 19:10:27 GMT Date: Wed, 28 Aug 2024 15:54:19 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.57		504 B
URL r10.o.lencr.org/ IP 23.33.119.57:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash b0c68ac7e44a67b94268231c5f22ae25 a0c078abb7617e9b0ac402a24969ea22e024cf18 671ca341e73bd97fda1d098560ab338b45fbff67a5d85b47685273850d55e587 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "671CA341E73BD97FDA1D098560AB338B45FBFF67A5D85B47685273850D55E587" Last-Modified: Mon, 26 Aug 2024 02:33:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2172 Expires: Wed, 28 Aug 2024 16:30:32 GMT Date: Wed, 28 Aug 2024 15:54:20 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.226		504 B
URL r11.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 0192c7488a56c1b9f50decbbc7c6e924 7ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec 571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167" Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12311 Expires: Wed, 28 Aug 2024 19:19:32 GMT Date: Wed, 28 Aug 2024 15:54:21 GMT Connection: keep-alive`

	litter.catbox.moe/foobdt.zip	0.0.0.0		0 B
URL User Request GET litter.catbox.moe/foobdt.zip IP 0.0.0.0:0 ASN #0 Certificate IssuerLet's Encrypt Subjectlitter.catbox.moe FingerprintDA:5B:2E:B3:C3:DF:D8:7C:3D:68:FA:66:CF:84:F0:62:2C:AA:5C:04 ValidityTue, 27 Aug 2024 08:11:41 GMT - Mon, 25 Nov 2024 08:11:40 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /foobdt.zip HTTP/1.1 Host: litter.catbox.moe User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx/1.18.0 (Ubuntu) date: Wed, 28 Aug 2024 15:54:20 GMT content-type: application/zip content-length: 287961109 last-modified: Wed, 28 Aug 2024 15:49:25 GMT etag: "66cf4705-1129f015" x-content-type-options: nosniff content-security-policy: default-src 'self' https://litter.catbox.moe; style-src https://litter.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self'; access-control-allow-origin: * access-control-allow-methods: GET, HEAD accept-ranges: bytes X-Firefox-Spdy: h2