Report - www.crackspider.net/setting.xls

Report Overview

Visitedpublic

2023-12-04 12:24:48

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
www.crackspider.net	unknown	2003-04-21	2016-08-20 11:44:52	2023-12-03 19:29:45	785 B	632 B	45.63.71.7

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-04 12:24:37	high	Client IP	45.63.71.7	ET MALWARE Possible Worm W32.Svich or Other Infection Request for setting.xls

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

www.crackspider.net/setting.xls

45.63.71.7

123 B

URL HTTP

www.crackspider.net/setting.xls

IP / ASN

45.63.71.7

#20473 AS-CHOOPA

Requested byN/A

Resource Info

File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

First Seen2023-03-10

Last Seen2025-08-05

Times Seen23637

Size123 B (123 bytes)

MD51b7c22a214949975556626d7217e9a39

SHA1d01c97e2944166ed23e47e4a62ff471ab8fa031f

SHA256340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87

Detections

Analyzer	Verdict	Alert
suricata	high	ET MALWARE Possible Worm W32.Svich or Other Infection Request for setting.xls

HTTP Headers

GET /setting.xls HTTP/1.1
Host: www.crackspider.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 04 Dec 2023 12:24:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip

www.crackspider.net/favicon.ico

45.63.71.7

123 B

URL HTTP

www.crackspider.net/favicon.ico

IP / ASN

45.63.71.7

#20473 AS-CHOOPA

Requested byN/A

Resource Info

File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

First Seen2023-03-10

Last Seen2025-08-05

Times Seen23637

Size123 B (123 bytes)

MD51b7c22a214949975556626d7217e9a39

SHA1d01c97e2944166ed23e47e4a62ff471ab8fa031f

SHA256340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.crackspider.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.crackspider.net/setting.xls
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 04 Dec 2023 12:24:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip