Report - appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK

Report Overview

Submitted URL
appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}
IP
139.45.197.155
ASN
#9002 RETN Limited
Submitted
2022-10-25 06:59:09
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	1.3 kB	2.6 kB	93.184.220.29
littlecdn.com	11785	2019-06-04T12:44:02Z	2023-03-10T08:59:05Z	1.2 kB	4.6 kB	104.22.25.116
pulserviral.com	305654	2020-06-14T00:04:44Z	2023-03-10T01:40:25Z	444 B	737 B	139.45.197.155
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	758 B	2.8 kB	143.204.55.115
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	2.3 kB	6.2 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	401 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	321 B	229 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	594 B	127 B	52.89.20.60
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.2 kB	50 kB	34.120.237.76
appzeyland.com	199164	2021-11-26T20:11:08Z	2023-03-08T08:29:05Z	2.9 kB	8.8 kB	139.45.197.152

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-10-25	medium	appzeyland.com	Sinkholed
2022-10-25	medium	appzeyland.com	Sinkholed
2022-10-25	medium	appzeyland.com	Sinkholed
2022-10-25	medium	appzeyland.com	Sinkholed
2022-10-25	medium	appzeyland.com	Sinkholed

JavaScript (16)

	URL	Size	First Seen	Last Seen
	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	489 B	2023-03-07	2024-02-16
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:03 Last Seen2024-02-16 12:44:28 Times Seen5069 Hash b59d52e5c8c1c905dd20084f27bc5261 492b79822be8f2f1d46714e43274e2500de5c0c5 4795baeddefb045a60541029990e6da282eb7d0cb2f9d20da866382567029649 Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	3.7 kB	2023-03-10	2023-03-10
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 11:54:49 Last Seen2023-03-10 14:43:46 Times Seen1 Hash 85b3bf6cf31a420a52fb5918dd645e42 0318684a1d4f6418975f7b1b0836c64609d52e6b e11afedac540bf08cec2c3684196cd9f9bc7ebc3364089dab93d2ec626c40b95 Loading...

	littlecdn.com/apps/templates/_assets/scripts/vanillaqr.min.js	12 kB	2023-03-07	2024-02-24
Pretty URL littlecdn.com/apps/templates/_assets/scripts/vanillaqr.min.js IP 104.22.25.116 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:36 Last Seen2024-02-24 08:18:44 Times Seen875 Hash 52496515e5168e5cae52f68c2a08c160 f2f3d0ff9a721e527192a337646e64953e56da12 613928679e7493875c7503548e50e354341c8984b91cf28ba7e3317967022854 Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	3.2 kB	2023-03-08	2023-03-10
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:17:57 Last Seen2023-03-10 14:43:47 Times Seen1 Hash 20009f1a55809400defba59b9ca2332e 386ab51e9615a10befdd483115d3d10d082325bb 4f839a56760213c22ab5b452ec5e00488bc23b475710220fe06e6404a676ef96 Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	58 B	2023-03-07	2023-03-17
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:36 Last Seen2023-03-17 12:45:09 Times Seen1 Hash c7e59c41ecdc2cd6a644f383812c76d3 fc291f20d4dda8242f6c0b9bc9438a8472396f53 ded92e7210cb5a664074b870f89356d4c96a16315b10f224eba15c21b8f1ba1d Loading...

	appzeyland.com/pfe/current/micro.tag.min.js?uhd=1&z=4574858&ymid={SOURCE_ID}&var=4949117&sw=/sw-check-permissions/4574858	76 kB	2023-03-10	2023-03-10
Pretty URL appzeyland.com/pfe/current/micro.tag.min.js?uhd=1&z=4574858&ymid={SOURCE_ID}&var=4949117&sw=/sw-check-permissions/4574858 IP 139.45.197.154 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 12:03:03 Last Seen2023-03-10 14:47:17 Times Seen1 Hash d031f94a00da1bfa511f17af53c7d879 f814a9bbdb16aba74ed31bdd8f8e7d2b636d2c28 da90ced1bc4fa07eaec6b7a4d0a10b7b3abb86cf207a8ccf67a53bebdaae78f6 Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	1.9 kB	2023-03-10	2023-03-10
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 11:54:50 Last Seen2023-03-10 14:43:47 Times Seen1 Hash d4eedf03f1e01a1114ca4949c9818063 2059b54d362adeabe2b18616d2f8720841a3541f 8d5daaa8a5e977f089a9668744322d64e29384b1bdf5dc13d74284a8f6665c22 Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	1.6 kB	2023-03-10	2023-03-10
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 11:54:50 Last Seen2023-03-10 14:43:47 Times Seen1 Hash 0245dcc7488ae25367d04dc60cf1e970 f3f341e0072e65b9831363ad24e2d40172822952 dbdb5d0eed89221a4e3dfbd264940279808dd5df3dcd0f03cf5b505c0f7c5722 Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	5.1 kB	2023-03-10	2023-03-10
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 14:43:47 Last Seen2023-03-10 14:43:47 Times Seen1 Hash 1126115f8286b634e78c418ab255c617 1280c44a89367711e728c88d7b9f4fd8d90ae00b 2d1251767f57befb81a454de6f17afc3884889de6e1c2dced6522ba36f841a0a Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	103 B	2023-03-10	2023-03-10
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 14:43:47 Last Seen2023-03-10 14:43:47 Times Seen1 Hash 0f5795ac84becad975c71b15dbef0261 b65431a99d6bf2b4709732fd4ef2573723ef837c 508686b518b3936275a4374f9a6b97e564d2d25b4ed471fedbed85fc9044854b Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	1.8 kB	2023-03-10	2023-03-10
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 11:54:49 Last Seen2023-03-10 14:43:47 Times Seen1 Hash 631e851ffce89dcd9ec550471b2613f3 f878e97e04f2578b4c079ceda95699e255537b52 e117db103114399e3e8a904488417fa1d3e7778a7b7ee120bfc9e6a29df32525 Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	358 B	2023-03-07	2023-04-17
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:02 Last Seen2023-04-17 00:56:25 Times Seen11 Hash 0e3d0b0d1e6eec347084ed5006928f20 cb1622346a2c21a015e64c16cfc302bbce4623da 56442cbc3d77d95e93f2c2aab32111741aedd2e37b6ea3394f6aa8c4b3b0212f Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	27 B	2023-03-07	2024-04-13
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:36 Last Seen2024-04-13 20:10:32 Times Seen3005 Hash dcdca1271ff14fa2a37aac2fdd562ad7 6f8d97801b33f24f2a736c00e1bc5805d9fd5eb7 66d82b0643143d1e9fa6ec2c7e07af701b2b274bc4db74b60ee4dcf5862d229c Loading...

	littlecdn.com/apps/templates/constructor/constructor-app-lab-v1/build/js/main.js	5.8 kB	2023-03-07	2023-03-26
Pretty URL littlecdn.com/apps/templates/constructor/constructor-app-lab-v1/build/js/main.js IP 104.22.25.116 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:36 Last Seen2023-03-26 05:20:02 Times Seen33 Hash 75e04709159bada31dfdb7ffadc03b6c 8cebdbf036fb07987571527de0663e9c2cbb5f8d 6a4dcf8b869f920153c0f79f52361852d74ebcd059f9f95f1df3ffdf52d7caf1 Loading...

	appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}	1.8 kB	2023-03-07	2023-03-17
Pretty URL appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} IP 139.45.197.152 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25:45 Last Seen2023-03-17 12:45:37 Times Seen1 Hash 5462cb035ebb6f921e1edf0156287212 70ddce5405ee1fa261a1c8ecb3dfd5ef5c354947 d57ae80c334e9df8bab11e6e868619779aebe60edeec109ffab51c1cd6b1a443 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 709d8ab694454d424084dc5886102775	80 B	2023-03-10	2023-03-10
Pretty Observations First Seen2023-03-10 14:43:47 Last Seen2023-03-10 14:43:47 Times Seen1 Hash 709d8ab694454d424084dc5886102775 e176b8c88a9ba4e7782d2b991be2db17d68475c8 4e2767591bbbe6416a2dc0bef73129757f8d7fb6dc753c77af5f4bd9cc9874a3 Loading...

HTTP Transactions (31)

URL IP Response Size

appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}

139.45.197.152

301 Moved Permanently

162 B

URL HTTP/1.1
appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}
IP
139.45.197.152:0
ASN
#9002 RETN Limited

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} HTTP/1.1
Host: appzeyland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 25 Oct 2022 06:58:59 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}

firefox.settings.services.mozilla.com/v1/

143.204.55.115

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
050bfd0155f265780e88dabcdde8b147
93ff7f46889322c0e9dbd3f4695e4c6a7fefe08f
9f3db0b3c51195b5313122d984f5f5f62b2df0f1d818eafefaa8b73e15914038

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Alert, Retry-After, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 25 Oct 2022 06:53:07 GMT
Expires: Tue, 25 Oct 2022 06:59:06 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xk17ysF-hGfC-TRbIWYzJrq8Kju8nm7B_AhJWfvrm2ZgfiJw43Vn3w==
Age: 352

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b3537658770790ad6cf0d727f0c0acd2
8365cadda05ef27b2ebd627d545e31886b512bde
df992311f130f15459739841de925c7eec2604d5a68ca6b2a67b6dc8d229212c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF992311F130F15459739841DE925C7EEC2604D5A68CA6B2A67B6DC8D229212C"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4147
Expires: Tue, 25 Oct 2022 08:08:06 GMT
Date: Tue, 25 Oct 2022 06:58:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11372
Expires: Tue, 25 Oct 2022 10:08:31 GMT
Date: Tue, 25 Oct 2022 06:58:59 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: ZM+NB3iT3yIuqAnUXSzy2Hgle7GLyL8Log3XHuNeMB/VpDSQfl2fRK2Y98CWJlqPzzpItRMo3ls=
x-amz-request-id: 2Z6BZM2XZ1V25V91
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 06:08:50 GMT
age: 3009
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 06:58:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
26a312dd6c87a665997f56661f0828c4
a08ffaaf373b5d6afb2a739f1384d82673e92195
4d573be4e0a47e3417d5ed9d39775218792bbb9b9cdf49bb17904daeacd57cdc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D573BE4E0A47E3417D5ED9D39775218792BBB9B9CDF49BB17904DAEACD57CDC"
Last-Modified: Tue, 25 Oct 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 25 Oct 2022 12:58:59 GMT
Date: Tue, 25 Oct 2022 06:58:59 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.115

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 25 Oct 2022 06:33:32 GMT
Cache-Control: max-age=3600
Expires: Tue, 25 Oct 2022 07:05:26 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6KPdd2lLsfWpQbBI177KuwEkKFppFFOoXqC7TVmMnwC_DXb2tsGygg==
Age: 1527

appzeyland.com/templates/_assets/images/app-icons/shield.png?v=1.0

139.45.197.154

200 OK

6.3 kB

URL HTTP/2
appzeyland.com/templates/_assets/images/app-icons/shield.png?v=1.0
IP
139.45.197.154:0
ASN
#9002 RETN Limited

File type
PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Size
6.3 kB (6308 bytes)
Hash
4a2c1936c444996f735c0696006f92fd
14bd6f11317d3196371cb9302c2cea39e86fc609
585e926709c767219ddfed37ee10f83ff1306cba64079f6e3e013f658fb05f1a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /templates/_assets/images/app-icons/shield.png?v=1.0 HTTP/1.1
Host: appzeyland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}
Cookie: reverse=je_UfgaoPdBOBUfrtx0WOoat7PMJBIBixoOETQWwv78
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 06:58:59 GMT
content-type: image/png
content-length: 6308
last-modified: Mon, 24 Oct 2022 14:23:00 GMT
etag: "63569fc4-18a4"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
5258d0ac1bb48b57c2d33770c24e85ac
0a5c126c5213f1b52e5069f15b9bf577a2e95e35
fc4ee0f6e180a8d9c80985bfe34f6aeaba6aaf89f686e3a2f757140ec262612c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6343
Cache-Control: max-age=157989
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 06:58:59 GMT
Etag: "63573691-117"
Expires: Thu, 27 Oct 2022 02:52:08 GMT
Last-Modified: Tue, 25 Oct 2022 01:06:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
5258d0ac1bb48b57c2d33770c24e85ac
0a5c126c5213f1b52e5069f15b9bf577a2e95e35
fc4ee0f6e180a8d9c80985bfe34f6aeaba6aaf89f686e3a2f757140ec262612c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6343
Cache-Control: max-age=157989
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 06:58:59 GMT
Etag: "63573691-117"
Expires: Thu, 27 Oct 2022 02:52:08 GMT
Last-Modified: Tue, 25 Oct 2022 01:06:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7c6fdc8e76ef5875b5c965ade2df503e
45d548aa2a9d7ede163743274790700878eaea62
d2ff6eacd48af4892a2642e5d7bb925ca683062139f5a5cb4047f6f706830618

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4048
Cache-Control: max-age=94514
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 06:58:59 GMT
Etag: "63564795-1d7"
Expires: Wed, 26 Oct 2022 09:14:13 GMT
Last-Modified: Mon, 24 Oct 2022 08:06:45 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
5258d0ac1bb48b57c2d33770c24e85ac
0a5c126c5213f1b52e5069f15b9bf577a2e95e35
fc4ee0f6e180a8d9c80985bfe34f6aeaba6aaf89f686e3a2f757140ec262612c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2814
Cache-Control: max-age=154460
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 06:58:59 GMT
Etag: "63573691-117"
Expires: Thu, 27 Oct 2022 01:53:20 GMT
Last-Modified: Tue, 25 Oct 2022 01:06:25 GMT
Server: ECS (amb/6BC1)
X-Cache: HIT
Content-Length: 279

littlecdn.com/apps/templates/constructor/constructor-app-lab-v1/build/js/main.js

104.22.25.116

200 OK

2.4 kB

URL HTTP/2
littlecdn.com/apps/templates/constructor/constructor-app-lab-v1/build/js/main.js
IP
104.22.25.116:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (5806), with no line terminators
Size
2.4 kB (2397 bytes)
Hash
92f2e6313ec64eb6e0f1fa6fbcaa62d3
0a49e1e0cffa15bd4a82db81e28cf1e0d31e3a82
55548c2f8e2772593b0bfa44e8c49d509a0f6b5f15db2b33b6672a3757cc85b6

HTTP Headers

GET /apps/templates/constructor/constructor-app-lab-v1/build/js/main.js HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appzeyland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Tue, 25 Oct 2022 06:59:00 GMT
content-type: application/javascript
last-modified: Mon, 24 Oct 2022 14:23:00 GMT
vary: Accept-Encoding
etag: W/"63569fc4-16ae"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 939
server: cloudflare
cf-ray: 75f9112529ecb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2

push.services.mozilla.com/

52.89.20.60

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.89.20.60:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y6yulUJe0Pdx86MMQE25PQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CIBaGwEH+QLT8/Ft6QhmbqLX+Xo=

pulserviral.com/leadgen/track-impression/?z=4949117&b=12480490&ymid={CLICK_ID}&var={SOURCE_ID}

139.45.197.155

200 OK

148 B

URL HTTP/2
pulserviral.com/leadgen/track-impression/?z=4949117&b=12480490&ymid={CLICK_ID}&var={SOURCE_ID}
IP
139.45.197.155:0
ASN
#9002 RETN Limited

File type
JSON data\012- , ASCII text, with no line terminators
Size
148 B (148 bytes)
Hash
b6b687e96a106a40c1b798db11e424a1
3a1bdd567716044d9d47a24384b6ceb6c1d655d8
5a0ff8038222d22c1ffa3b51ad2ca58feb5f098ca4047d83b61a4e3ffe3d4857

HTTP Headers

GET /leadgen/track-impression/?z=4949117&b=12480490&ymid={CLICK_ID}&var={SOURCE_ID} HTTP/1.1
Host: pulserviral.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://appzeyland.com/
Origin: https://appzeyland.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 06:59:00 GMT
content-type: application/json
vary: Accept-Encoding
x-powered-by: PHP/7.4.27
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7824
Expires: Tue, 25 Oct 2022 09:09:25 GMT
Date: Tue, 25 Oct 2022 06:59:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7824
Expires: Tue, 25 Oct 2022 09:09:25 GMT
Date: Tue, 25 Oct 2022 06:59:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7824
Expires: Tue, 25 Oct 2022 09:09:25 GMT
Date: Tue, 25 Oct 2022 06:59:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7824
Expires: Tue, 25 Oct 2022 09:09:25 GMT
Date: Tue, 25 Oct 2022 06:59:01 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49bb46dd-5578-4e72-9aed-dc70960d4c97.jpeg

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49bb46dd-5578-4e72-9aed-dc70960d4c97.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7633 bytes)
Hash
edae4c2a51941f9d01ea6658430a95b8
ed419179e1460d655f14735e430cbbd76ab2a869
92f280cc9ad01c6901b08269a12908b927877082952ec52fe9a082910c181076

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49bb46dd-5578-4e72-9aed-dc70960d4c97.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7633
x-amzn-requestid: e85011ac-422d-44b3-8af4-32d1c657597f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3D6EYXIAMFRlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357054c-4f56cf37570dfcbe64ce4778;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: w3KKBDQzR5-BVF158SvYqzoDTuT1Ayx64lHy02MoBWUkOWR4H3ZTqg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:17 GMT
age: 32924
etag: "ed419179e1460d655f14735e430cbbd76ab2a869"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.2 kB (4206 bytes)
Hash
3cf322f19151bcfa374c2e32b9ac986f
e8e69ac951def18bc1e03ecd4fe8a21d3b825b27
54ddfd1876f65e264b9b3209a0e805a3796013b4aacc8e9fd20b49754b4917a0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4206
x-amzn-requestid: 6b02f96a-ea03-4eff-acde-c73925260102
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3E3GPQoAMFpIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570552-77cf762d0e54f1f60efe52c3;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:18 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: jiu-Z6DMgXxXdZ5BDwjNoq5Y15kBgM894k4EY2qSRZKdvk0bfkn89A==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:16 GMT
age: 32925
etag: "e8e69ac951def18bc1e03ecd4fe8a21d3b825b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9209 bytes)
Hash
89448f1a52030b28e9ecfcdc190787d4
5080ba75c230fd2b303f29a9b64868c6e8771df8
10a736997d441e274a54e9689c349d407087fef7aa7c0f4d0a7a603e446fdabd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9209
x-amzn-requestid: 94dad7b4-9c12-4bda-9202-3b7427185182
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aLiElGzEIAMFnOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e16e9-3c79cd392d5bc4312a730cda;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 03:00:57 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: c5_B2RXKJx7FHrQvHdCG50zcDFWUqaaZu0GYuCxEI8fpK019dSlD3Q==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 13:16:16 GMT
age: 63765
etag: "5080ba75c230fd2b303f29a9b64868c6e8771df8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47edb01a-a8e6-4baf-848d-db16e2f70211.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6251 bytes)
Hash
65d8d48ccc1c14c53b1ab16057d641d8
36f72d915609993e908d41cb5cf0b1c6b4c79830
8558f68db30b99216752cc3b5861fdd315313821c81efbb56420b3d101cdc5b1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47edb01a-a8e6-4baf-848d-db16e2f70211.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6251
x-amzn-requestid: a81718c4-ac06-4388-bb9b-d92c02528226
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aYvM2E-ToAMFTQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63535f1e-2176b3c742eab3242fa1d58a;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 03:10:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ewGGxNqR1tK0UBWIYKNo8NsWApKIB1SmESnRUtEndmJExRG-BpMa2g==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 07:00:24 GMT
age: 86317
etag: "36f72d915609993e908d41cb5cf0b1c6b4c79830"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.1 kB (8090 bytes)
Hash
531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fUBXr7SKYdvhryoB8p9to-Eo8twjspRYnHO2xf9TtvLJIIyOwe3W1w==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 08:34:45 GMT
age: 80656
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8735 bytes)
Hash
8502c90bf679dce29b1c2a87606bbb3e
7940c911dea3882ab8a7ff70240f4edc1b89a56d
ccc5ab3068b7f90276124148a812eb26951a95d7c146bdcf28a69a3d05f76ee2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facb7f3ea-1b51-4cac-a5ab-7201a12df641.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: 51dfaabc-ee88-465f-8da7-fd6739cf7794
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aZSHjHeLIAMF8mQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635396fc-1e4ad2d647a7f07a094574be;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 07:08:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dgxcF8hXUOo_WqQwpd0yctMNPuB-IfmSRxD1_TRG7zuV3b5EbpVIig==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 07:48:43 GMT
age: 83418
etag: "7940c911dea3882ab8a7ff70240f4edc1b89a56d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

appzeyland.com/zone?&pub=0&zone_id=4574858&is_mobile=false&domain=appzeyland.com&var=4949117&ymid=%7BSOURCE_ID%7D&var_3=&dsig=&action=prerequest

139.45.197.154

200 OK

0 B

URL HTTP/2
appzeyland.com/zone?&pub=0&zone_id=4574858&is_mobile=false&domain=appzeyland.com&var=4949117&ymid=%7BSOURCE_ID%7D&var_3=&dsig=&action=prerequest
IP
139.45.197.154:0
ASN
#9002 RETN Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

POST /zone?&pub=0&zone_id=4574858&is_mobile=false&domain=appzeyland.com&var=4949117&ymid=%7BSOURCE_ID%7D&var_3=&dsig=&action=prerequest HTTP/1.1
Host: appzeyland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appzeyland.com
Connection: keep-alive
Referer: https://appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}
Cookie: reverse=je_UfgaoPdBOBUfrtx0WOoat7PMJBIBixoOETQWwv78
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 06:59:07 GMT
content-length: 0
x-trace-id: 4bfbdbb3cac694dba915138e7286cd8f
access-control-allow-origin: https://appzeyland.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=60
x-content-type-options: nosniff
X-Firefox-Spdy: h2

appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}

139.45.197.154

200 OK

0 B

URL HTTP/2
appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}
IP
139.45.197.154:0
ASN
#9002 RETN Limited

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID} HTTP/1.1
Host: appzeyland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 06:58:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.26
set-cookie: reverse=je_UfgaoPdBOBUfrtx0WOoat7PMJBIBixoOETQWwv78; expires=Tue, 25-Oct-2022 07:58:59 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2

appzeyland.com/pfe/current/micro.tag.min.js?uhd=1&z=4574858&ymid={SOURCE_ID}&var=4949117&sw=/sw-check-permissions/4574858

139.45.197.154

200 OK

0 B

URL HTTP/2
appzeyland.com/pfe/current/micro.tag.min.js?uhd=1&z=4574858&ymid={SOURCE_ID}&var=4949117&sw=/sw-check-permissions/4574858
IP
139.45.197.154:0
ASN
#9002 RETN Limited

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /pfe/current/micro.tag.min.js?uhd=1&z=4574858&ymid={SOURCE_ID}&var=4949117&sw=/sw-check-permissions/4574858 HTTP/1.1
Host: appzeyland.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appzeyland.com/?l=gjDmr71DjaaLaDP&b=12480490&z=4949117&s={CLICK_ID}&campid={campaignid}&var={SOURCE_ID}&ymid={CLICK_ID}
Cookie: reverse=je_UfgaoPdBOBUfrtx0WOoat7PMJBIBixoOETQWwv78
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 06:58:59 GMT
content-type: application/javascript
last-modified: Thu, 20 Oct 2022 16:39:51 GMT
vary: Accept-Encoding
etag: W/"635179d7-126ff"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

littlecdn.com/apps/templates/constructor/constructor-app-lab-v1/build/css/main.css?v4321212

104.22.25.116

200 OK

0 B

URL HTTP/2
littlecdn.com/apps/templates/constructor/constructor-app-lab-v1/build/css/main.css?v4321212
IP
104.22.25.116:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /apps/templates/constructor/constructor-app-lab-v1/build/css/main.css?v4321212 HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appzeyland.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Tue, 25 Oct 2022 06:58:59 GMT
content-type: text/css
last-modified: Mon, 24 Oct 2022 14:23:00 GMT
vary: Accept-Encoding
etag: W/"63569fc4-2c38"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 5328
server: cloudflare
cf-ray: 75f91124f99db4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2

littlecdn.com/apps/templates/_assets/scripts/vanillaqr.min.js

104.22.25.116

200 OK

0 B

URL HTTP/2
littlecdn.com/apps/templates/_assets/scripts/vanillaqr.min.js
IP
104.22.25.116:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /apps/templates/_assets/scripts/vanillaqr.min.js HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appzeyland.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Tue, 25 Oct 2022 06:59:00 GMT
content-type: application/javascript
last-modified: Mon, 24 Oct 2022 14:23:00 GMT
vary: Accept-Encoding
etag: W/"63569fc4-2d08"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 2582
server: cloudflare
cf-ray: 75f9112529f0b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations