Report - lygygin.com/SmfoZ/login.php/

Report Overview

Submitted URL
lygygin.com/SmfoZ/login.php/
IP
45.33.30.197
ASN
#63949 Linode, LLC
Submitted
2023-06-03 00:23:17
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lygygin.com	unknown	2022-06-10	2012-10-12	2023-06-02	2.4 kB	2.0 kB	45.56.79.23
www1.lygygin.com	unknown	2022-06-10	2023-04-26	2023-06-02	1.7 kB	7.8 kB	76.223.26.96
www.google.com	7	1997-09-15	2015-05-10	2023-06-02	338 B	55 kB	142.250.74.132
d38psrni17bvxu.cloudfront.net	unknown	2008-04-25	2022-09-22	2023-06-02	398 B	12 kB	54.230.245.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com

Quad9 DNS

Scan Date	Severity	Indicator
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com
2023-06-03	medium	lygygin.com

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	968 B	2023-03-08	2024-04-18
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:24:08 Last Seen2024-04-18 22:52:44 Times Seen27677 Hash c77554570ae0fa8e4fb31747dc213058 e989fbde07e6a68975c7a31e1d4df76afd90b96f c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77 Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	719 B	2023-06-03	2023-06-03
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-03 02:23:17 Last Seen2023-06-03 02:23:17 Times Seen1 Hash 912e860468fb10084507b7adc6cc4ced 0463d6538d7feca360cb443670b6f1e865011c3c c90bfb0ca1123f3cf4471596059a4434e9d227684f5c5d0837ab970b9ef6ad7a Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	246 B	2023-06-03	2023-06-03
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-03 02:23:17 Last Seen2023-06-03 02:23:17 Times Seen1 Hash 39666c5c806e5ad0f4f1c211c7f093c5 da826bdf89e4dec4e634bc3b2ae53de14188ab80 e88e25e0183caf1af204ba3a505e425a86a94f5bed621e0390a3aa1f72b9108a Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	7.0 kB	2023-03-13	2024-01-03
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 06:10:31 Last Seen2024-01-03 14:22:39 Times Seen25920 Hash 04b2b624f94797c26d17a57f399d9356 3143986e839c47a5c1eff03bd9df63ecc54dca9c 233b1cbfb295a0629bcf68a2a4198a62132f02ee1f061ada2ce7143bd5d2dabb Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	1.2 kB	2023-06-03	2023-06-03
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-03 02:23:17 Last Seen2023-06-03 02:23:17 Times Seen1 Hash 85cc60d87f637fb91be21994fabf3d6b 61888d7f6f5f823a6819b83b31e5278be1769d96 9bb4c69c5a955d78d5d2882ab32efb7adf48f0741be24e1875aa62194fc56342 Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	29 B	2023-03-12	2024-01-03
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 12:56:36 Last Seen2024-01-03 12:53:29 Times Seen10974 Hash 5405126a58d646a09ad6d154c5d3a335 9e64f2a4ee55fef112fbd9654e76e8eabb751e28 76229fdaf8e9553878811c30cf5305bd2dab82248d0054d3fb2e760b35f32154 Loading...

	www.google.com/adsense/domains/caf.js?abp=1	148 kB	2023-06-01	2023-06-05
Pretty URL www.google.com/adsense/domains/caf.js?abp=1 IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-01 03:02:51 Last Seen2023-06-05 03:42:14 Times Seen18 Hash 2bf8734b5c298ee69bc64e1e9c2b7956 e1ca8b328d6ea1a4aed6914a692b973d947e0536 b88dde71c386028e8f8141ae1e917a2a554e1eb608d80a06636f7803500fa303 Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	65 B	2023-04-26	2023-06-14
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-26 08:12:50 Last Seen2023-06-14 17:03:12 Times Seen3080 Hash 88509ad33225897bf131e892ee5c9f35 0f2aa7edc79aad77334a6d25e193d9d63f546bec c74f823d97f995f1209cb84aeed9653cca3b2f90c308d9dff3e135250c6c8974 Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	472 B	2023-03-13	2024-01-03
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 06:13:46 Last Seen2024-01-03 14:22:39 Times Seen25251 Hash d31eefc1e54bdae9204297e4ae5b9cce fc49bf319586a623670a81c01d43bbd93b477fbb 2683a6247a15433dd269eaefbc7131b1326c7bc0146361913ea10ad8fa23bb14 Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	669 B	2023-06-03	2023-06-03
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-03 02:23:17 Last Seen2023-06-03 02:23:17 Times Seen1 Hash 49fb0637b1a0504b8b97eb1241796d77 7b9f6b064d3254bb3beb7ebfd3bc8aadb9fd13fe 075f1cbf53941f74bcf8e9584f032fefb6c797b8ddfe452f50f3ab5b08b89187 Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	40 B	2023-04-18	2023-06-27
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-18 09:10:37 Last Seen2023-06-27 14:44:07 Times Seen10821 Hash bcdb5f35f5da29644017c63a72a72921 5bd1c81154b546c01c88b02fdb29b687f0c9cef3 a71d2bc0274b66fc2cb2c8daf1bf8b8a6a4cbfd5bd1e30574e9abb61aa9c3983 Loading...

	www1.lygygin.com/?tm=1&subid4=1685751780.0348480000	71 B	2023-03-08	2024-01-04
Pretty URL www1.lygygin.com/?tm=1&subid4=1685751780.0348480000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:23:53 Last Seen2024-01-04 08:38:22 Times Seen25410 Hash 1a5a5e1b6a26f57b95e3dd42f60612f4 b62a27e55a59b49084e682bd3c1588f6a40881ab 4066da16910907c7962da8e7011bf0cd62b6f2dcddb1911e3ea2de03ce3e1dc7 Loading...

HTTP Transactions (10)

URL IP Response Size

lygygin.com/SmfoZ/login.php/

45.56.79.23

0 B

URL
lygygin.com/SmfoZ/login.php/
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /SmfoZ/login.php/ HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
content-length: 0
location: http://lygygin.com/SmfoZ/login.php/
cache-control: no-cache
set-cookie: mtmssl=1; path=/;

lygygin.com/SmfoZ/login.php/

198.58.118.167

560 B

URL
lygygin.com/SmfoZ/login.php/
IP
198.58.118.167:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (333)
Size
560 B (560 bytes)
Hash
31475e405e0ba96aef5f78c7feab5d35
a645e791710019539078d149a0c2cc35720295f9
9e64969e4044b8474d06fb8d889aa0cad5a0b4524120bec285fc7d06fe5c67e6

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /SmfoZ/login.php/ HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: mtmssl=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Sat, 03 Jun 2023 00:22:59 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

lygygin.com/SmfoZ/login.php?gp=1&js=1&uuid=1685751779.0043265290&other_args=eyJ1cmkiOiAiL1NtZm9aL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.56.79.23

0 B

URL
lygygin.com/SmfoZ/login.php?gp=1&js=1&uuid=1685751779.0043265290&other_args=eyJ1cmkiOiAiL1NtZm9aL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.56.79.23:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /SmfoZ/login.php?gp=1&js=1&uuid=1685751779.0043265290&other_args=eyJ1cmkiOiAiL1NtZm9aL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lygygin.com/SmfoZ/login.php/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: mtmssl=1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
content-length: 0
location: http://lygygin.com/SmfoZ/login.php?gp=1&js=1&uuid=1685751779.0043265290&other_args=eyJ1cmkiOiAiL1NtZm9aL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
cache-control: no-cache
set-cookie: mtmssl=1; path=/;

45.79.19.196

0 B

URL
lygygin.com/SmfoZ/login.php?gp=1&js=1&uuid=1685751779.0043265290&other_args=eyJ1cmkiOiAiL1NtZm9aL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.79.19.196:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /SmfoZ/login.php?gp=1&js=1&uuid=1685751779.0043265290&other_args=eyJ1cmkiOiAiL1NtZm9aL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://lygygin.com/
DNT: 1
Connection: keep-alive
Cookie: mtmssl=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Sat, 03 Jun 2023 00:23:00 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.lygygin.com/?tm=1&subid4=1685751780.0348480000
referrer-policy: no-referrer
x-mtm-path: 4
x-mtm-prov: 552:0.07;558:0.00
x-mtm-rd: 0.93
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJseWd5Z2luLmNvbSIsImh0dHA6Ly93d3cxLmx5Z3lnaW4uY29tLz90bT0xJnN1YmlkND0xNjg1NzUxNzgwLjAzNDg0ODAwMDAiLDEsIjIwMjMtMDYtMDMgMDA6MjM6MDAiLDEsIjE2ODU3NTE3ODAuMDM0ODQ4MDAwMCIsNTUyLG51bGwsbnVsbF0:1q5F2q:rlIcki2Ekslw3xG778yxgBaR86Q; expires=Sat, 03-Jun-2023 01:23:00 GMT; Max-Age=3600; Path=/
connection: close

www1.lygygin.com/?tm=1&subid4=1685751780.0348480000

76.223.26.96

5.5 kB

URL
www1.lygygin.com/?tm=1&subid4=1685751780.0348480000
IP
76.223.26.96:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1296)
Size
5.5 kB (5548 bytes)
Hash
48ed73581d9ce2d4de56c6583fba5e64
c7c6e9d856fa1eefeec446eb37a1eb278b21bb98
c0136cee5e2ec9b57f6a5b5e3d32d68abde74faae348d5032b129e6bec161ea6

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /?tm=1&subid4=1685751780.0348480000 HTTP/1.1
Host: www1.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 03 Jun 2023 00:23:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket103
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_bAjo4vvovGbQYx48t8v9h/Aojv8IUh1H0u+X+/OP8uospWOJeMjybl50wwCyRnrTg3JiGAJduCDc/QPaG2i1Ig==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: lygygin.com
X-Subdomain: www1
Content-Encoding: gzip

www.google.com/adsense/domains/caf.js?abp=1

142.250.74.132

54 kB

URL
www.google.com/adsense/domains/caf.js?abp=1
IP
142.250.74.132:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2125)
Size
54 kB (54008 bytes)
Hash
2bf8734b5c298ee69bc64e1e9c2b7956
e1ca8b328d6ea1a4aed6914a692b973d947e0536
b88dde71c386028e8f8141ae1e917a2a554e1eb608d80a06636f7803500fa303

HTTP Headers

GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Sat, 03 Jun 2023 00:23:00 GMT
Expires: Sat, 03 Jun 2023 00:23:00 GMT
Cache-Control: private, max-age=3600
ETag: "10144563190933258185"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0

www1.lygygin.com/track.php?domain=lygygin.com&toggle=browserjs&uid=MTY4NTc1MTc4MC40NjQxOjg1ZTliMDE5NGViOWQ2YmQ5OWRkMWMwYmEyOTZiNzVjNWEwYzczOGQ2MTU1N2Y3NGRlODVkZWIyNmYyY2Y5MGM6NjQ3YTg3ZTQ3MTUwZQ%3D%3D

76.223.26.96

200 OK

20 B

URL GET HTTP/1.1
www1.lygygin.com/track.php?domain=lygygin.com&toggle=browserjs&uid=MTY4NTc1MTc4MC40NjQxOjg1ZTliMDE5NGViOWQ2YmQ5OWRkMWMwYmEyOTZiNzVjNWEwYzczOGQ2MTU1N2Y3NGRlODVkZWIyNmYyY2Y5MGM6NjQ3YTg3ZTQ3MTUwZQ%3D%3D
IP
76.223.26.96:80
ASN
#16509 AMAZON-02

Requested by
http://www1.lygygin.com/?tm=1&subid4=1685751780.0348480000

File type
gzip compressed data, max speed, from Unix\012- data
Size
20 B (20 bytes)
Hash
a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /track.php?domain=lygygin.com&toggle=browserjs&uid=MTY4NTc1MTc4MC40NjQxOjg1ZTliMDE5NGViOWQ2YmQ5OWRkMWMwYmEyOTZiNzVjNWEwYzczOGQ2MTU1N2Y3NGRlODVkZWIyNmYyY2Y5MGM6NjQ3YTg3ZTQ3MTUwZQ%3D%3D HTTP/1.1
Host: www1.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/?tm=1&subid4=1685751780.0348480000
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 03 Jun 2023 00:23:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

www1.lygygin.com/ls.php?t=647a87e4&token=37044ca5242aafd990871d102849e1ee7e44c6d4

76.223.26.96

201 Created

16 B

URL GET HTTP/1.1
www1.lygygin.com/ls.php?t=647a87e4&token=37044ca5242aafd990871d102849e1ee7e44c6d4
IP
76.223.26.96:80
ASN
#16509 AMAZON-02

Requested by
http://www1.lygygin.com/?tm=1&subid4=1685751780.0348480000

File type
JSON data\012- , ASCII text, with no line terminators
Size
16 B (16 bytes)
Hash
7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ls.php?t=647a87e4&token=37044ca5242aafd990871d102849e1ee7e44c6d4 HTTP/1.1
Host: www1.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/?tm=1&subid4=1685751780.0348480000
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 201 Created
Date: Sat, 03 Jun 2023 00:23:00 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 647a87e4b9c07065cd039c2a
Charset: utf-8
Access-Control-Allow-Origin: 
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_j5sTHXqRloYyq2QZUqYtUvo2MHAB47g/z0ycHZnHz309W3EE6c4T7Ahaqlm8cU8HWjtTxonUMKCaaapA8j462A==

d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png

54.230.245.138

200 OK

11 kB

URL GET HTTP/1.1
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
54.230.245.138:80
ASN
#16509 AMAZON-02

Requested by
http://www1.lygygin.com/?tm=1&subid4=1685751780.0348480000

File type
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Size
11 kB (11375 bytes)
Hash
0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865

HTTP Headers

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Fri, 02 Jun 2023 01:25:04 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CrWM_nw9-9Hu2XBlBPUhhieSm9Iso-LikEsyz-3GUFWSUJkMVcZXwQ==
Age: 82676

www1.lygygin.com/favicon.ico

76.223.26.96

0 B

URL
www1.lygygin.com/favicon.ico
IP
76.223.26.96:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www1.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/?tm=1&subid4=1685751780.0348480000
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 03 Jun 2023 00:23:00 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML