Report - rb.gy/3lvbuy

Report Overview

Visited public
2023-12-08 03:22:41
URL
rb.gy/3lvbuy
Finishing URL
about:privatebrowsing
IP / ASN
44.195.174.28
#14618 AMAZON-AES
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ia601602.us.archive.org	unknown	1995-12-14	2012-12-29 00:21:45	2023-12-01 12:06:39	555 B	13 MB	207.241.227.82
archive.org	7266	1995-12-14	2013-04-16 16:52:59	2023-12-06 20:37:54	545 B	13 MB	207.241.224.2
rb.gy	103780	2019-09-17	2019-10-11 21:55:07	2023-12-07 05:31:33	478 B	337 B	44.207.55.129

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-08 03:22:29	low	44.207.55.129	Client IP	ET INFO Observed URL Shortening Service SSL/TLS Cert (rb.gy)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
ia601602.us.archive.org/26/items/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip
IP
207.241.227.82
ASN
#7941 INTERNET-ARCHIVE

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
13 MB (13380830 bytes)
Hash
00d88b02bc3aada70498ec421092c04b
2d83d33033e31955497e3e962493b9133e7a2c39
e5b98f79e84d434b44fe4dab6b0e7823772d32744249a8fb9fb2288d0b354b21

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	rb.gy/3lvbuy	44.207.55.129	301 Moved Permanently	0 B
URL User Request GET HTTP/2 rb.gy/3lvbuy IP 44.207.55.129:443 ASN #14618 AMAZON-AES Certificate IssuerAmazon Subjectrb.gy FingerprintDB:A6:0C:96:5D:05:26:D6:95:BF:CD:A8:79:39:3C:DA:CC:7E:93:A5 ValiditySat, 19 Aug 2023 00:00:00 GMT - Mon, 16 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /3lvbuy HTTP/1.1 Host: rb.gy User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently date: Fri, 08 Dec 2023 03:22:22 GMT content-length: 0 location: https://archive.org/download/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip cache-control: no-cache, no-store expires: -1 engine: Rebrandly.redirect, version 2.1 strict-transport-security: max-age=15552000 X-Firefox-Spdy: h2`

	ia601602.us.archive.org/26/items/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip	207.241.227.82	200 OK	13 MB
URL User Request GET HTTP/2 ia601602.us.archive.org/26/items/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip IP 207.241.227.82:443 ASN #7941 INTERNET-ARCHIVE Certificate IssuerGoDaddy.com, Inc. Subject.us.archive.org FingerprintAD:42:AD:6F:D7:D3:83:11:4E:71:BF:D2:65:2C:78:ED:A6:9E:29:52 ValidityThu, 19 Jan 2023 19:33:16 GMT - Tue, 20 Feb 2024 19:33:16 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data Size 13 MB (13380830 bytes) Hash 00d88b02bc3aada70498ec421092c04b 2d83d33033e31955497e3e962493b9133e7a2c39 e5b98f79e84d434b44fe4dab6b0e7823772d32744249a8fb9fb2288d0b354b21 HTTP Headers GET /26/items/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip HTTP/1.1 Host: ia601602.us.archive.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx/1.25.1 date: Fri, 08 Dec 2023 03:22:24 GMT content-type: application/zip content-length: 13380830 last-modified: Sat, 11 Mar 2023 18:28:22 GMT etag: "640cc846-cc2cde" strict-transport-security: max-age=15724800 expires: Fri, 08 Dec 2023 09:22:24 GMT cache-control: max-age=21600 referrer-policy: no-referrer-when-downgrade accept-ranges: bytes X-Firefox-Spdy: h2`

	archive.org/download/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip	207.241.224.2	302 Found	13 MB
URL User Request GET HTTP/2 archive.org/download/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip IP 207.241.224.2:443 ASN #7941 INTERNET-ARCHIVE Certificate IssuerGoDaddy.com, Inc. Subject.archive.org FingerprintB8:AE:C6:B4:93:7D:61:C3:EC:83:3D:EA:8C:B9:55:13:0F:41:C8:96 ValidityThu, 19 Jan 2023 18:59:49 GMT - Tue, 20 Feb 2024 18:59:49 GMT File type Size 13 MB (13380830 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /download/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip HTTP/1.1 Host: archive.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: nginx/1.25.1 date: Fri, 08 Dec 2023 03:22:23 GMT content-type: text/html; charset=UTF-8 location: https://ia601602.us.archive.org/26/items/ps2bios-by-ps2-bios.com/ps2_bios%20by%20ps2-bios.com.zip accept-ranges: bytes strict-transport-security: max-age=15724800 referrer-policy: no-referrer-when-downgrade X-Firefox-Spdy: h2`