Report Overview

  1. Submitted URL

    dl.xetapp.us/downloads/software/system/development/dbforge.studio.for.sql.server.exe

  2. IP

    93.115.28.104

    ASN

    #16125 UAB Cherry Servers

  3. Submitted

    2022-10-25 20:37:32

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    Scam / Brand infringement

Detections

  1. urlquery

    3

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    62

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-10T05:09:10Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-10T05:10:00Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-10T05:10:02Z
prizezones.lifeunknown2022-08-13T15:42:06Z2023-01-18T01:19:48Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-10T05:10:04Z
ajax.googleapis.com129052013-08-16T11:51:31Z2023-03-10T14:01:59Z
cdn.jsdelivr.net4392012-09-30T02:15:09Z2023-03-10T11:13:22Z
jsontdsexit2.comunknown2022-05-16T23:19:05Z2023-03-08T12:34:23Z
dl.xetapp.usunknown2018-12-04T18:29:08Z2023-02-28T14:05:28Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-10T13:49:44Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-10T05:12:35Z
bilqi-omv.comunknown2022-10-17T15:55:17Z2022-12-22T22:34:10Z
ayxvy.trackvoluum.comunknown2022-06-14T18:10:53Z2023-03-09T08:23:04Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-10T05:11:10Z
ocsp.globalsign.com20752012-07-20T19:46:16Z2023-03-10T05:11:21Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-10T05:10:00Z
ocsp.sca1b.amazontrust.com10152017-03-03T16:20:51Z2019-03-27T05:05:54Z
2520.lidgainoff.linkunknown

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdl.xetapp.us/downloads/software/system/development/dbforge.studio.for.sql.server.exeMalware
mediumprizezones.life/media/mainstream/frame.htmlPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumprizezones.lifeSinkholed
mediumprizezones.lifeSinkholed
mediumprizezones.lifeSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed
mediumlidgainoff.linkSinkholed

JavaScript (15)

HTTP Transactions (63)

URLIPResponseSize
dl.xetapp.us/downloads/software/system/development/dbforge.studio.for.sql.server.exe
93.115.28.104200 OK544 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
dl.xetapp.us/favicon.ico
93.115.28.104404 Not Found9 B
dl.xetapp.us/downloads/software/system/development/dbforge.studio.for.sql.server.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NjczNzQ0MSwiaWF0IjoxNjY2NzMwMjQxLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2dta2tuM2ZqaTdhc2JrNzQwdjhidTciLCJuYmYiOjE2NjY3MzAyNDEsInRzIjoxNjY2NzMwMjQxMzQwMjM0fQ.ANwo5Sc51vIYt3csEvjLvAIvOUphFfkLsOpDQse9ZdY&sid=d337cf10-54a4-11ed-ae46-bd674601b4e2
93.115.28.104302 Found11 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
bilqi-omv.com/zcvisitor/d388c8c1-54a4-11ed-a4af-1265349a12cb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=2f6a9170-51bf-11ed-8dac-0a918cbcbb97
3.212.50.125200 996 B
bilqi-omv.com/zcredirect?visitid=d388c8c1-54a4-11ed-a4af-1265349a12cb&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
3.212.50.125200 702 B
push.services.mozilla.com/
52.89.20.60101 Switching Protocols0 B
bilqi-omv.com/favicon.ico
3.212.50.125404 653 B
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK471 B
ayxvy.trackvoluum.com/zp-redirect?target=https%3A%2F%2Fprizezones.life%2F%3Fu%3Dxunwwwr%26o%3Db08p0zy%26cid%3Dw3vm1cji7rj49k0kif2r1942&caid=ca325483-4248-4036-9534-50cba22522ce&zpid=d388c8c1-54a4-11ed-a4af-1265349a12cb&cid=w3vm1cji7rj49k0kif2r1942&rt=R
35.156.198.22302 Found0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
prizezones.life/?u=xunwwwr&o=b08p0zy&cid=w3vm1cji7rj49k0kif2r1942
51.91.143.105200 OK90 kB
prizezones.life/media/mainstream/frame.html
51.91.143.105200 OK39 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
34.120.237.76200 OK4.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5799e548-737d-43a5-ae0b-3ccb8e2f1daf.jpeg
34.120.237.76200 OK8.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg
34.120.237.76200 OK9.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
34.120.237.76200 OK8.1 kB
prizezones.life/favicon.ico
51.91.143.105200 OK0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
2520.lidgainoff.link/puajqcjy/?u=xunwwwr&o=b08p0zy&cid=w3vm1cji7rj49k0kif2r1942&f=1&sid=t4~ihgouujwseh21ziedpu3lrrd&fp=Ys6SXvVpRKFItwGLfCTWlIcGK4U71DzqHQnXah9xvrUkuPGy0wSoAhOc1mr4HkIZENo97j9c4xRzF1ur3Zr%2FxuXW7RfSygCMn3qUiV992f9%2BnVqUV%2FHwks3BGcq1gaptcaQTaSk75cZwm%2FxcG7MPeB9GcgX2O69LDX%2BfPy02f054RTfGJ%2FVwz%2FxRsDPll2lolyIoWbRfkYeA5hCIvkRTYOkE%2FblCz74axcsAxrVw0hvHEHex6RzayTM21YoU3hioL3x7zvy9mx8nTPH9XcqgkIGt5U%2BlV1dCq3cw6FNIcJxXffePGNwchgHQhX%2FKYaWLgXkQG4Svslg1G0i%2FgTzw1vxNdOwQoSrG8UbE2c53znsy%2F18lpPlXzi4aBPt7mevZdTX0sQZnvs9AdVItvmH%2FhXinPd0soVLLM8swtDLtjUcLwcOxllLur9s%2F8QbXVVfUyl7HH3p4hWTBSd6L7fH%2Bn1yhwxzMgW4ELAHfXPfobI%2BX%2Bc0hMDCCtjVO2qrC5bR%2BuYGCWj5VkIVH7%2FcCEA6HCogiYKRBsOUaJpAYGdLwAqSUjaTFOT1jZJLqOd%2BC2DZQ34YRX8CCX%2FEdif3UWGMoo%2B8lYP2yy%2BjBBH8MijCW4r4bNqlcIK2PJWzHCjvrCCAwoYLBOzEPKmCBf7y2Gjz%2BkAJnvZqckndvPz%2FNO6ONQLVsAsC4LaUq%2F34SAoEWq2SNjxS0k6sBonQEAFDZsATbmJZrJkbwAn%2B98sSFHLXxF%2BA4E10DZmRFwnlYyosVqDFZy%2FRMOuK%2Ff3sHAJMrHyZqKe3oNRjMZCZFtk7%2FmKGFEZcHZmNM9%2BZFDQqbOtIzX%2F7i4AKyLTtcYeMYrgziWu7yromKyROXlqfDqkejEWh5j4gj9xo%2B3CNdfX8Idi8bf4hY30o8dwju3PeJBdJCgXXSZ%2BMZqfQ4jwnpH2g8IfcGPMeZCHW5WAGH3%2BQExZQRREhjlMERKMH1tBh5lwBjb8CZJ1gTReDqEKNn957qyaiESrSeUxSAKug3vtp3D76Ch2pAUbvE8rFDGqh1ZxrqGx73T3aLVR1kqiqsI8WY8A2cU%2FJ1kV2bMcB3MYAoHC0Q81VLug5CnUxlqNeZqslS%2BsCtc7AyaVxqnquaOhS0TxlTbTxXGO06n4iL5KXXkJE3%2BwP7lvAXo%2F1baNNxQi%2BjdE17t1kFXMC%2BBLIVJ%2BcCc6wALKiV0ggWoQPMFfkPnkANmZUwVSTOYIPRuoIZWIHH8%2FH9yra20JwI5kWta8e415ljkMGPMtonbHx6Im6ckXIiPf3RYkBBYhQnDXZ2IhbCJnjNS8SqXjJZf114ct1OpQBcy3Eks5yYwEyMGvw7fRKP6ZX%2BlLUjZDeOAoaIj6zfNbljTqf4yY4qI8XjGwLfQkABPCmymyvo3s7AzMOqu2xknAwmUNJVGeLcFbljt7X%2BT8mA297hN3%2B26xbLzAb9m6ACFV8iqZufJ02yMB%2BBZ98%2BW9sdXgI5uO%2FBg8Zui7aZ7%2FVI4V%2FVH7rt5I2py7fneDvLY%2F9wjMme7Uga1xYlF6ZbldRCuYsTVMiUxN3XDpPD8zDm0EOky1it0NeWXHSGNufymLHKhIoip5TMSkDY4eU172jIZGevEjC43lEVhqFrDLYykVtJQ%2F2C5ICm9QsRxz1BR4XANeJTdyBXs7th%2FB35kgKHEwmH1RtbrLCWHsVIkI%2FymZI5FCWguiZXjbtS1emIUkg5YCAfSj%2ByJlKeLPXn3qhY%2BdMyaA%2B6esTY2QY1B7S3uRFrxYV8WokhkBaYJ6XWpT%2BmsNl08Q1k8jRk4bnzXh6GGnRKNiomZIAFDV%2FDVCotrCRn05lqB1rR3ePRzoBEx%2FWzyJmFW4FVPQRgUhLR9LUnQPbVsl5bn9reK75aDIy4yGhgskK6Hl7IoAQpEksMLO1P3YPzGxlcepT99iC%2FUVlyhtp1ntodv7dr8la3oPju%2Fw%3D%3D
54.36.116.88200 OK21 kB
ocsp.pki.goog/gts1c3
142.250.74.35200 OK472 B
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
216.58.207.202200 OK31 kB
cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js
151.101.85.229200 OK22 kB
2520.lidgainoff.link/media/mainstream/all/ab/2008_2.css
54.36.116.88200 OK2.4 kB
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK1.5 kB
2520.lidgainoff.link/media/mainstream/all/ab/no/2.js
54.36.116.88200 OK416 B
2520.lidgainoff.link/media/mainstream/all/ab/like.png
54.36.116.88200 OK357 B
ocsp.pki.goog/gts1c3
142.250.74.35200 OK472 B
2520.lidgainoff.link/media/mainstream/flag-icon/css/flag-icon.css
54.36.116.88200 OK11 kB
2520.lidgainoff.link/media/mainstream/all/ab/iphone13pro.png
54.36.116.88200 OK30 kB
2520.lidgainoff.link/media/mainstream/icon.js
54.36.116.88200 OK3.3 kB
jsontdsexit2.com/ExtService.svc/getextparams
65.108.244.197200 OK515 B
2520.lidgainoff.link/media/mainstream/all/ab/top_red.png
54.36.116.88200 OK4.6 kB
2520.lidgainoff.link/media/mainstream/all/ab/logo.png
54.36.116.88200 OK18 kB
2520.lidgainoff.link/media/mainstream/all/ab/x1.png
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/fr11.jpg
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/fr3.jpg
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/fr1.jpg
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/sound.js
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/box-iphone13pro.png
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/u.js
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/fr6.jpg
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/2008.css
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/fr2.jpg
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/fr4.jpg
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/box_closed.png
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/box_open.png
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/2008_1.js
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/muti_iphone13pro.png
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/fr5.jpg
54.36.116.88200 OK0 B
2520.lidgainoff.link/media/mainstream/all/ab/2008_3.js
54.36.116.88200 OK0 B