Report Overview

  1. Submitted URL

    ws17679.freecastle.site/MyFirstGame.exe

  2. IP

    199.59.243.222

    ASN

    #16509 AMAZON-02

  3. Submitted

    2023-02-07 10:56:32

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
fonts.googleapis.com88772013-06-10T22:14:26Z2023-03-13T08:14:31Z
fonts.gstatic.comunknown2014-09-09T02:40:21Z2023-03-13T08:44:36Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
www.google.com72015-05-10T13:11:19Z2023-03-13T06:40:43Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
partner.googleadservices.com7982012-10-03T03:04:21Z2023-03-13T08:39:17Z
afs.googleusercontent.com121232013-05-06T21:11:00Z2023-03-13T05:21:41Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
ws17679.freecastle.siteunknown2023-02-07T11:55:07Z2023-02-07T16:05:17Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
highClient IP 199.59.243.222

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumws17679.freecastle.site/MyFirstGame.exeMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (5)

HTTP Transactions (42)

URLIPResponseSize
ws17679.freecastle.site/MyFirstGame.exe
199.59.243.222200 OK697 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ws17679.freecastle.site/js/parking.2.102.1.js
199.59.243.222200 OK22 kB
ws17679.freecastle.site/_fd
199.59.243.222200 OK2.0 kB
ws17679.freecastle.site/px.gif?ch=2&rn=8.266132649264135
199.59.243.222200 OK42 B
ws17679.freecastle.site/px.gif?ch=1&rn=8.266132649264135
199.59.243.222200 OK42 B
ws17679.freecastle.site/favicon.ico
199.59.243.222200 OK0 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
partner.googleadservices.com/gampad/cookie.js?domain=ws17679.freecastle.site&client=partner-dp-bodis30_3ph&product=SAS&callback=__sasCookie
142.250.74.98200 OK245 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
www.google.com/afs/ads?adtest=off&psid=7277763864&pcsa=false&channel=pid-bodis-gcontrol32%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol310%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol443&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fws17679.freecastle.site%3Fcaf%26&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2148305361097618&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301140%2C17301141%2C17301143&format=r3&nocache=2391675767431070&num=0&output=afd_ads&domain_name=ws17679.freecastle.site&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1675767431071&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1264&psh=79&frm=0&cl=503972142&uio=-&cont=rs&jsid=caf&jsv=503972142&rurl=http%3A%2F%2Fws17679.freecastle.site%2FMyFirstGame.exe&adbw=master-1%3A1264
216.58.207.228200 OK2.1 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%2302198b
142.250.74.129200 OK272 B
fonts.googleapis.com/css?family=Michroma&display=swap
142.250.74.74200 OK558 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
fonts.gstatic.com/s/michroma/v16/PN_zRfy9qWD8fEagAPg9pTk.woff2
142.250.74.163200 OK17 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
push.services.mozilla.com/
35.82.246.186101 Switching Protocols0 B
ws17679.freecastle.site/_tr
199.59.243.222200 OK22 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6154ab9-bb20-4d77-a86e-15f604bb237a.webp
34.120.237.76200 OK8.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8328b9-b592-4c76-9101-54f0b2e220d0.jpeg
34.120.237.76200 OK15 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
34.120.237.76200 OK4.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3482c5eb-0e83-4722-a14e-ee2eefae5e03.jpeg
34.120.237.76200 OK6.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
34.120.237.76200 OK13 kB
www.google.com/adsense/domains/caf.js
216.58.207.228200 OK0 B