Report Overview

  1. Submitted URL

    dl3.topfiles.net/files/2/61/50429/WWo3czE5c3NSTkhXbUtveGtEVzNwZnowL3FZajY2UjVPV3pxSUtVcGwzdlZsVT06OhJ4TWFHE-eUW1PWlS730-E/paintnet-x64_4.3.12.exe

  2. IP

    88.99.67.38

    ASN

    #24940 Hetzner Online GmbH

  3. Submitted

    2023-03-31 18:16:31

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
pagead2.googlesyndication.com1012021-02-20T16:52:05Z2023-03-31T22:56:54Z
stats.g.doubleclick.net962013-06-10T22:21:11Z2023-03-31T18:42:09Z
adservice.google.no969692018-06-20T01:38:38Z2023-03-31T18:12:12Z
dl3.topfiles.netunknown2020-12-28T12:56:30Z2023-03-31T20:16:19Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-31T18:12:04Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-31T18:18:04Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-31T18:13:52Z
fonts.gstatic.comunknown2014-09-09T02:40:21Z2023-03-31T20:44:48Z
adservice.google.com762021-02-20T17:10:48Z2023-04-01T00:00:25Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-31T18:12:03Z
tpc.googlesyndication.com1262020-01-16T09:35:32Z2023-03-31T23:12:43Z
www.gstatic.comunknown2016-07-26T11:37:06Z2023-03-31T20:19:47Z
region1.google-analytics.comunknown2022-03-17T12:26:33Z2023-03-31T19:19:20Z
googleads4.g.doubleclick.net2742013-07-18T18:55:07Z2023-04-01T00:15:14Z
s0.2mdn.net2632012-05-23T08:57:58Z2023-03-31T23:37:15Z
paintnet.ru4251792012-08-16T16:41:54Z2023-03-25T03:45:23Z
www.googletagmanager.com752013-05-22T04:07:37Z2023-03-31T22:03:32Z
www.google-analytics.com402012-10-03T03:04:21Z2023-03-31T21:42:43Z
googleads.g.doubleclick.net422021-02-20T16:43:32Z2023-03-31T21:58:31Z
partner.googleadservices.com7982012-10-03T03:04:21Z2023-03-31T18:16:57Z
www.google.com72015-05-10T13:11:19Z2023-03-31T20:35:26Z
fonts.googleapis.com88772013-06-10T22:14:26Z2023-03-31T20:23:24Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-31T18:14:44Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-31T18:12:09Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-31T07:51:33Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdl3.topfiles.net/files/2/61/50429/WWo3czE5c3NSTkhXbUtveGtEVzNwZnowL3FZajY2UjVPV3pxSUtVcGwzdlZsVT06OhJ4TWFHE-eUW1PWlS730-E/paintnet-x64_4.3.12.exeMalware
mediumdl3.topfiles.net/files/2/61/50429/WWo3czE5c3NSTkhXbUtveGtEVzNwZnowL3FZajY2UjVPV3pxSUtVcGwzdlZsVT06OhJ4TWFHE-eUW1PWlS730-E/paintnet-x64_4.3.12.exeMalware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (199)

HTTP Transactions (70)

URLIPResponseSize
dl3.topfiles.net/files/2/61/50429/WWo3czE5c3NSTkhXbUtveGtEVzNwZnowL3FZajY2UjVPV3pxSUtVcGwzdlZsVT06OhJ4TWFHE-eUW1PWlS730-E/paintnet-x64_4.3.12.exe
88.99.67.38301 Moved Permanently162 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
r3.o.lencr.org/
23.33.119.27200 OK503 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
dl3.topfiles.net/files/2/61/50429/WWo3czE5c3NSTkhXbUtveGtEVzNwZnowL3FZajY2UjVPV3pxSUtVcGwzdlZsVT06OhJ4TWFHE-eUW1PWlS730-E/paintnet-x64_4.3.12.exe
88.99.67.38302 Found0 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
paintnet.ru/?p=12
194.59.166.40301 Moved Permanently0 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
www.googletagmanager.com/gtag/js?id=UA-152888445-1
142.250.74.168200 OK62 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
push.services.mozilla.com/
44.231.175.80101 Switching Protocols0 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK16 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.227200 OK9.6 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK16 kB
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
216.58.207.227200 OK9.6 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
www.google-analytics.com/analytics.js
142.250.74.142200 OK20 kB
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.130200 OK48 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
googleads.g.doubleclick.net/pagead/html/r20230329/r20190131/zrt_lookup.html
172.217.21.162200 OK4.5 kB
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-152888445-1&cid=100605529.1680286580&jid=504276488&gjid=1461575340&_gid=234929066.1680286581&_u=YADAAUAAAAAAACAAI~&z=910063788
64.233.161.157200 OK1 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
partner.googleadservices.com/gampad/cookie.js?domain=paintnet.ru&callback=_gfp_s_&client=ca-pub-5534106068881534
142.250.74.98200 OK249 B
adservice.google.no/adsid/integrator.js?domain=paintnet.ru
142.250.74.130200 OK100 B
adservice.google.com/adsid/integrator.js?domain=paintnet.ru
142.250.74.98200 OK100 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
region1.google-analytics.com/g/collect?v=2&tid=G-XK4MDLWXL3&gtm=45je33t0&_p=959833167&cid=100605529.1680286580&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1680286580&sct=1&seg=0&dl=https%3A%2F%2Fpaintnet.ru%2Fdownload%2F&dt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20Paint.NET%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%20%D0%BD%D0%B0%20%D1%80%D1%83%D1%81%D1%81%D0%BA%D0%BE%D0%BC%20%D1%8F%D0%B7%D1%8B%D0%BA%D0%B5%20%D0%BF%D0%BE%D1%81%D0%BB%D0%B5%D0%B4%D0%BD%D1%8E%D1%8E%20%D0%B2%D0%B5%D1%80%D1%81%D0%B8%D1%8E&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.32.36204 No Content0 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
34.120.237.76200 OK5.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4de055bc-1569-4c9a-9ff5-b5ce7d869905.jpeg
34.120.237.76200 OK4.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg
34.120.237.76200 OK6.4 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
tpc.googlesyndication.com/pagead/js/r20230329/r20110914/client/qs_click_protection_fy2021.js
142.250.74.161200 OK8.3 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjssuPWRqvwWhq1wFx3bxouKcTIWjL1PfPXMljA5DnFgfDgIBA8c2vV1Jr0ljlgztMIUChTLvogHYltd2XR0lfbL_SeOQFND3oMog6FZgh71vPpoNbak-aX2UmtjdvHOxuGfKnZMKaVXHAv7Iu6eiyz-xCBxY2bhI0Cf72QssIfAYPmA6MlzcYVtuu7FUUBRYo77jBTmpD1kyjvsXpYtVM3e7Ybe1-vmVfAUkcr9k6Wi4pP3cVx4NpYPOTAxtEq5cDmTrpLsQv1WFy7J5mKd7IAL6175U8fl1ASq-0LHXksKG_t9cE2F0I5xrhmOPI97lPnu4amqAwTUVUTnEwsyHbz3_FvddTC3bMlk9CtgK7eNqe8SnAwLHTIidBy3SfGtBbLuGW_R9DOsUQf1a9570IkJk0ug5HwYjo0QGS0lglKQs60cWWMoYZjN9j70XnZmzCaAb9F3wHJ3NQzgCe9oshZNyIfVhfMt4PUq99Ri28VODS-ZGUdAbarJgWXjW_1rJsH_Fz_NObFuUyJmiLHRWuoI7rtATac8h--RuaYjjAttKS7Ecm6ua1cLYyRYcw_ahbsdqKryetNEFKqQmhwXFLrygCar6FLMkT1ECKXx1F18HGTfG9BLgef75izLiwQeHhf7H7VXugmyyJ3Nrx8IxOKsjUDl-efjzYfGbuhDyB63oigB5uLy_jZqQgqApYidsN1BWh_ie6wbwthqtSmPk_bneM48vh1cCqmeBqmFRhDgiPlO324rDSPVFbexsowxfUS7RLfK4v52LwUoeuf-BUorWndGN--CJy0rmR5AbjfrpGCX_fcccdz5zY2gQEEURiEExuHT7YOdgxMx6RLWqhCUmXK9yL5uli3wbPlzsa122KtClTdH0f4It5igGrcle5q4z8BDktnqXJsRT5w-4pPrLAmTbgmQlTIowOF5crcHW5Wb4Np0TgIzEmfLbWABkwqRVJNEagpV0ozpmmma-_zuJZ-PXjPcGOfaen2oTHcU2wavWgdyikd5aLQA08gl_WIa3ww26ewJSVR31l8L4qJSzq0irGjsQFrsmWXdxFZ921bgJ4pshzXtlecEc4Ovl8mVzMm8uRsL1rUDyp7OrwzdqTQbpokABF9Wi7OtXa7ForqY22q892EMlpVGpc8pZ9ERLMyndmsI1Ufsa88XYm0q2qtgy3L7HCpamztmTtcI8VSO0m4qt-CSCAh3c3EeggXySDqDCY5cC_dlGL6LA_fcbynsFFrzskHRI7x2NZic-jzKMW8mWniJJ_jOOKc7Sx2L98VGdKpfj3MLuckgeLOrIADSX&sai=AMfl-YQZPjdbiN2Z_qB_MDSqLTwy95LyyvIprfmgRrPNo6od7Vy-q_sNCGCDfiE_cowslsjYFp6zFqX34oEbCLGFrDFFIcFOe8_4d4C_rrc_rzwxrDt_jV-1bf0-XKQD0kqWqkg8KRIfM3TkbTxDs8abQLQkv5HQERd19QGr2SLt3faIXCCb80T0eu1GDvd5n5BWhBzU4cqAPaYBanOEKiSCy2Npqlj5oX_330Oy4HKdRxKncumerf4PsYae7Uh65u1tLovrAc8TtaRivcb_Kkpd26SzFn2935Nz8F9R6iE8Og&sig=Cg0ArKJSzOuD5mEOTxjWEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20230329.54998&arae=0&ftch=1&adurl=
142.250.74.162200 OK0 B
s0.2mdn.net/simgad/4905717860250586777
172.217.21.166200 OK61 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
googleads4.g.doubleclick.net/pcs/view?xai=AKAOjssuPWRqvwWhq1wFx3bxouKcTIWjL1PfPXMljA5DnFgfDgIBA8c2vV1Jr0ljlgztMIUChTLvogHYltd2XR0lfbL_SeOQFND3oMog6FZgh71vPpoNbak-aX2UmtjdvHOxuGfKnZMKaVXHAv7Iu6eiyz-xCBxY2bhI0Cf72QssIfAYPmA6MlzcYVtuu7FUUBRYo77jBTmpD1kyjvsXpYtVM3e7Ybe1-vmVfAUkcr9k6Wi4pP3cVx4NpYPOTAxtEq5cDmTrpLsQv1WFy7J5mKd7IAL6175U8fl1ASq-0LHXksKG_t9cE2F0I5xrhmOPI97lPnu4amqAwTUVUTnEwsyHbz3_FvddTC3bMlk9CtgK7eNqe8SnAwLHTIidBy3SfGtBbLuGW_R9DOsUQf1a9570IkJk0ug5HwYjo0QGS0lglKQs60cWWMoYZjN9j70XnZmzCaAb9F3wHJ3NQzgCe9oshZNyIfVhfMt4PUq99Ri28VODS-ZGUdAbarJgWXjW_1rJsH_Fz_NObFuUyJmiLHRWuoI7rtATac8h--RuaYjjAttKS7Ecm6ua1cLYyRYcw_ahbsdqKryetNEFKqQmhwXFLrygCar6FLMkT1ECKXx1F18HGTfG9BLgef75izLiwQeHhf7H7VXugmyyJ3Nrx8IxOKsjUDl-efjzYfGbuhDyB63oigB5uLy_jZqQgqApYidsN1BWh_ie6wbwthqtSmPk_bneM48vh1cCqmeBqmFRhDgiPlO324rDSPVFbexsowxfUS7RLfK4v52LwUoeuf-BUorWndGN--CJy0rmR5AbjfrpGCX_fcccdz5zY2gQEEURiEExuHT7YOdgxMx6RLWqhCUmXK9yL5uli3wbPlzsa122KtClTdH0f4It5igGrcle5q4z8BDktnqXJsRT5w-4pPrLAmTbgmQlTIowOF5crcHW5Wb4Np0TgIzEmfLbWABkwqRVJNEagpV0ozpmmma-_zuJZ-PXjPcGOfaen2oTHcU2wavWgdyikd5aLQA08gl_WIa3ww26ewJSVR31l8L4qJSzq0irGjsQFrsmWXdxFZ921bgJ4pshzXtlecEc4Ovl8mVzMm8uRsL1rUDyp7OrwzdqTQbpokABF9Wi7OtXa7ForqY22q892EMlpVGpc8pZ9ERLMyndmsI1Ufsa88XYm0q2qtgy3L7HCpamztmTtcI8VSO0m4qt-CSCAh3c3EeggXySDqDCY5cC_dlGL6LA_fcbynsFFrzskHRI7x2NZic-jzKMW8mWniJJ_jOOKc7Sx2L98VGdKpfj3MLuckgeLOrIADSX&sai=AMfl-YQZPjdbiN2Z_qB_MDSqLTwy95LyyvIprfmgRrPNo6od7Vy-q_sNCGCDfiE_cowslsjYFp6zFqX34oEbCLGFrDFFIcFOe8_4d4C_rrc_rzwxrDt_jV-1bf0-XKQD0kqWqkg8KRIfM3TkbTxDs8abQLQkv5HQERd19QGr2SLt3faIXCCb80T0eu1GDvd5n5BWhBzU4cqAPaYBanOEKiSCy2Npqlj5oX_330Oy4HKdRxKncumerf4PsYae7Uh65u1tLovrAc8TtaRivcb_Kkpd26SzFn2935Nz8F9R6iE8Og&sig=Cg0ArKJSzOuD5mEOTxjWEAE&uach_m=[UACH]&fbs_aeid=[gw_fbsaeid]&urlfix=1&omid=0&rm=1&ctpt=238&vt=11&dtpt=237&dett=2&cstd=0&cisv=r20230329.54998&arae=0&ftch=1&adurl=
142.250.74.162200 OK0 B
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
216.58.207.227200 OK16 kB
www.gstatic.com/mysidia/16f0d4cb97c8e7eb77e268815c2afdab.js?tag=mysidia_one_click_handler_one_afma_2019
142.250.74.67200 OK14 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
www.google.com/pagead/drt/ui
216.58.207.228302 Found0 B
paintnet.ru/download/
194.59.166.40200 OK0 B
fonts.googleapis.com/css?family=Roboto%3A400%2C400i%2C700&subset=cyrillic&display=swap
142.250.74.106200 OK0 B