Report Overview

  1. Submitted URL

    cdn-114.bayfiles.com/afebjak6y8/023155f1-1670512664/idm.6.41.06.silent.kuyhaa.zip

  2. IP

    195.96.151.66

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2022-12-09 17:43:46

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    28

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
cdn-114.bayfiles.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
pogothere.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
bayfiles.com3766020001-01-01T00:00:00Z0001-01-01T00:00:00Z
djv99sxoqpv11.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
hecherthepar.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
vjs.zencdn.net49680001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
eventhenherthisi.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
policityseriod.infounknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
accounts.google.com810001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumpolicityseriod.info/MlRlbDdJdhYbaEcmCU4NEDwRGEdBbkpDVVMtAwVbVydLD1hfexYbGVgnR0AVQTkDTg0DeEcYVlULDAgVCHZSXwABZlNOGxAnEA5oWzBXTg0QNgdcVFdtBgoaAmEDDRoGN1FZGgtsU10aBGMDVQNTY1APBlQ3RxEMalware
mediumpolicityseriod.info/Malware
mediumdjv99sxoqpv11.cloudfront.net/bUkhLb3YxJyUJSSYhL1JBYX94XEV0IjgAGCJ1DB4wYBs+XgQfAT5JAigsdl9QPiklCEt0LSUMS2NuKgsUb3xtGwY9I3YGFzMmPAACOiMvSQMzdSYADDskJw5TYA5+QUZ3entHATsmLwABIW15XxgmbXlfR2Jme0pFEG15XwE7Jn1bU2EKbl1GKn5/SkUQbX-lfBCRteC5HYn1lX193ensIEzEjJEpEFHp7XkZieXteU2B4LQYENy4kF1NgDnpfQ3x4bRpLYwMalware
mediumdjv99sxoqpv11.cloudfront.net/7OTZRVzBaWT8xD01fNWoHCgFiZAUfXCI4XkkLMgR+dFoBNUN0UjhkUk0CHnFEQ1JsZxZVVz8wDR9TPzQNCBAwM1IEAnciUQRbPi1ZVVowcgJ/A39nFQsGeSBZV1I+IEMcBGE5RBwEYWYAFwZ0ZHIcBGEgWVcAZXIDexNjZ0gPAnRkchwEYSVGHAUQZgAMGG-F+FQsGNjJTUll0ZXYLBmBnAAgGYHICCVA4JVVfWSlyAn8HYWIeCRAkagEMalware
mediumdjv99sxoqpv11.cloudfront.net/deHdOYlYbGCAEaQweKl9hTUF9VWBeHT0NOAhKBBhkFi8BFh8QQmgWLBxKfkQ6GRkpX3AdGS1fZ14WKgBrTFE6EjkTSicDNxYAIRY+ExNoFzdFGiEYPxQbL0dkPkJgUnNKR2YVPxYTIRUlXUV+DCJdRX5TZlZHa1EUXUV+FT8WQXpHZTpSfFIuTkNrURRdRX-4QIF1ED1NmTVl+S3NKRykHNRMYa1AQSkd/UmZJR39HZEgRJxAzHhg2R2Q+Rn5XeEhRO19nMalware
mediumpolicityseriod.info/S0RuQzYQZllwAXh2WGEaaWZCYVQpdA0mDygiQ3MDLSVDd1V%2EcUN6Dn11Q3UBLX1aIgF%2BJ18lVWloTHYHe3cLJVV5aQgiBy5pWnsDe2lXcg4qaVZ3UHwiDXcALXdddxRnZh00FGdmHixaIicHN084IRwqWS9qBy1QJGZCYQNldkweMalware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (11)

HTTP Transactions (86)

URLIPResponseSize
cdn-114.bayfiles.com/afebjak6y8/023155f1-1670512664/idm.6.41.06.silent.kuyhaa.zip
195.96.151.66301 Moved Permanently162 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK5.3 kB
cdn-114.bayfiles.com/afebjak6y8/023155f1-1670512664/idm.6.41.06.silent.kuyhaa.zip
195.96.151.66301 Moved Permanently0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
bayfiles.com/afebjak6y8
45.154.253.150404 Not Found2.3 kB
bayfiles.com/css/bayfiles.css?1668606177
45.154.253.150200 OK25 kB
bayfiles.com/sw.js
45.154.253.150200 OK14 kB
bayfiles.com/js/app.js?1668606177
45.154.253.150200 OK58 kB
bayfiles.com/img/flags/24/ru.png
403 B
bayfiles.com/img/flags/24/pl.png
45.154.253.150200 OK347 B
bayfiles.com/img/flags/24/us.png
45.154.253.150200 OK656 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.66.217200 OK132 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.66.217200 OK9.7 kB
bayfiles.com/img/flags/24/br.png
45.154.253.150200 OK1.1 kB
bayfiles.com/img/flags/24/es.png
45.154.253.150200 OK666 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
bayfiles.com/img/flags/24/se.png
45.154.253.150200 OK581 B
bayfiles.com/img/flags/24/fr.png
45.154.253.150200 OK536 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737333
54.230.245.37200 OK98 kB
bayfiles.com/img/flags/24/dk.png
45.154.253.150200 OK537 B
ocsp.pki.goog/s/gts1p5/PIudMIVwldY
142.250.74.131200 OK471 B
ocsp.pki.goog/s/gts1p5/PIudMIVwldY
142.250.74.131200 OK471 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
bayfiles.com/img/flags/24/in.png
45.154.253.150200 OK593 B
push.services.mozilla.com/
54.191.210.155101 Switching Protocols0 B
hecherthepar.com/cWF2VExeXhUncRA1NGctQg0TFXw3BSVldDk1Rx4BJiA0FhlBVVAgJRVcQWd7QlJDcjwYBUtldFcSAjU4BBJLZWoYDxA7cVcXS2ViQU9Een5XFEtlagURFzNxQEcGIDgdXEdie0FXRmN0QFdGZHo
172.67.136.174204 No Content0 B
hecherthepar.com/R2Q4Q1JoW1swbxEzARYwAwBTGwV2BXoEECU+VBIQHSJUNwUGUB43OyNZD3BldFcLZSIuAAVydDQQWTcnNFkJZTspAld+dDFZCW1hc0oLcnx2Qk1+Y2EQSCI1elUeMyYzCAVyZHBUDnNlf1UNemp3
172.67.136.174204 No Content0 B
hecherthepar.com/dll3ekpZZhQJdyw1Jk8rMQslIBsOPSE8ABgaIQouIzQiNR0gFFEOIxJkQE98RW5BXDofPUpIc1AqAxs+AypKS2wfNxEVd1AvSktkRndBSmRHfwJHe1AtBxstS2hRCj4CNUpLfEFpQUp9TmhCQ3NA
172.67.136.174204 No Content0 B
bayfiles.com/static/logo.png
45.154.253.150200 OK39 kB
bayfiles.com/img/flags/24/kr.png
45.154.253.150200 OK988 B
ocsp.pki.goog/s/gts1p5/PIudMIVwldY
142.250.74.131200 OK471 B
policityseriod.info/MlRlbDdJdhYbaEcmCU4NEDwRGEdBbkpDVVMtAwVbVydLD1hfexYbGVgnR0AVQTkDTg0DeEcYVlULDAgVCHZSXwABZlNOGxAnEA5oWzBXTg0QNgdcVFdtBgoaAmEDDRoGN1FZGgtsU10aBGMDVQNTY1APBlQ3RxE
103.224.212.220302 Found0 B
bayfiles.com/img/flags/24/no.png
45.154.253.150200 OK611 B
bayfiles.com/img/flags/24/fi.png
45.154.253.150200 OK456 B
bayfiles.com/img/flags/24/jp.png
45.154.253.150200 OK599 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
e1.o.lencr.org/
23.36.76.226200 OK346 B
e1.o.lencr.org/
23.36.76.226200 OK346 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
216.58.207.237302 Found394 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
216.58.207.237302 Found399 B
bayfiles.com/img/favicon/favicon-32x32-bayfiles.png?1663359761
45.154.253.150200 OK1.4 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
e1.o.lencr.org/
23.36.76.226200 OK346 B
accounts.google.com/v3/signin/identifier?dsh=S185076214%3A1670607817835308&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh5hVQ5r9U2L9PLxgFypEW33N8O9h974YNnODpzDuS4El6kG-z9e8FxU_633TMAuS-tMZmMccg
216.58.207.237403 Forbidden1.3 kB
eventhenherthisi.com/WlJ1U3A7MBY+TztvF3UFKD5IdkIcd0cVFDAkTGoDIj0EIwZrY1swHDUnETUCNTwBfR4/JlBhNjgHHjs8OGEsKzojBz8AIwM6OWI6GAstakQCFyNjOTA1NBQzEGMxEUQtCzcgVWgQLTQhPBMhZjobOxIgFDZrJAMZMT42FgRqHiYGPQlgOyY7PSEgMUMiJjIkKWMbRgo3HCg4PiAbEzYcGRckJgI9IDYmCjEeFgY4Oi1nIQoxb3dHESEPCEY2Hi4aNAcDNx4CEjITBURmKCI1GDEoNjQnYTo3N0UjNh8VRGYoLRdCGR5rMCBhNREwGWI3ETxAdkIcAR4GITgKWD8WGBEnJxUZZz0KHms+LWJJaTcbIDkfKDA5Oh8iMBU4KmUtOCozNy0nFQ9gN2c8CwswHQluOTNiPj0WGyMWC2ENZxIIIjkKB3w4BjweKm8yIjZoAQBiAhcbAA
13.225.131.67200 OK1.2 kB
eventhenherthisi.com/VUNlUW00IQY8UjR+B3cYJy9YdF8TZlcXCT81XGgeLSwUIRtkcksyATo2ATcfOi0RfwMwN0BjK2IMMQs/AzknMDoBex0VXWQlKwYCHQACFwQPAjA3NRYKUQkGPg8oNj9wcSc1KzoBKwQjZRYPOQYAKFUSJTsFIABcHzA/KTcDFR9pGhERXAU9LxIrEi8UNChgJBACCzIEABI3Mz08cj8HOzo0BjYncHEjEF5sLSMAHhImNhM3A3IsdF8XCiAcDhcEIGQ/FzQgCDoMAiMmN2UZLRgOFwQgNjoDICQLNRwHACkjPxlVNj0ULTc6Dj00IAg+AwQtEDgEGQIQIBIESBdIZwEjAB4SDQ8bOQAvCWE3DRopEwAXLSQQChIaLRguFhUkZScDFQMGPjk6JD9VHRoyGAgWESQ6DDIGQzseOi0VbA4GDSg9PTcwKDUEZiERZSI
13.225.131.67200 OK1.2 kB
eventhenherthisi.com/T2lyZG8uCxEJUC5UEEIaPQVPQV0JTEAiCyUfS10cNwYDFBl+WFwHAyAcFgIdIAcGSgEqHVdWKSsMOgAgFgUrBigMKDcFPjgMOQhWJz0nIlYZPjABJxtZPCsuJyIwJgckLxtcLQkBSjU+Ig4lKC03IhQPPnkuIA8fF1ozACgcWBQ+Xns+OQMtPT00IVkKAxkwPCYKNioXFig7NjZqWzAhFwEGNB4LCS4bITYfESMGI38NGTQEBQ4nCiEEO0A9OR8RKzAmHTwePDoZTEAmKwwjFjY3ej0oCDUHCEMhOhc8JEFdDS8mXDgeMQIsNRsZIQIpBhwmDyE9PCA2Cx0xX1A+Bi9DISt+Jx8wOSNMQCY8fCc5NhYkITw2IhYIQyU+HAIWQV0JPB8+JR1aSyw1Cg4gLhcOEzoMCH07QDVKfSsgCloXDDcMPQBYSwpJJRodCh9yIwhWARcmBi0Heg
13.225.131.67200 OK1.2 kB
policityseriod.info/
103.224.212.220302 Found0 B
eventhenherthisi.com/utx?cb=FPDsgKbMfyOk&top=bayfiles.com&tid=737333
13.225.131.67204 No Content0 B
eventhenherthisi.com/utx?cb=nDiVcqbjhrJ9&top=bayfiles.com&tid=756376
13.225.131.67204 No Content0 B
bayfiles.com/sw.js?S0RuQzYQZllwAXh2WGEaaWZCYVQpdA0mDygiQ3MDLSVDd1V%2EcUN6Dn11Q3UBLX1aIgF%2BJ18lVWloTHYHe3cLJVV5aQgiBy5pWnsDe2lXcg4qaVZ3UHwiDXcALXdddxRnZh00FGdmHixaIicHN084IRwqWS9qBy1QJGZCYQNldkwe
45.154.253.150200 OK14 kB
djv99sxoqpv11.cloudfront.net/bUkhLb3YxJyUJSSYhL1JBYX94XEV0IjgAGCJ1DB4wYBs+XgQfAT5JAigsdl9QPiklCEt0LSUMS2NuKgsUb3xtGwY9I3YGFzMmPAACOiMvSQMzdSYADDskJw5TYA5+QUZ3entHATsmLwABIW15XxgmbXlfR2Jme0pFEG15XwE7Jn1bU2EKbl1GKn5/SkUQbX-lfBCRteC5HYn1lX193ensIEzEjJEpEFHp7XkZieXteU2B4LQYENy4kF1NgDnpfQ3x4bRpLYw
54.230.245.37200 OK555 B
djv99sxoqpv11.cloudfront.net/7OTZRVzBaWT8xD01fNWoHCgFiZAUfXCI4XkkLMgR+dFoBNUN0UjhkUk0CHnFEQ1JsZxZVVz8wDR9TPzQNCBAwM1IEAnciUQRbPi1ZVVowcgJ/A39nFQsGeSBZV1I+IEMcBGE5RBwEYWYAFwZ0ZHIcBGEgWVcAZXIDexNjZ0gPAnRkchwEYSVGHAUQZgAMGG-F+FQsGNjJTUll0ZXYLBmBnAAgGYHICCVA4JVVfWSlyAn8HYWIeCRAkagE
54.230.245.37200 OK194 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
pogothere.xyz/asd100.bin
172.64.172.27200 OK103 kB
djv99sxoqpv11.cloudfront.net/deHdOYlYbGCAEaQweKl9hTUF9VWBeHT0NOAhKBBhkFi8BFh8QQmgWLBxKfkQ6GRkpX3AdGS1fZ14WKgBrTFE6EjkTSicDNxYAIRY+ExNoFzdFGiEYPxQbL0dkPkJgUnNKR2YVPxYTIRUlXUV+DCJdRX5TZlZHa1EUXUV+FT8WQXpHZTpSfFIuTkNrURRdRX-4QIF1ED1NmTVl+S3NKRykHNRMYa1AQSkd/UmZJR39HZEgRJxAzHhg2R2Q+Rn5XeEhRO19n
54.230.245.37200 OK453 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
34.120.237.76200 OK7.9 kB
eventhenherthisi.com/multi?cs=Zjhjdm5RCVZDXlILU0RXUglUR1k&abt=0&red=1&sm=76&k=&v=1.0.60.1&sts=0&prn=0&emb=0&tid=756376&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fbayfiles.com%2Fafebjak6y8&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_zHsV=1670607816604&crc=1
13.225.131.67200 OK1.6 kB
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.221.35200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
34.120.237.76200 OK6.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
34.120.237.76200 OK7.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
34.120.237.76200 OK7.6 kB
policityseriod.info/S0RuQzYQZllwAXh2WGEaaWZCYVQpdA0mDygiQ3MDLSVDd1V%2EcUN6Dn11Q3UBLX1aIgF%2BJ18lVWloTHYHe3cLJVV5aQgiBy5pWnsDe2lXcg4qaVZ3UHwiDXcALXdddxRnZh00FGdmHixaIicHN084IRwqWS9qBy1QJGZCYQNldkwe
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
pogothere.xyz/asd100.bin
172.64.172.27200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S1174779259%3A1670607817860841&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh4gQYZJ_xYCJC90-PuRUZk7Kr1Bks-O7CRWvDFVrqxngcUCPuEz3Egt218HzTAWqPVDou-lkg
216.58.207.237403 Forbidden0 B
pogothere.xyz/
172.64.172.27200 OK0 B