Report - lygygin.com/UcidZ/login.php/

Report Overview

Submitted URL
lygygin.com/UcidZ/login.php/
IP
45.33.23.183
ASN
#63949 Linode, LLC
Submitted
2023-06-04 00:59:23
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
img1.wsimg.com	9893	2008-03-17	2012-06-20	2023-06-03	1.3 kB	501 kB	23.36.79.43
www.google.com	7	1997-09-15	2015-05-10	2023-06-02	421 B	149 kB	142.250.74.132
lygygin.com	unknown	2022-06-10	2012-10-12	2023-06-03	2.4 kB	2.1 kB	45.33.2.79
www6.lygygin.com	unknown	2022-06-10	2023-05-26	2023-06-03	1.5 kB	4.9 kB	35.186.238.101
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-03	666 B	1.4 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com

Quad9 DNS

Scan Date	Severity	Indicator
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com
2023-06-04	medium	lygygin.com

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1	1.6 kB	2023-04-05	2023-10-11
Pretty URL www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1 IP 35.186.238.101 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 05:00:26 Last Seen2023-10-11 11:23:53 Times Seen19320 Hash 57a8b25a1882639d63381cbbe3f43ca6 94bf8a91ae3b7cd4a880d2433b5d3ea3d95d585c 77af6888e0c659ce11d0bfa70289ef354899a1efb65f809c850d8c87748d55ad Loading...

	img1.wsimg.com/parking-lander/static/js/main.a232e72f.chunk.js	5.0 kB	2023-05-16	2023-07-05
Pretty URL img1.wsimg.com/parking-lander/static/js/main.a232e72f.chunk.js IP 23.36.79.43 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-16 20:39:42 Last Seen2023-07-05 22:47:11 Times Seen11776 Hash b95b242e427bb1b08151ac8b539201c9 0479828b13a1f173b88da1cadd5644ce1fb2b427 6c5e0f7a68f0b7062ed8a4a043cb135d90f11dacb5ff393b1f32ca0c25b43ac3 Loading...

	www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1	0 B	2023-03-07	2024-04-25
Pretty URL www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1 IP 35.186.238.101 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 15:16:50 Times Seen37064697 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www6.lygygin.com/px.js?ch=1&abp=1	476 B	2023-03-13	2024-03-28
Pretty URL www6.lygygin.com/px.js?ch=1&abp=1 IP 35.186.238.101 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 06:28:57 Last Seen2024-03-28 23:13:37 Times Seen80000 Hash d2183968f9080b37babfeba3ccf10df2 24b9cf589ee6789e567fac3ae5acfc25826d00c6 4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc Loading...

	img1.wsimg.com/parking-lander/static/js/1.3befbe47.chunk.js	271 kB	2023-05-16	2023-07-05
Pretty URL img1.wsimg.com/parking-lander/static/js/1.3befbe47.chunk.js IP 23.36.79.43 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-16 20:39:42 Last Seen2023-07-05 22:47:11 Times Seen11776 Hash 8d281018702a046d8f39d2ff2e738df7 4945455271d6427f4bd7eee47ccc86adafb472c4 69fbdeb1d46529857e35668368cb9eacbc4dc5bcf21886c249ccc7109c32751d Loading...

	www.google.com/adsense/domains/caf.js?abp=1	148 kB	2023-06-01	2023-06-07
Pretty URL www.google.com/adsense/domains/caf.js?abp=1 IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-01 23:51:52 Last Seen2023-06-07 10:01:27 Times Seen26 Hash f0d8228166dc2942e629058b6f12e3fd 91f98495471f2dbb2aba7973c296e742804f92e5 b8944e5b03a9f98aeef5c421441e65c44b6ed3b206d52d7db15f729bc7e79f41 Loading...

	img1.wsimg.com/parking-lander/static/js/0.74319c28.chunk.js	440 kB	2023-05-16	2023-07-05
Pretty URL img1.wsimg.com/parking-lander/static/js/0.74319c28.chunk.js IP 23.36.79.43 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-16 20:39:42 Last Seen2023-07-05 22:47:11 Times Seen11774 Hash bac193b754e3282c42943c109a28c2bc e2473f408e3644560a38e0f2d7a6b4688b2c7462 b090615575fce0a9b499b5f01fc01d3b83b1d2b950748412744e1927ed1f78c8 Loading...

HTTP Transactions (13)

URL IP Response Size

lygygin.com/UcidZ/login.php/

45.33.2.79

0 B

URL
lygygin.com/UcidZ/login.php/
IP
45.33.2.79:0
ASN
#63949 Linode, LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /UcidZ/login.php/ HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
content-length: 0
location: http://lygygin.com/UcidZ/login.php/
cache-control: no-cache
set-cookie: mtmssl=1; path=/;

lygygin.com/UcidZ/login.php/

45.33.2.79

560 B

URL
lygygin.com/UcidZ/login.php/
IP
45.33.2.79:0
ASN
#63949 Linode, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (333)
Size
560 B (560 bytes)
Hash
ff8767916cbecd715ff277dfb9adb9a1
9f934179e75aec3856d98e8be6ae94a5d7a0ba52
e7679ce540d86b16cb98d56639d7209d2f0b9a4250152e3ed23a5b79e3ad5f20

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /UcidZ/login.php/ HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: mtmssl=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Sun, 04 Jun 2023 00:59:06 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close

lygygin.com/UcidZ/login.php?gp=1&js=1&uuid=1685840346.0060577845&other_args=eyJ1cmkiOiAiL1VjaWRaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

45.33.2.79

302 Found

0 B

URL User Request GET HTTP/1.1
lygygin.com/UcidZ/login.php?gp=1&js=1&uuid=1685840346.0060577845&other_args=eyJ1cmkiOiAiL1VjaWRaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
45.33.2.79:443
ASN
#63949 Linode, LLC

Certificate
IssuerLet's Encrypt
Subjectlygygin.com
Fingerprint98:F0:0B:D5:E8:86:10:F9:64:DD:E7:A7:B0:A7:48:7F:E7:D0:CB:B8
ValidityFri, 05 May 2023 00:22:11 GMT - Thu, 03 Aug 2023 00:22:10 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /UcidZ/login.php?gp=1&js=1&uuid=1685840346.0060577845&other_args=eyJ1cmkiOiAiL1VjaWRaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lygygin.com/UcidZ/login.php/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: mtmssl=1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
content-length: 0
location: http://lygygin.com/UcidZ/login.php?gp=1&js=1&uuid=1685840346.0060577845&other_args=eyJ1cmkiOiAiL1VjaWRaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
cache-control: no-cache
set-cookie: mtmssl=1; path=/;

173.255.194.134

302 Found

0 B

URL User Request GET HTTP/1.1
lygygin.com/UcidZ/login.php?gp=1&js=1&uuid=1685840346.0060577845&other_args=eyJ1cmkiOiAiL1VjaWRaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
173.255.194.134:443
ASN
#63949 Linode, LLC

Certificate
IssuerLet's Encrypt
Subjectlygygin.com
Fingerprint98:F0:0B:D5:E8:86:10:F9:64:DD:E7:A7:B0:A7:48:7F:E7:D0:CB:B8
ValidityFri, 05 May 2023 00:22:11 GMT - Thu, 03 Aug 2023 00:22:10 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /UcidZ/login.php?gp=1&js=1&uuid=1685840346.0060577845&other_args=eyJ1cmkiOiAiL1VjaWRaL2xvZ2luLnBocCIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://lygygin.com/
DNT: 1
Connection: keep-alive
Cookie: mtmssl=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Sun, 04 Jun 2023 00:59:07 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1
referrer-policy: no-referrer
x-mtm-path: 3
x-mtm-prov: 552:0.07;558:0.00
x-mtm-rd: 0.02
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJseWd5Z2luLmNvbSIsImh0dHA6Ly93d3c2Lmx5Z3lnaW4uY29tLz90ZW1wbGF0ZT1BUlJPV18zJnRkZnM9MCZzX3Rva2VuPTE2ODU4NDAzNDcuMDE3NjQwMDAwMCZ1dWlkPTE2ODU4NDAzNDcuMDE3NjQwMDAwMCZzZWFyY2hib3g9MSZzaG93RG9tYWluPTEiLDEsIjIwMjMtMDYtMDQgMDA6NTk6MDciLDEsIjE2ODU4NDAzNDcuMDE3NjQwMDAwMCIsNTU4LG51bGwsbnVsbF0:1q5c5L:93iLFfQqx1adBBDfl_C4tqGi5UM; expires=Sun, 04-Jun-2023 01:59:07 GMT; Max-Age=3600; Path=/
connection: close

www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1

35.186.238.101

200 OK

2.8 kB

URL User Request GET HTTP/1.1
www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1
IP
35.186.238.101:80
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2830), with no line terminators
Size
2.8 kB (2830 bytes)
Hash
81b0802c48477df9941990beb3b170a0
b6d4c70c20fef89274aa1b0b09b9b74718b7f978
4c7c69b3356c473e6ad62a8672880741ef7afea00a386e85f70ff910999686f0

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1 HTTP/1.1
Host: www6.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Sun, 04 Jun 2023 00:59:07 GMT
Content-Type: text/html
Content-Length: 2830
Last-Modified: Tue, 16 May 2023 17:56:38 GMT
ETag: "6463c3d6-b0e"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_FHzUNdXJLXQLSZ5E2YHUyia3iC7Zq5N9elHHRusaZrwMuPE4CqYgi2ZswtZXL1tmCYRp1cZWwmJojOd3UPUc3w
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
89cf78789180bd118e9b97dad5ed4053
820d2363f5e826f226de0eb9ad170cb135e1b1fd
3effb60c74b1b0e55a5bddd1aa2d3daae71e18e14f273e38cc57db481cc7d04c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 00:59:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

img1.wsimg.com/parking-lander/static/js/1.3befbe47.chunk.js

23.36.79.43

200 OK

58 kB

URL GET HTTP/2
img1.wsimg.com/parking-lander/static/js/1.3befbe47.chunk.js
IP
23.36.79.43:443
ASN
#20940 Akamai International B.V.

Requested by
http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
Fingerprint4D:28:AB:B5:BB:E6:84:09:15:A9:80:A1:56:45:20:CB:87:93:83:A3
ValidityThu, 15 Sep 2022 21:44:19 GMT - Tue, 17 Oct 2023 21:44:19 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
58 kB (57519 bytes)
Hash
8d281018702a046d8f39d2ff2e738df7
4945455271d6427f4bd7eee47ccc86adafb472c4
69fbdeb1d46529857e35668368cb9eacbc4dc5bcf21886c249ccc7109c32751d

HTTP Headers

GET /parking-lander/static/js/1.3befbe47.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www6.lygygin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: FQFtB6roa2CtDmBk5tdWtvJGiorDvpf6TgM+y5jlxNIcUMFa/ykvtIcEoML94gsMBZJ8faVzKDKxzYjNkulYPw==
x-amz-request-id: X6YP8342KGVGGEGX
last-modified: Tue, 16 May 2023 17:55:27 GMT
etag: "8d281018702a046d8f39d2ff2e738df7"
x-amz-server-side-encryption: AES256
x-amz-version-id: IJUfT4CYASQLgnDRPo4YmuckOEqxD6lE
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Mon, 03 Jun 2024 00:59:07 GMT
date: Sun, 04 Jun 2023 00:59:07 GMT
content-length: 57519
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img1.wsimg.com/parking-lander/static/js/main.a232e72f.chunk.js

23.36.79.43

200 OK

1.8 kB

URL GET HTTP/2
img1.wsimg.com/parking-lander/static/js/main.a232e72f.chunk.js
IP
23.36.79.43:443
ASN
#20940 Akamai International B.V.

Requested by
http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
Fingerprint4D:28:AB:B5:BB:E6:84:09:15:A9:80:A1:56:45:20:CB:87:93:83:A3
ValidityThu, 15 Sep 2022 21:44:19 GMT - Tue, 17 Oct 2023 21:44:19 GMT

File type
ASCII text, with very long lines (4948)
Size
1.8 kB (1841 bytes)
Hash
b95b242e427bb1b08151ac8b539201c9
0479828b13a1f173b88da1cadd5644ce1fb2b427
6c5e0f7a68f0b7062ed8a4a043cb135d90f11dacb5ff393b1f32ca0c25b43ac3

HTTP Headers

GET /parking-lander/static/js/main.a232e72f.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www6.lygygin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: iPZDSU0rMfz9iuojT9ZwXlONdi8NCajfIsa0fcpb4h1Rcl6IWbYBY94U/qq8J2lOq8e2Dxeoo7E=
x-amz-request-id: X6YTHS4WKD97BEDK
last-modified: Tue, 16 May 2023 17:55:27 GMT
etag: "b95b242e427bb1b08151ac8b539201c9"
x-amz-server-side-encryption: AES256
x-amz-version-id: 5j_GYvSn3zr8huqW3v_uDorSyiKea1l3
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Mon, 03 Jun 2024 00:59:07 GMT
date: Sun, 04 Jun 2023 00:59:07 GMT
content-length: 1841
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

www6.lygygin.com/px.js?ch=1&abp=1

35.186.238.101

200 OK

476 B

URL GET HTTP/1.1
www6.lygygin.com/px.js?ch=1&abp=1
IP
35.186.238.101:80
ASN
#15169 GOOGLE

Requested by
http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1

File type
ASCII text
Size
476 B (476 bytes)
Hash
d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /px.js?ch=1&abp=1 HTTP/1.1
Host: www6.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1
Cookie: caf_ipaddr=91.90.42.154; country=NO; city=""; expiry_partner=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Sun, 04 Jun 2023 00:59:07 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Tue, 16 May 2023 17:56:17 GMT
ETag: "6463c3c1-1dc"
Accept-Ranges: bytes
Via: 1.1 google

www6.lygygin.com/px.js?ch=2&abp=1

35.186.238.101

200 OK

476 B

URL GET HTTP/1.1
www6.lygygin.com/px.js?ch=2&abp=1
IP
35.186.238.101:80
ASN
#15169 GOOGLE

Requested by
http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1

File type
ASCII text
Size
476 B (476 bytes)
Hash
d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /px.js?ch=2&abp=1 HTTP/1.1
Host: www6.lygygin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1
Cookie: caf_ipaddr=91.90.42.154; country=NO; city=""; expiry_partner=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Sun, 04 Jun 2023 00:59:07 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Tue, 16 May 2023 17:56:38 GMT
ETag: "6463c3d6-1dc"
Accept-Ranges: bytes
Via: 1.1 google

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
37666b9ccb9ec1632df818aa5b9c30ce
73a1cc9b50fa59f3262e6b0577d70514ae639adf
d62cc75cd09bd1a62debedc6273aec0e8206c45fc993553253627a3464f46d57

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 00:59:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/adsense/domains/caf.js?abp=1

142.250.74.132

200 OK

148 kB

URL GET HTTP/2
www.google.com/adsense/domains/caf.js?abp=1
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintA8:95:C3:CB:D6:3F:BC:0A:7D:FF:36:72:5E:2F:56:26:9F:EB:77:0E
ValidityFri, 19 May 2023 12:58:13 GMT - Fri, 11 Aug 2023 12:58:12 GMT

File type
ASCII text, with very long lines (2125)
Size
148 kB (148476 bytes)
Hash
f0d8228166dc2942e629058b6f12e3fd
91f98495471f2dbb2aba7973c296e742804f92e5
b8944e5b03a9f98aeef5c421441e65c44b6ed3b206d52d7db15f729bc7e79f41

HTTP Headers

GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www6.lygygin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sun, 04 Jun 2023 00:59:07 GMT
expires: Sun, 04 Jun 2023 00:59:07 GMT
cache-control: private, max-age=3600
etag: "14242134057395805302"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

img1.wsimg.com/parking-lander/static/js/0.74319c28.chunk.js

23.36.79.43

200 OK

440 kB

URL GET HTTP/2
img1.wsimg.com/parking-lander/static/js/0.74319c28.chunk.js
IP
23.36.79.43:443
ASN
#20940 Akamai International B.V.

Requested by
http://www6.lygygin.com/?template=ARROW_3&tdfs=0&s_token=1685840347.0176400000&uuid=1685840347.0176400000&searchbox=1&showDomain=1
Certificate
IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
Fingerprint4D:28:AB:B5:BB:E6:84:09:15:A9:80:A1:56:45:20:CB:87:93:83:A3
ValidityThu, 15 Sep 2022 21:44:19 GMT - Tue, 17 Oct 2023 21:44:19 GMT

File type
ASCII text, with very long lines (65462)
Size
440 kB (439808 bytes)
Hash
bac193b754e3282c42943c109a28c2bc
e2473f408e3644560a38e0f2d7a6b4688b2c7462
b090615575fce0a9b499b5f01fc01d3b83b1d2b950748412744e1927ed1f78c8

HTTP Headers

GET /parking-lander/static/js/0.74319c28.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www6.lygygin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: LKSN7uw2w4CmNKEtC7qhPZK02ksJy7+xWSpEARKEYiUSRRC+QHwkTxMis4QGv8zJSRoJbE7Of8A=
x-amz-request-id: X6YRDKH8Q3M43N33
last-modified: Tue, 16 May 2023 17:55:27 GMT
etag: "bac193b754e3282c42943c109a28c2bc"
x-amz-server-side-encryption: AES256
x-amz-version-id: rzklZnGk0HR_I72MMm5tg87GC.kXY08W
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Mon, 03 Jun 2024 00:59:07 GMT
date: Sun, 04 Jun 2023 00:59:07 GMT
content-length: 139520
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL

IP

ASN

File type