Report - energie.atw.hu/speed.exe

Report Overview

Visited public
2024-10-11 06:30:59
Tags
URL
energie.atw.hu/speed.exe
Finishing URL
energie.atw.hu/speed.exe
IP / ASN
88.151.96.4
#41075 ATW Internet Kft.
Title
e n e r g i e

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
atw.hu	188696	2003-06-07	2014-01-20 08:17:33	2024-09-22 11:43:07	430 B	6.8 kB	94.125.176.29
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2024-10-10 14:02:29	525 B	16 kB	142.250.74.163
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-10-10 13:53:22	421 B	9.3 kB	142.250.74.106
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-10 13:37:19	1.3 kB	3.5 kB	23.33.119.27
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2024-10-10 14:25:59	422 B	31 kB	142.250.74.170
f.atw.hu	unknown	2003-06-07	2016-02-15 01:15:00	2024-09-22 11:43:06	1.1 kB	132 kB	88.151.96.4
o.pki.goog	unknown	2016-06-13	2024-04-24 13:44:57	2024-10-10 13:37:10	2.0 kB	4.2 kB	142.250.74.67
users.atw.hu	779240	2003-06-07	2017-02-01 10:02:54	2024-10-07 22:29:51	433 B	3.1 MB	88.151.96.4
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-10-10 13:37:10	1.6 kB	4.4 kB	23.36.76.226
energie.atw.hu	unknown	unknown	No data	No data	1.0 kB	2.3 kB	88.151.96.4

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
users.atw.hu/energie/speed.exe
IP
88.151.96.4
ASN
#41075 ATW Internet Kft.

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
Size
3.1 MB (3121152 bytes)
Hash
bc1c4018387584273e75b517af0cee33
0ceeb4dc196bf4eaa5324128e2ba323f3444c697
4164964e0b39819a8fe9f9842be44fa587b9fe0419003c1969d0945850af9087

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/73

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	ScriptElement	86 kB	2023-03-07	2025-05-14
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-14 04:13 Times Seen174473 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	f.atw.hu/reklam.php?ad=energie&kat=15	ScriptElement	0 B	0001-01-01	2025-05-14
Pretty URL f.atw.hu/reklam.php?ad=energie&kat=15 IP 88.151.96.4 ASN #41075 ATW Internet Kft. Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-14 05:20 Times Seen4677402 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	f.atw.hu/reklam.php?ad=energie&kat=15	ScriptElement	0 B	0001-01-01	2025-05-14
Pretty URL f.atw.hu/reklam.php?ad=energie&kat=15 IP 88.151.96.4 ASN #41075 ATW Internet Kft. Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-14 05:20 Times Seen4677402 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

		Size	First Seen	Last Seen
	#1 Write - 1a0af0374f37c1ff6ea72f52e0af1107	84 B	2023-03-07 01:07	2025-05-14 01:27
Pretty Observations First Seen2023-03-07 01:07 Last Seen2025-05-14 01:27 Times Seen1429 Hash 1a0af0374f37c1ff6ea72f52e0af1107 7da42355e364ea5a72ac995f2981f3ea7c5f1f0a 071bb71cc5f59a8a7b8eeb83d3b40bdfebdb2381c15bfb06526d6bc7b795dd25 Loading...

HTTP Transactions (26)

URL IP Response Size

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
e8655fceca672a60b40615879037e742
a58e96e869ed3caf523c47cc94e5808d67ff033e
7442a4ec6cb6cf290cd3677c77cd85ad4145048d536fb22872fa980e9cd9b708

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "7442A4EC6CB6CF290CD3677C77CD85AD4145048D536FB22872FA980E9CD9B708"
Last-Modified: Thu, 10 Oct 2024 20:49:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4187
Expires: Fri, 11 Oct 2024 07:40:21 GMT
Date: Fri, 11 Oct 2024 06:30:34 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
76d4815925a4b4cf3dbb800eaa4a7770
317eb0f0486d1a342b5141b3b2f9ef4309bbdeb7
3ab4458319db72633c073ecac5c8da5994f6fa797fd44bc6170fcd3400d5eeab

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3AB4458319DB72633C073ECAC5C8DA5994F6FA797FD44BC6170FCD3400D5EEAB"
Last-Modified: Thu, 10 Oct 2024 16:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8913
Expires: Fri, 11 Oct 2024 08:59:07 GMT
Date: Fri, 11 Oct 2024 06:30:34 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
36f66a869b9d38762409dbbe1da64bad
77b699c33a7ddc6a9fee2919b852cf8a4b22da0b
cdf370a2e3b59729aee219dee9744cdf4da205864c66118a79742c08cd438c31

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CDF370A2E3B59729AEE219DEE9744CDF4DA205864C66118A79742C08CD438C31"
Last-Modified: Thu, 10 Oct 2024 21:41:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8434
Expires: Fri, 11 Oct 2024 08:51:08 GMT
Date: Fri, 11 Oct 2024 06:30:34 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.27

504 B

URL
r10.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
79cc92870c237da0a800ef6a3c32181e
db1eafb8715ecab04572ae3a2509e1482604e857
678a9d9c7a94705e293236ab03c6db471fec41d7b2ee0dc2f2ae92a59c9b21f6

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "678A9D9C7A94705E293236AB03C6DB471FEC41D7B2EE0DC2F2AE92A59C9B21F6"
Last-Modified: Fri, 11 Oct 2024 01:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4121
Expires: Fri, 11 Oct 2024 07:39:16 GMT
Date: Fri, 11 Oct 2024 06:30:35 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
af0d1cea6aa0671f0271828695f79be4
ae58030b5e611aa6a2a4b608a18e49f7f4cbe9c3
33e0e5962e66d1ce7c82595b0bca02808bbddc350a471425a2046aeb2a4e9260

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "33E0E5962E66D1CE7C82595B0BCA02808BBDDC350A471425A2046AEB2A4E9260"
Last-Modified: Thu, 10 Oct 2024 21:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6165
Expires: Fri, 11 Oct 2024 08:13:22 GMT
Date: Fri, 11 Oct 2024 06:30:37 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
af0d1cea6aa0671f0271828695f79be4
ae58030b5e611aa6a2a4b608a18e49f7f4cbe9c3
33e0e5962e66d1ce7c82595b0bca02808bbddc350a471425a2046aeb2a4e9260

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "33E0E5962E66D1CE7C82595B0BCA02808BBDDC350A471425A2046AEB2A4E9260"
Last-Modified: Thu, 10 Oct 2024 21:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6165
Expires: Fri, 11 Oct 2024 08:13:22 GMT
Date: Fri, 11 Oct 2024 06:30:37 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
af0d1cea6aa0671f0271828695f79be4
ae58030b5e611aa6a2a4b608a18e49f7f4cbe9c3
33e0e5962e66d1ce7c82595b0bca02808bbddc350a471425a2046aeb2a4e9260

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "33E0E5962E66D1CE7C82595B0BCA02808BBDDC350A471425A2046AEB2A4E9260"
Last-Modified: Thu, 10 Oct 2024 21:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6165
Expires: Fri, 11 Oct 2024 08:13:22 GMT
Date: Fri, 11 Oct 2024 06:30:37 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
af0d1cea6aa0671f0271828695f79be4
ae58030b5e611aa6a2a4b608a18e49f7f4cbe9c3
33e0e5962e66d1ce7c82595b0bca02808bbddc350a471425a2046aeb2a4e9260

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "33E0E5962E66D1CE7C82595B0BCA02808BBDDC350A471425A2046AEB2A4E9260"
Last-Modified: Thu, 10 Oct 2024 21:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6165
Expires: Fri, 11 Oct 2024 08:13:22 GMT
Date: Fri, 11 Oct 2024 06:30:37 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
af0d1cea6aa0671f0271828695f79be4
ae58030b5e611aa6a2a4b608a18e49f7f4cbe9c3
33e0e5962e66d1ce7c82595b0bca02808bbddc350a471425a2046aeb2a4e9260

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "33E0E5962E66D1CE7C82595B0BCA02808BBDDC350A471425A2046AEB2A4E9260"
Last-Modified: Thu, 10 Oct 2024 21:42:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6165
Expires: Fri, 11 Oct 2024 08:13:22 GMT
Date: Fri, 11 Oct 2024 06:30:37 GMT
Connection: keep-alive

energie.atw.hu/

88.151.96.4

538 B

URL
energie.atw.hu/
IP
88.151.96.4:0
ASN
#41075 ATW Internet Kft.

File type
HTML document, ASCII text
Size
538 B (538 bytes)
Hash
9a51488f559476c8638473b69d692040
8033299a867d64c1c5f76fd70e730380b83008e4
7c2aed99e48c3cb6299ec7d2d3762169113f526593f3333235cf4f581ced3d23

HTTP Headers

GET / HTTP/1.1
Host: energie.atw.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Oct 2024 06:30:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive

energie.atw.hu/speed.exe

88.151.96.4

200 OK

565 B

URL User Request GET HTTP/1.1
energie.atw.hu/speed.exe
IP
88.151.96.4:80
ASN
#41075 ATW Internet Kft.

File type
HTML document, ASCII text
Size
565 B (565 bytes)
Hash
1e23b7454aee392835924a05622b4399
15c4b4f9492ce86636f354951de7172598bd00fb
ca30eecf92cbb8cd0ba42800beef95e9ddb4b5750e30c6465ce059e8193d3bd8

HTTP Headers

GET /speed.exe HTTP/1.1
Host: energie.atw.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Oct 2024 06:30:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive

energie.atw.hu/favicon.ico

88.151.96.4

200 OK

727 B

URL GET HTTP/1.1
energie.atw.hu/favicon.ico
IP
88.151.96.4:80
ASN
#41075 ATW Internet Kft.

Requested by
http://energie.atw.hu/speed.exe

File type
HTML document, ASCII text
Size
727 B (727 bytes)
Hash
952026abb9d79f3e4a737a58dbcc771f
b96bed0089c456d845d110232c44c370fc4bf597
c01cd6a3a0f928e9e1f4f10419848df3c11bc8e0c998e6c9df7d29cd4b9cc4a4

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: energie.atw.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://energie.atw.hu/speed.exe
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Oct 2024 06:30:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive

f.atw.hu/reklam.php?ad=energie&kat=15

88.151.96.4

200 OK

6.2 kB

URL GET HTTP/1.1
f.atw.hu/reklam.php?ad=energie&kat=15
IP
88.151.96.4:80
ASN
#41075 ATW Internet Kft.

Requested by
http://energie.atw.hu/speed.exe

File type
HTML document, Unicode text, UTF-8 text, with very long lines (358)
Size
6.2 kB (6164 bytes)
Hash
9ad7118479cc47cea65149efc0d36420
8e48b9b3eec03d4c05101a3fb88be13c1c9a49e2
fa61d21aff217a2e1d5ff56ff8ca264a44c6d340e6d8272a278d70ec439936f3

HTTP Headers

GET /reklam.php?ad=energie&kat=15 HTTP/1.1
Host: f.atw.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://energie.atw.hu/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Oct 2024 06:30:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive

o.pki.goog/wr2

142.250.74.67

472 B

URL
o.pki.goog/wr2
IP
142.250.74.67:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b74d02ee468ecb8de4d84cae6c73ca8f
2199588b103b772ac77a1fbab0c057dda28c81c8
664143d940fa002d8ad7f042d8ad799565503f5528c974972efef5125fa2962c

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 11 Oct 2024 06:30:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.67

472 B

URL
o.pki.goog/wr2
IP
142.250.74.67:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b74d02ee468ecb8de4d84cae6c73ca8f
2199588b103b772ac77a1fbab0c057dda28c81c8
664143d940fa002d8ad7f042d8ad799565503f5528c974972efef5125fa2962c

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 11 Oct 2024 06:30:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

f.atw.hu/animate.css

88.151.96.4

200 OK

72 kB

URL GET HTTP/1.1
f.atw.hu/animate.css
IP
88.151.96.4:80
ASN
#41075 ATW Internet Kft.

Requested by
http://f.atw.hu/reklam.php?ad=energie&kat=15

File type
ASCII text
Size
72 kB (72259 bytes)
Hash
07f146141537e04ee282a965d8053198
5bac0162dbfcfd0c701b8d0848411a288c27a2c2
d34c3af0d3b74cbb878ca4472668ebae02410ed1bfe8e85b244bb582d1dcb2ea

HTTP Headers

GET /animate.css HTTP/1.1
Host: f.atw.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f.atw.hu/reklam.php?ad=energie&kat=15
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Oct 2024 06:30:38 GMT
Content-Type: text/css
Content-Length: 72259
Last-Modified: Fri, 01 Jul 2016 12:52:04 GMT
Connection: keep-alive
Accept-Ranges: bytes

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.170

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
http://f.atw.hu/reklam.php?ad=energie&kat=15
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint58:48:CD:9D:CD:36:2C:BF:35:F8:E0:82:73:2B:F8:79:64:BB:AE:F7
ValidityMon, 16 Sep 2024 09:34:31 GMT - Mon, 09 Dec 2024 09:34:30 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f.atw.hu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Oct 2024 11:04:50 GMT
expires: Fri, 10 Oct 2025 11:04:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 69948
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

f.atw.hu/magicdental.jpg

88.151.96.4

200 OK

53 kB

URL GET HTTP/1.1
f.atw.hu/magicdental.jpg
IP
88.151.96.4:80
ASN
#41075 ATW Internet Kft.

Requested by
http://f.atw.hu/reklam.php?ad=energie&kat=15

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1456x180, components 3
Size
53 kB (53292 bytes)
Hash
100960f912c611729d279006a6699831
b6f6d74814ba654987332e63af462503ef015172
04fa159466f336ce6e0fd46d08d2891b0d40b1af7e25c7bb57a7252abbeeb634

HTTP Headers

GET /magicdental.jpg HTTP/1.1
Host: f.atw.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://f.atw.hu/reklam.php?ad=energie&kat=15
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Oct 2024 06:30:38 GMT
Content-Type: image/jpeg
Content-Length: 53292
Last-Modified: Sat, 23 Oct 2021 20:14:44 GMT
Connection: keep-alive
Accept-Ranges: bytes

atw.hu/img/atw-logo-3d-md.png

94.125.176.29

200 OK

6.6 kB

URL GET HTTP/2
atw.hu/img/atw-logo-3d-md.png
IP
94.125.176.29:443
ASN
#41075 ATW Internet Kft.

Requested by
http://f.atw.hu/reklam.php?ad=energie&kat=15
Certificate
IssuerLet's Encrypt
Subjectatw.hu
Fingerprint67:BC:15:D1:97:AE:74:5D:D6:B1:0F:52:6C:89:25:25:1A:E8:1B:A7
ValiditySun, 29 Sep 2024 03:09:56 GMT - Sat, 28 Dec 2024 03:09:55 GMT

File type
PNG image data, 132 x 40, 8-bit/color RGBA, non-interlaced
Size
6.6 kB (6577 bytes)
Hash
5e6bdadfb8c3d7a7be411acc348dfed9
7a67a3d40a04564f7c51cfe4b871640b913004c1
d781ce5460d38648aa488ca9ca818b451552a3ab77de1c79434c87942a0c752b

HTTP Headers

GET /img/atw-logo-3d-md.png HTTP/1.1
Host: atw.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f.atw.hu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Fri, 11 Oct 2024 06:30:38 GMT
content-type: image/png
content-length: 6577
last-modified: Mon, 23 Sep 2024 07:31:56 GMT
etag: "19b1-622c462283300"
accept-ranges: bytes
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.67

472 B

URL
o.pki.goog/wr2
IP
142.250.74.67:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b74d02ee468ecb8de4d84cae6c73ca8f
2199588b103b772ac77a1fbab0c057dda28c81c8
664143d940fa002d8ad7f042d8ad799565503f5528c974972efef5125fa2962c

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 11 Oct 2024 06:30:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.67

472 B

URL
o.pki.goog/wr2
IP
142.250.74.67:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
b74d02ee468ecb8de4d84cae6c73ca8f
2199588b103b772ac77a1fbab0c057dda28c81c8
664143d940fa002d8ad7f042d8ad799565503f5528c974972efef5125fa2962c

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 11 Oct 2024 06:30:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.67

471 B

URL
o.pki.goog/wr2
IP
142.250.74.67:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
041a0501f94ec4780b8408ad138c0fec
865e74d720c392ffd2cb156915490ae2cb7fd9e4
f6509a8b48e603926161a649bbfe74690832283cd79596026f1de2f106d1c736

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 11 Oct 2024 06:30:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7Ml2xME.woff2

142.250.74.163

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7Ml2xME.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
http://f.atw.hu/reklam.php?ad=energie&kat=15
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint0B:BA:7B:D2:D9:02:2E:7F:5C:C7:1F:18:F2:A7:76:44:D1:22:07:2B
ValidityMon, 16 Sep 2024 09:34:31 GMT - Mon, 09 Dec 2024 09:34:30 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15432, version 1.0
Size
15 kB (15432 bytes)
Hash
8df389c44ed230284e5ec9ac4e59ecaf
f6fad6db1b9c38bc5b822a6f45ade4bf915395c1
19b4eef14cd5725dfa6d98ec5a021dbcbcffc607e185693f1a2099016130d015

HTTP Headers

GET /s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7Ml2xME.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://f.atw.hu
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Oct 2024 10:58:30 GMT
expires: Fri, 10 Oct 2025 10:58:30 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:45:33 GMT
content-type: font/woff2
age: 70329
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.67

471 B

URL
o.pki.goog/wr2
IP
142.250.74.67:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
041a0501f94ec4780b8408ad138c0fec
865e74d720c392ffd2cb156915490ae2cb7fd9e4
f6509a8b48e603926161a649bbfe74690832283cd79596026f1de2f106d1c736

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 11 Oct 2024 06:30:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

users.atw.hu/energie/speed.exe

88.151.96.4

200 OK

3.1 MB

URL GET HTTP/1.1
users.atw.hu/energie/speed.exe
IP
88.151.96.4:80
ASN
#41075 ATW Internet Kft.

Requested by
http://energie.atw.hu/speed.exe

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
Size
3.1 MB (3121152 bytes)
Hash
bc1c4018387584273e75b517af0cee33
0ceeb4dc196bf4eaa5324128e2ba323f3444c697
4164964e0b39819a8fe9f9842be44fa587b9fe0419003c1969d0945850af9087

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/73

HTTP Headers

GET /energie/speed.exe HTTP/1.1
Host: users.atw.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://energie.atw.hu/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 11 Oct 2024 06:30:38 GMT
Content-Type: application/octet-stream
Content-Length: 3121152
Last-Modified: Sun, 25 Jan 2004 09:42:47 GMT
Connection: keep-alive
Accept-Ranges: bytes

fonts.googleapis.com/css?family=Dosis:200

142.250.74.106

200 OK

8.7 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Dosis:200
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://f.atw.hu/reklam.php?ad=energie&kat=15
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint58:48:CD:9D:CD:36:2C:BF:35:F8:E0:82:73:2B:F8:79:64:BB:AE:F7
ValidityMon, 16 Sep 2024 09:34:31 GMT - Mon, 09 Dec 2024 09:34:30 GMT

File type
gzip compressed data, max compression
Size
8.7 kB (8653 bytes)
Hash
291dd2bb35509b0f26e091f1462bc4f9
4dd631781a1fe855ab8fb7ec1d29f2236e190d3a
8a7c1c1edd6d13dfefacb40faeb69c57e85303eff916c4d2ee33c70acaf6ab41

HTTP Headers

GET /css?family=Dosis:200 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://f.atw.hu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 11 Oct 2024 06:30:38 GMT
date: Fri, 11 Oct 2024 06:30:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (26)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers