Report Overview

  1. Submitted URL

    cdn-145.anonfiles.com/39566fRdx8/047bbd81-1648460842/OTP-BOT[Join%20@hackers_assemble].zip

  2. IP

    195.96.151.38

    ASN

    #41634 Svea Hosting AB

  3. Submitted

    2023-02-09 11:21:19

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    12

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
narenrosrow.comunknown2023-01-31T11:25:37Z2023-03-02T04:55:43Z
ldimnveryldgitwe.xyzunknown2023-02-08T23:12:51Z2023-03-11T11:58:25Z
xtthefirean.comunknown2023-01-15T09:39:14Z2023-03-08T02:26:14Z
www.facebook.com992012-05-21T02:23:41Z2021-02-04T00:31:35Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-13T05:09:47Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
djv99sxoqpv11.cloudfront.netunknown2021-10-07T16:52:14Z2023-03-13T06:01:35Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
anonfiles.com1171612020-06-17T12:04:43Z2023-03-13T05:41:45Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-13T06:00:13Z
accounts.google.com812016-03-20T13:44:49Z2023-03-13T07:05:07Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
baconaces.pro8351482018-07-16T10:32:31Z2023-03-13T06:01:36Z
pogothere.xyzunknown2022-09-04T21:11:25Z2023-03-13T05:42:24Z
cdn-145.anonfiles.comunknown2022-01-16T00:14:21Z2023-03-13T02:33:22Z
vjs.zencdn.net49682012-05-21T10:26:59Z2023-03-13T05:47:22Z
e1.o.lencr.org61592021-08-20T09:36:30Z2023-03-13T05:21:46Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumdjv99sxoqpv11.cloudfront.net/QVDRhZFU3Ww8CaiBdBVliZwNSVmxyXhILOyQJAwxtMH9ZIwU7EhUeMWkERwg0OlNcQjA6V1xVczVQA1lhckARCz5pWxMVISVAFR0tIxIUBWg5WxsNOThVRFYTYRpRQWdkHBYNOzBbFhdwZgQPEHBmBFBUe2QRUiZwZgQWDTtiAERXF3EGURxjYBFSJnBmBB-MScGd1UFRgegRIQWdkUwQHPjsRUyJnZAVRVGRkBURWZTJdEwEzO0xEVhNlBFRKZXJBXFUMalware
mediumdjv99sxoqpv11.cloudfront.net/XZ2U1b2UEClsJWhMMUVJSVFIGXFVBD0YACxdYcxgjBCtNNjZVEEE1VRdDQRUBWlUTAwQJAghJAAkGCF5DBgFXUlFBEFRSCAgfXAMJBkAHKVBJVRBdVU8SXAEBCBJGSldXC0FKV1dUBUFVQlZ3SldXElwBU1NABi1AVVVNWVFCVndKV1cXQ0pWJlQFWktXTB-BdVQAAVgQKQldzXVVWVQVeVVZAB18DDhdQCQofQAcpVFdQG19DElgEMalware

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumldimnveryldgitwe.xyzSinkholed
mediumldimnveryldgitwe.xyzSinkholed
mediumpogothere.xyzSinkholed
mediumpogothere.xyzSinkholed

ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (79)

URLIPResponseSize
cdn-145.anonfiles.com/39566fRdx8/047bbd81-1648460842/OTP-BOT[Join%20@hackers_assemble].zip
195.96.151.38301 Moved Permanently162 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
cdn-145.anonfiles.com/39566fRdx8/047bbd81-1648460842/OTP-BOT[Join%20@hackers_assemble].zip
195.96.151.38301 Moved Permanently3.3 kB
anonfiles.com/css/anonfiles.css?1675870957
45.154.253.151200 OK25 kB
anonfiles.com/sw_anonfiles.js
45.154.253.151200 OK16 kB
anonfiles.com/js/app.js?1675870957
45.154.253.151200 OK58 kB
anonfiles.com/img/flags/24/br.png
45.154.253.151200 OK1.1 kB
anonfiles.com/img/flags/24/pl.png
45.154.253.151200 OK347 B
anonfiles.com/img/flags/24/fi.png
45.154.253.151200 OK456 B
vjs.zencdn.net/7.3.0/video-js.min.css
151.101.66.217200 OK9.7 kB
vjs.zencdn.net/7.3.0/video.min.js
151.101.66.217200 OK132 kB
anonfiles.com/img/file/filetypes/ext/zip.png?1663356888
45.154.253.151200 OK874 B
anonfiles.com/img/flags/24/dk.png
45.154.253.151200 OK537 B
anonfiles.com/img/flags/24/se.png
45.154.253.151200 OK581 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
anonfiles.com/img/flags/24/kr.png
45.154.253.151200 OK988 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
anonfiles.com/img/flags/24/us.png
45.154.253.151200 OK656 B
djv99sxoqpv11.cloudfront.net/?xsvjd=737329
54.230.245.37200 OK69 kB
anonfiles.com/img/flags/24/jp.png
45.154.253.151200 OK599 B
ocsp.pki.goog/s/gts1p5/1STJ5vE1k1Y
142.250.74.3200 OK471 B
ocsp.pki.goog/s/gts1p5/1STJ5vE1k1Y
142.250.74.3200 OK471 B
anonfiles.com/static/logo.png
45.154.253.151200 OK18 kB
push.services.mozilla.com/
54.187.247.157101 Switching Protocols0 B
narenrosrow.com/blNKZ0IPMSkKfQ9uKEE3HD93QnAodnghJgQlc14xFjw7FzRfYmQELgEmLgEwAT0+SSwLJ29VBD8FDjUqNBUfVBUZawkGKyw3CDEuBwk9KRE4PjIeGgYaBig7PxkLEDoaHgJeGCckH1AHBgYvKhUFFhgQJV4cJikhPzkLURRfKxwEODgCC1YuBjAhJhAtKX8XFRYeHC4ROBIMNXIaGjIuFywELVIVFiAEKBYGBRghGzoKGBcQPwQuDAosCgQoOCwxDA8mGQktNhIrGwgKACgRHwJwPwEfDhgZCS02FSoHPg4DKwESIXErFB81OgQKCCERJD0ICgAsfgc0ISk3ezIEPDQvABAnAh0DKTskGy8SBCAYMjskPRAmFDwFDTUpLAYYMBg6GS4iNSspBVc6KwUiKS4sFRgsGDYZCD8EO3UgFC0AI3cFKlY3AV8FPjw
54.230.111.47200 OK1.2 kB
narenrosrow.com/TEtCczgtKSEeBy12IFVNPid/VgoKbnA1XCY9e0pLNCQzA059emwQVCM+JhVKIyU2XVYpP2dBfhQRcCYJLnkXNnsgOAgkUAEGFyVyHx0EOn8UDRQxfHwSAzBAKBIhC18mCQEHdgIhGCV9CQ5zJWooDxMhbQ4cLiZsDTwTOXkrIwgyeScMATUNCAklNWAZJwQxfQoZETB5Ky0aMnUGCSkycAcdADluHgkmJW10GBoyfQ4IADl/HycmK3t8DQklCSgeACZ+GhouKQsfJyYrfSA8ACYJAgoAGgkNHRQldhsdBDBuIi8JJQkvExNDSBsBLiJ+GyA2K2wOZgAXbh0KAyVfHQATH1w2ExQlbxoaFBZuGhEDMQl0DwYbXB0IExxeHQohA24KLxM0CXUPBx9fCW0oAFciO381TwooDAthH3k3B2J8Ow
54.230.111.47200 OK1.2 kB
ldimnveryldgitwe.xyz/RlR2VGlpaxUnVBU5Oy4mEDBPATgPHy9nJxEWJ20DIAIvEigBDVAgACJpQWdedWZPchkvMEtlTzUgFyAcNWlHcgAoMhlpTzBpR3pacnpFZUd0cgNpWGAgBjUOe2VQJB0yOEtlX3FhT2BYcWZOZ1h3
172.67.216.229204 No Content0 B
anonfiles.com/img/flags/24/de.png
45.154.253.151200 OK483 B
ldimnveryldgitwe.xyz/UUZBVTZ+eSImCwAQFCJ4BQg4N2cABwANUjwENhh+NREAF3QQD2chXzV7dmYBYnVxc0Y4InxkDnc1NTRCJDV8ZBA4KCc6C3cwfGQYYWhzewR3M3xkECU2IDILYGAxIUI9e3BjAWR/dWQBY35yZw4
172.67.216.229204 No Content0 B
ocsp.pki.goog/s/gts1p5/1STJ5vE1k1Y
142.250.74.3200 OK471 B
narenrosrow.com/utx?tid=737323&top=anonfiles.com&cb=c7nCdGvFlLss
54.230.111.47204 No Content0 B
djv99sxoqpv11.cloudfront.net/QVDRhZFU3Ww8CaiBdBVliZwNSVmxyXhILOyQJAwxtMH9ZIwU7EhUeMWkERwg0OlNcQjA6V1xVczVQA1lhckARCz5pWxMVISVAFR0tIxIUBWg5WxsNOThVRFYTYRpRQWdkHBYNOzBbFhdwZgQPEHBmBFBUe2QRUiZwZgQWDTtiAERXF3EGURxjYBFSJnBmBB-MScGd1UFRgegRIQWdkUwQHPjsRUyJnZAVRVGRkBURWZTJdEwEzO0xEVhNlBFRKZXJBXFU
54.230.245.37200 OK547 B
anonfiles.com/img/flags/24/fr.png
45.154.253.151200 OK536 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
anonfiles.com/img/flags/24/ru.png
45.154.253.151200 OK403 B
djv99sxoqpv11.cloudfront.net/XZ2U1b2UEClsJWhMMUVJSVFIGXFVBD0YACxdYcxgjBCtNNjZVEEE1VRdDQRUBWlUTAwQJAghJAAkGCF5DBgFXUlFBEFRSCAgfXAMJBkAHKVBJVRBdVU8SXAEBCBJGSldXC0FKV1dUBUFVQlZ3SldXElwBU1NABi1AVVVNWVFCVndKV1cXQ0pWJlQFWktXTB-BdVQAAVgQKQldzXVVWVQVeVVZAB18DDhdQCQofQAcpVFdQG19DElgE
54.230.245.37200 OK260 B
anonfiles.com/img/flags/24/in.png
45.154.253.151200 OK593 B
xtthefirean.com/
52.20.131.174200 OK0 B
anonfiles.com/img/flags/24/es.png
45.154.253.151200 OK666 B
anonfiles.com/img/flags/24/no.png
45.154.253.151200 OK611 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
e1.o.lencr.org/
95.101.11.115200 OK345 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
216.58.207.237302 Found391 B
narenrosrow.com/utx?cb=oquPekb0Nw1T&top=anonfiles.com&tid=737329
54.230.111.47204 No Content0 B
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
216.58.207.237302 Found396 B
anonfiles.com/sw_anonfiles.js?WmFLTFYBQ3x%2EYWlTeG56eENnbmA5A3oqbmoFZi1maFZmeDRqBWZ1Y2JYZnlubQV%2BdW9qVS8qb3hNaXgwaVAtLmZuTHN0NW9Mf31ma0xyKGNoTHN6ZW8EcnlmPgN9L3R2Qzg7dHZDMzgiMgQtJSQ%2EACViNTUMaWB0a1FleXR2ByogJT9NLS06KQRnKjc2Ei4R
45.154.253.151200 OK16 kB
accounts.google.com/v3/signin/identifier?dsh=S-1576890921%3A1675941670363872&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHeYKx9E9qAhG3YaEt563niGwYkzkD96nJ92siZOn3lHmhoG0t5eQ6EReZBZDWwaRiqanaW_BA
216.58.207.237403 Forbidden1.3 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
anonfiles.com/img/favicon/favicon-32x32-anonfiles.png?1663356888
45.154.253.151200 OK1.3 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
34.120.237.76200 OK15 kB
baconaces.pro/?tag_id=737323&sub_id2=6cb1f80d-a027-4b0d-9589-587d59904df9&sw_url=https%3A%2F%2Fanonfiles.com%2Fsw_anonfiles.js&smf=1
54.162.51.18200 OK27 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75ead57d-06ef-4e5b-9d45-4c0ed94ff0f7.jpeg
34.120.237.76200 OK9.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg
34.120.237.76200 OK7.5 kB
xtthefirean.com/
52.20.131.174200 OK0 B
xtthefirean.com/
52.20.131.174200 OK0 B
xtthefirean.com/
52.20.131.174200 OK0 B
accounts.google.com/v3/signin/identifier?dsh=S905987406%3A1675941670407581&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AWnogHd1lL_SxboO_VjDPt0-piTiOxOlgGvoQO_SOYhdIrx5cVrA3An3RlZiOMjH0nU-XuWylOsU0w
216.58.207.237403 Forbidden0 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.205.35200 OK0 B
xtthefirean.com/WmFLTFYBQ3x%2EYWlTeG56eENnbmA5A3oqbmoFZi1maFZmeDRqBWZ1Y2JYZnlubQV%2BdW9qVS8qb3hNaXgwaVAtLmZuTHN0NW9Mf31ma0xyKGNoTHN6ZW8EcnlmPgN9L3R2Qzg7dHZDMzgiMgQtJSQ%2EACViNTUMaWB0a1FleXR2ByogJT9NLS06KQRnKjc2Ei4R
52.20.131.174200 OK0 B
pogothere.xyz/asd100.bin
104.21.70.211200 OK0 B
pogothere.xyz/
104.21.70.211200 OK0 B