Report - 5s.pm/

Report Overview

Visitedpublic

2025-07-17 07:56:43

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
5s.pm	unknown	2022-05-21	2022-06-28	2025-05-30	891 B	510 B	80.78.24.30

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-07-17	medium	5s.pm/	Rule to detect the EICAR pattern
2025-07-17	medium	5s.pm/	Multi.EICAR.Not-a-virus

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-17	medium	5s.pm	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

GET 5s.pm/

80.78.24.30

200 OK

88 B

URL

5s.pm/

IP / ASN

80.78.24.30

#39287 ab stract ltd

Requested byN/A

Resource Info

File typeASCII text, with no line terminators

First Seen2024-10-17

Last Seen2025-08-01

Times Seen16

Size88 B (88 bytes)

MD566945541f49e28a5579d7425a42f4b5c

SHA1e3ed952cc7c102cb98341091db7b9f4012453491

SHA25645d4e3803b9d8ad5aaabb35d3b78b49e64d529be593584b2f350866c367668a4

Certificate Info

IssuerLet's Encrypt

Subject5s.pm

Fingerprint18:7A:81:B8:3D:D1:87:CA:CF:6B:1E:EF:E5:2D:C1:17:17:D3:08:05

ValiditySun, 25 May 2025 14:59:04 GMT - Sat, 23 Aug 2025 14:59:03 GMT

Detections

Analyzer	Verdict	Alert
Trellix Threat Reasearch YARA rules	malware	Rule to detect the EICAR pattern
Elastic Security YARA Rules	malware	Multi.EICAR.Not-a-virus
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 5s.pm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
alt-svc: h3=":443"; ma=2592000
content-type: text/plain; charset=utf-8
content-length: 88
date: Thu, 17 Jul 2025 07:56:20 GMT
X-Firefox-Spdy: h2

GET 5s.pm/favicon.ico

80.78.24.30

200 OK

88 B

URL

5s.pm/favicon.ico

IP / ASN

80.78.24.30

#39287 ab stract ltd

Requested byhttps://5s.pm/

Resource Info

File typeASCII text, with no line terminators

First Seen2024-10-17

Last Seen2025-08-01

Times Seen16

Size88 B (88 bytes)

MD566945541f49e28a5579d7425a42f4b5c

SHA1e3ed952cc7c102cb98341091db7b9f4012453491

SHA25645d4e3803b9d8ad5aaabb35d3b78b49e64d529be593584b2f350866c367668a4

Certificate Info

IssuerLet's Encrypt

Subject5s.pm

Fingerprint18:7A:81:B8:3D:D1:87:CA:CF:6B:1E:EF:E5:2D:C1:17:17:D3:08:05

ValiditySun, 25 May 2025 14:59:04 GMT - Sat, 23 Aug 2025 14:59:03 GMT

Detections

Analyzer	Verdict	Alert
Trellix Threat Reasearch YARA rules	malware	Rule to detect the EICAR pattern
Elastic Security YARA Rules	malware	Multi.EICAR.Not-a-virus
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 5s.pm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5s.pm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
alt-svc: h3=":443"; ma=2592000
content-type: text/plain; charset=utf-8
content-length: 88
date: Thu, 17 Jul 2025 07:56:21 GMT
X-Firefox-Spdy: h2