Report - nordmanalgorithms.com/wp-content/uploads/2023/11/decompiler.zip

Report Overview

Visited public
2023-11-28 12:41:53
Tags
URL
nordmanalgorithms.com/wp-content/uploads/2023/11/decompiler.zip
Finishing URL
about:privatebrowsing
IP / ASN
63.250.43.2
#22612 NAMECHEAP-NET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
nordmanalgorithms.com	unknown	2023-10-29	2023-11-03 18:35:35	2023-11-03 18:36:04	529 B	1.1 MB	63.250.43.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
nordmanalgorithms.com/wp-content/uploads/2023/11/decompiler.zip
IP
63.250.43.1
ASN
#22612 NAMECHEAP-NET

File type
Zip archive data, at least v1.0 to extract, compression method=deflate\012- data
Size
1.1 MB (1073641 bytes)
Hash
c57c9a83415ccb35f958d0127e9b3c8f
b29a853a88dc3f176db5c872e7be404e570b5f30
652c8648d0fd43555ac272eb3ba4614f72d0641b724bfc8ca927671ca9941a15

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/61

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

nordmanalgorithms.com/wp-content/uploads/2023/11/decompiler.zip

63.250.43.1

200 OK

1.1 MB

URL User Request GET HTTP/2
nordmanalgorithms.com/wp-content/uploads/2023/11/decompiler.zip
IP
63.250.43.1:443
ASN
#22612 NAMECHEAP-NET

Certificate
IssuerSectigo Limited
Subjectnordmanalgorithms.com
FingerprintC4:51:49:55:5B:A6:D1:AC:35:E9:6A:B6:08:E8:CC:44:F1:D9:A0:CC
ValiditySun, 29 Oct 2023 00:00:00 GMT - Mon, 28 Oct 2024 23:59:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=deflate\012- data
Size
1.1 MB (1073641 bytes)
Hash
c57c9a83415ccb35f958d0127e9b3c8f
b29a853a88dc3f176db5c872e7be404e570b5f30
652c8648d0fd43555ac272eb3ba4614f72d0641b724bfc8ca927671ca9941a15

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 3/61

HTTP Headers

GET /wp-content/uploads/2023/11/decompiler.zip HTTP/1.1
Host: nordmanalgorithms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 28 Nov 2023 12:41:34 GMT
content-type: application/zip
content-length: 1073641
last-modified: Wed, 22 Nov 2023 12:07:25 GMT
etag: "655deefd-1061e9"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers