Report Overview
Visitedpublic
2026-02-25 21:13:28
Tags
Submit Tags
URL
s.aenhance.link/69881/3785/0/?aff_sub=20d581f0-7a19-cdf5-f278-17c75b318957&aff_sub2=&aff_sub3=&aff_sub4=&source=piczlabs.com&aff_click_id=&pc=3913&aff_unique3=wviarmspl727dtigj0mnqs5u
Finishing URL
landing.candynetwork.ai/ovidia?var_text=3&oid=5&affid=18&source_id=7198&sub1=69881_&sub2=102125116632cadca6f2259929d57d&sub3=b9bde3ed-b1d5-40b2-8d7c-9bf2554a9b2b&bo=2753%2C2754%2C2755%2C2756
IP / ASN
3.164.240.13
Title
Candy AI
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
www.recaptcha.net | 7582 | 2007-01-06 | 2012-07-11 | 2026-02-23 | 5.6 kB | 160 kB | 172.217.19.227 | |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-02-22 | 2.7 kB | 140 kB | 172.217.21.163 | |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-02-22 | 431 B | 90 kB | 151.101.2.137 |   |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-02-22 | 1.1 kB | 23 kB | 142.250.178.106 | |
s.aenhance.link 1 alert(s) on this Host | unknown | 2020-05-02 | 2025-11-25 | 2026-02-22 | 651 B | 40 kB | 3.167.2.122 |   |
s.sloffer1.com 3 alert(s) on this Host | 3018264 | 2021-03-18 | 2022-03-23 | 2026-02-22 | 743 B | 40 kB | 44.221.72.212 | |
cdn.assets-landing-candyai.com | 1996994 | 2024-07-19 | 2024-07-27 | 2026-02-22 | 9.6 kB | 1.1 MB |  188.114.96.1 |  |
www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2026-02-22 | 2.9 kB | 3.5 MB | 142.250.178.67 | |
www.ejd1s4io.com | 2190250 | 2024-05-08 | 2024-05-25 | 2026-02-19 | 1.1 kB | 34 kB | 34.160.134.83 |   |
a.vfgth.com 2 alert(s) on this Host | 3084635 | 2020-07-10 | 2025-03-29 | 2026-02-23 | 1.9 kB | 80 kB | 3.167.2.98 | |
landing.candynetwork.ai | 1528315 | unknown | 2024-03-23 | 2026-02-22 | 10 kB | 1.5 MB | 188.114.96.1 |       |
cdn.24metrics.com | 1702813 | 2015-03-01 | 2025-07-04 | 2026-02-21 | 426 B | 60 kB |  185.111.111.159 |  |
Varnish (Caching)
Varnish is a reverse caching proxy.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Ruby on Rails (Web frameworks)
Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.Everflow (Analytics)
Everflow is a partner marketing analytics platform.Ruby (Programming languages)
Ruby is an open-source object-oriented programming language.reCAPTCHA (Security)
reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.Stimulus (JavaScript frameworks)
A modest JavaScript framework for the HTML you already have.jQuery CDN (CDN)
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.jQuery:3.6.0 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Bunny (CDN)
Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | s.aenhance.link | malicious | Sinkholed |
| Cloudflare DNS | a.vfgth.com | malicious | Sinkholed |
| Cloudflare DNS | s.sloffer1.com | malicious | Sinkholed |
| Hagezi Threat Feed | s.sloffer1.com | malicious | Sinkholed |
| Quad9 DNS | s.sloffer1.com | malicious | Sinkholed |
JavaScript (21)
No JavaScripts
HTTP Transactions (58)
| URL | IP | Response | Size |
|---|