Report Overview

  1. Submitted URL

    closehub.ru/files/%EF%BB%BF259_1.exe

  2. IP

    188.114.97.1

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-10-28 05:50:21

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-10T05:09:10Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-10T13:49:44Z
closehub.ruunknown2020-10-19T11:28:53Z2023-02-25T02:31:20Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-10T05:10:00Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-10T05:12:35Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-10T05:10:02Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-10T05:10:04Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns
SeverityIndicatorAlert
mediumclosehub.ruSinkholed

Quad9 DNS
SeverityIndicatorAlert
mediumclosehub.ruSinkholed

Files detected

  1. URL

    closehub.ru/files/%EF%BB%BF259_1.exe

  2. IP

    188.114.97.1

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    PE32 executable (console) Intel 80386, for MS Windows\012- data

    Size

    2.6 MB (2590932 bytes)

  2. Hash

    7384eb7cc0c53a5b1f1633270ad40248

    baa4768ca91fa3ca8f26f825de63d657c6a17206

    Detections

    AnalyzerVerdictAlert
    VirusTotal50/72

JavaScript (0)

HTTP Transactions (18)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
closehub.ru/files/%EF%BB%BF259_1.exe
188.114.97.1200 OK2.6 MB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
push.services.mozilla.com/
54.187.102.159101 Switching Protocols0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdbcff2ea-8593-4bcf-b1fc-9436dff0e1a5.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg
34.120.237.76200 OK8.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7425e2fe-72f2-47ed-8c24-ca3882b64ca1.jpeg
34.120.237.76200 OK4.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a4f2e78-4c98-4f44-b823-f9f9c3850dab.jpeg
34.120.237.76200 OK8.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F763d669f-e7a7-4a98-adaf-5316f96ef18e.jpeg
34.120.237.76200 OK7.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ee9a743-41f5-42f0-855e-53c4f9175a44.jpeg
34.120.237.76200 OK8.3 kB