Report - amd.kl.com.ua/AMD%20x64.exe

Report Overview

Submitted URL
amd.kl.com.ua/AMD%20x64.exe
IP
5.79.66.145
ASN
#60781 LeaseWeb Netherlands B.V.
Submitted
2023-06-06 03:31:01
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
9
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
amd.kl.com.ua	unknown	2015-02-14	2016-09-26	2019-04-22	399 B	4.9 kB	5.79.66.145
www.zzz.com.ua	unknown	2015-02-14	2015-09-12	2023-06-01	2.6 kB	1.5 MB	37.48.72.4

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-06 03:30:43	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-06 03:30:43	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-06 03:30:43	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-06 03:30:43	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-06 03:30:43	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-06 03:30:43	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-06 03:30:44	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-06 03:30:44	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-06 03:30:44	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	amd.kl.com.ua/AMD%20x64.exe	0 B	2023-03-07	2024-05-08
Pretty URL amd.kl.com.ua/AMD%20x64.exe IP 5.79.66.145 ASN #60781 LeaseWeb Netherlands B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-08 04:37:21 Times Seen37426942 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.zzz.com.ua/scripts/punycode.js	12 kB	2023-03-07	2024-04-29
Pretty URL www.zzz.com.ua/scripts/punycode.js IP 37.48.72.4 ASN #60781 LeaseWeb Netherlands B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:04:24 Last Seen2024-04-29 23:01:14 Times Seen595 Hash 28e8e88dcafc94a275ca58c0769cc395 519ab9ca6cd5a436bbbed4b7f48b710a3c347c9c e28d840d463c2c5f1d75f236d4dcd66198c28fb203b7139d8b8a8e95cb078264 Loading...

		Size	First Seen	Last Seen
	#1 Write - 96993d6144ab861e93740b53ebabddcf	13 B	2023-06-06	2023-06-06
Pretty Observations First Seen2023-06-06 05:31:03 Last Seen2023-06-06 05:31:03 Times Seen1 Hash 96993d6144ab861e93740b53ebabddcf 8fda3f9249aa3c1f535f99a5759848abc71a586e d772395928e69913370b98a521696202d7a731e12607e65fd69768ad84b0dda5 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	amd.kl.com.ua/AMD%20x64.exe	5.79.66.145	202 Accepted	4.7 kB
URL User Request GET HTTP/1.1 amd.kl.com.ua/AMD%20x64.exe IP 5.79.66.145:80 ASN #60781 LeaseWeb Netherlands B.V. File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- C source text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text Size 4.7 kB (4746 bytes) Hash 61e8036e7de6b32600c81572471055b7 236d5a88c5f78be4938ac7ecb0d2e4df7f019ea8 4bc845546559369349d289f3d23f294568c578793e259298d65bd0e810d0bf20 HTTP Headers `GET /AMD%20x64.exe HTTP/1.1 Host: amd.kl.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 202 Accepted Server: nginx Date: Tue, 06 Jun 2023 03:30:44 GMT Content-Type: text/html Content-Length: 4746 Connection: keep-alive Keep-Alive: timeout=50 ETag: "646c76a7-128a"`

	www.zzz.com.ua/scripts/punycode.js	37.48.72.4	200 OK	4.0 kB
URL GET HTTP/2 www.zzz.com.ua/scripts/punycode.js IP 37.48.72.4:443 ASN #60781 LeaseWeb Netherlands B.V. Requested by http://amd.kl.com.ua/AMD%20x64.exe Certificate IssuerLet's Encrypt Subjecttesting-zzz.zzz.com.ua Fingerprint10:99:66:DC:94:B4:B1:64:7F:DB:D9:81:70:A4:C3:8B:67:D0:43:CC ValiditySun, 30 Apr 2023 15:21:12 GMT - Sat, 29 Jul 2023 15:21:11 GMT File type C source, ASCII text Size 4.0 kB (3966 bytes) Hash 28e8e88dcafc94a275ca58c0769cc395 519ab9ca6cd5a436bbbed4b7f48b710a3c347c9c e28d840d463c2c5f1d75f236d4dcd66198c28fb203b7139d8b8a8e95cb078264 HTTP Headers `GET /scripts/punycode.js HTTP/1.1 Host: www.zzz.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://amd.kl.com.ua/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 06 Jun 2023 03:30:44 GMT content-type: application/x-javascript content-length: 3966 last-modified: Mon, 05 Jun 2023 12:32:56 GMT vary: Accept-Encoding etag: "647dd5f8-f7e" content-encoding: gzip expires: Thu, 06 Jul 2023 03:30:44 GMT cache-control: max-age=2592000 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=0 content-security-policy: frame-ancestors 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	www.zzz.com.ua/img/ZZZ-Darker.svg	37.48.72.4	200 OK	8.0 kB
URL GET HTTP/2 www.zzz.com.ua/img/ZZZ-Darker.svg IP 37.48.72.4:443 ASN #60781 LeaseWeb Netherlands B.V. Requested by http://amd.kl.com.ua/AMD%20x64.exe Certificate IssuerLet's Encrypt Subjecttesting-zzz.zzz.com.ua Fingerprint10:99:66:DC:94:B4:B1:64:7F:DB:D9:81:70:A4:C3:8B:67:D0:43:CC ValiditySun, 30 Apr 2023 15:21:12 GMT - Sat, 29 Jul 2023 15:21:11 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (8012), with no line terminators Size 8.0 kB (8012 bytes) Hash e6da59570253163e45a46f76c31169d2 ae8248fb70e08c1e3b94722bf0ae7e0528f6f221 d80a9994ff158c6b82b1cfa49e1410ed904612247c2d0b8ae631ca9a66657f0a HTTP Headers `GET /img/ZZZ-Darker.svg HTTP/1.1 Host: www.zzz.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://amd.kl.com.ua/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Tue, 06 Jun 2023 03:30:44 GMT content-type: image/svg+xml content-length: 8012 last-modified: Mon, 05 Jun 2023 12:32:54 GMT etag: "647dd5f6-1f4c" expires: Thu, 06 Jul 2023 03:30:44 GMT cache-control: max-age=2592000 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=0 content-security-policy: frame-ancestors 'self' accept-ranges: bytes X-Firefox-Spdy: h2`

	www.zzz.com.ua/img/7142-asset.svg	37.48.72.4	200 OK	14 kB
URL GET HTTP/2 www.zzz.com.ua/img/7142-asset.svg IP 37.48.72.4:443 ASN #60781 LeaseWeb Netherlands B.V. Requested by http://amd.kl.com.ua/AMD%20x64.exe Certificate IssuerLet's Encrypt Subjecttesting-zzz.zzz.com.ua Fingerprint10:99:66:DC:94:B4:B1:64:7F:DB:D9:81:70:A4:C3:8B:67:D0:43:CC ValiditySun, 30 Apr 2023 15:21:12 GMT - Sat, 29 Jul 2023 15:21:11 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (13721), with no line terminators Size 14 kB (13721 bytes) Hash c9464a99cc5f828177550bdc332f8e43 a3b4aed2744797328cf43a83e55fa35e7a203f11 0ee99ff06b263f05a0c4a624c029aa962d5bfbd3fd6bddf0aa741beb3ac0ca02 HTTP Headers `GET /img/7142-asset.svg HTTP/1.1 Host: www.zzz.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://amd.kl.com.ua/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Tue, 06 Jun 2023 03:30:44 GMT content-type: image/svg+xml content-length: 13721 last-modified: Mon, 05 Jun 2023 12:32:54 GMT etag: "647dd5f6-3599" expires: Thu, 06 Jul 2023 03:30:44 GMT cache-control: max-age=2592000 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=0 content-security-policy: frame-ancestors 'self' accept-ranges: bytes X-Firefox-Spdy: h2`

