Report Overview

  1. Submitted URL

    go.gkrtmc.com/aff_c?offer_id=8495&aff_id=61626&url_id=14821&aff_sub=ecc5162e-3bde-4c59-b652-57eed8d8cbb5&aff_sub2=14821&aff_sub3=&aff_sub4=2bdadfd4-0cc8-4d43-8b0a-b77d43d5db5d&aff_sub5=push&source=ecc5162e-3bde-4c59-b652-57eed8d8cbb5&click_id=7SpTTd2PEtpJsHX1jfAHs3&click_id=7SpTTd2PEtpJsHX1jfAHs3

  2. IP

    172.255.248.105

    ASN

    #7979 SERVERS-COM

  3. Submitted

    2022-11-28 15:13:48

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
rkkmj.prodlglousdate.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
go.gkrtmc.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn-dimi.akamaized.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumgo.gkrtmc.com/rd.html?go=https%3A%2F%2Frkkmj.prodlglousdate.net%3Futm_source%3Dc44213fa2bf7a303%26s1%3D20904%26s2%3D1656360%26s3%3D61626%26s5%3Decc5162e-3bde-4c59-b652-57eed8d8cbb5%26click_id%3D37_61626_4178_56984f5d25c023c0defa386ecbb399be%26j1%3D1%26j8%3D1Phishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (13)

HTTP Transactions (45)

URLIPResponseSize
go.gkrtmc.com/aff_c?offer_id=8495&aff_id=61626&url_id=14821&aff_sub=ecc5162e-3bde-4c59-b652-57eed8d8cbb5&aff_sub2=14821&aff_sub3=&aff_sub4=2bdadfd4-0cc8-4d43-8b0a-b77d43d5db5d&aff_sub5=push&source=ecc5162e-3bde-4c59-b652-57eed8d8cbb5&click_id=7SpTTd2PEtpJsHX1jfAHs3&click_id=7SpTTd2PEtpJsHX1jfAHs3
172.255.248.105302 Found584 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
go.gkrtmc.com/aff_c?offer_id=4178&aff_id=61626&aff_sub=ecc5162e-3bde-4c59-b652-57eed8d8cbb5&aff_sub2=14821&aff_sub3=&aff_sub4=2bdadfd4-0cc8-4d43-8b0a-b77d43d5db5d&aff_sub5=push&source=ecc5162e-3bde-4c59-b652-57eed8d8cbb5&click_id=7SpTTd2PEtpJsHX1jfAHs3
172.255.248.105302 Found534 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
go.gkrtmc.com/rd.html?go=https%3A%2F%2Frkkmj.prodlglousdate.net%3Futm_source%3Dc44213fa2bf7a303%26s1%3D20904%26s2%3D1656360%26s3%3D61626%26s5%3Decc5162e-3bde-4c59-b652-57eed8d8cbb5%26click_id%3D37_61626_4178_56984f5d25c023c0defa386ecbb399be%26j1%3D1%26j8%3D1
172.255.248.105200 OK255 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
go.gkrtmc.com/favicon.ico
172.255.248.105404 Not Found123 B
cdn-dimi.akamaized.net/landings/275824/1663065093/js/1.js?1663065093
184.31.15.107200 OK497 B
cdn-dimi.akamaized.net/landings/275824/1663065093/css/popup.css?1663065093
184.31.15.107200 OK623 B
cdn-dimi.akamaized.net/landings/275824/1663065093/css/style.css?1663065093
184.31.15.107200 OK3.0 kB
cdn-dimi.akamaized.net/landings/275824/1663065093/js/jquery-2.2.4.min.js?1663065093
184.31.15.107200 OK30 kB
cdn-dimi.akamaized.net/landings/275824/1663065093/js/translates.js?1663065093
184.31.15.107200 OK8.4 kB
cdn-dimi.akamaized.net/landings/275824/1663065093/images/OnlyHot_logo-white.svg
184.31.15.107200 OK7.6 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
fonts.googleapis.com/css2?family=Roboto:wght@300;400;700&display=swap
142.250.74.10200 OK4.8 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
cdn-dimi.akamaized.net/landings/275824/1663065093/images/bg.jpg
184.31.15.107200 OK316 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.195200 OK16 kB
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK16 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
www.gstatic.com/firebasejs/5.0.2/firebase-app.js
142.250.74.163200 OK8.6 kB
www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
142.250.74.163200 OK10 kB
push.services.mozilla.com/
54.186.209.73101 Switching Protocols0 B
rkkmj.prodlglousdate.net/?utm_source=c44213fa2bf7a303&s1=20904&s2=1656360&s3=61626&s5=ecc5162e-3bde-4c59-b652-57eed8d8cbb5&click_id=37_61626_4178_56984f5d25c023c0defa386ecbb399be&j1=1&j8=1
52.19.101.114200 OK13 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F955ba04e-80cb-43a1-bc6a-3e502a79144e.jpeg
34.120.237.76200 OK9.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
34.120.237.76200 OK8.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde03fed4-26de-4471-bc0e-a0c0483636ce.jpeg
34.120.237.76200 OK8.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
34.120.237.76200 OK9.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
34.120.237.76200 OK6.4 kB
fonts.googleapis.com/css2?family=Ubuntu:wght@400;700&display=swap
142.250.74.10200 OK0 B
rkkmj.prodlglousdate.net/js/pushjs/1.0.0/utils.js
52.19.101.114200 OK0 B
rkkmj.prodlglousdate.net/js/service-worker.js
52.19.101.114200 OK0 B