Report Overview

  1. Submitted URL

    trafiq.trade/p/18au8/direct/t:5187634

  2. IP

    23.235.244.212

    ASN

    #20454 SSASN2

  3. Submitted

    2022-12-21 08:08:36

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  2. urlquery

    0

  3. Network Intrusion Detection

    7

  4. Threat Detection Systems

    8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
region1.google-analytics.comunknown2022-03-17T12:26:33Z2023-03-09T05:09:40Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-09T05:09:50Z
www.googletagmanager.com752013-05-22T04:07:37Z2023-03-09T13:40:16Z
porn.tounknown2012-08-31T06:38:29Z2023-03-06T15:15:08Z
cdnjs.cloudflare.com2352015-04-17T22:46:33Z2023-03-09T05:09:51Z
www.google-analytics.com402012-10-03T03:04:21Z2023-03-09T13:53:17Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-09T10:04:36Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-09T11:52:10Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-09T05:09:13Z
d.pssy.xyzunknown2022-01-18T01:00:45Z2023-03-09T07:29:16Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-09T05:09:05Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-09T05:09:48Z
trafiq.trade2907122020-09-01T11:04:33Z2022-12-16T14:17:25Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-09T05:09:18Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-09T05:09:49Z
www.porn.tounknown2015-11-23T06:53:56Z2023-02-25T12:48:22Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
low 131.153.42.211Client IP
ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
low 131.153.42.211Client IP
ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
medium 23.235.244.212Client IP
ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)
mediumClient IPInternal IP
ET DNS Query for .to TLD
mediumClient IPInternal IP
ET DNS Query for .to TLD
mediumClient IPInternal IP
ET DNS Query for .to TLD
mediumClient IPInternal IP
ET DNS Query for .to TLD

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumtrafiq.tradeSinkholed
mediumtrafiq.tradeSinkholed
mediumpssy.xyzSinkholed
mediumpssy.xyzSinkholed

JavaScript (276)

HTTP Transactions (51)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
trafiq.trade/p/18au8/direct/t:5187634
131.153.42.211200 OK18 kB
trafiq.trade/p/18au8/direct/t:5187634?prc_c=1671610105&prc_r=eyJIVFRQX1VTRVJfQUdFTlQiOiJNb3ppbGxhXC81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTA1LjApIEdlY2tvXC8yMDEwMDEwMSBGaXJlZm94XC8xMDUuMCJ9&prc_h=4dea8b08ae3b13de1dec4edab50926fb31b679027087542b51542d96391510eb&pr_tsid=48cf564beb128667013e77ac7e33b0c933cd6e83a48c71597697f633f0f698b6&pr_tsids=a013718e22d7b0e0e222d2d5ef9b1a551bf522be2c8fbea268f4abb096b71b38
131.153.42.211302 Found0 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
push.services.mozilla.com/
34.218.168.248101 Switching Protocols0 B
d.pssy.xyz/ect.php?u=aHR0cHM6Ly9wb3JuLnRvLw==&r=48cf564beb128667013e77ac7e33b0c933cd6e83a48c71597697f633f0f698b6&h=f7578b
23.235.244.212200 OK6.5 kB
d.pssy.xyz/publicservices/dump.php
23.235.244.212200 OK20 B
ocsp.digicert.com/
93.184.220.29200 OK280 B
cdnjs.cloudflare.com/ajax/libs/meyer-reset/2.0/reset.min.css
104.17.25.14200 OK333 B
www.porn.to/images/trade-plug2.jpg
188.114.96.1200 OK51 kB
www.porn.to/images/trade-plug13.jpg
188.114.96.1200 OK62 kB
www.porn.to/images/trade-plug4.jpg
188.114.96.1200 OK45 kB
www.porn.to/images/trade-plug6.jpg
188.114.96.1200 OK48 kB
www.porn.to/images/trade-plug8.jpg
188.114.96.1200 OK47 kB
www.porn.to/images/trade-plug10.jpg
188.114.96.1200 OK62 kB
www.porn.to/images/trade-plug12.jpg
188.114.96.1200 OK64 kB
www.porn.to/images/trade-plug11.jpg
188.114.96.1200 OK37 kB
www.porn.to/images/trade-plug3.jpg
188.114.96.1200 OK52 kB
www.porn.to/images/trade-plug14.jpg
188.114.96.1200 OK75 kB
www.porn.to/images/trade-plug15.jpg
188.114.96.1200 OK61 kB
www.porn.to/images/trade-plug7.jpg
188.114.96.1200 OK66 kB
www.porn.to/images/trade-plug18.jpg
188.114.96.1200 OK61 kB
www.porn.to/images/trade-plug16.jpg
188.114.96.1200 OK72 kB
www.porn.to/images/plug19.jpg
188.114.96.1200 OK61 kB
www.porn.to/images/trade-plug17.jpg
188.114.96.1200 OK80 kB
www.porn.to/images/trade-plug5.jpg
188.114.96.1200 OK84 kB
ocsp.digicert.com/
93.184.220.29200 OK280 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
www.porn.to/images/trade-plug9.jpg
188.114.96.1200 OK56 kB
www.porn.to/images/trade-plug20.jpg
188.114.96.1200 OK61 kB
www.porn.to/images/trade-plug21.jpg
188.114.96.1200 OK67 kB
www.porn.to/images/main-plug.jpg
188.114.96.1200 OK67 kB
www.googletagmanager.com/gtag/js?id=G-M2804GZ8EL
172.217.21.168200 OK73 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK471 B
www.google-analytics.com/analytics.js
142.250.74.110200 OK20 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9917118c-5972-401b-b285-5393790dd2a9.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45b5057a-7f1e-4401-a991-6c35e54140aa.jpeg
34.120.237.76200 OK9.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefe0191e-7441-4083-843d-18a9446de816.jpeg
34.120.237.76200 OK9.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29801943-e64a-496a-9777-304bfa4bf8ab.jpeg
34.120.237.76200 OK8.4 kB
porn.to/
104.21.62.35200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31ce91c9-2f56-4bfd-bfc9-6081785436ca.jpeg
34.120.237.76200 OK4.8 kB
region1.google-analytics.com/g/collect?v=2&tid=G-M2804GZ8EL&gtm=2oebu0&_p=1356244166&cid=1147733764.1671610127&ul=en-us&sr=1280x1024&_s=1&sid=1671610127&sct=1&seg=0&dl=https%3A%2F%2Fporn.to%2F&dr=https%3A%2F%2Fd.pssy.xyz%2F&dt=Hottest%20Videos&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content0 B