Report Overview

  1. Submitted URL

    213.167.214.246/winbox/winbox.exe

  2. IP

    213.167.214.246

    ASN

    #12389 Rostelecom

  3. Submitted

    2024-05-07 11:55:24

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
213.167.214.246unknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium213.167.214.246Sinkholed

ThreatFox

No alerts detected


Files detected

  1. URL

    213.167.214.246/winbox/winbox.exe

  2. IP

    213.167.214.246

  3. ASN

    #12389 Rostelecom

  1. File type

    PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, 8 sections

    Size

    126 kB (125952 bytes)

  2. Hash

    f07500cb51f4a5f166642993664f0a7a

    cf5d3a8a736dd9b647f605b92d969c94ba48b6ef

    Detections

    AnalyzerVerdictAlert
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
213.167.214.246/winbox/winbox.exe
213.167.214.246200 OK126 kB