Overview

URL thelastdrakkar.com/dist/LD_stable_447.exe
IP188.40.51.83
ASNAS24940 Hetzner Online GmbH
Location Germany
Report completed2018-05-05 05:34:55 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-05-05 2 thelastdrakkar.com/dist/LD_stable_447.exe Malware
2018-05-05 2 thelastdrakkar.com/dist/LD_stable_447.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 188.40.51.83

Date UQ / IDS / BL URL IP
2019-03-23 11:53:55 +0100
0 - 2 - 1 aiwo.pl/files/abw.exe 188.40.51.83
2019-03-04 13:18:21 +0100
0 - 0 - 2 ahead-consulting.pl/ 188.40.51.83
2018-11-28 18:56:08 +0100
0 - 0 - 1 www.kartteam.pl/073ff9c8d76b4c16b55ea620eaede (...) 188.40.51.83
2018-07-25 13:08:50 +0200
0 - 0 - 2 thelastdrakkar.com/dist/Aktualizacja%20kart%2 (...) 188.40.51.83
2018-05-09 16:21:21 +0200
0 - 0 - 0 www.kanon.biz.pl/ 188.40.51.83
2018-05-05 09:26:26 +0200
0 - 0 - 2 thelastdrakkar.com/dist/LD_beta_478.exe 188.40.51.83
2018-05-05 05:45:47 +0200
0 - 0 - 2 thelastdrakkar.com/dist/LD_beta_478.exe 188.40.51.83
2018-05-03 15:45:58 +0200
0 - 0 - 0 teatrdimmi.com/ 188.40.51.83
2018-02-25 00:19:31 +0100
0 - 0 - 1 ddapartamentkrakow.pl/inc/sdf/content/fi_scri (...) 188.40.51.83
2018-02-19 17:50:54 +0100
0 - 0 - 0 security-project.pl 188.40.51.83

Last 10 reports on ASN: AS24940 Hetzner Online GmbH

Date UQ / IDS / BL URL IP
2019-03-24 19:37:06 +0100
0 - 0 - 30 mail.spinecon.com/ 78.46.83.112
2019-03-24 19:32:56 +0100
0 - 0 - 1 download7.freefiles-8.de/freeware/48817/50332 (...) 5.9.179.77
2019-03-24 19:32:56 +0100
0 - 3 - 1 download7.freefiles-3.de/chipeu/pl/155457/Era (...) 5.9.179.77
2019-03-24 19:32:53 +0100
0 - 0 - 1 download7.freefiles-8.de/freeware/27672/8292/ (...) 5.9.179.77
2019-03-24 19:32:52 +0100
0 - 3 - 1 download7.freefiles-8.de/freeware/68412/17598 (...) 5.9.179.77
2019-03-24 19:32:51 +0100
0 - 0 - 1 download7.freefiles-8.de/freeware/7357/27455/ (...) 5.9.179.77
2019-03-24 19:32:47 +0100
0 - 3 - 1 download7.freefiles-8.de/freeware/27614/8270/ (...) 5.9.179.77
2019-03-24 19:32:44 +0100
0 - 3 - 1 download7.freefiles-8.de/freeware/43175/41986 (...) 5.9.179.77
2019-03-24 19:32:42 +0100
0 - 0 - 1 download7.freefiles-8.de/freeware/68412/17599 (...) 5.9.179.77
2019-03-24 19:32:41 +0100
0 - 3 - 1 download7.freefiles-19.de/lp/FullPageSlideDow (...) 5.9.179.77

Last 4 reports on domain: thelastdrakkar.com

Date UQ / IDS / BL URL IP
2018-07-25 13:08:50 +0200
0 - 0 - 2 thelastdrakkar.com/dist/Aktualizacja%20kart%2 (...) 188.40.51.83
2018-05-05 09:26:26 +0200
0 - 0 - 2 thelastdrakkar.com/dist/LD_beta_478.exe 188.40.51.83
2018-05-05 05:45:47 +0200
0 - 0 - 2 thelastdrakkar.com/dist/LD_beta_478.exe 188.40.51.83
2017-09-07 01:00:26 +0200
0 - 0 - 1 thelastdrakkar.com/ 188.40.51.83


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (6)


Request Response
                                        
                                            GET /dist/LD_stable_447.exe HTTP/1.1 
Host: thelastdrakkar.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         188.40.51.83
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sat, 05 May 2018 03:34:22 GMT
Server: Apache/2
Location: https://thelastdrakkar.com/dist/LD_stable_447.exe
Content-Length: 233
Keep-Alive: timeout=12, max=100000
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   233
Md5:    79ab5ec4dddedfae579f93ba167aa542
Sha1:   39d468a96939ba12aa3aca096b2b67a68749821e
Sha256: b730fe1a277d8575548371f11192772905d937ecc087de1d897e744bf108a53c

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: status.rapidssl.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=159644
Date: Sat, 05 May 2018 03:34:22 GMT
Etag: "5aecf2da-1d7"
Expires: Sun, 06 May 2018 23:55:06 GMT
Last-Modified: Fri, 04 May 2018 23:55:06 GMT
Server: nginx
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f6f02cb1047bf5eb326dcd2d9542594b
Sha1:   b71371a407fdef636b21b90674478d4a755a8926
Sha256: 89f3fcdf7a9cb36be5ee3ebe506f42e0f8f0f5d1021a6fa02d0b3ebc07621bb3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=162572
Date: Sat, 05 May 2018 03:34:23 GMT
Etag: "5aecda43-1d7"
Expires: Mon, 07 May 2018 00:35:50 GMT
Last-Modified: Fri, 04 May 2018 22:10:11 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    41424d6042c10fa95a276fd6f200775d
Sha1:   21a2c96ce9c9ae2d2e4f2dff3888a495a3a85ce4
Sha256: 173192ff687d4679130a12d1ff60891768bade7215bb9a97c5d3b76d8386f11e
                                        
                                            GET /dist/LD_stable_447.exe HTTP/1.1 
Host: thelastdrakkar.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         188.40.51.83
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sat, 05 May 2018 03:34:23 GMT
Server: Apache/2
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 212
Keep-Alive: timeout=12, max=100000
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   212
Md5:    c85593137e0f1414b54f7f6c62111cac
Sha1:   48ed71524d434fd3b070f95205a016408862243a
Sha256: d1a5a67c8e15babffc19bda1365295320ceab080c48d726477f92e31c6bceb98

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thelastdrakkar.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         188.40.51.83
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sat, 05 May 2018 03:34:23 GMT
Server: Apache/2
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 201
Keep-Alive: timeout=12, max=99999
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   201
Md5:    8693d10a2eced55f0f1a3ef1c82658de
Sha1:   e7839d052418515ce22019c6a2d5c1d62017e536
Sha256: dd36947557b4da93ea73bf4ea180065c99eb4e0ceb7f5c67545003fb27d8a61e
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thelastdrakkar.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         188.40.51.83
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Sat, 05 May 2018 03:34:26 GMT
Server: Apache/2
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 201
Keep-Alive: timeout=12, max=99998
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   201
Md5:    8693d10a2eced55f0f1a3ef1c82658de
Sha1:   e7839d052418515ce22019c6a2d5c1d62017e536
Sha256: dd36947557b4da93ea73bf4ea180065c99eb4e0ceb7f5c67545003fb27d8a61e