Report Overview

  1. Submitted URL

    babycurly.com/mn/ksa/scanpdffileinvoice.zip

  2. IP

    13.248.216.40

    ASN

    #16509 AMAZON-02

  3. Submitted

    2022-11-09 02:10:28

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.afternic.com547892012-05-26T04:25:04Z2023-03-10T06:21:15Z
tags.tiqcdn.com9692013-01-15T06:04:26Z2023-03-10T06:01:29Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-10T05:10:04Z
i5b5a2a00-ds-aksb-a.akamaihd.netunknown2020-03-03T13:40:07Z2023-03-10T14:39:46Z
babycurly.comunknown2017-04-27T17:31:46Z2023-03-03T14:23:31Z
img6.wsimg.com154382020-02-20T08:56:58Z2023-03-10T11:40:52Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-10T05:10:02Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-10T13:49:44Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-10T05:12:35Z
ds-aksb-a.akamaihd.net48362014-05-02T14:16:25Z2023-03-10T13:45:46Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-10T05:09:10Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-10T05:11:10Z
recaptcha.net32102012-07-15T22:16:42Z2023-03-10T14:05:44Z
www.gstatic.comunknown2016-07-26T11:37:06Z2023-03-10T12:47:01Z
events.api.secureserver.net1251792020-06-23T05:18:34Z2023-03-10T13:35:24Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-10T05:10:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumbabycurly.com/mn/ksa/scanpdffileinvoice.zipPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (42)

HTTP Transactions (67)

URLIPResponseSize
babycurly.com/mn/ksa/scanpdffileinvoice.zip
76.223.65.111302 Moved Temporarily110 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
www.afternic.com/forsale/babycurly.com?utm_source=TDFS_DASLNC&utm_medium=DASLNC&utm_campaign=TDFS_DASLNC&traffic_type=TDFS_DASLNC&traffic_id=daslnc&
104.110.24.168200 OK39 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
www.afternic.com/forsale/_next/static/css/7663668f96342d42.css
104.110.24.168200 OK2.1 kB
www.afternic.com/forsale/_next/static/chunks/853.7d7067fffa72ef90.js
104.110.24.168200 OK2.5 kB
www.afternic.com/forsale/_next/static/css/620cfa3cf5a9b1b1.css
104.110.24.168200 OK2.1 kB
www.afternic.com/forsale/_next/static/css/ae89f9dfcf3f3f0c.css
104.110.24.168200 OK1.9 kB
www.afternic.com/forsale/_next/static/chunks/pages/_app-74cd4fb80f14b27b.js
104.110.24.168200 OK35 kB
www.afternic.com/forsale/_next/static/chunks/670-0de5acd3b36156c1.js
104.110.24.168200 OK13 kB
www.afternic.com/forsale/_next/static/chunks/584-a5891a19697d2d0f.js
104.110.24.168200 OK11 kB
www.afternic.com/forsale/_next/static/chunks/main-999f8182f179b553.js
104.110.24.168200 OK23 kB
www.afternic.com/forsale/_next/static/chunks/framework-f7ba292b22b03fed.js
104.110.24.168200 OK440 B
www.afternic.com/forsale/_next/static/chunks/787-b8887dd5c5d965da.js
104.110.24.168200 OK48 kB
www.afternic.com/forsale/_next/static/chunks/pages/forsale/%5Bdomain%5D-335944c071207758.js
104.110.24.168200 OK8.8 kB
www.afternic.com/forsale/_next/static/2.26.0/_buildManifest.js
104.110.24.168200 OK354 B
www.afternic.com/forsale/_next/static/2.26.0/_ssgManifest.js
104.110.24.168200 OK64 B
www.afternic.com/forsale/_next/static/2.26.0/_middlewareManifest.js
104.110.24.168200 OK61 B
img6.wsimg.com/ux/fonts/gd-sage/1.0/gd-sage-bold.woff2
23.36.79.16200 OK40 kB
img6.wsimg.com/ux/fonts/sherpa/2.0/gdsherpa-vf.woff2
23.36.79.16200 OK44 kB
img6.wsimg.com/wrhs/d9e85ba08ed439f2823d36d51a080969/noheader.min.css
23.36.79.16200 OK1.4 kB
img6.wsimg.com/wrhs/727dbdd5b384f1de046070e796ef5260/noheader.min.js
23.36.79.16200 OK15 kB
img6.wsimg.com/wrhs/782faadd52e123dec110abf1eabbae14/uxcore2.min.css
23.36.79.16200 OK25 kB
img6.wsimg.com/poly/v3/polyfill.min.js?features=Promise,Promise.prototype.finally,Intl.~locale.nb-NO&rum=0&unknown=polyfill&flags=gated
23.36.79.16200 OK94 B
img6.wsimg.com/wrhs/4262f27bec9c376945d4c527280085e1/uxcore2.min.js
23.36.79.16200 OK22 kB
www.afternic.com/forsale/_next/image?url=%2Fimgs%2Ftime-stopwatch_s.png&w=256&q=75
104.110.24.168200 OK2.5 kB
img6.wsimg.com/wrhs-next/0a3c9ed73591ea11f77b51a04edf210f/heartbeat.js
23.36.79.16200 OK1.1 kB
img6.wsimg.com/wrhs/6b76c0a65966f2585e6bd653bd91f9ac/vendor.min.js
23.36.79.16200 OK80 kB
push.services.mozilla.com/
34.216.192.228101 Switching Protocols0 B
img6.wsimg.com/wrhs/76fb57845de870c9b691d06a330d2188/browser-deprecation-banner.header-chunk.min.js
23.36.79.16200 OK6.3 kB
tags.tiqcdn.com/utag/gpl/afternic/prod/utag.js
23.38.200.249200 OK18 kB
www.afternic.com/forsale/api/countries/nb-NO
104.110.24.168200 OK3.1 kB
ds-aksb-a.akamaihd.net/aksb.min.js
23.36.76.249200 OK4.8 kB
img6.wsimg.com/ux/favicon/android-icon-192x192.png
23.36.79.16200 OK3.9 kB
img6.wsimg.com/ux/favicon/favicon-16x16.png
23.36.79.16200 OK413 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
recaptcha.net/recaptcha/api.js?onload=onloadcallback&render=explicit
142.250.74.99200 OK582 B
tags.tiqcdn.com/utag/gpl/afternic/prod/utag.7.js?utv=ut4.46.202106042044
23.38.200.249200 OK5.6 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
img6.wsimg.com/wrhs/79a0dbd78c152b18a0e26ee7361eea7e/tcc.min.js
23.36.79.16200 OK26 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js
142.250.74.163200 OK112 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
23.36.79.16200 OK7.5 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0fc93e21-4183-4c02-95b0-b3d44d9d41f6.jpeg
34.120.237.76200 OK7.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84109408-bbc7-4166-8974-df4b4fbbf1c1.jpeg
34.120.237.76200 OK6.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ae49d16-09cf-4def-b9d2-7463e61acc35.jpeg
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b197dc2-1415-4c19-8d36-1fa334168ba5.jpeg
34.120.237.76200 OK9.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff66bafec-6420-4aea-8b22-96b8fe0d292b.jpeg
34.120.237.76200 OK8.2 kB
i5b5a2a00-ds-aksb-a.akamaihd.net/2/628588/b?dE=3&cS=3&cE=18&rqS=19&rsS=573&rsE=577&sS=7&dl=591&di=1059&fp=&dlS=1149&dlE=1151&dc=1889&leS=1889&leE=1892&to=&ol=0&cr=2&mt=&mb=&b=2305&u=https%3A//www.afternic.com/forsale/babycurly.com&ua=Mozilla/5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko/20100101%20Firefox/105.0&pl=Linux%20x86_64&us=cookiepresent&gh=23.36.77.229&t=&rid=1388597&r=38064&akM=dscx&akN=ae&vc=14:17&bpcip=5b5a2a00&akTX=1&akTI=1388597&ai=409545&pmgn=&pmgi=&pmp=
23.36.76.249204 No Content0 B
events.api.secureserver.net/image.aspx?referrer=&virtual_path=%2Fforsale&timestamp=1667959814692&corrid=1594675198&privatelabelid=497036&currency=USD&vs=visible&rand=1246974228&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbabycurly.com%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&agent=false&delegated=false&salessite=false&server=ip-10-125-23-235.eu-west-2.compute.internal&loadSource=gtm&event=gtm.js&page_level_properties=server%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&trace_id=6c365ac2053857d0b5172ccf232c8cd3&hit_id=d6916fcf-8d5b-5f4b-9b66-2c380faee649&visitor_guid=76b579dc-9ed0-4c94-93dd-a17d0f96192e&has_consent=0&cv=3.22.3&client_name=tcc&same_site=None
104.84.152.58302 Found0 B
events.api.secureserver.net/pageEvents.aspx?timestamp=1667959814741&corrid=1594675198&referrer=&privatelabelid=497036&currency=USD&vs=visible&rand=411804032&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbabycurly.com%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&agent=false&delegated=false&salessite=false&server=ip-10-125-23-235.eu-west-2.compute.internal&loadSource=gtm&event=gtm.dom&page_level_properties=server%2CloadSource&event_type=page.event&eventdate=2022-11-09T02%3A10%3A14.742Z&eventtype=impression&e_id=am.tdfs.intake.forsale.impression&event_label=babycurly.com&hit_id=b728e4a8-113e-5349-ab50-00ccc01b24b7&visitor_guid=76b579dc-9ed0-4c94-93dd-a17d0f96192e&has_consent=0&cv=3.22.3&client_name=tcc&same_site=None&trace_id=6c365ac2053857d0b5172ccf232c8cd3
104.84.152.58200 OK43 B
events.api.secureserver.net/b.aspx?timestamp=1667959815204&corrid=1594675198&referrer=&privatelabelid=497036&currency=USD&vs=visible&rand=2097790145&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbabycurly.com%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&agent=false&delegated=false&salessite=false&server=ip-10-125-23-235.eu-west-2.compute.internal&loadSource=gtm&event=gtm.load&page_level_properties=server%2CloadSource&event_type=page.log&eventdate=2022-11-09T02%3A10%3A15.204Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1667959813324&connectStart=1667959813309&domComplete=1667959815195&domContentLoadedEventEnd=1667959814457&domContentLoadedEventStart=1667959814455&domInteractive=1667959814365&domLoading=1667959813897&domainLookupEnd=1667959813309&domainLookupStart=1667959813306&fetchStart=1667959813296&navigationStart=1667959812995&requestStart=1667959813325&responseEnd=1667959813883&responseStart=1667959813879&loadEventStart=1667959815195&loadEventEnd=0&transferSize=40821&encodedBodySize=38923&decodedBodySize=103359&navigationType=navigate&fcp=1297&hit_id=84e7e612-844b-5a2d-b8f7-98b0ada18d15&visitor_guid=76b579dc-9ed0-4c94-93dd-a17d0f96192e&has_consent=0&cv=3.22.3&client_name=tcc&same_site=None&trace_id=6c365ac2053857d0b5172ccf232c8cd3
104.84.152.58200 OK43 B
events.api.secureserver.net/image.aspx?referrer=&virtual_path=%2Fforsale&timestamp=1667959814692&corrid=1594675198&privatelabelid=497036&currency=USD&vs=visible&rand=1246974228&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbabycurly.com%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&agent=false&delegated=false&salessite=false&server=ip-10-125-23-235.eu-west-2.compute.internal&loadSource=gtm&event=gtm.js&page_level_properties=server%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&trace_id=6c365ac2053857d0b5172ccf232c8cd3&hit_id=d6916fcf-8d5b-5f4b-9b66-2c380faee649&visitor_guid=76b579dc-9ed0-4c94-93dd-a17d0f96192e&has_consent=0&cv=3.22.3&client_name=tcc&same_site=None&CookieTest=1
104.84.152.58200 OK43 B