Report - www.zotac.com/download/mediadrivers/cards/ResizableBAR/ZOTAC_GAMING_GEFORCE_RTX_3070_TWIN

Report Overview

Visitedpublic

2024-05-16 19:05:31

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
www.zotac.com	981264	2005-04-01	2014-10-07 23:44:54	2024-04-17 20:20:30	587 B	4.4 MB	172.67.26.243

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-16 19:05:00	medium	Client IP	192.169.69.25	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-16 19:05:07	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-16 19:05:07	medium	Client IP	192.169.69.25	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-16 19:05:09	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-05-16 19:05:19	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

www.zotac.com/download/mediadrivers/cards/ResizableBAR/ZOTAC_GAMING_GEFORCE_RTX_3070_TWIN_EDGE.zip

IP / ASN

172.67.26.243

#13335 CLOUDFLARENET

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size4.4 MB (4365811 bytes)

MD5ebd339fe95b3d6f5c83b09e490cfbf0f

SHA1364766ec44b9ac79bb071617016ad27451c52e06

SHA2567f065067ef9665324d9192cb79e808b703b47dd6ec641d33cd60b1a8c7b627ac

Archive (2)

Modified	Filename	Size	MD5	File type
2021-05-10 10:28	readme-first.txt	634 B	cbd4bbc2b1aa65b689ba1ad1260e8d72	ASCII text, with CRLF line terminators
2021-03-29 10:18	ZT-A30700E-10P_rebar.exe	20 MB	50e06eeca0bced75a5ad7979cde1080e	PE32+ executable (console) x86-64, for MS Windows, 5 sections

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET www.zotac.com/download/mediadrivers/cards/ResizableBAR/ZOTAC_GAMING_GEFORCE_RTX_3070_TWIN_EDGE.zip	172.67.26.243	200 OK	4.4 MB
URL User Request GET HTTPS www.zotac.com/download/mediadrivers/cards/ResizableBAR/ZOTAC_GAMING_GEFORCE_RTX_3070_TWIN_EDGE.zip IP / ASN 172.67.26.243 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeZip archive data, at least v2.0 to extract, compression method=deflate First Seen2024-08-19 Last Seen2024-08-19 Times Seen1 Size4.4 MB (4365811 bytes) MD5ebd339fe95b3d6f5c83b09e490cfbf0f SHA1364766ec44b9ac79bb071617016ad27451c52e06 SHA2567f065067ef9665324d9192cb79e808b703b47dd6ec641d33cd60b1a8c7b627ac Certificate Info IssuerGoogle Trust Services LLC Subjectzotac.com Fingerprint4A:9D:A2:69:C1:45:3A:FC:23:56:D5:62:58:42:D5:D2:BC:8A:80:A1 ValidityWed, 08 May 2024 02:04:30 GMT - Tue, 06 Aug 2024 02:04:29 GMT HTTP Headers GET /download/mediadrivers/cards/ResizableBAR/ZOTAC_GAMING_GEFORCE_RTX_3070_TWIN_EDGE.zip HTTP/1.1 Host: www.zotac.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: cookieconsent_status=deny Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Thu, 16 May 2024 19:05:04 GMT content-type: application/zip content-length: 4365811 last-modified: Mon, 10 May 2021 02:56:56 GMT etag: "429df3-5c1f0ee362575" cache-control: max-age=1209600 expires: Thu, 30 May 2024 19:05:03 GMT content-security-policy: frame-ancestors 'self' https://www.zotacstore.com/; cf-cache-status: MISS accept-ranges: bytes vary: Accept-Encoding expect-ct: max-age=86400, enforce referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block server: cloudflare cf-ray: 884da3147fc5b503-OSL X-Firefox-Spdy: h2

GET www.zotac.com/download/mediadrivers/cards/ResizableBAR/ZOTAC_GAMING_GEFORCE_RTX_3070_TWIN_EDGE.zip

172.67.26.243

200 OK

4.4 MB

URL User Request GET HTTPS

www.zotac.com/download/mediadrivers/cards/ResizableBAR/ZOTAC_GAMING_GEFORCE_RTX_3070_TWIN_EDGE.zip

IP / ASN

172.67.26.243

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=deflate

First Seen2024-08-19

Last Seen2024-08-19

Times Seen1

Size4.4 MB (4365811 bytes)

MD5ebd339fe95b3d6f5c83b09e490cfbf0f

SHA1364766ec44b9ac79bb071617016ad27451c52e06

SHA2567f065067ef9665324d9192cb79e808b703b47dd6ec641d33cd60b1a8c7b627ac

Certificate Info

IssuerGoogle Trust Services LLC

Subjectzotac.com

Fingerprint4A:9D:A2:69:C1:45:3A:FC:23:56:D5:62:58:42:D5:D2:BC:8A:80:A1

ValidityWed, 08 May 2024 02:04:30 GMT - Tue, 06 Aug 2024 02:04:29 GMT

HTTP Headers

GET /download/mediadrivers/cards/ResizableBAR/ZOTAC_GAMING_GEFORCE_RTX_3070_TWIN_EDGE.zip HTTP/1.1
Host: www.zotac.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: cookieconsent_status=deny
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 16 May 2024 19:05:04 GMT
content-type: application/zip
content-length: 4365811
last-modified: Mon, 10 May 2021 02:56:56 GMT
etag: "429df3-5c1f0ee362575"
cache-control: max-age=1209600
expires: Thu, 30 May 2024 19:05:03 GMT
content-security-policy: frame-ancestors 'self' https://www.zotacstore.com/;
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 884da3147fc5b503-OSL
X-Firefox-Spdy: h2