Report Overview

  1. Submitted URL

    exe.io/EJYyq

  2. IP

    172.67.71.40

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-09-11 05:00:31

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
pogothere.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
d31ph8fftb4r3x.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
tzegilo.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
lcreatessque.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
accounts.google.com810001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
my.rtmark.net90540001-01-01T00:00:00Z0001-01-01T00:00:00Z
fleraprt.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
nh.eugeniecor.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
pectthatmye.shopunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
in-page-push.com678770001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google-analytics.com400001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
exe.appunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdnjs.cloudflare.com2350001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
exe.io1544010001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sectigo.com4870001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumfleraprt.comSinkholed

Files detected

  1. URL

    my.rtmark.net/gid.js

  2. IP

    139.45.195.8

  3. ASN

    #9002 RETN Limited

  1. File type

    gzip compressed data, max compression\012- data

    Size

    872 B (872 bytes)

  2. Hash

    cba7163d60e8e457c8f761a1e769dc3b

    1518d591704eb51347fa6550b296b64edbaffe2a

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (19)

HTTP Transactions (73)

URLIPResponseSize
exe.io/EJYyq
172.67.71.40301 Moved Permanently0 B
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK42 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
www.googletagmanager.com/gtag/js?id=UA-135952122-1
142.250.74.72200 OK42 kB
nh.eugeniecor.com/1clkn/29529
23.109.82.147200 OK26 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
e1.o.lencr.org/
23.33.119.27200 OK345 B
e1.o.lencr.org/
23.33.119.27200 OK345 B
e1.o.lencr.org/
23.33.119.27200 OK346 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK329 B
pectthatmye.shop/utx?cb=YrUNwJ6bFi2C&top=exe.app&tid=822524
65.9.44.24204 No Content0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
e1.o.lencr.org/
23.33.119.27200 OK345 B
pectthatmye.shop/cnA4eTYTElsUCRNNWl9DABwFXAQ0VQo/UkFBSBEOFBZMGwIAQ0BXVR4fTR1QAB9WDRgcFUxcBDQ2XDFgHyFtEm41F18XUhUxWzhYCghqElImEwtIZToIbQx8BSJxOkwBHnk6ByU+Qkx1Pwp5LHskOXoxdSRAaj97OTl7GmIhNXkSfAoUcS8EER99O1IQFG9BdzAhUwhSMyl+PF8RR34BVSI6QUhlMzFcQXwwA2g9T0Icfi90JzILAVcgJXYDUyQHdi8FMANqA1I2EwsSbzoxX0l7JDZwL1weCGkQRiMUbwF+PEB2A1MjKXwoBTs5bCx4OxNvO2QgQRUgWz4yWxx1JSIPNF0WJ1sxWjcifiNBEDViP3cxFw88ZD86dy5ONT0JQAUoQGotc0EIDF9cAR9WCQsfClYNbkIGT09wJCVA
65.9.44.24200 OK1.2 kB
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK45 kB
fonts.gstatic.com/s/opensans/v34/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
142.250.74.163200 OK18 kB
pogothere.xyz/asd100.bin
188.114.97.1200 OK104 kB
pectthatmye.shop/cDZhZEIRVAIJfRELA0I3AlpcQXA2E1MiJkMHEQx6FlAVBnYCBRlKIRxZFAAkAlkPEGweUxVBcDYHADMuJlcmAwkyXBIrFAgGICkUJmc5MjIebg0IEjFPOCwAGFo0Izs5dSYNAyF9MwggJ2EsCggaWQ8HOgdlJTIQHGIGNQsyTCsyFhdBKSouJmw1EyUIdQ0yJiRPIC4UIWcmKDU1cyM1KgdhCFEhIgQ3KhUcWiMoFBxsNSItKGI3FBgyYhYjCiJwLD5zF2c0Mno7bg0cDydeBSoVHF0DLXJBVCoiABpkDQwDJHEFPQYHQSo0JRR4Nh17HmEnCBgnYUw2GydjGQYYIQIjIzUHTCMcAD1hGSoQKF0FPiEIBzczA1ZcEgssAAsvLigDfyQlM0IGVysMI3g
65.9.44.24200 OK1.2 kB
lcreatessque.xyz/ZDJEb3lLDSccRCpqEhodMHMAPkgIfAYINyNldAw6IGcWOCslVWIbEAAPfF1LUQBwSQkNVnleXxdGJRsMFw91SRAKVCtSXxIPdUFKUBx2V1dVFDFSSEJGNA4eWQNiHw0QXnleT1IAfFhLUAN0X0tW
104.21.81.70204 No Content0 B
cdnjs.cloudflare.com/ajax/libs/fuckadblock/3.2.1/fuckadblock.min.js
104.17.24.14200 OK1.3 kB
pogothere.xyz/
188.114.97.1200 OK29 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
lcreatessque.xyz/Q1E4ejJsblsJDxo8XA1/BGBqIgISFmAWViUDaRJrFT1uMnEFZR4OWydsAEILd2gMXEIqNQVLFDAlWQ5HMGwJXFstN1dHFDVsCVQBd38KQhxyd01HA2UlSBtVfmAeCkY3PQVLBHVjAE0Ad2AISgt0
104.21.81.70204 No Content0 B
lcreatessque.xyz/YkN1UkpNfBYhdzRwNwAcNXoZACc4MCIVECEiIhAoO3MjOhNTd1MmIwZ+TWZ5UHVEdDoLJ0hjckQwATM+FzBIY2wLLRM9d0Q1SGNkUm1EfHlENkhjbBYzFDV3U2UFJj4OfkRkfFB7QmB+U3NEY38
104.21.81.70204 No Content0 B
www.googletagmanager.com/gtag/js
142.250.74.72200 OK36 kB
lcreatessque.xyz/TVl5elpiZhoJZy5rIz87Chc4LGkpPS4RAB49LxIIHmgjSg0hHF8OMylkQUhoeGtNXCokPURLfD4tGA4vPmRKXDMjPxZHOSEwGhF8O2RIVGl5d0tCdHx/DEdray0JGz1waF8KLjk1REtse2tBTWh5aElLYnQ
104.21.81.70204 No Content0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
e1.o.lencr.org/
23.33.119.27200 OK346 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
push.services.mozilla.com/
34.213.92.18101 Switching Protocols0 B
www.google-analytics.com/analytics.js
142.250.74.174200 OK20 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
d31ph8fftb4r3x.cloudfront.net/wdkxYeEgVIzYedwIlPEVwTnVsQXxQJisXJgZxMA0rHyoJAD0vITlIbgI2PEV4UCA5Fi9Laj0WK0t9fhksFHFsXjwGIzNFOgY4PgorFCU+HG4DLWUVJwwlNBQpU34eTWZGaWpIYA59aV17NGlqSCQfIi0AbUR8IEB+KXpsXXs0aWpIOgBpazlxQGJoUW1EfD-8dKx0jfUoORHxpSHhHfGldekYqMQotECMgXXowdW5WeFA5ZUk
54.230.245.208200 OK621 B
d31ph8fftb4r3x.cloudfront.net/1aWlVaGgKBjsOVx0AMVVQXVpnXllPAyYHBhlUGyICGiAQKRlbWWMnJjoncxwSDVRlTgQIBzJVTgwHNlVZTwgxClVdTyAJVQQGLwEEBQhwWi5cR2VNWllBLVlZTFoXTVpZBTwGHRFMZ1gQUV8KXlxMWhdNWlkbI01bKFBjRlhATGdYDwwKPgdNWy9nWFlZWW-RYWUxbZQ4BGwwzBxBMWxNRXkdZcx1VWA
54.230.245.208200 OK188 B
in-page-push.com/400/3230648
139.45.197.15200 OK32 kB
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
216.58.207.237302 Found391 B
d31ph8fftb4r3x.cloudfront.net/FdHVmQUkXGggndgAcAnxxRkdTc31SHxUuJwRICzsnAC1WNz5CMzAUMVIBHCV0RFMKICcTSEAkJxdIV2coEBdbdW8ABQkqdAYFEic7FxcPJy1SAAd8JBsPDy0lFVBUB3xaRUNzeVwNV3BsRzdDc3kYHAg0MVFHVjlxQipQdWxHN0NzeQYDQ3IITUNIcWBRR1-YmLBceCWR7MkdWcHlERFZwbEZFACg7ERMJOWxGM193Z0RTE3x4
54.230.245.208200 OK525 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
157.240.200.35200 OK3.1 kB
my.rtmark.net/gid.js
139.45.195.8200 OK872 B
ocsp.sectigo.com/
104.18.32.68200 OK472 B
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
139.45.195.254200 OK12 B
in-page-push.com/500/3230648?excludes=&oaid=d3dc63d51df24529a522321e563ff324&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=898&wfc=2&pl=https%3A%2F%2Fexe.app%2FEJYyq&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
139.45.197.15200 OK0 B
ocsp.digicert.com/
93.184.220.29200 OK280 B
in-page-push.com/500/3230648?excludes=&oaid=d3dc63d51df24529a522321e563ff324&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=898&wfc=2&pl=https%3A%2F%2Fexe.app%2FEJYyq&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
139.45.197.15200 OK67 kB
in-page-push.com/impression/88xAvPQPXvPu7KOAtV-Klp9FAoM-6W6TmnxMsXJyBvsBfnH7qt0paL_1N6lZNkZAmu0y83MaMDXU76uz_uD5Z8--0aWpB5Tj6YxoucOmgEyheFMtYh5xy4fpzh8YDb8EjxtwK9kI1k67j5_iGJ_Tq6EfUVaeLt-PAzFnW5X3CE297HTJBiKHdUH0b3jDbWjh48SBD6E1dkWyRBC65V0v7sIUVTQgoF9CYDfYn_X02OhWe13VQ3w8zJqLBK_lYBnaGcgiw0SY14HQTdxo-VEeRtNeFNWKDX_4FBI9GPmgtmpQRSyLPk3A_M2iq9XSJdEfA_94_rY5Ln7NmAL6bufq0MzZPeyp1WjA57Zfww2Yiag78mVUaVZZqzoS5YtBWyjNqlRyxgk1hCJu4KGBeiUN2FRrr1MTnu9GqLSxqdyiqmWkvljXj94aTdozTeKCy8kXY5uTYLn_dNyctJkL6tVXQ-WAIvHfMBbgD2YE7QpA-NICU4x2r9R2LloYnqATIRJzzh62KpYFjv2VY9DHY46Xiyz3Uf881F-n?_z=3230648&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=898&wfc=2&pl=https%3A%2F%2Fexe.app%2FEJYyq&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false
139.45.197.15200 OK43 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3d8bcb1-416c-44eb-ac9e-6196bed61280.jpeg
34.120.237.76200 OK8.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8092dc3d-1f2d-4e22-b40a-bf1c53ea42e6.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F575cbeea-0492-4077-860e-f45cbde03214.jpeg
34.120.237.76200 OK20 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc91b46a1-040b-46aa-a7a1-af67f0058b83.jpeg
34.120.237.76200 OK7.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a259cc7-2536-471f-9418-7af13fd48fcb.jpeg
34.120.237.76200 OK7.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e82f3ab-3fe6-43bc-932c-936ec582e5cf.jpeg
34.120.237.76200 OK7.0 kB
pogothere.xyz/
188.114.97.1200 OK0 B
tzegilo.com/stattag.js
104.21.22.169200 OK0 B
pogothere.xyz/asd100.bin
188.114.97.1200 OK0 B
exe.io/EJYyq
172.67.71.40302 Found0 B
exe.app/EJYyq
172.67.136.149200 OK0 B
fonts.googleapis.com/css?family=Open+Sans:300,400,400italic,600,700
142.250.74.10200 OK0 B