Report - d4.driver.ru/-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe

Report Overview

Visited public
2023-09-21 07:15:05
Tags
Submit Tags
URL
d4.driver.ru/-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe
Finishing URL
d4.driver.ru/-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe
IP / ASN
85.112.121.27
#25478 iHome LLC
Title
d4.driver.ru/-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
d4.driver.ru	unknown	1999-01-10	2019-03-05 14:52:09	2023-09-19 18:19:31	1.4 kB	1.0 kB	85.112.121.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-21 07:14:45	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-09-21 07:14:47	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-09-21 07:14:55	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-09-21 07:14:55	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	GET d4.driver.ru/-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe	85.112.121.27	200 OK	501 B
URL User Request GET HTTP/2 d4.driver.ru/-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe IP 85.112.121.27:443 ASN #25478 iHome LLC Certificate IssuerLet's Encrypt Subjectdriver.ru Fingerprint93:97:64:0F:74:66:96:EE:03:F3:56:E8:E1:F9:FD:0D:6C:22:CD:E5 ValidityWed, 06 Sep 2023 13:40:49 GMT - Tue, 05 Dec 2023 13:40:48 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (316), with no line terminators Size 501 B (501 bytes) Hash dccf12ff5518bb8ede7caee9db1d0a95 1b8840def09016de08c06f6e449b3185c4638f51 e5bbcab64d4de2be780f4247c3f91b250a1f465b3db2fce24fc37f66630a4729 HTTP Headers GET /-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe HTTP/1.1 Host: d4.driver.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Thu, 21 Sep 2023 07:14:48 GMT content-type: text/html; charset=UTF-8 strict-transport-security: max-age=31536000; includeSubdomains; preload content-encoding: gzip X-Firefox-Spdy: h2`

	GET d4.driver.ru/favicon.ico	85.112.121.27	200 OK	57 B
URL GET HTTP/2 d4.driver.ru/favicon.ico IP 85.112.121.27:443 ASN #25478 iHome LLC Requested by https://d4.driver.ru/-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe Certificate IssuerLet's Encrypt Subjectdriver.ru Fingerprint93:97:64:0F:74:66:96:EE:03:F3:56:E8:E1:F9:FD:0D:6C:22:CD:E5 ValidityWed, 06 Sep 2023 13:40:49 GMT - Tue, 05 Dec 2023 13:40:48 GMT File type HTML document, ASCII text, with no line terminators Size 57 B (57 bytes) Hash b05d2ee2215761253b3c9fd2a0cfc928 eaab7fd9b7d88b9bbd888c6b1710403772bcb13b b37cc6da907c21d71fc78db607647e501638f626496c4c2ede76650ebe3b755d HTTP Headers GET /favicon.ico HTTP/1.1 Host: d4.driver.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://d4.driver.ru/-12602937570352b9a4533e664ce3/45137ab8e4801/c8d05ba7bdc64cfd6dfc612d52b2deee688c508fe68015c892b379d15448ff50bcca29b0125cffdb5e5f4c7daa737f81650bed57/5/15/1/1636745132/non-whql-radeon-software-adrenalin-2020-21.11.2-win10-win11-64bit-nov11.exe Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Thu, 21 Sep 2023 07:14:48 GMT content-type: text/html; charset=UTF-8 strict-transport-security: max-age=31536000; includeSubdomains; preload content-encoding: gzip X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers