Report Overview

  1. Submitted URL

    cdn-129.bayfiles.com/5c7cq4E1x8/97169212-1675037882/[KS]%20Cr4ck%20KS4%20Ao%20Trabalho.zip

  2. IP

    195.96.151.84

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-02-04 19:55:46

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    32

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
uckbrokennailsa.xyzunknown2023-01-26T13:00:32Z2023-02-09T02:56:12Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
vjs.zencdn.net49682012-05-21T10:26:59Z2023-03-13T05:47:22Z
bayfiles.com3766022012-05-24T18:09:40Z2023-03-13T05:24:08Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
policityseriod.infounknown2018-11-10T13:18:32Z2023-03-13T07:16:28Z
e1.o.lencr.org61592021-08-20T09:36:30Z2023-03-13T05:21:46Z
www.facebook.com992012-05-21T02:23:41Z2021-02-04T00:31:35Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
djv99sxoqpv11.cloudfront.netunknown2021-10-07T16:52:14Z2023-03-13T06:01:35Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
estkewasa.comunknown2023-02-04T13:13:20Z2023-03-13T02:27:14Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
accounts.google.com812016-03-20T13:44:49Z2023-03-13T07:05:07Z
pogothere.xyzunknown2022-09-04T21:11:25Z2023-03-13T05:42:24Z
cdn-129.bayfiles.comunknown2020-07-30T14:24:36Z2023-03-13T07:16:27Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/5RHBxdXQnHx8TSzAZFUhDd0dCRkdiGgIaGjRNFy0mKygwBxIpIkYlMD5WBQ8QeUBXGRUqF0xTESoTTERSJRQTSEBiBAEaH3kYHgUBKQcJGBEoVgQUSSkfCxwYKBFURzJxXkFQRnRYBhwaIB8GBlF2QB8BUXZAQEVadFVCN1F2QAYcGnJEVEY2YUJBDUJwVU-I3UXZAAwNRdzFARUFqQFhQRnQXFBYfK1VDM0Z0QUFFRXRBVEdEIhkDEBIrCFRHMnVARFtEYgVMRAMalware
mediumpolicityseriod.info/MWkxNFhKS0JDB0QbXRZiEwFFQChCUx4bOlAQV100VBofVzdcRkJDdlsaExh6QgRXFmIARRNAOVY2WFB6C0sGB28CWwcWdBMaRFYHWA0DFmITC1MEO1RQUlJ1AVxXVXUFCgUBdQhRBwV1B15XDWxQXgRXaVcKE0kMalware
mediumdjv99sxoqpv11.cloudfront.net/0ZFphRlcHNQ8gaBAzBXtgUWxScWFCMBIpORRnIy4yBW8QCSMsfBU8M1lqRyo2Cj1cYDIKOVx3cQU+A3tjQi4RKTxZMg42IgktGSsyCHwUJ2oJNRsvOwg7RHQRUXRRY2VUchYvOQA1FjVyVmoPMnJWalB2eVR/UgRyVmoWLzlSbkR1FUFoUT5hUH9SBHJWah-MwclcbUHZiSmpIY2VUPQQlPAt/UwBlVGtRdmZUa0R0ZwIzEyMxCyJEdBFValRoZ0IvXHcMalware
mediumdjv99sxoqpv11.cloudfront.net/vRW5TSzAmAT0tDzEHN3YHdllgeAVjBCAkXjVTIy5AcFowE2AjKTEAXxwBdT9KIVNjbVwkADR2FiAAMHYBYw83KQ1xSCYqDSgBKSJcKQ92eXZwQGNuAnVGJCJeIQEkOBV3Xj0/FXdeYnsedUtgCRV3XiQiXnNadnhyYFxjMwZxS2AJFXdeIT0Vdi9iewVrXn-puAnUJNihbKkthDQJ1X2N7AXVfdnkAIwchLlYqFnZ5dnReZmUAYxtuegMalware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/c25YY1ooTG9QbUBcbkF2UUx0QTgRXjsGYxAIdVNvFQ91VzlHW3VaYkVfdVVtFVdsAm1GDWkFOVFCelNvRFxsAWkSQz1TbktDbFRqEEM6VG0VQ2BVaxZeaFE%2ESldvB3hfTCsUeF9MKAw2Gg0xFyMACyoKNRdAMQ08HEx0QW9dXHo%2BMalware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware
mediumpolicityseriod.info/Malware

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed

ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (87)

URLIPResponseSize
cdn-129.bayfiles.com/5c7cq4E1x8/97169212-1675037882/[KS]%20Cr4ck%20KS4%20Ao%20Trabalho.zip
195.96.151.84301 Moved Permanently162 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
cdn-129.bayfiles.com/5c7cq4E1x8/97169212-1675037882/[KS]%20Cr4ck%20KS4%20Ao%20Trabalho.zip
195.96.151.84301 Moved Permanently0 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
bayfiles.com/5c7cq4E1x8
45.154.253.151200 OK2.8 kB
bayfiles.com/css/bayfiles.css?1675519012
45.154.253.151200 OK25 kB
bayfiles.com/sw.js
45.154.253.151200 OK14 kB
bayfiles.com/img/flags/24/dk.png
45.154.253.151200 OK537 B
bayfiles.com/img/flags/24/se.png
45.154.253.151200 OK581 B
bayfiles.com/img/flags/24/no.png
45.154.253.151200 OK611 B
vjs.zencdn.net/7.3.0/video.min.js
151.101.66.217200 OK132 kB
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.66.217200 OK9.7 kB
bayfiles.com/img/flags/24/de.png
45.154.253.151200 OK483 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
bayfiles.com/img/flags/24/fi.png
45.154.253.151200 OK456 B
bayfiles.com/img/flags/24/es.png
45.154.253.151200 OK666 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
bayfiles.com/img/flags/24/jp.png
45.154.253.151200 OK599 B
bayfiles.com/img/flags/24/pl.png
45.154.253.151200 OK347 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737333
54.230.245.107200 OK98 kB
bayfiles.com/img/flags/24/us.png
45.154.253.151200 OK656 B
push.services.mozilla.com/
35.165.41.15101 Switching Protocols0 B
ocsp.pki.goog/s/gts1p5/bjlwOPa5ksQ
216.58.211.3200 OK472 B
bayfiles.com/img/file/filetypes/ext/zip.png?1668603321
45.154.253.151200 OK874 B
ocsp.pki.goog/s/gts1p5/bjlwOPa5ksQ
216.58.211.3200 OK472 B
ocsp.pki.goog/s/gts1p5/bjlwOPa5ksQ
216.58.211.3200 OK472 B
estkewasa.com/NHhwTkhVGhMjd1VFEmg9RhRNa3pyXUIILF4OSXc7TBcBPj4FSV4tJFsNFCg6WxYEYCZRDFV8DgEqOAwwUCAhIABMQCQdMnUiNhsgcBxAKgtmExQnD1MxEQkiZjY2N3hZMwkpP3YAOT4BXyEcAwwBLzIfcGUdJQwQcyolPw4EACQLG1ssJAsaZzIiHxxnPTInCnU9EQZ7XyE4KR12MyEtAnM6NSEeUyklHRtfHjM2P20zMggdZgI6NhBfPiEcJmYhMiY/VTEydg92FDZ8GXZAMhsQbjkhCx5VHDYYC3pJNnwZdSETCSZ+PSYLEQYhJQQKcC06OR5hVTl9HWwiMQ8/eioUNA51KiUIOWU+GB8aWikoCAptHjt/HnA1QBR4ZS02CBpsKjIYDVA9OSYjcD0yBzp3PiIGBVouMRwOQD0pKR55KjFoIkcXHj51UiAiIRB1ChYjGgMoNDQ
54.230.111.35200 OK1.2 kB
estkewasa.com/ZVo2ZW4EOFUIUQRnVEMbFzYLQFwjfwQjCg8sD1wdHTVHFRhUaxgGAgovUgMcCjRCSwAALhNXKFUAcBUGNzZVLSA0YlEELCQgdD0aAg9hHT0GDXAmIycTRio8NzR/HFocGGFdPyYJexYIJw8OKF8JK2QcAVcZXFQNPB5/LiEzIgUGPzB/BCcvVi5cNAdRCH0xFj8XUVFcLD1dESk2KU8mJhIPfFcBLxRkFhgqLVFSPC0LZDA2NwhvVzgwOV48GCoLd1QoDwxPMwMKCnsLJDI7WidcAAxkQFwjD1E3FzM3WTIiHzZlBwU3a3AwKAoPYlAGMBIPNiwtEGEEBkgXQQYCBjhjLTQMCVsVJzxoYDA+NAtaNS8RfwQjOxIYWjMpEQhSCDQwOwY3Xj8tfx8rHBdOJhcvH1InKDM7WjcBP2p/EzYtORAPHQo0RlgsDT9XUB8qLn4
54.230.111.35200 OK1.2 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
estkewasa.com/cnJUNTYTEDdYCRNPNhNDAB5pEAQ0V2ZzUhgEbQxFCh0lRUBDQ3pWWh0HMFNEHRwgG1gXBnEHcAQgAwBiIQgVWHcmQiBxTDc6GgZvOhY4WVEXMwJfdDEzP21cJCYdTAMzERJaQTdAFV99JjcVbU4FMDBhDzk7AntcECQjXnc2IGZzXzMzGX1vMCsjDQU5I2VNZTErJXFlFTAfZnwROQUMBBcqDkJnNTwhdFgkNR52fBc7BXBdPTACBm4YQnEHcDQqMFBvHAExUWMGFRdnYEEqPWRfKhwaVFIcGi1scAoYGUJsCiFmdHw0KjBQfyZCAlFfSxsxQmAAKjoYRgczOmB8PBs8V30ZBjxxZzhDDAd4RTMMY1AWHD90fwURPHlaKwMSW2xHFjpnUygfAXRvCgYhUFFUGCdaWAJPJFBGR0Y3bWYUNTZ+WSsd
54.230.111.35200 OK1.2 kB
uckbrokennailsa.xyz/R25yTVVoURE+aBFeRjUAAjgHKxQRAxYKE3UtNR9sHV0dDwwPI1Q5PCNTRX5idF1HayUuCk98bWEdBiwhMh1PfHMuABQiaGEYT3x7d0BAY2dhG098czMeEypodkgCOSErU0N7YnJbRn1gcF1Gemw
188.114.97.1204 No Content0 B
bayfiles.com/static/logo.png
45.154.253.151200 OK39 kB
uckbrokennailsa.xyz/WlNPVkh1bCwldQ0HBQ4ZDQE+FXoAZxpkIx4KFwQbOwIrOi0MJGkiIT5ueGV/aWB8cDgzN3JnbiknLiI9KW5+cCE0NSBrbixufnh7bn18Z2ZodTpreXwnPzcvZ2JpJjwuP3Jnfm1memJ4b2R8Yn1t
188.114.97.1204 No Content0 B
uckbrokennailsa.xyz/U1pGVFF8ZSUnbAQfJWEDBC4pMDYRax45JSQZKB4LMWkXHTViNWAgODdncWFnYG1wciE6PntmaHUpMjUlJil7ZXc6NCA7bHUse2V/Y3RwZH9ifDNpYHUuNjU2bmtgJCUnNntlZ2Rvc2BhZm11YGZi
188.114.97.1204 No Content0 B
ocsp.pki.goog/s/gts1p5/bjlwOPa5ksQ
216.58.211.3200 OK472 B
djv99sxoqpv11.cloudfront.net/5RHBxdXQnHx8TSzAZFUhDd0dCRkdiGgIaGjRNFy0mKygwBxIpIkYlMD5WBQ8QeUBXGRUqF0xTESoTTERSJRQTSEBiBAEaH3kYHgUBKQcJGBEoVgQUSSkfCxwYKBFURzJxXkFQRnRYBhwaIB8GBlF2QB8BUXZAQEVadFVCN1F2QAYcGnJEVEY2YUJBDUJwVU-I3UXZAAwNRdzFARUFqQFhQRnQXFBYfK1VDM0Z0QUFFRXRBVEdEIhkDEBIrCFRHMnVARFtEYgVMRA
54.230.245.107200 OK537 B
bayfiles.com/img/flags/24/fr.png
45.154.253.151200 OK536 B
policityseriod.info/MWkxNFhKS0JDB0QbXRZiEwFFQChCUx4bOlAQV100VBofVzdcRkJDdlsaExh6QgRXFmIARRNAOVY2WFB6C0sGB28CWwcWdBMaRFYHWA0DFmITC1MEO1RQUlJ1AVxXVXUFCgUBdQhRBwV1B15XDWxQXgRXaVcKE0k
103.224.212.220302 Found0 B
bayfiles.com/img/flags/24/kr.png
45.154.253.151200 OK988 B
djv99sxoqpv11.cloudfront.net/0ZFphRlcHNQ8gaBAzBXtgUWxScWFCMBIpORRnIy4yBW8QCSMsfBU8M1lqRyo2Cj1cYDIKOVx3cQU+A3tjQi4RKTxZMg42IgktGSsyCHwUJ2oJNRsvOwg7RHQRUXRRY2VUchYvOQA1FjVyVmoPMnJWalB2eVR/UgRyVmoWLzlSbkR1FUFoUT5hUH9SBHJWah-MwclcbUHZiSmpIY2VUPQQlPAt/UwBlVGtRdmZUa0R0ZwIzEyMxCyJEdBFValRoZ0IvXHc
54.230.245.107200 OK453 B
djv99sxoqpv11.cloudfront.net/vRW5TSzAmAT0tDzEHN3YHdllgeAVjBCAkXjVTIy5AcFowE2AjKTEAXxwBdT9KIVNjbVwkADR2FiAAMHYBYw83KQ1xSCYqDSgBKSJcKQ92eXZwQGNuAnVGJCJeIQEkOBV3Xj0/FXdeYnsedUtgCRV3XiQiXnNadnhyYFxjMwZxS2AJFXdeIT0Vdi9iewVrXn-puAnUJNihbKkthDQJ1X2N7AXVfdnkAIwchLlYqFnZ5dnReZmUAYxtueg
54.230.245.107200 OK187 B
bayfiles.com/img/flags/24/br.png
45.154.253.151200 OK1.1 kB
bayfiles.com/img/flags/24/ru.png
45.154.253.151200 OK403 B
bayfiles.com/img/flags/24/in.png
45.154.253.151200 OK593 B
policityseriod.info/
103.224.212.220302 Found0 B
bayfiles.com/sw.js?c25YY1ooTG9QbUBcbkF2UUx0QTgRXjsGYxAIdVNvFQ91VzlHW3VaYkVfdVVtFVdsAm1GDWkFOVFCelNvRFxsAWkSQz1TbktDbFRqEEM6VG0VQ2BVaxZeaFE%2ESldvB3hfTCsUeF9MKAw2Gg0xFyMACyoKNRdAMQ08HEx0QW9dXHo%2B
45.154.253.151200 OK14 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
estkewasa.com/utx?cb=9gw8d734qbHD&top=bayfiles.com&tid=737333
54.230.111.35204 No Content0 B
estkewasa.com/utx?cb=BpBaeQchlCmZ&top=bayfiles.com&tid=756376
54.230.111.35204 No Content0 B
estkewasa.com/multi?cs=MHR5UG8ARUBgWgNDSmddB0dIYl4&abt=0&red=1&sm=76&k=&v=1.0.60.1&sts=0&prn=0&emb=0&tid=756376&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fbayfiles.com%2F5c7cq4E1x8&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_4qHH=1675540574088&crc=1
54.230.111.35200 OK1.5 kB
e1.o.lencr.org/
23.33.119.27200 OK345 B
e1.o.lencr.org/
23.33.119.27200 OK345 B
e1.o.lencr.org/
23.33.119.27200 OK345 B
bayfiles.com/img/favicon/favicon-32x32-bayfiles.png?1668603321
45.154.253.151200 OK1.4 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
216.58.207.237302 Found397 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
216.58.207.237302 Found398 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
e1.o.lencr.org/
23.33.119.27200 OK345 B
accounts.google.com/v3/signin/identifier?dsh=S1460076130%3A1675540537547197&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHf1Z3Dzqcxq_6J_0RowRO_wLvikfY6oREnpYqXHM39FzWgYr9eQIALoQsq_b6KwGMRX15KjzQ
216.58.207.237403 Forbidden1.3 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
31.13.72.36200 OK11 kB
accounts.google.com/v3/signin/identifier?dsh=S-1157423665%3A1675540537510444&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHdbRNqe9mJ_ob_xL_QKrP40DjuUSTyDNtjdqgJucJ873rE5WLsIPijZDOTZlsuOD8UsTSsp7A
216.58.207.237403 Forbidden11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
34.120.237.76200 OK5.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg
34.120.237.76200 OK9.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
34.120.237.76200 OK12 kB
policityseriod.info/c25YY1ooTG9QbUBcbkF2UUx0QTgRXjsGYxAIdVNvFQ91VzlHW3VaYkVfdVVtFVdsAm1GDWkFOVFCelNvRFxsAWkSQz1TbktDbFRqEEM6VG0VQ2BVaxZeaFE%2ESldvB3hfTCsUeF9MKAw2Gg0xFyMACyoKNRdAMQ08HEx0QW9dXHo%2B
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
policityseriod.info/
103.224.212.220302 Found0 B
pogothere.xyz/asd100.bin
172.64.173.27200 OK0 B
pogothere.xyz/
172.64.173.27200 OK0 B
bayfiles.com/js/app.js?1675519012
45.154.253.151200 OK0 B
pogothere.xyz/asd100.bin
172.64.173.27200 OK0 B