Report Overview

  1. Submitted URL

    cdn-106.bayfiles.com/d8bf7amcy0/9c2aea29-1664291424/idm.6.41.02.silent.kuyhaa.zip

  2. IP

    195.96.151.55

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2022-09-28 16:00:25

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    6

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
esathyaspsu.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn-106.bayfiles.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
bayfiles.com3766020001-01-01T00:00:00Z0001-01-01T00:00:00Z
djv99sxoqpv11.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
accounts.google.com810001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
andamafraidt.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
pogothere.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
vjs.zencdn.net49680001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/FSHJJRUUrHScjejwbLXhyfUR6cnNuGDoqKzhPGis9fSAEKTIBQB5jMTIWdHVjJBMnInhuFycmeHlUKCEndUZvMTUnGXQ0PSUKJSs3OxshYzApTyQqPyEeJSRgejR8a3VtQHltPXlDbHYHbUB5KSwmBzFgd3gKcXMafkZsdgdtQHk3M21BCHxzZkJgYHd4FS-wmLidXewN3eEN5dXR4Q2x3dS4bOyAjJwpsdwNxRGd1Yz1PeAMalware
mediumdjv99sxoqpv11.cloudfront.net/kRlRZZ1QlOzcBazI9PVpjdWNqVGdgPioIOjZpCxAnFA02H2IlJX8TLiJpaUE4Jzo+WnIjOjpaZWA1PQVpcnItFzstaSgfOT44NxUnLzx/EjV7OTYdPSo4OEJmAGF3V3F0ZHEfZXdxaiVxdGQ1DjozLHxVZD5sbzhicnFqJXF0ZCsRcXUVYFF6dn18VWQhMT-oMO2NmH1Vkd2RpVmR3cWtXMi8mPAE7PnFrIW1wemlBIXtlMalware
mediumdjv99sxoqpv11.cloudfront.net/DdVZab0MWOTQJfAE/PlJ0RmFpXHZTPCkALQVrHBwFGTI/BRBFJ3wbORFrakkvFDg9UmUQODlSclM3Pg1+QXAvDn4YOSAGLxk3f10FQHhqSnFFfiJeclBlGEpxRTozATYNc2hfO01gBVl3UGUYSnFFJCxKcDRvbEFzXHNoXyQQNTEAZkcQaF9yRWZrX3JQZG-oJKgczPAA7UGQcVnVbZnwafkQMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


Files detected

  1. URL

    e1.o.lencr.org/

  2. IP

    23.36.76.226

  3. ASN

    #20940 Akamai International B.V.

  1. File type

    gzip compressed data, max compression\012- data

    Size

    1.2 kB (1150 bytes)

  2. Hash

    be9b6bfd0dfd7868dadb2a0ce5fa069d

    a583fa391d5b9abf65bc9661a7939fc5803e84df

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (11)

HTTP Transactions (71)

URLIPResponseSize
cdn-106.bayfiles.com/d8bf7amcy0/9c2aea29-1664291424/idm.6.41.02.silent.kuyhaa.zip
195.96.151.55301 Moved Permanently162 B
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
cdn-106.bayfiles.com/d8bf7amcy0/9c2aea29-1664291424/idm.6.41.02.silent.kuyhaa.zip
195.96.151.55301 Moved Permanently0 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
bayfiles.com/d8bf7amcy0
45.154.253.151404 Not Found2.3 kB
bayfiles.com/css/bayfiles.css?1661352192
45.154.253.151200 OK25 kB
bayfiles.com/sw.js
45.154.253.151200 OK14 kB
bayfiles.com/js/app.js?1661352192
45.154.253.151200 OK58 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.86.217200 OK9.7 kB
bayfiles.com/img/flags/24/br.png
45.154.253.151200 OK1.1 kB
bayfiles.com/img/flags/24/es.png
45.154.253.151200 OK666 B
bayfiles.com/img/flags/24/fr.png
45.154.253.151200 OK536 B
bayfiles.com/img/flags/24/ru.png
45.154.253.151200 OK403 B
bayfiles.com/static/logo.png
45.154.253.151200 OK39 kB
bayfiles.com/img/flags/24/se.png
45.154.253.151200 OK581 B
bayfiles.com/img/flags/24/kr.png
45.154.253.151200 OK988 B
bayfiles.com/img/flags/24/dk.png
45.154.253.151200 OK537 B
bayfiles.com/img/flags/24/in.png
45.154.253.151200 OK593 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK329 B
bayfiles.com/img/flags/24/us.png
45.154.253.151200 OK656 B
bayfiles.com/img/flags/24/pl.png
45.154.253.151200 OK347 B
bayfiles.com/img/flags/24/jp.png
45.154.253.151200 OK599 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
bayfiles.com/img/flags/24/de.png
45.154.253.151200 OK483 B
bayfiles.com/img/flags/24/no.png
45.154.253.151200 OK611 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737333
54.230.245.107200 OK98 kB
bayfiles.com/img/flags/24/fi.png
45.154.253.151200 OK456 B
bayfiles.com/sw.js?a0p0cm8waENBWFh4QlBDSWhYUA0JehcXVggsWUJaDStZRgxff1lLV117WURYDXNAE1heKUUUDElmVkRfUn4RQV4NZ01HDFxnQEpYCWcWEw5aZ0xBV18uRxALD30SRU1HaAcFTUdoBB0DAikdBhYYLwYbAA9kHRwJBGhYUFpFeFYv
45.154.253.151200 OK14 kB
push.services.mozilla.com/
35.81.125.88101 Switching Protocols0 B
andamafraidt.xyz/V25WRGU2DDUpWjZTNGIQJQJrYVcRS2QCAT0Yb30WLwEnNBNmX3gnCTgbMiIXOAAiagsyGnN2IxE9Hg4vBTsDNi0EDTwhDyAMGhwNLggDFlM0ABgxIhMBJw8fPz4RLRZuCAUFIBw6HwY0FVs8CTEeOTIMMz0kFAkLHgA+MSMuDTshLTs7HQcgOQoDHhMaOgMqIg8/ZhQ2AiUcFxZkIS43DQ4UFzQxLj8nFBwSCxwXNzALPBZdNl0AMDQfAiIUPTsqNAw8HwwDBlAcPSEpJy0oMSBWMCU1HCg2CD0eFjMJMjA0HwVlCVdmLBUMHS00PQ4CDiYycCMEQyEpKT4KDiESGV0zAStiCg4WUQZcLncBBFo0CxwWBBwzFSQKIQodBSkydTwtXwYhJHEEJSsLJ1MFKh1iPBsoEh5cAQ
54.230.111.24200 OK1.2 kB
andamafraidt.xyz/WG9FdjU5DSYbCjlSJ1BAKgN4UwceSncwUTIZfE9GIAA0BkNpXmsVWTcaIRBHNwExWFs9G2BEczM9KSRvAl4UGnoiDAcXTxFWFSBFMgsSOEQOKCERZTEADDlfAh8GDnQ2KQRGBxBdDBp/AFcROlwSHyQjcGwlPxkQai0SGHwyIC8GVAI4BEdlCTk1FVsRGwMMRiwOFhFTFztxQnsgOis6TyBKdzBwMjlyOWEBCxUlWmwgADxYGSgDRWNrKXUsfR0JHy5RIA4sIE08KBRHcTIAPzp9IDkfMgArDT8eXDsBAwd/ACl1LHYrPSYuYA42AzADPAF0TmMPPi07YXUACDkHFgINR2MzC3ckRQ4CF0VWDxsdO1xgAhU3cG8/KzBHETh0AVA1Awc/bSwDYxxGNwE1S2cvHBcvWiBZJgc
54.230.111.24200 OK1.2 kB
esathyaspsu.xyz/Uk5xenR9cRIJSTAIFQIiORgrIx8IJRIsHDwcQzgDBXw/PS48F1cOHTZzRklDYX1CXAQ7KkxLUiE6EA4BIXNAXB08KB5HUiRzQFRHZmBDQlpjaARHRXQ6ARsTb39XCgAmIkxLQmR6QkJEan9CSkxi
104.21.80.127204 No Content0 B
esathyaspsu.xyz/SDVkblZnCgcdaxoEMio1eXtXNB44cT5dDCFQDyw7LAc2FgQlYEIaPywIU1tgewJSSCYhUVlcb25GEA8iPUZZX3AhWwIBa25DWV94eBtRV3h5ExFTZ25BFA8xdQRCHiI8WVlfYH4BV1ZmcARXXm9/
104.21.80.127204 No Content0 B
andamafraidt.xyz/blU0ZkIPN1cLfQ9oVkA3HDkJQ3AocAYgJgQjDV8xFjpFFjRfZBoFLgEgUAAwATtASCwLIRFUBCoxYjwjDGV5MQ06BH4AAytwBiASAh8ENC8oJWwuGDoFdw0DIgRiFAosInIhFidwBiAAPBdyLHEZN3s0BBw0Xw00KBFTXxcDAGUpBgIGVwoPXQVTV2dcF2U+AxgRWlIbIQZ1IQ4WPgcAc14TZS4qHwZaIAQIPH4DIQIXWCEHHi1mMi0UFGA/DA1nXAANXmRTJBQCZmEhFzcGWiAEJBZMLSEqB0IEBygvbC4MAQ1NNxMgAXEnGAU2ZQcEVyxmMRgcDQcsEzQSGQkIJTJXHBIvFAMzBT82YggUDA9aESMIPmVAKB06WhZ/KCZyCiYLP2dWMw
54.230.111.24200 OK1.2 kB
esathyaspsu.xyz/QXgzcU5uR1ACcw4+VEUqLCFyEA85P2UGdzI7ZicdAD9YPh8XMRUFJyVFBEJ5cksGVz4oHA5AdmcLRxA6NAsOQGgoFlUec2cODkBgcVYCX31nDQ5AaDUIUhZzcF5DBTotRQJHeHVLC0F2cEsCQXY
104.21.80.127204 No Content0 B
bayfiles.com/img/favicon/favicon-32x32-bayfiles.png?1597318614
45.154.253.151200 OK1.4 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
216.58.207.237302 Found397 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
andamafraidt.xyz/utx?cb=4QNssDDYYqBt&top=bayfiles.com&tid=737333
54.230.111.24204 No Content0 B
andamafraidt.xyz/utx?cb=YBsxwauj87g9&top=bayfiles.com&tid=756376
54.230.111.24204 No Content0 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
216.58.207.237302 Found397 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
e1.o.lencr.org/
23.36.76.226200 OK1.2 kB
djv99sxoqpv11.cloudfront.net/FSHJJRUUrHScjejwbLXhyfUR6cnNuGDoqKzhPGis9fSAEKTIBQB5jMTIWdHVjJBMnInhuFycmeHlUKCEndUZvMTUnGXQ0PSUKJSs3OxshYzApTyQqPyEeJSRgejR8a3VtQHltPXlDbHYHbUB5KSwmBzFgd3gKcXMafkZsdgdtQHk3M21BCHxzZkJgYHd4FS-wmLidXewN3eEN5dXR4Q2x3dS4bOyAjJwpsdwNxRGd1Yz1PeA
54.230.245.107200 OK444 B
djv99sxoqpv11.cloudfront.net/kRlRZZ1QlOzcBazI9PVpjdWNqVGdgPioIOjZpCxAnFA02H2IlJX8TLiJpaUE4Jzo+WnIjOjpaZWA1PQVpcnItFzstaSgfOT44NxUnLzx/EjV7OTYdPSo4OEJmAGF3V3F0ZHEfZXdxaiVxdGQ1DjozLHxVZD5sbzhicnFqJXF0ZCsRcXUVYFF6dn18VWQhMT-oMO2NmH1Vkd2RpVmR3cWtXMi8mPAE7PnFrIW1wemlBIXtl
54.230.245.107200 OK540 B
djv99sxoqpv11.cloudfront.net/DdVZab0MWOTQJfAE/PlJ0RmFpXHZTPCkALQVrHBwFGTI/BRBFJ3wbORFrakkvFDg9UmUQODlSclM3Pg1+QXAvDn4YOSAGLxk3f10FQHhqSnFFfiJeclBlGEpxRTozATYNc2hfO01gBVl3UGUYSnFFJCxKcDRvbEFzXHNoXyQQNTEAZkcQaF9yRWZrX3JQZG-oJKgczPAA7UGQcVnVbZnwafkQ
54.230.245.107200 OK184 B
andamafraidt.xyz/multi?cs=S0VoWWx7dFFpWHpyUWpZe3RabFo&abt=0&red=1&sm=76&k=&v=1.0.59.1&sts=0&prn=0&emb=0&tid=756376&u=853185155121652&agec=1664380816&fs=1&mbkb=180.50541516245485&ref=https%3A%2F%2Fbayfiles.com%2Fd8bf7amcy0&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_45jM=1664380813697&crc=1
54.230.111.24200 OK1.5 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693de74c-173e-4d9b-8317-35601f30ffd7.jpeg
34.120.237.76200 OK13 kB
pogothere.xyz/asd100.bin
172.64.199.35200 OK116 kB
pogothere.xyz/asd100.bin
172.64.199.35200 OK111 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad593ee0-d404-46e3-b129-229e09b263b0.png
34.120.237.76200 OK12 kB
pogothere.xyz/
172.64.199.35200 OK7.5 kB
accounts.google.com/v3/signin/identifier?dsh=S-1828131263%3A1664380815914462&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWojEt7-WhN1mrWOjJyLEycrShD_N4NMn-0BZu7J7Hw4fCxSgrCwqegUmyhF1322IGkJ7r-WFQ
216.58.207.237403 Forbidden0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.200.35200 OK0 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.86.217200 OK0 B