Report - l4d2.cc/dlq/l4d2dlq.exe

Report Overview

Submitted URL
l4d2.cc/dlq/l4d2dlq.exe
IP
138.113.56.12
ASN
#54994 QUANTILNETWORKS
Submitted
2023-06-02 01:46:54
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
l4d2.cc	unknown	unknown	No data	No data	655 B	923 B	138.113.36.169
www.l4d2.cc	unknown	2013-06-25	2014-12-20	2023-01-01	2.4 kB	83 kB	138.113.56.12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-02 01:46:37	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-02 01:46:37	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-02 01:46:40	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-02 01:46:40	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

	URL	IP	Response	Size
	l4d2.cc/	138.113.36.169		162 B
URL l4d2.cc/ IP 138.113.36.169:0 ASN #54994 QUANTILNETWORKS File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 162 B (162 bytes) Hash 4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a HTTP Headers `GET / HTTP/1.1 Host: l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Date: Fri, 02 Jun 2023 01:46:41 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Server: nginx Location: http://www.l4d2.cc/ X-Via: 1.1 PS-AMS-01bF296:9 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a00_PS-AMS-01bF296_44625-22589`

	l4d2.cc/dlq/l4d2dlq.exe	138.113.36.169	301 Moved Permanently	162 B
URL User Request GET HTTP/1.1 l4d2.cc/dlq/l4d2dlq.exe IP 138.113.36.169:80 ASN #54994 QUANTILNETWORKS File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 162 B (162 bytes) Hash 4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a HTTP Headers `GET /dlq/l4d2dlq.exe HTTP/1.1 Host: l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Date: Fri, 02 Jun 2023 01:46:41 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Server: nginx Location: http://www.l4d2.cc/dlq/l4d2dlq.exe X-Via: 1.1 PS-AMS-01bF296:9 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a01_PS-AMS-01bF296_44841-14903`

	www.l4d2.cc/	138.113.56.12		11 kB
URL www.l4d2.cc/ IP 138.113.56.12:0 ASN #54994 QUANTILNETWORKS File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators Size 11 kB (11067 bytes) Hash 92083d973a5eb7a17a3bdb0d7c13fea3 ec739bcccb189ac42f063a122cb2b56b1ad4fd03 1d61eb0ecad74cda2788555f49ab2ac519d4a4a145262d80352fadcf9d208d4a HTTP Headers `GET / HTTP/1.1 Host: www.l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 02 Jun 2023 01:46:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Cache-Control: private X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Encoding: gzip X-Via: 1.1 PS-HND-01s8218:0 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a03_PS-HND-01hPI14_28727-36163`

	www.l4d2.cc/dlq/l4d2dlq.exe	138.113.56.12	404 Not Found	1.2 kB
URL User Request GET HTTP/1.1 www.l4d2.cc/dlq/l4d2dlq.exe IP 138.113.56.12:80 ASN #54994 QUANTILNETWORKS File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Size 1.2 kB (1185 bytes) Hash 8b2c010a223046e808393ca85633da1a 44bdaa40d50a00fb6585a4f8023eed03dda9552d 73fbbeb7c62bfd796998843e5d72ec2cc1660cc3a26f5553d5d934e019067bb0 HTTP Headers `GET /dlq/l4d2dlq.exe HTTP/1.1 Host: www.l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 02 Jun 2023 01:46:44 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Server: nginx X-Powered-By: ASP.NET Content-Encoding: gzip X-Via: 1.1 PS-HND-01s8218:0 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a03_PS-HND-01hPI14_27731-23815`

	www.l4d2.cc/skinnew/css/public.css	138.113.36.169	200 OK	1.6 kB
URL GET HTTP/1.1 www.l4d2.cc/skinnew/css/public.css IP 138.113.36.169:80 ASN #54994 QUANTILNETWORKS Requested by http://www.l4d2.cc/dlq/l4d2dlq.exe File type Unicode text, UTF-8 text, with CRLF line terminators Size 1.6 kB (1570 bytes) Hash 2f7bbfd0054a878ff9e32efb39a9d830 7b38a9425415e7f0528c18b8124025cbc8d4f50d e7ed71af5aecfaef5d2475fe1fd94eb2d7bd7de63a4aee08c3aff80be4e5a9b9 HTTP Headers `GET /skinnew/css/public.css HTTP/1.1 Host: www.l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.l4d2.cc/dlq/l4d2dlq.exe Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 02 Jun 2023 01:46:44 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Server: nginx Last-Modified: Wed, 20 Oct 2021 08:28:38 GMT ETag: W/"4b1e6d7b8cc5d71:0" X-Powered-By: ASP.NET, ARR/3.0, ASP.NET Content-Encoding: gzip X-Via: 1.1 PS-AMS-01bF296:9 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a04_PS-AMS-01AYh98_53305-12090`

	www.l4d2.cc/skinnew/css/404.css	138.113.56.12	200 OK	443 B
URL GET HTTP/1.1 www.l4d2.cc/skinnew/css/404.css IP 138.113.56.12:80 ASN #54994 QUANTILNETWORKS Requested by http://www.l4d2.cc/dlq/l4d2dlq.exe File type ASCII text, with CRLF line terminators Size 443 B (443 bytes) Hash 24a72d6e1344accf0944564d3854ed7a 909902e6f4ebcf7dc112359cd7a292886e900cf3 f57f1676358d4dd54afafe98cb032645b645ba985a8c578904913982cbc5cc3f HTTP Headers `GET /skinnew/css/404.css HTTP/1.1 Host: www.l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.l4d2.cc/dlq/l4d2dlq.exe Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 02 Jun 2023 01:46:44 GMT Content-Type: text/css Content-Length: 443 Connection: keep-alive Server: nginx Last-Modified: Fri, 10 Mar 2023 06:58:12 GMT Accept-Ranges: bytes ETag: "e1dbf7ad1d53d91:0" X-Powered-By: ASP.NET, ARR/3.0, ASP.NET X-Via: 1.1 PS-HND-01s8218:0 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a04_PS-HND-01hPI14_27731-23823`

	www.l4d2.cc/skinnew/images//logo.png	138.113.36.169	200 OK	19 kB
URL GET HTTP/1.1 www.l4d2.cc/skinnew/images//logo.png IP 138.113.36.169:80 ASN #54994 QUANTILNETWORKS Requested by http://www.l4d2.cc/dlq/l4d2dlq.exe File type PNG image data, 248 x 60, 8-bit/color RGBA, non-interlaced\012- data Size 19 kB (19035 bytes) Hash a7bf899371ccd79055f693fd0d595d1c 02ba32fdb6ab4564c3fe78d631f7a0ad3935fb03 6bf8d0ed39912c373e1fbde8d275f85a46b61bb73e3531cd1fe01c68846eb8de HTTP Headers `GET /skinnew/images//logo.png HTTP/1.1 Host: www.l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.l4d2.cc/dlq/l4d2dlq.exe Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 02 Jun 2023 01:46:44 GMT Content-Type: image/png Content-Length: 19035 Connection: keep-alive Server: nginx Last-Modified: Thu, 17 Nov 2022 03:22:26 GMT Accept-Ranges: bytes ETag: "d4c846d133fad81:0" X-Powered-By: ASP.NET, ARR/3.0, ASP.NET X-Via: 1.1 PS-AMS-01bF296:9 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a04_PS-AMS-01AYh98_53305-12096`

	www.l4d2.cc/favicon.ico	138.113.56.12	404 Not Found	1.2 kB
URL GET HTTP/1.1 www.l4d2.cc/favicon.ico IP 138.113.56.12:80 ASN #54994 QUANTILNETWORKS Requested by http://www.l4d2.cc/dlq/l4d2dlq.exe File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Size 1.2 kB (1185 bytes) Hash 8b2c010a223046e808393ca85633da1a 44bdaa40d50a00fb6585a4f8023eed03dda9552d 73fbbeb7c62bfd796998843e5d72ec2cc1660cc3a26f5553d5d934e019067bb0 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: www.l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.l4d2.cc/dlq/l4d2dlq.exe Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Fri, 02 Jun 2023 01:46:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Server: nginx X-Powered-By: ASP.NET Content-Encoding: gzip X-Via: 1.1 PS-HND-01s8218:0 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a05_PS-HND-01hPI14_27731-23841`

	www.l4d2.cc/skinnew/images/404.png	138.113.36.169	200 OK	46 kB
URL GET HTTP/1.1 www.l4d2.cc/skinnew/images/404.png IP 138.113.36.169:80 ASN #54994 QUANTILNETWORKS Requested by http://www.l4d2.cc/dlq/l4d2dlq.exe File type PNG image data, 707 x 411, 8-bit/color RGBA, non-interlaced\012- data Size 46 kB (45924 bytes) Hash 8fd1ea83bec27f7228603278199c5227 eff17eaedfd1c0145113c661d74cde905c52ebe6 3ec575a08317e1cf9f9af3e3f88c2f9a5bde100ff0a75f27b8dc815785fa185d HTTP Headers `GET /skinnew/images/404.png HTTP/1.1 Host: www.l4d2.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.l4d2.cc/skinnew/css/404.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 02 Jun 2023 01:46:45 GMT Content-Type: image/png Content-Length: 45924 Connection: keep-alive Server: nginx Last-Modified: Fri, 10 Mar 2023 06:58:12 GMT Accept-Ranges: bytes ETag: "31cb2cae1d53d91:0" X-Powered-By: ASP.NET, ARR/3.0, ASP.NET X-Via: 1.1 PS-AMS-01bF296:9 (Cdn Cache Server V2.0) X-Ws-Request-Id: 64794a04_PS-AMS-01bF296_44424-37611`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1