Report Overview

  1. Submitted URL

    acdhij123kq456ef--loading.3va4x232em05.xyz/specialoffer/

  2. IP

    104.21.2.69

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-11-24 04:19:47

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    16

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.pushflow.net1555800001-01-01T00:00:00Z0001-01-01T00:00:00Z
gesrrhsfhesthfh.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
acdhij123kq456ef--loading.3va4x232em05.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
my.rtmark.net90540001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z
bcehij123kq456fg--loading.x3xpht8fwd.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
trk.5kbwmcjljehc.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sectigo.com4870001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium3va4x232em05.xyzSinkholed
medium3va4x232em05.xyzSinkholed
medium3va4x232em05.xyzSinkholed
medium3va4x232em05.xyzSinkholed
mediumx3xpht8fwd.xyzSinkholed
medium5kbwmcjljehc.xyzSinkholed
mediumgesrrhsfhesthfh.xyzSinkholed
mediumx3xpht8fwd.xyzSinkholed

JavaScript (7)

HTTP Transactions (35)

URLIPResponseSize
acdhij123kq456ef--loading.3va4x232em05.xyz/specialoffer/
172.67.128.220200 OK2.5 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
acdhij123kq456ef--loading.3va4x232em05.xyz/specialoffer/css/style.css
172.67.128.220200 OK656 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
my.rtmark.net/p.js?f=sync&lr=1&partner=2f586e63ecc3dd2e4d3725c1ac88ed0458b4d4bea82c4396563bc8d29bca99db
139.45.195.8200 OK697 B
acdhij123kq456ef--loading.3va4x232em05.xyz/specialoffer/img/.png
172.67.128.220404 Not Found109 B
acdhij123kq456ef--loading.3va4x232em05.xyz/favicon.ico
172.67.128.220404 Not Found109 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
my.rtmark.net/img.gif?f=sync&partner=2f586e63ecc3dd2e4d3725c1ac88ed0458b4d4bea82c4396563bc8d29bca99db&ttl=&rurl=http%3A%2F%2Facdhij123kq456ef--loading.3va4x232em05.xyz%2Fspecialoffer%2F
139.45.195.8200 OK43 B
push.services.mozilla.com/
52.41.201.177101 Switching Protocols0 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
34.120.237.76200 OK6.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
34.120.237.76200 OK5.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg
34.120.237.76200 OK3.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
34.120.237.76200 OK14 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
34.120.237.76200 OK7.6 kB
e1.o.lencr.org/
23.36.76.226200 OK344 B
bcehij123kq456fg--loading.x3xpht8fwd.xyz/paidsurvey?subid=1219342537&country=%3C?php%20echo%20$_GET[%27country%27]?%3E
104.21.83.116301 Moved Permanently506 B
cdn.pushflow.net/scripts/current/sdk/pushflowSDK.js
104.21.234.208200 OK0 B
trk.5kbwmcjljehc.xyz/click.php?c=301&key=09ewk0dg22ia19yc1utshh1t&clickid=&website=&brand=&cate=&isp=&os=&browser=&country=&lang=&type=failed
104.21.41.60302 Found0 B
gesrrhsfhesthfh.xyz/jsjp/jsjpsurvey.php?subid=1219342537&country=%3C%3Fphp+echo+%24_GET%5B%27country%27%5D%3F%3E
104.21.80.132200 OK0 B
bcehij123kq456fg--loading.x3xpht8fwd.xyz/paidsurvey/?subid=1219342537&country=%3C?php%20echo%20$_GET[%27country%27]?%3E
104.21.83.116200 OK0 B