Report Overview

  1. Submitted URL

    cdn-111.bayfiles.com/12xey6i2y0/90f5bdfd-1675101000/linkvertise%20installer.exe

  2. IP

    195.96.151.60

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-01-30 19:30:40

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    32

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
e1.o.lencr.org61592021-08-20T09:36:30Z2023-03-13T05:21:46Z
accounts.google.com812016-03-20T13:44:49Z2023-03-13T07:05:07Z
pogothere.xyzunknown2022-09-04T21:11:25Z2023-03-13T05:42:24Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
www.facebook.com992012-05-21T02:23:41Z2021-02-04T00:31:35Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
osiextantly.comunknown2023-01-30T16:14:35Z2023-02-23T05:17:01Z
policityseriod.infounknown2018-11-10T13:18:32Z2023-03-13T07:16:28Z
cdn-111.bayfiles.comunknown2020-07-17T13:24:41Z2023-01-30T20:30:29Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
reerfdfgourgo.xyzunknown2023-01-23T13:29:36Z2023-03-01T02:07:26Z
djv99sxoqpv11.cloudfront.netunknown2021-10-07T16:52:14Z2023-03-13T06:01:35Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
bayfiles.com3766022012-05-24T18:09:40Z2023-03-13T05:24:08Z
vjs.zencdn.net49682012-05-21T10:26:59Z2023-03-13T05:47:22Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/vSVlhSjMqNg8sDD0wBXcEem5SeQBvMxIlXTlkFHxXJDooKHQLHFN/AwIpRz5JLWRRbF8oNwZ3FSw3AncCbzgFKA59fxU6XCJkGDJDMz4RMkQxK0c/UnQ0DjBaJTUAbwEPbE96FntpST1aJz0OPUBsa1EkR2xrUXsDZ2lEeXFsa1E9WidvVW8AC3xTekt/bU-R5cWxrUThFbGogewN8d1FjFntpBi9QIjZEeHV7aVB6A3hpUG8BeT8IOFYvNhlvAQ9oUX8deX8UdwIMalware
mediumdjv99sxoqpv11.cloudfront.net/JeE1uTlgbIgAoZwwkCnNvS3pdfW1eJx0hNghwF3gISANbJDURGT8COl45FCplSGsCLzYfcEgrNhtwX2g5HC9Ten4NLFMjNwIkAiI5XX8oe3ZIaFx+cA8kACo3Dz5LfGgWOUt8aEl9QH59Sw9LfGgPJAB4bF1+LGtqSDVYen1LD0t8aAo7S30ZSX1bYGhRaF-x+Px0uBSF9SgtcfmlIfV9+aV1/XigxCigIISBdfyh/aE1jXmgtRXwMalware
mediumdjv99sxoqpv11.cloudfront.net/MMFAzakZTP10MeUQ5V1dxBWYAXXAWOkAFKEBtcDh3RAN8H39mdkcQIg1gFQYnXjcOTCNeMw5bYFE0UVdyFiRDBS0NKUsaPFcgSx0+QnZGC3tdP0kDKlwxFlgABX4DT3QAeEQDKFQ/RBljAmBdHmMCYAJaaAB1AChjAmBEAygGZBZZBBViAxJwBHUAKGMCYE-EcYwMRAlpzHmAaT3QAN1YJLV91ASx0AGEDWncAYRZYdlY5QQ8gXygWWAABYAZEdhYlDlsMalware
mediumpolicityseriod.info/cExiNGoLbhFDNQU%2BDhZQUiQWQBoDdk0bCBE1BF0GFT9MVwUdYxFDRBo%2FQBhIAyEEFlBBYEBACxcTC1BISm5VB11DflQWRlI%2FF1Y1GShQFlBSLgAECRV1AVJHQHkEVUdEL1YBR0l0VAVHRnsEDV4Re1dXWxYvQEkMalware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/N1RLbHRsdnxfQwRmfU5YFXZnThZVZCgJTVQyZlxBUTVmWBcDYWZVTAFlZlpDUW1%2EDUMCN3oKFxV4aVxAD2MvWhAEeS5aEQN5f1QWAHlzCRBVeXNaRANmclwQU2N%2BX1YbdjgbVht2OwMYXjciGA1EMTkFG1N6IgISWHZnTkEZZmkxMalware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed

ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (87)

URLIPResponseSize
cdn-111.bayfiles.com/12xey6i2y0/90f5bdfd-1675101000/linkvertise%20installer.exe
195.96.151.60301 Moved Permanently162 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
cdn-111.bayfiles.com/12xey6i2y0/90f5bdfd-1675101000/linkvertise%20installer.exe
195.96.151.60301 Moved Permanently0 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
bayfiles.com/12xey6i2y0
45.154.253.150404 Not Found2.3 kB
bayfiles.com/css/bayfiles.css?1668606177
45.154.253.150200 OK25 kB
bayfiles.com/sw.js
45.154.253.150200 OK14 kB
bayfiles.com/js/app.js?1668606177
45.154.253.150200 OK58 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.194.217200 OK9.7 kB
bayfiles.com/img/flags/24/dk.png
45.154.253.150200 OK537 B
bayfiles.com/img/flags/24/se.png
45.154.253.150200 OK581 B
bayfiles.com/static/logo.png
45.154.253.150200 OK39 kB
vjs.zencdn.net/7.3.0/video.min.js
151.101.194.217200 OK132 kB
bayfiles.com/img/flags/24/us.png
45.154.253.150200 OK656 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
bayfiles.com/img/flags/24/fi.png
45.154.253.150200 OK456 B
bayfiles.com/img/flags/24/pl.png
45.154.253.150200 OK347 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
bayfiles.com/img/flags/24/kr.png
45.154.253.150200 OK988 B
bayfiles.com/img/flags/24/fr.png
45.154.253.150200 OK536 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737333
54.230.245.59200 OK98 kB
bayfiles.com/img/flags/24/br.png
45.154.253.150200 OK1.1 kB
push.services.mozilla.com/
35.160.69.117101 Switching Protocols0 B
bayfiles.com/img/flags/24/jp.png
45.154.253.150200 OK599 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
bayfiles.com/img/flags/24/de.png
45.154.253.150200 OK483 B
osiextantly.com/bVBWUDgMMjU9BwxtNHZNHzxrdQordWQWXAcmb2lLFT8nIE5cYXgzVAIlMjZKAj4iflYIJHNifhsDADxQPjobIXYKaCUUfF0nFAhbKDU7ZWsIARQmdRUZOghsATsQGEA1GhI/VyYYBxxwKx5zYn4sJx8gahdlHBxvPwI0FgACHiEKCysDIWN5AzMVMkIKFh0RDVQ2LgUONRMcO38pGhIdQlkCGztpFRtmMx1fFgM+aV0UPBJZJwQDEVoaFQYyfVRmED5MHQMCYVknKmYfaDgSJTEJKDsEYkAfBQ4jfDdiOhVdNRYlMQkoaQE5XBsGAWh5LmMuBF0GJHNifg8FewINDgcuIm05OBAyfwI3Myd2VTRnFlIrPiIgegRpBxlSNxUzGG5aMQASDixjPiBtKmgUNWxVGRkWYRsePjxOLAFvP201aDI1YFUFMidxSzolP1YdbSNmXAAzHzJ/LxVkZQgmIA
65.9.44.10200 OK1.2 kB
osiextantly.com/SkpqV1ErKAk6bit3CHEkOCZXcmMMb1gRNSA8U24iMiUbJyd7e0Q0PSU/DjEjJSQeeT8vPk9lFwAvL2YkHiYNNRgtCwUNJj0hKTkfPBlZJzUsHVsyGzJ6Ahk2Ij0sZDYDGSsZMwAOPwUWHnIpGD1+fywUISYZLSQSBjAzMTIPLRgZOT49MmU2fwIpbgUvJF4ZHQwHABkmAyErPhh/EjJvPi95MB4wDDJPZRMpC1I8EAklWRMrfwYMEDYdBT8jaSsPBm4AAn9TBCZzBgwQNhoAKxVlKAxbcmMIBi0jIBkOPA40JHsmE2E+cgsWPn0ZWWcLGRJbNQgNIjg2F2cyT2UTGjJaIhMZDFMENj4pDDo9Ayw8bnR4CAsBYG94LA84LTIpPjYDAzkVNSwzAnJjDCsvZjsSJw0jAxI9TD0iJSQaaih8GloZZCAnAwMABig
65.9.44.10200 OK1.2 kB
reerfdfgourgo.xyz/bElWdVNDdjUGbg4eOjEcKwc3LQspCwAZaggqFzMLO3gQRhcqEHABOgh0YUBlX35gUyMFLWtHako6IhQnGTprRHUFJzAabko/a0R9XGdgRX1dbyNIYko9JhQ0UXhwBScYJWtEZVt8Z0VkXH1lTGVa
188.114.96.1204 No Content0 B
reerfdfgourgo.xyz/V3BUT0V4Tzc8eAA2AgcQZwghFXYBGDEIKTwUAx1zNR0WancREWd3YyMZMHJyZEdnfHBxAD0reGZIcjwxNgQhPHhmVj0hIzhNcjl4Zl5kYXd5QnI6eGZWID8kME1laTUjBDhydGFHYX51YEBgfHxgRQ
188.114.96.1204 No Content0 B
reerfdfgourgo.xyz/NnNwNXoZTBNGR2IYCGceTD1GUEh4PDNbFgEqJXw5UkAAWihBJlZBE1JORwZNBUBDEwpfF00EXEUHEUEPRU5BExNYFR8IXEBOQRtJAl1DBFQEVQUISxAHAFQdC0JWRQ5CH00ETAFGQQVNBkdDDE8F
188.114.96.1204 No Content0 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
osiextantly.com/VDBRcnI1UjIfTTUNM1QHJlxsV0ASFWM0Fj5GaEsBLF8gAgRlAX8RHjtFNRQAO14lXBwxRHRANBl9FzMINVsLJiJlABwXJwUFB0MWLHIGKzMMaBAlPT9xFzk3FkQyNhpnYhA8ShwDaB8WP1MAOxVlVxcjKzpoOxE9AHMfFz8jBTMrNBEABCQWLXY4IDYWY2E8OQFDMCI0N1cCCkJxAhMjHA53EkEGMGBhGTYfXCYKNDhXEDAqYHQFQSMVVRQjNh92AFdAEmITHhgVXRMWOjl9EiszHlEwMzBlcRIaGBVdEzczLVcWKDAOahMwJD1xKTgFFngEMzkTfRIrN3l1MisFGWIQHgIueDwzEwADADM8ZWkbPiRtARAhCmRxFjc2A14yMysGaggWHg0FACNKM2goFSUDcRAwKxVqFBYaDVwVHgFyWiIdHCQNEiBDIGMeB0sC
65.9.44.10200 OK1.2 kB
bayfiles.com/img/flags/24/ru.png
45.154.253.150200 OK403 B
bayfiles.com/img/flags/24/in.png
45.154.253.150200 OK593 B
djv99sxoqpv11.cloudfront.net/vSVlhSjMqNg8sDD0wBXcEem5SeQBvMxIlXTlkFHxXJDooKHQLHFN/AwIpRz5JLWRRbF8oNwZ3FSw3AncCbzgFKA59fxU6XCJkGDJDMz4RMkQxK0c/UnQ0DjBaJTUAbwEPbE96FntpST1aJz0OPUBsa1EkR2xrUXsDZ2lEeXFsa1E9WidvVW8AC3xTekt/bU-R5cWxrUThFbGogewN8d1FjFntpBi9QIjZEeHV7aVB6A3hpUG8BeT8IOFYvNhlvAQ9oUX8deX8UdwI
54.230.245.59200 OK549 B
djv99sxoqpv11.cloudfront.net/JeE1uTlgbIgAoZwwkCnNvS3pdfW1eJx0hNghwF3gISANbJDURGT8COl45FCplSGsCLzYfcEgrNhtwX2g5HC9Ten4NLFMjNwIkAiI5XX8oe3ZIaFx+cA8kACo3Dz5LfGgWOUt8aEl9QH59Sw9LfGgPJAB4bF1+LGtqSDVYen1LD0t8aAo7S30ZSX1bYGhRaF-x+Px0uBSF9SgtcfmlIfV9+aV1/XigxCigIISBdfyh/aE1jXmgtRXw
54.230.245.59200 OK185 B
bayfiles.com/img/flags/24/no.png
45.154.253.150200 OK611 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
djv99sxoqpv11.cloudfront.net/MMFAzakZTP10MeUQ5V1dxBWYAXXAWOkAFKEBtcDh3RAN8H39mdkcQIg1gFQYnXjcOTCNeMw5bYFE0UVdyFiRDBS0NKUsaPFcgSx0+QnZGC3tdP0kDKlwxFlgABX4DT3QAeEQDKFQ/RBljAmBdHmMCYAJaaAB1AChjAmBEAygGZBZZBBViAxJwBHUAKGMCYE-EcYwMRAlpzHmAaT3QAN1YJLV91ASx0AGEDWncAYRZYdlY5QQ8gXygWWAABYAZEdhYlDls
54.230.245.59200 OK456 B
bayfiles.com/img/flags/24/es.png
45.154.253.150200 OK666 B
bayfiles.com/img/favicon/favicon-32x32-bayfiles.png?1663356888
45.154.253.150200 OK1.4 kB
policityseriod.info/cExiNGoLbhFDNQU%2BDhZQUiQWQBoDdk0bCBE1BF0GFT9MVwUdYxFDRBo%2FQBhIAyEEFlBBYEBACxcTC1BISm5VB11DflQWRlI%2FF1Y1GShQFlBSLgAECRV1AVJHQHkEVUdEL1YBR0l0VAVHRnsEDV4Re1dXWxYvQEk
103.224.212.220404 Not Found196 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
e1.o.lencr.org/
23.36.77.32200 OK346 B
e1.o.lencr.org/
23.36.77.32200 OK346 B
e1.o.lencr.org/
23.36.77.32200 OK346 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found396 B
osiextantly.com/utx?cb=w392rEl0yMUd&top=bayfiles.com&tid=737333
65.9.44.10204 No Content0 B
bayfiles.com/sw.js?N1RLbHRsdnxfQwRmfU5YFXZnThZVZCgJTVQyZlxBUTVmWBcDYWZVTAFlZlpDUW1%2EDUMCN3oKFxV4aVxAD2MvWhAEeS5aEQN5f1QWAHlzCRBVeXNaRANmclwQU2N%2BX1YbdjgbVht2OwMYXjciGA1EMTkFG1N6IgISWHZnTkEZZmkx
45.154.253.150200 OK14 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found395 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
pogothere.xyz/asd100.bin
172.64.199.35200 OK103 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
osiextantly.com/utx?cb=9ctZmmwFOPwT&top=bayfiles.com&tid=756376
65.9.44.10204 No Content0 B
osiextantly.com/multi?cs=bzdvd0RYA11OcV0DXE5wWQ9bQ3E&abt=0&red=1&sm=76&k=&v=1.0.60.1&sts=0&prn=0&emb=0&tid=756376&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fbayfiles.com%2F12xey6i2y0&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_rUWn=1675107044563&crc=1
65.9.44.10200 OK1.6 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
34.120.237.76200 OK7.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
34.120.237.76200 OK4.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
34.120.237.76200 OK7.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
34.120.237.76200 OK9.5 kB
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/N1RLbHRsdnxfQwRmfU5YFXZnThZVZCgJTVQyZlxBUTVmWBcDYWZVTAFlZlpDUW1%2EDUMCN3oKFxV4aVxAD2MvWhAEeS5aEQN5f1QWAHlzCRBVeXNaRANmclwQU2N%2BX1YbdjgbVht2OwMYXjciGA1EMTkFG1N6IgISWHZnTkEZZmkx
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
pogothere.xyz/asd100.bin
172.64.199.35200 OK0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.205.35200 OK0 B
pogothere.xyz/
172.64.199.35200 OK0 B