Report Overview

  1. Submitted URL

    cdn-111.anonfiles.com/gcH4kfT6ye/ab491007-1674991693/KreYzeSpoofer.rar

  2. IP

    195.96.151.60

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-01-30 19:55:41

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
reerfdfgourgo.xyzunknown2023-01-23T13:29:36Z2023-03-01T02:07:26Z
baconaces.pro8351482018-07-16T10:32:31Z2023-03-13T06:01:36Z
vjs.zencdn.net49682012-05-21T10:26:59Z2023-03-13T05:47:22Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
osiextantly.comunknown2023-01-30T16:14:35Z2023-02-23T05:17:01Z
thecoveos.comunknown2023-01-15T09:20:54Z2023-02-24T23:46:11Z
cdn-111.anonfiles.comunknown2020-07-17T13:24:41Z2023-02-06T23:58:04Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
anonfiles.com1171612020-06-17T12:04:43Z2023-03-13T05:41:45Z
djv99sxoqpv11.cloudfront.netunknown2021-10-07T16:52:14Z2023-03-13T06:01:35Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
accounts.google.com812016-03-20T13:44:49Z2023-03-13T07:05:07Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/McjRzS08RWx0tcAZdF3Z4QQNAeXZUXgAkIQIJOnkcSgQlLngbEgcxK08EVScuHFNObSocV056aRNQEXZ7VEADJCRPWgEoKQZXECMgGhIGKnIfWwkiIx5VVnkJRxpDbn1CHAQiIRZbBDhqQAQdP2pABEJ7YUIRQAlqQAQEIiFEAFZ4DVcGQzN5RhFACWpABA-E9akF1Qnt6XARabn1CUxYoJB0RQQ19QgVDe35CBVZ5fxRdAS4pHUxWeQlDBEZlf1RBTnp9RgxKfnxEA0V4ekQHQnoMalware
mediumdjv99sxoqpv11.cloudfront.net/uOUQzUHlaK102Rk0tV21OCnMAY0kfLkA/F0l5ajMWCCdVNRZhJ1RhKx8wSTRECWJfMRdeeRU1F1p5AnYYXSYOZF9MJQ49FkMtXzwYHHZ1ZVcJYQFgUU4tXTQWTjcWYklXMBZiSQh0HWBcCgYWYklOLV1mTRx3cXVLCTwFZFwKBhZiSUsyFmM4CHQGfkkQYQ-FgHlwnWD9cCwIBYEgJdAJgSBx2AzYQSyFVPwEcdnVhSQxqA3YMBHUBZEEAcQBmTg93BmZKCHUMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (70)

URLIPResponseSize
cdn-111.anonfiles.com/gcH4kfT6ye/ab491007-1674991693/KreYzeSpoofer.rar
195.96.151.60301 Moved Permanently162 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
cdn-111.anonfiles.com/gcH4kfT6ye/ab491007-1674991693/KreYzeSpoofer.rar
195.96.151.60301 Moved Permanently0 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
push.services.mozilla.com/
44.240.124.200101 Switching Protocols0 B
anonfiles.com/gcH4kfT6ye
45.154.253.150200 OK3.2 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.130.217200 OK9.7 kB
vjs.zencdn.net/7.3.0/video.min.js
151.101.130.217200 OK132 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
34.120.237.76200 OK9.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
34.120.237.76200 OK4.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
34.120.237.76200 OK7.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
34.120.237.76200 OK8.5 kB
djv99sxoqpv11.cloudfront.net/?xsvjd=737329
54.230.245.208200 OK69 kB
anonfiles.com/css/anonfiles.css?1668606177
45.154.253.150200 OK25 kB
anonfiles.com/js/app.js?1668606177
45.154.253.150200 OK58 kB
anonfiles.com/sw_anonfiles.js
45.154.253.150200 OK16 kB
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
216.58.211.3200 OK471 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
216.58.211.3200 OK471 B
osiextantly.com/dU5FdVQULCYYaxRzJ1MhByJ4UGYza3czMB84fEwnDSE0BSJEf2sWOBo7IRMmGiAxWzoQOmBHEjgtLycuJn59JwMNfjEWFS8qA0YOQR8UOxUQFh8gDBIPLjwFPAQKGz8WHSIkODkgIhcREi09PmRNCxMmNwAGAzsbFx0qFgJFe3MUBjsfAC0OQhgANBA/DRclAxILKj4FLxYANhkSCS08Ez4gDBMDAiUsPCxAGBMbPz8cPQUQFyB0Nhw0Hyw8Bi8sBzE8BB8EJDAlfDU0FjAEciwBPBwUNDgEHwQkETwnAzAVMxRxMQIWCRQPGkAcLTMVNhk1NBY0YwBMNR4IdCQ6AXgdNAYULCtEFyA2HBoeN34XJAVEdxQSAjErdkAXNxgfQDINHCE0B0E+DSAsIisUGRA3Cx8ZMkQcByE6BXcXEiw+KCsNETR+E0ExHh8NJDoaaC8GOxs+eDxmJnZ1IzFCJw
108.157.229.100200 OK1.2 kB
osiextantly.com/RUN2MTkkIRVcBiR+FBdMNy9LFAsDZkR3XS81TwhKPSwHQU90clhSVSo2EldLKi0CH1cgN1MDfzAMI2BDEAsaUHJ0c0RjUnU3IAMICgAYfHgccx1XdS4CUwN/A3MaBFgvDiFyeiEVOGNjLQlHY1EOO05GahERM3JuDyU7Y10gJiRkCANyBgR4KxovaWocDCx3AAgJJwUAAyg7RWE/NC95cR9yLGdaDxond14QFkJFYRESIWVTJhQvWlUdDjRrUBYSHgFxEgEVcl4cFC9aVQoPIABUEREOAlodFTpybTIFLHdODgEea1AWFgVIfygOQnJxFAQQWlIUGiccfyILGkZXEgdPUnoyCjRofCIJEnBzIhA0SQsEOS9gajwFIGFOACASX28tECdJSARwL3x7DRY0a3wAAhVgeygXEQgKBy4senoNFlBbSiotBgxgJixHUl8gLC5SXnQR
108.157.229.100200 OK1.2 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
reerfdfgourgo.xyz/QmtrbmNtVAgdXiYGAwQwL1I7NiU2Xj1eORA+Mx4BFloHPwYuGE0aCiZWXF1UcVhbSBMrD1ZfW2QYHw8XNxhWX0UrBQ0BXmQdVl9NckVZQFFkHlZfUXZTUltQdFxdXVZ0WFpfRTYbCglec00bGhcuVlpYVHdaW1ZWdlxZVlE
188.114.97.1204 No Content0 B
reerfdfgourgo.xyz/V1hUbUR4ZzceeTQfLDwJAjwWNRMwHTc4DgICIwk9BA5lAwU5bHIZLTNlY15zZGptSzQ+PGlcYiQsNRkxJGVlSy05PjtQYiFlZUN3Y3ZnXGplfiFQdWVsbFRxZG5jW3dibmdcdXEsJAwjamlyHTAjNGlccmBtZV18YmxjX3Ju
188.114.97.1204 No Content0 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
216.58.211.3200 OK471 B
djv99sxoqpv11.cloudfront.net/McjRzS08RWx0tcAZdF3Z4QQNAeXZUXgAkIQIJOnkcSgQlLngbEgcxK08EVScuHFNObSocV056aRNQEXZ7VEADJCRPWgEoKQZXECMgGhIGKnIfWwkiIx5VVnkJRxpDbn1CHAQiIRZbBDhqQAQdP2pABEJ7YUIRQAlqQAQEIiFEAFZ4DVcGQzN5RhFACWpABA-E9akF1Qnt6XARabn1CUxYoJB0RQQ19QgVDe35CBVZ5fxRdAS4pHUxWeQlDBEZlf1RBTnp9RgxKfnxEA0V4ekQHQno
54.230.245.208200 OK552 B
djv99sxoqpv11.cloudfront.net/uOUQzUHlaK102Rk0tV21OCnMAY0kfLkA/F0l5ajMWCCdVNRZhJ1RhKx8wSTRECWJfMRdeeRU1F1p5AnYYXSYOZF9MJQ49FkMtXzwYHHZ1ZVcJYQFgUU4tXTQWTjcWYklXMBZiSQh0HWBcCgYWYklOLV1mTRx3cXVLCTwFZFwKBhZiSUsyFmM4CHQGfkkQYQ-FgHlwnWD9cCwIBYEgJdAJgSBx2AzYQSyFVPwEcdnVhSQxqA3YMBHUBZEEAcQBmTg93BmZKCHU
54.230.245.208200 OK256 B
baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1
52.20.131.174200 OK23 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
anonfiles.com/img/flags/24/es.png
45.154.253.150200 OK666 B
thecoveos.com/
54.162.51.18200 OK0 B
anonfiles.com/img/flags/24/se.png
45.154.253.150200 OK581 B
anonfiles.com/img/flags/24/no.png
45.154.253.150200 OK611 B
anonfiles.com/img/flags/24/dk.png
45.154.253.150200 OK537 B
anonfiles.com/img/flags/24/in.png
45.154.253.150200 OK593 B
anonfiles.com/static/logo.png
45.154.253.150200 OK18 kB
anonfiles.com/img/file/filetypes/ext/rar.png?1668605455
45.154.253.150200 OK631 B
anonfiles.com/img/flags/24/us.png
45.154.253.150200 OK656 B
anonfiles.com/img/flags/24/de.png
45.154.253.150200 OK483 B
anonfiles.com/img/flags/24/fr.png
45.154.253.150200 OK536 B
anonfiles.com/img/flags/24/br.png
45.154.253.150200 OK1.1 kB
anonfiles.com/img/flags/24/ru.png
45.154.253.150200 OK403 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
anonfiles.com/img/flags/24/fi.png
45.154.253.150200 OK456 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
osiextantly.com/utx?cb=rLaaxR3S5bf6&top=anonfiles.com&tid=737329
108.157.229.100204 No Content0 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found395 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found393 B
anonfiles.com/img/flags/24/pl.png
45.154.253.150200 OK347 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
anonfiles.com/img/flags/24/jp.png
45.154.253.150200 OK599 B
anonfiles.com/img/flags/24/kr.png
45.154.253.150200 OK988 B
anonfiles.com/sw_anonfiles.js?S3lWNXUQW2EGQnhLZRdZaVt6F0MoG2dTTXsde1RFeU57ARd7HXsMQHNAewBNfB1jDEx7TTJTTGlVdAIRfk5jDE1zVGVWFy1UYlRDL1Q3V0wuVG4DRX9KMFMWKBpkAFdnWyVCV2dbIl0QKBYgUBo4VzVaGGlVdARFZUx0GRMqFSVQWS0YOkYQZx83WQYuJA
45.154.253.150200 OK16 kB
anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1668605455
45.154.253.150200 OK1.3 kB
thecoveos.com/
54.162.51.18200 OK0 B
thecoveos.com/S3lWNXUQW2EGQnhLZRdZaVt6F0MoG2dTTXsde1RFeU57ARd7HXsMQHNAewBNfB1jDEx7TTJTTGlVdAIRfk5jDE1zVGVWFy1UYlRDL1Q3V0wuVG4DRX9KMFMWKBpkAFdnWyVCV2dbIl0QKBYgUBo4VzVaGGlVdARFZUx0GRMqFSVQWS0YOkYQZx83WQYuJA
54.162.51.18200 OK13 kB
thecoveos.com/
54.162.51.18200 OK0 B