Report Overview

  1. Submitted URL

    incotel.com.pk/10/data64_4.exe

  2. IP

    68.66.226.70

    ASN

    #55293 A2HOSTING

  3. Submitted

    2023-03-30 10:09:54

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    3

  3. Threat Detection Systems

    6

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-31T18:13:52Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-31T07:51:33Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-31T18:12:04Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-31T18:14:44Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-31T18:18:04Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-31T18:12:09Z
incotel.com.pkunknown2019-07-11T21:05:03Z2023-03-30T12:09:47Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
low 68.66.226.70Client IP
high 68.66.226.70Client IP
low 68.66.226.70Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumincotel.com.pk/10/data64_4.exeMalware

mnemonic secure dns
SeverityIndicatorAlert
mediumincotel.com.pkSinkholed

Quad9 DNS
SeverityIndicatorAlert
mediumincotel.com.pkSinkholed

ThreatFox

No alerts detected


Files detected

  1. URL

    incotel.com.pk/10/data64_4.exe

  2. IP

    68.66.226.70

  3. ASN

    #55293 A2HOSTING

  1. File type

    PE32 executable (console) Intel 80386, for MS Windows\012- data

    Size

    185 kB (184952 bytes)

  2. Hash

    79541ae15428d6aba1a370ff8572af41

    7908c44493707f812889222219c2d18e93a281df

    Detections

    AnalyzerVerdictAlert
    VirusTotal56/71

JavaScript (0)

HTTP Transactions (19)

URLIPResponseSize
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
incotel.com.pk/10/data64_4.exe
68.66.226.70200 OK185 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
push.services.mozilla.com/
52.39.16.79101 Switching Protocols0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8e1065-070f-4a75-9c06-c56522838c4e.jpeg
34.120.237.76200 OK8.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f7d2537-a0a5-4a19-9229-144648b886b8.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9230d52f-0316-48dd-9c8a-231c8091c313.jpeg
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85885238-8732-476a-b37c-1eac5dbc3e90.jpeg
34.120.237.76200 OK6.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK9.9 kB