Report Overview

  1. Submitted URL

    download1482.mediafire.com/2b3vv12nbatg/znqa0pj8syqzj27/@beta+r3+pro+salmangsmworld.com.zip

  2. IP

    205.196.123.170

    ASN

    #46179 MEDIAFIRE

  3. Submitted

    2022-09-25 18:10:09

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
translate.google.com11560001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.comodoca.com16960001-01-01T00:00:00Z0001-01-01T00:00:00Z
static.mediafire.com475650001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
connect.facebook.net1390001-01-01T00:00:00Z0001-01-01T00:00:00Z
lh3.googleusercontent.com660001-01-01T00:00:00Z0001-01-01T00:00:00Z
stats.g.doubleclick.net960001-01-01T00:00:00Z0001-01-01T00:00:00Z
btloader.com1690570001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
fundingchoicesmessages.google.com23970001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.amplitude.com29110001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z
ajax.googleapis.com129050001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.mediafire.com301090001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
api.amplitude.com12420001-01-01T00:00:00Z0001-01-01T00:00:00Z
download1482.mediafire.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
translate.googleapis.com10050001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.no256070001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google-analytics.com400001-01-01T00:00:00Z0001-01-01T00:00:00Z
ad-delivery.net13410001-01-01T00:00:00Z0001-01-01T00:00:00Z
static.cloudflareinsights.com12940001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
region1.google-analytics.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.otnolatrnup.com509790001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumcom.zipSinkholed

Files detected

  1. URL

    lh3.googleusercontent.com/YxmihnhFt54cZYUpI8Vki3ux02R2TgdxT2JLItC4sk0NMsB8q5xXuZr3KKhXns_325CVgfI3IAWpwJrMtsUf1HdwXaWps_lxmzvqH8R5aBB2P50trKqeLQ=h60

  2. IP

    142.250.74.33

  3. ASN

    #15169 GOOGLE

  1. File type

    gzip compressed data, max compression\012- data

    Size

    16 kB (15839 bytes)

  2. Hash

    d6c6b66d7f9273f9c7e9cee821193aef

    c527acc7d4ee4d375c5188c220d801759df2d74c

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (62)

HTTP Transactions (94)

URLIPResponseSize
download1482.mediafire.com/2b3vv12nbatg/znqa0pj8syqzj27/@beta+r3+pro+salmangsmworld.com.zip
205.196.123.170302 Found0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK329 B
www.mediafire.com/download_repair.php?flag=4&dkey=2b3vv12nbat&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
104.16.53.48200 OK16 kB
static.mediafire.com/css/mfv3_121890.php?ver=nonssl
104.16.53.48200 OK43 kB
static.mediafire.com/js/master_121890.js
104.16.53.48200 OK152 kB
static.mediafire.com/css/mfv4_121890.php?ver=nonssl&date=2022-09-25
104.16.53.48200 OK53 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
www.google.com/recaptcha/api.js
142.250.74.164200 OK554 B
static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color.svg
104.16.53.48200 OK2.1 kB
static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color_reversed.svg
104.16.53.48200 OK2.1 kB
www.mediafire.com/images/icons/myfiles/default.png
104.16.53.48200 OK363 B
www.googletagmanager.com/gtag/js?id=UA-829541-1
142.250.74.72200 OK42 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
static.mediafire.com/images/icons/svg_dark/icons_sprite.svg
104.16.53.48200 OK8.4 kB
www.googletagmanager.com/gtm.js?id=GTM-53LP4T
142.250.74.72200 OK71 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
static.mediafire.com/images/icons/svg_light/twitter.svg
104.16.53.48200 OK553 B
static.mediafire.com/images/icons/svg_light/facebook.svg
104.16.53.48200 OK298 B
static.mediafire.com/images/backgrounds/download/download_status/download_new_key.svg
104.16.53.48200 OK603 B
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK45 kB
www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
142.250.74.163200 OK158 kB
www.mediafire.com/blank.html
104.16.53.48200 OK174 B
cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js
54.230.245.120200 OK22 kB
fonts.googleapis.com/css?family=Open+Sans:800,700,400,300
142.250.74.10200 OK2.2 kB
www.mediafire.com/apple-touch-icon.png
104.16.53.48200 OK2.2 kB
www.mediafire.com/favicon.ico
104.16.53.48200 OK1.5 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
push.services.mozilla.com/
35.161.6.128101 Switching Protocols0 B
www.mediafire.com/blank.html
104.16.53.48200 OK174 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
www.mediafire.com/blank.html
104.16.53.48200 OK174 B
connect.facebook.net/signals/config/542578585845936?v=2.9.84&r=stable
157.240.200.14200 OK86 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
www.mediafire.com/blank.html
104.16.53.48200 OK174 B
translate.googleapis.com/translate_static/css/translateelement.css
142.250.74.74200 OK3.6 kB
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.99e50R6b4a4.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpjUhGxFCXN4e2-zoCcY3WdFh3Ocw/m=el_main
142.250.74.74200 OK94 kB
www.facebook.com/tr/?id=542578585845936&ev=PageView&dl=http%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D2b3vv12nbat%26qkey%3Dznqa0pj8syqzj27%26ip%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522ip%2522%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1664129397539&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664129397537.1163539275&it=1664129397339&coo=false&rqm=GET
157.240.200.35200 OK0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
lh3.googleusercontent.com/YxmihnhFt54cZYUpI8Vki3ux02R2TgdxT2JLItC4sk0NMsB8q5xXuZr3KKhXns_325CVgfI3IAWpwJrMtsUf1HdwXaWps_lxmzvqH8R5aBB2P50trKqeLQ=h60
142.250.74.33200 OK16 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
www.google-analytics.com/analytics.js
142.250.74.174200 OK20 kB
ocsp.comodoca.com/
172.64.155.188200 OK471 B
translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20220921
142.250.74.46204 No Content0 B
static.mediafire.com/images/icons/svg_dark/arrow_dropdown.svg
104.16.53.48200 OK244 B
www.mediafire.com/cdn-cgi/rum?
104.16.53.48200 OK20 B
api.amplitude.com/
44.230.226.51200 OK7 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-829541-1&cid=1761404839.1664129398&jid=469899587&gjid=245792921&_gid=1568551605.1664129398&_u=YEBAAUAAAAAAAC~&z=1400565064
64.233.162.155200 OK4 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-829541-1&cid=1761404839.1664129398&jid=469899587&_u=YEBAAUAAAAAAAC~&z=278447226
142.250.74.3200 OK42 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F742ed98b-b8fa-4199-984b-51f661ac6e89.jpeg
34.120.237.76200 OK4.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F254286e1-1c63-4609-9dfb-0eb4b9096238.jpeg
34.120.237.76200 OK6.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b4f012b-e562-4fc6-aab8-ec2ffc328b6d.jpeg
34.120.237.76200 OK7.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg
34.120.237.76200 OK8.9 kB
region1.google-analytics.com/g/collect?v=2&tid=G-K68XP6D85D&gtm=2oe9l0&_p=1798383574&cid=1761404839.1664129398&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664129397&sct=1&seg=0&dl=http%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3D2b3vv12nbat%26qkey%3Dznqa0pj8syqzj27%26ip%3D91%252E90%252E42%252E154&dt=File%20sharing%20and%20storage%20made%20simple&en=page_view&_fv=1&_ss=1
216.239.32.36204 No Content0 B
static.mediafire.com/images/icons/svg_dark/loading_indeterminate.svg
104.16.53.48200 OK363 B
www.mediafire.com/cdn-cgi/rum?
104.16.53.48200 OK20 B
www.mediafire.com/file/znqa0pj8syqzj27/%40Beta+R3+Pro+salmangsmworld.com.zip
104.16.53.48200 OK87 kB
www.mediafire.com/js/prebid5.17.0.js
104.16.53.48200 OK80 kB
static.mediafire.com/images/filetype/file-zip-v3.png
104.16.53.48200 OK1.9 kB
static.mediafire.com/images/backgrounds/header/mf_logo_full_color.svg
104.16.53.48200 OK1.5 kB
static.mediafire.com/images/backgrounds/download/apps_list_sprite-v6.png
104.16.53.48200 OK8.1 kB
www.mediafire.com/images/icons/svg_dark/arrow_dropdown.svg
104.16.53.48200 OK244 B
static.mediafire.com/images/icons/svg_dark/check_circle_green.svg
104.16.53.48200 OK300 B
static.mediafire.com/images/backgrounds/download/social/fb_16x16.png
104.16.53.48200 OK181 B
www.mediafire.com/images/icons/svg_light/icons_sprite.svg
104.16.53.48200 OK8.4 kB
static.mediafire.com/images/backgrounds/download/additional_content/flag.svg
104.16.53.48200 OK204 B
cdn.otnolatrnup.com/Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0
104.19.214.37200 OK123 kB
ocsp.digicert.com/
93.184.220.29200 OK280 B
ad-delivery.net/px.gif?ch=2
172.67.69.19200 OK43 B
ad-delivery.net/px.gif?ch=1&e=0.9546566766049979
172.67.69.19200 OK43 B
static.mediafire.com/images/backgrounds/download/additional_content/continent-as.svg
104.16.53.48200 OK16 kB
www.mediafire.com/cdn-cgi/rum?
104.16.53.48200 OK20 B
btloader.com/tag?o=5678961798414336&upapi=true
104.26.7.139200 OK0 B
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
142.250.74.74200 OK0 B
static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
172.64.156.26200 OK0 B
fundingchoicesmessages.google.com/f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8=
142.250.74.46200 OK0 B
connect.facebook.net/en_US/fbevents.js
157.240.200.14200 OK0 B