Report Overview

  1. Submitted URL

    cdn-134.anonfiles.com/gcH4kfT6ye/44230053-1674513202/KreYzeSpoofer.rar

  2. IP

    195.96.151.89

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-03-06 19:25:28

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
pogothere.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
thecliffsandupo.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
anonfiles.com1171610001-01-01T00:00:00Z0001-01-01T00:00:00Z
vjs.zencdn.net49680001-01-01T00:00:00Z0001-01-01T00:00:00Z
edbritingsynt.infounknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
djv99sxoqpv11.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
accounts.google.com810001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn-134.anonfiles.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
baconaces.pro8351480001-01-01T00:00:00Z0001-01-01T00:00:00Z
thdgemanowh.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/7eW1ubmUaAgAIWg0EClNSSlpdXFxfBx0BCwlQIT8DOwMqChwVCz4cK18ZFApYSUsCDwseUEgLCxpQX0gEHQ9TWkMNHQEFWBMZAhQQCQAGHx1fGA9TCBYXBwIJGEhcKFBXXUtcVVEaBwABFhodS1dJAxpLV0lcXkBVXF4sS1dJGgcAU01IXSxAS10WWFFcXi-xLV0kfGEtWOFxeW0tJREtcVR4IDQUKXF8oXFVIXV5fVUhIXF4DEB8LCAoBSFwoVElYQF5DDFBfMalware
mediumdjv99sxoqpv11.cloudfront.net/CU3A0TUEwH1orficZUHB2YEcHfnF1GkciLyNNQ34kOzYNAHA6PUYJdx8YEjk7N00Eay0yHlNwZzYeV3BwdRFQL3xnVkEsfD4fTiQtPxERfwdmXgRoc2NYQyQvNx9DPmRhQFo5ZGFABX1vY1UHD2RhQEMkL2VEEX4DdkIENXdnVQcPZGFARjtkYDEFfXR9QB-1oc2MXUS4qPFUGC3NjQQR9cGNBEX9xNRlGKCc8CBF/B2JAAWNxdQUJfAMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (71)

URLIPResponseSize
cdn-134.anonfiles.com/gcH4kfT6ye/44230053-1674513202/KreYzeSpoofer.rar
195.96.151.89301 Moved Permanently162 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
cdn-134.anonfiles.com/gcH4kfT6ye/44230053-1674513202/KreYzeSpoofer.rar
195.96.151.89301 Moved Permanently0 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
anonfiles.com/gcH4kfT6ye
45.154.253.151200 OK3.4 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
anonfiles.com/css/anonfiles.css?1677171543
45.154.253.151200 OK25 kB
anonfiles.com/sw_anonfiles.js
45.154.253.151200 OK16 kB
anonfiles.com/js/app.js?1677171542
45.154.253.151200 OK58 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.130.217200 OK9.7 kB
anonfiles.com/img/flags/24/no.png
45.154.253.151200 OK611 B
anonfiles.com/img/flags/24/de.png
45.154.253.151200 OK483 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.130.217200 OK132 kB
anonfiles.com/img/flags/24/es.png
45.154.253.151200 OK666 B
anonfiles.com/img/flags/24/in.png
45.154.253.151200 OK593 B
anonfiles.com/img/flags/24/jp.png
45.154.253.151200 OK599 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
anonfiles.com/img/flags/24/fi.png
45.154.253.151200 OK456 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
anonfiles.com/img/flags/24/dk.png
45.154.253.151200 OK537 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737329
54.230.245.37200 OK69 kB
anonfiles.com/img/flags/24/fr.png
45.154.253.151200 OK536 B
anonfiles.com/img/flags/24/se.png
45.154.253.151200 OK581 B
edbritingsynt.info/MWZoTU9QBAsgcFBbCms6QwpVaH13Q1oLK1sQUXQ8SQkZPTkAV0YuI14TDCs9XggcYyFUEk1/CQYDP3w6Uws9LA5WJyEaKAEjKyEBYjUEPStpIBArDUlWKg44XTchGXd1KR8APnIOHxsMS1ILBn4JPC4MP2g1PT4MdREbKBp0ASQON0E3MH0odC45dBtmDSUDB2AjLhoNfDwpJR5gJTkMCHkeWSsIcF88Dg1oPio6BnshLSUseiAqFRdkEgsbGXQHKjoOcyAAIitiVwwHDkkWJBt/XQUwJg1nPi55PGJXDAcIVgUpGH8ALzAeN3A1WX0YZiAuLhdYSxABGQENDgoKRTEnCzdUMVg5BWMjHC4ZY1IhCR5kLTALd14+LhsGaTBdKxlkDiEVCQUiLQ93fSUpIg1iIB8iGXQKMRwJBCIsCw1XQAI+IF8WVQIeVyQGCStICg4dPX8
54.230.111.32200 OK1.2 kB
thecliffsandupo.com/R3dtVE1oSA4ncAojOx8pAxwpFhVyOikVCAEUXQ0MBSZccX8BJQo7azMeCWl6dEBeZnRhBwQwcHZRHiAsMwIeaXxhHgMyInpRG2l8aURZen51WVxyOHpGSyA9JhBQZWs3Axk4cHZBWmx8dEdaZXVwT10
188.114.96.1204 No Content0 B
edbritingsynt.info/Z3QwblAGFlMDbwZJUkglFRgNS2IhUQIoNA0CCVcjHxtBHiZWRR4NPAgBVAgiCBpEQD4CABVcFiQhAy9gMyF1GRhWG0IIOQQuZSYSVS11DRgBGnZfFwwXWSIpKTphXWQMO0o3HiY8cVgAMi16CihfLXUEO1A6AF4VBg0AFxgLOkc0Kj4RZl0SEBBiKAErR0gABgwxQwgUUxJkBwETJEgrAgEDVAMIACZfDWIpLWEXARE6SFcUNxliBgEhGwU0FyE1cjZhES0BOxgjRmIGASI5WyJiMTF1NmQjEFsnFSksVAAGNhdgNBchNWIEJAwtdCsWASxiVwElWQEBM1U5aDsDUwVgKAUgNwMgOjYlYlczIDpyKwheDH48PCA/cw1oJDZ2S2IhNgIkESYjfhY0NiF6CBFBHkMBPhdJR101DzIJI2EOOUIqZisc
54.230.111.32200 OK1.2 kB
push.services.mozilla.com/
35.161.92.174101 Switching Protocols0 B
thecliffsandupo.com/Tk83RWRhcFQ2WRgKDhYGCXpfIFYALmACAHwVcS0HFAdTKDMIexExDSpyAHZTfXwHYxQnKwp0XGg8QyQQOzwKdEInIVEqWWg5CnRKfmEFa1doOgp0Qjo/ViJZf2lHMRAicgZzU3Z+BHVTf3cPdVU
188.114.96.1204 No Content0 B
anonfiles.com/static/logo.png
45.154.253.151200 OK18 kB
baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1
54.162.51.18200 OK23 kB
anonfiles.com/img/flags/24/br.png
45.154.253.151200 OK1.1 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
anonfiles.com/img/flags/24/ru.png
45.154.253.151200 OK403 B
djv99sxoqpv11.cloudfront.net/7eW1ubmUaAgAIWg0EClNSSlpdXFxfBx0BCwlQIT8DOwMqChwVCz4cK18ZFApYSUsCDwseUEgLCxpQX0gEHQ9TWkMNHQEFWBMZAhQQCQAGHx1fGA9TCBYXBwIJGEhcKFBXXUtcVVEaBwABFhodS1dJAxpLV0lcXkBVXF4sS1dJGgcAU01IXSxAS10WWFFcXi-xLV0kfGEtWOFxeW0tJREtcVR4IDQUKXF8oXFVIXV5fVUhIXF4DEB8LCAoBSFwoVElYQF5DDFBf
54.230.245.37200 OK578 B
djv99sxoqpv11.cloudfront.net/CU3A0TUEwH1orficZUHB2YEcHfnF1GkciLyNNQ34kOzYNAHA6PUYJdx8YEjk7N00Eay0yHlNwZzYeV3BwdRFQL3xnVkEsfD4fTiQtPxERfwdmXgRoc2NYQyQvNx9DPmRhQFo5ZGFABX1vY1UHD2RhQEMkL2VEEX4DdkIENXdnVQcPZGFARjtkYDEFfXR9QB-1oc2MXUS4qPFUGC3NjQQR9cGNBEX9xNRlGKCc8CBF/B2JAAWNxdQUJfA
54.230.245.37200 OK264 B
anonfiles.com/img/flags/24/pl.png
45.154.253.151200 OK347 B
thdgemanowh.com/
52.20.131.174200 OK0 B
anonfiles.com/img/flags/24/kr.png
45.154.253.151200 OK988 B
ocsp.digicert.com/
192.229.221.95200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
edbritingsynt.info/utx?cb=KCew9IPJMf7j&top=anonfiles.com&tid=737329
54.230.111.32204 No Content0 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found391 B
anonfiles.com/sw_anonfiles.js?RVhNREYeenp3cXZqfmZqZ3phZnAmOnwifnU8YCV2d29gcCR1PGB9c31hYHF%2Bcjx4fX91bCkif2d0b31zJmB7cX9ydSlydHd1eScgfXV1dCR3dXVyJH1ufyV%2EdTspImRpej4zZGl6OSwiIj0gJSgqLyVqJSo1b2hkdGhjcWRpPiwoNSB0KyUqNj1hIicpKygZ
45.154.253.151200 OK16 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found472 B
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AWnogHeIFiDWSZIzrYpIZK7XzSynmG-QROD-7iEYpnT3z6GmeXmK7gqubt0MYKLB8-KvImn8SUNNrw
142.250.74.109302 Found398 B
ocsp.digicert.com/
192.229.221.95200 OK471 B
anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1668605455
45.154.253.151200 OK1.3 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb850def5-99d3-4f6a-83a2-cb16c6c4be47.jpeg
34.120.237.76200 OK5.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5642d287-8c21-49d9-9a11-2bfa6ee1a2f2.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c09ef55-602f-4eb8-aa1a-e701b5dc7903.jpeg
34.120.237.76200 OK6.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
34.120.237.76200 OK3.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18bfa351-16bf-432a-ae68-78856a5cd3cb.jpeg
34.120.237.76200 OK7.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg
34.120.237.76200 OK7.3 kB
thdgemanowh.com/
52.20.131.174200 OK0 B
thdgemanowh.com/
52.20.131.174200 OK0 B
thdgemanowh.com/
52.20.131.174200 OK0 B
pogothere.xyz/
172.64.199.35200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S1376431285%3A1678130719620779&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHeAIW5nUNbqQZUSZuhfylF0Vr13576KDFBbTAEzGHZnJI8YYFLe6fnUbqM1p6keaAi-B761OQ
142.250.74.109403 Forbidden0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
31.13.72.36200 OK0 B
thdgemanowh.com/RVhNREYeenp3cXZqfmZqZ3phZnAmOnwifnU8YCV2d29gcCR1PGB9c31hYHF%2Bcjx4fX91bCkif2d0b31zJmB7cX9ydSlydHd1eScgfXV1dCR3dXVyJH1ufyV%2EdTspImRpej4zZGl6OSwiIj0gJSgqLyVqJSo1b2hkdGhjcWRpPiwoNSB0KyUqNj1hIicpKygZ
52.20.131.174200 OK0 B
pogothere.xyz/asd100.bin
172.64.199.35200 OK0 B