Report Overview

  1. Visited public
    2023-11-23 00:47:33
    Tags
  2. URL

    send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe

  3. Finishing URL

    send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe

  4. IP / ASN
    104.26.1.171

    #13335 CLOUDFLARENET

    Title
    zqsuln66tga1
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
greataseset.orgunknown2023-11-082023-11-15 08:38:072023-11-21 21:03:40
wouldmakefea.orgunknown2023-11-082023-11-21 20:46:492023-11-22 10:18:23
accounts.google.com811997-09-152016-03-20 13:44:492023-11-22 06:51:52
pogothere.xyzunknown2022-08-222022-09-04 21:11:252023-11-22 12:00:42
evidenceguidance.comunknown2023-09-272023-09-27 03:53:012023-11-18 13:35:29
professionalswebcheck.comunknown2022-04-012022-04-02 00:47:292023-11-21 20:47:02
send.cm3386192019-03-182019-08-16 11:13:472023-11-22 13:25:44
d2dkurdav21mkk.cloudfront.netunknown2008-04-252023-04-15 22:09:182023-11-11 22:32:13
walker.send.cmunknown2019-03-182023-09-07 08:45:042023-11-16 06:21:20
ocsp.r2m03.amazontrust.comunknown2007-05-112023-02-21 01:06:242023-11-22 05:09:34
friendshipmale.comunknown2022-10-212022-10-21 14:15:252023-11-21 10:46:47
dismantlepenantiterrorist.com178472021-11-012021-11-01 22:12:122023-11-21 02:56:58

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumdismantlepenantiterrorist.comSinkholed
mediumdismantlepenantiterrorist.comSinkholed

ThreatFox

No alerts detected


JavaScript (18)

HTTP Transactions (48)

URLIPResponseSize
send.cm/qr/64F0U
172.67.70.55200 OK346 B
d2dkurdav21mkk.cloudfront.net/?rukdd=984022
54.230.241.40200 OK55 kB
send.cm/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
172.67.70.55200 OK86 kB
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
172.67.70.55200 OK77 kB
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Medium.woff
172.67.70.55200 OK82 kB
send.cm/lib/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2
172.67.70.55200 OK74 kB
greataseset.org/OUFvRG0Wfgw3UG4qAHEJcS0aIjwIBz4TJw8COhYnW3IYFD8JBEkwBF18VnxZCXNdYh1QJVJ1S0o1DjAYSnxeYgRXJwB5S098XmpeDW9ccEMJZxp5XB81HyUKBHBJNBlNLVJ1WglxWHRdDXJXc1wK
188.114.97.1204 No Content0 B
wouldmakefea.org/a3RYdk0KFjsbcgpJOlA4GRhlU38tUWowKVkQMwM/DxUuRHwGHzNYLgcbLRIrGRs2AmMFESxTfy1BAkR5XhceEQgqIjshFxM5EC4YWhwARyIhJTUGDykxNxADAxAMLjdfGxE1B05GGjcgBCMIRQstEjA7GDMhaRkcOj4BPidSFQswOg47aQYrIwwdTg89ORYgJBwsGSAHJTkvRg48Ng0FDgxNDz4jXyccARwPOiBGBT0mL0McBwx9RAs5LAIuHhwAGRUPUhIbMBsZPg0FATowCTkMLgMREBs9EQkjJR47HhEDPSMrGh4cABk9JS04GxwLGyJpFRU6PB41FSpZMy4dOiUeICE9BREgOiElDx4VMwM0NCs9Ij0uNQAFGRElPDcQRxsgNTA0LD4YPT46PRgOEWsBBzcYPVYSFgYKJzMqRDw6PG0
108.157.214.118200 OK1.2 kB
send.cm/favicon.ico
172.67.70.55200 OK11 kB
send.cm/static/js/clipboard.min.js
172.67.70.55200 OK3.2 kB
send.cm/zqsuln66tga1/WR.v6.24.EI.x86.x64.ByMi.exe
172.67.70.55200 OK30 kB
wouldmakefea.org/utx?cb=zGRrNYT85eey&top=send.cm&tid=984022
108.157.214.118204 No Content0 B
walker.send.cm/s.php?action_name=send.cm%2Fzqsuln66tga1&idsite=1&rec=1&r=579833&h=0&m=47&s=18&url=https%3A%2F%2Fsend.cm%2Fzqsuln66tga1%2FWR.v6.24.EI.x86.x64.ByMi.exe&_id=7de6636a7a3de932&_idn=1&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pv_id=BDTEcj&pf_net=20&pf_srv=164&pf_tfr=9&pf_dm1=383&uadata=%7B%7D
172.67.70.55204 No Content0 B
walker.send.cm/s.js
172.67.70.55200 OK22 kB
d2dkurdav21mkk.cloudfront.net/5Z245cFgEAVcWZxMHXU1hX1oJQmpBBEofNhdTXz4oICJ+AmoWP3FFfhMUXU1oQQJYHj9aSFweO1pfHxE8BVMNViwXAVJNMw0CWBUsCg9WHn4SDwQdNx0HVRw5Qlx/RXZXSwtAcB9fCFVrJUsLQDQOAEwIfVVeQUhuOFgNVWslSwtAKhFLCjFpV1cXQHFCXA-kXPQQFVlVqIVwJQWhXXwlBfVVeXxkqAghWCH1VKAhBaUleHwVlVg
54.230.241.40 621 B
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp3dbhAG-Z49KFA3u2SxERD5AQcMmUHWlDut4rpWmMD2I-T14yNZFH0Vff6NeIVk7fxIWnC8Ug
142.250.74.109302 Found401 B
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp19LiGIpxxStRI25RxQxo19-Q9IygdLmmdCcFem2ztOM4ASXOxZaz9MQTZ8wO2jZtwgV5tnpQ
142.250.74.109302 Found405 B
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-Regular.woff
172.67.70.55200 OK77 kB
send.cm/lib/bootstrap/js/bootstrap.bundle.min.js
172.67.70.55200 OK108 kB
send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82a5665a4ef75696
172.67.70.55200 OK82 kB
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B
send.cm/cdn-cgi/challenge-platform/h/g/jsd/r/82a5665a4ef75696
172.67.70.55200 OK76 B
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp23MGnJ1mF9SHkLk6KVqF-zy4F_39M2m3GgV-EdnGSDlOYbEmFxKLDgQFT3Zl7tJjkBA3wd&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-956140749%3A1700700437160402&theme=glif
142.250.74.109403 Forbidden805 B
friendshipmale.com/sfp.js
172.64.99.2200 OK54 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found0 B
send.cm/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
172.67.70.55200 OK7.4 kB
pogothere.xyz/asd100.bin
172.64.166.32200 OK102 kB
dismantlepenantiterrorist.com/pxf.gif?uuid=2919aa85-fdff-4592-ab5c-5a86ae280ea6&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=0
0.0.0.0 0 B
send.cm/static/css/dl.min.css
172.67.70.55200 OK180 kB
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp113DLszWgGdECHlMOkV_XYsIftopYu9lea5pX-6BltHkh-aSaZW6KNSWvj1_dVWIdP09J4&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-116589745%3A1700700437106598&theme=glif
142.250.74.109403 Forbidden0 B
greataseset.org/popunder.gif
188.114.97.1200 OK35 B
send.cm/static/css/auth.min.css
172.67.70.55200 OK789 B
evidenceguidance.com/9c/ed/24/9ced2453f41586bc39632e754938332a.json
192.243.59.13403 Forbidden0 B
send.cm/js/share.js
172.67.70.55200 OK329 B
send.cm/lib/feather-icons/feather.min.js
172.67.70.55200 OK66 kB
send.cm/cdn-cgi/challenge-platform/scripts/jsd/main.js
172.67.70.55302 Found7.4 kB
send.cm/lib/@fortawesome/fontawesome-free/css/fa.min.css
172.67.70.55200 OK6.8 kB
send.cm/static/js/jquery.min.js
172.67.70.55200 OK93 kB
send.cm/assets/js/dashforge.js
172.67.70.55200 OK2.3 kB
send.cm/lib/perfect-scrollbar/perfect-scrollbar.min.js
172.67.70.55200 OK18 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found0 B
pogothere.xyz/
172.64.166.32200 OK27 B
professionalswebcheck.com/stats
3.124.25.122200 OK40 B
dismantlepenantiterrorist.com/pxf.gif?uuid=2919aa85-fdff-4592-ab5c-5a86ae280ea6&eb=18b30c6599f2cc55a4e95ff938f1022d&te=baea64896a02d34b4567f77c6840ba09&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=13.2079&b_frame=0&pk=9ced2453f41586bc39632e754938332a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=0
0.0.0.0 0 B
send.cm/cdn-cgi/challenge-platform/scripts/jsd/main.js
172.67.70.55302 Found7.4 kB
send.cm/cdn-cgi/challenge-platform/h/g/scripts/jsd/9914b343/main.js
172.67.70.55200 OK7.4 kB
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
172.67.70.55200 OK82 kB
send.cm/static/fonts/ibm-plex-sans/complete/woff/IBMPlexSans-SemiBold.woff
172.67.70.55200 OK82 kB