Report - d.dxiazaicc.com/down/ktzxzb

Report Overview

Submitted URL
d.dxiazaicc.com/down/ktzxzb_downcc.zip
IP
163.171.134.108
ASN
#54994 ML-1432-54994
Submitted
2024-05-07 05:29:54
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
d.dxiazaicc.com	unknown	2022-06-04	2022-06-19	2024-03-27	408 B	396 kB	163.171.134.108
ocsp.digicert.cn	37572	2006-01-24	2020-03-20	2024-05-06	328 B	970 B	47.246.3.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
d.dxiazaicc.com/down/ktzxzb_downcc.zip
IP
163.171.134.108
ASN
#54994 ML-1432-54994

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
395 kB (395254 bytes)
Hash
684449cc4f1dad87db69646262a55f28
269a1e9a4a935ebed71ca34f5add0748033c80fd
f3296819742e8111cd78bf25b8bceec3322e058211bcdaa168605536469fc388

Archive (3)

Filename

Md5

File type

��ͷ��ֱ��1.4.exe

581bc518a5ac9ee0857004d996f1ed8c

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

��251��ַ��.htm

1649c04d3532e1b54b90107ef96dc439

HTML document, ASCII text, with CRLF line terminators

��ɫ��Դ��.url

e3d6c20a95810df0ee07dfd966c11468

MS Windows 95 Internet shortcut text (URL=<http://www.downcc.com/?down>), ASCII text, with CRLF line terminators

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Size
	ocsp.digicert.cn/	47.246.3.233	471 B
URL ocsp.digicert.cn/ IP 47.246.3.233:0 ASN #24429 Zhejiang Taobao Network Co.,Ltd File type data Size 471 B (471 bytes) Hash 4dfa6bf8164babd0c7073e410ab80d2b 992ed25932c05089e1a3f5429f8d171f3fcbd898 d7422737ba6e961bab6dae773b06df65dc8051c5ba54fa0d911f1ba21dc6dc29 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: Tengine Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: max-age=7200 Date: Tue, 07 May 2024 05:29:29 GMT Ali-Swift-Global-Savetime: 1715059769 Via: cache18.l2fr1[670,669,200-0,M], cache18.l2fr1[671,0], cache7.ru4[727,726,200-0,M], cache7.ru4[728,0] X-Cache: MISS TCP_MISS dirn:-2:-2 X-Swift-SaveTime: Tue, 07 May 2024 05:29:29 GMT X-Swift-CacheTime: 0 Timing-Allow-Origin: * EagleId: 2ff6039b17150597690097505e`

	d.dxiazaicc.com/down/ktzxzb_downcc.zip	163.171.134.108	395 kB
URL User Request GET d.dxiazaicc.com/down/ktzxzb_downcc.zip IP 163.171.134.108:0 ASN #54994 ML-1432-54994 File type Zip archive data, at least v1.0 to extract, compression method=store Size 395 kB (395254 bytes) Hash 684449cc4f1dad87db69646262a55f28 269a1e9a4a935ebed71ca34f5add0748033c80fd f3296819742e8111cd78bf25b8bceec3322e058211bcdaa168605536469fc388 HTTP Headers `GET /down/ktzxzb_downcc.zip HTTP/1.1 Host: d.dxiazaicc.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 07 May 2024 05:29:29 GMT Content-Type: application/zip Content-Length: 395254 Connection: keep-alive Server: nginx Last-Modified: Mon, 09 Mar 2015 06:40:10 GMT ETag: "54fd404a-607f6" Accept-Ranges: bytes x-via: 1.1 PS-CZX-01zhz39:5 (Cdn Cache Server V2.0), 1.1 hdx112:3 (Cdn Cache Server V2.0), 1.1 PSrdsdgemSTO1ab82:11 (Cdn Cache Server V2.0) Age: 586155 X-Ws-Request-Id: 6639bc39_PSrdsdgemSTO1ab82_3070-43290`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (3)

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers