Report - is.muni.cz/do/rect/el/estud/prif/ps06/f5010/animace/55.exe?kod=MUII70;predmet=618272;lang=cs;cop=3564771

Report Overview

Visited public
2024-07-11 00:54:32
Tags
URL
is.muni.cz/do/rect/el/estud/prif/ps06/f5010/animace/55.exe?kod=MUII70;predmet=618272;lang=cs;cop=3564771
Finishing URL
about:privatebrowsing
IP / ASN
147.251.49.10
#2852 CESNET z.s.p.o.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-09 18:12:41	2.0 kB	5.3 kB	23.36.77.32
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-07-09 18:12:42	327 B	888 B	23.36.77.32
is.muni.cz	891249	1995-08-25	2017-01-31 12:17:50	2024-07-06 17:45:32	558 B	1.8 MB	147.251.49.10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
is.muni.cz/do/rect/el/estud/prif/ps06/f5010/animace/55.exe?kod=MUII70;predmet=618272;lang=cs;cop=3564771
IP
147.251.49.10
ASN
#2852 CESNET z.s.p.o.

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
Size
1.8 MB (1783536 bytes)
Hash
90f510fedab7db3f4f75e32304390225
76aad62e0380cd7f9e6211c543557eef34fa5c71
dd64c70b7ad8f7f85ba3e2b31fef2176fdff57f52cab468547486d29678eee39

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/72

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
ee5b6dc3e7ab972df60b36582e3eaaf4
2a5185acc539fcddac9c33895ec74faf552b62dd
be84262bbb3f3aabae368745bc3e85b816e372b16bc37327a1887d3a19992df6

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BE84262BBB3F3AABAE368745BC3E85B816E372B16BC37327A1887D3A19992DF6"
Last-Modified: Wed, 10 Jul 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3706
Expires: Thu, 11 Jul 2024 01:55:52 GMT
Date: Thu, 11 Jul 2024 00:54:06 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
e08576e0904dc9903a9c20fa9e3d15b8
74feff76140500fd4a61e89c7e9d8d0a60df1183
ee690bacddf55fd12ae0c9c39e330e0a1a18776b9edc91b4aa6c5bae28824f1e

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EE690BACDDF55FD12AE0C9C39E330E0A1A18776B9EDC91B4AA6C5BAE28824F1E"
Last-Modified: Tue, 09 Jul 2024 15:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13570
Expires: Thu, 11 Jul 2024 04:40:16 GMT
Date: Thu, 11 Jul 2024 00:54:06 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
e7492695b5254a3a63fcffb4f1ee8cec
0361713c6d8129210245347284c7c6babfd28fb7
5d1bc1c01894fd88a0d4680490977488d6458bb58a98ace24ef8aa103538bc1f

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5D1BC1C01894FD88A0D4680490977488D6458BB58A98ACE24EF8AA103538BC1F"
Last-Modified: Tue, 09 Jul 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4085
Expires: Thu, 11 Jul 2024 02:02:11 GMT
Date: Thu, 11 Jul 2024 00:54:06 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
9b556e25e514a3cd5829bc4d938e5517
85eeba07dc1438e7433ce7a145500164d842d5db
22f599883dc87540746708049ea46ec4eb88c81c924ba145a58bebd5ee3199cb

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "22F599883DC87540746708049EA46EC4EB88C81C924BA145A58BEBD5EE3199CB"
Last-Modified: Tue, 09 Jul 2024 16:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7619
Expires: Thu, 11 Jul 2024 03:01:05 GMT
Date: Thu, 11 Jul 2024 00:54:06 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL
r11.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
dd5bbe2e6c1f2c4f7c82c74455f213b9
db68d52512dda13a0a99db1839b6cb8ce3858089
9d68c7a6f234bc092cfc031652128901d74cf2dfd2717cd67461c21e2287a0ec

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9D68C7A6F234BC092CFC031652128901D74CF2DFD2717CD67461C21E2287A0EC"
Last-Modified: Wed, 10 Jul 2024 13:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19147
Expires: Thu, 11 Jul 2024 06:13:13 GMT
Date: Thu, 11 Jul 2024 00:54:06 GMT
Connection: keep-alive

is.muni.cz/do/rect/el/estud/prif/ps06/f5010/animace/55.exe?kod=MUII70;predmet=618272;lang=cs;cop=3564771

147.251.49.10

200 OK

1.8 MB

URL User Request GET HTTP/1.1
is.muni.cz/do/rect/el/estud/prif/ps06/f5010/animace/55.exe?kod=MUII70;predmet=618272;lang=cs;cop=3564771
IP
147.251.49.10:443
ASN
#2852 CESNET z.s.p.o.

Certificate
IssuerLet's Encrypt
Subjectis.muni.cz
FingerprintD7:48:D5:66:4A:4B:F2:4F:1B:27:78:BA:52:44:10:AB:08:79:D2:8A
ValiditySat, 22 Jun 2024 23:26:23 GMT - Fri, 20 Sep 2024 23:26:22 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
Size
1.8 MB (1783536 bytes)
Hash
90f510fedab7db3f4f75e32304390225
76aad62e0380cd7f9e6211c543557eef34fa5c71
dd64c70b7ad8f7f85ba3e2b31fef2176fdff57f52cab468547486d29678eee39

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/72

HTTP Headers

GET /do/rect/el/estud/prif/ps06/f5010/animace/55.exe?kod=MUII70;predmet=618272;lang=cs;cop=3564771 HTTP/1.1
Host: is.muni.cz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 11 Jul 2024 00:54:06 GMT
Server: Apache
Accept-Ranges: bytes
Cache-Control: no-cache
Set-Cookie: __Host-issession=QAzSGiY7rYy6Ch9f2cSj0N-f; path=/; expires=Fri, 11-Jul-2025 00:54:06 GMT; secure; HttpOnly
Content-Length: 1783536
Last-Modified: Thu, 09 Nov 2006 12:33:55 GMT
Strict-Transport-Security: max-age=15552000
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/x-ms-dos-executable

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
50e4489707989517510128817aedd2ea
36a54d7b34a9ac621715b569e5a870f62671c574
3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15026
Expires: Thu, 11 Jul 2024 05:04:35 GMT
Date: Thu, 11 Jul 2024 00:54:09 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
50e4489707989517510128817aedd2ea
36a54d7b34a9ac621715b569e5a870f62671c574
3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40"
Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15026
Expires: Thu, 11 Jul 2024 05:04:35 GMT
Date: Thu, 11 Jul 2024 00:54:09 GMT
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers