Report - jcku.com/upimg/soft/090822/1-0zr2091158.rar

Report Overview

Visited public
2023-08-20 16:49:37
Tags
URL
jcku.com/upimg/soft/090822/1-0zr2091158.rar
Finishing URL
pic.jcku.com//upimg/soft/090822/1-0zr2091158.rar
IP / ASN
39.107.73.72
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Title
pic.jcku.com//upimg/soft/090822/1-0zr2091158.rar

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jcku.com	unknown	2006-06-23	2012-07-15 04:53:33	2023-08-18 00:41:53	415 B	382 B	39.107.73.72
www.jcku.com	unknown	2006-06-23	2012-05-29 16:32:59	2023-08-18 00:41:53	419 B	383 B	39.107.73.72
pic.jcku.com	unknown	2006-06-23	2016-08-05 18:33:36	2023-08-19 15:31:11	792 B	1.9 kB	117.21.178.222

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-08-20 16:49:16	medium	117.21.178.215	Client IP	ET INFO TLS Handshake Failure
2023-08-20 16:49:17	medium	117.21.178.217	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	jcku.com/upimg/soft/090822/1-0zr2091158.rar	39.107.73.72	301 Moved Permanently	162 B
URL User Request GET HTTP/1.1 jcku.com/upimg/soft/090822/1-0zr2091158.rar IP 39.107.73.72:80 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 162 B (162 bytes) Hash 4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a HTTP Headers `GET /upimg/soft/090822/1-0zr2091158.rar HTTP/1.1 Host: jcku.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 20 Aug 2023 16:49:21 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: http://www.jcku.com/upimg/soft/090822/1-0zr2091158.rar`

	www.jcku.com/upimg/soft/090822/1-0zr2091158.rar	39.107.73.72	301 Moved Permanently	162 B
URL User Request GET HTTP/1.1 www.jcku.com/upimg/soft/090822/1-0zr2091158.rar IP 39.107.73.72:80 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 162 B (162 bytes) Hash 4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a HTTP Headers `GET /upimg/soft/090822/1-0zr2091158.rar HTTP/1.1 Host: www.jcku.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 20 Aug 2023 16:49:22 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: http://pic.jcku.com//upimg/soft/090822/1-0zr2091158.rar`

	pic.jcku.com//upimg/soft/090822/1-0zr2091158.rar	117.21.178.222		315 B
URL User Request GET pic.jcku.com//upimg/soft/090822/1-0zr2091158.rar IP 117.21.178.222:0 ASN #139201 Jiangxi Jiujiang IDC File type XML 1.0 document text\012- XML document, ASCII text Size 315 B (315 bytes) Hash 828710d5f5bd6eb8681813ca0115da2a c624556ab715772f7e0024d4aa184d29dbec3540 baf6f7b011d18130586f58b6447dec5e69377b62a413a580277fd633a03e2b7a HTTP Headers `GET //upimg/soft/090822/1-0zr2091158.rar HTTP/1.1 Host: pic.jcku.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 404 Not Found Server: Tengine Content-Type: application/xml Content-Length: 315 Connection: keep-alive Date: Sun, 20 Aug 2023 16:49:24 GMT x-oss-request-id: 64E24414000B1F363515ADA1 x-oss-cdn-auth: success x-oss-server-time: 12 x-oss-ec: 0041-00000113 Ali-Swift-Global-Savetime: 1692550164 Via: cache79.l2cn3055[59,58,404-1280,M], cache67.l2cn3055[59,0], kunlun2.cn5263[69,68,404-1280,M], kunlun5.cn5263[70,0] X-Cache: MISS TCP_MISS dirn:-2:-2 X-Swift-SaveTime: Sun, 20 Aug 2023 16:49:24 GMT X-Swift-CacheTime: 1 X-Swift-Error: orig response 4XX error Timing-Allow-Origin: * EagleId: 7515b28616925501640475924e

	pic.jcku.com/favicon.ico	117.21.178.216	404 Not Found	292 B
URL GET HTTP/1.1 pic.jcku.com/favicon.ico IP 117.21.178.216:80 ASN #139201 Jiangxi Jiujiang IDC Requested by http://pic.jcku.com//upimg/soft/090822/1-0zr2091158.rar File type XML 1.0 document text\012- XML document, ASCII text Size 292 B (292 bytes) Hash 00a63f03c2402c8473b87b28ce7d19cb 389fc1e8cb6b662190b105fd4800245b76fee7fc 3129b2952cb243cadde7cb2a19e282b62152a37cfe8ad364e1ce5dac047d2250 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: pic.jcku.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://pic.jcku.com//upimg/soft/090822/1-0zr2091158.rar Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 404 Not Found Server: Tengine Content-Type: application/xml Content-Length: 292 Connection: keep-alive Date: Sun, 20 Aug 2023 16:49:24 GMT x-oss-request-id: 64E24414AF0A5F3530569261 x-oss-cdn-auth: success x-oss-server-time: 12 x-oss-ec: 0041-00000113 Ali-Swift-Global-Savetime: 1692550164 Via: cache12.l2cn3055[60,59,404-1280,M], cache52.l2cn3055[61,0], kunlun4.cn5263[64,64,404-1280,M], kunlun4.cn5263[66,0] X-Cache: MISS TCP_MISS dirn:-2:-2 X-Swift-SaveTime: Sun, 20 Aug 2023 16:49:24 GMT X-Swift-CacheTime: 1 X-Swift-Error: orig response 4XX error Timing-Allow-Origin: * EagleId: 7515b28516925501645655070e