Report - t62a.com/download/windows/exe/okeantv.exe

Report Overview

Submitted URL
t62a.com/download/windows/exe/okeantv.exe
IP
46.4.80.140
ASN
#24940 Hetzner Online GmbH
Submitted
2024-04-18 22:57:38
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09	2024-04-18	336 B	807 B	172.64.149.23
t62a.com	unknown	2014-07-17	2017-05-04	2024-02-09	495 B	673 kB	46.4.80.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-18 22:57:12	low	46.4.80.140	Client IP	ET INFO Observed ZeroSSL SSL/TLS Certificate

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
t62a.com/download/windows/exe/okeantv.exe
IP
46.4.80.140
ASN
#24940 Hetzner Online GmbH

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
Size
673 kB (672768 bytes)
Hash
af205d746c71c77263bbb8db534e5519
afdca56067ec605e747e97336a788096a8208342
07f1783ea4d1ad651a0215a187fa552a3bae2ddc494f706b455bc9964c1c3947

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	zerossl.ocsp.sectigo.com/	172.64.149.23		315 B
URL zerossl.ocsp.sectigo.com/ IP 172.64.149.23:0 ASN #13335 CLOUDFLARENET File type data Size 315 B (315 bytes) Hash c48876c1a111e91a7b1a2bf6b8c53bc2 3ec5f910a77754e70c96255e4f0849bd37bb895d 8da096387700af8c0cff28f4bb9fde0b17e28b3ec0e239f255942fedbcd25c33 HTTP Headers `POST / HTTP/1.1 Host: zerossl.ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 22:57:12 GMT Content-Type: application/ocsp-response Content-Length: 315 Connection: keep-alive Last-Modified: Wed, 17 Apr 2024 07:59:21 GMT Expires: Wed, 24 Apr 2024 07:59:20 GMT Etag: "3ec5f910a77754e70c96255e4f0849bd37bb895d" Cache-Control: max-age=463927,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb2 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876840a4aab1b4f3-OSL`

	t62a.com/download/windows/exe/okeantv.exe	46.4.80.140	200 OK	673 kB
URL User Request GET HTTP/1.1 t62a.com/download/windows/exe/okeantv.exe IP 46.4.80.140:443 ASN #24940 Hetzner Online GmbH Certificate IssuerZeroSSL Subjectt62a.com Fingerprint6A:81:31:E1:67:88:3B:D6:EA:8A:C6:71:5F:4D:40:1A:A6:F5:E6:35 ValidityTue, 16 Apr 2024 00:00:00 GMT - Mon, 15 Jul 2024 23:59:59 GMT File type PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections Size 673 kB (672768 bytes) Hash af205d746c71c77263bbb8db534e5519 afdca56067ec605e747e97336a788096a8208342 07f1783ea4d1ad651a0215a187fa552a3bae2ddc494f706b455bc9964c1c3947 HTTP Headers `GET /download/windows/exe/okeantv.exe HTTP/1.1 Host: t62a.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 18 Apr 2024 22:57:12 GMT Content-Type: application/octet-stream Content-Length: 672768 Last-Modified: Fri, 21 Oct 2022 09:58:46 GMT Connection: keep-alive ETag: "63526d56-a4400" Accept-Ranges: bytes`