Report Overview

  1. Submitted URL

    payaftercure.com/lvt/qakbot.zip

  2. IP

    193.201.82.174

    ASN

    #51177 THC Projects SRL

  3. Submitted

    2022-11-08 14:53:36

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    70

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-10T13:49:44Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-10T05:12:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-10T05:10:00Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-10T05:10:02Z
www.google.no256072016-04-05T21:50:59Z2023-03-10T07:09:08Z
s.w.org7482017-01-30T05:56:16Z2023-03-10T14:13:07Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-10T05:09:10Z
payaftercure.comunknown2016-01-13T08:57:32Z2023-03-05T01:22:48Z
www.payaftercure.comunknown2018-02-18T03:50:50Z2023-01-26T14:12:22Z
www.google-analytics.com402012-10-03T03:04:21Z2023-03-10T13:35:34Z
stats.g.doubleclick.net962013-06-10T22:21:11Z2023-03-10T12:41:09Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-10T05:10:04Z
www.googletagmanager.com752013-05-22T04:07:37Z2023-03-10T13:03:15Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-10T05:11:10Z
www.google.com72015-05-10T13:11:19Z2023-03-10T12:19:40Z
region1.analytics.google.comunknown2022-03-17T12:26:33Z2023-03-10T05:19:42Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumpayaftercure.com/lvt/qakbot.zipMalware
mediumwww.payaftercure.com/lvt/qakbot.zipMalware
mediumwww.payaftercure.com/wp-includes/css/dist/block-library/style.min.css?ver=06bf8b27fd040050868998eea9c0f7fdMalware
mediumwww.payaftercure.com/wp-content/themes/veggie-lite-child/style.css?ver=06bf8b27fd040050868998eea9c0f7fdMalware
mediumwww.payaftercure.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2Malware
mediumwww.payaftercure.com/wp-content/themes/veggie-lite/js/search.js?ver=1.0Malware
mediumwww.payaftercure.com/wp-content/plugins/wp-polls/polls-js.js?ver=2.77.0Malware
mediumwww.payaftercure.com/wp-content/themes/veggie-lite/genericons/genericons.css?ver=3.2Malware
mediumwww.payaftercure.com/wp-content/themes/veggie-lite/js/skip-link-focus-fix.js?ver=20130115Malware
mediumwww.payaftercure.com/wp-content/themes/veggie-lite/js/navigation.js?ver=20120206Malware
mediumwww.payaftercure.com/wp-content/themes/veggie-lite/style.css?ver=06bf8b27fd040050868998eea9c0f7fdMalware
mediumwww.payaftercure.com/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2Malware
mediumwww.payaftercure.com/wp-content/fonts/open-sans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2Malware
mediumwww.payaftercure.com/wp-content/fonts/open-sans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2Malware

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed
mediumpayaftercure.comSinkholed

JavaScript (18)

HTTP Transactions (53)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
payaftercure.com/lvt/qakbot.zip
193.201.82.174301 Moved Permanently0 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
push.services.mozilla.com/
35.165.176.211101 Switching Protocols0 B
www.payaftercure.com/lvt/qakbot.zip
193.201.82.174404 Not Found11 kB
www.payaftercure.com/wp-includes/css/dist/block-library/style.min.css?ver=06bf8b27fd040050868998eea9c0f7fd
193.201.82.174200 OK12 kB
ocsp.pki.goog/gts1c3
142.250.74.35200 OK472 B
www.payaftercure.com/wp-content/themes/veggie-lite-child/style.css?ver=06bf8b27fd040050868998eea9c0f7fd
193.201.82.174200 OK5.0 kB
www.payaftercure.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
193.201.82.174200 OK4.2 kB
www.payaftercure.com/wp-content/themes/veggie-lite/js/search.js?ver=1.0
193.201.82.174200 OK350 B
www.payaftercure.com/wp-content/plugins/wp-polls/polls-js.js?ver=2.77.0
193.201.82.174200 OK648 B
www.googletagmanager.com/gtag/js?id=UA-49634712-1
142.250.74.168200 OK45 kB
www.payaftercure.com/wp-content/themes/veggie-lite/genericons/genericons.css?ver=3.2
193.201.82.174200 OK16 kB
www.payaftercure.com/wp-content/themes/veggie-lite/js/skip-link-focus-fix.js?ver=20130115
193.201.82.174200 OK379 B
www.payaftercure.com/wp-content/themes/veggie-lite/js/navigation.js?ver=20120206
193.201.82.174200 OK869 B
www.payaftercure.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
193.201.82.174200 OK31 kB
www.payaftercure.com/wp-includes/js/wp-emoji-release.min.js?ver=06bf8b27fd040050868998eea9c0f7fd
193.201.82.174200 OK5.0 kB
www.payaftercure.com/wp-includes/css/classic-themes.min.css?ver=1
193.201.82.174200 OK188 B
ocsp.pki.goog/gts1c3
142.250.74.35200 OK472 B
www.payaftercure.com/wp-content/plugins/wp-polls/polls-css.css?ver=2.77.0
193.201.82.174200 OK729 B
www.payaftercure.com/wp-content/themes/veggie-lite/style.css?ver=06bf8b27fd040050868998eea9c0f7fd
193.201.82.174200 OK12 kB
www.payaftercure.com/wp-content/fonts/fb5ba11ef2cc48f38b7399618d89f92e.css
193.201.82.174200 OK1.3 kB
www.payaftercure.com/wp-content/uploads/2020/05/cropped-Homeopathy-3-min-scaled.jpg
193.201.82.174200 OK68 kB
www.payaftercure.com/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2
193.201.82.174200 OK27 kB
www.payaftercure.com/wp-content/fonts/open-sans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
193.201.82.174200 OK45 kB
www.payaftercure.com/wp-content/uploads/2015/04/logo1.png
193.201.82.174200 OK3.7 kB
www.payaftercure.com/wp-content/fonts/open-sans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
193.201.82.174200 OK48 kB
www.google-analytics.com/analytics.js
142.250.74.174200 OK20 kB
ocsp.pki.goog/gts1c3
142.250.74.35200 OK472 B
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-QSDY7CEECH&cid=409078334.1667919204&gtm=2oeb20&aip=1&z=1951279348
142.250.74.35200 OK42 B
ocsp.pki.goog/gts1c3
142.250.74.35200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.35200 OK471 B
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-49634712-1&cid=409078334.1667919204&jid=1388842677&gjid=585861698&_gid=57815585.1667919204&_u=aGBACUACRAAAACAAI~&z=1029095233
64.233.165.156200 OK4 B
ocsp.pki.goog/gts1c3
142.250.74.35200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.35200 OK472 B
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-49634712-1&cid=409078334.1667919204&jid=1388842677&_u=aGBACUACRAAAACAAI~&z=2088305006
142.250.74.164200 OK42 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg
34.120.237.76200 OK4.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a2bb539-06cb-47fd-8d3c-7043929bfeaa.jpeg
34.120.237.76200 OK9.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3564993-11e9-4914-840f-9a1b924c950a.jpeg
34.120.237.76200 OK4.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92bcf73f-5c71-47c9-824d-b8fa1f9af018.jpeg
34.120.237.76200 OK11 kB
ocsp.pki.goog/gts1c3
142.250.74.35200 OK471 B
region1.analytics.google.com/g/collect?v=2&tid=G-QSDY7CEECH&gtm=2oeb20&_p=837321488&_gaz=1&cid=409078334.1667919204&ul=en-us&sr=1280x1024&_s=1&sid=1667919204&sct=1&seg=0&dl=http%3A%2F%2Fwww.payaftercure.com%2Flvt%2Fqakbot.zip&dt=Page%20not%20found%20-%20Pay%20After%20Cure&en=page_view&_fv=1&_ss=1
216.239.32.36204 No Content0 B
s.w.org/images/core/emoji/14.0.0/svg/1f642.svg
192.0.77.48200 OK0 B