Report Overview
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
db-postfach.info | unknown | unknown | No data | No data | 483 B | 1.6 MB | 104.21.87.46 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
db-postfach.info/DEUPDATE.zip
IP
104.21.87.46
ASN
#13335 CLOUDFLARENET
File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.6 MB (1613871 bytes)
Hash
ad1ede4f92f829d4398c34cae40c3575
64c6c905ca17fa6d70f37640bf40a01bc1ada1b1
Archive (56)
Filename | Md5 | File type |
---|---|---|
._DEUPDATE | 80ea4bcb40185729ec804f2c623fdd71 | AppleDouble encoded Macintosh file |
telegram.php | 15f99593d707dd1585da5320ccde2c42 | Unicode text, UTF-8 text |
._telegram.php | 7b2de14c0864606bdadd4e86175785b8 | AppleDouble encoded Macintosh file |
login.php | 3bb63bc929df9c54a6e8c9f415b8e988 | JavaScript source, Unicode text, UTF-8 text |
._login.php | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
404.php | 3d67642125a63711467c31fcee192841 | ASCII text |
._404.php | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
.DS_Store | 12138c928a51ed25d3547044f2369b77 | Apple Desktop Services Store |
._.DS_Store | b9a94cc8f4aac450fb21641eaf065c6d | AppleDouble encoded Macintosh file |
index.php | f5da469ec9a1a31907c15df060b75300 | PHP script, ASCII text |
._index.php | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
i.sh | 223bb69fbad40611573e2089e1a383c6 | Bourne-Again shell script, ASCII text executable |
._i.sh | 85afa5c243b8327bb3467140243dcefb | AppleDouble encoded Macintosh file |
super.php | b0106c76b1fe22d1674e361571c42db0 | PHP script, ASCII text |
._super.php | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
._uploads | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
end.php | a3615dfb3e3342daee46035ef3294c2d | JavaScript source, Unicode text, UTF-8 text |
._end.php | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
upload.php | d837863e84b99dd033706f88f0c445b4 | JavaScript source, Unicode text, UTF-8 text |
._upload.php | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
helper.php | 37159695e582ab2d1dce75a303d3268f | PHP script, ASCII text, with very long lines (1343) |
._helper.php | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
robots.txt | 9152d7f1724ed8fbcd2e0c87029f193c | ASCII text |
._robots.txt | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
Help.txt | 10e80fc9c0c834274e18aa8a7110b172 | ASCII text |
._Help.txt | 246c32b26a5b8af4d0d4d9f93de60f08 | AppleDouble encoded Macintosh file |
._assets | 4e575d923f1eb5a141ac13182c736d9d | AppleDouble encoded Macintosh file |
cc.php | 550aa2a1c8e7046d72c52440b0e97961 | JavaScript source, Unicode text, UTF-8 text |
._cc.php | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
.htaccess | cecc7af76601561820705a98e4c51b9b | ASCII text |
._.htaccess | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
.DS_Store | 2ab46d4c5937769c95a8d0a307586759 | Apple Desktop Services Store |
._.DS_Store | da4ca4d268a621fe2ec0df069760cf2f | AppleDouble encoded Macintosh file |
index.php | 14e24a38b5ee0bac2396cd0dbf288060 | PHP script, ASCII text |
._index.php | 246c32b26a5b8af4d0d4d9f93de60f08 | AppleDouble encoded Macintosh file |
.DS_Store | 63b127c918dc7ecfb9b34060055ad4a7 | Apple Desktop Services Store |
._.DS_Store | da4ca4d268a621fe2ec0df069760cf2f | AppleDouble encoded Macintosh file |
._css | 4e575d923f1eb5a141ac13182c736d9d | AppleDouble encoded Macintosh file |
._js | 4e575d923f1eb5a141ac13182c736d9d | AppleDouble encoded Macintosh file |
._img | 4e575d923f1eb5a141ac13182c736d9d | AppleDouble encoded Macintosh file |
antibot.php | 37858a073cd8945c621a9f1b5c381a03 | PHP script, ASCII text, with very long lines (1359), with CRLF line terminators |
._antibot.php | 62da13fa3b313382fe91e425deacfa39 | AppleDouble encoded Macintosh file |
style.css | 8b2af89c96a607fdf35b91d2ae86b685 | ASCII text |
._style.css | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
fonts.css | 921933eef9178946a9b29a967e139e6c | ASCII text |
._fonts.css | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
logo.gif | 2b6ee99accff432e8902895ad9cfa778 | GIF image data, version 89a, 140 x 140 |
._logo.gif | 4e575d923f1eb5a141ac13182c736d9d | AppleDouble encoded Macintosh file |
.DS_Store | 77ea8973ac5470b47ff951ef2ad9a7d0 | Apple Desktop Services Store |
._.DS_Store | ca0eb009296fe02fd6cb8f716aa0af75 | AppleDouble encoded Macintosh file |
helper.gif | 1897c9d6354a925b1f47f30074e7ccb5 | GIF image data, version 89a, 350 x 694 |
._helper.gif | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
trans.png | 1a0a0c52efa14740b190bb05fce4debb | PNG image data, 209 x 207, 8-bit gray+alpha, non-interlaced |
._trans.png | 2dcaeab977f23409bb367933ee9e8954 | AppleDouble encoded Macintosh file |
logo_2.png | e8ead09b44f29c3e9c49c61df1f8f24f | PNG image data, 2048 x 2048, 8-bit colormap, non-interlaced |
._logo_2.png | 4e575d923f1eb5a141ac13182c736d9d | AppleDouble encoded Macintosh file |
Detections
Analyzer | Verdict | Alert |
---|---|---|
VirusTotal | suspicious |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
db-postfach.info/DEUPDATE.zip | 104.21.87.46 | 200 OK | 1.6 MB | |||||||
Detections
HTTP Headers
| ||||||||||