Report Overview

  1. Submitted URL

    medmecsbilling.com/srv/os/vw/Bg2XS0Hz.zip

  2. IP

    148.72.88.25

    ASN

    #26496 AS-26496-GO-DADDY-COM-LLC

  3. Submitted

    2023-01-13 20:27:46

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
medmecsbilling.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.com760001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google-analytics.com400001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
pagead2.googlesyndication.com1010001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
googleads.g.doubleclick.net420001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
gov.co.veunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
en.rawafedpor.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.no969690001-01-01T00:00:00Z0001-01-01T00:00:00Z
tpc.googlesyndication.com1260001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediummedmecsbilling.com/srv/os/vw/Bg2XS0Hz.zipMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (168)

HTTP Transactions (67)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
medmecsbilling.com/srv/os/vw/Bg2XS0Hz.zip
148.72.88.25200 OK332 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
push.services.mozilla.com/
52.24.160.109101 Switching Protocols0 B
gov.co.ve/JUV0r3
190.115.26.9302 Found0 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwi48a6FvZf8AhVjg_0HHdFdD18QFnoECAkQAQ&url=https%3A%2F%2Fen.rawafedpor.com%2F6049%2Fmicrostrategy-bought-bitcoin-liquidation-analyst-schiff&usg=AOvVaw2KkJK29CIlVSYi_bTo8C9q
142.250.74.164200 OK515 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
e1.o.lencr.org/
23.36.76.226200 OK344 B
e1.o.lencr.org/
23.36.76.226200 OK344 B
en.rawafedpor.com/qa-theme/SnowFlat/qa-styles.css?1.8.6
188.114.97.1200 OK11 kB
en.rawafedpor.com/qa-content/jquery-3.5.1.min.js
188.114.97.1200 OK39 kB
www.googletagmanager.com/gtag/js?id=UA-62733008-16
142.250.74.40200 OK44 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
www.google-analytics.com/analytics.js
142.250.74.110200 OK20 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-8594790428066018
172.217.21.162200 OK50 kB
en.rawafedpor.com/qa-theme/SnowFlat/js/snow-core.js?1.8.6
188.114.97.1200 OK7.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
34.120.237.76200 OK9.7 kB
en.rawafedpor.com/6049/microstrategy-bought-bitcoin-liquidation-analyst-schiff
188.114.97.1200 OK15 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg
34.120.237.76200 OK6.0 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
googleads.g.doubleclick.net/pagead/html/r20230111/r20190131/zrt_lookup.html
216.58.207.194200 OK4.2 kB
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202212050101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-8594790428066018&plah=en.rawafedpor.com
172.217.21.162200 OK120 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
adservice.google.no/adsid/integrator.js?domain=en.rawafedpor.com
142.250.74.66200 OK100 B
adservice.google.com/adsid/integrator.js?domain=en.rawafedpor.com
142.250.74.130200 OK100 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
tpc.googlesyndication.com/pagead/js/r20230111/r20110914/abg_lite_fy2021.js
172.217.21.161200 OK8.9 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
tpc.googlesyndication.com/pagead/js/r20230111/r20110914/client/qs_click_protection_fy2021.js
172.217.21.161200 OK7.5 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
www.gstatic.com/mysidia/1fa652aa70ababc78244f8b54c5f124c.js?tag=client_fast_engine_2019
142.250.74.3200 OK4.2 kB
www.gstatic.com/mysidia/1361b6196af0d1e07082d1e4b1fa3dae.js?tag=text/vanilla_highlight
142.250.74.3200 OK4.5 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
pagead2.googlesyndication.com/bg/JwRg8GnJRbSbwgtubA3x1Twn6jgCPCxSQn9TsX0K1wE.js
172.217.21.162200 OK16 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
www.google.com/pagead/drt/ui
142.250.74.164302 Found0 B
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
216.58.207.227200 OK28 kB
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230111&st=env
172.217.21.162200 OK11 kB
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20230111&jk=1234730318452519&rc=
172.217.21.162204 No Content0 B
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230111&jk=1234730318452519&bg=!Y2ClYCTNAAYDMoyoIzI7ACkAdvg8WvQz2mNkfwveTgKXZtblYfcG1Qme3ZPuOzAH7V_wb45CwYYw7AIAAACFUgAAAANoAQcKAC5qa6x7fzCxvusFOr9awG9_zXUL-_qcsNdWlQA4VY5uP_ahBxZd9Wbe65OnAnB4mQKJMGk4RMZtFNpZ0FV-3FdQ7rikwN2ktSds7dv6TKh9gzN8O1jEEnLN7PmQHXMTEYaMfcYkA293KanWqRHdZrFIWPGxvEGFUHh7blw3JNxIPiZLPspOE5nL0U8P11D7zpjV37LxGCMUSoB6pzknYn2LSEaiCEfC9hxeMeDUxkkehd672ggB45glulCtArZfbnEIg9a6zqFO8wKu83WHQHFDwbamjFbjJOgf1MZ0ji6_tkZAxkAkumo_wjXW5HEa6Dv6t50USTez3xCVczIZBSGtOmu3XOw3Gsss9X30ZPD4nPUZAL9m1deX7bnTyCG7Al0FIyXrWLpYfpv4i5CsH173pTQhhRMzqSHxUrrluLe28_DgaZ1B9mcEDCID_RSF0cEYNc5RIj7Ks-aYFwFWkOTE_3h0t4imyvFFwK5gOiKMn6kr3pmUhrcV9Us_h3Ktj4QwuU3EdGKuetJFMU-Np6kC5YwC8ZSIizgZGMjJ0rqsl-_3bXe7bONrvmdsZXkSE7D1uJkCUcGxla8C4uki1rEBuGdfURtJ_Qo-c6TeaP0h5ppx03BqQgHJaMzH3z4xZmF3MjAqNVP_E-mh3AQI49-kdqiFKoW-YWAJJZsdZRB3JdTQLfjLIBu9_66NprcoeE2D3AA229693wvbfsW-rJeDp7fIR2Pvl-HEG_Qb9soqaZpQLCjfU5tKUb1iOfobbmFJyE7NZoOIORshqPEV2hT4AuLzSTrs1L-Zg2BVcdh0VTF6F8OxaHnavkhMysJP7YDVklD9oxfm7ocwmIM8YjczvcEQ-jV4juKKk2StzcWKPO2nE0bxid0eZK_qgojqS6kLynlSMF9iC1mS9JzEiNE1CdVLWSBF90rGJg
172.217.21.162204 No Content0 B
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvhddUWp9IGwGAE5ujZR_xUL8rR3K2svlV9Bc2S_JT4JtIMh_wXVeylrSSWWYq6qq0o8xiz7ytgcP5LdcUJEbL_B7zUk0rJPdMwLplIt8IIVZEl50BfNTj8PnMmIM5HoePTnb967w&sai=AMfl-YQMjWThBZleXxl3sUk8e70qfr3IVRzttqWQTgnBWDQSsN0hd6O_Lk0JWhE7P9J3gYvXEBw_SHb5b86qDOZf4CEq2iNvZzw_h6il2BaM0pnm4fBD63gaABwswa2xxsQ5jpBYZO_ZVDwG6t0RGc1N&sig=Cg0ArKJSzBCiXINKgUXFEAE&cid=CAQSTADq26N984KqlU7gUZPyYuxBQjqBUOlVVF-wP7Ot1XePo1Iy2TfsBAp5fFCyC92YjAtqx9giGyGlnBZCvV99I5Baic4X4HQnnI92-6MYASAT&id=lidar2&mcvt=1000&p=0,0,280,748&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20230111&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=3120896011&rs=2&la=0&cr=0&vs=4&r=v&rst=1673641642041&rpt=1015&met=mue&wmsd=0&pbe=0&spb=0
172.217.21.162200 OK42 B
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
142.250.74.106200 OK0 B
en.rawafedpor.com/qa-content/qa-global.js?1.8.6
188.114.97.1200 OK0 B