Report Overview

  1. Submitted URL

    www41.davisonbarker.pro/pushredirect/?tmp=1&network=3&ios=0&site=adfly&c=9&ppi=3836590&pci=2638232642&t=1681990997&dest=https://www.dropbox.com/s/iqkwj1tanib95s0/[Mario_Boss][1.8]+-+byBrutec.zip?dl=0

  2. IP

    172.67.186.48

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2023-04-20 11:45:44

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    10

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ghabovethec.infounknown2023-04-102023-04-10
static.serve-servee.comunknown2022-06-182023-04-19
www41.davisonbarker.prounknown2022-07-222023-04-20
dc5k8fg5ioc8s.cloudfront.netunknown2021-01-112023-04-19
rrentlysearchi.infounknown2023-04-162023-04-20
breedingdaringconcussion.comunknown2022-09-022023-04-19
ocsp.r2m01.amazontrust.comunknown2022-10-122023-04-19
banquetunarmedgrater.comunknown2022-08-042023-04-19
reasonablelandmark.comunknown2022-08-062023-04-20
xml.serve-servee.comunknown2022-06-182023-04-19
pogothere.xyzunknown2022-09-042023-04-19
simplewebanalysis.comunknown2022-02-252023-04-19
friendshipmale.comunknown2022-10-212023-04-19
dismantlepenantiterrorist.com178472021-11-012023-04-19
addresseepaper.com181692021-11-012023-04-19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdc5k8fg5ioc8s.cloudfront.net/GSk1VZUwpIjsDcz4kMVh0eHlhUn9sJyYKIjpwPFMZeyETFTgIKydTKQIKBUM4MCloVWomLDsCcWwoOwZxe2s0AS53eXMRPCUmaBAiLigzDCIvKXMQLXcgOh8lJiE0QH4MeHtVaXh9fR19e2hmJ2l4fTkMIj81cFd8MnVjOnp+aGYnaXh9JxNpeQxkVXVkfX-xAfnoqMAYnJWhnI356fGVVfXp8cFd8LCQnAColNXBXCnt8ZEt8bDhoVA

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumbanquetunarmedgrater.com
mediumreasonablelandmark.com
mediumdismantlepenantiterrorist.com
mediumaddresseepaper.com

ThreatFox

No alerts detected


JavaScript (8)

HTTP Transactions (28)

URLIPResponseSize
www41.davisonbarker.pro/pushredirect/?tmp=1&network=3&ios=0&site=adfly&c=9&ppi=3836590&pci=2638232642&t=1681990997&dest=https://www.dropbox.com/s/iqkwj1tanib95s0/[Mario_Boss][1.8]+-+byBrutec.zip?dl=0
104.21.92.39 28 kB
www41.davisonbarker.pro/static/image/logo.png
104.21.92.39200 OK11 kB
dc5k8fg5ioc8s.cloudfront.net/?gfkcd=824473
54.230.245.166200 OK52 kB
rrentlysearchi.info/WlR3bkd1axQdej8SGyceaDg5DykYAC9eLywyRjQmCRNGWRJrJ1EaLj5pT1xzbmNESDczMEpddXwnAw8zLydKXHdqY1EHKTw7SlxhLGlHQH50ZVlbYS9pRkgzKjUQU3Z8JAMaK2dlQVZ2Y21GXH5qbEJe
104.21.45.124204 No Content0 B
rrentlysearchi.info/bHhSR1hDRzE0ZT4CEB4POhQrBmouCDB0OysaYD8pCA8ANTk7C3QzMQhFanVsWE9hYSgFHG90akoLJiYsGQtvdn4FFjQoZUoOb3d2VVZjaW1KDW92fhgIMyBlXV4iMywARWNxYF1Ba3ZqVUhqc28
104.21.45.124204 No Content0 B
ghabovethec.info/RHhQczklGjMeBiVFMlVMNhRtVgsCXWI1XSdNO0tfI005HFp8C34QVSsNNBVLKxYkXVchDHVBfwMrO0JvHi0nA3AuCxQQQ3ATHSVRdB0YH1ERFmkAcz0hGzpTNA8ANXQeHSk2bQIsNzpyPRwEOGgNMxImdHA1Ex9WEi8/HnUACxMQbjMXHwRjPB1iAAkFK2VAXBw1AiN6ERUxMXgtNDkUQwA7GQVyHDUBP2EnHx8bASgyOTYJFTBkPlwMDAYSYSxBNiEIfR1iG1QOSjxHXxATHTpTfEkzNV18NT4lUwsWIFYLBhkXKlclIDhKczw2IBZoPBMGK28vHgheQQUePhxICTkJHXMTED46CnFONjRvEh4IAwEnPjRLdQcpPjJ6KxQeK3scOz4HAR49JEtbABA/JXhiEiMcVzRFOUVsdRQWA00GHiJFXAw/AA
108.157.214.120200 OK1.2 kB
breedingdaringconcussion.com/aa/24/05/aa240591af5d8573573bb87d25c7ab12.json
173.233.137.44200 OK407 B
ocsp.r2m01.amazontrust.com/
143.204.48.16 471 B
simplewebanalysis.com/stats
3.65.16.149200 OK40 B
simplewebanalysis.com/stats
3.65.16.149200 OK40 B
banquetunarmedgrater.com/advertisers.js
192.243.59.12200 OK0 B
dc5k8fg5ioc8s.cloudfront.net/GSk1VZUwpIjsDcz4kMVh0eHlhUn9sJyYKIjpwPFMZeyETFTgIKydTKQIKBUM4MCloVWomLDsCcWwoOwZxe2s0AS53eXMRPCUmaBAiLigzDCIvKXMQLXcgOh8lJiE0QH4MeHtVaXh9fR19e2hmJ2l4fTkMIj81cFd8MnVjOnp+aGYnaXh9JxNpeQxkVXVkfX-xAfnoqMAYnJWhnI356fGVVfXp8cFd8LCQnAColNXBXCnt8ZEt8bDhoVA
54.230.245.166200 OK349 B
reasonablelandmark.com/bf/f2/9f/bff29f0d3318d4c4b9a844119e218228.js
173.233.137.60200 OK13 kB
rrentlysearchi.info/popunder.gif
104.21.45.124301 Moved Permanently0 B
rrentlysearchi.info/popunder.gif
104.21.45.124301 Moved Permanently35 B
friendshipmale.com/sfp.js
172.64.202.23200 OK28 kB
ghabovethec.info/utx?cb=lu7cQjPAO8La&top=www41.davisonbarker.pro&tid=824473
108.157.214.120204 No Content0 B
ghabovethec.info/floater?cs=SElzRGR9ekt0Unh%2FRHFXeH1AdFY&abt=0&red=1&sm=83&k=&v=0.9.1.5&sts=0&prn=0&emb=0&tid=824473&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=http%3A%2F%2Fwww41.davisonbarker.pro%2Fpushredirect%2F%3Ftmp%3D1%26network%3D3%26ios%3D0%26site%3Dadfly%26c%3D9%26ppi%3D3836590%26pci%3D2638232642%26t%3D1681990997%26dest%3Dhttps%3A%2F%2Fwww.dropbox.com%2Fs%2Fiqkwj1tanib95s0%2F%5BMario_Boss%5D%5B1.8%5D%2B-%2BbyBrutec.zip%3Fdl%3D0&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&aa=oi1_&_SxFe=1681991291518&crc=1
108.157.214.120200 OK991 B
rrentlysearchi.info/b3Jnc01ATQQAcDkmPQoCOEMAMRgAODBBGC4gNgsoNSMtMQ45SkEHJAtPX0F5W0VUVT0GFlpAf0kBExI5GgFaQX1fR0EaIwkdWkF9X0RXQ3xcQEJEDgcGEwM+SkEmVn8pV1U1NQIeSQAoHQQCXj4KABEWKEERCB5oXTQTGzgCEAkSJANXVDUkSkEjNhhFAAUXFSUEKTISXVdVRT1KQSNCe1dDXkp8XkFWXX9dQl9CeEpAURogCAZCQAkGEQgdaFgxCQYhA1dQMHtbQV5EeVpAU0Z9WktTSn9ZQl9VO1JCSUpjXlxSVThSQ19Kf1xGXkR9V0JfS3laRUEHPQ4VWkJrHwYTH3BeRF9CdFZDVUp5XUVW
104.21.45.124204 No Content0 B
xml.serve-servee.com/thumbnail?i=EU*rbdXJvNA_2&p=1681991131.220815&imgt=icon
172.64.131.18302 Found0 B
static.serve-servee.com/n337/ad/192x192_duwWEKdQ4PMk0stZ69y8.png
172.64.131.18200 OK1.1 kB
www41.davisonbarker.pro/static/image/skip_ad/en_tran.png
104.21.92.39200 OK5.1 kB
dismantlepenantiterrorist.com/pxf.gif?uuid=7ded896a-fc8b-405d-a9ab-91ff9c1626e7&eb=438d316e0e696928da604403013b50e2&te=bc8a3ff347655a560a72a09ac34fae64&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=13.2077&b_frame=0&pk=aa240591af5d8573573bb87d25c7ab12&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=11
0.0.0.0 0 B
addresseepaper.com/sfp.js
0.0.0.0 0 B
rrentlysearchi.info/YjZwNWZNCRNGWzBiMl48CGwHdFcaYTF9MyVjQXggBmcibTAFZ1ZBDwYLSAdSVgFDExYLUk0GVERFBFQSF0VNB1ZSAVZcCARZTQdAFAtAG19MB14AQBcLQRMSElcXCFdERgRBCl8HRg1XWw9BB19TA0EC
104.21.45.124204 No Content0 B
pogothere.xyz/asd100.bin
104.21.0.182200 OK102 kB
pogothere.xyz/
104.21.0.182200 OK27 B
www41.davisonbarker.pro/pushredirect/?tmp=1&network=3&ios=0&site=adfly&c=9&ppi=3836590&pci=2638232642&t=1681990997&dest=https://www.dropbox.com/s/iqkwj1tanib95s0/[Mario_Boss][1.8]+-+byBrutec.zip?dl=0
104.21.92.39200 OK75 kB