Report Overview

  1. Submitted URL

    u.to/z7uEHg?noq=Download.zip

  2. IP

    195.216.243.155

    ASN

    #57724 Ddos-guard Ltd

  3. Submitted

    2023-03-21 18:23:41

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    6

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-25T18:12:03Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-26T05:11:12Z
ocsp.sca1b.amazontrust.com10152017-03-03T16:20:51Z2019-03-27T05:05:54Z
vps706965.s3.eu-north-1.amazonaws.comunknown2023-03-21T14:08:37Z2023-03-21T21:31:52Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-26T05:10:29Z
u.to1555342012-05-21T21:16:51Z2023-03-25T09:32:18Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-25T18:14:26Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-26T05:11:59Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-26T05:09:08Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP
mediumClient IPInternal IP
lowClient IPInternal IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    vps706965.s3.eu-north-1.amazonaws.com/Install.7z?response-content-disposition=inline&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEMT%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCmV1LW5vcnRoLTEiRjBEAiAFHCKNwrKFhvZow6jLlaHGIwvcBy3TDrFnhg1cDpHUHgIgY8LDELpHypECYYFI5Ty%2Bktz%2BS1L6vliRXAkGPH3ktdoq7QIIjf%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAAGgw2ODExOTk0NjQ0OTIiDKsPgRJNJ1guL%2B4MhCrBAsVKPZRC5DFsEqZzHmkzXlBaZkgUGOX1kheqoXeTVsw3eiGkcARdjAzROYvDgKsxsJD8CxziOPU2GmR6CoOF9VgQ5i6i2%2Bu9O%2F9djRf8n8cNByVvvgusbdd3IK%2BzajwxYJp0EtSsY9vecOwhjK91bCJSeUQ5dOR2WM%2FwIax2lbed2kuoKFlVQWqerr6dstiMscF8uBI4rjdGSdbAuwtJ9IpNALQJQSYPsYD00ioiv%2BIZ29SC30iwAzH%2BF95qfAPjm6zXrcz6D7%2FbLwlUiCtTdYYYMHwOq6FNz2F4PJPFELMh%2BDRdCL8L42hA9BujEfscqWjvL9l8u7Xf0MrwUYpjhiENeIYAT1L2XnOrDgnVLcr6TJAb%2Fy0hF26HX8SGRfBXw%2BZxeeUIDpXGVoVHk02biBnXiX9MTuoVgLzQqWkGo%2BBopzC5seagBjq0AkmfqmlIWNvEE8CLCbdgfZCgaYyjJvSnUyOBVhyTIi8DCK8PSBCHzVg0dcvnP%2B9jYZmEDMSwhd%2FCe%2BELuXTzSR1SMXzAUij6SNANhaHY%2F7KOoD0P0qTf055qE2xRC1%2BRbdykyUgzypAeV1oCrNMjrTADFVuQA31g4t%2Fu8LSIUSAiGcEPgl9ybPlUt0poSvcAh9%2F72sLTyQAJgePoYZxm%2FpinRCmqt2r8Bk1ECzq%2BZaCgDvKmlV50WcXQzpdrr%2FAXzAhWE3lhL9%2BQqf%2F9pgSuR0eiiIA%2BDuDVX5iXGcZ1JUjUgDMBmgXRzUv7rPidUwrOSNmvAPoBqM5sOEzNYado6VwrYKX9pKfNslbsJpGk5dFGw3k8TJ%2FR1jQJjGfcaQSvpUcj0%2FZVvRkXkaxqxsssq9IDtB4e&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20230321T114804Z&X-Amz-SignedHeaders=host&X-Amz-Expires=43200&X-Amz-Credential=ASIAZ5GVG6AWM37V2CVI%2F20230321%2Feu-north-1%2Fs3%2Faws4_request&X-Amz-Signature=e99b7ba45b999e2784023824ffafd499320857ec66ad04f114b8384d0eadf95a

  2. IP

    16.12.10.46

  3. ASN

    #0

  1. File type

    7-zip archive data, version 0.4\012- data

    Size

    6.4 MB (6405281 bytes)

  2. Hash

    e26fc4fba5c8a4d379adc5e90c9ef6ae

    836f237c21dcd3ba98b53561753be71b53f90014

JavaScript (0)

HTTP Transactions (24)

URLIPResponseSize
u.to/z7uEHg?noq=Download.zip
195.216.243.155301 Moved Permanently184 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
u.to/z7uEHg?noq=Download.zip
195.216.243.155302 Found1.7 kB
ocsp.sca1b.amazontrust.com/
54.230.245.110200 OK471 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
vps706965.s3.eu-north-1.amazonaws.com/Install.7z?response-content-disposition=inline&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEMT%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCmV1LW5vcnRoLTEiRjBEAiAFHCKNwrKFhvZow6jLlaHGIwvcBy3TDrFnhg1cDpHUHgIgY8LDELpHypECYYFI5Ty%2Bktz%2BS1L6vliRXAkGPH3ktdoq7QIIjf%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAAGgw2ODExOTk0NjQ0OTIiDKsPgRJNJ1guL%2B4MhCrBAsVKPZRC5DFsEqZzHmkzXlBaZkgUGOX1kheqoXeTVsw3eiGkcARdjAzROYvDgKsxsJD8CxziOPU2GmR6CoOF9VgQ5i6i2%2Bu9O%2F9djRf8n8cNByVvvgusbdd3IK%2BzajwxYJp0EtSsY9vecOwhjK91bCJSeUQ5dOR2WM%2FwIax2lbed2kuoKFlVQWqerr6dstiMscF8uBI4rjdGSdbAuwtJ9IpNALQJQSYPsYD00ioiv%2BIZ29SC30iwAzH%2BF95qfAPjm6zXrcz6D7%2FbLwlUiCtTdYYYMHwOq6FNz2F4PJPFELMh%2BDRdCL8L42hA9BujEfscqWjvL9l8u7Xf0MrwUYpjhiENeIYAT1L2XnOrDgnVLcr6TJAb%2Fy0hF26HX8SGRfBXw%2BZxeeUIDpXGVoVHk02biBnXiX9MTuoVgLzQqWkGo%2BBopzC5seagBjq0AkmfqmlIWNvEE8CLCbdgfZCgaYyjJvSnUyOBVhyTIi8DCK8PSBCHzVg0dcvnP%2B9jYZmEDMSwhd%2FCe%2BELuXTzSR1SMXzAUij6SNANhaHY%2F7KOoD0P0qTf055qE2xRC1%2BRbdykyUgzypAeV1oCrNMjrTADFVuQA31g4t%2Fu8LSIUSAiGcEPgl9ybPlUt0poSvcAh9%2F72sLTyQAJgePoYZxm%2FpinRCmqt2r8Bk1ECzq%2BZaCgDvKmlV50WcXQzpdrr%2FAXzAhWE3lhL9%2BQqf%2F9pgSuR0eiiIA%2BDuDVX5iXGcZ1JUjUgDMBmgXRzUv7rPidUwrOSNmvAPoBqM5sOEzNYado6VwrYKX9pKfNslbsJpGk5dFGw3k8TJ%2FR1jQJjGfcaQSvpUcj0%2FZVvRkXkaxqxsssq9IDtB4e&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20230321T114804Z&X-Amz-SignedHeaders=host&X-Amz-Expires=43200&X-Amz-Credential=ASIAZ5GVG6AWM37V2CVI%2F20230321%2Feu-north-1%2Fs3%2Faws4_request&X-Amz-Signature=e99b7ba45b999e2784023824ffafd499320857ec66ad04f114b8384d0eadf95a
16.12.10.46200 OK6.4 MB
r3.o.lencr.org/
95.101.11.115200 OK503 B
push.services.mozilla.com/
34.214.202.214101 Switching Protocols0 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2ad5022-7f23-468e-8e1f-6388d8cc9db8.jpeg
34.120.237.76200 OK6.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
34.120.237.76200 OK7.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
34.120.237.76200 OK8.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21a85835-c7c4-48a2-afb8-600f570f7ef8.jpeg
34.120.237.76200 OK9.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68a4b574-14c9-4d65-81df-d700ef3fa2f4.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e5e49ed-9ec4-4b75-b7ba-3c4c213d5d27.jpeg
34.120.237.76200 OK4.7 kB