Report - static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Russian-20220211%20A.pdf.zip

Report Overview

Visited public
2023-09-26 18:21:15
Tags
URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Russian-20220211%20A.pdf.zip
Finishing URL
about:privatebrowsing
IP / ASN
47.246.44.208
#24429 Zhejiang Taobao Network Co.,Ltd
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

3

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.crlocsp.cn	175388	2019-11-13	2020-04-10 16:39:04	2023-09-26 05:09:06	329 B	871 B	101.198.193.5
static.czur.cc	unknown	2015-05-06	2018-10-04 10:20:37	2023-08-22 03:23:54	564 B	742 kB	47.246.44.208

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-26 18:20:58	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-09-26 18:20:58	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-09-26 18:21:06	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Russian-20220211%20A.pdf.zip
IP
47.246.44.208
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
741 kB (741438 bytes)
Hash
a4e2a4daed0f22b107c3827cc6f303bb
ae2126a925bdcdffc3ae5d33ad65555acb70400d
c74527ee2dfd1f17205392b759a6a09887c2087cd0eb24e6ccf3d511a44d46a9

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	ocsp.crlocsp.cn/	101.198.193.5		471 B
URL ocsp.crlocsp.cn/ IP 101.198.193.5:0 ASN #55992 Beijing Qihu Technology Company Limited File type data Size 471 B (471 bytes) Hash 1e996fd4a61a264dfe082f1e1fadc2e5 a11b37f6bf5aff457b43f17573b69f6c519692d8 f1367b7b94aa316d9b7a95814c4442b4fcc57caf43d15308f95e6fec30d482d0 HTTP Headers `POST / HTTP/1.1 Host: ocsp.crlocsp.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.9.14 Date: Tue, 26 Sep 2023 18:12:41 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Content-Transfer-Encoding: Binary Last-modified: Mon, 25 Sep 2023 18:41:48 GMT Expires: Mon, 02 Oct 2023 18:41:47 GMT ETag: "A11B37F6BF5AFF457B43F17573B69F6C519692D8" cache-control: max-age=172800,public,no-transform,must-revalidate`

	static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Russian-20220211%20A.pdf.zip	47.246.44.208	200 OK	741 kB
URL User Request GET HTTP/2 static.czur.cc/czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Russian-20220211%20A.pdf.zip IP 47.246.44.208:443 ASN #24429 Zhejiang Taobao Network Co.,Ltd Certificate IssuerWoTrus CA Limited Subject.czur.cc Fingerprint6B:07:38:03:6F:6F:AB:94:91:9B:A9:94:D2:78:05:52:5B:83:4F:D9 ValidityTue, 20 Dec 2022 00:00:00 GMT - Tue, 16 Jan 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data Size 741 kB (741438 bytes) Hash a4e2a4daed0f22b107c3827cc6f303bb ae2126a925bdcdffc3ae5d33ad65555acb70400d c74527ee2dfd1f17205392b759a6a09887c2087cd0eb24e6ccf3d511a44d46a9 HTTP Headers GET /czur/usermanual/et24pro/CZUR%20%20ET%20Series%20User%20Manual%20-Russian-20220211%20A.pdf.zip HTTP/1.1 Host: static.czur.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: Tengine content-type: application/zip content-length: 741438 date: Tue, 26 Sep 2023 18:20:55 GMT x-oss-request-id: 651321075E5EEA37302894D7 vary: Origin x-oss-cdn-auth: success accept-ranges: bytes etag: "A4E2A4DAED0F22B107C3827CC6F303BB" last-modified: Wed, 01 Jun 2022 02:12:06 GMT x-oss-object-type: Normal x-oss-hash-crc64ecma: 5218658988926807782 x-oss-storage-class: Standard content-md5: pOKk2u0PIrEHw4J8xvMDuw== x-oss-server-time: 71 ali-swift-global-savetime: 1695752455 via: cache22.l2fr1[0,0,200-0,H], cache17.l2fr1[1,0], cache4.se1[37,36,200-0,M], cache5.se1[39,0] age: 0 x-cache: MISS TCP_MISS dirn:-2:-2 x-swift-savetime: Tue, 26 Sep 2023 18:20:58 GMT x-swift-cachetime: 3600 timing-allow-origin: eagleid: 2ff62c9916957524583462826e X-Firefox-Spdy: h2