Report Overview

  1. Submitted URL

    l.top4top.io/f_dx9sfh8e-2sc5omrpbfxow/1664354855/1799zt8w41.zip

  2. IP

    65.21.235.194

    ASN

    #24940 Hetzner Online GmbH

  3. Submitted

    2023-03-21 06:52:09

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    26

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
top4top.io1188392019-12-01T08:20:12Z2023-03-25T16:42:34Z
www.google-analytics.com402012-10-03T03:04:21Z2023-03-26T06:13:06Z
cdn.vmix.comunknown2015-09-25T12:19:53Z2023-03-21T07:53:10Z
s.top4top.iounknown2020-01-05T04:15:20Z2023-03-24T09:24:30Z
l.top4top.io9264912020-01-15T00:19:40Z2023-03-25T03:28:35Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-25T18:12:03Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-26T05:10:41Z
www.facebook.com992012-05-21T02:23:41Z2021-02-04T00:31:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-26T05:11:59Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-26T05:18:47Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-26T05:10:29Z
ajax.googleapis.com129052013-08-16T11:51:31Z2023-03-26T06:17:09Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-26T05:09:08Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-25T18:14:26Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-26T05:11:12Z
connect.facebook.net1392012-05-22T04:51:28Z2023-03-26T05:09:01Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high 54.230.111.106Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediuml.top4top.io/f_dx9sfh8e-2sc5omrpbfxow/1664354855/1799zt8w41.zipMalware
mediumtop4top.io/f-1799zt8w41-zip.htmlMalware
mediumtop4top.io/downloadf-1799zt8w41-zip.htmlMalware
mediums.top4top.io/styles/default-new-reg/js/bootstrap.min.js?rev=47Malware
mediumtop4top.io/share.jsMalware
mediums.top4top.io/styles/default-new-reg/css/fonts.css?rev=47Malware
mediums.top4top.io/styles/default-new-reg/css/bootstrap.rtl.min.css?rev=47Malware
mediums.top4top.io/styles/default-new-reg/css/animate.min.css?rev=47Malware
mediums.top4top.io/styles/default-new-reg/css/reset.css?rev=47Malware
mediums.top4top.io/styles/default-new-reg/css/the220px.css?rev=47Malware
mediums.top4top.io/styles/default-new-reg/css/stylesheet-3.3.css?rev=47Malware
mediums.top4top.io/styles/default-new-reg/css/font-awesome.min.css?rev=47Malware
mediums.top4top.io/styles/default-new-reg/javascript.js?rev=47Malware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (18)

HTTP Transactions (58)

URLIPResponseSize
l.top4top.io/f_dx9sfh8e-2sc5omrpbfxow/1664354855/1799zt8w41.zip
65.21.235.194302 Moved Temporarily138 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
top4top.io/f-1799zt8w41-zip.html
188.165.137.170301 Moved Permanently256 B
top4top.io/downloadf-1799zt8w41-zip.html
188.165.137.170200 OK18 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
top4top.io/ads/adpull.php?n=1&w=728&h=90&call=js&t=banner&divid=33938111
188.165.137.170200 OK3 B
ocsp.digicert.com/
192.229.221.95200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.163200 OK471 B
connect.facebook.net/en_US/all.js
157.240.205.11200 OK1.7 kB
ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js
172.217.21.170200 OK33 kB
s.top4top.io/styles/default-new-reg/js/bootstrap.min.js?rev=47
172.67.133.128200 OK10 kB
top4top.io/share.js
188.165.137.170200 OK2.0 kB
ocsp.pki.goog/gts1c3
142.250.74.163200 OK471 B
top4top.io/ads/adpull.php?n=1&w=728&h=90&call=js&t=banner&divid=330275050
188.165.137.170200 OK3 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
s.top4top.io/styles/default-new-reg/css/fonts.css?rev=47
172.67.133.128200 OK645 B
top4top.io/styles/default-new-reg/images/zl.png
188.165.137.170200 OK673 B
top4top.io/images/twitter.png
188.165.137.170200 OK385 B
top4top.io/images/facebook.png
188.165.137.170200 OK149 B
top4top.io/images/live.png
188.165.137.170200 OK761 B
top4top.io/images/reddit.png
188.165.137.170200 OK645 B
top4top.io/images/myspace.png
188.165.137.170200 OK776 B
top4top.io/images/sphinn.png
188.165.137.170200 OK308 B
top4top.io/images/technorati.png
188.165.137.170200 OK283 B
push.services.mozilla.com/
35.86.38.2101 Switching Protocols0 B
ocsp.pki.goog/gts1c3
142.250.74.163200 OK472 B
www.google-analytics.com/analytics.js
142.250.74.78200 OK20 kB
ocsp.pki.goog/gts1c3
142.250.74.163200 OK472 B
www.google-analytics.com/j/collect?v=1&_v=j99&a=1253078726&t=pageview&_s=1&dl=https%3A%2F%2Ftop4top.io%2Fdownloadf-1799zt8w41-zip.html&ul=en-us&de=UTF-8&dt=Setup%20Windows%20From%20HD%20(x32)%20%7C%20%D8%AA%D8%AD%D9%85%D9%8A%D9%84&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=466784992&gjid=631058722&cid=457629976.1679381522&tid=UA-9340508-1&_gid=868820996.1679381522&_r=1&_slc=1&z=2092608195
142.250.74.78200 OK3 B
www.facebook.com/plugins/like.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df38d8b8828f82f8%26domain%3Dtop4top.io%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Ftop4top.io%252Ff325f7398120842%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Ftop4top.io%2Fdownloadf-1799zt8w41-zip.html&layout=button_count&locale=en_US&sdk=joey&width=90
157.240.205.35200 OK0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6943b819-ab3e-4698-a81d-266be026b4b8.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
34.120.237.76200 OK8.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68a4b574-14c9-4d65-81df-d700ef3fa2f4.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F450a7216-1468-4600-bf16-dcda5d72733e.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0a9c92d-c90f-4b6f-9e1b-2627c3abfa38.jpeg
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8c30d472-b18d-4143-87bb-ee8773cd5f78.jpeg
34.120.237.76200 OK9.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faacc3f97-56a5-4bb4-802f-dc4b529c41d3.jpeg
34.120.237.76200 OK6.6 kB
s.top4top.io/styles/default-new-reg/js/the220px.js?rev=47
172.67.133.128200 OK0 B
s.top4top.io/styles/default-new-reg/css/bootstrap.rtl.min.css?rev=47
172.67.133.128200 OK0 B
s.top4top.io/styles/default-new-reg/css/animate.min.css?rev=47
172.67.133.128200 OK0 B
s.top4top.io/styles/default-new-reg/css/reset.css?rev=47
172.67.133.128200 OK0 B
s.top4top.io/styles/default-new-reg/css/the220px.css?rev=47
172.67.133.128200 OK0 B
s.top4top.io/styles/default-new-reg/images/soft.png
172.67.133.128200 OK0 B
s.top4top.io/styles/default-new-reg/images/newlogo.png
172.67.133.128200 OK0 B
s.top4top.io/styles/default-new-reg/css/stylesheet-3.3.css?rev=47
172.67.133.128200 OK0 B
s.top4top.io/styles/default-new-reg/css/font-awesome.min.css?rev=47
172.67.133.128200 OK0 B
cdn.vmix.com/download/vmix25.exe
54.230.111.106200 OK0 B
s.top4top.io/styles/default-new-reg/javascript.js?rev=47
172.67.133.128200 OK0 B