Report - www.justattach.com/hello.txt

Report Overview

Submitted URL
www.justattach.com/hello.txt
IP
58.185.52.17
ASN
#3758 SingNet
Submitted
2024-05-07 08:13:58
Access
public
Website Title
justattach.com/hello.txt
Final URL
www.justattach.com/hello.txt
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.justattach.com	unknown	2007-12-13	2017-07-10	2020-03-30	934 B	12 kB	58.185.52.17

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.justattach.com/hello.txt
IP
58.185.52.17
ASN
#3758 SingNet

File type
PDF document, version 1.1, 0 pages
Size
9.7 kB (9741 bytes)
Hash
a1ddc9ebe19a3d43ec25889085ad3ed8
0fa681a24df1b6ee6960bf1098af9689cfb8a576
86a96ec03ba8242c1486456d67ee17f919128754846dbb3bdf5e836059091dba

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 46/64

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

www.justattach.com/hello.txt

58.185.52.17

200 OK

9.7 kB

URL User Request GET HTTP/2
www.justattach.com/hello.txt
IP
58.185.52.17:443
ASN
#3758 SingNet

Certificate
IssuerLet's Encrypt
Subjectjustattach.com
FingerprintF0:D5:80:B6:CD:6E:62:D3:F7:49:BF:02:C8:2D:05:D0:60:3A:F4:5D
ValidityTue, 30 Apr 2024 02:23:17 GMT - Mon, 29 Jul 2024 02:23:16 GMT

File type
PDF document, version 1.1, 0 pages
Size
9.7 kB (9741 bytes)
Hash
a1ddc9ebe19a3d43ec25889085ad3ed8
0fa681a24df1b6ee6960bf1098af9689cfb8a576
86a96ec03ba8242c1486456d67ee17f919128754846dbb3bdf5e836059091dba

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 46/64

HTTP Headers

GET /hello.txt HTTP/1.1
Host: www.justattach.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 27 Aug 2015 21:31:03 GMT
accept-ranges: bytes
etag: "80c595acfe1d01:0"
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
date: Tue, 07 May 2024 08:14:35 GMT
content-length: 9741
X-Firefox-Spdy: h2

www.justattach.com/favicon.ico

58.185.52.17

200 OK

1.5 kB

URL GET HTTP/2
www.justattach.com/favicon.ico
IP
58.185.52.17:443
ASN
#3758 SingNet

Requested by
https://www.justattach.com/hello.txt
Certificate
IssuerLet's Encrypt
Subjectjustattach.com
FingerprintF0:D5:80:B6:CD:6E:62:D3:F7:49:BF:02:C8:2D:05:D0:60:3A:F4:5D
ValidityTue, 30 Apr 2024 02:23:17 GMT - Mon, 29 Jul 2024 02:23:16 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.5 kB (1468 bytes)
Hash
7a47ec1a2b7a0e0a95dfac48616770bb
6aa60b317e1f9ecc2c91e6290d7b7c69af274b2e
af491f7100cb91417ae3b8a07248d704a9c3c373e947740d964db77ec9e1025b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.justattach.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.justattach.com/hello.txt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/x-icon
last-modified: Tue, 22 Dec 2020 09:58:13 GMT
accept-ranges: bytes
etag: "3a710f648d8d61:0"
x-frame-options: SAMEORIGIN
date: Tue, 07 May 2024 08:14:35 GMT
content-length: 1468
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers