Report - url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com

Report Overview

Visited public
2025-06-10 22:25:58
Tags
URL
url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
Finishing URL
url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
IP / ASN
3.167.2.40
#0
Title
url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
url.avanan.click	104468	2021-03-16	2021-11-17	2025-06-05	1.4 kB	126 kB	3.167.2.40
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-06-04	924 B	6.2 kB	142.250.74.10
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-06-04	1.1 kB	17 kB	142.250.74.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-06-10 22:25:37	low	Client IP	3.167.2.40	ETPRO INFO HTTP Request to a *.click domain
2025-06-10 22:25:37	low	Client IP	3.167.2.40	ETPRO INFO HTTP Request to a *.click domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

URL IP Response Size

url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com

3.167.2.40

403 Forbidden

41 kB

URL User Request GET
url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
IP
3.167.2.40:443
ASN
#0

Certificate
IssuerAmazon
Subject*.avanan.click
FingerprintE5:B4:EB:B3:6F:9D:67:20:14:36:82:D3:86:89:5C:74:F0:9A:6E:35
ValidityThu, 14 Nov 2024 00:00:00 GMT - Sat, 13 Dec 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (41202), with no line terminators
Size
41 kB (41202 bytes)
Hash
40b38915cbe7157aaea5e3860f1b8148
e1d367c7fab92927ae5a2f015fb78d4206918420
e2b6cfe0e2ee44a5eb3cd3fa1a33d1f2aa6bba8f45cedeca9df5effbc007258b

Detections

NIDS	Severity	Alert
suricata	low	ETPRO INFO HTTP Request to a *.click domain

HTTP Headers

GET /v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com HTTP/1.1
Host: url.avanan.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
content-type: text/html
content-length: 41202
date: Tue, 10 Jun 2025 22:25:36 GMT
apigw-requestid: L-CTLivaoAMEarg=
content-encoding: UTF-8
cache-control: max-age=100
x-cache: Error from cloudfront
via: 1.1 74cb6ad66f88e47ae011abd64e57e7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 3LllBhSAYh3Sjv0oMrWYDQnAqrVHpOoFbh_J5wPnPZASyy3TvRE2nA==
X-Firefox-Spdy: h2

url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com

3.167.2.40

403 Forbidden

41 kB

URL User Request GET
url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
IP
3.167.2.40:80
ASN
#0

File type
HTML document, ASCII text, with very long lines (41202), with no line terminators
Size
41 kB (41202 bytes)
Hash
40b38915cbe7157aaea5e3860f1b8148
e1d367c7fab92927ae5a2f015fb78d4206918420
e2b6cfe0e2ee44a5eb3cd3fa1a33d1f2aa6bba8f45cedeca9df5effbc007258b

Detections

NIDS	Severity	Alert
suricata	low	ETPRO INFO HTTP Request to a *.click domain

HTTP Headers

GET /v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com HTTP/1.1
Host: url.avanan.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 41202
Connection: keep-alive
Date: Tue, 10 Jun 2025 22:25:37 GMT
Apigw-Requestid: L-CTQgNIIAMEaSw=
content-encoding: UTF-8
cache-control: max-age=100
X-Cache: Error from cloudfront
Via: 1.1 8b440cccbe8a332306f650e1ec8894ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P2
X-Amz-Cf-Id: 9gA6rBE31o_xdrZPU-43SUB1RRfSj8dxDhnZX0Lr-ycUmiUEW6nkoQ==

fonts.googleapis.com/css?family=Poppins:500,800&display=swap

142.250.74.10

200 OK

2.4 kB

URL GET
fonts.googleapis.com/css?family=Poppins:500,800&display=swap
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
http://url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint1C:09:46:89:AD:F3:B6:3E:B4:89:F7:49:AC:15:E7:4E:A6:D2:AA:73
ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT

File type
ASCII text
Size
2.4 kB (2402 bytes)
Hash
a0beb48d455386445fde711ea816f524
57aa614546c96f7fae69aca95a5ac10e964bc762
f67dcebab9a9b046b80899d8bb202fc8a9c31276477cabdcb20ace72de08f218

HTTP Headers

GET /css?family=Poppins:500,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://url.avanan.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Jun 2025 22:25:37 GMT
date: Tue, 10 Jun 2025 22:25:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Poppins:500,800&display=swap

142.250.74.10

200 OK

2.4 kB

URL GET
fonts.googleapis.com/css?family=Poppins:500,800&display=swap
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
http://url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint1C:09:46:89:AD:F3:B6:3E:B4:89:F7:49:AC:15:E7:4E:A6:D2:AA:73
ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT

File type
ASCII text
Size
2.4 kB (2402 bytes)
Hash
a0beb48d455386445fde711ea816f524
57aa614546c96f7fae69aca95a5ac10e964bc762
f67dcebab9a9b046b80899d8bb202fc8a9c31276477cabdcb20ace72de08f218

HTTP Headers

GET /css?family=Poppins:500,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://url.avanan.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Jun 2025 22:25:37 GMT
date: Tue, 10 Jun 2025 22:25:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

url.avanan.click/favicon.ico

3.167.2.40

403 Forbidden

42 kB

URL GET
url.avanan.click/favicon.ico
IP
3.167.2.40:80
ASN
#0

Requested by
http://url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com

File type
HTML document, ASCII text, with very long lines (30944)
Size
42 kB (42343 bytes)
Hash
870933f8295b84a72f2b9a3029599703
703ccc3836db7c49776a4fe5b17e401a1231b0e8
fe5069c7a627508a36842b726496758e9d060760e725e0a16601514cff6e68bd

Detections

NIDS	Severity	Alert
suricata	low	ETPRO INFO HTTP Request to a *.click domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: url.avanan.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 42343
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 12:45:17 GMT
ETag: "870933f8295b84a72f2b9a3029599703"
x-amz-error-code: AccessDenied
x-amz-error-message: Access Denied
Date: Tue, 10 Jun 2025 22:25:37 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 8b440cccbe8a332306f650e1ec8894ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P2
X-Amz-Cf-Id: uqMEtp6tBIjAj6Vyo0EeaIwOuI3nRlM3DDKzFF0JQ-XgvqpAlT9uiA==

fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2

142.250.74.35

200 OK

7.7 kB

URL GET
fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
http://url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC
ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Size
7.7 kB (7748 bytes)
Hash
a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446

HTTP Headers

GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://url.avanan.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 04 Jun 2025 20:17:34 GMT
expires: Thu, 04 Jun 2026 20:17:34 GMT
cache-control: public, max-age=31536000
age: 526083
last-modified: Wed, 23 Apr 2025 16:07:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2

142.250.74.35

200 OK

7.8 kB

URL GET
fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
http://url.avanan.click/v2/r01/___http:/fg398vj3.r.us-east-2.awstrack.me/L0/http:/www.3m.com
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC
ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7824, version 1.0
Size
7.8 kB (7824 bytes)
Hash
af4d371a10271dafeb343f1eace762bc
6d11d743bc3cfb169d70bc86450f18351dc1a905
60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2

HTTP Headers

GET /s/poppins/v23/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://url.avanan.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 04 Jun 2025 21:38:55 GMT
expires: Thu, 04 Jun 2026 21:38:55 GMT
cache-control: public, max-age=31536000
age: 521202
last-modified: Wed, 23 Apr 2025 16:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers