Report - parallel.rockvideos.at/n9h1k9gwt.gif

Report Overview

Submitted URL
parallel.rockvideos.at/n9h1k9gwt.gif
IP
85.124.51.103
ASN
#8412 T-Mobile Austria GmbH
Submitted
2024-04-20 12:51:56
Access
public
Website Title
n9h1k9gwt.gif (GIF Image)
Final URL
parallel.rockvideos.at/n9h1k9gwt.gif
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
parallel.rockvideos.at	unknown	unknown	2021-08-24	2024-04-14	954 B	534 kB	85.124.51.103

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
parallel.rockvideos.at/n9h1k9gwt.gif
IP
85.124.51.103
ASN
#8412 T-Mobile Austria GmbH

File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
Size
530 kB (530432 bytes)
Hash
831c361b1f54a876c98fb6bf3cd5d688
7a891d8553c874a3803df6a6a6436860e5d0de41
79a3a7441a371606291f8bd47216a503b27a38ec61ba7604c9ba2597a54cc3d8

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 54/68

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

parallel.rockvideos.at/n9h1k9gwt.gif

85.124.51.103

200 OK

530 kB

URL User Request GET HTTP/2
parallel.rockvideos.at/n9h1k9gwt.gif
IP
85.124.51.103:443
ASN
#8412 T-Mobile Austria GmbH

Certificate
IssuerLet's Encrypt
Subjectparallel.rockvideos.at
Fingerprint82:25:BA:D3:FB:A4:20:A2:0C:14:3B:3E:17:C5:8D:93:A3:A2:8B:E9
ValiditySun, 11 Feb 2024 03:47:06 GMT - Sat, 11 May 2024 03:47:05 GMT

File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
Size
530 kB (530432 bytes)
Hash
831c361b1f54a876c98fb6bf3cd5d688
7a891d8553c874a3803df6a6a6436860e5d0de41
79a3a7441a371606291f8bd47216a503b27a38ec61ba7604c9ba2597a54cc3d8

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 54/68

HTTP Headers

GET /n9h1k9gwt.gif HTTP/1.1
Host: parallel.rockvideos.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Fri, 21 Feb 2014 11:25:51 GMT
accept-ranges: bytes
content-length: 530432
cache-control: max-age=2592000
expires: Mon, 20 May 2024 12:51:31 GMT
content-type: image/gif
date: Sat, 20 Apr 2024 12:51:31 GMT
server: Apache
X-Firefox-Spdy: h2

parallel.rockvideos.at/favicon.ico

85.124.51.103

404 Not Found

3.4 kB

URL GET HTTP/2
parallel.rockvideos.at/favicon.ico
IP
85.124.51.103:443
ASN
#8412 T-Mobile Austria GmbH

Requested by
https://parallel.rockvideos.at/n9h1k9gwt.gif
Certificate
IssuerLet's Encrypt
Subjectparallel.rockvideos.at
Fingerprint82:25:BA:D3:FB:A4:20:A2:0C:14:3B:3E:17:C5:8D:93:A3:A2:8B:E9
ValiditySun, 11 Feb 2024 03:47:06 GMT - Sat, 11 May 2024 03:47:05 GMT

File type
HTML document, ASCII text, with very long lines (2374)
Size
3.4 kB (3379 bytes)
Hash
db9d40c7b35ad99ae77fa99a84491830
4176799284e71252bce06a437ea1530be5ee012d
83eecbc86312bcce21d8024ba07fa390e45cfd7dc15be15e53f644f3c31d5668

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: parallel.rockvideos.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://parallel.rockvideos.at/n9h1k9gwt.gif
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
last-modified: Wed, 13 Oct 2021 06:07:14 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 3379
content-type: text/html
date: Sat, 20 Apr 2024 12:51:32 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers