Report Overview

  1. Submitted URL

    bowfile.com/4Tjp

  2. IP

    104.21.37.79

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-09-03 19:49:53

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
amwoukrks.autosunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
accounts.google.com810001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
freychang.fun206650001-01-01T00:00:00Z0001-01-01T00:00:00Z
static.doubleclick.net3330001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
whos.amung.us126870001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sectigo.com4870001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.com760001-01-01T00:00:00Z0001-01-01T00:00:00Z
ic.tynt.com43000001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.tynt.com72600001-01-01T00:00:00Z0001-01-01T00:00:00Z
t.dtscout.com119510001-01-01T00:00:00Z0001-01-01T00:00:00Z
pagead2.googlesyndication.com1010001-01-01T00:00:00Z0001-01-01T00:00:00Z
partner.googleadservices.com7980001-01-01T00:00:00Z0001-01-01T00:00:00Z
tpc.googlesyndication.com1260001-01-01T00:00:00Z0001-01-01T00:00:00Z
bowfile.com1684110001-01-01T00:00:00Z0001-01-01T00:00:00Z
dyrfxuvraq0fk.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
googleads.g.doubleclick.net420001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z
waust.at381370001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
ofghaidarium.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.no969690001-01-01T00:00:00Z0001-01-01T00:00:00Z
de.tynt.com12520001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumfreychang.funSinkholed
mediumfreychang.funSinkholed

Files detected

  1. URL

    de.tynt.com/deb/v2?id=w!4priswyaav&dn=TC&cc=1&r=

  2. IP

    67.202.105.32

  3. ASN

    #32748 STEADFAST

  1. File type

    gzip compressed data, max compression\012- data

    Size

    810 B (810 bytes)

  2. Hash

    512636d251254a5aa63f5f2ab3f31ba9

    836ce1dd7555224d7a42a64b899ec58995a5b26f

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (207)

HTTP Transactions (94)

URLIPResponseSize
bowfile.com/4Tjp
172.67.205.230301 Moved Permanently0 B
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.35200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK1.4 kB
ocsp.digicert.com/
93.184.220.29200 OK1.8 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK3.2 kB
www.googletagmanager.com/gtag/js?id=G-G45GX6EFX2
142.250.74.72200 OK74 kB
fonts.googleapis.com/icon?family=Material+Icons
142.250.74.10200 OK812 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK15 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK3.4 kB
dyrfxuvraq0fk.cloudfront.net/?xfryd=954851
143.204.42.210200 OK54 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
googleads.g.doubleclick.net/pagead/html/r20220831/r20190131/zrt_lookup.html
142.250.74.130200 OK4.4 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK7.9 kB
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK45 kB
fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
142.250.74.163200 OK18 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
amwoukrks.autos/UkFsem8zIw8XUDN8DlwaIC1RX10UZF48CyszCgIaJDMNC180KkIZAz00CBwdPS8YVAE3NUlIKScSXkMdH3ILFS4TFzooFWoGKA1aECcADjsQKgAOLQApDzwFJhI8OwBlCwsJAwA7KV9dFBI+QyUaCTYcOwR5NjA+OhYqKF8+BSojLAooAzYsA3QhGD0hIzQ4IWAJPhIuERVUMyg+BDgwKjkkORE6PwAuPA4UAg81OzUESUgtNCoqGCk5MVsoFx8CPy1aMQo+ICQ3NiE5NwNxFikDOQUtMiEIDy0sIjAtGwopOTFbMj1iFj8NHwUZPksmCyocIC4qeRk+Ln8DDyI3OTE7KyEYJF1DDhNxAA83BDU6Pzs5CigsGBMjAEobESpZFjdicCsoNz1nBgkAPDFRLVYRLAg0Gxs1
54.230.111.48200 OK1.2 kB
ofghaidarium.xyz/ckRiNjldewFFBBEDMEBgQSgoYG9HFTNzYyYSDnxpICgGUG8ZI0RCUBZ5WwMNSnFTEEkbIF8HHwEwA0JMAXlTEFAcIg0LHwR5UxgKRmpQDhdCYhcLCFQwEldeT3VERk0GKF8HD0R2UAUNR3xSBApF
104.21.34.91204 No Content0 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.sectigo.com/
172.64.155.188200 OK472 B
t.dtscout.com/i/?l=https%3A%2F%2Fbowfile.com%2F4Tjp&j=
51.89.99.21200 OK2.1 kB
dyrfxuvraq0fk.cloudfront.net/uS29rM3goAAVVRz8GDw5BfltTBkltBRhcFjtSPAo7JgslRzE/SR9JHHZfTV8ZJQhWFR0lDFYCXioLCQ5MbRsbXBN2HRhACT8IGlETJEkeUkUmABFaFCcOTgE+fkFbFkp7RxMCSW5cKRZKewMCXQ0zSlkDAHNZNAVMblwpFkp7HR0WSwpWXR1IYkpZAx8uDA-BcXXkpWQNJe19aA0luXVtVETkKDVwAbl0tCk5lX01GRXo
143.204.42.210200 OK483 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-1455201204252520
142.250.74.66200 OK58 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
216.58.207.237302 Found394 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
216.58.207.237302 Found397 B
t.dtscout.com/pv/?_a=v&_h=bowfile.com&_ss=2knsqe1o76&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=7225&_cb=_dtspv.c
51.89.99.21200 OK51 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
amwoukrks.autos/utx?cb=3YnMRoLHoOqT&top=bowfile.com&tid=954851
54.230.111.48204 No Content0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK13 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
partner.googleadservices.com/gampad/cookie.js?domain=bowfile.com&callback=_gfp_s_&client=ca-pub-1455201204252520
142.250.74.98200 OK200 B
adservice.google.no/adsid/integrator.js?domain=bowfile.com
142.250.74.34200 OK100 B
adservice.google.com/adsid/integrator.js?domain=bowfile.com
142.250.74.162200 OK100 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.66200 OK0 B
freychang.fun/asd100.bin
104.21.45.207200 OK102 kB
cdn.tynt.com/tc.js
104.18.36.173200 OK7.5 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
tpc.googlesyndication.com/pagead/gadgets/html5/ssrh.js
142.250.74.33200 OK30 kB
tpc.googlesyndication.com/pagead/js/r20220831/r20110914/client/qs_click_protection_fy2021.js
142.250.74.33200 OK7.6 kB
tpc.googlesyndication.com/pagead/js/r20220831/r20110914/abg_lite_fy2021.js
142.250.74.33200 OK9.6 kB
ic.tynt.com/b/p?id=w!4priswyaav&lm=0&ts=1662234581015&dn=TC&iso=0&t=WorldBox.God.Simulator.Build.9133033.zip%20-%20BowFile
67.202.105.32204 No Content0 B
de.tynt.com/deb/v2?id=w!4priswyaav&dn=TC&cc=1&r=
67.202.105.32200 OK810 B
ic.tynt.com/b/p?id=w!4priswyaav&lm=0&ts=1662234581015&dn=TC&iso=0&t=WorldBox.God.Simulator.Build.9133033.zip%20-%20BowFile
67.202.105.32204 No Content0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
static.doubleclick.net/dynamic/5/387699974/10945498523041575299_17768809492648905713.png
216.58.207.230200 OK36 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.google.com/ads/measurement/l?ebcid=ALh7CaSBk0H1efA4vYCKgB4ftRNNHoNVEB3RGwEvoL2vpV9_dhCka-TZhn801WVkBOPUNxX9IBDYrevcRA_sJKjRpwvXDsQrWw
142.250.74.164204 No Content0 B
static.doubleclick.net/dynamic/5/387699974/10239363344844917797_16282955595290616607.png
216.58.207.230200 OK92 kB
static.doubleclick.net/dynamic/5/387699974/14557465553715579394_2031701608257038105.jpeg
216.58.207.230200 OK46 kB
static.doubleclick.net/dynamic/5/387699974/6821146200480253956_6441575474738202534.jpeg
216.58.207.230200 OK11 kB
www.google.com/pagead/drt/ui
142.250.74.164302 Found0 B
ic.tynt.com/b/p?id=w!4priswyaav&lm=0&ts=1662234581015&dn=TC&iso=0
67.202.105.32204 No Content0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ic.tynt.com/b/p?id=w!4priswyaav&lm=0&ts=1662234581015&dn=TC&iso=0
67.202.105.32204 No Content0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e53e5b7-d429-4f33-bd77-ce946421df55.jpeg
34.120.237.76200 OK5.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2e13cf1-38c2-4f82-a50c-b409a24f3af6.jpeg
34.120.237.76200 OK8.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6f5d90-39e2-4288-8685-adf2348d38e8.jpeg
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg
34.120.237.76200 OK7.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7d7b349-4711-4e66-bc42-888934e385a2.jpeg
34.120.237.76200 OK7.5 kB
ic.tynt.com/b/p?id=w!4priswyaav&lm=0&ts=1662234581015&dn=TC&iso=0
67.202.105.32204 No Content0 B
ic.tynt.com/b/p?id=w!4priswyaav&lm=0&ts=1662234581015&dn=TC&iso=0
67.202.105.32204 No Content0 B
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20220831&st=env
142.250.74.66200 OK11 kB
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvVoAzVis88TvGd6zgt2DD709x1bCD8sJr6YHz91JylpyYArtMzsyazBWOIxrwmmd3W8lUeCEUwtdqVuF_UZrmgydvb0U5eMP8Nmqavb17MpCjYjXYvCU2ufnDMQyeGUCTcdvbMbOc&sai=AMfl-YTo73BZgGVK3bpi5-AULHNfgsuC2rtLYd4Bph7oWx0Ngu40fdF_uNTjKft6Ryd8rIbEWgBoBhTUyCffBPcbMXDvEfDzagG6baRuoRphRcHOep_afj3khj8JPIe9jd7tMkc&sig=Cg0ArKJSzKX7Zz4VoysMEAE&id=lidar2&mcvt=1000&p=0,0,280,1110&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20220831&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=21&adk=3160410531&rs=2&la=1&cr=0&vs=4&r=v&rst=1662234580956&rpt=1045&met=mue&wmsd=0
142.250.74.66200 OK42 B
freychang.fun/
104.21.45.207200 OK0 B
waust.at/c.js
172.67.71.57200 OK0 B
fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
142.250.74.10200 OK0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
31.13.72.36200 OK0 B
whos.amung.us/pingjs/?k=4priswyaav&t=WorldBox.God.Simulator.Build.9133033.zip%20-%20BowFile&c=c&x=https%3A%2F%2Fbowfile.com%2F4Tjp&y=&a=0&d=1.249&v=27&r=5809
104.22.75.171200 OK0 B
bowfile.com/4Tjp
172.67.205.230200 OK0 B