Report Overview

  1. Submitted URL

    redir.tealwinds.xyz/click/invalid/?tid=4&subid=4&s1=638b09acb8cba8539457930d

  2. IP

    198.211.113.186

    ASN

    #14061 DIGITALOCEAN-ASN

  3. Submitted

    2022-12-03 08:33:14

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
setupquickoverlyinfo-file.infounknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
redir.tealwinds.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
ron.trffclb.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
1d5e051bc65.traffic-c.com9225370001-01-01T00:00:00Z0001-01-01T00:00:00Z
popmyads.com441340001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
samba.trffclb.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
brko.admobe.com6432950001-01-01T00:00:00Z0001-01-01T00:00:00Z
startd0wnload22x.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
leche.labtrffc.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
prpops.com1230900001-01-01T00:00:00Z0001-01-01T00:00:00Z
track.gositego.liveunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
youfilesgoo.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sectigo.com4870001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
pdxx-7fmavzpxk2xlm-4-2.lowsea.fununknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumtrffclb.comSinkholed
mediumtrffclb.comSinkholed
mediumtrffclb.comSinkholed
mediumtrffclb.comSinkholed

JavaScript (181)

HTTP Transactions (51)

URLIPResponseSize
redir.tealwinds.xyz/click/invalid/?tid=4&subid=4&s1=638b09acb8cba8539457930d
198.211.113.186302 Found230 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
leche.labtrffc.com/p.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240?s=nxs_4
51.83.143.92302 Found0 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
pdxx-7fmavzpxk2xlm-4-2.lowsea.fun/emw/v1/dt?sid=888b&k=bfb&url=&xrw=&lid=638b09c0a95fcd62606ff008&fid=888fb
5.161.78.177307 Temporary Redirect164 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
ron.trffclb.com/a.php?p=c:7omnig4vw718godha&d=6213b4b0ff85982fd6331e4b&s=888b
51.83.143.92200 OK158 B
push.services.mozilla.com/
44.236.232.139101 Switching Protocols0 B
samba.trffclb.com/l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888b
51.83.143.92200 OK494 B
samba.trffclb.com/l.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int_888b&bv=1
51.83.143.92302 Found0 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
samba.trffclb.com/favicon.ico
51.83.143.92200 OK20 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
prpops.com/p/sjbi/direct/t:0646614100
131.153.42.229200 OK18 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e765102-d7b9-4765-a166-db04ae6113bc.jpeg
34.120.237.76200 OK11 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg
34.120.237.76200 OK9.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
34.120.237.76200 OK2.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F231cb69d-ef31-41ab-9446-6cfaebcbc544.webp
34.120.237.76200 OK7.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59297fb7-bcb3-48eb-83b5-7d264b21c3db.jpeg
34.120.237.76200 OK8.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8498f68-55a6-46be-9eb1-671b7a90a148.jpeg
34.120.237.76200 OK3.3 kB
prpops.com/p/sjbi/direct/t:0646614100?prc_c=1670056385&prc_r=eyJIVFRQX1VTRVJfQUdFTlQiOiJNb3ppbGxhXC81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTA1LjApIEdlY2tvXC8yMDEwMDEwMSBGaXJlZm94XC8xMDUuMCJ9&prc_h=dd469e0deff43b7c03b2ef00d79357963c04cc26810e1cb27d3595621f062baf&pr_tsid=7ce8d24bb7ad08675246aef3c6ef617ffed22f059070730830c7500db2ad8c61&pr_tsids=ee13e3c924498e838be7c6f0bf0801924ced973c9478c6bc08e847c2c3338787
131.153.42.229302 Found0 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
brko.admobe.com/gsdagsdag/gsdagasd/?utm_source=1080&utm_campaign=11211032&clck=5x44sj2l2e9up0vtuktkocwkk,16543791,5,4554&sid=4554
107.20.106.95302 Moved Temporarily142 B
setupquickoverlyinfo-file.info/9BaxiKa8EtMjAz18K1VAan2_7M3GZ_Wm9s9fRF_5dmc?clck=5x44sj2l2e9up0vtuktkocwkk,16543791,5,4554&sid=4554
3.226.146.143302 Moved Temporarily142 B
ocsp.sectigo.com/
104.18.32.68200 OK471 B
track.gositego.live/click?pid=3664&offer_id=17742&sub1=BNv2iYjfMFxKjlrZ6eV9til2_fadTvgp&sub2=5vv5
34.141.179.97200 OK714 B
startd0wnload22x.com/GcrKe5df719a4160df814a97c81d2d8cf908b45f4a921?q=&s1=3664_5vv5&s3=638b09c489833e0001c64884
188.72.236.34200 OK5.2 kB
youfilesgoo.com//file.zip?c=AMUJi2OsJwUA_koCAE5PFwAMAE_eMpQA
188.114.97.1200 OK1.1 kB
startd0wnload22x.com/favicon.ico
188.72.236.34200 OK43 B
youfilesgoo.com//css/style.css
188.114.97.1200 OK1.1 kB
youfilesgoo.com//images/download-folder.png
188.114.97.1200 OK5.7 kB
youfilesgoo.com//images/notice.png
188.114.97.1200 OK506 B
youfilesgoo.com//images/copy.png
188.114.97.1200 OK330 B
youfilesgoo.com//images/arrow_down.png
188.114.97.1200 OK231 B
youfilesgoo.com//images/arrow_success.png
188.114.97.1200 OK219 B
youfilesgoo.com/favicon.ico
188.114.97.1404 Not Found250 B
1d5e051bc65.traffic-c.com/?p=4554&media_type=mainstream&pi=04_MS_DP_TrafficCompany_cert&click_id=10a9c52e5a86a4d6865bdb58f45e18d33480eb5e45b1f10faf7fe8dd0aa462dc&sub_id=7753721&transaction_id=S26571558
94.237.99.118200 OK0 B
popmyads.com/serve/52264/64661/szqpmqqoapdpgpq/aHR0cDovL3RyYWZmaXgxMy5jb20=
104.21.54.194200 OK0 B