Report Overview

  1. Submitted URL

    adserver5c.bar/?sdomain=darksquestiongroup.de&srootdomain=darksquestiongroup.de&stld=de&s=6&t=o

  2. IP

    172.67.143.102

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-11-26 09:48:39

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
xoaald.prodlgiousdates.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
adserver5c.barunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn-dimi.akamaized.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
zerossl.ocsp.sectigo.com40490001-01-01T00:00:00Z0001-01-01T00:00:00Z
trk.adserver5z1.barunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumxoaald.prodlgiousdates.com/ortbPhishing
mediumxoaald.prodlgiousdates.com/js/pushjs/1.0.0/utils.jsPhishing
mediumxoaald.prodlgiousdates.com/js/service-worker.jsPhishing
mediumxoaald.prodlgiousdates.com/js/pushjs/1.0.0/subscriber.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (21)

HTTP Transactions (78)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
adserver5c.bar/?sdomain=darksquestiongroup.de&srootdomain=darksquestiongroup.de&stld=de&s=6&t=o
104.21.39.52200 OK492 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
push.services.mozilla.com/
54.149.83.187101 Switching Protocols0 B
trk.adserver5z1.bar/6375cd8620b4e600019a6353?tld=de&domain=darksquestiongroup.de&rootdomain=darksquestiongroup.de&s=6&l=&t=o
85.17.54.17302 Found160 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
zerossl.ocsp.sectigo.com/
172.64.155.188200 OK727 B
cdn-dimi.akamaized.net/landings/277113/1669379644/css/popup.css?1669379644
184.31.15.107200 OK593 B
cdn-dimi.akamaized.net/landings/277113/1669379644/css/timer.css?1669379644
184.31.15.107200 OK706 B
cdn-dimi.akamaized.net/landings/277113/1669379644/css/style.css?1669379644
184.31.15.107200 OK2.8 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/css/reviews.css?1669379644
184.31.15.107200 OK1.1 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/js/jquery.validate.min.js?1669379644
184.31.15.107200 OK7.8 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/js/jquery-2.2.4.min.js?1669379644
184.31.15.107200 OK30 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/js/translates-review.js?1669379644
184.31.15.107200 OK14 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/js/translates.js?1669379644
184.31.15.107200 OK30 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/js/title_tanslate.js?1669379644
184.31.15.107200 OK1.3 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/js/timer.js?1669379644
184.31.15.107200 OK903 B
cdn-dimi.akamaized.net/landings/277113/1669379644/js/translate-popup-timer.js?1669379644
184.31.15.107200 OK1.1 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/blocked-icon.png
184.31.15.107200 OK502 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/logo_inst3.svg
184.31.15.107200 OK7.0 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/110010_4.jpg
184.31.15.107200 OK55 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/3-eu.png
184.31.15.107200 OK15 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/unlock.svg
184.31.15.107200 OK2.4 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-city.svg
184.31.15.107200 OK839 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/password.svg
184.31.15.107200 OK1.3 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/shield.svg
184.31.15.107200 OK1.5 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-message.svg
184.31.15.107200 OK883 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/5-eu.png
184.31.15.107200 OK15 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/1-eu.png
184.31.15.107200 OK16 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-flag.svg
184.31.15.107200 OK658 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-direct.svg
184.31.15.107200 OK1.1 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/4-eu.png
184.31.15.107200 OK16 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/8-eu.png
184.31.15.107200 OK14 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/6-eu.png
184.31.15.107200 OK14 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/7-eu.png
184.31.15.107200 OK16 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-like2.svg
184.31.15.107200 OK473 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/2-eu.png
184.31.15.107200 OK14 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-home.svg
184.31.15.107200 OK889 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-search.svg
184.31.15.107200 OK1.2 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-plus.svg
184.31.15.107200 OK1.1 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-like.svg
184.31.15.107200 OK914 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/icon-user.svg
184.31.15.107200 OK844 B
cdn-dimi.akamaized.net/landings/277113/1669379644/images/shutterstock_751200268_web_2.png
184.31.15.107200 OK95 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/shutterstock_1549109471_web_b.png
184.31.15.107200 OK87 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
xoaald.prodlgiousdates.com/ortb
52.19.101.114200 OK13 B
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
216.58.207.195200 OK38 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2
216.58.207.195200 OK17 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88ca6be9-2485-4243-a3fe-1e61449736dd.jpeg
34.120.237.76200 OK6.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK4.3 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
34.120.237.76200 OK3.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
34.120.237.76200 OK9.9 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
34.120.237.76200 OK9.0 kB
cdn-dimi.akamaized.net/landings/277113/1669379644/images/favicon.png?t=20221126094830
184.31.15.107200 OK4.1 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
34.120.237.76200 OK8.9 kB
www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
142.250.74.163200 OK10 kB
www.gstatic.com/firebasejs/5.0.2/firebase-app.js
142.250.74.163200 OK8.6 kB
xoaald.prodlgiousdates.com/js/pushjs/1.0.0/utils.js
52.19.101.114200 OK0 B
xoaald.prodlgiousdates.com/js/service-worker.js
52.19.101.114200 OK0 B
xoaald.prodlgiousdates.com/c/da57dc555e50572d?s1=156428&s2=1428285&s3=bt_o&click_id=6381e0edf2b249000157da01&j1=1
52.19.101.114200 OK0 B
fonts.googleapis.com/css2?family=Inter:wght@400;700&display=swap
142.250.74.10200 OK0 B
xoaald.prodlgiousdates.com/js/pushjs/1.0.0/subscriber.js
52.19.101.114200 OK0 B