Report Overview

  1. Submitted URL

    t.y1h1.com/visit/61e55f98081ec20007c7f606?exid=1670195393-TxftLV&srcTrafficSource=Redirect&srcCampaign=0_Redirect_Auto&srcPub=1962&type=Cloak

  2. IP

    104.26.3.157

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-12-05 05:29:57

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
translate.google.com11560001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
gift1204.googlevip.topunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
t.y1h1.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
translate.googleapis.com10050001-01-01T00:00:00Z0001-01-01T00:00:00Z
region1.google-analytics.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
rs.y1h1.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
www.google.com70001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumgift1204.googlevip.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (26)

HTTP Transactions (50)

URLIPResponseSize
t.y1h1.com/visit/61e55f98081ec20007c7f606?exid=1670195393-TxftLV&srcTrafficSource=Redirect&srcCampaign=0_Redirect_Auto&srcPub=1962&type=Cloak
104.26.2.157301 Moved Permanently0 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
t.y1h1.com/visit/61e55f98081ec20007c7f606?exid=1670195393-TxftLV&srcTrafficSource=Redirect&srcCampaign=0_Redirect_Auto&srcPub=1962&type=Cloak
104.26.3.157200 OK422 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
rs.y1h1.com/recaptcha.css
104.26.2.157200 OK28 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
push.services.mozilla.com/
52.39.62.124101 Switching Protocols0 B
www.google.com/recaptcha/api.js?render=6LcXQ7EUAAAAAEY-1sgLx4eGQQDwXNdzlKssae-Y
216.58.207.228200 OK584 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
gift1204.googlevip.top/commons/ww/survey1/omg.png
104.26.1.22200 OK84 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.digicert.com/
93.184.220.29200 OK279 B
rs.y1h1.com/trans.css
104.26.2.157200 OK76 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
rs.y1h1.com/backbutton.js
104.26.2.157200 OK2.2 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
142.250.74.35200 OK163 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
translate.googleapis.com/translate_static/css/translateelement.css
142.250.74.106200 OK3.6 kB
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.qvkLIg6MEVc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoxsXHCM1CnEJ_o5xsmnbdq_po64A/m=el_main
142.250.74.106200 OK75 kB
ocsp.pki.goog/gts1c3
142.250.74.131200 OK472 B
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK15 kB
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK16 kB
region1.google-analytics.com/g/collect?v=2&tid=G-37GE99Q100&gtm=2oebu0&_p=1434780322&cid=1403278240.1670218186&ul=en-us&sr=1280x1024&_s=1&sid=1670218185&sct=1&seg=0&dl=https%3A%2F%2Fgift1204.googlevip.top%2Fcommons%2Fww%2Fsurvey1%2Findex_en-us.php%3Fvid%3D1670218186-LiKsIp%26utm_medium%3D1962%26utm_source%3DRedirect%26utm_campaign%3D0_AutoSmartlink_Auto%26utm_content%3DWW_3592_SmartLink_RandomPub%26isp%3DBlix%2BGroup%2BAS%26city%3DOslo%26br%3D0%26sp%3D1%26iw%3DFalse%26checked%3D0%26trans%3D1%26ipp%3D0%26lpkey%3D161c705121dc879786%26ck%3D2&dt=Survey&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content0 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d407108-e7e2-4672-80f5-d4b4c3e66151.jpeg
34.120.237.76200 OK6.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33bab20-1689-4962-985e-15e304482bee.jpeg
34.120.237.76200 OK9.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8a7b1a4-645c-4164-abf9-5450ef421f97.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6034ca-f8c1-4979-8165-5f755e5d12a1.jpeg
34.120.237.76200 OK6.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba66ee21-e2f8-434c-a2b3-004950fdfd58.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d81855b-98f7-4c0c-bfb4-78957d8c433d.jpeg
34.120.237.76200 OK7.0 kB
rs.y1h1.com/copy.js
104.26.2.157200 OK0 B
rs.y1h1.com/checkbot.js
104.26.2.157200 OK0 B
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
142.250.74.110200 OK0 B
rs.y1h1.com/load.js
104.26.2.157200 OK0 B
t.y1h1.com/recaptcha/verify?token=03AEkXODAEHXYotd8o2Ngfl-495GE3OuQeGb57GlOvc5-qtdEf8VtZEu9bsE3RzhE74IQI_pMeINMJVaX5XvX78K5R61bsXd6mXTacCOXUwVBhh2krRh3LnJwC-yERIYD3iQsHya881u8kPxSkjvVVOVTQ6rKAhr8iiESlBGbC2NTv9AAtzqenOa381A167BdomKNVIc7Y3mj6CdQCO8kFUvlnLLQ0fnG6VL1SEVsYvVq2g07DwRB0XDkoYbVXEdu2FKaH2sj-5l_C2lefYtfb834dyEZPPvXRBSLQ-KpRM6j_-kxQTIshaXu8g1EPsdYjatbQgkGWPgJaSJEVo4RF5AARRPERR3OprV8oQRSFD_g0FAwo2NtDMC_jvfqumivn-uTNkXmIVn4HfGFQakmEc5iaqDROcLKW-LjnGaYQJ74gBzio6YNg_OCjmRU4PZSgkNwA0-4B7u3cx6EcDzslSne1vMC0Th2KSoWjvN5S5qhJhIJ7HweFyIYzYAqRlgwWmixhV5EwAAqykrSrKF2AycFy1DVeZnRhWA&vid=1670218186-LiKsIp&eventSubField=eventSub9&eventField=event9&botScore=0.5
104.26.2.157200 OK0 B
gift1204.googlevip.top/commons/ww/survey1/index_en-us.php?vid=1670218186-LiKsIp&utm_medium=1962&utm_source=Redirect&utm_campaign=0_AutoSmartlink_Auto&utm_content=WW_3592_SmartLink_RandomPub&isp=Blix+Group+AS&city=Oslo&br=0&sp=1&iw=False&checked=0&trans=1&ipp=0&lpkey=161c705121dc879786&ck=2
104.26.1.22200 OK0 B
gift1204.googlevip.top/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.26.1.22200 OK0 B
rs.y1h1.com/common.js
104.26.2.157200 OK0 B
rs.y1h1.com/push.js
104.26.2.157200 OK0 B