Report - static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Spanish-20220211%20A.pdf.zip

Report Overview

Visited public
2023-09-26 18:21:17
Tags
URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Spanish-20220211%20A.pdf.zip
Finishing URL
about:privatebrowsing
IP / ASN
47.246.44.208
#24429 Zhejiang Taobao Network Co.,Ltd
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.crlocsp.cn	175388	2019-11-13	2020-04-10 16:39:04	2023-09-26 05:09:06	329 B	871 B	101.198.193.5
static.czur.cc	unknown	2015-05-06	2018-10-04 10:20:37	2023-08-22 03:23:54	564 B	693 kB	47.246.44.208

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-26 18:21:00	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-09-26 18:21:00	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Spanish-20220211%20A.pdf.zip
IP
47.246.44.208
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
692 kB (692403 bytes)
Hash
a310ed6d47005ddf0bed386fa9c3071c
47aedfc46fb3163cf670d52e8023959e3ac0d570
1cc0f9f3b6326780e710e20c91dd294b4e54ac58343206064d48591bd79e072f

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	ocsp.crlocsp.cn/	101.198.193.5		471 B
URL ocsp.crlocsp.cn/ IP 101.198.193.5:0 ASN #55992 Beijing Qihu Technology Company Limited File type data Size 471 B (471 bytes) Hash 1e996fd4a61a264dfe082f1e1fadc2e5 a11b37f6bf5aff457b43f17573b69f6c519692d8 f1367b7b94aa316d9b7a95814c4442b4fcc57caf43d15308f95e6fec30d482d0 HTTP Headers `POST / HTTP/1.1 Host: ocsp.crlocsp.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.9.14 Date: Tue, 26 Sep 2023 18:12:44 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Content-Transfer-Encoding: Binary Last-modified: Mon, 25 Sep 2023 18:41:48 GMT Expires: Mon, 02 Oct 2023 18:41:47 GMT ETag: "A11B37F6BF5AFF457B43F17573B69F6C519692D8" cache-control: max-age=172800,public,no-transform,must-revalidate`

	static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Spanish-20220211%20A.pdf.zip	47.246.44.208	200 OK	692 kB
URL User Request GET HTTP/2 static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Spanish-20220211%20A.pdf.zip IP 47.246.44.208:443 ASN #24429 Zhejiang Taobao Network Co.,Ltd Certificate IssuerWoTrus CA Limited Subject.czur.cc Fingerprint6B:07:38:03:6F:6F:AB:94:91:9B:A9:94:D2:78:05:52:5B:83:4F:D9 ValidityTue, 20 Dec 2022 00:00:00 GMT - Tue, 16 Jan 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data Size 692 kB (692403 bytes) Hash a310ed6d47005ddf0bed386fa9c3071c 47aedfc46fb3163cf670d52e8023959e3ac0d570 1cc0f9f3b6326780e710e20c91dd294b4e54ac58343206064d48591bd79e072f HTTP Headers GET /czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Spanish-20220211%20A.pdf.zip HTTP/1.1 Host: static.czur.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: Tengine content-type: application/zip content-length: 692403 date: Tue, 26 Sep 2023 18:21:01 GMT x-oss-request-id: 6513210D8A32BA3631D77A49 vary: Origin x-oss-cdn-auth: success accept-ranges: bytes etag: "A310ED6D47005DDF0BED386FA9C3071C" last-modified: Wed, 01 Jun 2022 02:12:00 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 11767107630578303534 x-oss-storage-class: Standard content-md5: oxDtbUcAXd8L7ThvqcMHHA== x-oss-server-time: 14 ali-swift-global-savetime: 1695752461 via: cache5.l2fr1[549,549,200-0,M], cache27.l2fr1[551,0], cache1.se1[624,624,200-0,M], cache5.se1[626,0] age: 0 x-cache: MISS TCP_MISS dirn:-2:-2 x-swift-savetime: Tue, 26 Sep 2023 18:21:01 GMT x-swift-cachetime: 3600 timing-allow-origin: eagleid: 2ff62c9916957524607526806e X-Firefox-Spdy: h2