Report - proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next

Report Overview

URL

proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next
IP

54.196.16.164

ASN

#14618 AMAZON-AES
Submitted

2023-01-16T21:19:22Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

2

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
rr2---sn-capm-vnae.googlevideo.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	768	642	91.90.45.173
i.ytimg.com (2)	109	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	768	19246	142.250.74.22
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	54.187.39.66
accounts.google.com (2)	81	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1535	5925	216.58.211.13
www.google.com (1)	7	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	402	15208	216.58.211.4
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	391	34.117.237.239
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2374	35.241.9.150
ocsp.pki.goog (15)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5145	10491	142.250.74.131
fonts.googleapis.com (1)	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	456	2090	142.250.74.74
proxy.quickmail.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	976	1035	34.201.80.84
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5844	34.160.144.191
fonts.gstatic.com (3)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1517	59459	216.58.207.227
www.gstatic.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	846	95899	142.250.74.35
yt3.ggpht.com (1)	203	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	470	2438	216.58.207.225
r3.o.lencr.org (7)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2366	6206	23.36.76.226
ocsp.digicert.com (1)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341	737	93.184.220.29
img-getpocket.cdn.mozilla.net (5)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2705	49300	34.120.237.76
jnn-pa.googleapis.com (3)	2640	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1692	32942	216.58.211.10
www.youtube.com (14)	90	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7723	2486216	142.250.74.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-16	medium	proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next	Phishing
2023-01-16	medium	proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (66)

URL IP Response Size

proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next

34.201.80.84

301 Moved Permanently

URL HTTP/1.1

proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next
IP

34.201.80.84:0
ASN

#14618 AMAZON-AES

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next HTTP/1.1
Host: proxy.quickmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 301 Moved Permanently
Server: Cowboy
Date: Mon, 16 Jan 2023 21:19:06 GMT
Connection: keep-alive
Content-Type: text/html
Location: https://proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next
Transfer-Encoding: chunked
Via: 1.1 vegur

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

2258cd6b877a3aca8f4c84074e65ac4b

4e46c70941f8e497e8afc8d078644e7f81761a1c

faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7884
Expires: Mon, 16 Jan 2023 23:30:31 GMT
Date: Mon, 16 Jan 2023 21:19:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

0643dc6b6fed33b3537160b6bb77bcbf

aa43bd1fbb30d2219f3285c1ee4991ffb33562c5

f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2299
Expires: Mon, 16 Jan 2023 21:57:26 GMT
Date: Mon, 16 Jan 2023 21:19:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

f7bd85a261739c122eefb74ffddaec99

e2e059b0740592e8591d432249aafe5fcb8af23c

71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3714
Expires: Mon, 16 Jan 2023 22:21:01 GMT
Date: Mon, 16 Jan 2023 21:19:07 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

14cd9a0afb6ba9a763651d5112760d1e

75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 16 Jan 2023 20:49:11 GMT
content-type: application/json
age: 1796
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

7b922915ebf1fa3639b333f994c74f24

144a3f80b98fd0652d4614f24cf6cbbee40f8938

adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: 2WJta41UrWK8YR2YFiW1bcDp9L1JQ5fbjcroJZEhb4iG6DenPlrbru0DSPaxG3ex+LJiAz64c3c=
x-amz-request-id: MAE54ZW26THR6NQR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 16 Jan 2023 20:55:58 GMT
age: 1389
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Mon, 16 Jan 2023 21:19:07 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

ae7d6e66390a839ae33183ab8c748331

441b351f7bacd48ed879a767a9eb5a03e1ca70c4

d639dad38af1529c69379d7e653a45834fa8c413ee3cb3e7981dc5f8e8310f6a

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D639DAD38AF1529C69379D7E653A45834FA8C413EE3CB3E7981DC5F8E8310F6A"
Last-Modified: Mon, 16 Jan 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20516
Expires: Tue, 17 Jan 2023 03:01:03 GMT
Date: Mon, 16 Jan 2023 21:19:07 GMT
Connection: keep-alive

proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next

54.196.16.164

301 Moved Permanently

118

URL HTTP/1.1

proxy.quickmail.com/click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next
IP

54.196.16.164:0
ASN

#14618 AMAZON-AES

Magic

HTML document text\012- HTML document, ASCII text, with no line terminators

Size

118
Hash

47d424a098ee242dbd64ce92d3830625

1aa104ee8a7d4c25249b405ae0ecefeca712971f

7029b9a7bde004aad4914994398933149dcf48c212ddd16fa4e02d970a279606

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /click/1/532287703/f3fd43c00ad1f0ada60654f329286a16/3e061be11fc0dd4872c0b0ef554d1898/next HTTP/1.1
Host: proxy.quickmail.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        HTTP/1.1 301 Moved Permanently
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Location: https://www.youtube.com/watch?v=jmqjsSUhfKc&t=8s
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
X-Request-Id: 37a12c19-0a7f-43d6-a10f-425b52bf1e3c
X-Runtime: 0.024752
Server: 
Date: 
Last-Modified: 
Strict-Transport-Security: max-age=63072000; includeSubDomains
Transfer-Encoding: chunked
Via: 1.1 vegur

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

6a0c99efce2ba7294ef4b88e9810c411

90e325963c1355d4c2ab6500689850a2df4c419f

957f138460650b9cecf197fb62ec2b92fae42eb5d9d431a348f8f518470612c8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 16 Jan 2023 20:33:46 GMT
age: 2721
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

6a0c99efce2ba7294ef4b88e9810c411

90e325963c1355d4c2ab6500689850a2df4c419f

957f138460650b9cecf197fb62ec2b92fae42eb5d9d431a348f8f518470612c8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 21:19:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.youtube.com/s/player/4248d311/player_ias.vflset/en_US/base.js

142.250.74.78

200 OK

611243

URL HTTP/2

www.youtube.com/s/player/4248d311/player_ias.vflset/en_US/base.js
IP

142.250.74.78:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (517)

Size

611243
Hash

4bafbf546e35e79d802b8e836cf03e3b

cff2ccd4542a73b82c18cdac6b3e4af01198566e

da6660452c1ebd120eb25d4c1a742e2fe20cf5ccfbd3523acb5e1d5693170d70

HTTP Headers

                                        GET /s/player/4248d311/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/watch?v=jmqjsSUhfKc&t=8s
Cookie: YSC=-gqsZM-vQ1U; __Secure-YEC=CgtEY25PeFdZNk8xZyjL_paeBg%3D%3D; CONSENT=PENDING+569
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 611243
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 16:05:03 GMT
expires: Fri, 12 Jan 2024 16:05:03 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 364444
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.youtube.com/s/desktop/b5a8f283/jsbin/desktop_polymer.vflset/desktop_polymer.js

142.250.74.78

200 OK

1657577

URL HTTP/2

www.youtube.com/s/desktop/b5a8f283/jsbin/desktop_polymer.vflset/desktop_polymer.js
IP

142.250.74.78:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (65405)

Size

1657577
Hash

b1da0fd2232b53dbcedf1f020dce9a9d

7f1af4076d8d918acb70a3e8dd4205e8c6d5e28b

455c8948e19ed56130d1eb966e55b62436bc041442b14459f33cbc507ef40f85

HTTP Headers

                                        GET /s/desktop/b5a8f283/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/watch?v=jmqjsSUhfKc&t=8s
Cookie: YSC=-gqsZM-vQ1U; __Secure-YEC=CgtEY25PeFdZNk8xZyjL_paeBg%3D%3D; CONSENT=PENDING+569
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 1657577
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 04:05:28 GMT
expires: Tue, 16 Jan 2024 04:05:28 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 13 Jan 2023 10:17:52 GMT
content-type: text/javascript
age: 62019
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.youtube.com/s/desktop/b5a8f283/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js

142.250.74.78

200 OK

15164

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (167)

#1 JS:Script (size: 4300)

#2 JS:Script (size: 240)

#3 JS:Script (size: 57)

#4 JS:Script (size: 54)

#5 JS:Script (size: 55)

#6 JS:Script (size: 57)

#7 JS:Script (size: 57)

#8 JS:Script (size: 36988)

#9 JS:Script (size: 397)

#10 JS:Script (size: 9975006)

#11 JS:Script (size: 55)

#12 JS:Script (size: 1980)

#13 JS:Script (size: 55)

#14 JS:Script (size: 60)

#15 JS:Script (size: 1053)

#16 JS:Script (size: 121490)

#17 JS:Script (size: 32980)

#18 JS:Script (size: 5547)

#19 JS:Script (size: 69458)

#20 JS:Script (size: 39697)

#21 JS:Script (size: 50695)

#22 JS:Script (size: 81946)

#23 JS:Script (size: 284)

#24 JS:Script (size: 6057)

#25 JS:Script (size: 1042)

#26 JS:Script (size: 3397)

#27 JS:Script (size: 268)

#28 JS:Script (size: 56)

#29 JS:Script (size: 132)

#30 JS:Script (size: 401230)

#31 JS:Script (size: 1991)

#32 JS:Script (size: 6750)

#33 JS:Script (size: 56)

#34 JS:Script (size: 55)

#35 JS:Script (size: 140)

#36 JS:Script (size: 78244)

#37 JS:Script (size: 56)

#38 JS:Script (size: 54)

#39 JS:Script (size: 60)

#40 JS:Script (size: 54)

#41 JS:Script (size: 69604)

#42 JS:Script (size: 169)

#43 JS:Script (size: 60)

#44 JS:Script (size: 128642)

#45 JS:Script (size: 13822)

#46 JS:Script (size: 2198246)

#47 JS:Script (size: 63)

#48 JS:Script (size: 5631)

#49 JS:Script (size: 95)

#50 JS:Script (size: 1145)

#51 JS:Script (size: 232)

#52 JS:Script (size: 251710)

#53 JS:Script (size: 54)

#1 JS:Eval (size: 262)

#2 JS:Eval (size: 26)

#3 JS:Eval (size: 79)