Report Overview

  1. Submitted URL

    proxy.quickmail.com/click/1/532088311/552c56fa5105ff5fe64c8daa71868d82/628539a3ebc6def391d172f24978f9e4/next

  2. IP

    54.196.16.164

    ASN

    #14618 AMAZON-AES

  3. Submitted

    2023-01-23 18:21:46

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
js.hs-banner.com24260001-01-01T00:00:00Z0001-01-01T00:00:00Z
api.hubspot.com52140001-01-01T00:00:00Z0001-01-01T00:00:00Z
script.hotjar.com8870001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.linkedin.oribi.iounknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
forms.hubspot.com35930001-01-01T00:00:00Z0001-01-01T00:00:00Z
i.postimg.cc238400001-01-01T00:00:00Z0001-01-01T00:00:00Z
js.usemessages.com56340001-01-01T00:00:00Z0001-01-01T00:00:00Z
js.hs-scripts.com25710001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdnjs.cloudflare.com2350001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
connect.facebook.net1390001-01-01T00:00:00Z0001-01-01T00:00:00Z
js.hs-analytics.net24110001-01-01T00:00:00Z0001-01-01T00:00:00Z
forms.hsforms.com51600001-01-01T00:00:00Z0001-01-01T00:00:00Z
px.ads.linkedin.com5220001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
js-na1.hs-scripts.com82740001-01-01T00:00:00Z0001-01-01T00:00:00Z
proxy.quickmail.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
d1pnnwteuly8z3.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sca1b.amazontrust.com10150001-01-01T00:00:00Z0001-01-01T00:00:00Z
in.hotjar.com17460001-01-01T00:00:00Z0001-01-01T00:00:00Z
vars.hotjar.com10140001-01-01T00:00:00Z0001-01-01T00:00:00Z
js.hscollectedforms.net56970001-01-01T00:00:00Z0001-01-01T00:00:00Z
ez-advisors.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
snap.licdn.com10440001-01-01T00:00:00Z0001-01-01T00:00:00Z
static.hotjar.com6410001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
region1.google-analytics.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.linkedin.com6080001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumproxy.quickmail.com/click/1/532088311/552c56fa5105ff5fe64c8daa71868d82/628539a3ebc6def391d172f24978f9e4/nextPhishing
mediumproxy.quickmail.com/click/1/532088311/552c56fa5105ff5fe64c8daa71868d82/628539a3ebc6def391d172f24978f9e4/nextPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (22)

HTTP Transactions (86)

URLIPResponseSize
proxy.quickmail.com/click/1/532088311/552c56fa5105ff5fe64c8daa71868d82/628539a3ebc6def391d172f24978f9e4/next
54.91.6.89301 Moved Permanently0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
proxy.quickmail.com/click/1/532088311/552c56fa5105ff5fe64c8daa71868d82/628539a3ebc6def391d172f24978f9e4/next
54.196.16.164301 Moved Permanently90 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
push.services.mozilla.com/
44.233.165.74101 Switching Protocols0 B
cdnjs.cloudflare.com/ajax/libs/fetch/3.0.0/fetch.min.js
104.17.24.14200 OK2.4 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
www.googletagmanager.com/gtag/js?id=G-W7HRC3HZ0K
142.250.74.168200 OK77 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
i.postimg.cc/bJjNWGhJ/Medical-equipment-supplier-Linked-In-Post.png
162.19.88.69200 OK890 kB
i.postimg.cc/cLZhxhBM/American-restaurant-Linked-In-Post-4.png
162.19.88.69200 OK1.1 MB
i.postimg.cc/1XGFbx2x/Hotel-in-Orlando-Linked-In-Post-1.png
162.19.88.69200 OK1.5 MB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
216.58.207.227200 OK8.0 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
216.58.207.227200 OK7.9 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
js.hs-banner.com/v2/6779197/banner.js
172.64.154.85200 OK63 kB
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
216.58.207.227200 OK7.8 kB
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2
216.58.207.227200 OK7.8 kB
fonts.gstatic.com/s/poppins/v20/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2
216.58.207.227200 OK8.7 kB
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
216.58.207.227200 OK7.7 kB
api.hubspot.com/livechat-public/v1/message/public?portalId=6779197&conversations-embed=static-1.11873&mobile=false&messagesUtk=8f2cfbb737814aa1b448de7608e878fa&traceId=8f2cfbb737814aa1b448de7608e878fa
104.19.155.83200 OK18 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
api.hubspot.com/livechat-public/v1/message/public?portalId=6779197&conversations-embed=static-1.11873&mobile=false&messagesUtk=8f2cfbb737814aa1b448de7608e878fa&traceId=8f2cfbb737814aa1b448de7608e878fa
104.19.155.83200 OK203 B
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/cbe3806b-36cf-43e0-aceb-97502346df55.png
54.230.245.32200 OK42 kB
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/2144b882-08bc-4a72-82ab-096f1950d446.png
54.230.245.32200 OK143 kB
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/b847383c-f926-43a1-8942-88cf59420686.png
54.230.245.32200 OK86 kB
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/c793c572-781d-4416-908b-793be8540f1e.png
54.230.245.32200 OK51 kB
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/93526498-64f4-473f-aae8-94646833cea4.png
54.230.245.32200 OK65 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/7f1a0d2c-601d-4144-b484-e29d3340850f.jpeg
54.230.245.32200 OK25 kB
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/0dc99b6a-3331-4cb9-afc6-1500f842f690.webp
54.230.245.32200 OK239 kB
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/b4566a1a-f61a-4e27-a917-b7c51e34624c.jpeg
54.230.245.32200 OK26 kB
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/37debe3b-3c79-473a-8ca6-011a4989f031.png
54.230.245.32200 OK3.3 MB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0247217-9730-4fdb-8be7-667f0568ffc2.jpeg
34.120.237.76200 OK11 kB
d1pnnwteuly8z3.cloudfront.net/images/f21ea8c5-4a44-4a86-a9c3-22a2502c74ff/ec669a29-3538-44a2-add2-a3a41b4ca715.png
54.230.245.32200 OK4.2 MB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0a4afa9-05c4-4ab9-b9eb-17970c04dbbb.jpeg
34.120.237.76200 OK3.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf2abec1-a455-47b9-9aaf-69794032330f.jpeg
34.120.237.76200 OK8.0 kB
ocsp.digicert.com/
93.184.220.29200 OK280 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd68d33e7-2d1d-4f9d-9544-28746d9156e6.jpeg
34.120.237.76200 OK8.1 kB
snap.licdn.com/li.lms-analytics/insight.min.js
23.36.76.121200 OK4.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg
34.120.237.76200 OK3.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc284e6ec-6c43-4a8d-a291-83519d5a4d4c.jpeg
34.120.237.76200 OK8.2 kB
static.hotjar.com/c/hotjar-2615290.js?sv=6
54.230.111.39200 OK4.0 kB
ocsp.digicert.com/
93.184.220.29200 OK279 B
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK28 kB
region1.google-analytics.com/g/collect?v=2&tid=G-W7HRC3HZ0K&gtm=2oe1i0&_p=1937899872&cid=530403832.1674498094&ul=en-us&sr=1280x1024&_s=1&sid=1674498094&sct=1&seg=0&dl=https%3A%2F%2Fez-advisors.com%2F&dt=EZ-Advisors&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content0 B
vars.hotjar.com/box-ff00c703c3bbdf54ae44ee858d64f69e.html
143.204.55.105200 OK1.0 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1
104.16.88.5200 OK35 B
script.hotjar.com/modules.ea0a6d6a741d5de8308e.js
143.204.55.68200 OK69 kB
ocsp.digicert.com/
93.184.220.29200 OK279 B
px.ads.linkedin.com/collect?v=2&fmt=js&pid=83322893&time=1674498094972&url=https%3A%2F%2Fez-advisors.com%2F
13.107.42.14302 Found0 B
www.facebook.com/tr/?id=377519210744823&ev=PageView&dl=https%3A%2F%2Fez-advisors.com%2F&rl=&if=false&ts=1674498095257&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1674498095256.1055063893&it=1674498095034&coo=false&rqm=GET
31.13.72.36200 OK0 B
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK471 B
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D83322893%26time%3D1674498094972%26url%3Dhttps%253A%252F%252Fez-advisors.com%252F%26liSync%3Dtrue
13.107.42.14302 Found0 B
px.ads.linkedin.com/collect?v=2&fmt=js&pid=83322893&time=1674498094972&url=https%3A%2F%2Fez-advisors.com%2F&liSync=true
13.107.42.14200 OK0 B
in.hotjar.com/api/v2/client/sites/2615290/visit-data?sv=6
54.171.13.128200 OK140 B
js-na1.hs-scripts.com/6779197.js
104.17.210.204200 OK11 kB
cdn.linkedin.oribi.io/partner/83322893/domain/ez-advisors.com/token
54.230.111.78200 OK0 B
d1pnnwteuly8z3.cloudfront.net/libs/floating-ui/1.0.1/floating-ui.min.js
54.230.245.32200 OK0 B
d1pnnwteuly8z3.cloudfront.net/libs/webfont/1.6.28/webfont.js
54.230.245.32200 OK0 B
js.usemessages.com/conversations-embed.js
104.17.239.204200 OK0 B
forms.hubspot.com/collected-forms/v1/config/json?portalId=6779197&utk=
104.19.155.83200 OK0 B
js.hscollectedforms.net/collectedforms.js
104.17.129.171200 OK0 B
i.postimg.cc/qM8fDm78/Assisted-Living-Facility-Linked-In-Post-3.png
162.19.88.69200 OK0 B
js.hs-analytics.net/analytics/1674498000000/6779197.js
104.17.67.176200 OK0 B
d1pnnwteuly8z3.cloudfront.net/libs/versoly-ui/2.0.1/versoly-ui.js
54.230.245.32200 OK0 B
ez-advisors.com/
18.235.63.208200 OK0 B
js.hs-scripts.com/6779197.js
104.17.210.204200 OK0 B
fonts.googleapis.com/css?family=Poppins:300,300i,400,500,600,700,800&display=swap
142.250.74.106200 OK0 B