Report - ra4nal.ontvtime.ru/dop/wtor.zip

Report Overview

Visited public
2025-05-06 23:10:05
Tags
URL
ra4nal.ontvtime.ru/dop/wtor.zip
Finishing URL
about:privatebrowsing
IP / ASN
91.242.33.252
#56864 Xeon LLC
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ra4nal.ontvtime.ru	unknown	unknown	No data	No data	499 B	432 kB	91.242.33.252

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
ra4nal.ontvtime.ru/dop/wtor.zip
IP
91.242.33.252
ASN
#56864 Xeon LLC

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
432 kB (431683 bytes)
Hash
c922811c356279cba661132633dc9371
265499ee0f202bd930dcf1035818aee833f0acf9
93119b76531e2728be0855a28a4fbf77e4b3ec04b318b2265896a0b40dfe0cbf

Archive (7)

Filename

Md5

File type

ALvalues.htm

6c6eed8f25c02b415fea47f0105aea1d

HTML document, ASCII text, with CRLF line terminators

Resonant.png

8c0f9bdd868bd5e128dc28c19074c803

PNG image data, 557 x 535, 8-bit/color RGBA, interlaced

t2.gif

8d4ddda5113a9b1cb6857d4ab70aa9ae

GIF image data, version 89a, 150 x 158

toros.png

4f0363c5f53738bd42a2268547077dcc

PNG image data, 64 x 57, 8-bit/color RGBA, interlaced

toros400.png

24c057d13102a43248b9a10eaeab4270

PNG image data, 400 x 357, 8-bit/color RGB, interlaced

WinToroids.exe

16780f2f04a48ce52a792083b9b0b44a

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 4 sections

read.txt

9bc85f0a9ec2e9ca029f76556001a7e4

ISO-8859 text, with no line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/68

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

ra4nal.ontvtime.ru/dop/wtor.zip

91.242.33.252

200 OK

432 kB

URL User Request GET
ra4nal.ontvtime.ru/dop/wtor.zip
IP
91.242.33.252:443
ASN
#56864 Xeon LLC

Certificate
IssuerGlobalSign nv-sa
Subject*.ontvtime.ru
Fingerprint05:BA:80:0F:7A:C1:9E:73:5F:11:E1:0D:B1:1C:E6:91:4B:08:0D:45
ValidityMon, 26 Aug 2024 09:02:02 GMT - Sat, 27 Sep 2025 08:08:57 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
432 kB (431683 bytes)
Hash
c922811c356279cba661132633dc9371
265499ee0f202bd930dcf1035818aee833f0acf9
93119b76531e2728be0855a28a4fbf77e4b3ec04b318b2265896a0b40dfe0cbf

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/68

HTTP Headers

GET /dop/wtor.zip HTTP/1.1
Host: ra4nal.ontvtime.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 23:09:33 GMT
content-type: application/zip
content-length: 431683
last-modified: Sun, 30 Oct 2011 14:21:39 GMT
etag: "4ead5d73-69643"
expires: Wed, 03 Sep 2025 23:09:33 GMT
cache-control: max-age=10368000, public
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (7)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers