IP 69.174.170.84:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
GET / HTTP/1.1
Host: unora.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 26 Apr 2024 23:52:01 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
X-Powered-By: PHP/8.0.30
Location: http://unora.duckdns.org/dashboard/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
| unora.duckdns.org/dashboard/ | 69.174.170.84 | | 5.2 kB |
URL unora.duckdns.org/dashboard/ IP69.174.170.84:0
File typeHTML document, ASCII text, with very long lines (350) Hashd3b910556ac160f7baaeeebd6adcdaa6 c5936fda463b9d0228b5eb8e28d5a6ae1a021a78 f02ae208e27a55b6eeaebfb03b2af169aa7b0fcb5c2e24dcd1d61e039771b598
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
GET /dashboard/ HTTP/1.1
Host: unora.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 23:52:02 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Thu, 06 Apr 2023 08:57:36 GMT
ETag: "1443-5f8a719956000"
Accept-Ranges: bytes
Content-Length: 5187
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
|
| unora.duckdns.org/unora/Patcher2.exe | 69.174.170.84 | 200 OK | 803 kB |
URL User Request GET HTTP/1.1unora.duckdns.org/unora/Patcher2.exe IP69.174.170.84:80
File typePE32 executable (GUI) Intel 80386, for MS Windows, 4 sections Size803 kB (802816 bytes) Hashf5787615d8be54106e2d3b97531b3171 bafc42c7f90f10364bbd442708397111ca2c90e5 c119ecf8cd5accb4a575156d00ec00867f230b5a27ef4385df714d88a467f632
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain | | VirusTotal | suspicious | |
GET /unora/Patcher2.exe HTTP/1.1
Host: unora.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 23:52:02 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Fri, 09 Oct 2009 01:12:14 GMT
ETag: "c4000-47576452cd780"
Accept-Ranges: bytes
Content-Length: 802816
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-msdownload
|