Report - lygygin.com/XdaSZ/login.php

Report Overview

Submitted URL
lygygin.com/XdaSZ/login.php
IP
45.56.79.23
ASN
#63949 Linode, LLC
Submitted
2023-06-02 00:48:40
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
d38psrni17bvxu.cloudfront.net	unknown	2008-04-25	2022-09-22	2023-06-02	398 B	12 kB	54.230.245.130
lygygin.com	unknown	2022-06-10	2012-10-12	2023-06-02	2.4 kB	2.0 kB	45.79.19.196
www1.lygygin.com	unknown	2022-06-10	2023-04-26	2023-06-02	1.3 kB	6.5 kB	76.223.26.96
www.google.com	7	1997-09-15	2015-05-10	2023-05-29	338 B	55 kB	216.58.211.4

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com

Quad9 DNS

Scan Date	Severity	Indicator
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com
2023-06-02	medium	lygygin.com

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	www.google.com/adsense/domains/caf.js?abp=1	148 kB	2023-06-01	2023-06-07
Pretty URL www.google.com/adsense/domains/caf.js?abp=1 IP 216.58.211.4 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-01 20:52:33 Last Seen2023-06-07 14:57:58 Times Seen638 Hash 5401e13d81da95d067dd121f898a4fe5 d019cd5aea5ff8ee3bc8e64bc94c2dd46911c527 d5472a121d9858b8889a3003195d55b8cbe142caa65c5a390da6adc1b84ab631 Loading...

	www1.lygygin.com/?tm=1&subid4=1685666903.0474710000	968 B	2023-03-08	2024-04-17
Pretty URL www1.lygygin.com/?tm=1&subid4=1685666903.0474710000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:24:08 Last Seen2024-04-17 19:00:15 Times Seen27648 Hash c77554570ae0fa8e4fb31747dc213058 e989fbde07e6a68975c7a31e1d4df76afd90b96f c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77 Loading...

	www1.lygygin.com/?tm=1&subid4=1685666903.0474710000	719 B	2023-06-02	2023-06-02
Pretty URL www1.lygygin.com/?tm=1&subid4=1685666903.0474710000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-02 02:48:40 Last Seen2023-06-02 02:48:40 Times Seen1 Hash 96911047d78ee9850f8d91be16ca4d4b 6d684d988a0918845155ec883b79e7c03a907508 ec4af56f28ceb3592d6cc656d2483a2f43ddf8fe0ff45f00ff41da8407572ace Loading...

	www1.lygygin.com/?tm=1&subid4=1685666903.0474710000	246 B	2023-06-02	2023-06-02
Pretty URL www1.lygygin.com/?tm=1&subid4=1685666903.0474710000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-02 02:48:40 Last Seen2023-06-02 02:48:40 Times Seen1 Hash e1b5de2bf477311d59ce374ff1bc1d29 9132e240ffd75733d2fee9d90fb6db8748cf7a07 273126e2bea7f5b46f441391bf6de331abac88c7c09f7674ea96b2a1af59cebc Loading...

	www1.lygygin.com/?tm=1&subid4=1685666903.0474710000	7.0 kB	2023-03-13	2024-01-03
Pretty URL www1.lygygin.com/?tm=1&subid4=1685666903.0474710000 IP 76.223.26.96 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 06:10:31 Last Seen2024-01-03 14:22:39 Times Seen25920 Hash 04b2b624f94797c26d17a57f399d9356 3143986e839c47a5c1eff03bd9df63ecc54dca9c 233b1cbfb295a0629bcf68a2a4198a62132f02ee1f061ada2ce7143bd5d2dabb Loading...

HTTP Transactions (9)

URL IP Response Size

lygygin.com/XdaSZ/login.php

45.79.19.196

0 B

URL
lygygin.com/XdaSZ/login.php
IP
45.79.19.196:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /XdaSZ/login.php HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
content-length: 0
location: http://lygygin.com/XdaSZ/login.php
cache-control: no-cache
set-cookie: mtmssl=1; path=/;

lygygin.com/XdaSZ/login.php

173.255.194.134

561 B

URL
lygygin.com/XdaSZ/login.php
IP
173.255.194.134:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (333)
Size
561 B (561 bytes)
Hash
5d2d964f0484dcb21bc0bea9be41c398
2e26ce4ba9564582ba08773875ca9361061e0149
6953dcaa0923afede2506efbffebdb8e9b592a21e1216a0f9890908254f1935c

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /XdaSZ/login.php HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: mtmssl=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Fri, 02 Jun 2023 00:48:23 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

lygygin.com/XdaSZ/login.php?gp=1&js=1&uuid=1685666903.0003554536&other_args=eyJ1cmkiOiAiL1hkYVNaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.79.19.196

302 Found

0 B

URL User Request GET HTTP/1.1
lygygin.com/XdaSZ/login.php?gp=1&js=1&uuid=1685666903.0003554536&other_args=eyJ1cmkiOiAiL1hkYVNaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.79.19.196:80
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /XdaSZ/login.php?gp=1&js=1&uuid=1685666903.0003554536&other_args=eyJ1cmkiOiAiL1hkYVNaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lygygin.com/XdaSZ/login.php
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: mtmssl=1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
content-length: 0
location: http://lygygin.com/XdaSZ/login.php?gp=1&js=1&uuid=1685666903.0003554536&other_args=eyJ1cmkiOiAiL1hkYVNaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
cache-control: no-cache
set-cookie: mtmssl=1; path=/;

96.126.123.244

302 Found

0 B

URL User Request GET HTTP/1.1
lygygin.com/XdaSZ/login.php?gp=1&js=1&uuid=1685666903.0003554536&other_args=eyJ1cmkiOiAiL1hkYVNaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
96.126.123.244:80
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /XdaSZ/login.php?gp=1&js=1&uuid=1685666903.0003554536&other_args=eyJ1cmkiOiAiL1hkYVNaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://lygygin.com/
DNT: 1
Connection: keep-alive
Cookie: mtmssl=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Fri, 02 Jun 2023 00:48:23 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.lygygin.com/?tm=1&subid4=1685666903.0474710000
referrer-policy: no-referrer
x-mtm-path: 4
x-mtm-prov: 552:0.08;558:0.00
x-mtm-rd: 0.51
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJseWd5Z2luLmNvbSIsImh0dHA6Ly93d3cxLmx5Z3lnaW4uY29tLz90bT0xJnN1YmlkND0xNjg1NjY2OTAzLjA0NzQ3MTAwMDAiLDEsIjIwMjMtMDYtMDIgMDA6NDg6MjMiLDEsIjE2ODU2NjY5MDMuMDQ3NDcxMDAwMCIsNTUyLG51bGwsbnVsbF0:1q4sxr:oRTbIXfucgPzgW3sQta2tEcyHR4; expires=Fri, 02-Jun-2023 01:48:23 GMT; Max-Age=3600; Path=/
connection: close

www1.lygygin.com/?tm=1&subid4=1685666903.0474710000

76.223.26.96

200 OK

5.5 kB

URL User Request GET HTTP/1.1
www1.lygygin.com/?tm=1&subid4=1685666903.0474710000
IP
76.223.26.96:80
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1296)
Size
5.5 kB (5546 bytes)
Hash
bda1aaef090433cd63347373e9504310
e73ea0ff78171e2211f6cdc6efe72b30cc1b1dea
f2351a522f3285dcbd5cff2ba2d441c3ac0fc76af9bd661049902285ce8b1eb7

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /?tm=1&subid4=1685666903.0474710000 HTTP/1.1
Host: www1.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 00:48:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket103
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_rnyvydmpZzpoTE+tKrfu9kW1np4QLEoHARYaVN1vh3goZmSA2gexuMRM5qOHeqEM7hNpt8mF6k3eobJCGz09Tw==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: lygygin.com
X-Subdomain: www1
Content-Encoding: gzip

www.google.com/adsense/domains/caf.js?abp=1

216.58.211.4

200 OK

54 kB

URL GET HTTP/1.1
www.google.com/adsense/domains/caf.js?abp=1
IP
216.58.211.4:80
ASN
#15169 GOOGLE

Requested by
http://www1.lygygin.com/?tm=1&subid4=1685666903.0474710000

File type
ASCII text, with very long lines (2125)
Size
54 kB (53985 bytes)
Hash
5401e13d81da95d067dd121f898a4fe5
d019cd5aea5ff8ee3bc8e64bc94c2dd46911c527
d5472a121d9858b8889a3003195d55b8cbe142caa65c5a390da6adc1b84ab631

HTTP Headers

GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Fri, 02 Jun 2023 00:48:24 GMT
Expires: Fri, 02 Jun 2023 00:48:24 GMT
Cache-Control: private, max-age=3600
ETag: "7507535832772147841"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0

www1.lygygin.com/favicon.ico

76.223.26.96

200 OK

0 B

URL GET HTTP/1.1
www1.lygygin.com/favicon.ico
IP
76.223.26.96:80
ASN
#16509 AMAZON-02

Requested by
http://www1.lygygin.com/?tm=1&subid4=1685666903.0474710000

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www1.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/?tm=1&subid4=1685666903.0474710000
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 00:48:25 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes

d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png

54.230.245.130

11 kB

URL
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
54.230.245.130:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Size
11 kB (11375 bytes)
Hash
0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865

HTTP Headers

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Thu, 01 Jun 2023 01:25:02 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0YQSy6vDxAs6618yKhyeKYyT2P7et9vQ7lQkU59b23LgsRN9U9Fj1w==
Age: 84215

www1.lygygin.com/track.php?domain=lygygin.com&toggle=browserjs&uid=MTY4NTY2NjkwNC4xMDY1OjA3ODZiYmVjNDVjY2JkMmJkOGNmNmE5MDc5ZTBmNWQ5NDY3ZGE2ZGMxNWE3M2NiNTg5YTU1MzBlNTc3NDM4MDU6NjQ3OTNjNTgxOWZlOQ%3D%3D

0.0.0.0

0 B

URL GET
www1.lygygin.com/track.php?domain=lygygin.com&toggle=browserjs&uid=MTY4NTY2NjkwNC4xMDY1OjA3ODZiYmVjNDVjY2JkMmJkOGNmNmE5MDc5ZTBmNWQ5NDY3ZGE2ZGMxNWE3M2NiNTg5YTU1MzBlNTc3NDM4MDU6NjQ3OTNjNTgxOWZlOQ%3D%3D
IP
0.0.0.0:0
ASN
#0

Requested by
http://www1.lygygin.com/?tm=1&subid4=1685666903.0474710000

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /track.php?domain=lygygin.com&toggle=browserjs&uid=MTY4NTY2NjkwNC4xMDY1OjA3ODZiYmVjNDVjY2JkMmJkOGNmNmE5MDc5ZTBmNWQ5NDY3ZGE2ZGMxNWE3M2NiNTg5YTU1MzBlNTc3NDM4MDU6NjQ3OTNjNTgxOWZlOQ%3D%3D HTTP/1.1
Host: www1.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www1.lygygin.com/?tm=1&subid4=1685666903.0474710000
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP