Report - static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Japanese-20220211%20A.pdf.zip

Report Overview

Visited public
2023-09-26 18:20:42
Tags
URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Japanese-20220211%20A.pdf.zip
Finishing URL
about:privatebrowsing
IP / ASN
47.246.44.208
#24429 Zhejiang Taobao Network Co.,Ltd
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.crlocsp.cn	175388	2019-11-13	2020-04-10 16:39:04	2023-09-26 05:09:06	329 B	871 B	101.198.193.5
static.czur.cc	unknown	2015-05-06	2018-10-04 10:20:37	2023-08-22 03:23:54	565 B	804 kB	47.246.44.208

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-26 18:20:24	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-09-26 18:20:24	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Japanese-20220211%20A.pdf.zip
IP
47.246.44.208
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
803 kB (803355 bytes)
Hash
f65047f1e607ea17269c6527d4cda7aa
df7936fcc5816f244474b2e733381af3d6c09a2c
808c0e498b8ed5374be2bb0d651226ea115c671ae5a048784c365e66791b724a

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	ocsp.crlocsp.cn/	101.198.193.5		471 B
URL ocsp.crlocsp.cn/ IP 101.198.193.5:0 ASN #55992 Beijing Qihu Technology Company Limited File type data Size 471 B (471 bytes) Hash 1e996fd4a61a264dfe082f1e1fadc2e5 a11b37f6bf5aff457b43f17573b69f6c519692d8 f1367b7b94aa316d9b7a95814c4442b4fcc57caf43d15308f95e6fec30d482d0 HTTP Headers `POST / HTTP/1.1 Host: ocsp.crlocsp.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.9.14 Date: Tue, 26 Sep 2023 18:14:38 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Content-Transfer-Encoding: Binary Last-modified: Mon, 25 Sep 2023 18:41:48 GMT Expires: Mon, 02 Oct 2023 18:41:47 GMT ETag: "A11B37F6BF5AFF457B43F17573B69F6C519692D8" cache-control: max-age=172800,public,no-transform,must-revalidate`

	static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Japanese-20220211%20A.pdf.zip	47.246.44.208	200 OK	803 kB
URL User Request GET HTTP/2 static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Japanese-20220211%20A.pdf.zip IP 47.246.44.208:443 ASN #24429 Zhejiang Taobao Network Co.,Ltd Certificate IssuerWoTrus CA Limited Subject.czur.cc Fingerprint6B:07:38:03:6F:6F:AB:94:91:9B:A9:94:D2:78:05:52:5B:83:4F:D9 ValidityTue, 20 Dec 2022 00:00:00 GMT - Tue, 16 Jan 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data Size 803 kB (803355 bytes) Hash f65047f1e607ea17269c6527d4cda7aa df7936fcc5816f244474b2e733381af3d6c09a2c 808c0e498b8ed5374be2bb0d651226ea115c671ae5a048784c365e66791b724a HTTP Headers GET /czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Japanese-20220211%20A.pdf.zip HTTP/1.1 Host: static.czur.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: Tengine content-type: application/zip content-length: 803355 date: Tue, 26 Sep 2023 18:20:25 GMT x-oss-request-id: 651320E9D31A233032A92772 vary: Origin x-oss-cdn-auth: success accept-ranges: bytes etag: "F65047F1E607EA17269C6527D4CDA7AA" last-modified: Wed, 01 Jun 2022 02:12:18 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 13051340246154962774 x-oss-storage-class: Standard content-md5: 9lBH8eYH6hcmnGUn1M2nqg== x-oss-server-time: 8 ali-swift-global-savetime: 1695752425 via: cache15.l2fr1[535,535,200-0,M], cache1.l2fr1[536,0], cache4.se1[574,573,200-0,M], cache7.se1[576,0] age: 0 x-cache: MISS TCP_MISS dirn:-2:-2 x-swift-savetime: Tue, 26 Sep 2023 18:20:25 GMT x-swift-cachetime: 3600 timing-allow-origin: eagleid: 2ff62c9b16957524245765502e X-Firefox-Spdy: h2