Report Overview

  1. Submitted URL

    cdn-136.bayfiles.com/d8bf7amcy0/5fe4d89a-1664456221/idm.6.41.02.silent.kuyhaa.zip

  2. IP

    195.96.151.91

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2022-09-29 21:14:51

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    6

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
accounts.google.com810001-01-01T00:00:00Z0001-01-01T00:00:00Z
pogothere.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
vjs.zencdn.net49680001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
bayfiles.com3766020001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
djv99sxoqpv11.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
medadelem.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ehasnoconve.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn-136.bayfiles.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/aS1J3VVgoPRkzZz87E2hvfmREYm5tOAQ6NjtvGzktOAAEYx0FP1EhIi9vR3M0KjwQaH4uPBRoaW0zEzdlf3QDJTcgbxEzOzkrHCU9MytRIDl2PxgvMSc+FnBqDWdZZX15Yl8taXp3RBd9eWIbPDY+KlJnaDNqQQpuf3dEF315YgUjfXgTTmN2e3tSZ2gsNx-Q+N25gMWdoemJHZGh6d0VlPiIgEjM3M3dFE2F9fEdzLXZjMalware
mediumdjv99sxoqpv11.cloudfront.net/UTmZIZkUtCSYAejoPLFtyfVF7VXBoDDsJKz5bKzAfPBIyKTw2QDwcIXNWbgokIAF1QCAgBXVXYy8CKltxaBMpWyghHCEKKS9DeiBwYFZtVHVmHnlXYH0kbVR1Ig8mEz1rVHgefXg5flJgfSRtVHU8EG1VBHdQZlZsa1R4ASAtDSdDdwhUeFd1fld4V2B8Vi-4PNysAJx5gfCBxUGt+QD1bdAMalware
mediumdjv99sxoqpv11.cloudfront.net/gamJTWlQJDT08ax4LN2djWVVgaWdMCCA1OhpfOD4wBFM3ORsCFAIPGVhEJyAwV1J1NjUEBW58MQQBbmtyCwYxZ2BMFiM1P1cENTkmEwkjPywTRCY7aQcNKTM4BgN2aBJfTGN/ZlpKK2tlT1ERf2ZaDjo0IRJHYWosUlQMbGBPURF/ZloQJX9nK1tldGRDR2-FqMw8BODVxWCRhamVaUmJqZU9QYzw9GAc1NSxPUBVjYkRSdS9pWwMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (11)

HTTP Transactions (71)

