Report Overview

  1. Submitted URL

    cdn-141.bayfiles.com/mdo3ddcbyf/b71526df-1675005086/mbsetup.exe

  2. IP

    195.96.151.34

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-01-29 21:15:49

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    34

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
coonandeg.xyzunknown2023-01-24T07:51:42Z2023-03-10T02:27:15Z
policityseriod.infounknown2018-11-10T13:18:32Z2023-03-13T07:16:28Z
e1.o.lencr.org61592021-08-20T09:36:30Z2023-03-13T05:21:46Z
djv99sxoqpv11.cloudfront.netunknown2021-10-07T16:52:14Z2023-03-13T06:01:35Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
accounts.google.com812016-03-20T13:44:49Z2023-03-13T07:05:07Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
bayfiles.com3766022012-05-24T18:09:40Z2023-03-13T05:24:08Z
vjs.zencdn.net49682012-05-21T10:26:59Z2023-03-13T05:47:22Z
reerfdfgourgo.xyzunknown2023-01-23T13:29:36Z2023-03-01T02:07:26Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
www.facebook.com992012-05-21T02:23:41Z2021-02-04T00:31:35Z
cdn-141.bayfiles.comunknown2020-07-29T17:07:18Z2023-03-12T19:49:01Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
pogothere.xyzunknown2022-09-04T21:11:25Z2023-03-13T05:42:24Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/6c054dnkQIRYQRgcnHEtORnhLQU9VJAsZFwNzPj1LJS0xPBYQBio1EkoqXgIDF3NIUBUSIB9LXxYgG0tIVS8cFERHaAwGFhhzHhsAHjoKGh8aOF4DGE4jFwwQHyIZU0s1e1ZGXEF+UAEQHSoXAQpWfEgYDVZ8SEdJXX5dRTtWfEgBEB14TFNKMWtKRgFFel-1FO1Z8SAQPVn05R0lGYEhfXEF+HxMaGCFdRD9BfklGSUJ+SVNLQygRBBwVIQBTSzV/SENXQ2gNS0gMalware
mediumdjv99sxoqpv11.cloudfront.net/waTMzZVkKXF0DZh1aV1huWgQAVmpPWUAKNxkOUFARP0p8NBQcQQVTHE9HSQFkWRVfBDcODhUANwoOAkM4DVEOUX8dQ1wOZA9eSggtG19VDC9PRlJYNAZJWgk1CBYBI2xHAxZXaUFEWgs9BkRAQGtZXUdAa1kCA0tpTABxQGtZRFoLb10WACd8WwNLU21MAH-FAa1lBRUBqKAIDUHdZGhZXaQ5WUA42TAF1V2lYAwNUaVgWAVU/AEFWAzYRFgEjaFkGHVV/HA4CMalware
mediumdjv99sxoqpv11.cloudfront.net/WUGk2ZlEzBlgAbiQAUltmY14FVWR2A0UJPyBURghiNxBnKDIZJxASKzRUBkA9MQdRW3c1B1VbYHYIUgRsZE9DB2w9BkwPPTwIE1QXZUcGQ2NgQUEPPzQGQRV0YllYEnRiWQdWf2BMBSR0YllBDz9mXRNVE3VbBh5nZEwFJHRiWUQQdGMoB1ZkflkfQ2NgDl-MFOj9MBCBjYFgGVmBgWBNUYTYARAM3PxETVBdhWQNIYXYcC1cMalware
mediumpolicityseriod.info/eFBHVHgDcjQjJw0iK3ZCWjgzIAgLamh7GhkpIT0UHSNpNxcVfzQjVhIjZXhaCz0hdkJJfGUgGR8PLjBaQnJwZ09LYnF2VFojMjYnETR1dkJaMiVkGx1pJDJVSGUhNVVMM3NhVUFocWVVTmchbUwZZ3I3SR4zZSkMalware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/dlhrR24telx0WUVqXWVCVHpHZQwUaAgiVxU%2BRndbEDlGcw1CbUZ%2BVkBpRnFZEGFfJllDO1ohDVR0SXZXE2tTIV8VdQ1xXRN1XyVbRHVScFtOdVNyCBBuWSJWRmgPdExaehgwTFp6GygCHzsCMxcFPRkuARJ2AikIGXpHZVtYakkaMalware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed

ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (84)

URLIPResponseSize
cdn-141.bayfiles.com/mdo3ddcbyf/b71526df-1675005086/mbsetup.exe
195.96.151.34301 Moved Permanently162 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
cdn-141.bayfiles.com/mdo3ddcbyf/b71526df-1675005086/mbsetup.exe
195.96.151.34301 Moved Permanently0 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
bayfiles.com/mdo3ddcbyf
45.154.253.152404 Not Found2.3 kB
push.services.mozilla.com/
54.149.190.160101 Switching Protocols0 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.66.217200 OK132 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.66.217200 OK9.7 kB
djv99sxoqpv11.cloudfront.net/?xsvjd=737333
54.230.245.37200 OK98 kB
bayfiles.com/css/bayfiles.css?1668606177
45.154.253.152200 OK25 kB
bayfiles.com/js/app.js?1668606177
45.154.253.152200 OK58 kB
bayfiles.com/sw.js
45.154.253.152200 OK14 kB
r3.o.lencr.org/
23.33.119.27200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf6aeac1-fd74-4724-86b5-f0e86d98c915.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
34.120.237.76200 OK4.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
34.120.237.76200 OK9.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
34.120.237.76200 OK5.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
34.120.237.76200 OK7.4 kB
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
coonandeg.xyz/ejhJMGcbWipdWBsFKxYSCFR0FVU8HXt2AxBOcAkUAlc4QBFLCWdTCxVNLVYVFVY9HgkfTGwCIQ1ZHX0dIG4iez88CA1qD0tZHwEPD28uYSYsVTlgMC95An4fEXccdiYoaHlAXzR6GFM2K24deCJDcBphIRFvG2YBOHwqfyMSbQh+EBV3CFsqTnwfdSgvYHFUNktPBmomQ10aVwAOf3gJMT57cGA1FnIQfiYgch5XDEt7C2klMwoxeCYCYhFRMjx9HlcUQ3oiYiYrfz1qPy9cCFFWEXsIABMKbAhyHyt/PWo1PFcFUlZKbwhzA0JvPn4rLwp4fSYyFQ9xBktUC2IyOEkCcS4+bQFUPT1QE2gGKw0eZSZOCh1xIUtue1w+O08HZQYsXx5xMS8de3YmP34ecR0jag9XIhBZD1sgMm4fFVU8cAgEJFxSOl8JCgUqBS8sQQZhKg9KfwYi
54.230.111.76200 OK1.2 kB
coonandeg.xyz/OFZLb21ZNCgCUllrKUkYSjp2Sl9+c3kpCVIgclYeQDk6HxsJZ2UMAVcjLwkfVzg/QQNdIm5dKw41e1pZXDggPiRqDxo9Cls4AyoZdwQlByFpA3I5J3klESkadiwbBVx0HBhfFWgUEj4vUTl6KgZXJxMIJHwQeCEkbRQePCR6bwc3FWExDF8ZcQAYVw5+ExknDHkhDCkFUCwDBx55HiEAJn8+cw4ifmIPKCgMPA0YGmkeMiY3bWY4XggJDAw3KH5zeS04eRMaJz5XDgo+HW8wDgg0fAARVz59MgE3NQ0yGTsZbzAOCC99FHpbOX4YACI6TB0ZCCt+MydCXH4ZejVVaxcaPztWZn49XVQREioFXg4OKUgKFAMXIFkRCCkJahJyLQtTOgw8OHJzeS0+bhgHPhRfBAktGm4fGi05aywdSl9+BQ4hNWlkLCE+CDFtBR5XODtSK3NkHQwkcjkoJz97PXIL
54.230.111.76200 OK1.2 kB
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
coonandeg.xyz/SlJ6V0crMBk6eCtvGHEyOD5HcnUMd0gRIyAkQ240Mj0LJzF7Y1Q0KyUnHjE1JTwOeSkvJl9lAR0HPTx1ED4/LQUmNTs1LhsTLzszJwtLYwEcBShlBnoHMAc+CAcoMC8jHAIVKQEWMw0NMhMpHD0YBzg8BnMfKzMVHWEZZgV7BBgODxMbLzAVOQg/bgMIYA1uBSElKgcTPRs/ZhYSCC80ABtgNDAWHxcqBz0bFSsFEXoLFjseDzwoPhAbNi0xdQgfOAQVegsWOwUOKEM6HxgcLBJ0HDA4P3IkCD8gAQAaKD4QHwMrMwAHPThmHSE0FjwhG2A0MAMmfzcRCCBrNxUECDgjESANBBcVIB0QNAIeHgs7BQYHYSovAh4EODMvHQM0Hh4SCxkUdil0ECQoJCJHJyl5NQMGCSkbNA
54.230.111.76200 OK1.2 kB
reerfdfgourgo.xyz/dGlRd25bVjIEUxdbPg8MMA0TLy8YCBAcJCAqByYsJ1gcNTYDCncDBxBUZkRZR1piUR4dDWxGSAcdMAMbB1RgUQcaDz5KSAJUYFldQEdiRkBGTyRKX1IdIRYJSVh3BxoABWxGWENcYUVYTV1oQ1hE
172.67.166.141204 No Content0 B
reerfdfgourgo.xyz/MDlYcFMfBjsDblILbTQdaH8BJ2B5ewk2YlVaGTYZZ39pQBJbYH4EOlQEb0NkAwptViNZXWVBaxZKLBEnRUplQXVZVz4fbhZPZUF9ABdqXmEWTGVBdURJORduAR8oBCdcBGlGZAUJakZqBABsSGM
172.67.166.141204 No Content0 B
reerfdfgourgo.xyz/dW9RMVZaUDJCazs5PWIFRjYfUxE3SmNzByQlPmsOPykTAzofCRAXIhwLbAZjQ1xmB3AFBjUMZExJIkU3ARoiDGdTBj9XOUhJJwxnW19/B2ZbXndEa0RJJUE3ElJgFyYBGz0MZ0NYZAFkQ1ZlCGJCXA
172.67.166.141204 No Content0 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
djv99sxoqpv11.cloudfront.net/6c054dnkQIRYQRgcnHEtORnhLQU9VJAsZFwNzPj1LJS0xPBYQBio1EkoqXgIDF3NIUBUSIB9LXxYgG0tIVS8cFERHaAwGFhhzHhsAHjoKGh8aOF4DGE4jFwwQHyIZU0s1e1ZGXEF+UAEQHSoXAQpWfEgYDVZ8SEdJXX5dRTtWfEgBEB14TFNKMWtKRgFFel-1FO1Z8SAQPVn05R0lGYEhfXEF+HxMaGCFdRD9BfklGSUJ+SVNLQygRBBwVIQBTSzV/SENXQ2gNS0g
54.230.245.37200 OK452 B
djv99sxoqpv11.cloudfront.net/waTMzZVkKXF0DZh1aV1huWgQAVmpPWUAKNxkOUFARP0p8NBQcQQVTHE9HSQFkWRVfBDcODhUANwoOAkM4DVEOUX8dQ1wOZA9eSggtG19VDC9PRlJYNAZJWgk1CBYBI2xHAxZXaUFEWgs9BkRAQGtZXUdAa1kCA0tpTABxQGtZRFoLb10WACd8WwNLU21MAH-FAa1lBRUBqKAIDUHdZGhZXaQ5WUA42TAF1V2lYAwNUaVgWAVU/AEFWAzYRFgEjaFkGHVV/HA4C
54.230.245.37200 OK540 B
djv99sxoqpv11.cloudfront.net/WUGk2ZlEzBlgAbiQAUltmY14FVWR2A0UJPyBURghiNxBnKDIZJxASKzRUBkA9MQdRW3c1B1VbYHYIUgRsZE9DB2w9BkwPPTwIE1QXZUcGQ2NgQUEPPzQGQRV0YllYEnRiWQdWf2BMBSR0YllBDz9mXRNVE3VbBh5nZEwFJHRiWUQQdGMoB1ZkflkfQ2NgDl-MFOj9MBCBjYFgGVmBgWBNUYTYARAM3PxETVBdhWQNIYXYcC1c
54.230.245.37200 OK187 B
policityseriod.info/eFBHVHgDcjQjJw0iK3ZCWjgzIAgLamh7GhkpIT0UHSNpNxcVfzQjVhIjZXhaCz0hdkJJfGUgGR8PLjBaQnJwZ09LYnF2VFojMjYnETR1dkJaMiVkGx1pJDJVSGUhNVVMM3NhVUFocWVVTmchbUwZZ3I3SR4zZSk
103.224.212.220302 Found0 B
bayfiles.com/img/flags/24/no.png
45.154.253.152200 OK611 B
bayfiles.com/img/flags/24/in.png
45.154.253.152200 OK593 B
bayfiles.com/img/flags/24/se.png
45.154.253.152200 OK581 B
bayfiles.com/img/flags/24/pl.png
45.154.253.152200 OK347 B
bayfiles.com/img/flags/24/es.png
45.154.253.152200 OK666 B
policityseriod.info/
103.224.212.220302 Found35 B
bayfiles.com/static/logo.png
45.154.253.152200 OK39 kB
bayfiles.com/img/flags/24/us.png
45.154.253.152200 OK656 B
bayfiles.com/img/flags/24/fr.png
45.154.253.152200 OK536 B
bayfiles.com/img/flags/24/kr.png
45.154.253.152200 OK988 B
bayfiles.com/img/flags/24/br.png
45.154.253.152200 OK1.1 kB
bayfiles.com/img/flags/24/de.png
45.154.253.152200 OK483 B
bayfiles.com/img/flags/24/ru.png
45.154.253.152200 OK403 B
bayfiles.com/img/flags/24/dk.png
45.154.253.152200 OK537 B
bayfiles.com/img/flags/24/fi.png
45.154.253.152200 OK456 B
bayfiles.com/img/flags/24/jp.png
45.154.253.152200 OK599 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
e1.o.lencr.org/
95.101.11.115200 OK346 B
e1.o.lencr.org/
95.101.11.115200 OK346 B
coonandeg.xyz/utx?cb=h9rQYGkRUx6B&top=bayfiles.com&tid=737333
54.230.111.76204 No Content0 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found397 B
coonandeg.xyz/utx?cb=f4pzjYWMBalc&top=bayfiles.com&tid=756376
54.230.111.76204 No Content0 B
coonandeg.xyz/multi?cs=eVFjWG5BZFFtWU5gVGFdS2FSbw&abt=0&red=1&sm=76&k=&v=1.0.60.1&sts=0&prn=0&emb=0&tid=756376&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fbayfiles.com%2Fmdo3ddcbyf&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_ZmI3=1675026950135&crc=1
54.230.111.76200 OK1.6 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found393 B
accounts.google.com/v3/signin/identifier?dsh=S-402524556%3A1675026943835289&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHcf6CSSDTvvNO4lWNfNJ-q-Uqfx6etugV70lLBaCgf-Gkzeuee8f1Mhv7ZAmk3Cn5BxikBHXw
142.250.74.109403 Forbidden1.3 kB
bayfiles.com/sw.js?dlhrR24telx0WUVqXWVCVHpHZQwUaAgiVxU%2BRndbEDlGcw1CbUZ%2BVkBpRnFZEGFfJllDO1ohDVR0SXZXE2tTIV8VdQ1xXRN1XyVbRHVScFtOdVNyCBBuWSJWRmgPdExaehgwTFp6GygCHzsCMxcFPRkuARJ2AikIGXpHZVtYakka
45.154.253.152200 OK14 kB
pogothere.xyz/
172.64.198.35200 OK374 B
pogothere.xyz/asd100.bin
172.64.198.35200 OK103 kB
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
31.13.72.36200 OK21 kB
bayfiles.com/img/favicon/favicon-32x32-bayfiles.png?1668603321
45.154.253.152200 OK1.4 kB
policityseriod.info/dlhrR24telx0WUVqXWVCVHpHZQwUaAgiVxU%2BRndbEDlGcw1CbUZ%2BVkBpRnFZEGFfJllDO1ohDVR0SXZXE2tTIV8VdQ1xXRN1XyVbRHVScFtOdVNyCBBuWSJWRmgPdExaehgwTFp6GygCHzsCMxcFPRkuARJ2AikIGXpHZVtYakka
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
pogothere.xyz/
172.64.198.35200 OK28 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
pogothere.xyz/asd100.bin
172.64.198.35200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S-637050532%3A1675026943870877&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHcq4jU0HYC6xFFkbC4XNbD3y-ksLvw8-ZI1-174iE1Ea0Iw5jwsj2CO1m0jWh8u1mww5MHgsA
142.250.74.109403 Forbidden0 B