Report Overview

  1. Submitted URL

    ww5.zeroupload.xyz/a25e81c02ab16771/WhiteHatVPN1_22_11_28.exe?download_token=68598ff647f7f809e8979c283248ba1a40f096650f0bf12dc4514da76991934d

  2. IP

    104.21.69.245

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2023-02-01 06:39:12

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    7

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
embed.tawk.to86502014-03-19T22:03:49Z2023-03-13T08:30:57Z
vsb119.tawk.to1172952020-06-04T20:54:17Z2023-03-13T10:08:56Z
zeroupload.com537232018-11-25T07:04:10Z2023-03-13T09:08:49Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
img.icons8.com289592017-05-26T11:10:54Z2023-03-13T07:48:15Z
ww5.zeroupload.xyzunknown2022-11-11T10:06:55Z2023-03-12T00:12:05Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
www.google-analytics.com402012-10-03T03:04:21Z2023-03-13T07:36:03Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
highClient IP 104.21.69.245
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (35)

HTTP Transactions (61)

URLIPResponseSize
ww5.zeroupload.xyz/a25e81c02ab16771/WhiteHatVPN1_22_11_28.exe?download_token=68598ff647f7f809e8979c283248ba1a40f096650f0bf12dc4514da76991934d
104.21.69.245301 Moved Permanently0 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
push.services.mozilla.com/
52.37.79.227101 Switching Protocols0 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
zeroupload.com/cache/themes/spirit/logo_inverse.png
188.114.97.1200 OK6.3 kB
zeroupload.com/cache/themes/spirit/logo.png
188.114.97.1200 OK6.3 kB
img.icons8.com/fluent/48/000000/nui2.png
185.76.9.21200 OK1.5 kB
zeroupload.com/themes/spirit/assets/frontend/css/bootstrap.min.css
188.114.97.1200 OK13 kB
zeroupload.com/themes/spirit/assets/frontend/css/cookiealert.css
188.114.97.1200 OK9.4 kB
zeroupload.com/themes/spirit/assets/frontend/css/stack-interface.css
188.114.97.1200 OK1.3 kB
embed.tawk.to/61519116d326717cb6837f25/1fgj9tggh
172.67.38.66200 OK2.0 kB
zeroupload.com/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
188.114.97.1200 OK4.3 kB
zeroupload.com/themes/spirit/assets/frontend/css/custom.css
188.114.97.1200 OK2.5 kB
zeroupload.com/themes/spirit/assets/frontend/css/lightbox.min.css
188.114.97.1200 OK19 kB
zeroupload.com/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
188.114.97.1200 OK447 B
zeroupload.com/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
188.114.97.1200 OK5.0 kB
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-main.js
172.67.38.66200 OK9.7 kB
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-vendor.js
172.67.38.66200 OK35 kB
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-vendors.js
172.67.38.66200 OK70 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a7557cc-bf07-438f-8710-ba1b44e30270.jpeg
34.120.237.76200 OK5.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
34.120.237.76200 OK14 kB
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-runtime.js
172.67.38.66200 OK6.0 kB
www.google-analytics.com/analytics.js
142.250.74.110200 OK20 kB
vsb119.tawk.to/s/?k=63da08afee771623a27add16&cver=1&pop=false&asver=214&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUiLCJ2aWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUtOUpuN1ZRRG9MRWM4RDF4ZVczSU9CIiwic2lkIjoiNjNkYTA4YWZlZTc3MTYyM2EyN2FkZDE2IiwiaWF0IjoxNjc1MjMzNDU1LCJleHAiOjE2NzUyMzUyNTUsImp0aSI6Ijl4UmpJZTgyMVJ4TEx1MzNOMEs0byJ9.Il7ZQEGJG0judCB9Gzhs4X6LjjVO4dHfYi472k_aFpJxnZJ-CjAEx3sHnLHzlT8jzcAITBhew1VFmneESfUEsw&EIO=3&transport=websocket&__t=OOBivPi
104.22.24.131101 Switching Protocols849 B
zeroupload.com/themes/spirit/assets/frontend/css/theme.css
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/flickity.min.js
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/scripts.js
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/cookiealert.js
188.114.97.1200 OK0 B
zeroupload.com/cdn-cgi/apps/body/Wv1yovZlybnfqI4j0IiDuz9ffwM.js
188.114.97.1200 OK0 B
zeroupload.com/error?e=File+can+not+be+located%2C+please+try+again+later.
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/css/iconsmind.css
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/datepicker.js
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
188.114.97.1200 OK0 B
ww5.zeroupload.xyz/a25e81c02ab16771/WhiteHatVPN1_22_11_28.exe?download_token=68598ff647f7f809e8979c283248ba1a40f096650f0bf12dc4514da76991934d
172.67.216.17302 Found0 B
zeroupload.com/themes/spirit/assets/frontend/css/jquery.steps.css
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/typed.min.js
188.114.97.1200 OK0 B
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-app.js
172.67.38.66200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/smooth-scroll.min.js
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/jquery.steps.min.js
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/countdown.min.js
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/js/granim.min.js
188.114.97.1200 OK0 B
zeroupload.com/cdn-cgi/apps/head/VKAe3Te_4Mlk9kdOurVHEvd-qbk.js
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/css/socicon.css
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/css/flickity.css
188.114.97.1200 OK0 B
zeroupload.com/themes/spirit/assets/frontend/css/font-awesome.min.css
188.114.97.1200 OK0 B
embed.tawk.to/_s/v4/app/63b77dcd282/js/twk-chunk-common.js
172.67.38.66200 OK0 B