URLIPResponseSize
cdn-136.bayfiles.com/d8bf7amcy0/5fe4d89a-1664456221/idm.6.41.02.silent.kuyhaa.zip
195.96.151.91301 Moved Permanently162 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.110200 OK5.3 kB
cdn-136.bayfiles.com/d8bf7amcy0/5fe4d89a-1664456221/idm.6.41.02.silent.kuyhaa.zip
195.96.151.91301 Moved Permanently0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
bayfiles.com/d8bf7amcy0
45.154.253.150404 Not Found2.3 kB
bayfiles.com/css/bayfiles.css?1661352192
45.154.253.150200 OK25 kB
bayfiles.com/js/app.js?1661352192
45.154.253.150200 OK58 kB
bayfiles.com/sw.js
45.154.253.150200 OK14 kB
bayfiles.com/img/flags/24/pl.png
45.154.253.150200 OK347 B
bayfiles.com/img/flags/24/fi.png
45.154.253.150200 OK456 B
bayfiles.com/static/logo.png
45.154.253.150200 OK39 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.86.217200 OK9.7 kB
bayfiles.com/img/flags/24/se.png
45.154.253.150200 OK581 B
bayfiles.com/img/flags/24/dk.png
45.154.253.150200 OK537 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK329 B
bayfiles.com/img/flags/24/us.png
45.154.253.150200 OK656 B
bayfiles.com/img/flags/24/fr.png
45.154.253.150200 OK536 B
bayfiles.com/img/flags/24/jp.png
45.154.253.150200 OK599 B
bayfiles.com/img/flags/24/kr.png
45.154.253.150200 OK988 B
bayfiles.com/img/flags/24/br.png
45.154.253.150200 OK1.1 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
bayfiles.com/img/flags/24/de.png
45.154.253.150200 OK483 B
bayfiles.com/img/flags/24/ru.png
45.154.253.150200 OK403 B
bayfiles.com/img/flags/24/in.png
45.154.253.150200 OK593 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737333
54.230.245.208200 OK98 kB
bayfiles.com/img/flags/24/es.png
45.154.253.150200 OK666 B
e1.o.lencr.org/
23.36.77.32200 OK345 B
e1.o.lencr.org/
23.36.77.32200 OK345 B
push.services.mozilla.com/
52.38.227.80101 Switching Protocols0 B
bayfiles.com/sw.js?a29HQmMwTXBxVFhdcWBPSU1rYAEJXyQnWggJanJWDQ5qdgBfWmp7W11eanRUDVZzI1ReDHYkAElDZXAGWAx%2BJFcJQiJ0V1NCc3FSWUJ%2BdVcPQn9xWwlefiQCWV0mdkFHTTQ1QUdNNy0PAgwuNhoYCjUrDA9BLiwFBE1rYFZFXWUf
45.154.253.150200 OK14 kB
medadelem.xyz/eEJCanRXfSEZSSkaABggPwRxOxg2dRcyEDkVCl8mGwcEORIUJWQeHRx/dVlDS3FxTAQRJn9bUgs2Ix4BC39zTB0WJC1XUg5/c0RHTGxwU1pIZDdXRV42MgsTRXNkGgAMLn9bQk52dlJCSHV6U0VN
172.67.189.15204 No Content0 B
ehasnoconve.xyz/bXVzcmQMFxAfWwxIEVQRHxlOV1YrUEE0AAcDSksXFRoCAhJcRF0RCAIAFxQWAhsHXAoIAVZAIgwmQjhXOyMUHTQ/HgkoHlVCNkAMGxMeICE0GEYGKywkRTwOGQM0CA8ZOjIzITQNQzQ0XDAbOw1UAyFBKV0+GQU1DD1HBzQvJxwTM10PNggAARNAIyAnIRAVBhUwCT0eBgc7MTFUOAoGNiQxH0A0FRIFPzcOUEEwIgM3AjYzCS8pKlVYLB9KEAwtA0E2LxFKFzMkFyM2PUhHMTkIJxsSNiocJCICEQtGFzciXkRGKwM4HxUqAzkhHjxWCEYHIT5fEgA8HEAkVkAmI0dGFSk6ERwXCSc9KTUMWxFDJAg9HDoVIQc4QD9XCTM2QCJUEzYWHiEtKRhCBwYcHBRQGR8HFz8GRTcqAA
143.204.55.54200 OK1.2 kB
ehasnoconve.xyz/b014N1YOLxtaaQ5wGhEjHSFFEmQpaEpxMgU7QQ4lFyIJRyBefFZUOgA4HFEkACMMGTgKOV0FEDoZFW0fNSYtQxU8FDlSPAAdNHEiFisucWE5FTpYEis+MnwsWi8zTRcJHTp+LyQZDwUHKzobfg4hGhpQOQQEOXFnPg45UBQ3GyBuL1cOM1siFyw6eiY4NB9fHiwIM3wFVgkdXhQYFD5tIjkFLloeASEgbh5fJhphBF4EHw87KjdJRQAnKh1RDgh4HlscCCsrZSI5BS0PEyh8LnUeCxwiWwwcLEllYi4eOUMSPCk8UyEHGB1xMl4rFFNiOX86DwAGYExnGBY+OX0uWioedBQXGD9Dc10PKXNnDSk5ETwcIhZHawwbIkUiFQIBTw
143.204.55.54200 OK1.2 kB
medadelem.xyz/bFpJaTBDZSoaDTk0CF19JAwuO3ELHh0uRC4eGAFzNR8YK3I5E28dWQhnfloHX2l8T0AFPnRYCEopPQhEGSl0WBYFNC8GDUosdFgeXHR7RwBKL3RYFhgqKA4NXXw5HUQAZ3hfBlhucV8AW2JwXQQ
172.67.189.15204 No Content0 B
ehasnoconve.xyz/cTR3N2EQVhRaXhAJFREUA1hKElM3EUVxBRtCTg4SCVsGRxdABVlUDR5BE1ETHloDGQ8UQFIFJxZVGn01JlgmfSUlBE9WGUV4OQUFG2MhYQYQYxN6IjJ1RngJAVI4c1UGdjF6Uj5mBHQnMH0ncDcZcT1OIAZiRn1QP14iciMmAU96MCB2FVoVCHcAbhkrBjV6Jxh5RmdQEnE5YwoccQBcCyFNAGMzMm1AVjASejxjLEV2EHlTEHY9UTU2elIFJytYB3wqQ0AbY1A0ZhEFOxBwHVhROGY9fzgmWwRiDSB5FXAjIWElcURDci1bDiB+Lw4POgUDWwU2ZjNlU1xyBnoWSXY4czcJYzRlCRBZIVY0HH4GbTRIZS5NFkhzNlRQP2cPZzQzYh1uCiNnE2RYAWMAEQsCWxlHXBpQE1lQFVc4XxcgYToF
143.204.55.54200 OK1.2 kB
medadelem.xyz/TUhSUFhidzEjZRx5IgILGyRlCTUbfTAYAjwSCmUsKCUiPzsKfHQkMSl1ZWVufn9kdigkLG9iYWs7JjEsODtvYX4kJjQ/ZWs+b2F2fWZkYHZ9bidtaWs8IjE/cHl0ICw5JG9hbnt8ZmhufX9qaWt8
172.67.189.15204 No Content0 B
e1.o.lencr.org/
23.36.77.32200 OK345 B
bayfiles.com/img/favicon/favicon-32x32-bayfiles.png?1597318614
45.154.253.150200 OK1.4 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
e1.o.lencr.org/
23.36.77.32200 OK345 B
e1.o.lencr.org/
23.36.77.32200 OK345 B
ehasnoconve.xyz/utx?cb=WO1qjE4DcJBo&top=bayfiles.com&tid=756376
143.204.55.54204 No Content0 B
ehasnoconve.xyz/utx?cb=HDHXX3AfiRe8&top=bayfiles.com&tid=737333
143.204.55.54204 No Content0 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
216.58.207.237302 Found395 B
djv99sxoqpv11.cloudfront.net/aS1J3VVgoPRkzZz87E2hvfmREYm5tOAQ6NjtvGzktOAAEYx0FP1EhIi9vR3M0KjwQaH4uPBRoaW0zEzdlf3QDJTcgbxEzOzkrHCU9MytRIDl2PxgvMSc+FnBqDWdZZX15Yl8taXp3RBd9eWIbPDY+KlJnaDNqQQpuf3dEF315YgUjfXgTTmN2e3tSZ2gsNx-Q+N25gMWdoemJHZGh6d0VlPiIgEjM3M3dFE2F9fEdzLXZj
54.230.245.208200 OK439 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
216.58.207.237302 Found391 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
e1.o.lencr.org/
23.36.77.32200 OK345 B
djv99sxoqpv11.cloudfront.net/UTmZIZkUtCSYAejoPLFtyfVF7VXBoDDsJKz5bKzAfPBIyKTw2QDwcIXNWbgokIAF1QCAgBXVXYy8CKltxaBMpWyghHCEKKS9DeiBwYFZtVHVmHnlXYH0kbVR1Ig8mEz1rVHgefXg5flJgfSRtVHU8EG1VBHdQZlZsa1R4ASAtDSdDdwhUeFd1fld4V2B8Vi-4PNysAJx5gfCBxUGt+QD1bdA
54.230.245.208200 OK183 B
djv99sxoqpv11.cloudfront.net/gamJTWlQJDT08ax4LN2djWVVgaWdMCCA1OhpfOD4wBFM3ORsCFAIPGVhEJyAwV1J1NjUEBW58MQQBbmtyCwYxZ2BMFiM1P1cENTkmEwkjPywTRCY7aQcNKTM4BgN2aBJfTGN/ZlpKK2tlT1ERf2ZaDjo0IRJHYWosUlQMbGBPURF/ZloQJX9nK1tldGRDR2-FqMw8BODVxWCRhamVaUmJqZU9QYzw9GAc1NSxPUBVjYkRSdS9pWw
54.230.245.208200 OK543 B
ehasnoconve.xyz/multi?cs=MFZzOUMIbkcJdgVmRw53CWZKAHQ&abt=0&red=1&sm=76&k=&v=1.0.60.0&sts=0&prn=0&emb=0&tid=756376&rxy=1280_1024&u=1913803340510735&agec=1664486082&fs=1&mbkb=178.25311942959&ref=https%3A%2F%2Fbayfiles.com%2Fd8bf7amcy0&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_0kq0=1664486079519&crc=1
143.204.55.54200 OK1.5 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99f26bb4-2c5c-44ef-86d3-90fd05ec1ce0.jpeg
34.120.237.76200 OK9.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F783cca30-851d-4c3b-97b3-dfc92f711d23.jpeg
34.120.237.76200 OK4.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
34.120.237.76200 OK14 kB
pogothere.xyz/
172.64.199.35200 OK7.8 kB
pogothere.xyz/asd100.bin
172.64.199.35200 OK110 kB
accounts.google.com/v3/signin/identifier?dsh=S1779002824%3A1664486082221207&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWpG6i3bodmzmLoAEYk3HFu9LRT5sRgjQSGjRen0upN2ceNpqWrylDsb4EBKTCb2xVx0b3Dt
216.58.207.237403 Forbidden0 B
pogothere.xyz/asd100.bin
172.64.199.35200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S2030991831%3A1664486082172083&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWq05197QW_Wcqqc8P_wypgVsAN0fEpZJfKchahfbD6eEUwGSvIISct467DYy0aL44861Hap
216.58.207.237403 Forbidden0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
31.13.72.36200 OK0 B