Report Overview

  1. Submitted URL

    dl3.topfiles.net/files/2/61/31519/VTFvbTOVFEdKajByVEpOMlNFYk9JcC9xd3ZxVkxLb0RybC9yaE5lZGZabGx0ND06OmQvBqne3c5K_yj_-cY6B6Y/paintnet_4.3.7.exe

  2. IP

    88.99.67.38

    ASN

    #24940 Hetzner Online GmbH

  3. Submitted

    2022-12-06 10:31:26

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
dl3.topfiles.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
googleads.g.doubleclick.net420001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.com760001-01-01T00:00:00Z0001-01-01T00:00:00Z
tpc.googlesyndication.com1260001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google-analytics.com400001-01-01T00:00:00Z0001-01-01T00:00:00Z
pagead2.googlesyndication.com1010001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.no969690001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
paintnet.ru4251790001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
stats.g.doubleclick.net960001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdl3.topfiles.net/files/2/61/31519/VTFvbTOVFEdKajByVEpOMlNFYk9JcC9xd3ZxVkxLb0RybC9yaE5lZGZabGx0ND06OmQvBqne3c5K_yj_-cY6B6Y/paintnet_4.3.7.exeMalware
mediumdl3.topfiles.net/files/2/61/31519/VTFvbTOVFEdKajByVEpOMlNFYk9JcC9xd3ZxVkxLb0RybC9yaE5lZGZabGx0ND06OmQvBqne3c5K_yj_-cY6B6Y/paintnet_4.3.7.exeMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (184)

HTTP Transactions (65)

URLIPResponseSize
dl3.topfiles.net/files/2/61/31519/VTFvbTOVFEdKajByVEpOMlNFYk9JcC9xd3ZxVkxLb0RybC9yaE5lZGZabGx0ND06OmQvBqne3c5K_yj_-cY6B6Y/paintnet_4.3.7.exe
88.99.67.38301 Moved Permanently162 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
dl3.topfiles.net/files/2/61/31519/VTFvbTOVFEdKajByVEpOMlNFYk9JcC9xd3ZxVkxLb0RybC9yaE5lZGZabGx0ND06OmQvBqne3c5K_yj_-cY6B6Y/paintnet_4.3.7.exe
88.99.67.38302 Found0 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
paintnet.ru/?p=12
194.59.166.40301 Moved Permanently0 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
paintnet.ru/download/
194.59.166.40200 OK17 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
www.googletagmanager.com/gtag/js?id=UA-152888445-1
142.250.74.168200 OK44 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
216.58.207.227200 OK9.6 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK16 kB
fonts.googleapis.com/css?family=Roboto%3A400%2C400i%2C700&subset=cyrillic&display=swap
142.250.74.106200 OK1.2 kB
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK16 kB
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.227200 OK9.6 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
www.google-analytics.com/analytics.js
142.250.74.14200 OK20 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
push.services.mozilla.com/
35.163.1.35101 Switching Protocols0 B
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
216.58.207.226200 OK49 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-152888445-1&cid=1091621408.1670322677&jid=1382729115&gjid=1018560780&_gid=1268437926.1670322677&_u=YEBAAUAAAAAAACAAI~&z=2110044494
108.177.14.157200 OK1 B
googleads.g.doubleclick.net/pagead/html/r20221129/r20190131/zrt_lookup.html
142.250.74.162200 OK4.2 kB
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221670320336974%22
34.102.187.140200 OK22 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
adservice.google.no/adsid/integrator.js?domain=paintnet.ru
142.250.74.34200 OK100 B
adservice.google.com/adsid/integrator.js?domain=paintnet.ru
142.250.74.34200 OK100 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
tpc.googlesyndication.com/pagead/js/r20221129/r20110914/abg_lite_fy2021.js
216.58.211.1200 OK9.4 kB
tpc.googlesyndication.com/pagead/js/r20221129/r20110914/client/qs_click_protection_fy2021.js
216.58.211.1200 OK7.4 kB
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
216.58.207.227200 OK28 kB
www.gstatic.com/mysidia/83de75e735dabeddf4e705de6f0a2f41.js?tag=mysidia_one_click_handler_one_afma_2019
142.250.74.35200 OK14 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
www.google.com/pagead/drt/ui
216.58.207.228302 Found0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
www.google.com/pagead/drt/ui
216.58.207.228302 Found0 B
www.google.com/pagead/drt/ui
216.58.207.228302 Found0 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b9928a3-5708-47a4-8d92-f3af8d54a81d.png
34.120.237.76200 OK18 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d735c66-8946-4145-a67f-e17dd48087bc.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ca09fa3-9c1c-4e27-b763-2de04564da9d.jpeg
34.120.237.76200 OK4.8 kB
adservice.google.no/adsid/integrator.js?domain=paintnet.ru
142.250.74.34200 OK100 B