Report - 176.57.181.245:8080/mods/FS22

Report Overview

Submitted URL
176.57.181.245:8080/mods/FS22_simpleIC.zip
IP
176.57.181.245
ASN
#56876 Ociris GmbH
Submitted
2024-04-25 09:08:55
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
176.57.181.245:8080	unknown	unknown	No data	No data	412 B	134 kB	176.57.181.245

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	176.57.181.245	Sinkholed

ThreatFox

No alerts detected

Files detected

URL
176.57.181.245:8080/mods/FS22_simpleIC.zip
IP
176.57.181.245
ASN
#56876 Ociris GmbH

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
134 kB (133579 bytes)
Hash
af8a9b5456bf94bbc176358c7e54f3e9
68de590ac5df42b14a32d45bdda427a87d45b6d6
021a4c25ff952161a069a6089250b5cd37928b70718ef3246ad94a6b32adfb5d

Archive (10)

Modified	Filename	Size	Md5	File type
2022-04-03 10:38	simpleIC_animations.lua	9.6 kB	c43aa9d4925300e78022ecbc922c3714	ASCII text, with CRLF line terminators
2022-03-07 22:49	simpleIC_implementBalls.lua	8.5 kB	b051e0881f94dcce87a94d9f34acc2ca	ASCII text
2021-01-25 16:02	store.dds	66 kB	20763e20f789806eb6e6ce6e05b5bce3	Microsoft DirectDraw Surface (DDS): 256 x 256, compressed using DX10
2022-04-03 10:31	weightSetBall.i3d	1.8 kB	e1caec894506ff74be8170f7a55106ee	XML 1.0 document, ASCII text
2022-04-03 10:31	weightSetBall.i3d.shapes	59 kB	2f32c944695840cfe43d285587a1a1b5	data
2020-10-28 14:44	weightSetBall_normal.dds	44 kB	3ef7d5f5351cfde5c8fa1b53fc0e6101	Microsoft DirectDraw Surface (DDS): 256 x 256, compressed using DX10
2020-10-28 14:46	weightSetBall_specular.dds	175 kB	16a59475f92707e76a9e96df802874d5	Microsoft DirectDraw Surface (DDS): 512 x 512, compressed using DX10
2022-05-07 19:05	modDesc.xml	3.9 kB	456533c98245645e8907e9f158b25eef	XML 1.0 document, Unicode text, UTF-8 text, with very long lines (309)
2022-04-02 17:51	registerSimpleIC.lua	9.8 kB	b86ad17cb37feec369844e6b06c5f936	ASCII text, with very long lines (402)
2022-04-02 17:38	simpleIC.lua	24 kB	dea6e6afcf161fbfa38a4089996c4c39	ASCII text

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

176.57.181.245:8080/mods/FS22_simpleIC.zip

176.57.181.245

200 OK

134 kB

URL User Request GET HTTP/1.1
176.57.181.245:8080/mods/FS22_simpleIC.zip
IP
176.57.181.245:8080
ASN
#56876 Ociris GmbH

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
134 kB (133579 bytes)
Hash
af8a9b5456bf94bbc176358c7e54f3e9
68de590ac5df42b14a32d45bdda427a87d45b6d6
021a4c25ff952161a069a6089250b5cd37928b70718ef3246ad94a6b32adfb5d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /mods/FS22_simpleIC.zip HTTP/1.1
Host: 176.57.181.245:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-control: must-revalidate, post-check=0, pre-check=0
Content-description: File Transfer
Content-disposition: attachment; filename="FS22_simpleIC.zip"
Content-transfer-encoding: binary
Content-type: application/zip
Date: Thu, 25 Apr 2024 11:08:28 GMT
Expires: 0
Last-modified: Thu, 25 Apr 2024 11:08:28 GMT
Pragma: public
Server: GIANTS Dedicated Server GIANTS Dedicated Server/9.2.0.0
Set-Cookie: SessionID=220531713935651; path=/
Content-Length: 133579

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (10)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers