Report Overview

  1. Submitted URL

    anonfiles.com/Ub66jeVfy1/OzMinerBeta1.1V_exe

  2. IP

    45.154.253.151

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-01-31 14:18:03

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
accounts.google.com812016-03-20T13:44:49Z2023-03-13T07:05:07Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
pogothere.xyzunknown2022-09-04T21:11:25Z2023-03-13T05:42:24Z
www.facebook.com992012-05-21T02:23:41Z2021-02-04T00:31:35Z
baconaces.pro8351482018-07-16T10:32:31Z2023-03-13T06:01:36Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
vjs.zencdn.net49682012-05-21T10:26:59Z2023-03-13T05:47:22Z
djv99sxoqpv11.cloudfront.netunknown2021-10-07T16:52:14Z2023-03-13T06:01:35Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
ldpiecesonth.xyzunknown2023-01-23T13:30:49Z2023-02-06T19:39:29Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
e1.o.lencr.org61592021-08-20T09:36:30Z2023-03-13T05:21:46Z
anonfiles.com1171612020-06-17T12:04:43Z2023-03-13T05:41:45Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
osiextantly.comunknown2023-01-30T16:14:35Z2023-02-23T05:17:01Z
thecoveos.comunknown2023-01-15T09:20:54Z2023-02-24T23:46:11Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/pdVpsd0MWNQIRfAEzCEp0Rm1fRXpTMB8YLQVnBh8iGikiJSgmMFkbIiJ8GA0nSGpKGyIbPVFRJhs5UUZlFD4OSndTLhwYKEgvGxAnDSwOGDUafBkWfhg1Fh4vGTtJRQVAdFxScUVyGx4tETUbBGZHagIDZkdqXUdtRX9fNWZHahseLUNuSUQBUGhcD3VBf1-81ZkdqHgFmRhtdR3ZbakVScUU9CRQoGn9eMXFFa1xHckVrSUVzEzMeEiUaIklFBURqWVlzUy9RRgMalware
mediumdjv99sxoqpv11.cloudfront.net/uNlZacnZVOTQUSUI/Pk9BBWFpQUYQPCkdGEZrHT8nVR0dO0ZDDw0eBhAiIBZLBnA2ExhRa3wXGFVra1QXUjRnRlBDN2cfGUw/Nh4XE2QcR1gGc2hCXkE/NBYZQSV/QEZYIn9ARgdmdEJTBRR/QEZBPzREQhNlGFdEBi5sRlMFFH9ARkQgf0E3B2ZvXEYfc2-hCEVM1MR1TBBBoQkcGZmtCRxNkahQfRDM8HQ4TZBxDRgN4alQDC2cMalware

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed

ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (76)

URLIPResponseSize
anonfiles.com/Ub66jeVfy1/OzMinerBeta1.1V_exe
45.154.253.152301 Moved Permanently162 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
anonfiles.com/Ub66jeVfy1/OzMinerBeta1.1V_exe
45.154.253.151200 OK3.2 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
anonfiles.com/css/anonfiles.css?1675162029
45.154.253.151200 OK25 kB
anonfiles.com/js/app.js?1675162029
45.154.253.151200 OK58 kB
anonfiles.com/sw_anonfiles.js
45.154.253.151200 OK16 kB
anonfiles.com/img/flags/24/fi.png
45.154.253.151200 OK456 B
anonfiles.com/img/flags/24/es.png
45.154.253.151200 OK666 B
anonfiles.com/img/flags/24/in.png
45.154.253.151200 OK593 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.66.217200 OK132 kB
anonfiles.com/img/flags/24/de.png
45.154.253.151200 OK483 B
anonfiles.com/img/flags/24/dk.png
45.154.253.151200 OK537 B
anonfiles.com/img/flags/24/kr.png
45.154.253.151200 OK988 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
anonfiles.com/img/flags/24/jp.png
45.154.253.151200 OK599 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
anonfiles.com/img/file/filetypes/ext/exe.png?1668603321
45.154.253.151200 OK971 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737329
54.230.245.59200 OK69 kB
anonfiles.com/img/flags/24/pl.png
45.154.253.151200 OK347 B
anonfiles.com/static/logo.png
45.154.253.151200 OK18 kB
ocsp.pki.goog/s/gts1p5/DVvj-hsJQaM
142.250.74.131200 OK471 B
push.services.mozilla.com/
35.81.157.247101 Switching Protocols0 B
ocsp.pki.goog/s/gts1p5/DVvj-hsJQaM
142.250.74.131200 OK471 B
anonfiles.com/img/flags/24/us.png
45.154.253.151200 OK656 B
osiextantly.com/d0duRlAWJQ0rbxZ6DGAlBStTY2IxYlwANB0xV38jDygfNiZGdkAlPBgyCiAiGCkaaD4SM0t0FgcjODYjE3cjER4mDjwgETI9LQMgRxUDdzYlHx4SHTV/NwoBISksLmgeAActOT0UCSsdMSwMDzk9fykHYBkUKTYbMD4nJAAhATwMOARyOxMKGwEqch8kKQoSHB8wNw0VEDEpPhEZAz0xHzADOyc2NSw5IDgQdiguZAEAOjIaJRY4BzQxPz0lBSE+KT5kAwI6EzI1ADQOMRAOKhw7EzY2EzQDFTZ/NjkQNA4xHzQLCgU5Mj0TATUSKS4zM3Q4BDZGalZ3ChwjHw43MSo8LiQTFV0cMhYsOBUzIhJXBQImKCkoaRIKNgAWFnYWDjMcERwVBSE9KzwdEgIHEzE+LAIAEiIVHxEGGz07P2klFQlgOgQoADZtHS8PKSM5FQUVOkIrDxE
108.157.229.100200 OK1.2 kB
osiextantly.com/Wjc3TnY7VVQjSTsKVWgDKFsKa0QcEgUIEjBBDncFIlhGPgBrBhktGjVCUygENVlDYBg/QxJ8MC95WxQXOVltGDkOZmIdIxMSBQgmMQ51DCEcR2YbLwtndCUSHXJtPD4OD1kYJGpTeH4sHnNAfhMYX3YnPxhtewwYGwVyNh4IVgQ5Lh1xYTwXa2ZvGxwIWWUiNB55BS0QHWJAa0QceV96Lh8FZi0ka1BwLUQydG8lM38FcQA0A21mHSB/BXEfMwBufiBPG2VQKhs+cn0aNAhlEnwwC3JtDCYgZXIfHhRbcAgSH3VeewUIW3oIMBIOdhwdC1BRfjNpdQUUAAJybigVaBpfDTMMegYDJGtjdQw0NWZcLTEAWkMNJCJ5XC8eC1FlCjtif2Z6IgB1TwokPXkDLxoLc3R8FXxdRCEYKgpwAyc5fHAHRi9uYCIG
108.157.229.100200 OK1.2 kB
ldpiecesonth.xyz/NDQ1bEobC1Yfd2VZQTYTWWYENHhYYGMCOlBWWToeV3JFGhxYVxMYI1AJAl99BwYMSjpdUAhdbEdAVBg/RwkESiNaUlpRbEIJBEJ5ABoGXWQGEkBRexJARQ0tCQUTHD5AWAhdfAMBBFt+Ag0FWXkE
188.114.96.1204 No Content0 B
osiextantly.com/utx?tid=737323&top=anonfiles.com&cb=s14wl3NqNkxQ
108.157.229.100204 No Content0 B
ocsp.pki.goog/s/gts1p5/DVvj-hsJQaM
142.250.74.131200 OK471 B
ldpiecesonth.xyz/WEM4WUl3fFsqdAoFcW0EDzdBAz43B203Az8AXzEtPgRhFwsOLB4tIDx+D2p+a3AIfzkxJwVocX4wTDg9LTAFaG8xLV42dH41BWhnaG0Kd3t+NgVobywzWT50aWVILT00fglvfm1yD21/YXMNbX4
188.114.96.1204 No Content0 B
anonfiles.com/img/flags/24/fr.png
45.154.253.151200 OK536 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
anonfiles.com/img/flags/24/br.png
45.154.253.151200 OK1.1 kB
djv99sxoqpv11.cloudfront.net/pdVpsd0MWNQIRfAEzCEp0Rm1fRXpTMB8YLQVnBh8iGikiJSgmMFkbIiJ8GA0nSGpKGyIbPVFRJhs5UUZlFD4OSndTLhwYKEgvGxAnDSwOGDUafBkWfhg1Fh4vGTtJRQVAdFxScUVyGx4tETUbBGZHagIDZkdqXUdtRX9fNWZHahseLUNuSUQBUGhcD3VBf1-81ZkdqHgFmRhtdR3ZbakVScUU9CRQoGn9eMXFFa1xHckVrSUVzEzMeEiUaIklFBURqWVlzUy9RRg
54.230.245.59200 OK563 B
djv99sxoqpv11.cloudfront.net/uNlZacnZVOTQUSUI/Pk9BBWFpQUYQPCkdGEZrHT8nVR0dO0ZDDw0eBhAiIBZLBnA2ExhRa3wXGFVra1QXUjRnRlBDN2cfGUw/Nh4XE2QcR1gGc2hCXkE/NBYZQSV/QEZYIn9ARgdmdEJTBRR/QEZBPzREQhNlGFdEBi5sRlMFFH9ARkQgf0E3B2ZvXEYfc2-hCEVM1MR1TBBBoQkcGZmtCRxNkahQfRDM8HQ4TZBxDRgN4alQDC2c
54.230.245.59200 OK256 B
anonfiles.com/img/flags/24/ru.png
45.154.253.151200 OK403 B
thecoveos.com/
52.20.131.174200 OK0 B
anonfiles.com/img/flags/24/no.png
45.154.253.151200 OK611 B
anonfiles.com/img/flags/24/se.png
45.154.253.151200 OK581 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
osiextantly.com/utx?cb=T1x039UWSCkd&top=anonfiles.com&tid=737329
108.157.229.100204 No Content0 B
anonfiles.com/sw_anonfiles.js?WEFDYmEDY3RRVmtzcEBNemNvQFc7I3IEWWglbgNRanZuVgNoJW5bVGB4bldZbyV2W1hodScEWHptYVVVaXghUFJvbHUAU2tsd1tVYGx6AFE6bHtUUWByclEHYCJ1AEN0YzAVQ3RjNwoEOy41Bw4rbyANDHptYVNRdnRhTgc5LTAHTT4gLxEEdCciDhI9HA
45.154.253.151200 OK16 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.45302 Found398 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.45302 Found392 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
accounts.google.com/v3/signin/identifier?dsh=S2014047157%3A1675174674386910&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHdH8xVUEPkRwCwnh_QxLQAB0xmW4ayzZqc6oCgK_ZpBz0jqBdpoo9d6Su1exLydNPN7aVBA0g
142.250.74.45403 Forbidden1.1 kB
anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1668603321
45.154.253.151200 OK1.3 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg
34.120.237.76200 OK5.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1295ec36-f5b2-4db1-83c7-667fa373f592.jpeg
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
34.120.237.76200 OK7.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
34.120.237.76200 OK10 kB
thecoveos.com/
52.20.131.174200 OK0 B
thecoveos.com/
52.20.131.174200 OK0 B
thecoveos.com/
52.20.131.174200 OK0 B
pogothere.xyz/asd100.bin
172.64.173.27200 OK0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.205.35200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S-1190424465%3A1675174674377679&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHd04RksFpGmmZHIGmvQeOs6FSbLp92bGgm1FWj0hI9zKA7Oz4aTpKGUMUi8aQafJwwKQEiTHw
142.250.74.45403 Forbidden0 B
pogothere.xyz/
172.64.173.27200 OK0 B
thecoveos.com/WEFDYmEDY3RRVmtzcEBNemNvQFc7I3IEWWglbgNRanZuVgNoJW5bVGB4bldZbyV2W1hodScEWHptYVVVaXghUFJvbHUAU2tsd1tVYGx6AFE6bHtUUWByclEHYCJ1AEN0YzAVQ3RjNwoEOy41Bw4rbyANDHptYVNRdnRhTgc5LTAHTT4gLxEEdCciDhI9HA
52.20.131.174200 OK0 B
baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1
54.162.51.18200 OK0 B