Report - mail.decastle.com.au/full-work.zip

Report Overview

Submitted URL
mail.decastle.com.au/full-work.zip
IP
185.184.154.193
ASN
#38719 Dreamscape Networks Limited
Submitted
2024-04-26 07:36:33
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mail.decastle.com.au	unknown	unknown	2015-02-04	2023-08-31	488 B	5.5 kB	185.184.154.193

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
mail.decastle.com.au/full-work.zip
IP
185.184.154.193
ASN
#38719 Dreamscape Networks Limited

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
5.3 kB (5267 bytes)
Hash
9538bffc15a92cf979d2376348bd7ba3
04167ac8b7d38b60086c36bde7fabbf310db09ba
dedbf7983bfdd845c7d10b9caee082023704ae66fa0f52f71d7d63e632a23b24

Archive (8)

Modified	Filename	Size	Md5	File type
2022-08-29 17:19	._wp-content	170 B	d496e9aa2ffef9d8b4528350239cd202	AppleDouble encoded Macintosh file
2022-08-29 17:19	.DS_Store	8.2 kB	1a989abde363e170ee8d45bb8a0f6ec7	Apple Desktop Services Store
2022-08-29 17:19	._.DS_Store	170 B	25f7d3f70be866c284bb6b8bb161b91a	AppleDouble encoded Macintosh file
2021-09-28 14:56	._mu-plugins	170 B	d496e9aa2ffef9d8b4528350239cd202	AppleDouble encoded Macintosh file
2021-09-02 18:35	.DS_Store	6.1 kB	194577a7e20bdcc7afbb718f502c134c	Apple Desktop Services Store
2021-09-02 18:35	._.DS_Store	170 B	25f7d3f70be866c284bb6b8bb161b91a	AppleDouble encoded Macintosh file
2021-09-09 12:27	waf-custom-rules.php	3.4 kB	4866bbd993c089ccd332cd6d24584b5a	PHP script, ASCII text
2021-09-09 12:27	._waf-custom-rules.php	326 B	fb9bc615775fabe93ae7ad776739dcc6	AppleDouble encoded Macintosh file

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	mail.decastle.com.au/full-work.zip	185.184.154.193	200 OK	5.3 kB
URL User Request GET HTTP/2 mail.decastle.com.au/full-work.zip IP 185.184.154.193:443 ASN #38719 Dreamscape Networks Limited Certificate IssuerLet's Encrypt Subjectdecastle.com.au FingerprintE8:05:DC:77:11:B9:0E:44:C0:C5:21:09:D9:8F:21:BF:0C:D0:E3:5F ValiditySat, 02 Mar 2024 00:37:49 GMT - Fri, 31 May 2024 00:37:48 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 5.3 kB (5267 bytes) Hash 9538bffc15a92cf979d2376348bd7ba3 04167ac8b7d38b60086c36bde7fabbf310db09ba dedbf7983bfdd845c7d10b9caee082023704ae66fa0f52f71d7d63e632a23b24 HTTP Headers `GET /full-work.zip HTTP/1.1 Host: mail.decastle.com.au User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK last-modified: Fri, 02 Dec 2022 15:46:09 GMT accept-ranges: bytes content-length: 5267 content-type: application/zip date: Fri, 26 Apr 2024 07:36:20 GMT server: Apache X-Firefox-Spdy: h2`

mail.decastle.com.au/full-work.zip

185.184.154.193

200 OK

5.3 kB

URL User Request GET HTTP/2
mail.decastle.com.au/full-work.zip
IP
185.184.154.193:443
ASN
#38719 Dreamscape Networks Limited

Certificate
IssuerLet's Encrypt
Subjectdecastle.com.au
FingerprintE8:05:DC:77:11:B9:0E:44:C0:C5:21:09:D9:8F:21:BF:0C:D0:E3:5F
ValiditySat, 02 Mar 2024 00:37:49 GMT - Fri, 31 May 2024 00:37:48 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
5.3 kB (5267 bytes)
Hash
9538bffc15a92cf979d2376348bd7ba3
04167ac8b7d38b60086c36bde7fabbf310db09ba
dedbf7983bfdd845c7d10b9caee082023704ae66fa0f52f71d7d63e632a23b24

HTTP Headers

GET /full-work.zip HTTP/1.1
Host: mail.decastle.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Fri, 02 Dec 2022 15:46:09 GMT
accept-ranges: bytes
content-length: 5267
content-type: application/zip
date: Fri, 26 Apr 2024 07:36:20 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (8)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers