Report - speleotrove.com/decimal/dectest.zip

Report Overview

Visited public
2023-09-22 21:52:34
Tags
URL
speleotrove.com/decimal/dectest.zip
Finishing URL
about:privatebrowsing
IP / ASN
88.208.252.226
#8560 IONOS SE
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
speleotrove.com	unknown	2008-07-27	2013-08-24 04:22:24	2023-09-21 19:32:05	491 B	792 kB	88.208.252.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-22 21:52:32	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
speleotrove.com/decimal/dectest.zip
IP
88.208.252.226
ASN
#8560 IONOS SE

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
792 kB (791733 bytes)
Hash
5bad77b2007040b4fbd2c6a25a57731b
9d8343660aca8450154ae202d7ca0e17f5d21ede
b70a224cd52e82b7a8150aedac5efa2d0cb3941696fd829bdbe674f9f65c3926

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	speleotrove.com/decimal/dectest.zip	88.208.252.226	200 OK	792 kB
URL User Request GET HTTP/2 speleotrove.com/decimal/dectest.zip IP 88.208.252.226:443 ASN #8560 IONOS SE Certificate IssuerDigiCert Inc Subjectspeleotrove.com FingerprintBC:A0:31:CF:CD:70:8E:16:69:4A:9A:C8:D9:EA:CF:0B:59:E4:AF:B3 ValidityFri, 11 Aug 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data Size 792 kB (791733 bytes) Hash 5bad77b2007040b4fbd2c6a25a57731b 9d8343660aca8450154ae202d7ca0e17f5d21ede b70a224cd52e82b7a8150aedac5efa2d0cb3941696fd829bdbe674f9f65c3926 HTTP Headers `GET /decimal/dectest.zip HTTP/1.1 Host: speleotrove.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: application/zip content-length: 791733 server: nginx/1.25.1 date: Fri, 22 Sep 2023 21:52:17 GMT last-modified: Mon, 18 Oct 2010 06:42:56 GMT etag: "c14b5-492de7c7ffc00" accept-ranges: bytes X-Firefox-Spdy: h2`

speleotrove.com/decimal/dectest.zip

88.208.252.226

200 OK

792 kB

URL User Request GET HTTP/2
speleotrove.com/decimal/dectest.zip
IP
88.208.252.226:443
ASN
#8560 IONOS SE

Certificate
IssuerDigiCert Inc
Subjectspeleotrove.com
FingerprintBC:A0:31:CF:CD:70:8E:16:69:4A:9A:C8:D9:EA:CF:0B:59:E4:AF:B3
ValidityFri, 11 Aug 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size
792 kB (791733 bytes)
Hash
5bad77b2007040b4fbd2c6a25a57731b
9d8343660aca8450154ae202d7ca0e17f5d21ede
b70a224cd52e82b7a8150aedac5efa2d0cb3941696fd829bdbe674f9f65c3926

HTTP Headers

GET /decimal/dectest.zip HTTP/1.1
Host: speleotrove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/zip
content-length: 791733
server: nginx/1.25.1
date: Fri, 22 Sep 2023 21:52:17 GMT
last-modified: Mon, 18 Oct 2010 06:42:56 GMT
etag: "c14b5-492de7c7ffc00"
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers