Report Overview

  1. Submitted URL

    qv.ag/oqkjMU

  2. IP

    172.67.223.96

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-12-06 05:05:15

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.facebook.com990001-01-01T00:00:00Z0001-01-01T00:00:00Z
qv.agunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
secure.clicktaphoverpush.monsterunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
connect.facebook.net1390001-01-01T00:00:00Z0001-01-01T00:00:00Z
maxcdn.bootstrapcdn.com7240001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
tu01.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
app.logictree.co4062730001-01-01T00:00:00Z0001-01-01T00:00:00Z
trk-consulatu.com246950001-01-01T00:00:00Z0001-01-01T00:00:00Z
apidata.info3982990001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ajax.googleapis.com129050001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumqv.ag/oqkjMUPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (32)

HTTP Transactions (47)

URLIPResponseSize
qv.ag/oqkjMU
104.21.70.116302 Found0 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
e1.o.lencr.org/
95.101.11.115200 OK346 B
e1.o.lencr.org/
95.101.11.115200 OK346 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js
172.217.21.170200 OK34 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
push.services.mozilla.com/
54.186.117.16101 Switching Protocols0 B
app.logictree.co/af398655-aba0-440c-8dc9-50bd7c0fba4d?s6=6&s7=TINY&spushon=y
18.158.88.249302 Found0 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
secure.clicktaphoverpush.monster/lp/redirect/mred5/?vsv=UTS&vl=1&vlink=app.logictree.co&bb=1&model=Desktop&brand=Desktop&isp=Blix%20Group%20AS&city=Oslo&country=NO&spushon=y&spushid=xd&cep=Wuk4Opfe0sbuZGlLISxff5GtveBk2xjWHtnDbspE0bb7zVRn82bAgilryTIDEFwEX0049YEJ4xF1hqr1cCUOJX_NdGzAKpT5xXJxX9WmbjWkLiPDG9EDU8Ab-j9IaNg9J8vb7ShvYAnes3pi0JexLxkPS5dhQgrSm2SUYY-npL9lkoBdnYw3PxH3LBKqG2MTV9JvpJ-j4-PzaWoNaKMj_-VUnQlEoIU4JfrZE6h_uEs1iuOI4tRvc-pdQ2mfmpexoM7erWd8ahxQaP5f8fKUrUYi0OSBIINxZA48QwiD-ZK3ppPlngXx4BmhRElLrveuUbAYc0AcikYh7Nj8GUzHknGxD1eNwL_4tJOsjdSz5wd9nWunojy1_K7TFpGFRVNLyPqSxKdvOtNzkIGcWrohYJ62ebohUF7Ee2kvcY1N6sM&lptoken=1646703330ee4969058b&s6=6&s7=TINY
188.114.96.1200 OK3.5 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK3.1 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
172.217.21.170200 OK34 kB
ocsp.digicert.com/
93.184.220.29200 OK279 B
ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
172.217.21.170200 OK34 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
connect.facebook.net/en_US/sdk.js
31.13.72.12200 OK1.7 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffbcb6f9-483c-4254-9451-927fa2fc2294.jpeg
34.120.237.76200 OK4.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
34.120.237.76200 OK6.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faeae6973-c3cb-4597-8dcc-f36e4cd35fda.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1b8c21-bea6-4053-8dea-90393eea45b7.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg
34.120.237.76200 OK8.7 kB
connect.facebook.net/en_US/sdk.js?hash=3d81b940706dad38a570817ae37d94c3
31.13.72.12200 OK87 kB
app.logictree.co/d/.js?lpref=https%3A%2F%2Ftu01.net%2F&lpurl=https%3A%2F%2Fsecure.clicktaphoverpush.monster%2Flp%2Fredirect%2Fmred5%2F%3Fvsv%3DUTS%26vl%3D1%26vlink%3Dapp.logictree.co%26bb%3D1%26model%3DDesktop%26brand%3DDesktop%26isp%3DBlix%2520Group%2520AS%26city%3DOslo%26country%3DNO%26spushon%3Dy%26spushid%3Dxd%26cep%3DWuk4Opfe0sbuZGlLISxff5GtveBk2xjWHtnDbspE0bb7zVRn82bAgilryTIDEFwEX0049YEJ4xF1hqr1cCUOJX_NdGzAKpT5xXJxX9WmbjWkLiPDG9EDU8Ab-j9IaNg9J8vb7ShvYAnes3pi0JexLxkPS5dhQgrSm2SUYY-npL9lkoBdnYw3PxH3LBKqG2MTV9JvpJ-j4-PzaWoNaKMj_-VUnQlEoIU4JfrZE6h_uEs1iuOI4tRvc-pdQ2mfmpexoM7erWd8ahxQaP5f8fKUrUYi0OSBIINxZA48QwiD-ZK3ppPlngXx4BmhRElLrveuUbAYc0AcikYh7Nj8GUzHknGxD1eNwL_4tJOsjdSz5wd9nWunojy1_K7TFpGFRVNLyPqSxKdvOtNzkIGcWrohYJ62ebohUF7Ee2kvcY1N6sM%26lptoken%3D1646703330ee4969058b%26s6%3D6%26s7%3DTINY&lpt=You%27ve%20got%20(1)...&vtm=1670303103526
18.158.88.249200 OK3.2 kB
maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css
104.18.11.207200 OK0 B
fonts.googleapis.com/css2?family=Lato:wght@400;700;700i&display=swap
142.250.74.106400 Bad Request0 B
trk-consulatu.com/scripts/push/script/z0grz0mex9?url=secure.clicktaphoverpush.monster&alturl=/lp/redirect/mred5/
172.64.206.35200 OK0 B
www.facebook.com/v8.0/plugins/share_button.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1619197cdc6476%26domain%3Dsecure.clicktaphoverpush.monster%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fsecure.clicktaphoverpush.monster%252Ff19e67b54ed4a84%26relation%3Dparent.parent&container_width=1264&href=https%3A%2F%2Fsecure.recoveringcasesupdate.site%2Flp%2Fredirect%2Fmred5%2F&layout=button&locale=en_US&sdk=joey&size=large
31.13.72.36200 OK0 B
tu01.net/l/?s6=6&s7=TINY
172.67.195.56200 OK0 B
apidata.info/js
172.67.149.37200 OK0 B