Report Overview

  1. Submitted URL

    covidshotsfortots.com/

  2. IP

    45.33.20.235

    ASN

    #63949 Linode, LLC

  3. Submitted

    2023-03-22 10:27:52

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    13

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
covidshotsfortots.comunknown2022-06-16T18:05:00Z2023-02-12T00:07:48Z
www1.covidshotsfortots.comunknown2022-06-18T00:56:42Z2023-03-20T18:10:37Z
www.google.com72015-05-10T13:11:19Z2023-03-25T21:05:45Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-26T05:10:41Z
partner.googleadservices.com7982012-10-03T03:04:21Z2023-03-26T05:11:52Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-25T18:14:26Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-26T05:11:12Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-26T05:11:59Z
afs.googleusercontent.com121232013-05-06T21:11:00Z2023-03-26T05:15:33Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-26T05:09:08Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-25T18:12:03Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-26T05:10:29Z
d38psrni17bvxu.cloudfront.netunknown2022-09-22T18:48:38Z2023-03-26T07:29:30Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IP 45.33.30.197
mediumClient IP 45.33.30.197
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IP 99.83.136.84
mediumClient IP 99.83.136.84
mediumClient IP 99.83.136.84
mediumClient IP 99.83.136.84
mediumClient IP 99.83.136.84
mediumClient IP 99.83.136.84
mediumClient IP 99.83.136.84

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumcovidshotsfortots.com/Malware

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (18)

HTTP Transactions (39)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
covidshotsfortots.com/
45.33.30.197200 OK22 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
covidshotsfortots.com/?gp=1&js=1&uuid=1679480862.0025183930&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
45.33.30.197302 Found0 B
push.services.mozilla.com/
35.166.158.207101 Switching Protocols0 B
www1.covidshotsfortots.com/?tm=1&subid4=1679480862.0166540000&kw=Patient+Portal&KW1=Medical%20Appointment%20Scheduling%20for%20Vaccination&KW2=Test%20Appointment%20Booking%20System&KW3=Test%20Results%20and%20Electronic%20Health%20Records&searchbox=0&domainname=0&backfill=0
99.83.136.84200 OK5.7 kB
www.google.com/adsense/domains/caf.js?abp=1
142.250.74.164200 OK54 kB
www1.covidshotsfortots.com/track.php?domain=covidshotsfortots.com&toggle=browserjs&uid=MTY3OTQ4MDg2My4zNDEzOjMyZDlhNmVkYTU0ZmY0NTI0MGY1OGFkMWYxYzMyYjgyMjUzM2I0ZjkyZTA5YmFhYzhhNjcyYTlhNWU1YTAzZTA6NjQxYWQ4MWY1MzUzZQ%3D%3D
99.83.136.84200 OK20 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
54.230.245.138200 OK11 kB
www.google.com/afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2C000003%2C001005%2Cbucket103&client=dp-teaminternet12_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fwww1.covidshotsfortots.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2NDFhZDgxZjUzNTJhfHx8MTY3OTQ4MDg2My4zNTE1fGQ1YzY5MDMwYmFkMTQxODQ2MjUwZTM3Y2IwZmYyOWNkYmI2MWYxYWF8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfGV5Sm9iQ0k2SW1WdUluMD18fDB8ZXlKemRXSnBaRFFpT2lJeE5qYzVORGd3T0RZeUxqQXhOalkxTkRBd01EQWlmUT09fGU5OTBmOTI4ZGY5NzM3MTQ5MjI4MTkzOTY5ZTMxYmY2MjQ4YTBkYzB8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&terms=Medical%20Appointment%20Scheduling%20for%20Vaccination%2CTest%20Appointment%20Booking%20System%2CTest%20Results%20and%20Electronic%20Health%20Records&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17300965&format=r3%7Cs&nocache=4711679480868947&num=0&output=afd_ads&domain_name=www1.covidshotsfortots.com&v=3&bsl=8&pac=2&u_his=1&u_tz=0&dt=1679480868949&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=760&frm=0&cl=516558706&uio=--&cont=tc&jsid=caf&jsv=516558706&rurl=http%3A%2F%2Fwww1.covidshotsfortots.com%2F%3Ftm%3D1%26subid4%3D1679480862.0166540000%26kw%3DPatient%2BPortal%26KW1%3DMedical%2520Appointment%2520Scheduling%2520for%2520Vaccination%26KW2%3DTest%2520Appointment%2520Booking%2520System%26KW3%3DTest%2520Results%2520and%2520Electronic%2520Health%2520Records%26searchbox%3D0%26domainname%3D0%26backfill%3D0&adbw=master-1%3A530
142.250.74.164200 OK2.7 kB
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
partner.googleadservices.com/gampad/cookie.js?domain=www1.covidshotsfortots.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie
216.58.207.226200 OK248 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
www1.covidshotsfortots.com/favicon.ico
99.83.136.84200 OK0 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK471 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
www1.covidshotsfortots.com/ls.php?t=641ad81f&token=e990f928df9737149228193969e31bf6248a0dc0
99.83.136.84201 Created16 B
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
142.250.74.129200 OK270 B
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
142.250.74.129200 OK174 B
ocsp.pki.goog/gts1c3
216.58.211.3200 OK472 B
www1.covidshotsfortots.com/track.php?domain=covidshotsfortots.com&caf=1&toggle=answercheck&answer=yes&uid=MTY3OTQ4MDg2My4zNDEzOjMyZDlhNmVkYTU0ZmY0NTI0MGY1OGFkMWYxYzMyYjgyMjUzM2I0ZjkyZTA5YmFhYzhhNjcyYTlhNWU1YTAzZTA6NjQxYWQ4MWY1MzUzZQ%3D%3D
99.83.136.84200 OK20 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44275491-68d9-43b4-8a23-8d98e6e935bd.jpeg
34.120.237.76200 OK6.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg
34.120.237.76200 OK9.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
34.120.237.76200 OK4.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd02b7e2d-e49d-4cc0-b89e-9fd6221ec202.jpeg
34.120.237.76200 OK7.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg
34.120.237.76200 OK8.0 kB
www.google.com/adsense/domains/caf.js
142.250.74.164200 OK0 B