Report Overview

  1. Submitted URL

    cdn-120.anonfiles.com/EeIeNfP2y4/17afe705-1674910671/AimMethod.exe

  2. IP

    195.96.151.72

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-01-30 20:06:00

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
firefox-settings-attachments.cdn.mozilla.net115092019-11-30T10:32:57Z2023-03-13T08:38:30Z
accounts.google.com812016-03-20T13:44:49Z2023-03-13T07:05:07Z
pogothere.xyzunknown2022-09-04T21:11:25Z2023-03-13T05:42:24Z
vjs.zencdn.net49682012-05-21T10:26:59Z2023-03-13T05:47:22Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
djv99sxoqpv11.cloudfront.netunknown2021-10-07T16:52:14Z2023-03-13T06:01:35Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
osiextantly.comunknown2023-01-30T16:14:35Z2023-02-23T05:17:01Z
e1.o.lencr.org61592021-08-20T09:36:30Z2023-03-13T05:21:46Z
detectportal.firefox.com16012018-08-30T11:52:03Z2023-03-13T05:09:11Z
cdn-120.anonfiles.comunknown2020-07-17T13:23:27Z2023-03-12T14:53:29Z
anonfiles.com1171612020-06-17T12:04:43Z2023-03-13T05:41:45Z
www.facebook.com992012-05-21T02:23:41Z2021-02-04T00:31:35Z
thecoveos.comunknown2023-01-15T09:20:54Z2023-02-24T23:46:11Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
nanrumandba.xyzunknown2023-01-23T14:01:49Z2023-02-01T10:25:45Z
reerfdfgourgo.xyzunknown2023-01-23T13:29:36Z2023-03-01T02:07:26Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
baconaces.pro8351482018-07-16T10:32:31Z2023-03-13T06:01:36Z
getpocket.cdn.mozilla.net13692018-08-28T15:15:36Z2023-03-13T08:02:38Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
shavar.services.mozilla.com36022015-09-28T08:30:01Z2023-03-13T05:09:14Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/MS1ZIdXIoOSYTTT8/LEhFeGF7R0ttPDsaHDtrHSZBJxI6OSgvLx8yEThwPA8WdmZuGRMlMXVTFyU1dURUKjIqSEZtIjgaGXY6Lg8dLDAuAwE4cD0UTyY5MhweJzdtRzR+eHhQQHt+PxwcLzk/Bld5ZiYBV3lmeUVce3N7N1d5Zj8cHH1ibUYwbmR4DUR/c3-s3V3lmOgNXeBd5RUdlZmFQQHsxLRYZJHN6M0B7Z3hFQ3tnbUdCLT86EBQkLm1HNHpmfVtCbSN1RAMalware
mediumdjv99sxoqpv11.cloudfront.net/JOXNrRkdaHAUgeE0aD3twCkRYdXcfGRgpKUlOOhMSXwUjBDVMN1gBYU0JD3t3Hx8KKCAEVQ4oJARCTScjW05fYDJYTgYpPVAfBydiCzVeaHccQVtuMFAdDykwSlZZdilNVll2dgldW2N0e1ZZdjBQHV1yYgoxTnR3QUVfY3R7Vll2NU9WWAd2CUZFdm4cQV-shIloYBGN1f0Fbd3cJQlt3YgtDDS81XBUEPmILNVp2chdDTTN6CAMalware

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed

ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (101)

URLIPResponseSize
detectportal.firefox.com/success.txt?ipv4
34.107.221.82200 OK8 B
cdn-120.anonfiles.com/EeIeNfP2y4/17afe705-1674910671/AimMethod.exe
195.96.151.72301 Moved Permanently162 B
cdn-120.anonfiles.com/EeIeNfP2y4/17afe705-1674910671/AimMethod.exe
195.96.151.72301 Moved Permanently0 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30
34.120.5.221200 OK40 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
anonfiles.com/EeIeNfP2y4
45.154.253.151200 OK3.2 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
anonfiles.com/css/anonfiles.css?1668606177
45.154.253.151200 OK25 kB
anonfiles.com/sw_anonfiles.js
45.154.253.151200 OK16 kB
anonfiles.com/js/app.js?1668606177
45.154.253.151200 OK58 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.194.217200 OK9.7 kB
anonfiles.com/img/file/filetypes/ext/exe.png?1668605455
45.154.253.151200 OK971 B
anonfiles.com/img/flags/24/fr.png
45.154.253.151200 OK536 B
anonfiles.com/img/flags/24/br.png
45.154.253.151200 OK1.1 kB
anonfiles.com/img/flags/24/in.png
45.154.253.151200 OK593 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.194.217200 OK132 kB
detectportal.firefox.com/success.txt?ipv4
34.107.221.82200 OK8 B
anonfiles.com/img/flags/24/pl.png
45.154.253.151200 OK347 B
anonfiles.com/img/flags/24/se.png
45.154.253.151200 OK581 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
anonfiles.com/img/flags/24/de.png
45.154.253.151200 OK483 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
anonfiles.com/img/flags/24/jp.png
45.154.253.151200 OK599 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
anonfiles.com/img/flags/24/kr.png
45.154.253.151200 OK988 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737329
54.230.245.107200 OK69 kB
anonfiles.com/img/flags/24/fi.png
45.154.253.151200 OK456 B
shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
44.235.192.196200 OK8 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
push.services.mozilla.com/
54.213.114.144101 Switching Protocols0 B
anonfiles.com/static/logo.png
45.154.253.151200 OK18 kB
osiextantly.com/M2JNUUVSAC48elJfL3cwQQ5wdHd1R38XIVkUdGg2Sw08ITMCU2MyKVwXKTc3XAw5fytWFmhjA34xfAsMVzoEPgpgOxkFEQtHfxcJdgoLNAJ1VR9hMUcyCSIkeyY5Iw1gOA8bPXpUAgIiRS41aTx2NiUmFXJaGjUoaRcKAwhfLxUHEXUbGGAhZjAYGi96Ex4UH0crJzYkdDoUZwlUWikdAXIXDCYABwEJYRBnGxRkCFsVKBs/VxYfKxcWUA80DVszHBkxFlAPAT1EAQErLhZQCxMpV1cXOBxxNH49KFY3GzIgACx6H3RXVxc7fVAqBWAsUTcUJideMHkVEGFHfxcmAE8+YhMADiAeIn06KBMhBjAYNSlpDwsAFHsRNR0XajgHGQsFL30TcmlRJRcUABYjMxBXIQEFfQUnDwAufw98GQt7EiA3E0chLwILAjAMdy9ADSMheGYxfj0BQS4XNTxkJS4i
65.9.44.58200 OK1.2 kB
osiextantly.com/b1U4T1kON1siZg5oWmksHTkFamspcAoJPQUjAXYqFzpJPy9eZBYsNQAgXCkrADtMYTcKIR19HyUaYAErPT5cLhEuAF8qHF80fHwtGBZTHQALDVspHj0ySAQMAxp3JxQ8DU8aMy0RbgIXXjJ6FgxfH3x8LVwdQHcSJBZ5Cg8+YVcFGD0WbBw6BQIIej82EXIWDQgMSB8PLjN6Nj0GFkIZPA4dWywIOSFNAh8uMXw2MhgGVBUDCzxUAQ8DOQorPgMxb30XXzAJFQMLP3oeETlkQRY+AC1sIQtcBG0ZPzZmangPAzkKAQxWAm8OPV0WbRUfCzgMLAg5eEsnEAM6YQ0eIWRefx8NMQssEz45THwACCF8CwpXZGANDCoFVQYVIQNIfToHMXwbDSFjew5/BSZXISlSBG0aPxkdej0sK2Z/
65.9.44.58200 OK1.2 kB
reerfdfgourgo.xyz/Y0FCM0pMfiFAdy4qGAAFJCIEUCEuDRRyHFEQNV8vInImdA4leWRHIwd8dQB9UHJyFToKJX8CckUyNlI+FjJ/AmwKLyRcd0U3fwJkU29wHXhFNH8CbBcxI1R3UmcyRz4PfHMFfVZwcgp7VnZ1BH4
188.114.96.1204 No Content0 B
reerfdfgourgo.xyz/SWxvUEdmUwwjehpdKR0SDghWCXQxADo+KyEJAh4TLwEHdXUPNSkzYT0FC21weltcYn5vHAY0enhKHCQmPRkcbXZvBQE2KHRKGW12Z19bfnR4Ql12MnRdSSQ3KAtSYWE5GBs8enhaWGV2eVVeZXB+WVc
188.114.96.1204 No Content0 B
ocsp.pki.goog/s/gts1p5/SrfVchP6P8U
142.250.74.131200 OK471 B
anonfiles.com/img/flags/24/us.png
45.154.253.151200 OK656 B
nanrumandba.xyz/utx?tid=737323&top=anonfiles.com&cb=6pVNtdm7AawG
54.230.111.33204 No Content0 B
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675108795993%22
35.241.9.150200 OK21 kB
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675103844595&_since=%221666204638208%22
35.241.9.150200 OK26 kB
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK5.3 kB
anonfiles.com/img/flags/24/ru.png
