Report - qu.ax/GoBM.7z

Report Overview

Submitted URL
qu.ax/GoBM.7z
IP
104.244.72.27
ASN
#53667 PONYNET
Submitted
2024-04-16 13:30:06
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
qu.ax	unknown	2019-10-23	2019-12-22	2024-04-16	467 B	14 MB	45.145.42.217

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	qu.ax	Sinkholed

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	qu.ax	Sinkholed

ThreatFox

No alerts detected

Files detected

URL
qu.ax/GoBM.7z
IP
45.145.42.217
ASN
#58212 dataforest GmbH

File type
7-zip archive data, version 0.4
Size
14 MB (14122037 bytes)
Hash
6fc12371a46437f300f4d1fc34b60897
269d188c2fa839ccd644b67590957d07b67fddb0
ea7dcbb349d749042f1886312179c5e2df7b2d6dadf888f476dbe6dc57ea4ee6

Archive (23)

Modified	Filename	Size	Md5	File type
2023-04-06 05:57	~$ول كانون 2014.doc	162 B	96e9448baec4688bcfce897c1f4917ca	data
2023-03-11 21:05	احتياط الشباب.pdf	112 kB	491d4a44e887e4fbfd5f4c485ad3334e	PDF document, version 1.7, 4 pages
2023-03-11 21:05	احتياط العمل.pdf	131 kB	d8d2247fc973acd3c96ae8867c2f7c4a	PDF document, version 1.7, 9 pages
2023-03-11 21:05	احتياط الماء.pdf	107 kB	f908541817a5e480eb36235675c8f32b	PDF document, version 1.7, 4 pages
2023-03-11 21:05	احتياط المجاري.pdf	116 kB	d479e484a277a4a0bec35596e17a96a5	PDF document, version 1.7, 8 pages
2023-03-11 21:05	احتياط انتاج.pdf	101 kB	2fb8bbc4f6a16bc6e9b0d0a9bd099ec1	PDF document, version 1.7, 1 pages
2023-03-11 21:05	احتياط زراعة.pdf	114 kB	52e312b8b81113564ccc660a34cdc85f	PDF document, version 1.7, 4 pages
2023-04-05 20:45	استخبارات الحشد والجيش.xlsx	1.6 MB	b353b2e56ff85619484dcad9e5d5a757	Microsoft Excel 2007+
2023-03-14 12:13	اعادة_مراتب_الى_الخدمة_عدد_9923_بكتاب_ش_أ_111248_في_8_10_2019.xlsx	952 kB	0573af30fc148375224e3e0bf9b21fba	Microsoft Excel 2007+
2023-03-11 21:06	حشد بصرة 1.pdf	110 kB	657896eb4209076d8b53e2c3a91d769c	PDF document, version 1.7, 19 pages
2023-03-11 21:06	حشد بصرة 2.pdf	145 kB	34adb5b59732860e4429c98159ad9e94	PDF document, version 1.6 (zip deflate encoded)
2023-03-11 21:06	حشد بصرة 3.xlsx	65 kB	99e3f26b27e3c28fe6a56e0a530a8674	Microsoft Excel 2007+
2023-03-11 21:06	حشد بغداد 1.pdf	193 kB	04c48ee1b6a152118d0117eefb2e3309	PDF document, version 1.6 (zip deflate encoded)
2023-03-11 21:06	حشد بغداد 2.pdf	167 kB	13af032fb06431e4a205a64d015c9ef2	PDF document, version 1.7, 20 pages
2023-03-11 21:06	حشد بغداد 3.xlsx	113 kB	a1cce982f1670e85d3d35b7f38fe9355	Microsoft Excel 2007+
2023-03-11 21:06	حشد كربلاء 1.pdf	80 kB	09db4985d40ca82c3c5bc3aa5aa59873	PDF document, version 1.7, 12 pages
2023-03-11 21:06	حشد كربلاء 2.xlsx	46 kB	cb3d3df59252e1cd4d4d37eacb7828f3	Microsoft Excel 2007+
2023-03-11 21:05	قطع اراضي 1.pdf	3.2 MB	51d84d5e3ffc0ad048c376a3f2e66aff	PDF document, version 1.5, 131 pages
2023-03-11 21:04	قطع اراضي 2.pdf	3.2 MB	99d32b5c47b3a7944ade7b480fa3a4b5	PDF document, version 1.5, 289 pages
2023-03-11 21:04	قطع اراضي 3.pdf	2.0 MB	4e9fb6c90c6af0413b1dd420940a5bb3	PDF document, version 1.5, 149 pages
2023-03-11 21:04	قطع اراضي 4.pdf	819 kB	8cfa35aa59b5b5bf3c552f8a28194f22	PDF document, version 1.7, 93 pages
2023-03-11 21:06	مفسوخة عقودهم 1.pdf	3.6 MB	359a204619c40ddc006388093fa96c6d	PDF document, version 1.4, 16 pages (zip deflate encoded)
2023-03-11 21:05	مفسوخة عقوهم 2.pdf	2.0 MB	6ae19edd9ae7f3ee00638e8e861f14dd	PDF document, version 1.7, 14 pages

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

qu.ax/GoBM.7z

45.145.42.217

200 OK

14 MB

URL User Request GET HTTP/2
qu.ax/GoBM.7z
IP
45.145.42.217:443
ASN
#58212 dataforest GmbH

Certificate
IssuerLet's Encrypt
Subject*.qu.ax
Fingerprint82:9B:25:4F:F4:5A:4D:E3:20:F2:A0:49:24:38:BA:5B:66:4A:CB:6D
ValidityMon, 18 Mar 2024 05:21:34 GMT - Sun, 16 Jun 2024 05:21:33 GMT

File type
7-zip archive data, version 0.4
Size
14 MB (14122037 bytes)
Hash
6fc12371a46437f300f4d1fc34b60897
269d188c2fa839ccd644b67590957d07b67fddb0
ea7dcbb349d749042f1886312179c5e2df7b2d6dadf888f476dbe6dc57ea4ee6

Detections

Analyzer	Verdict	Alert
mnemonic secure dns	malicious	Sinkholed
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /GoBM.7z HTTP/1.1
Host: qu.ax
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 13:29:35 GMT
content-type: application/x-7z-compressed
content-length: 14122037
last-modified: Sun, 19 Nov 2023 21:28:25 GMT
x-xss-protection: 1; mode=block
alt-svc: h3=":443"; ma=604800
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (23)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers