Report - dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip

Report Overview

Visited public
2023-11-29 15:03:09
Tags
URL
dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip
Finishing URL
dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip
IP / ASN
66.220.9.58
#6939 HURRICANE
Title
dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip

Detections

urlquery

0

Network Intrusion Detection

6

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dhqid45r064utd5gygt2jy6.webdav.drivehq.com	unknown	2005-03-09	2023-07-18 12:40:22	2023-11-13 08:15:23	1.4 kB	1.3 kB	66.220.9.58

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-29 15:02:56	medium	Client IP	Internal IP	ET INFO Cloud Storage Related Domain in DNS Lookup (webdav .drivehq .com)
2023-11-29 15:02:56	medium	Client IP	Internal IP	ET INFO Cloud Storage Related Domain in DNS Lookup (webdav .drivehq .com)
2023-11-29 15:02:56	medium	Client IP	Internal IP	ET INFO Cloud Storage Related Domain in DNS Lookup (webdav .drivehq .com)
2023-11-29 15:02:56	medium	Client IP	Internal IP	ET INFO Cloud Storage Related Domain in DNS Lookup (webdav .drivehq .com)
2023-11-29 15:02:57	medium	Client IP	Internal IP	ET INFO Cloud Storage Related Domain in DNS Lookup (webdav .drivehq .com)
2023-11-29 15:02:57	medium	Client IP	Internal IP	ET INFO Cloud Storage Related Domain in DNS Lookup (webdav .drivehq .com)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip	66.220.9.58	403 Forbidden	156 B
URL User Request GET HTTP/1.1 dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip IP 66.220.9.58:80 ASN #6939 HURRICANE File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators Size 156 B (156 bytes) Hash 36212730ce3a2a1a48fc6faa0b9c341c c9fa653ad3311b58c4651692b939ce9f7ea545f0 19a80ca5c4bedc53a81092f0d037ae094ccdd1f083e08731e97ed443feb4cc2e HTTP Headers GET /lnvoice_BV70JKS.zip HTTP/1.1 Host: dhqid45r064utd5gygt2jy6.webdav.drivehq.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 403 Forbidden cache-control: no-cache, no-store, must-revalidate,no-cache pragma: no-cache content-length: 156 content-type: application/xml expires: 0 server: Microsoft-IIS/10.0 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET date: Wed, 29 Nov 2023 15:02:52 GMT X-Firefox-Spdy: h2`

	dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip	66.220.9.58	403 Forbidden	156 B
URL User Request GET HTTP/1.1 dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip IP 66.220.9.58:80 ASN #6939 HURRICANE File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators Size 156 B (156 bytes) Hash 36212730ce3a2a1a48fc6faa0b9c341c c9fa653ad3311b58c4651692b939ce9f7ea545f0 19a80ca5c4bedc53a81092f0d037ae094ccdd1f083e08731e97ed443feb4cc2e HTTP Headers `GET /lnvoice_BV70JKS.zip HTTP/1.1 Host: dhqid45r064utd5gygt2jy6.webdav.drivehq.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Cache-Control: no-cache, no-store, must-revalidate,no-cache Pragma: no-cache Content-Length: 156 Content-Type: application/xml Expires: 0 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 29 Nov 2023 15:02:52 GMT`

	dhqid45r064utd5gygt2jy6.webdav.drivehq.com/favicon.ico	66.220.9.58	403 Forbidden	156 B
URL GET HTTP/1.1 dhqid45r064utd5gygt2jy6.webdav.drivehq.com/favicon.ico IP 66.220.9.58:80 ASN #6939 HURRICANE Requested by http://dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip File type XML 1.0 document text\012- XML document, ASCII text, with no line terminators Size 156 B (156 bytes) Hash 36212730ce3a2a1a48fc6faa0b9c341c c9fa653ad3311b58c4651692b939ce9f7ea545f0 19a80ca5c4bedc53a81092f0d037ae094ccdd1f083e08731e97ed443feb4cc2e HTTP Headers `GET /favicon.ico HTTP/1.1 Host: dhqid45r064utd5gygt2jy6.webdav.drivehq.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://dhqid45r064utd5gygt2jy6.webdav.drivehq.com/lnvoice_BV70JKS.zip Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Cache-Control: no-cache, no-store, must-revalidate,no-cache Pragma: no-cache Content-Length: 156 Content-Type: application/xml Expires: 0 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 29 Nov 2023 15:02:53 GMT`