45.154.253.151200 OK403 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
anonfiles.com/img/flags/24/es.png
45.154.253.151200 OK666 B
firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin
34.111.73.144200 OK807 kB
djv99sxoqpv11.cloudfront.net/MS1ZIdXIoOSYTTT8/LEhFeGF7R0ttPDsaHDtrHSZBJxI6OSgvLx8yEThwPA8WdmZuGRMlMXVTFyU1dURUKjIqSEZtIjgaGXY6Lg8dLDAuAwE4cD0UTyY5MhweJzdtRzR+eHhQQHt+PxwcLzk/Bld5ZiYBV3lmeUVce3N7N1d5Zj8cHH1ibUYwbmR4DUR/c3-s3V3lmOgNXeBd5RUdlZmFQQHsxLRYZJHN6M0B7Z3hFQ3tnbUdCLT86EBQkLm1HNHpmfVtCbSN1RA
54.230.245.107200 OK553 B
djv99sxoqpv11.cloudfront.net/JOXNrRkdaHAUgeE0aD3twCkRYdXcfGRgpKUlOOhMSXwUjBDVMN1gBYU0JD3t3Hx8KKCAEVQ4oJARCTScjW05fYDJYTgYpPVAfBydiCzVeaHccQVtuMFAdDykwSlZZdilNVll2dgldW2N0e1ZZdjBQHV1yYgoxTnR3QUVfY3R7Vll2NU9WWAd2CUZFdm4cQV-shIloYBGN1f0Fbd3cJQlt3YgtDDS81XBUEPmILNVp2chdDTTN6CA
54.230.245.107200 OK256 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675106528397&_since=%221666279968541%22
35.241.9.150200 OK68 kB
anonfiles.com/img/flags/24/no.png
45.154.253.151200 OK611 B
thecoveos.com/
54.162.51.18200 OK0 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
35.241.9.150200 OK682 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.4 kB
anonfiles.com/img/flags/24/dk.png
45.154.253.151200 OK537 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
35.241.9.150200 OK935 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
e1.o.lencr.org/
23.36.76.226200 OK344 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1674841566207&_since=%221666483264567%22
35.241.9.150200 OK52 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.109302 Found393 B
osiextantly.com/utx?cb=czV3vZeFUqn3&top=anonfiles.com&tid=737329
65.9.44.58204 No Content0 B
anonfiles.com/sw_anonfiles.js?TnU3d3cVVwBEQH1HBFVbbFcbVUEtFwYRT34RGhZHfEIaQxV%2BERpOQnZMGkJPeRECTk5%2BQVMRTmxZFRZEeExUFE59WFUVRnxYAxUVLFhVR0J7WA9BR3pBDkMUfUwPFVViV0QAVWJXQx8SLRpBEhg9W1QYGmxZFUZHYEAVWxEvGUQSWygUWwQSYhNWGwQrKA
45.154.253.151200 OK16 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.109302 Found396 B
pogothere.xyz/asd100.bin
172.64.198.35200 OK103 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
35.241.9.150200 OK1.5 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1674751976728&_since=%221661199949574%22
35.241.9.150200 OK18 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1668605455
45.154.253.151200 OK1.3 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22
35.241.9.150200 OK2.1 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22
35.241.9.150200 OK1.7 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1674595012490&_since=%221662044085942%22
35.241.9.150200 OK4.3 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
35.241.9.150200 OK1.7 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22
35.241.9.150200 OK1.3 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
34.120.237.76200 OK7.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
34.120.237.76200 OK7.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
34.120.237.76200 OK9.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
34.120.237.76200 OK4.5 kB
detectportal.firefox.com/success.txt?ipv4
34.107.221.82200 OK8 B
thecoveos.com/
54.162.51.18200 OK0 B
thecoveos.com/
54.162.51.18200 OK0 B
thecoveos.com/
54.162.51.18200 OK0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.205.35200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S-318518019%3A1675109145146678&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHftjD8aeoiDtTDsdLpYp3cpjN6zmpQqbhDy9snoGjm85NuUoh5GsX_EGoKBPjAuogI_-rdZ
142.250.74.109403 Forbidden0 B
baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1
52.20.131.174200 OK0 B
pogothere.xyz/
172.64.198.35200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S-335248021%3A1675109145120578&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHcPbuCeij9c2WxsNlGPBECmgXH5EZ2QD16SfRAJpU-NetxMIcFEbjA1W5y8_d6R7Eyyb02J
142.250.74.109403 Forbidden0 B