Report Overview

  1. Submitted URL

    sordum.net/indir/download.php?fname=./download10/masaustu_simgeleri.zip

  2. IP

    185.146.22.240

    ASN

    #55293 A2HOSTING

  3. Submitted

    2022-10-07 19:53:09

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.googletagservices.com1690001-01-01T00:00:00Z0001-01-01T00:00:00Z
sordum.net2087990001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.sordum.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
pagead2.googlesyndication.com1010001-01-01T00:00:00Z0001-01-01T00:00:00Z
tpc.googlesyndication.com1260001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.com760001-01-01T00:00:00Z0001-01-01T00:00:00Z
csi.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z
r2---sn-capm-vnae.gvt1.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
googleads.g.doubleclick.net420001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google-analytics.com400001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
feedburner.google.com522860001-01-01T00:00:00Z0001-01-01T00:00:00Z
partner.googleadservices.com7980001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
region1.google-analytics.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.no969690001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
r1---sn-5goeen7r.gvt1.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumwww.sordum.net/indir/download.php?fname=./download10/masaustu_simgeleri.zipMalware
mediumwww.sordum.net/indir/download.php?fname=./download10/masaustu_simgeleri.zipMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


Files detected

  1. URL

    ocsp.pki.goog/gts1c3

  2. IP

    142.250.74.3

  3. ASN

    #15169 GOOGLE

  1. File type

    gzip compressed data, max compression\012- data

    Size

    1.3 kB (1338 bytes)

  2. Hash

    abcd859c6a18879d8a356fed3934c936

    38c004e04e1dbd38cbdf78270d00726c5639b574

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (174)

HTTP Transactions (65)

URLIPResponseSize
sordum.net/indir/download.php?fname=./download10/masaustu_simgeleri.zip
185.146.22.240301 Moved Permanently23 B
firefox.settings.services.mozilla.com/v1/
54.230.111.118200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
www.sordum.net/indir/download.php?fname=./download10/masaustu_simgeleri.zip
185.146.22.240301 Moved Permanently23 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
www.sordum.net/indir/download.php?fname=./download10/masaustu_simgeleri.zip
185.146.22.240301 Moved Permanently7 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.118200 OK329 B
www.sordum.net/
185.146.22.240200 OK19 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
feedburner.google.com/~fc/Sordumnet?bg=99CCFF&fg=444444&anim=0
142.250.74.46200 OK1.3 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
push.services.mozilla.com/
54.148.17.90101 Switching Protocols0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.googletagmanager.com/gtag/js?id=UA-67544547-1
142.250.74.168200 OK44 kB
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.34200 OK55 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
googleads.g.doubleclick.net/pagead/html/r20221003/r20190131/zrt_lookup.html
142.250.74.162200 OK4.4 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
adservice.google.com/adsid/integrator.js?domain=www.sordum.net
142.250.74.130200 OK100 B
adservice.google.no/adsid/integrator.js?domain=www.sordum.net
142.250.74.2200 OK100 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
partner.googleadservices.com/gampad/cookie.js?domain=www.sordum.net&callback=_gfp_s_&client=ca-pub-5837793694515315
172.217.21.162200 OK201 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
tpc.googlesyndication.com/sodar/sodar2.js
142.250.74.33200 OK6.4 kB
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
142.250.74.33200 OK5.0 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.google.com/recaptcha/api2/aframe
142.250.74.164200 OK513 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
142.250.74.130200 OK45 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
www.gstatic.com/mysidia/de17d2874496eb5aa5ae962212bd52f2.js?tag=client_fast_engine_2019
142.250.74.163200 OK4.3 kB
www.gstatic.com/mysidia/689a9421e8a36b83d5c95356b6ef7de0.js?tag=video_mra/web_raspberry
142.250.74.163200 OK51 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg
34.120.237.76200 OK9.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg
34.120.237.76200 OK8.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
34.120.237.76200 OK7.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg
34.120.237.76200 OK12 kB
region1.google-analytics.com/g/collect?v=2&tid=G-SEZJNFWQ59&gtm=2oea50&_p=1384618887&cid=2146356187.1665172379&ul=en-us&sr=1280x1024&_s=1&sid=1665172379&sct=1&seg=0&dl=https%3A%2F%2Fwww.sordum.net%2F&dt=Bilgisayar%20ve%20Android%20sorunlar%C4%B1n%C4%B1za%20en%20net%20%C3%A7%C3%B6z%C3%BCmler&en=page_view&_fv=1&_ss=1
216.239.32.36204 No Content0 B
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK16 kB
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
216.58.207.195200 OK16 kB
fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
142.250.74.10200 OK29 kB
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.195200 OK16 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK1.3 kB
r2---sn-capm-vnae.gvt1.com/videoplayback?id=414da2eddd86084a&itag=18&source=web_video_ads&requiressl=yes&ip=0.0.0.0&ipbits=0&expire=1665179579&sparams=expire,id,ip,ipbits,itag,mh,mip,mm,mn,ms,mv,mvi,pl,requiressl,source&signature=6E9685E74D3FC635B08C47A415A7184E333236F2.50FE33AE90E4F943A20F7A2EDC9286630B241BEC&key=cms1&cms_redirect=yes&mh=W8&mip=91.90.42.154&mm=28&mn=sn-capm-vnae&ms=nvh&mt=1665171470&mv=u&mvi=2&pl=21
91.90.45.173302 Found0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
csi.gstatic.com/csi?v=2&s=ima&puid=1~l8ywn3of&c=1234369040947&slotId=617184520473.5&qqid=CL6nrcHyzvoCFRn_sgodOOwOfA&sei=44729911%2C44730425%2C44730426%2C44752538%2C75259414%2C420706098&nsei=44714510%2C72811302%2C75259405%2C75259407%2C75259408%2C318491509%2C447279544&bi=rda&ulv=1
142.250.206.195204 No Content0 B
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
142.250.74.10200 OK0 B
www.google-analytics.com/analytics.js
142.250.74.174200 OK0 B
r1---sn-5goeen7r.gvt1.com/videoplayback?id=414da2eddd86084a&itag=18&source=web_video_ads&requiressl=yes&ip=0.0.0.0&ipbits=0&expire=1665179579&sparams=expire,id,ip,ipbits,itag,mh,mip,mm,mn,ms,mv,mvi,pl,requiressl,source&signature=617ECFDDECDCD36A8B04667C40ABA14142A7B98F.4A96698CB5F3FBBF2849BB33200E6C5B01BF0ADC&key=cms1&mh=W8&pl=21&redirect_counter=1&cm2rm=sn-capm-vnae7l&req_id=7c2997b22b4036e2&cms_redirect=yes&mip=91.90.42.154&mm=42&mn=sn-5goeen7r&ms=onc&mt=1665171452&mv=u&mvi=1
173.194.150.215206 Partial Content0 B