Report Overview

  1. URL

    amginhd.work/

  2. IP

    185.143.223.48

    ASN

    #210352 Partner LLC

  3. Submitted

    2023-02-01T12:18:21Z

    Access

  4. Tags

    None

  5. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    8

  3. Threat Detection Systems

    2

Domain Summary

Domain Rank First Seen Last Seen
amginhd.work (4) unknown 2023-02-01T13:18:05Z 2023-02-01T13:18:05Z
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-13T05:09:13Z
ocsp.pki.goog (5) 175 2018-07-01T08:43:07Z 2023-03-13T05:09:47Z
ocsp2.globalsign.com (1) 1544 2012-05-23T20:10:04Z 2023-03-13T05:14:17Z
counter.yadro.ru (1) 7275 2014-09-09T20:41:17Z 2023-03-13T07:26:53Z
rvzqo.impresivedate.com (3) unknown 2022-09-14T14:29:49Z 2023-03-11T06:47:09Z
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-13T05:09:10Z
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-13T05:09:16Z
fonts.gstatic.com (3) unknown 2014-09-09T02:40:21Z 2023-03-13T08:44:36Z
www.gstatic.com (2) unknown 2016-07-26T11:37:06Z 2023-03-13T07:57:11Z
r3.o.lencr.org (9) 344 2020-12-02T09:52:13Z 2023-03-13T05:09:07Z
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-13T05:09:35Z
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-13T05:09:14Z
cdn-dimi.akamaized.net (47) unknown 2022-07-07T15:18:25Z 2023-03-13T05:42:11Z
fonts.googleapis.com (1) 8877 2013-06-10T22:14:26Z 2023-03-13T08:14:31Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Severity Source IP Destination IP Alert
medium Client IP Internal IP
medium Client IP Internal IP
medium Client IP  185.143.223.48
medium Client IP  185.143.223.48
medium Client IP Internal IP
medium Client IP  185.143.223.48
medium Client IP Internal IP
medium Client IP  185.143.223.48

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
Severity Indicator Alert
medium rvzqo.impresivedate.com/ortb Phishing
medium rvzqo.impresivedate.com/js/pushjs/1.0.0/subscriber.js Phishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (23)

HTTP Transactions (87)

URL IP Response Size
amginhd.work/
185.143.223.48 200 OK 6138
r3.o.lencr.org/
23.36.76.226 200 OK 503
r3.o.lencr.org/
23.36.76.226 200 OK 503
firefox.settings.services.mozilla.com/v1/
35.241.9.150 200 OK 939
r3.o.lencr.org/
23.36.76.226 200 OK 503
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191 200 OK 5348
contile.services.mozilla.com/v1/tiles
34.117.237.239 200 OK 12
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226 200 OK 1423
counter.yadro.ru/hit;ipkref?t52.6;r;s1280*1024*24;uhttp%3A//amginhd.work/;hJust%20a%20moment...;0.44276169076855754
88.212.201.204 200 OK 362
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150 200 OK 329
amginhd.work/favicon.ico
185.143.223.48 200 OK 6170
r3.o.lencr.org/
23.36.76.226 200 OK 503
push.services.mozilla.com/
35.160.122.190 101 Switching Protocols 0
amginhd.work/antibot/ab.php
185.143.223.48 200 OK 72
amginhd.work/
185.143.223.48 302 Found 0
r3.o.lencr.org/
23.36.76.226 200 OK 503
cdn-dimi.akamaized.net/landings/278386/1675093349/css/popup.css?1675093350
184.31.15.67 200 OK 573
cdn-dimi.akamaized.net/landings/278386/1675093349/css/style.css?1675093350
184.31.15.67 200 OK 4973
cdn-dimi.akamaized.net/landings/278386/1675093349/css/reviews.css?1675093350
184.31.15.67 200 OK 1203
cdn-dimi.akamaized.net/landings/278386/1675093349/css/swiper.min.css?1675093350
184.31.15.67 200 OK 4127
cdn-dimi.akamaized.net/landings/278386/1675093349/js/jquery.min.js?1675093350
184.31.15.67 200 OK 33315
cdn-dimi.akamaized.net/landings/278386/1675093349/js/trls.js?1675093350
184.31.15.67 200 OK 12801
cdn-dimi.akamaized.net/landings/278386/1675093349/js/main_alt.js?1675093350
184.31.15.67 200 OK 6169
cdn-dimi.akamaized.net/landings/278386/1675093349/js/translates-review.js?1675093350
184.31.15.67 200 OK 16602
cdn-dimi.akamaized.net/landings/278386/1675093349/js/title_tanslate.js?1675093350
184.31.15.67 200 OK 1298
cdn-dimi.akamaized.net/landings/278386/1675093349/js/transl-sb.js?1675093350
184.31.15.67 200 OK 1998
ocsp.pki.goog/gts1c3
216.58.211.3 200 OK 471
cdn-dimi.akamaized.net/landings/278386/1675093349/images/logo.svg
184.31.15.67 200 OK 7208
cdn-dimi.akamaized.net/landings/278386/1675093349/images/card-5.png
184.31.15.67 200 OK 8400
cdn-dimi.akamaized.net/landings/278386/1675093349/images/110010_1.jpg
184.31.15.67 200 OK 56596
cdn-dimi.akamaized.net/landings/278386/1675093349/images/card-8.png
184.31.15.67 200 OK 8400
cdn-dimi.akamaized.net/landings/278386/1675093349/images/heart-3.svg
184.31.15.67 200 OK 576
cdn-dimi.akamaized.net/landings/278386/1675093349/images/card-6.png
184.31.15.67 200 OK 9015
cdn-dimi.akamaized.net/landings/278386/1675093349/images/1-eu.jpg
184.31.15.67 200 OK 4292
cdn-dimi.akamaized.net/landings/278386/1675093349/images/card-3.png
184.31.15.67 200 OK 9015
cdn-dimi.akamaized.net/landings/278386/1675093349/images/heart-2.svg
184.31.15.67 200 OK 583
cdn-dimi.akamaized.net/landings/278386/1675093349/images/4-eu.jpg
184.31.15.67 200 OK 2586
cdn-dimi.akamaized.net/landings/278386/1675093349/images/5-eu.jpg
184.31.15.67 200 OK 2879
cdn-dimi.akamaized.net/landings/278386/1675093349/images/heart-4.svg
184.31.15.67 200 OK 582
cdn-dimi.akamaized.net/landings/278386/1675093349/images/heart-1.svg
184.31.15.67 200 OK 581
cdn-dimi.akamaized.net/landings/278386/1675093349/images/card-7.png
184.31.15.67 200 OK 8188
cdn-dimi.akamaized.net/landings/278386/1675093349/images/unlock.svg
184.31.15.67 200 OK 2378