Report Overview

  1. Submitted URL

    aj-practice.thats.im/~filxscum/D/H/L/6de416cfb705fb4ee9559522f2759aebc30b7e9cd4b06697e4386db80e2d92851ce82d6d2eb4d2c0c9a09e0628d/DHL/tracking2.php

  2. IP

    172.99.150.5

    ASN

    #398395 DOT-TECH-LLC

  3. Submitted

    2022-09-26 02:35:29

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
api.omappapi.com50380001-01-01T00:00:00Z0001-01-01T00:00:00Z
partner.googleadservices.com7980001-01-01T00:00:00Z0001-01-01T00:00:00Z
tpc.googlesyndication.com1260001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z
t.co5690001-01-01T00:00:00Z0001-01-01T00:00:00Z
code.jquery.com6340001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagmanager.com750001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
googiehost.com81320001-01-01T00:00:00Z0001-01-01T00:00:00Z
fundingchoicesmessages.google.com23970001-01-01T00:00:00Z0001-01-01T00:00:00Z
static.cloudflareinsights.com12940001-01-01T00:00:00Z0001-01-01T00:00:00Z
aj-practice.thats.imunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
sdk.truepush.com715570001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.googletagservices.com1690001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
d31qbv1cthcecs.cloudfront.netunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google-analytics.com400001-01-01T00:00:00Z0001-01-01T00:00:00Z
googleads.g.doubleclick.net420001-01-01T00:00:00Z0001-01-01T00:00:00Z
a.omappapi.com54180001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sectigo.com4870001-01-01T00:00:00Z0001-01-01T00:00:00Z
stats.g.doubleclick.net960001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.com760001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sca1b.amazontrust.com10150001-01-01T00:00:00Z0001-01-01T00:00:00Z
certify.alexametrics.com37040001-01-01T00:00:00Z0001-01-01T00:00:00Z
adservice.google.no969690001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
sdki.truepush.com535520001-01-01T00:00:00Z0001-01-01T00:00:00Z
pagead2.googlesyndication.com1010001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.no256070001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
d.plerdy.com1445670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdnjs.cloudflare.com2350001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
redirect.prod.experiment.routing.cloudfront.aws.a2z.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumaj-practice.thats.im/~filxscum/D/H/L/6de416cfb705fb4ee9559522f2759aebc30b7e9cd4b06697e4386db80e2d92851ce82d6d2eb4d2c0c9a09e0628d/DHL/tracking2.phpPhishing
mediumaj-practice.thats.im/index.htmlPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


Files detected

  1. URL

    fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

  2. IP

    142.250.74.163

  3. ASN

    #15169 GOOGLE

  1. File type

    gzip compressed data, max compression\012- data

    Size

    16 kB (16388 bytes)

  2. Hash

    f857fba8b3d2836e4d63f370e96c0a20

    19053e668d9ecfa53c2bb49e28a22aa31f9161a6

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (188)

HTTP Transactions (85)

URLIPResponseSize
aj-practice.thats.im/~filxscum/D/H/L/6de416cfb705fb4ee9559522f2759aebc30b7e9cd4b06697e4386db80e2d92851ce82d6d2eb4d2c0c9a09e0628d/DHL/tracking2.php
172.99.150.5302 Moved Temporarily145 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.35200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
aj-practice.thats.im/index.html
172.99.150.5200 OK214 B
ocsp.digicert.com/
93.184.220.29200 OK312 B
t.co/1YJtCenvY3
104.244.42.133200 OK189 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
t.co/favicon.ico
104.244.42.133200 OK1.2 kB
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
104.17.25.14200 OK5.6 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
code.jquery.com/jquery-3.6.0.slim.min.js
69.16.175.10200 OK25 kB
www.googletagmanager.com/gtag/js?id=UA-54079021-1
142.250.74.72200 OK42 kB
push.services.mozilla.com/
52.38.227.80101 Switching Protocols0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK280 B
api.omappapi.com/v2/embed/86400?d=googiehost.com
54.230.111.48200 OK32 kB
sdki.truepush.com/sdk/v2.0.4/app.js
54.230.111.72200 OK581 B
ocsp.digicert.com/
93.184.220.29200 OK5.0 kB
sdki.truepush.com/sdk/version.json
54.230.111.72200 OK176 B
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
104.17.25.14200 OK176 kB
sdki.truepush.com/sdk/v2.0.4/main.js
54.230.111.72200 OK19 kB
d31qbv1cthcecs.cloudfront.net/atrk.js
143.204.55.36200 OK4.3 kB
www.google-analytics.com/analytics.js
142.250.74.174200 OK20 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3431396059777650
142.250.74.162200 OK58 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
googleads.g.doubleclick.net/pagead/html/r20220921/r20190131/zrt_lookup.html
142.250.74.34200 OK4.4 kB
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK471 B
ocsp.sectigo.com/
104.18.32.68200 OK471 B
ocsp.sectigo.com/
104.18.32.68200 OK471 B
redirect.prod.experiment.routing.cloudfront.aws.a2z.com/x.png
3.15.76.72204 No Content0 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg
34.120.237.76200 OK9.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F482bbbab-8d4a-43bf-97c2-03195a0c4728.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png
34.120.237.76200 OK7.2 kB
sdk.truepush.com/api/v2/truepushSDKPlatfromDetails
137.59.203.101204 No Content0 B
certify.alexametrics.com/atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=FREE%20WordPress%20Hosting%20with%20cPanel%C2%AE%EF%B8%8F%20%E1%90%88%20Create%20WP%20Website&time=1664159718573&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=https%3A%2F%2Ft.co%2F&host_url=https%3A%2F%2Fgoogiehost.com%2Ffreewordpresshosting.html&random_number=14662931552&sess_cookie=eef7f05d18377a61cabab322854&sess_cookie_flag=1&user_cookie=eef7f05d18377a61cabab322854&user_cookie_flag=1&dynamic=true&domain=googiehost.com&account=nQZkh1aMQV00G7&jsv=20130128&user_lang=en-US
54.230.111.59200 OK43 B
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-54079021-1&cid=275815343.1664159719&jid=1332006877&gjid=1649997369&_gid=394291862.1664159719&_u=YEBAAUAAAAAAAC~&z=1629927777
64.233.162.155200 OK4 B
sdk.truepush.com/api/v2/truepushSDKPlatfromDetails
137.59.203.101200 OK721 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK1.0 kB
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-54079021-1&cid=275815343.1664159719&jid=1332006877&_u=YEBAAUAAAAAAAC~&z=530704874
142.250.74.164200 OK42 B
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-54079021-1&cid=275815343.1664159719&jid=1332006877&_u=YEBAAUAAAAAAAC~&z=530704874
142.250.74.3200 OK42 B
adservice.google.no/adsid/integrator.js?domain=googiehost.com
142.250.74.162200 OK100 B
adservice.google.com/adsid/integrator.js?domain=googiehost.com
142.250.74.130200 OK692 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
partner.googleadservices.com/gampad/cookie.js?domain=googiehost.com&callback=_gfp_s_&client=ca-pub-3431396059777650
172.217.21.162200 OK206 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
fonts.gstatic.com/s/nunitosans/v12/pe03MImSLYBIv1o4X1M8cc8GBs5tU1E.woff2
142.250.74.163200 OK17 kB
fonts.gstatic.com/s/nunitosans/v12/pe0qMImSLYBIv1o4X1M8cce9I9s.woff2
142.250.74.163200 OK17 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
tpc.googlesyndication.com/pagead/js/r20220921/r20110914/abg_lite_fy2021.js
142.250.74.33200 OK9.6 kB
tpc.googlesyndication.com/pagead/js/r20220921/r20110914/client/qs_click_protection_fy2021.js
142.250.74.33200 OK7.6 kB
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
142.250.74.66200 OK44 kB
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
142.250.74.163200 OK16 kB
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK16 kB
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK16 kB
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
142.250.74.163200 OK28 kB
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20220921&st=env
142.250.74.162200 OK11 kB
pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstIJxAlql77HCCfTIpq0rDWvRZNE3khxk4pG7iw4ZCs_w3LVTBAAdsJhcDOHRCIcBNTLHW9uK5zxHgzEYzvgBdFsG5n21jZAGMevtsdDspoB5ivM3CibhGWNCxN6wnYpCKV_yDPBA&sai=AMfl-YTMUGW1bxvSjxRqBRkoqgCvRMHjNssxlnnmQQdtJneQ6PGqvnpZWhQK-i2lIeslX_ZVvhEc1gTDyfU3&sig=Cg0ArKJSzDRMbAQRwpsEEAE&id=lidar2&mcvt=1001&p=0,0,90,728&mtos=1001,1001,1001,1001,1001&tos=1001,0,0,0,0&v=20220921&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=4177924764&rs=2&la=0&cr=0&vs=4&r=v&rst=1664159719555&rpt=1129&met=mue&wmsd=0
142.250.74.162200 OK42 B
googiehost.com/freewordpresshosting.html
172.66.42.236200 OK0 B
d.plerdy.com/public/js/click/main.js?v=0.5372714512747737
104.26.15.92200 OK0 B
fundingchoicesmessages.google.com/i/pub-3431396059777650?ers=1
142.250.74.46200 OK0 B
a.omappapi.com/app/js/api.min.js
194.242.11.186200 OK0 B
static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
104.18.47.230200 OK0 B
a.omappapi.com/app/js/api.min.css
194.242.11.186200 OK0 B
fonts.googleapis.com/css?family=Nunito+Sans:400,600,700
142.250.74.10200 OK0 B