Report - dl.yasdl.com/2024/Software/Office(R)Tool.13.00.G

Report Overview

Visitedpublic

2024-12-23 09:24:59

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dl.yasdl.com	unknown	2011-07-14	2012-07-02	2024-12-23	520 B	624 B	193.151.157.23
dlyasdl.85.ir.cdn.ir	unknown	unknown	2023-08-22	2024-12-18	528 B	244 B	193.151.157.110
edge02.85.ir.cdn.ir	unknown	unknown	2023-08-23	2024-12-23	527 B	19 MB	193.151.159.53

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

edge02.85.ir.cdn.ir/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf

IP / ASN

193.151.159.53

#60077 Asre Dadeha Asiatech

File Overview

File TypeRAR archive data, v5

Size19 MB (19251635 bytes)

MD54f7faf5f83904ede8ff26f71e0260db3

SHA140bbb89233d9b1788c386dd695c6b8563fc0e69a

SHA256ade31852f91abd1efe40ed8a393b1176d1c072cc4a610cba54092cc4b9c4c3af

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/61

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

GET dl.yasdl.com/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf

193.151.157.23

302 Found

138 B

URL

dl.yasdl.com/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf

IP / ASN

193.151.157.23

#60077 Asre Dadeha Asiatech

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-05

Last Seen2025-07-26

Times Seen38800

Size138 B (138 bytes)

MD5aff950cab4c0265e21d401db15f1026d

SHA1f03e18461817f7a6546c8bf8fa8d686d7e30aca0

SHA256753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0

Certificate Info

IssuerLet's Encrypt

Subjectdl.yasdl.com

FingerprintD9:D7:96:28:D5:A4:1C:42:94:27:18:FA:F4:F4:57:21:0C:C9:15:AF

ValiditySat, 07 Dec 2024 15:35:42 GMT - Fri, 07 Mar 2025 15:35:41 GMT

HTTP Headers

GET /2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf HTTP/1.1
Host: dl.yasdl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Mon, 23 Dec 2024 09:24:33 GMT
content-type: text/html
content-length: 138
location: https://dlyasdl.85.ir.cdn.ir/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
X-Firefox-Spdy: h2

GET dlyasdl.85.ir.cdn.ir/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf

193.151.157.110

302

0 B

URL

dlyasdl.85.ir.cdn.ir/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf

IP / ASN

193.151.157.110

#60077 Asre Dadeha Asiatech

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607282

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subject*.85.ir.cdn.ir

FingerprintD7:89:F4:DC:26:73:5C:25:EF:28:2F:01:89:39:DB:A4:90:28:A2:0A

ValidityTue, 08 Oct 2024 04:22:21 GMT - Mon, 06 Jan 2025 04:22:20 GMT

HTTP Headers

GET /2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf HTTP/1.1
Host: dlyasdl.85.ir.cdn.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 
access-control-allow-origin: *
Location: https://edge02.85.ir.cdn.ir/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf
Content-Length: 0
Date: Mon, 23 Dec 2024 09:24:33 GMT
Keep-Alive: timeout=10
Connection: keep-alive

GET edge02.85.ir.cdn.ir/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf

193.151.159.53

200 OK

19 MB

URL

edge02.85.ir.cdn.ir/2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf

IP / ASN

193.151.159.53

#60077 Asre Dadeha Asiatech

Requested byN/A

Resource Info

File typeRAR archive data, v5

First Seen2024-12-23

Last Seen2024-12-23

Times Seen2

Size19 MB (19251635 bytes)

MD54f7faf5f83904ede8ff26f71e0260db3

SHA140bbb89233d9b1788c386dd695c6b8563fc0e69a

SHA256ade31852f91abd1efe40ed8a393b1176d1c072cc4a610cba54092cc4b9c4c3af

Certificate Info

IssuerLet's Encrypt

Subject*.85.ir.cdn.ir

FingerprintD7:89:F4:DC:26:73:5C:25:EF:28:2F:01:89:39:DB:A4:90:28:A2:0A

ValidityTue, 08 Oct 2024 04:22:21 GMT - Mon, 06 Jan 2025 04:22:20 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/61

HTTP Headers

GET /2024/Software/Office(R)Tool.13.00.G_YasDL.com.rar?arf HTTP/1.1
Host: edge02.85.ir.cdn.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 23 Dec 2024 09:24:28 GMT
Content-Type: application/x-rar-compressed
Content-Length: 19251635
Last-Modified: Fri, 27 Sep 2024 08:31:35 GMT
Server: AsiatechCloudCDN/3.1
Accept-Ranges: bytes
Via: http/1.1 mid01.cdn.ir (AsiatechCloudEdge/3.1), http/1.1 edge02.cdn.ir (AsiatechCloudEdge/3.1)
Etag: "66f66d67-125c1b3"
Age: 6
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, no-transform