Report Overview

  1. Submitted URL

    babycurly.com/mn/mfile.zip

  2. IP

    13.248.216.40

    ASN

    #16509 AMAZON-02

  3. Submitted

    2022-11-10 01:26:01

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-10T05:10:00Z
ds-aksb-a.akamaihd.net48362014-05-02T14:16:25Z2023-03-10T13:45:46Z
tags.tiqcdn.com9692013-01-15T06:04:26Z2023-03-10T06:01:29Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-10T05:11:10Z
babycurly.comunknown2017-04-27T17:31:46Z2023-03-03T14:23:31Z
www.afternic.com547892012-05-26T04:25:04Z2023-03-10T06:21:15Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-10T05:10:04Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-10T05:09:10Z
img6.wsimg.com154382020-02-20T08:56:58Z2023-03-10T11:40:52Z
www.googletagmanager.com752013-05-22T04:07:37Z2023-03-10T13:03:15Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-10T13:49:44Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-10T05:12:35Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-10T05:10:02Z
recaptcha.net32102012-07-15T22:16:42Z2023-03-10T14:05:44Z
www.google-analytics.com402012-10-03T03:04:21Z2023-03-10T13:35:34Z
www.gstatic.comunknown2016-07-26T11:37:06Z2023-03-10T12:47:01Z
fonts.gstatic.comunknown2014-09-09T02:40:21Z2023-03-10T14:37:36Z
events.api.secureserver.net1251792020-06-23T05:18:34Z2023-03-10T13:35:24Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumbabycurly.com/mn/mfile.zipPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (43)

HTTP Transactions (72)

URLIPResponseSize
babycurly.com/mn/mfile.zip
76.223.65.111302 Moved Temporarily110 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
www.afternic.com/forsale/babycurly.com?utm_source=TDFS_DASLNC&utm_medium=DASLNC&utm_campaign=TDFS_DASLNC&traffic_type=TDFS_DASLNC&traffic_id=daslnc&
104.110.24.168200 OK39 kB
www.afternic.com/forsale/_next/static/css/7663668f96342d42.css
104.110.24.168200 OK2.1 kB
www.afternic.com/forsale/_next/static/chunks/853.7d7067fffa72ef90.js
104.110.24.168200 OK2.5 kB
www.afternic.com/forsale/_next/static/css/620cfa3cf5a9b1b1.css
104.110.24.168200 OK2.1 kB
www.afternic.com/forsale/_next/static/css/ae89f9dfcf3f3f0c.css
104.110.24.168200 OK1.9 kB
www.afternic.com/forsale/_next/static/chunks/pages/_app-74cd4fb80f14b27b.js
104.110.24.168200 OK35 kB
www.afternic.com/forsale/_next/static/chunks/670-0de5acd3b36156c1.js
104.110.24.168200 OK13 kB
www.afternic.com/forsale/_next/static/chunks/584-a5891a19697d2d0f.js
104.110.24.168200 OK11 kB
www.afternic.com/forsale/_next/static/chunks/main-999f8182f179b553.js
104.110.24.168200 OK23 kB
www.afternic.com/forsale/_next/static/chunks/framework-f7ba292b22b03fed.js
104.110.24.168200 OK440 B
www.afternic.com/forsale/_next/static/chunks/787-b8887dd5c5d965da.js
104.110.24.168200 OK48 kB
www.afternic.com/forsale/_next/static/chunks/pages/forsale/%5Bdomain%5D-335944c071207758.js
104.110.24.168200 OK8.8 kB
www.afternic.com/forsale/_next/static/2.26.0/_buildManifest.js
104.110.24.168200 OK354 B
www.afternic.com/forsale/_next/static/2.26.0/_ssgManifest.js
104.110.24.168200 OK64 B
www.afternic.com/forsale/_next/static/2.26.0/_middlewareManifest.js
104.110.24.168200 OK61 B
img6.wsimg.com/wrhs/782faadd52e123dec110abf1eabbae14/uxcore2.min.css
23.36.79.43200 OK25 kB
img6.wsimg.com/wrhs/727dbdd5b384f1de046070e796ef5260/noheader.min.js
23.36.79.43200 OK15 kB
img6.wsimg.com/wrhs/d9e85ba08ed439f2823d36d51a080969/noheader.min.css
23.36.79.43200 OK1.4 kB
img6.wsimg.com/poly/v3/polyfill.min.js?features=Promise,Promise.prototype.finally,Intl.~locale.nb-NO&rum=0&unknown=polyfill&flags=gated
23.36.79.43200 OK94 B
img6.wsimg.com/wrhs/4262f27bec9c376945d4c527280085e1/uxcore2.min.js
23.36.79.43200 OK22 kB
img6.wsimg.com/wrhs-next/0a3c9ed73591ea11f77b51a04edf210f/heartbeat.js
23.36.79.43200 OK1.1 kB
img6.wsimg.com/wrhs/6b76c0a65966f2585e6bd653bd91f9ac/vendor.min.js
23.36.79.43200 OK80 kB
www.afternic.com/forsale/_next/image?url=%2Fimgs%2Ftime-stopwatch_s.png&w=256&q=75
104.110.24.168200 OK2.5 kB
img6.wsimg.com/ux/fonts/gd-sage/1.0/gd-sage-bold.woff2
23.36.79.43200 OK40 kB
img6.wsimg.com/ux/fonts/sherpa/2.0/gdsherpa-vf.woff2
23.36.79.43200 OK44 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
ds-aksb-a.akamaihd.net/aksb.min.js
23.36.77.18200 OK4.8 kB
img6.wsimg.com/wrhs/76fb57845de870c9b691d06a330d2188/browser-deprecation-banner.header-chunk.min.js
23.36.79.43200 OK6.3 kB
www.afternic.com/forsale/api/countries/nb-NO
104.110.24.168200 OK3.1 kB
tags.tiqcdn.com/utag/gpl/afternic/prod/utag.js
23.38.200.249200 OK18 kB
img6.wsimg.com/ux/favicon/android-icon-192x192.png
23.36.79.43200 OK3.9 kB
img6.wsimg.com/ux/favicon/favicon-16x16.png
23.36.79.43200 OK413 B
push.services.mozilla.com/
54.148.228.200101 Switching Protocols0 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
tags.tiqcdn.com/utag/gpl/afternic/prod/utag.7.js?utv=ut4.46.202106042044
23.38.200.249200 OK5.6 kB
recaptcha.net/recaptcha/api.js?onload=onloadcallback&render=explicit
142.250.74.99200 OK582 B
www.googletagmanager.com/gtm.js?id=GTM-SXRF&l=_gaDataLayer
142.250.74.168200 OK39 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=gpl/afternic/202203181533&cb=1668043547757
23.38.200.249200 OK2 B
www.google-analytics.com/analytics.js
142.250.74.174200 OK20 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
img6.wsimg.com/wrhs/79a0dbd78c152b18a0e26ee7361eea7e/tcc.min.js
23.36.79.43200 OK26 kB
www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js
142.250.74.163200 OK162 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK15 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
img6.wsimg.com/wrhs/ce554d2333f3801abafb32da18213ff7/tti.min.js
23.36.79.43200 OK7.5 kB
ds-aksb-a.akamaihd.net/2/628588/b?dE=29&cS=29&cE=50&rqS=51&rsS=387&rsE=390&sS=32&dl=403&di=934&fp=&dlS=1088&dlE=1089&dc=2008&leS=2008&leE=2012&to=&ol=0&cr=3&mt=&mb=&b=526593&u=https%3A//www.afternic.com/forsale/babycurly.com&ua=Mozilla/5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko/20100101%20Firefox/105.0&pl=Linux%20x86_64&us=&gh=23.36.77.229&t=&rid=1ec8f40&r=38064&akM=dscx&akN=ae&vc=14:17&bpcip=5b5a2a00&akTX=1&akTI=1ec8f40&ai=409545&pmgn=&pmgi=&pmp=
23.36.77.18204 No Content0 B
events.api.secureserver.net/pageEvents.aspx?timestamp=1668043547940&corrid=1718032927&referrer=&privatelabelid=497036&currency=USD&vs=visible&rand=55891252&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbabycurly.com%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&agent=false&delegated=false&salessite=false&server=ip-10-125-23-209.eu-west-2.compute.internal&loadSource=gtm&event=gtm.dom&page_level_properties=server%2CloadSource&event_type=page.event&eventdate=2022-11-10T01%3A25%3A47.941Z&eventtype=impression&e_id=am.tdfs.intake.forsale.impression&event_label=babycurly.com&hit_id=e6e5c187-429c-551f-88f4-50641c7988da&visitor_guid=76b579dc-9ed0-4c94-93dd-a17d0f96192e&has_consent=0&cv=3.22.3&client_name=tcc&same_site=None&trace_id=aa6a09839610583f9363a33955ce2b3b
104.84.152.186200 OK43 B
events.api.secureserver.net/image.aspx?referrer=&virtual_path=%2Fforsale&timestamp=1668043547928&corrid=1718032927&privatelabelid=497036&currency=USD&vs=visible&rand=1826370373&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbabycurly.com%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&agent=false&delegated=false&salessite=false&server=ip-10-125-23-209.eu-west-2.compute.internal&loadSource=gtm&event=gtm.dom&page_level_properties=server%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&trace_id=aa6a09839610583f9363a33955ce2b3b&hit_id=b4161a7c-620a-5f2c-9591-f956e9c35797&visitor_guid=76b579dc-9ed0-4c94-93dd-a17d0f96192e&has_consent=0&cv=3.22.3&client_name=tcc&same_site=None
104.84.152.186302 Found0 B
events.api.secureserver.net/b.aspx?timestamp=1668043548504&corrid=1718032927&referrer=&privatelabelid=497036&currency=USD&vs=visible&rand=970661822&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbabycurly.com%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&agent=false&delegated=false&salessite=false&server=ip-10-125-23-209.eu-west-2.compute.internal&loadSource=gtm&event=gtm.load&page_level_properties=server%2CloadSource&event_type=page.log&eventdate=2022-11-10T01%3A25%3A48.505Z&eventtype=pageperf&nav_type=hard&tccin=auto&connectEnd=1668043546534&connectStart=1668043546513&domComplete=1668043548492&domContentLoadedEventEnd=1668043547573&domContentLoadedEventStart=1668043547572&domInteractive=1668043547418&domLoading=1668043546887&domainLookupEnd=1668043546513&domainLookupStart=1668043546484&fetchStart=1668043546471&navigationStart=1668043545927&requestStart=1668043546535&responseEnd=1668043546874&responseStart=1668043546871&loadEventStart=1668043548492&loadEventEnd=0&transferSize=41678&encodedBodySize=38905&decodedBodySize=103345&navigationType=navigate&fcp=1466&hit_id=f9b57de5-9cb5-5682-9bf7-54fa13d19fbb&visitor_guid=76b579dc-9ed0-4c94-93dd-a17d0f96192e&has_consent=0&cv=3.22.3&client_name=tcc&same_site=None&trace_id=aa6a09839610583f9363a33955ce2b3b
104.84.152.186200 OK43 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
events.api.secureserver.net/image.aspx?referrer=&virtual_path=%2Fforsale&timestamp=1668043547928&corrid=1718032927&privatelabelid=497036&currency=USD&vs=visible&rand=1826370373&sitename=www.afternic.com&page=%2Fforsale&location=https%3A%2F%2Fwww.afternic.com%2Fforsale%2Fbabycurly.com%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&agent=false&delegated=false&salessite=false&server=ip-10-125-23-209.eu-west-2.compute.internal&loadSource=gtm&event=gtm.dom&page_level_properties=server%2CloadSource&event_type=page.request&hw=1&browx=1280&browy=939&resx=1280&resy=1024&cdepth=24&querystring=%3Futm_source%3DTDFS_DASLNC%26utm_medium%3DDASLNC%26utm_campaign%3DTDFS_DASLNC%26traffic_type%3DTDFS_DASLNC%26traffic_id%3Ddaslnc%26%3Dundefined&trace_id=aa6a09839610583f9363a33955ce2b3b&hit_id=b4161a7c-620a-5f2c-9591-f956e9c35797&visitor_guid=76b579dc-9ed0-4c94-93dd-a17d0f96192e&has_consent=0&cv=3.22.3&client_name=tcc&same_site=None&CookieTest=1
104.84.152.186200 OK43 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e56265e-d6d4-44c5-9a3e-19cd4a194fac.jpeg
34.120.237.76200 OK5.9 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F790db4df-e6d4-48ab-92fb-179a770f76b7.jpeg
34.120.237.76200 OK7.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0d37511-5958-42ab-acd0-aed0c04a0e2c.jpeg
34.120.237.76200 OK9.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F209aa2c7-5455-4bcc-a570-020a64d657cc.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F407f630c-7642-40eb-8db3-288b03315712.jpeg
34.120.237.76200 OK3.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg
34.120.237.76200 OK11 kB