Report - download.qt.io/official

Report Overview

Submitted URL
download.qt.io/official_releases/jom/jom.zip
IP
77.86.162.2
ASN
#29422 Telia Cygate Oy
Submitted
2024-04-20 02:55:56
Access
public
Website Title
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download.qt.io	681032	2013-10-05	2017-02-02	2024-04-17	498 B	1.6 kB	77.86.162.2
mirrors.dotsrc.org	411439	2003-04-15	2014-03-19	2024-04-18	512 B	1.7 MB	130.225.254.116

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
mirrors.dotsrc.org/qtproject/official_releases/jom/jom.zip
IP
130.225.254.116
ASN
#1835 FSKNET-DK Forskningsnettet - Danish network for Research and Education

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.7 MB (1696930 bytes)
Hash
4cd0e6fb721e063b24232bc9ecb6d130
5551d95151dc8a8658d5b8a7ce40c6f64a4697db
d533c1ef49214229681e90196ed2094691e8c4a0a0bef0b2c901debcb562682b

Archive (5)

Filename

Md5

File type

changelog.txt

4deb1e4ea18c5dae5ff63446b01dabbb

ASCII text, with CRLF line terminators

ibjom.bat

9928512dbcab8a23f711f7a360379505

DOS batch file, ASCII text, with CRLF line terminators

jom.exe

cbd781462a5768b21eb457f892e84afa

PE32+ executable (console) x86-64, for MS Windows, 7 sections

xgejom.bat

14ba8bc9f91f4a2395cf88c1caae3a12

DOS batch file, ASCII text, with CRLF line terminators

xgejom.xml

889bf543998d378eb004096bbc26dd9b

XML 1.0 document, ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

download.qt.io/official_releases/jom/jom.zip

77.86.162.2

250 B

URL
download.qt.io/official_releases/jom/jom.zip
IP
77.86.162.2:0
ASN
#29422 Telia Cygate Oy

File type
HTML document, ASCII text
Size
250 B (250 bytes)
Hash
2bd2d2670135a41e072aafde9c8ae91a
cb98f49f57ee5890affe356bc93a0445c066934f
6dcbc126479d0b585daa6b14cb5544ca6cc14db293528b66ea1232115e235795

HTTP Headers

GET /official_releases/jom/jom.zip HTTP/1.1
Host: download.qt.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Sat, 20 Apr 2024 02:55:18 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubdomains;
X-Prefix: 91.90.40.0/21
X-AS: 50304
X-MirrorBrain-Mirror: dotsrc.org
X-MirrorBrain-Realm: region
Link: <https://download.qt.io/official_releases/jom/jom.zip.meta4>; rel=describedby; type="application/metalink4+xml", <https://download.qt.io/official_releases/jom/jom.zip.torrent>; rel=describedby; type="application/x-bittorrent", <https://mirrors.dotsrc.org/qtproject/official_releases/jom/jom.zip>; rel=duplicate; pri=1; geo=dk, <https://qt-mirror.dannhauer.de/official_releases/jom/jom.zip>; rel=duplicate; pri=2; geo=de, <https://ftp.nluug.nl/languages/qt/official_releases/jom/jom.zip>; rel=duplicate; pri=3; geo=nl, <https://mirror.netcologne.de/qtproject/official_releases/jom/jom.zip>; rel=duplicate; pri=4; geo=de, <https://ftp.acc.umu.se/mirror/qt.io/qtproject/official_releases/jom/jom.zip>; rel=duplicate; pri=5; geo=se
Digest: MD5=TNDm+3IeBjskIyvJ7LbRMA==, SHA=VVHZUVHcioZY1binzkDG9kpGl9s=, SHA-256=1TPB70khQiloHpAZbtIJRpHoxKCgvvCyyQHevLViaCs=
Location: https://mirrors.dotsrc.org/qtproject/official_releases/jom/jom.zip
Content-Length: 250
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

mirrors.dotsrc.org/qtproject/official_releases/jom/jom.zip

130.225.254.116

1.7 MB

URL
mirrors.dotsrc.org/qtproject/official_releases/jom/jom.zip
IP
130.225.254.116:0
ASN
#1835 FSKNET-DK Forskningsnettet - Danish network for Research and Education

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.7 MB (1696930 bytes)
Hash
4cd0e6fb721e063b24232bc9ecb6d130
5551d95151dc8a8658d5b8a7ce40c6f64a4697db
d533c1ef49214229681e90196ed2094691e8c4a0a0bef0b2c901debcb562682b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

HTTP Headers

GET /qtproject/official_releases/jom/jom.zip HTTP/1.1
Host: mirrors.dotsrc.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sat, 20 Apr 2024 02:55:18 GMT
content-type: application/zip
content-length: 1696930
last-modified: Tue, 05 Sep 2023 12:36:25 GMT
etag: "64f720c9-19e4a2"
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (5)

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers