Report Overview

  1. Submitted URL

    cdn-130.anonfiles.com/r1a5z4k7yf/acf86250-1670503493/chaos%20ransomware%20builder%20v4.rar

  2. IP

    195.96.151.85

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2022-12-09 16:25:26

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
cdn-130.anonfiles.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
anonfiles.com1171610001-01-01T00:00:00Z0001-01-01T00:00:00Z
djv99sxoqpv11.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
hecherthepar.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
ehappy.buzzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
vjs.zencdn.net49680001-01-01T00:00:00Z0001-01-01T00:00:00Z
accounts.google.com810001-01-01T00:00:00Z0001-01-01T00:00:00Z
pogothere.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
eventhenherthisi.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
baconaces.pro8351480001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/PdUtneWUWJAkfWgEiA0RSRnxUS1xTIRQWCwV2FiA/EjJTGwg7JiAfIB0CA18RDy9aSUMZKgkeWFMuCRpYRG0GHQdIf0ENFRogWhQdGioLHQAXLgVfEBR2ChYfHCcLGEBHDVJXVVB5V1ESHCUDFhIGblVJCwFuVUlURWVXXFY3blVJEhwlUU1ARglCS1UNfV-NcVjduVUkXA25UOFRFfklJTFB5Vx4AFiAIXFczeVdIVUV6V0hAR3sBEBcQLQgBQEcNVklQW3tBDFhEMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (11)

HTTP Transactions (77)

URLIPResponseSize
cdn-130.anonfiles.com/r1a5z4k7yf/acf86250-1670503493/chaos%20ransomware%20builder%20v4.rar
195.96.151.85301 Moved Permanently162 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK5.3 kB
cdn-130.anonfiles.com/r1a5z4k7yf/acf86250-1670503493/chaos%20ransomware%20builder%20v4.rar
195.96.151.85301 Moved Permanently0 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
anonfiles.com/r1a5z4k7yf
45.154.253.150404 Not Found2.7 kB
anonfiles.com/css/anonfiles.css?1668606177
45.154.253.150200 OK25 kB
anonfiles.com/sw_anonfiles.js
45.154.253.150200 OK16 kB
anonfiles.com/js/app.js?1668606177
45.154.253.150200 OK58 kB
anonfiles.com/img/flags/24/ru.png
45.154.253.150200 OK403 B
anonfiles.com/img/flags/24/se.png
45.154.253.150200 OK581 B
anonfiles.com/img/flags/24/es.png
45.154.253.150200 OK666 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.2.217200 OK132 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.2.217200 OK9.7 kB
anonfiles.com/img/flags/24/us.png
45.154.253.150200 OK656 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
anonfiles.com/img/flags/24/dk.png
45.154.253.150200 OK537 B
anonfiles.com/img/flags/24/in.png
45.154.253.150200 OK593 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
anonfiles.com/img/flags/24/pl.png
45.154.253.150200 OK347 B
anonfiles.com/img/flags/24/fi.png
45.154.253.150200 OK456 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737329
54.230.245.107200 OK69 kB
push.services.mozilla.com/
35.160.122.190101 Switching Protocols0 B
anonfiles.com/img/flags/24/jp.png
45.154.253.150200 OK599 B
ocsp.pki.goog/s/gts1p5/PIudMIVwldY
216.58.211.3200 OK471 B
ocsp.pki.goog/s/gts1p5/PIudMIVwldY
216.58.211.3200 OK471 B
anonfiles.com/img/flags/24/de.png
45.154.253.150200 OK483 B
hecherthepar.com/N3VVb2cYSjYcWmQ9Dyc9B0BhPVRlLTFcH3YWA1ZSUh4HFjJZQXMbDlNIYlxQBEdsSRdeEWheQUQBNBsSREhkSQ5ZEzpSQUFIZEFUA1tmXkkGUyBSVhEBJQ4ACkRzHxNDGWheUQBFY19UBkRgV1AA
188.114.96.1204 No Content0 B
hecherthepar.com/UzF6TUd8Dhk+egpnHh0UFn8iFw87Bx8hETlXFCU9BVwsfiFgZFw5LjcMTX5wYAJKazc6VUd8f3VCDiwzJkJHfGE6XxwienVHR3xpYx9IY3V1REd8YSdBGyp6YhcKOTM/DEt7cGMHSn52YgRCdHU
188.114.96.1204 No Content0 B
ocsp.pki.goog/s/gts1p5/PIudMIVwldY
216.58.211.3200 OK471 B
anonfiles.com/img/flags/24/fr.png
45.154.253.150200 OK536 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
anonfiles.com/img/flags/24/br.png
45.154.253.150200 OK1.1 kB
anonfiles.com/img/flags/24/no.png
45.154.253.150200 OK611 B
ehappy.buzz/
52.20.131.174200 OK0 B
anonfiles.com/img/flags/24/kr.png
45.154.253.150200 OK988 B
anonfiles.com/sw_anonfiles.js?ZlQxSEo9dgZ7fVVmAmpmRHYdanwFNgAuclYwHCl6VGMcfChWMBxxf15tHH1yUTAEcXNWYFUuc0R4E39yA2JXfS9UeQMuc1V5BSp%2EX3kJcXhfeQl8LFE2BXAuAGQCe2hKdkI%2EaEp2VCArFiRIZigTLktqZkRlAWZ%2ERHhXKSYVMR0uKwonVGQsBzhCLRc
45.154.253.150200 OK16 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found395 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found395 B
e1.o.lencr.org/
23.36.77.32200 OK346 B
e1.o.lencr.org/
23.36.77.32200 OK346 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1668603321
45.154.253.150200 OK1.3 kB
e1.o.lencr.org/
23.36.77.32200 OK346 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
eventhenherthisi.com/utx?tid=737323&top=anonfiles.com&cb=rcelpYJpKmuj
13.225.131.8204 No Content0 B
eventhenherthisi.com/RFZIVzglNCs6ByVrKnFNNjp1cgoCc3oRXC4gcW5LPDk5J051Z2Y0VCsjLDFKKzg8eVYhIm1lfhQyHSNWIQEdAHIFPS4AXwE/CWdqFwQmL20XZzADcRYHHxRPEmQOPnlhZA4SUg4CDyBfcxwhFl4NFHgUeXVuGhNBfTcbAnUeHS88XRMQBSJ7FiYRBX90EQAGXA0weBJ2AgQnMG8sBywQUSsaAAZ5HBovAV4BFBpleywPLh97JxoPEnoMEh4dYBIACmJudRMbH3sREg4/cQM0JAFyByEOIm4ROh0FbxIOEBFhdzQkAXIBPj87bRFnCQVfKBUbZm0KMB56dicAIjNNEgMjD3l2Yx0YfhYQLjxUDgIOFQ0SLnwWfi0XAQ9+JywtAVwNAB0BDhJmIBZqdyUKEnonBwQGXwYHDTR2Ej0kBm93IgoTfiwTbj1LKzg4akkdDC8uDCY7Bjp/IhMgHlw
13.225.131.8200 OK1.2 kB
eventhenherthisi.com/bmhzblAPChADbw9VEUglHAROS2IoTUEoNAQeSlcjFgcCHiZfWV0NPAEdFwgiAQYHQD4LHFZcFl48GTgAOj0YGgcHLQEKOh4LOF0SS1oxCAEkUBUAPAEwCRk5JBJHJxoZKUsoYBkvIy9hWS0JHWMiMD4oMT0tHCcWJBESFycJPh0kaAwRSjwcNipKDxUvHRAtAQY8Cjc4JDtLPzY/HEs3ETgZFV08AzkaNzoiOzUtACkARAg8HV8SJiRLWjEsGFcCFjkjKSwkBmcIAzoDGV1RRSsYGTgRJicoJkAaaQ8fKiAxJhxWXBI8Eh8BNQlQNghjBgYVBigfDkAFIDsrXhk9JAUAJhM2UUYIJzhNQSg2JgRWXBYrIEJXHBcMOyU5HQU9BhJXK0AGdVwqMikWVwoJHRkID1UEIwEGA1M4Ix0qFxkfLEY
13.225.131.8200 OK1.2 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
pogothere.xyz/
172.64.173.27200 OK531 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
34.120.237.76200 OK5.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
34.120.237.76200 OK7.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg
34.120.237.76200 OK5.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg
34.120.237.76200 OK5.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
34.120.237.76200 OK7.9 kB
eventhenherthisi.com/utx?cb=Yjc2Whj2ckjZ&top=anonfiles.com&tid=737329
13.225.131.8204 No Content0 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
34.120.237.76200 OK6.6 kB
djv99sxoqpv11.cloudfront.net/PdUtneWUWJAkfWgEiA0RSRnxUS1xTIRQWCwV2FiA/EjJTGwg7JiAfIB0CA18RDy9aSUMZKgkeWFMuCRpYRG0GHQdIf0ENFRogWhQdGioLHQAXLgVfEBR2ChYfHCcLGEBHDVJXVVB5V1ESHCUDFhIGblVJCwFuVUlURWVXXFY3blVJEhwlUU1ARglCS1UNfV-NcVjduVUkXA25UOFRFfklJTFB5Vx4AFiAIXFczeVdIVUV6V0hAR3sBEBcQLQgBQEcNVklQW3tBDFhE
54.230.245.107200 OK572 B
ehappy.buzz/
52.20.131.174200 OK0 B
ehappy.buzz/
52.20.131.174200 OK0 B
pogothere.xyz/asd100.bin
172.64.173.27200 OK103 kB
ehappy.buzz/
52.20.131.174200 OK0 B
baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1
52.20.131.174200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S-737550325%3A1670603117659900&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh6T_MX9vlfYqhw7uKJ12XjlS6WmHRc9xbBEvBr7SQkKuaNEt05YLvzv95T3sVpyXDW2_qgbPw
142.250.74.109403 Forbidden0 B
accounts.google.com/v3/signin/identifier?dsh=S1744914048%3A1670603117678309&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh54FS4vNEc-p6ikaQPYhDKDr6e6TuTbT9V3OBRimhmm1m7-a3S1cL0GU0QOUUwmqwsuRHuWeA
142.250.74.109403 Forbidden0 B
ehappy.buzz/ZlQxSEo9dgZ7fVVmAmpmRHYdanwFNgAuclYwHCl6VGMcfChWMBxxf15tHH1yUTAEcXNWYFUuc0R4E39yA2JXfS9UeQMuc1V5BSp%2EX3kJcXhfeQl8LFE2BXAuAGQCe2hKdkI%2EaEp2VCArFiRIZigTLktqZkRlAWZ%2ERHhXKSYVMR0uKwonVGQsBzhCLRc
52.20.131.174200 OK0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.221.35200 OK0 B