	www.zzz.com.ua/img/logo_zzz.png	37.48.72.4	200 OK	17 kB
URL GET HTTP/2 www.zzz.com.ua/img/logo_zzz.png IP 37.48.72.4:443 ASN #60781 LeaseWeb Netherlands B.V. Requested by http://amd.kl.com.ua/AMD%20x64.exe Certificate IssuerLet's Encrypt Subjecttesting-zzz.zzz.com.ua Fingerprint10:99:66:DC:94:B4:B1:64:7F:DB:D9:81:70:A4:C3:8B:67:D0:43:CC ValiditySun, 30 Apr 2023 15:21:12 GMT - Sat, 29 Jul 2023 15:21:11 GMT File type PNG image data, 207 x 70, 8-bit/color RGBA, non-interlaced\012- data Size 17 kB (16723 bytes) Hash 3e116c85b78b2b3db92c7358b8c07ac0 79e4ec613f64f9b2b7a70b2bfc03b3d0f72b9e52 d1e89276fb77c843c77a3488af886de1beaeea013f5e90563d7bc06658bb3cf4 HTTP Headers `GET /img/logo_zzz.png HTTP/1.1 Host: www.zzz.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://amd.kl.com.ua/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Tue, 06 Jun 2023 03:30:44 GMT content-type: image/png content-length: 16723 last-modified: Mon, 05 Jun 2023 12:32:54 GMT etag: "647dd5f6-4153" expires: Thu, 06 Jul 2023 03:30:44 GMT cache-control: max-age=2592000 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=0 content-security-policy: frame-ancestors 'self' accept-ranges: bytes X-Firefox-Spdy: h2`

	www.zzz.com.ua/img/404.png	37.48.72.4	200 OK	1.5 MB
URL GET HTTP/2 www.zzz.com.ua/img/404.png IP 37.48.72.4:443 ASN #60781 LeaseWeb Netherlands B.V. Requested by http://amd.kl.com.ua/AMD%20x64.exe Certificate IssuerLet's Encrypt Subjecttesting-zzz.zzz.com.ua Fingerprint10:99:66:DC:94:B4:B1:64:7F:DB:D9:81:70:A4:C3:8B:67:D0:43:CC ValiditySun, 30 Apr 2023 15:21:12 GMT - Sat, 29 Jul 2023 15:21:11 GMT File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data Size 1.5 MB (1475227 bytes) Hash ccfcab66de3f750162121183431968e5 0f61ed0bdb8d178990ca8373fe03c3eb489b3bda 9c368f38b9029a3b75dada14c34391b4a55993e7ae19288c3e00baed1b4dec7b HTTP Headers `GET /img/404.png HTTP/1.1 Host: www.zzz.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://amd.kl.com.ua/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Tue, 06 Jun 2023 03:30:44 GMT content-type: image/png content-length: 1475227 last-modified: Mon, 05 Jun 2023 12:32:54 GMT etag: "647dd5f6-16829b" expires: Thu, 06 Jul 2023 03:30:44 GMT cache-control: max-age=2592000 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=0 content-security-policy: frame-ancestors 'self' accept-ranges: bytes X-Firefox-Spdy: h2`

	www.zzz.com.ua/img/favicon.png	37.48.72.4	200 OK	1.1 kB
URL GET HTTP/2 www.zzz.com.ua/img/favicon.png IP 37.48.72.4:443 ASN #60781 LeaseWeb Netherlands B.V. Requested by http://amd.kl.com.ua/AMD%20x64.exe Certificate IssuerLet's Encrypt Subjecttesting-zzz.zzz.com.ua Fingerprint10:99:66:DC:94:B4:B1:64:7F:DB:D9:81:70:A4:C3:8B:67:D0:43:CC ValiditySun, 30 Apr 2023 15:21:12 GMT - Sat, 29 Jul 2023 15:21:11 GMT File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Size 1.1 kB (1073 bytes) Hash c9046151608981493d1de046bab8f347 4a765da653b9062d82a476874d5fe1fbc133fab4 74e7b5afd5ce9b2024e359b0b623b126442f0c2bb97ac26131f82b8a04ed6ca9 HTTP Headers `GET /img/favicon.png HTTP/1.1 Host: www.zzz.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://amd.kl.com.ua/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Tue, 06 Jun 2023 03:30:44 GMT content-type: image/png content-length: 1073 last-modified: Mon, 05 Jun 2023 12:32:54 GMT etag: "647dd5f6-431" expires: Thu, 06 Jul 2023 03:30:44 GMT cache-control: max-age=2592000 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=0 content-security-policy: frame-ancestors 'self' accept-ranges: bytes X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN