Report Overview

  1. Submitted URL

    cdn-128.bayfiles.com/nec3g3jeyf/b33c3956-1672566239/office%202013-2021%20c2r%20install%20%20%20lite%207.4.8.kyhaa.7z

  2. IP

    195.96.151.83

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-01-15 00:32:20

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    4

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
bayfiles.com3766020001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
accounts.google.com810001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
dgemanowhot.com.uaunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn-128.bayfiles.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
vjs.zencdn.net49680001-01-01T00:00:00Z0001-01-01T00:00:00Z
djv99sxoqpv11.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
policityseriod.infounknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
onandeggsiswe.com.uaunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
pogothere.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IPInternal IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (85)

URLIPResponseSize
cdn-128.bayfiles.com/nec3g3jeyf/b33c3956-1672566239/office%202013-2021%20c2r%20install%20%20%20lite%207.4.8.kyhaa.7z
195.96.151.83301 Moved Permanently162 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
cdn-128.bayfiles.com/nec3g3jeyf/b33c3956-1672566239/office%202013-2021%20c2r%20install%20%20%20lite%207.4.8.kyhaa.7z
195.96.151.83301 Moved Permanently0 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.33.119.27200 OK503 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
bayfiles.com/nec3g3jeyf
45.154.253.150404 Not Found2.3 kB
bayfiles.com/css/bayfiles.css?1668606177
45.154.253.150200 OK25 kB
bayfiles.com/sw.js
45.154.253.150200 OK14 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.130.217200 OK9.7 kB
bayfiles.com/js/app.js?1668606177
45.154.253.150200 OK58 kB
bayfiles.com/img/flags/24/se.png
45.154.253.150200 OK581 B
bayfiles.com/img/flags/24/es.png
45.154.253.150200 OK666 B
bayfiles.com/img/flags/24/pl.png
45.154.253.150200 OK347 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.130.217200 OK132 kB
bayfiles.com/img/flags/24/fi.png
45.154.253.150200 OK456 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
bayfiles.com/img/flags/24/jp.png
45.154.253.150200 OK599 B
bayfiles.com/img/flags/24/br.png
45.154.253.150200 OK1.1 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
bayfiles.com/img/flags/24/de.png
45.154.253.150200 OK483 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
bayfiles.com/img/flags/24/no.png
45.154.253.150200 OK611 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737333
54.230.245.37200 OK98 kB
bayfiles.com/img/flags/24/ru.png
45.154.253.150200 OK403 B
push.services.mozilla.com/
54.200.156.146101 Switching Protocols0 B
e1.o.lencr.org/
23.33.119.27200 OK344 B
e1.o.lencr.org/
23.33.119.27200 OK344 B
policityseriod.info/a0l6SWsQawk%2BNB47FmtRSSEOPRsYc1VmCQowHCAHDjpUKgQGZgk%2BRQE6WGVJGCQca1FaZVg9CgwWEy1JUWtNelxYe0xrR0k6Dys0Ai1Ia1FJKxh5CA5wGS9GW3wcKEZfKk58RlJxTHhGXX4ccF8Kfk8qWg0qWDQ
70.32.1.32302 Found0 B
bayfiles.com/static/logo.png
45.154.253.150200 OK39 kB
onandeggsiswe.com.ua/OHd6VzhZFRk6B1lKGHFNShtHcgp+UkgRXFIBQ25LQBgLJ04JRlQ0VFcCHjFKVxkOeVZdA19lfgw4LBYLWR00NmgJHDcTfQhCL2ZbfTQXNH1vJjsxd1MmPA9tVAMfPnF+JgA7HQoxNRZ2XS0vHn5tMStgYX0PMgZCaTwtP25uOiw8dnwfQmZvaRw1FHBiID47fX0tOBJdaUYjYHtQThgBa0gTPhFybzwWYnVqGxIjb18hMAJ8QBU5L2F0MR0dfXkPAj56CD0/AnwNIzgCanMTKwFZYCJLZnpuGDkUYAw/LiB6DxMrAVlqMTtyCno2LGNvex8zBG95OTgNXxU5KhZwTEY4AUh6I0kCfXMAMx1iahsbEFBAHjggCW8gECNhbAA8cgp+Lh0zWnkAFj96CQQtFAp6JTtnfls5FjBrfhAJAHpUGD0RCnklMiAMcVEQJFdWB0cacA4NEx9qCBBPIldbGhEA
108.157.229.27200 OK1.2 kB
onandeggsiswe.com.ua/UlVNTnAzNy4jTzNoL2gFIDlwa0IUcH8IFDgjdHcDKjo8PgZjZGMtHD0gKSgCPTs5YB43IWh8NjwbNyIBCDglGyY1BAwYQBwECSIENBQqdyoHA3kcJSo+BwwbMRAHN0QzB3whGBcTJSs0OBwfGSIUGwgPOgQXNXY3ECIXHzIXIgkMHAMQGn4xGAB8OigHPngKIwMAAxglGAcPJgcRABspNhoUCBwkEyEvDCY6EQw5HxcDJTYpGxN9FDMHbBgZMmsaDDkXHwIIeioDZCIGJipgCRkXMRwaJRgLECohHwNkIgYkNRgEFhcfNhodIhwXHCUjBxM6HTM7eCUKJzUxAQY1HDcpKRgzAH0XOBcQdBsnFBcuDSFiHQgpAyEDCyk3EQM9FicTDC4ZNgsaFSUDAhQMKiAaEyopJwM2ABw2CBocKSIwcyc9HzwlcAM4ICUuBQZiPHoWB2M
108.157.229.27200 OK1.2 kB
onandeggsiswe.com.ua/RU5kYTQkLAcMCyRzBkdBNyJZRAYDa1YnUC84XVhHPSEVEUJ0f0oCWCo7AAdGKiAQT1ogOkFTcnwaCQ0AHBgxFXYtFywAXioPLCdMLCgyVHgQIyYOdTI9Ky5OcBsvMEMkBxxYeAE0B1Z+FiktLEw2JjwJYTMFCDN9FzQPF3Y9dwcCTTYGI1BMLi8lBlcEfAxXYDJ+JQB3CAklBlNwBwMJUBA2KlZmdSYhOwdwDCAWU3IFAzhkACAmWWMXFzICfD0UNzdycigPGXgMfSZZYxR2LS4HLSo8N30dL1UVfQIZKldgAD0OAnw9FCcJUDIoNwl+EBkmBmMTYyIkbnZ6KyllDGtWI30QNi8rBiFrViNjACY2O3xwFzw3eikFJSB/BwopCXETfzAkB3wUMDQNKS8mGXIQD0ILRyogFFxlKAEJFwcrLBEtZCwoMSk
108.157.229.27200 OK1.2 kB
dgemanowhot.com.ua/aU1WMXFGcjVCTDMgAF4oAgMOZzcBLDUAJzoYEGtGPwsyVScHGHBFGA1wYQJGWn5lFwEAKWsAVxo5N0UEGnBnFxgHKzkMVx9wZx9CXWNlAF9bayMMQE85JlAWVHxwQQUdIWsAR15+YQVDXn5nBEFc
188.114.96.1204 No Content0 B
bayfiles.com/img/flags/24/us.png
45.154.253.150200 OK656 B
dgemanowhot.com.ua/R0ZIeGpoeSsLVyYCIBkPASoaPC0rCCkUDRcnDUkFEDE8ETkAMW4MAyN7f0tddHV9XhouInVJUmE1PBkeMjV1SUwuKC4XV2EwdUlEd2h6VlhhM3VJTDM2KR9XdmA4DB4re3lOXXRxfEpddHd9S1k
188.114.96.1204 No Content0 B
dgemanowhot.com.ua/bnRsU0hBSw8gdTcaHGAdJiY4Ang0Gz0FBiAgAQkAOx8EGyk7MUonIQpJW2Z+XUNadTgHEFFhcUgHGDI8GwdRYm4HGgo8dUgCUWJmXlpaY2ZfUhlueUgAHDIvU0VKIzwaGFFifllHW2d6WUddZnpc
188.114.96.1204 No Content0 B
e1.o.lencr.org/
23.33.119.27200 OK344 B
bayfiles.com/img/flags/24/fr.png
45.154.253.150200 OK536 B
bayfiles.com/img/flags/24/kr.png
45.154.253.150200 OK988 B
djv99sxoqpv11.cloudfront.net/4OVA3ajNaP1kMDE05U1cECmcEWQAfOkQFXUlteiIFQzl/OANeZUIFUFQ7YExHQzQKWhVVMVkNDh81WQkOCHZWDlEEZBEeQ1Y7Ch9bVSpdDFJWKl5MRlhtWgVJUDxbCxYLFgJEAxxiB0JEUD5TBURKdQVaXU11BVoCCX4HTwB7dQVaRFA+AV4WChISWANBZg-NPAHt1BVpBT3UEKwIJZRlaGhxiBw1WWjtYTwF/YgdbAwlhB1sWC2BRA0FcNlgSFgsWBloGF2ARHw4I
54.230.245.37200 OK556 B
djv99sxoqpv11.cloudfront.net/nNzlqZmhUVgQAV0NQDltfAg9ZUV4RUxkJBkcEJy4aR1ohEFheDjIRWRFNEAJVBx8GBwZQBEwDBlQEW0AJU1tXUk5DSQUNVUJRBhwCUVgFHAERTAtbBVhDAwoEVhxYIF0ZCU9UWB9OAwgMWE4ZQ1oHVx5DWgcIWkhYEgooQ1oHTgMIXgMcWSRNBQkSUFwSCi-hDWgdLHENbdghaU0YHEE9UWFBcCQ0HEgssVFgGCVpXWAYcWFYOXksPAAdPHFggWQcMRFZOQgRb
54.230.245.37200 OK455 B
djv99sxoqpv11.cloudfront.net/9Tml4YVUtBhYHajoAHFxifV5LUmBoAwsOOz5UKQwaIx9LDzc7JSgIMxshXhUvKlRIRzkvBx9ccysHG1xkaAgcA2h6Tw0AaCMGAgg5IghdUxN7R0hEZ35BDwg7KgYPEnB8WRYVcHxZSVF7fkxLI3B8WQ8IO3hdXVIXa1tIGWN6TEsjcHxZChdwfShJUWBgWV-FEZ34OHQI+IUxKJ2d+WEhRZH5YXVNlKAAKBDMhEV1TE39ZTU9laBxFUA
54.230.245.37200 OK190 B
bayfiles.com/img/flags/24/in.png
45.154.253.150200 OK593 B
policityseriod.info/
70.32.1.32302 Found0 B
bayfiles.com/img/flags/24/dk.png
45.154.253.150200 OK537 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
e1.o.lencr.org/
23.33.119.27200 OK345 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
e1.o.lencr.org/
23.33.119.27200 OK345 B
onandeggsiswe.com.ua/utx?cb=g4Nhpf1Yvp2w&top=bayfiles.com&tid=737333
108.157.229.27204 No Content0 B
onandeggsiswe.com.ua/utx?cb=Ukj203xaxHfH&top=bayfiles.com&tid=756376
108.157.229.27204 No Content0 B
bayfiles.com/sw.js?Z3dKWkQ8VX1pc1RFfHhoRVVmeCYFRyk%2EfQQRZ2pxARZnbidTQmdjfFFGZ2xzAU5%2BO3NSFHs8J0VbaG4mBEIsbXNSWnk7clZafmtzA1ooP3xUWnJvJlUTfW59XxJ%2BO2ZLVTktZktVOjUoDhQjLj0UEjgzKwNZIzQiCFVmeHFJRWgH
45.154.253.150200 OK14 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found426 B
onandeggsiswe.com.ua/multi?cs=bWJIYkJcW3lad1xVcVRxXVB4W3c&abt=0&red=1&sm=76&k=&v=1.0.60.1&sts=0&prn=0&emb=0&tid=756376&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fbayfiles.com%2Fnec3g3jeyf&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_wmPt=1673742732115&crc=1
108.157.229.27200 OK1.6 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found392 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
pogothere.xyz/asd100.bin
172.64.132.29200 OK103 kB
bayfiles.com/img/favicon/favicon-32x32-bayfiles.png?1663356888
45.154.253.150200 OK1.4 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed8393c5-4540-4060-a0b5-fbfed12b654c.jpeg
34.120.237.76200 OK4.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2973663e-5260-4c6e-8a14-91348fef9f3e.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7f9fdd3-2b09-4fe5-a079-daa82adc1d39.jpeg
34.120.237.76200 OK5.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc75c5357-d038-4ff3-8b8f-9b5f26db0a5e.jpeg
34.120.237.76200 OK3.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
34.120.237.76200 OK9.5 kB
pogothere.xyz/asd100.bin
172.64.132.29200 OK102 kB
policityseriod.info/
70.32.1.32302 Found0 B
policityseriod.info/
70.32.1.32302 Found0 B
policityseriod.info/
70.32.1.32302 Found0 B
policityseriod.info/
70.32.1.32302 Found0 B
policityseriod.info/
70.32.1.32302 Found0 B
policityseriod.info/
70.32.1.32302 Found0 B
policityseriod.info/
70.32.1.32302 Found0 B
pogothere.xyz/
172.64.132.29200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S-234386863%3A1673742732040125&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh4w9kaeOYkp8NCQBn6KH6awemEwBqKngi3aK8cuglDfoTy0XG1uUD375KymqLvN0lrPJYFe
142.250.74.109403 Forbidden0 B
accounts.google.com/v3/signin/identifier?dsh=S1040905646%3A1673742732048855&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh4vYU42hjbpYREK3hQCHRbE4tDaHZrgyjKBukkkjUk27TsETpSZ33kskR3-LUhr4IJT0Sfe
142.250.74.109403 Forbidden0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
31.13.72.36200 OK0 B