Report - 62.60.226.64/public

Report Overview

Visited public
2025-02-09 10:17:11
Tags
URL
62.60.226.64/public_files/kjgjgfS.txt
Finishing URL
about:privatebrowsing
IP / ASN
62.60.226.64
#215939 Valery Smoliar
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
62.60.226.64	unknown	unknown	No data	No data	419 B	174 kB	62.60.226.64

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-09 10:16:41	high	62.60.226.64	Client IP	ET EXPLOIT_KIT Unknown EK Landing Feb 16 2015 b64 3 M1

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-02-09	medium	62.60.226.64/public_files/kjgjgfS.txt	Detects an base64 encoded executable with reversed characters

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-02-09	medium	62.60.226.64	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

62.60.226.64/public_files/kjgjgfS.txt

62.60.226.64

200 OK

173 kB

URL
62.60.226.64/public_files/kjgjgfS.txt
IP
62.60.226.64:0
ASN
#215939 Valery Smoliar

File type
ASCII text, with very long lines (65536), with no line terminators
Size
173 kB (173152 bytes)
Hash
ecfc76f769f4d2fee882bc393713b449
f44df31044458554729371f45fde95c9ea565b79
8be9d3780ed6eb0b9007a72e0ae0028e84dd55d751ca7651a4469e34ac2b2a34

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	Detects an base64 encoded executable with reversed characters
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	ET EXPLOIT_KIT Unknown EK Landing Feb 16 2015 b64 3 M1

HTTP Headers

GET /public_files/kjgjgfS.txt HTTP/1.1
Host: 62.60.226.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 09 Feb 2025 10:16:41 GMT
Server: Apache/2.4.62 (CentOS Stream)
Last-Modified: Wed, 05 Feb 2025 16:57:52 GMT
ETag: "2a460-62d6806b18e4d"
Accept-Ranges: bytes
Content-Length: 173152
Content-Disposition: attachment
Content-Type: application/octet-stream
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (1)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers