Report - mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f

Report Overview

Submitted URL
mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
IP
162.0.227.140
ASN
#22612 NAMECHEAP-NET
Submitted
2024-04-18 13:35:08
Access
public
Website Title
MailsCandy | StockAlertsONEI-1
Final URL
mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mailscandy.com	unknown	2024-03-25	2024-03-26	2024-03-27	12 kB	170 kB	162.0.227.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed
2024-04-18	medium	mailscandy.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	mailscandy.com/assets/js/knockout.min.js?av=a20af139	68 kB	2023-03-07	2024-04-29
Pretty URL mailscandy.com/assets/js/knockout.min.js?av=a20af139 IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:20:24 Last Seen2024-04-29 14:12:06 Times Seen686 Hash 0b0128ab9e61554877cbb24986c24f04 30f5c25060787c4fb0fd4a45ee48d82c683145da e8957bb182a5047b07bea0a49fd22b11614b1ab9ac5b8286fcb2259f48658e73 Loading...

	mailscandy.com/assets/js/app.js?av=a20af139	2.8 kB	2023-03-07	2024-04-26
Pretty URL mailscandy.com/assets/js/app.js?av=a20af139 IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:51 Last Seen2024-04-26 20:03:54 Times Seen894 Hash 3ade0b17b1b7c3d1c27aba12ceeda1d3 f8c1fe63c016a077e1545d123eb4db8e8a690c6d cf55d95ad63c72f2eeb219da669cc848cc3022fa4a4798d62ed19ed342460cbe Loading...

	mailscandy.com/assets/js/bootstrap.min.js?av=a20af139	29 kB	2023-03-07	2024-05-01
Pretty URL mailscandy.com/assets/js/bootstrap.min.js?av=a20af139 IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:10 Last Seen2024-05-01 21:21:04 Times Seen9855 Hash ba847811448ef90d98d272aeccef2a95 5814e91bb6276f4de8b7951c965f2f190a03978d 898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1 Loading...

	mailscandy.com/assets/js/notify.js?av=a20af139	5.6 kB	2023-03-07	2024-04-26
Pretty URL mailscandy.com/assets/js/notify.js?av=a20af139 IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:51 Last Seen2024-04-26 20:03:54 Times Seen1044 Hash 9a19754fbd746ae6b603286c3a971e55 c45b906ec95326202c2a8e13545b5c17e92bbdc7 d1416dc4293eaae9e4aac8d5267fb0d5dcb35d9dbc44b63278f75750a1f9cc22 Loading...

	mailscandy.com/assets/js/adminlte.js?av=a20af139	9.8 kB	2023-03-07	2024-04-26
Pretty URL mailscandy.com/assets/js/adminlte.js?av=a20af139 IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:08 Last Seen2024-04-26 20:03:54 Times Seen1585 Hash add5b3f0900365f3b4240664da17760e 7cbd53bfcf830e7c150d6bb55efcc2832e7543e7 42338bc162a705b04953fc72340216dbefb55cf12ec1a6e7cad04e5e680e26bc Loading...

	mailscandy.com/assets/js/cookie.js?av=a20af139	4.9 kB	2023-03-07	2024-04-26
Pretty URL mailscandy.com/assets/js/cookie.js?av=a20af139 IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:08 Last Seen2024-04-26 20:03:54 Times Seen1589 Hash 449dd3907404cead5d8ba6203b3550dc c9bb690411c3f46145f8ea137e6783929d8c27aa 3585a42757908ba2ace27f41b01256f6cf4ffb9679f7ac0ff8957817d5ccfde1 Loading...

	mailscandy.com/frontend/assets/js/app.js?av=a20af139	572 B	2024-02-14	2024-04-26
Pretty URL mailscandy.com/frontend/assets/js/app.js?av=a20af139 IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-14 03:45:34 Last Seen2024-04-26 20:03:54 Times Seen14 Hash 92f929c4bc5b25c73b8288922e6bddba 8fc728c33dcb01bdda4f2fc005dc2d65778e0723 6fb1a7f0ef69a34d10191d7afa3899746645013f058eac4b4e4d0b3afad6b4b3 Loading...

	mailscandy.com/frontend/assets/cache/61755f88/jquery.min.js	90 kB	2023-03-07	2024-05-01
Pretty URL mailscandy.com/frontend/assets/cache/61755f88/jquery.min.js IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-01 21:31:29 Times Seen264378 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	mailscandy.com/frontend/assets/cache/61755f88/jquery-migrate.min.js	14 kB	2023-03-07	2024-04-26
Pretty URL mailscandy.com/frontend/assets/cache/61755f88/jquery-migrate.min.js IP 162.0.227.140 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:00 Last Seen2024-04-26 20:03:54 Times Seen1113 Hash a36b8e9cbfb4a675225aa408c4d15c0c fcd46de9c99e71ed586a850d877fd3b01e8269fd 16eb18d9c6303cdd50ac58db5b2b116c5dcc4c43c89424f268f6d13fc599fb19 Loading...

HTTP Transactions (17)

URL IP Response Size

mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f

162.0.227.140

200 OK

1.9 kB

URL User Request GET HTTP/1.1
mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
1.9 kB (1902 bytes)
Hash
d5fec575abf07f8ce17c24b453fab2ef
e7a42cffe987bae411a63b03e20a7c00057942c6
2ad71630ed8d87bb1c787493cecf9fc600cd4fd03003f192b2a28bccb0a5ac29

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; path=/; HttpOnly
csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B; path=/; HttpOnly; SameSite=Lax
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1902
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

mailscandy.com/assets/css/bootstrap.min.css?av=a20af139

162.0.227.140

200 OK

17 kB

URL GET HTTP/1.1
mailscandy.com/assets/css/bootstrap.min.css?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65366)
Size
17 kB (17162 bytes)
Hash
8a7442ca6bedd62cec4881040b9a9e83
e2d2b846e9ea72a1985458a3748aab4e01a8fb3a
e9503448692b738dd260fbd7f7cabf2e11f09b600fa97e6eb3a56eba5b1a7e9b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/bootstrap.min.css?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 17162
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

mailscandy.com/frontend/assets/cache/61755f88/jquery.min.js

162.0.227.140

200 OK

31 kB

URL GET HTTP/1.1
mailscandy.com/frontend/assets/cache/61755f88/jquery.min.js
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (30902 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /frontend/assets/cache/61755f88/jquery.min.js HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Tue, 26 Mar 2024 03:44:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 30902
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/assets/css/font-awesome/css/font-awesome.min.css?av=a20af139

162.0.227.140

200 OK

6.2 kB

URL GET HTTP/1.1
mailscandy.com/assets/css/font-awesome/css/font-awesome.min.css?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
ASCII text, with very long lines (27303)
Size
6.2 kB (6243 bytes)
Hash
4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/font-awesome/css/font-awesome.min.css?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 6243
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

mailscandy.com/assets/css/ionicons/css/ionicons.min.css?av=a20af139

162.0.227.140

200 OK

8.3 kB

URL GET HTTP/1.1
mailscandy.com/assets/css/ionicons/css/ionicons.min.css?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (50806)
Size
8.3 kB (8284 bytes)
Hash
0d6763b67616cb9183f3931313d42971
f0459300e39155df7aa5e94b3bdb8c8594f49a60
de2bbd8e0b32f53a53c1729bedb350cea59e9115fba4f2bed8e2e3dd1f76d9fa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/ionicons/css/ionicons.min.css?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8284
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

mailscandy.com/frontend/assets/css/style.css?av=a20af139

162.0.227.140

200 OK

2.5 kB

URL GET HTTP/1.1
mailscandy.com/frontend/assets/css/style.css?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
ASCII text
Size
2.5 kB (2492 bytes)
Hash
8eb135311de8119732ebcf00bb775364
6b6acd0d3b7e1d27c8130899dca581cb9a415fe9
ac6bc213c9ef74c63be52c04725427833977bdfcff9975974c494b47d4ce5fe2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /frontend/assets/css/style.css?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2492
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

mailscandy.com/frontend/assets/cache/61755f88/jquery-migrate.min.js

162.0.227.140

200 OK

4.8 kB

URL GET HTTP/1.1
mailscandy.com/frontend/assets/cache/61755f88/jquery-migrate.min.js
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (13326)
Size
4.8 kB (4825 bytes)
Hash
a36b8e9cbfb4a675225aa408c4d15c0c
fcd46de9c99e71ed586a850d877fd3b01e8269fd
16eb18d9c6303cdd50ac58db5b2b116c5dcc4c43c89424f268f6d13fc599fb19

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /frontend/assets/cache/61755f88/jquery-migrate.min.js HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Tue, 26 Mar 2024 03:44:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4825
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/assets/js/bootstrap.min.js?av=a20af139

162.0.227.140

200 OK

7.7 kB

URL GET HTTP/1.1
mailscandy.com/assets/js/bootstrap.min.js?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (28941)
Size
7.7 kB (7679 bytes)
Hash
ba847811448ef90d98d272aeccef2a95
5814e91bb6276f4de8b7951c965f2f190a03978d
898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/bootstrap.min.js?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:39 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7679
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/assets/css/adminlte.css?av=a20af139

162.0.227.140

200 OK

31 kB

URL GET HTTP/1.1
mailscandy.com/assets/css/adminlte.css?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
ASCII text
Size
31 kB (31370 bytes)
Hash
315a0bdc202c9b2fe19cfc42ea04d764
d04f2d715a73ca562caa2544ea885a932f20e185
7e794bc4608f3355ca991e021119e82fb87dfea7057a6acfc88dcbb2e9642082

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/adminlte.css?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:38 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 31370
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

mailscandy.com/assets/css/skin-blue.css?av=a20af139

162.0.227.140

200 OK

21 kB

URL GET HTTP/1.1
mailscandy.com/assets/css/skin-blue.css?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
ASCII text
Size
21 kB (21406 bytes)
Hash
b94b3fb60c559db34b7ae821c9368b5f
1d389cc788030fedb24e709e7d1330ec3789d18f
2fefbaf4d062df56d0335279167be66e487540ea9dd8db745a226d64be95f239

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/skin-blue.css?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:43 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:39 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 21406
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

mailscandy.com/assets/js/knockout.min.js?av=a20af139

162.0.227.140

200 OK

25 kB

URL GET HTTP/1.1
mailscandy.com/assets/js/knockout.min.js?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (597)
Size
25 kB (25117 bytes)
Hash
0b0128ab9e61554877cbb24986c24f04
30f5c25060787c4fb0fd4a45ee48d82c683145da
e8957bb182a5047b07bea0a49fd22b11614b1ab9ac5b8286fcb2259f48658e73

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/knockout.min.js?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:44 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:39 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 25117
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/assets/js/notify.js?av=a20af139

162.0.227.140

200 OK

1.2 kB

URL GET HTTP/1.1
mailscandy.com/assets/js/notify.js?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
1.2 kB (1228 bytes)
Hash
9a19754fbd746ae6b603286c3a971e55
c45b906ec95326202c2a8e13545b5c17e92bbdc7
d1416dc4293eaae9e4aac8d5267fb0d5dcb35d9dbc44b63278f75750a1f9cc22

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/notify.js?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:44 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:39 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1228
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/assets/js/adminlte.js?av=a20af139

162.0.227.140

200 OK

3.0 kB

URL GET HTTP/1.1
mailscandy.com/assets/js/adminlte.js?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (9373)
Size
3.0 kB (2986 bytes)
Hash
add5b3f0900365f3b4240664da17760e
7cbd53bfcf830e7c150d6bb55efcc2832e7543e7
42338bc162a705b04953fc72340216dbefb55cf12ec1a6e7cad04e5e680e26bc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/adminlte.js?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:44 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:39 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2986
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/assets/js/cookie.js?av=a20af139

162.0.227.140

200 OK

1.5 kB

URL GET HTTP/1.1
mailscandy.com/assets/js/cookie.js?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
1.5 kB (1500 bytes)
Hash
449dd3907404cead5d8ba6203b3550dc
c9bb690411c3f46145f8ea137e6783929d8c27aa
3585a42757908ba2ace27f41b01256f6cf4ffb9679f7ac0ff8957817d5ccfde1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/cookie.js?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:44 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:39 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1500
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/assets/js/app.js?av=a20af139

162.0.227.140

200 OK

1.0 kB

URL GET HTTP/1.1
mailscandy.com/assets/js/app.js?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
1.0 kB (1007 bytes)
Hash
3ade0b17b1b7c3d1c27aba12ceeda1d3
f8c1fe63c016a077e1545d123eb4db8e8a690c6d
cf55d95ad63c72f2eeb219da669cc848cc3022fa4a4798d62ed19ed342460cbe

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/app.js?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:44 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:39 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1007
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/frontend/assets/js/app.js?av=a20af139

162.0.227.140

200 OK

301 B

URL GET HTTP/1.1
mailscandy.com/frontend/assets/js/app.js?av=a20af139
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
301 B (301 bytes)
Hash
92f929c4bc5b25c73b8288922e6bddba
8fc728c33dcb01bdda4f2fc005dc2d65778e0723
6fb1a7f0ef69a34d10191d7afa3899746645013f058eac4b4e4d0b3afad6b4b3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /frontend/assets/js/app.js?av=a20af139 HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:44 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 301
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript

mailscandy.com/favicon.ico

162.0.227.140

200 OK

101 B

URL GET HTTP/1.1
mailscandy.com/favicon.ico
IP
162.0.227.140:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Certificate
IssuerSectigo Limited
Subject*.mailscandy.com
FingerprintEB:D0:99:2E:0A:9C:10:0A:BE:D8:B8:97:D9:63:33:16:FE:C2:3D:53
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 26 Mar 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 2 colors
Size
101 B (101 bytes)
Hash
ff82d748b4add52e4dd7c8f0b58b89f2
ea69cebf29f461d7831368697f303ea4f0c69a2d
de88c1f678413736e858b27974cd5d2181b3df891b8999dd93835384b0ca2d8f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: mailscandy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailscandy.com/index.php/lists/gk5540xz9f07b/unsubscribe/gh4172thdz1fe/kx0902jft156f
Cookie: mwsid=69bec0213dc7c9819c25c2b890c0e913; csrf_token=da7bbb5c91e9583ca3915cbbd065ec7730c256c3s%3A88%3A%22OTNNZmpiMm1hT0NNckpia1NkU19uZ05vU2hDOXB3dUzR319v6dKUWkOPgz57lrdQ5h963VLUpRnSfvL1QI8YyQ%3D%3D%22%3B
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 13:34:44 GMT
Server: Apache
Last-Modified: Mon, 18 Mar 2024 07:27:40 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 101
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/x-icon

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML