Report Overview

  1. Submitted URL

    dl3.lim1.dosyaupload.com/3sgh4/fp_startisback_aio_19.10.2022.zip?download_token=a269c5ac37d05cc69b176baa83d46b49fb67d5ed3ebeb215129e5c431f7e9981

  2. IP

    78.46.33.22

    ASN

    #24940 Hetzner Online GmbH

  3. Submitted

    2022-11-28 08:47:13

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
pagead2.googlesyndication.com1010001-01-01T00:00:00Z0001-01-01T00:00:00Z
googleads.g.doubleclick.net420001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.no969690001-01-01T00:00:00Z0001-01-01T00:00:00Z
dl3.lim1.dosyaupload.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google-analytics.com400001-01-01T00:00:00Z0001-01-01T00:00:00Z
partner.googleadservices.com7980001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.dosyaupload.com9602230001-01-01T00:00:00Z0001-01-01T00:00:00Z
fundingchoicesmessages.google.com23970001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.com760001-01-01T00:00:00Z0001-01-01T00:00:00Z
tpc.googlesyndication.com1260001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagservices.com1690001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdl3.lim1.dosyaupload.com/3sgh4/fp_startisback_aio_19.10.2022.zip?download_token=a269c5ac37d05cc69b176baa83d46b49fb67d5ed3ebeb215129e5c431f7e9981Malware
mediumdl3.lim1.dosyaupload.com/3sgh4/fp_startisback_aio_19.10.2022.zip?download_token=a269c5ac37d05cc69b176baa83d46b49fb67d5ed3ebeb215129e5c431f7e9981Malware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (213)

HTTP Transactions (60)

URLIPResponseSize
dl3.lim1.dosyaupload.com/3sgh4/fp_startisback_aio_19.10.2022.zip?download_token=a269c5ac37d05cc69b176baa83d46b49fb67d5ed3ebeb215129e5c431f7e9981
78.46.33.22301 Moved Permanently360 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
dl3.lim1.dosyaupload.com/3sgh4/fp_startisback_aio_19.10.2022.zip?download_token=a269c5ac37d05cc69b176baa83d46b49fb67d5ed3ebeb215129e5c431f7e9981
78.46.33.22302 Found0 B
e1.o.lencr.org/
23.36.77.32200 OK344 B
push.services.mozilla.com/
52.24.78.9101 Switching Protocols0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
34.120.237.76200 OK9.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg
34.120.237.76200 OK16 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg
34.120.237.76200 OK8.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
34.120.237.76200 OK6.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg
34.120.237.76200 OK6.0 kB
e1.o.lencr.org/
23.36.77.32200 OK344 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK873 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.google-analytics.com/analytics.js
142.250.74.174200 OK20 kB
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-2652603099495245
216.58.207.194200 OK49 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.google-analytics.com/j/collect?v=1&_v=j98&a=725294741&t=pageview&_s=1&dl=https%3A%2F%2Fwww.dosyaupload.com%2Ferror.html%3Fe%3DFile%2Bcan%2Bnot%2Bbe%2Blocated%252C%2Bplease%2Btry%2Bagain%2Blater.&ul=en-us&de=UTF-8&dt=Hata%20indir&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1938696497&gjid=2104858325&cid=1172852522.1669625225&tid=UA-1634972-95&_gid=1561446876.1669625225&_r=1&_slc=1&z=1033008831
142.250.74.174200 OK1.6 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
142.250.74.34200 OK4.2 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
adservice.google.com/adsid/integrator.js?domain=www.dosyaupload.com
142.250.74.162200 OK100 B
partner.googleadservices.com/gampad/cookie.js?domain=www.dosyaupload.com&callback=_gfp_s_&client=ca-pub-2652603099495245&gpid_exp=1
172.217.21.162200 OK256 B
adservice.google.no/adsid/integrator.js?domain=www.dosyaupload.com
142.250.74.34200 OK100 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK6.7 kB
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20221110&st=env
216.58.207.194200 OK11 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
tpc.googlesyndication.com/sodar/sodar2.js
142.250.74.33200 OK6.4 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.gstatic.com/mysidia/92d0eacbdd534f81de4b06016912d49f.js?tag=client_fast_engine_2019
142.250.74.163200 OK4.1 kB
www.gstatic.com/mysidia/cc1b8d1e1903d75e43ed2b2152915588.js?tag=pingback
142.250.74.163200 OK7.6 kB
www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
142.250.74.163200 OK205 B
www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
142.250.74.163200 OK604 B
www.gstatic.com/mysidia/2c96be29c806e6a30d72c34b34031cd2.js?tag=analytics_pingback_2019
142.250.74.163200 OK2.0 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
142.250.74.130200 OK48 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.google.com/recaptcha/api2/aframe
142.250.74.164200 OK513 B
www.dosyaupload.com/error.html?e=File+can+not+be+located%2C+please+try+again+later.
104.21.65.200200 OK0 B
fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
142.250.74.10200 OK0 B
fundingchoicesmessages.google.com/f/AGSKWxU8k_Q8dFTkNMyrmh9A9x-R0v6Yulcl_jpUJiIJvP37_alYOcNwbL5L3zRy7WjVoLamZ-_ctoECLzGMwp-NTkE=
142.250.74.46200 OK0 B
fonts.googleapis.com/css?family=Google%20Sans%20Display%3A400
142.250.74.10200 OK0 B
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
142.250.74.10200 OK0 B