Report - pogostick.net/~pnh/ntpasswd/usb140201.zip

Report Overview

Visited public
2024-09-25 13:38:45
Tags
URL
pogostick.net/~pnh/ntpasswd/usb140201.zip
Finishing URL
about:privatebrowsing
IP / ASN
176.125.232.20
#50304 Blix Solutions AS
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-25 09:32:11	1.3 kB	3.6 kB	23.36.76.226
pogostick.net	unknown	1998-06-17	2013-09-03 07:19:21	2024-09-21 20:21:52	495 B	17 MB	176.125.232.20
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-09-25 01:59:50	1.6 kB	4.4 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
pogostick.net/~pnh/ntpasswd/usb140201.zip
IP
176.125.232.20
ASN
#50304 Blix Solutions AS

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
17 MB (17334297 bytes)
Hash
a60dbb91016d93ec5f11e64650394afb
f70973e7e9d57a1d55c9c9122e437d20ea07eb3a
c9598fe89c9f4ca470ce47b556fea6289b05b1850c629c2c2f51f2efc995247c

Archive (9)

Filename

Md5

File type

boot.msg

143168daea78f54aefe483267022843d

ASCII text

initrd.cgz

adda979a8c1557a872b416a360286b7d

gzip compressed data, was "initrd.cpio", last modified: Sat Feb 1 16:35:02 2014, from Unix

isolinux.bin

fa9c15dc26c3adaf5c540b25da1b6ecb

isolinux Loader (version 4.04)

isolinux.cfg

ec05e1095934746201ea753ce3b793f2

ASCII text, with CRLF line terminators

readme.txt

ea9eade1a52b99e014ece6a4e58094e8

ASCII text, with CRLF line terminators

scsi.cgz

60b55a0384ee99d4554f7677d19da37a

gzip compressed data, was "scsi.cpio", last modified: Tue Aug 27 13:38:19 2013, from Unix

syslinux.cfg

ec05e1095934746201ea753ce3b793f2

ASCII text, with CRLF line terminators

syslinux.exe

2afcdff81ee47ad9034960e5800f66ca

PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, 4 sections

vmlinuz

7efd7c82f5fd352ac4b58c8b9dee29e2

Linux kernel x86 boot executable bzImage, version 3.10.5 (root@athene.petro.priv) #18 Tue Aug 27 15:23:47 CEST 2013, RO-rootFS, swap_dev 0X2, Normal VGA

JavaScript (0)

HTTP Transactions (10)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 72e206e9b89445fb2fb4031a6abe6169 a18bebfb86a71685bd817c15e348cfb5ea438c72 856f85441e043130f88668be6cf68110187856f17999bddc4332437d383c79b6 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "856F85441E043130F88668BE6CF68110187856F17999BDDC4332437D383C79B6" Last-Modified: Mon, 23 Sep 2024 09:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2818 Expires: Wed, 25 Sep 2024 14:25:13 GMT Date: Wed, 25 Sep 2024 13:38:15 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 8561f6c5f82d57ce35075e29e8633aac a37923385834db53ec3f63d0981fa9cc5d8ef548 7f437888e6636785f118d4a7886151268f7bd9de31cbd6164de33e610875ef19 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "7F437888E6636785F118D4A7886151268F7BD9DE31CBD6164DE33E610875EF19" Last-Modified: Wed, 25 Sep 2024 07:17:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4854 Expires: Wed, 25 Sep 2024 14:59:09 GMT Date: Wed, 25 Sep 2024 13:38:15 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash b864476fa0457236e163a06e1cad5279 e9acc26214498b6861058be05885f07275075406 55fa8283fbd284a294b1853b35eb0bbbdfd3dd6de3cb3ebf441f0a7f6296d41d HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "55FA8283FBD284A294B1853B35EB0BBBDFD3DD6DE3CB3EBF441F0A7F6296D41D" Last-Modified: Wed, 25 Sep 2024 10:33:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14750 Expires: Wed, 25 Sep 2024 17:44:05 GMT Date: Wed, 25 Sep 2024 13:38:15 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c5df97c10e9a37c02e8e12b302465464 b0d9b31bb7dd48f11b58e6f1833798e45dc5a862 350fb41eb348dc3b30943b357e089a3cd9dcc9670285c29485ba02a38ebcbc15 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "350FB41EB348DC3B30943B357E089A3CD9DCC9670285C29485BA02A38EBCBC15" Last-Modified: Wed, 25 Sep 2024 02:38:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11544 Expires: Wed, 25 Sep 2024 16:50:39 GMT Date: Wed, 25 Sep 2024 13:38:15 GMT Connection: keep-alive`

	pogostick.net/~pnh/ntpasswd/usb140201.zip	176.125.232.20	200 OK	17 MB
URL User Request GET HTTP/1.1 pogostick.net/~pnh/ntpasswd/usb140201.zip IP 176.125.232.20:443 ASN #50304 Blix Solutions AS Certificate IssuerSectigo Limited Subjectpogostick.net Fingerprint0E:B0:97:02:04:42:FA:E7:75:11:C7:A1:C5:E6:45:07:6A:EF:8F:46 ValidityWed, 06 Mar 2024 00:00:00 GMT - Tue, 01 Apr 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 17 MB (17334297 bytes) Hash a60dbb91016d93ec5f11e64650394afb f70973e7e9d57a1d55c9c9122e437d20ea07eb3a c9598fe89c9f4ca470ce47b556fea6289b05b1850c629c2c2f51f2efc995247c HTTP Headers `GET /~pnh/ntpasswd/usb140201.zip HTTP/1.1 Host: pogostick.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 13:38:15 GMT Server: Apache Last-Modified: Sat, 01 Feb 2014 16:57:05 GMT ETag: "1088019-4f15b2e1fda40" Accept-Ranges: bytes Content-Length: 17334297 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/zip`

	r11.o.lencr.org/	23.36.76.226		504 B
URL r11.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6209 Expires: Wed, 25 Sep 2024 15:21:48 GMT Date: Wed, 25 Sep 2024 13:38:19 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.226		504 B
URL r11.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6209 Expires: Wed, 25 Sep 2024 15:21:48 GMT Date: Wed, 25 Sep 2024 13:38:19 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.226		504 B
URL r11.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6209 Expires: Wed, 25 Sep 2024 15:21:48 GMT Date: Wed, 25 Sep 2024 13:38:19 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.226		504 B
URL r11.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6209 Expires: Wed, 25 Sep 2024 15:21:48 GMT Date: Wed, 25 Sep 2024 13:38:19 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.226		504 B
URL r11.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230" Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6207 Expires: Wed, 25 Sep 2024 15:21:48 GMT Date: Wed, 25 Sep 2024 13:38:21 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (9)

JavaScript (0)

HTTP Transactions (10)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL