Report Overview

  1. Submitted URL

    dl2.topfiles.net/files/2/61/34583/RTFDdUK2HyNNb2xiR1pEMGFVU3BCZStaRmR1OUIzU0M0OVJoR0cvcERESUVaTT06Ovhcme2RlRrkLqg14EEqvPw/paintnet-portable-arm64_4.3.8.zip

  2. IP

    95.216.39.22

    ASN

    #24940 Hetzner Online GmbH

  3. Submitted

    2022-10-05 12:25:07

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
googleads.g.doubleclick.net420001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
tpc.googlesyndication.com1260001-01-01T00:00:00Z0001-01-01T00:00:00Z
r2---sn-capm-vnae.gvt1.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
dl2.topfiles.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
paintnet.ru4251790001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google-analytics.com400001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.no969690001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z
redirector.gvt1.com20700001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
pagead2.googlesyndication.com1010001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.com760001-01-01T00:00:00Z0001-01-01T00:00:00Z
csi.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
stats.g.doubleclick.net960001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdl2.topfiles.net/files/2/61/34583/RTFDdUK2HyNNb2xiR1pEMGFVU3BCZStaRmR1OUIzU0M0OVJoR0cvcERESUVaTT06Ovhcme2RlRrkLqg14EEqvPw/paintnet-portable-arm64_4.3.8.zipMalware
mediumdl2.topfiles.net/files/2/61/34583/RTFDdUK2HyNNb2xiR1pEMGFVU3BCZStaRmR1OUIzU0M0OVJoR0cvcERESUVaTT06Ovhcme2RlRrkLqg14EEqvPw/paintnet-portable-arm64_4.3.8.zipMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (186)

HTTP Transactions (64)

URLIPResponseSize
dl2.topfiles.net/files/2/61/34583/RTFDdUK2HyNNb2xiR1pEMGFVU3BCZStaRmR1OUIzU0M0OVJoR0cvcERESUVaTT06Ovhcme2RlRrkLqg14EEqvPw/paintnet-portable-arm64_4.3.8.zip
95.216.39.22301 Moved Permanently162 B
firefox.settings.services.mozilla.com/v1/
18.165.201.83200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
108.156.28.102200 OK5.3 kB
dl2.topfiles.net/files/2/61/34583/RTFDdUK2HyNNb2xiR1pEMGFVU3BCZStaRmR1OUIzU0M0OVJoR0cvcERESUVaTT06Ovhcme2RlRrkLqg14EEqvPw/paintnet-portable-arm64_4.3.8.zip
95.216.39.22302 Found0 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
18.165.201.83200 OK329 B
paintnet.ru/?p=12
194.59.167.186301 Moved Permanently0 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
push.services.mozilla.com/
44.236.232.139101 Switching Protocols0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
www.googletagmanager.com/gtag/js?id=UA-152888445-1
142.250.74.168200 OK42 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
paintnet.ru/download/
194.59.167.186200 OK18 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK16 kB
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.195200 OK9.6 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
216.58.207.195200 OK9.6 kB
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.195200 OK16 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.162200 OK55 kB
www.google-analytics.com/analytics.js
142.250.74.174200 OK20 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
googleads.g.doubleclick.net/pagead/html/r20220928/r20190131/zrt_lookup.html
142.250.74.98200 OK4.4 kB
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-152888445-1&cid=1053004083.1664972698&jid=663757617&gjid=268646300&_gid=770798594.1664972698&_u=YEBAAUAAAAAAACAAI~&z=1892312492
108.177.14.155200 OK1 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
adservice.google.no/adsid/integrator.js?domain=paintnet.ru
142.250.74.98200 OK100 B
adservice.google.com/adsid/integrator.js?domain=paintnet.ru
142.250.74.34200 OK100 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07ed6d4e-f8d6-4fa4-a7da-a497e3667e10.jpeg
34.120.237.76200 OK17 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
34.120.237.76200 OK8.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
34.120.237.76200 OK5.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
34.120.237.76200 OK3.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F727060c5-cdba-4c73-92c7-eb01c35aff59.jpeg
34.120.237.76200 OK9.9 kB
www.gstatic.com/mysidia/de17d2874496eb5aa5ae962212bd52f2.js?tag=client_fast_engine_2019
142.250.74.163200 OK4.3 kB
www.gstatic.com/mysidia/0359ee84277eeac2481fc7a143b13a57.js?tag=video_mra/web_raspberry
142.250.74.163200 OK51 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
tpc.googlesyndication.com/pagead/js/r20220928/r20110914/abg_lite_fy2021.js
142.250.74.33200 OK9.6 kB
tpc.googlesyndication.com/pagead/js/r20220928/r20110914/client/qs_click_protection_fy2021.js
142.250.74.33200 OK7.6 kB
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
216.58.207.195200 OK28 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.google.com/ads/measurement/l?ebcid=ALh7CaTVCimaTG0UdFLpvNm5lN-8dr2Rny9HRQQocr4qSlmrcSZc7Mc6AmdSUUk6GjGFet_3VKam
142.250.74.164204 No Content0 B
redirector.gvt1.com/videoplayback?id=e754bdaad5224df7&itag=18&source=web_video_ads&requiressl=yes&cmo=secure_transport=yes&ip=0.0.0.0&ipbits=0&expire=1664979898&sparams=ip,ipbits,expire,id,itag,source,requiressl&signature=636C6D982375A4D5C022CC9C97F769113F8202F3.4874408845C4BD626652CBBF4D828D1E3F7082B2&key=ck2
142.250.74.14302 Found701 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
r2---sn-capm-vnae.gvt1.com/videoplayback?id=e754bdaad5224df7&itag=18&source=web_video_ads&requiressl=yes&ip=0.0.0.0&ipbits=0&expire=1664979898&sparams=expire,id,ip,ipbits,itag,mh,mip,mm,mn,ms,mv,mvi,pl,requiressl,source&signature=5E4E953E5E49094DF4717DEE3FFC9B50EFAA6C30.5D9B0E8CE331ECB8B455C96BAF54E363307171B1&key=cms1&cms_redirect=yes&mh=3j&mip=91.90.42.154&mm=28&mn=sn-capm-vnae&ms=nvh&mt=1664971896&mv=u&mvi=2&pl=21
91.90.45.173206 Partial Content1.1 MB
csi.gstatic.com/csi?v=2&s=ima&puid=1~l8vlr851&c=2343691233088&slotId=1171845616544&qqid=CMPl39GKyfoCFfdEkQUdvV8BaQ&sei=44729911%2C44730425%2C44730426%2C44752538%2C75259414%2C420706098&nsei=44714510%2C72811302%2C75259405%2C75259407%2C75259408%2C318491509%2C447279544&bi=rda&ulv=1
216.239.32.3204 No Content0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B