Report - project.1sept.ru/works/551105.zip

Report Overview

Visited public
2025-04-14 11:39:40
Tags
URL
project.1sept.ru/works/551105.zip
Finishing URL
about:privatebrowsing
IP / ASN
82.138.56.234
#8732 JSC Comcor
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
project.1sept.ru	unknown	2008-08-25	2022-09-10	2025-02-24	501 B	21 kB	82.138.56.234

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-14 11:39:18	medium	Client IP	195.133.230.82	ET INFO Executable Download from dotted-quad Host
2025-04-14 11:39:22	medium	Client IP	195.133.230.82	ET INFO Executable Download from dotted-quad Host

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
project.1sept.ru/works/551105.zip
IP
82.138.56.234
ASN
#8732 JSC Comcor

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
21 kB (20604 bytes)
Hash
5f364b5de7f11ab0b9d9f22b17b9f277
05736a0898a9c7d4b2899694f307b04ab543ba38
69a6dd482b78b125929681765ea4e24f660421d16a28e84469c41b2786e76cfc

Archive (1)

Modified	Filename	Size	Md5	File type
2002-09-02 09:10	��᫥��⥫�᪠� ࠡ��.doc	84 kB	24bdfa565f7bd28227e3f59fdad233cf	Composite Document File V2 Document, Little Endian, Os: Windows, Version 4.10, Code page: 1251, Author: user, Template: Normal, Last Saved By: user, Revision Number: 8, Name of Creating Application: Microsoft Word 10.0, Total Editing Time: 07:03:00, Last Printed: Sun Mar 20 13:46:00 2005, Create Time/Date: Wed Sep 4 02:13:00 2002, Last Saved Time/Date: Mon Sep 2 05:10:00 2002, Number of Pages: 1, Number of Words: 2939, Number of Characters: 16755, Security: 0

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	project.1sept.ru/works/551105.zip	82.138.56.234	200 OK	21 kB
URL User Request GET project.1sept.ru/works/551105.zip IP 82.138.56.234:443 ASN #8732 JSC Comcor Certificate IssuerGlobalSign nv-sa Subject.1sept.ru Fingerprint8E:47:0C:D8:57:D7:03:EA:A7:1C:A1:37:89:4F:77:81:F1:FC:BC:96 ValidityFri, 28 Mar 2025 13:11:58 GMT - Wed, 29 Apr 2026 13:11:57 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 21 kB (20604 bytes) Hash 5f364b5de7f11ab0b9d9f22b17b9f277 05736a0898a9c7d4b2899694f307b04ab543ba38 69a6dd482b78b125929681765ea4e24f660421d16a28e84469c41b2786e76cfc HTTP Headers `GET /works/551105.zip HTTP/1.1 Host: project.1sept.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Mon, 14 Apr 2025 11:39:18 GMT content-type: application/zip content-length: 20604 last-modified: Fri, 16 May 2008 07:22:21 GMT etag: "482d362d-507c" x-frame-options: SAMEORIGIN accept-ranges: bytes strict-transport-security: max-age=31536000; includeSubDomains X-Firefox-Spdy: h2`

project.1sept.ru/works/551105.zip

82.138.56.234

200 OK

21 kB

URL User Request GET
project.1sept.ru/works/551105.zip
IP
82.138.56.234:443
ASN
#8732 JSC Comcor

Certificate
IssuerGlobalSign nv-sa
Subject*.1sept.ru
Fingerprint8E:47:0C:D8:57:D7:03:EA:A7:1C:A1:37:89:4F:77:81:F1:FC:BC:96
ValidityFri, 28 Mar 2025 13:11:58 GMT - Wed, 29 Apr 2026 13:11:57 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
21 kB (20604 bytes)
Hash
5f364b5de7f11ab0b9d9f22b17b9f277
05736a0898a9c7d4b2899694f307b04ab543ba38
69a6dd482b78b125929681765ea4e24f660421d16a28e84469c41b2786e76cfc

HTTP Headers

GET /works/551105.zip HTTP/1.1
Host: project.1sept.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 14 Apr 2025 11:39:18 GMT
content-type: application/zip
content-length: 20604
last-modified: Fri, 16 May 2008 07:22:21 GMT
etag: "482d362d-507c"
x-frame-options: SAMEORIGIN
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers