Report - dl.simviation.com/download?file=Soar_AZ2.zip

Report Overview

Visited public
2023-09-20 17:06:45
Tags
URL
dl.simviation.com/download?file=Soar_AZ2.zip
Finishing URL
dl.simviation.com/download?file=Soar_AZ2.zip
IP / ASN
198.143.185.238
#32475 SINGLEHOP-LLC
Title
dl.simviation.com/download?file=Soar_AZ2.zip

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dl.simviation.com	unknown	1999-02-07	2018-11-12 20:19:06	2023-09-05 19:17:06	955 B	685 B	198.143.185.238

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-20 17:06:42	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	dl.simviation.com/download?file=Soar_AZ2.zip	198.143.185.238		79 B
URL dl.simviation.com/download?file=Soar_AZ2.zip IP 198.143.185.238:0 ASN #32475 SINGLEHOP-LLC File type ASCII text, with no line terminators Size 79 B (79 bytes) Hash bb34396c05160fae11e4eec4c668c294 e967d5caa2cc50c5ca16f0095c1e00c8484a918c 9fdcfead0ecd593cbe1013d67bfc12c5f0787877f56f4ea008c7a7774847cbca HTTP Headers `GET /download?file=Soar_AZ2.zip HTTP/1.1 Host: dl.simviation.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.2.1 Date: Wed, 20 Sep 2023 17:06:29 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip`

	dl.simviation.com/favicon.ico	198.143.185.238		246 B
URL dl.simviation.com/favicon.ico IP 198.143.185.238:0 ASN #32475 SINGLEHOP-LLC File type XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 246 B (246 bytes) Hash ab99593efdf397078f11d9c37dd218a1 34540ffc5331cc545c1035b06a72b4f8d375973d beab79184bf1fca1f52ff3761f8a533827106fef3749c6c9c9a3e7eec619a226 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: dl.simviation.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://dl.simviation.com/download?file=Soar_AZ2.zip Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx/1.2.1 Date: Wed, 20 Sep 2023 17:06:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip`