Report - zahidwebgames.ucoz.com/zahid/zahid

Report Overview

Visited public
2024-08-11 01:31:28
Tags
URL
zahidwebgames.ucoz.com/zahid/zahid_editor.zip
Finishing URL
about:privatebrowsing
IP / ASN
192.243.57.17
#39572 DataWeb Global Group B.V.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zahidwebgames.ucoz.com	unknown				499 B	1.5 MB	192.243.57.17
r10.o.lencr.org	unknown				2.0 kB	5.3 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
zahidwebgames.ucoz.com/zahid/zahid_editor.zip
IP
192.243.57.17
ASN
#39572 DataWeb Global Group B.V.

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
1.5 MB (1503544 bytes)
Hash
8c0d5bc0941579497b79d4045ba3c998
62dcc4123bdd5efa07a3c5874b0c0795b617fea6
7ce0b948263f5c171f883fff990515144a25f4edfbf1250760872cb8292ff87b

Archive (12)

Filename

Md5

File type

ccppicon.ico.deploy

59ac55b9dfa85759fc6ab90fc266e3d5

MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel

csharpicon.ico.deploy

bd858d721651f550ab655920b7cc7208

MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel

htmlicon.ico.deploy

063df6051979279a5355a34c581f284e

MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel

Iconarchive-Red-Orb-Alphabet-Letter-Z.ico.deploy

14849e945006c9e65f4da6e8e9c5b3bb

MS Windows icon resource - 8 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel

Sbstnblnd-Plateau-Apps-text-editor.ico.deploy

a305a297628c522a6f03e4c15d7d4c75

MS Windows icon resource - 9 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel

vbicon.ico.deploy

1401d8da0763e9b38e3786e92b3d6c7c

MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel

Zahid Editor.application

902c5e2535fd64da43448f7f582e3193

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (3683)

Zahid Editor.exe.config.deploy

357b302903f3fd55c20ddf876835ae35

XML 1.0 document, ASCII text, with CRLF line terminators

Zahid Editor.exe.deploy

12c846c19110b6354f30760518f689b2

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Zahid Editor.exe.manifest

a992c58948caa6ab779c96f21bb48f7c

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (3647)

setup.exe

303ec7c04943437e13bace607d7b7276

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

Zahid Editor.application

902c5e2535fd64da43448f7f582e3193

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (3683)

JavaScript (0)

HTTP Transactions (7)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 5ba4a4d5001d3c1bb220558ffadb6288 35124980489553fa524dee96738aa3214321eb4f b4615115fb27e0022749b39770207b4428a6dcacb53544c8f811f55ef9eb288f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "B4615115FB27E0022749B39770207B4428A6DCACB53544C8F811F55EF9EB288F" Last-Modified: Thu, 08 Aug 2024 18:56:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17231 Expires: Sun, 11 Aug 2024 06:18:13 GMT Date: Sun, 11 Aug 2024 01:31:02 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash b278ebaf27c527785e85180da86b54f9 ee87bf3d735648b0734efe705977f9b86155fcbd f53b9b17675ce2f387b3fcff02c39ecc355e1fd81756731257c59ea22115c519 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "F53B9B17675CE2F387B3FCFF02C39ECC355E1FD81756731257C59EA22115C519" Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19091 Expires: Sun, 11 Aug 2024 06:49:13 GMT Date: Sun, 11 Aug 2024 01:31:02 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 9ee33ad49fc95cbec52887b67a3f8f92 a692164ae79e5d194dac7945b76eb493f261a103 f6e3ff7fe8c3e33cc9a5f443e3772734a7026ec834f48a39703f23467f33c23f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "F6E3FF7FE8C3E33CC9A5F443E3772734A7026EC834F48A39703F23467F33C23F" Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8046 Expires: Sun, 11 Aug 2024 03:45:08 GMT Date: Sun, 11 Aug 2024 01:31:02 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash e1cd74cbd513bcac7faf7147dd0e9db3 5c83e98e78beec3020f4942369d9c2365a7de76f dd403ef6d8531526826d75c9ceda54beea36b5c8b8a281297331818ac6336b23 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "DD403EF6D8531526826D75C9CEDA54BEEA36B5C8B8A281297331818AC6336B23" Last-Modified: Thu, 08 Aug 2024 18:27:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17525 Expires: Sun, 11 Aug 2024 06:23:07 GMT Date: Sun, 11 Aug 2024 01:31:02 GMT Connection: keep-alive`

	zahidwebgames.ucoz.com/zahid/zahid_editor.zip	192.243.57.17	200 OK	1.5 MB
URL User Request GET HTTP/1.1 zahidwebgames.ucoz.com/zahid/zahid_editor.zip IP 192.243.57.17:443 ASN #39572 DataWeb Global Group B.V. Certificate IssuerGoGetSSL Subject.ucoz.com Fingerprint96:6F:07:B6:80:32:06:1A:E4:87:DD:44:96:BA:DC:8C:B4:CD:2C:DC ValiditySun, 21 Jul 2024 00:00:00 GMT - Wed, 20 Aug 2025 23:59:59 GMT File type Zip archive data, at least v1.0 to extract, compression method=store Size 1.5 MB (1503544 bytes) Hash 8c0d5bc0941579497b79d4045ba3c998 62dcc4123bdd5efa07a3c5874b0c0795b617fea6 7ce0b948263f5c171f883fff990515144a25f4edfbf1250760872cb8292ff87b HTTP Headers `GET /zahid/zahid_editor.zip HTTP/1.1 Host: zahidwebgames.ucoz.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sun, 11 Aug 2024 01:31:03 GMT Content-Type: application/zip Content-Length: 1503544 Connection: keep-alive Keep-Alive: timeout=15 Last-Modified: Wed, 29 Jun 2016 05:29:26 GMT ETag: "57735cb6-16f138" Expires: Sat, 31 Aug 2024 01:31:03 GMT Cache-Control: max-age=1728000 X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash cb72b4c8c0043447fb191d29a2987907 b21349d4cefa64181af49f91f868ffffb136a54a eb81057e97fc772c3b55ff2d175797a88db6035f09ed472dcf8604e3c9434d1b HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "EB81057E97FC772C3B55FF2D175797A88DB6035F09ED472DCF8604E3C9434D1B" Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19170 Expires: Sun, 11 Aug 2024 06:50:34 GMT Date: Sun, 11 Aug 2024 01:31:04 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash cb72b4c8c0043447fb191d29a2987907 b21349d4cefa64181af49f91f868ffffb136a54a eb81057e97fc772c3b55ff2d175797a88db6035f09ed472dcf8604e3c9434d1b HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "EB81057E97FC772C3B55FF2D175797A88DB6035F09ED472DCF8604E3C9434D1B" Last-Modified: Thu, 08 Aug 2024 18:58:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19170 Expires: Sun, 11 Aug 2024 06:50:34 GMT Date: Sun, 11 Aug 2024 01:31:04 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (12)

JavaScript (0)

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers