Report Overview
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
qu.ax | unknown | 2019-10-23 | 2019-12-22 | 2024-04-16 | 468 B | 5.1 MB | 104.244.72.27 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-16 | medium | qu.ax | Sinkholed |
Quad9 DNS
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-16 | medium | qu.ax | Sinkholed |
ThreatFox
No alerts detected
Files detected
URL
qu.ax/HOLN.zip
IP
104.244.72.27
ASN
#53667 PONYNET
File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
5.1 MB (5105112 bytes)
Hash
dcc351525a371bb6d67a1df4513170d3
161dd28181bafef6486577324f9b160db80aafa8
Archive (3)
Filename | Md5 | File type |
---|---|---|
simcityforum.com mail_hash_salt.txt | 60e9d01ca8cdf07680f9800b36c7c56a | ASCII text |
simcityforum.com user_hash_salt.txt | 69ef79dc0b48b811162bc2dcbf96b487 | ISO-8859 text |
simcityforum.com.sql | f1b9d32fa0d309d9bb099d460b805218 | ASCII text, with very long lines (1827), with CRLF, LF line terminators |
JavaScript (0)
No Javascripts found
No Javascripts found
No Javascripts found
HTTP Transactions (1)
URL | IP | Response | Size | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
qu.ax/HOLN.zip | 104.244.72.27 | 200 OK | 5.1 MB | ||||||||||
Detections
HTTP Headers
| |||||||||||||