Report - download193.uploadhaven.com/1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip

Report Overview

Submitted URL
download193.uploadhaven.com/1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip
IP
169.197.82.28
ASN
#26548 PUREVOLTAGE-INC
Submitted
2023-05-31 20:57:09
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.sectigo.com	487	2018-08-16	2019-11-29	2023-05-31	330 B	963 B	104.18.14.101
download193.uploadhaven.com	unknown	2017-12-07	2023-01-09	2023-05-31	1.7 kB	876 B	169.197.82.28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-31 20:56:55	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-05-31 20:57:01	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	ocsp.sectigo.com/	104.18.14.101		471 B
URL ocsp.sectigo.com/ IP 104.18.14.101:0 ASN #13335 CLOUDFLARENET File type data Size 471 B (471 bytes) Hash a434e08f1102b084480dbf6eb4187093 5c9cdfcf64473ba216db6413d151e9c5bdc8ed02 a5ceb4dba5fa2d13c7417d5bdaabc3e0bbaf23c64f69b0eb10b193c20dac5462 HTTP Headers `POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 31 May 2023 20:56:52 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Last-Modified: Tue, 30 May 2023 03:31:43 GMT Expires: Tue, 06 Jun 2023 03:31:42 GMT Etag: "5c9cdfcf64473ba216db6413d151e9c5bdc8ed02" Cache-Control: max-age=455089,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb2 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7d02203fce840b51-OSL`

	download193.uploadhaven.com/1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip	169.197.82.28	403 Forbidden	146 B
URL User Request GET HTTP/1.1 download193.uploadhaven.com/1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip IP 169.197.82.28:443 ASN #26548 PUREVOLTAGE-INC Certificate IssuerSectigo Limited Subject.uploadhaven.com Fingerprint07:73:F1:7A:AF:DA:2C:E5:8A:7A:05:3F:3C:45:42:10:D6:3C:3B:88 ValidityFri, 15 Jul 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 146 B (146 bytes) Hash 9fe3cb2b7313dc79bb477bc8fde184a7 4d7b3cb41e90618358d0ee066c45c76227a13747 32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864 HTTP Headers GET /1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip HTTP/1.1 Host: download193.uploadhaven.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 403 Forbidden Server: nginx Date: Wed, 31 May 2023 20:56:52 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive`

	download193.uploadhaven.com/1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip	169.197.82.28	403 Forbidden	146 B
URL User Request GET HTTP/1.1 download193.uploadhaven.com/1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip IP 169.197.82.28:443 ASN #26548 PUREVOLTAGE-INC Certificate IssuerSectigo Limited Subject.uploadhaven.com Fingerprint07:73:F1:7A:AF:DA:2C:E5:8A:7A:05:3F:3C:45:42:10:D6:3C:3B:88 ValidityFri, 15 Jul 2022 00:00:00 GMT - Sun, 30 Jul 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 146 B (146 bytes) Hash 8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0 HTTP Headers GET /1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip HTTP/1.1 Host: download193.uploadhaven.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Server: nginx Date: Wed, 31 May 2023 20:56:53 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive`

	download193.uploadhaven.com/favicon.ico	169.197.82.28	404 Not Found	146 B
URL GET HTTP/1.1 download193.uploadhaven.com/favicon.ico IP 169.197.82.28:80 ASN #26548 PUREVOLTAGE-INC Requested by http://download193.uploadhaven.com/1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 146 B (146 bytes) Hash 8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0 HTTP Headers GET /favicon.ico HTTP/1.1 Host: download193.uploadhaven.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://download193.uploadhaven.com/1/application/zip/rX5khDSUswdMMkShrVo7m4C5mEyIOIBaz9neVyBF.zip?key=HaeesxyBV-arTbzrPcn0Tg&expire=1685652987&filename=Crusader.Kings.III.v1.9.0.4.Incl.ALL.DLC.zip Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Server: nginx Date: Wed, 31 May 2023 20:56:53 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive`