Report Overview

  1. Submitted URL

    ww16.best-targeted-traffic.com/install.php?unq=7l92224850kfqoyja&version=1.7&pais=Unknown&sub1=20220907-1948-519d-9431-cdfd6a8f68e5

  2. IP

    64.190.63.136

    ASN

    #47846 SEDO GmbH

  3. Submitted

    2022-09-07 20:13:49

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
balor-ghn.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
flirtyhoookup.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ww16.best-targeted-traffic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
img.sedoparking.com542000001-01-01T00:00:00Z0001-01-01T00:00:00Z
cartining-specute.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
xml.sedodna.com2783780001-01-01T00:00:00Z0001-01-01T00:00:00Z
api.quotes.com3982920001-01-01T00:00:00Z0001-01-01T00:00:00Z
code.jquery.com6340001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
example.org23330001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumbalor-ghn.com/zcvisitor/8f5f2b72-2ee9-11ed-8957-1274800664e5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5214dd0-2de1-11ed-8859-0a918cbcbb97Phishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (28)

HTTP Transactions (36)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ww16.best-targeted-traffic.com/install.php?unq=7l92224850kfqoyja&version=1.7&pais=Unknown&sub1=20220907-1948-519d-9431-cdfd6a8f68e5
64.190.63.136200 OK1.2 kB
push.services.mozilla.com/
35.164.47.107101 Switching Protocols0 B
img.sedoparking.com/images/js_preloader.gif
205.234.175.175200 OK4.3 kB
ww16.best-targeted-traffic.com/search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTY2MjU4MTYxOTVjMGUzZmM5NzJmNmFjMzExZGUyOGJlMGNhNDYxNzgx&crc=725ffacb1dc76cfca425ee8af7950f18c462729f&cv=1
64.190.63.136200 OK0 B
ww16.best-targeted-traffic.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D0xpWMINyp3o_0&v=NzBkNjY3ZDc3OGYxMjJiNzA3N2QyZTI2ODRjYTA4MTkJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE4ZmI3MjMwNTg3OC4zNTYxNTEwOQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE4ZmI3MjMwNWNlMi4zNjQ1MjAzMwkxNjYyNTgxNjE5CWFkXzYzXzA=&l=OAllMTE0Y2ZiZWVkMzFjOTgyMmE2NWIwYjIyMTVjNmI2YgkwCTM1CTAJOGJkMjJlMmYwOGMxOTQzYjk5MGM4YmRhNzE2NWJhYWYJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNTgxNjE5CTAuMDAwMzg0CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D
64.190.63.136302 Found0 B
ww16.best-targeted-traffic.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D0xpWMINyp3o_0&v=NzBkNjY3ZDc3OGYxMjJiNzA3N2QyZTI2ODRjYTA4MTkJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE4ZmI3MjMwNTg3OC4zNTYxNTEwOQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE4ZmI3MjMwNWNlMi4zNjQ1MjAzMwkxNjYyNTgxNjE5CWFkXzYzXzA=&l=OAllMTE0Y2ZiZWVkMzFjOTgyMmE2NWIwYjIyMTVjNmI2YgkwCTM1CTAJOGJkMjJlMmYwOGMxOTQzYjk5MGM4YmRhNzE2NWJhYWYJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNTgxNjE5CTAuMDAwMzg0CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D
64.190.63.136302 Found311 B
xml.sedodna.com/click?i=0xpWMINyp3o_0
173.239.53.32302 Found0 B
api.quotes.com/8f4c4104-2ee9-11ed-abb4-e1b34bc5229c
5.79.68.236200 OK171 B
api.quotes.com/8f4c4104-2ee9-11ed-abb4-e1b34bc5229c?hr=1
5.79.68.236302 Found11 B
balor-ghn.com/zcvisitor/8f5f2b72-2ee9-11ed-8957-1274800664e5/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=e5214dd0-2de1-11ed-8859-0a918cbcbb97
52.45.156.125200 996 B
balor-ghn.com/zcredirect?visitid=8f5f2b72-2ee9-11ed-8957-1274800664e5&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
52.45.156.125200 792 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
balor-ghn.com/favicon.ico
52.45.156.125404 653 B
cartining-specute.com/zp-redirect?target=https%3A%2F%2Fflirtyhoookup.com%2F%3Futm_source%3DgvC7WyUoREtV%26s1%3D719fbd40-273d-47b8-882f-683d1074b172%26s2%3Dwh7h94ngdpj64ksi2m4lu1c8&caid=7410aac1-b9a3-4a71-8226-0a525667d56d&zpid=8f5f2b72-2ee9-11ed-8957-1274800664e5&cid=wh7h94ngdpj64ksi2m4lu1c8&rt=R
18.197.36.77302 Found0 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg
34.120.237.76200 OK4.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fc5baf3-df02-4e98-9312-7ed0ef0b8638.jpeg
34.120.237.76200 OK3.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
34.120.237.76200 OK6.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0766520-2dbc-4f52-b0e2-1a908af4cd29.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg
34.120.237.76200 OK13 kB
code.jquery.com/jquery-3.3.1.min.js
69.16.175.10200 OK30 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK1.3 kB
fonts.googleapis.com/css?family=Montserrat&subset=latin-ext
142.250.74.10200 OK972 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
142.250.74.163200 OK13 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
example.org/media.ext
93.184.216.34404 Not Found1.3 kB
flirtyhoookup.com/?utm_source=gvC7WyUoREtV&s1=719fbd40-273d-47b8-882f-683d1074b172&s2=wh7h94ngdpj64ksi2m4lu1c8
104.21.52.165200 OK0 B