Report - tinyurl.com/4ak356kd

Report Overview

Submitted URL
tinyurl.com/4ak356kd
IP
172.67.1.225
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-23 13:16:50
Access
public
Website Title
Problem loading page
Final URL
about:neterror?e=netReset&u=http%3A//marginmasks.com/0/0/0/025b6d8b7ad70f5396d4089574102474/akdim&c=UTF-8&d=The%20connection%20to%20the%20server%20was%20reset%20while%20the%20page%20was%20loading.
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
marginmasks.com	unknown	2024-03-07	2024-04-08	2024-04-18	948 B	0 B	0.0.0.0
tinyurl.com	10084	2002-01-27	2012-05-21	2024-04-23	474 B	7.2 kB	104.20.138.65
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-22	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	about:neterror?e=netReset&u=http%3A//marginmasks.com/0/0/0/025b6d8b7ad70f5396d4089574102474/akdim&c=UTF-8&d=The%20connection%20to%20the%20server%20was%20reset%20while%20the%20page%20was%20loading.	0 B	2023-03-07	2024-05-03
Pretty URL about:neterror?e=netReset&u=http%3A//marginmasks.com/0/0/0/025b6d8b7ad70f5396d4089574102474/akdim&c=UTF-8&d=The%20connection%20to%20the%20server%20was%20reset%20while%20the%20page%20was%20loading. IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-03 17:40:24 Times Seen37309324 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (4)

	URL	IP	Response	Size
	tinyurl.com/4ak356kd	104.20.138.65	301 Moved Permanently	6.0 kB
URL User Request GET HTTP/2 tinyurl.com/4ak356kd IP 104.20.138.65:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjecttinyurl.com Fingerprint84:03:D8:A5:59:CC:8A:4A:44:A5:81:7D:68:AA:A0:B7:86:A6:AA:44 ValiditySun, 31 Mar 2024 23:28:39 GMT - Sat, 29 Jun 2024 23:28:38 GMT File type data Size 6.0 kB (5988 bytes) Hash bfdaa9b0882dc4ba0c2f6d94c2866af6 9272dfee44af1e2235dc1213cad5ceb92ac7c3eb ce007cdefe71d96d77814b347efeeda3eed5233d127b693f0996949d00e7dc03 HTTP Headers `GET /4ak356kd HTTP/1.1 Host: tinyurl.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently date: Tue, 23 Apr 2024 13:16:25 GMT content-type: text/html; charset=UTF-8 location: https://marginmasks.com/0/0/0/025b6d8b7ad70f5396d4089574102474/akdim referrer-policy: unsafe-url x-robots-tag: noindex x-tinyurl-redirect-type: redirect cache-control: max-age=0, must-revalidate, no-cache, no-store, private x-tinyurl-redirect: eyJpdiI6ImNrNkFiSW9TQjY2emppV0NEMm1SUkE9PSIsInZhbHVlIjoibzhIOW01WXhFRjJGanFjMGk4RXkrclhONWl6NE1NUnVNMU1vZXNZVWY3OElEalpGZ3g3NmVVUlZpOWlUMlFic01JNzdmWU8ydmlwSW0yOUJaS1hubmc9PSIsIm1hYyI6IjY2NWM4NmM3NWIyNGQyNWZiYmEyYzBhNDAzYWFiNjRjOTY4NzMzOTk0NmY1NzM3NWVjZWJlY2VkODQ0Y2Y4OGQiLCJ0YWciOiIifQ== x-content-type-options: nosniff x-xss-protection: 1; mode=block cf-cache-status: HIT set-cookie: __cf_bm=A6yAhliz4SRG7kEs3RJoVmKvNBtEaCr4xBBPh0jfX5M-1713878185-1.0.1.1-y.w_B89Nc41V41L_O1lq2UPrPgUnjt.K5pQIYop8e7tVNLekSNBRcD_VzwnkaNBzcVZG7dvYvdD5muSedzv58A; path=/; expires=Tue, 23-Apr-24 13:46:25 GMT; domain=.tinyurl.com; HttpOnly; Secure; SameSite=None vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload server: cloudflare cf-ray: 878e20c17fa056ab-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml	35.244.181.201		444 B
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type XML 1.0 document, ASCII text, with very long lines (332) Size 444 B (444 bytes) Hash 3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463 HTTP Headers `GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1 Host: aus5.mozilla.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Cache-Control: no-cache Pragma: no-cache Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK server: nginx rule-id: unknown rule-data-version: unknown content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=3xOb3U-8W4xscxi2mPwjO47ypkCS26KPIJZ6j6nHACe9Tj8Gbl9jw6oOsX2-JwJ85Kleiq_ripHKxcbBGaAImhyrG85PJonnBI1a4pzbkkZrtewH0rdcF0iKINSXzse5 strict-transport-security: max-age=31536000; x-content-type-options: nosniff content-security-policy: default-src 'none'; frame-ancestors 'none' x-proxy-cache-status: MISS content-encoding: gzip via: 1.1 google date: Tue, 23 Apr 2024 13:16:10 GMT content-type: text/xml; charset=utf-8 vary: Accept-Encoding content-length: 444 age: 34 cache-control: public,max-age=90 alt-svc: clear X-Firefox-Spdy: h2

	marginmasks.com/0/0/0/025b6d8b7ad70f5396d4089574102474/akdim	0.0.0.0		0 B
URL User Request GET marginmasks.com/0/0/0/025b6d8b7ad70f5396d4089574102474/akdim IP 0.0.0.0:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /0/0/0/025b6d8b7ad70f5396d4089574102474/akdim HTTP/1.1 Host: marginmasks.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache`

	marginmasks.com/0/0/0/025b6d8b7ad70f5396d4089574102474/akdim	0.0.0.0		0 B
URL User Request GET marginmasks.com/0/0/0/025b6d8b7ad70f5396d4089574102474/akdim IP 0.0.0.0:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /0/0/0/025b6d8b7ad70f5396d4089574102474/akdim HTTP/1.1 Host: marginmasks.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache`