Report Overview

  1. Submitted URL

    1duw3e.csb.app/?tp=ZWxpbmEuaGFtaWx0b25Ac29sYXJ3aW5kcy5jb20=

  2. IP

    104.18.36.245

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-11-09 19:37:39

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
1duw3e.csb.appunknown2022-09-21T23:03:37Z2023-03-02T08:23:04Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-10T05:09:10Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-10T05:10:00Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-10T05:10:00Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-10T13:49:44Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-10T05:12:35Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-10T05:10:02Z
codesandbox.io954922017-04-04T08:52:33Z2023-03-10T14:26:44Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-10T05:10:04Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
medium1duw3e.csb.app/?tp=ZWxpbmEuaGFtaWx0b25Ac29sYXJ3aW5kcy5jb20=Phishing
medium1duw3e.csb.app/?tp=ZWxpbmEuaGFtaWx0b25Ac29sYXJ3aW5kcy5jb20=Phishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (13)

HTTP Transactions (44)

URLIPResponseSize
1duw3e.csb.app/?tp=ZWxpbmEuaGFtaWx0b25Ac29sYXJ3aW5kcy5jb20=
172.64.151.11301 Moved Permanently169 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
push.services.mozilla.com/
35.163.147.190101 Switching Protocols0 B
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221668019981644%22
34.102.187.140200 OK22 kB
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1667932641019&_since=%221666204638208%22
34.102.187.140200 OK5.5 kB
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-09-20-34-00.chain
34.160.144.191200 OK5.3 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1667952065578&_since=%221666483264567%22
34.102.187.140200 OK50 kB
codesandbox.io/api/v1/sandboxes/1duw3e
172.64.144.239200 OK0 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1667928321071&_since=%221666279968541%22
34.102.187.140200 OK12 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
34.102.187.140200 OK1.7 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1667225520937&_since=%221657747510534%22
34.102.187.140200 OK1.3 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
34.102.187.140200 OK369 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84109408-bbc7-4166-8974-df4b4fbbf1c1.jpeg
34.120.237.76200 OK6.3 kB
codesandbox.io/static/js/common-sandbox.2744d008e.chunk.js
172.64.144.239200 OK91 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg
34.120.237.76200 OK4.7 kB
codesandbox.io/static/js/vendors~app~embed~sandbox~sandbox-startup.036d91db5.chunk.js
172.64.144.239200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff66bafec-6420-4aea-8b22-96b8fe0d292b.jpeg
34.120.237.76200 OK8.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
34.120.237.76200 OK10 kB
codesandbox.io/static/js/vendors~app~codemirror-editor~monaco-editor~sandbox.5ca13c344.chunk.js
172.64.144.239200 OK0 B
codesandbox.io/static/js/vendors~app~sandbox.49a2d4732.chunk.js
172.64.144.239200 OK0 B
codesandbox.io/static/js/sandbox-startup.5de91da88.js
172.64.144.239200 OK0 B
codesandbox.io/static/js/default~app~embed~sandbox.f5bf8b037.chunk.js
172.64.144.239200 OK0 B
codesandbox.io/static/js/vendors~app~embed~sandbox-startup.6e3433fd3.chunk.js
172.64.144.239200 OK0 B
codesandbox.io/static/js/sandbox.324408f83.js
172.64.144.239200 OK0 B
codesandbox.io/static/browserfs12/browserfs.min.js
172.64.144.239200 OK0 B
codesandbox.io/static/js/default~app~embed~sandbox~sandbox-startup.09057cebf.chunk.js
172.64.144.239200 OK0 B
codesandbox.io/static/js/vendors~sandbox.aefe8771e.chunk.js
172.64.144.239200 OK0 B
1duw3e.csb.app/?tp=ZWxpbmEuaGFtaWx0b25Ac29sYXJ3aW5kcy5jb20=
104.18.36.245200 OK0 B