Report Overview

  1. Submitted URL

    promediaitc.com/16459-120932/62603?uid=EYGpAF9GBy9rphmMLupYtEChDmDMzCmTZzVxajT&prom_type=regular&prom_id=190265&pld=26L81sNgpwNGuK&answer=5

  2. IP

    35.169.201.93

    ASN

    #14618 AMAZON-AES

  3. Submitted

    2022-10-05 23:22:15

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    26

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
promediaitc.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdnjs.cloudflare.com2350001-01-01T00:00:00Z0001-01-01T00:00:00Z
polyfill.io1026440001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.pki.goog1750001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.googleapis.com88770001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.globalsign.com20750001-01-01T00:00:00Z0001-01-01T00:00:00Z
stackpath.bootstrapcdn.com24670001-01-01T00:00:00Z0001-01-01T00:00:00Z
use.typekit.net4940001-01-01T00:00:00Z0001-01-01T00:00:00Z
p.typekit.net6200001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.jsdelivr.net4390001-01-01T00:00:00Z0001-01-01T00:00:00Z
via.placeholder.com265950001-01-01T00:00:00Z0001-01-01T00:00:00Z
fonts.gstatic.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumpromediaitc.com/ckeditor/contents.css?t=M7OEPhishing
mediumpromediaitc.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1664830988399Phishing
mediumpromediaitc.com/lib/jq/validator/fb.validation.jsPhishing
mediumpromediaitc.com/lib/jq/cqParams/fb.cqParams.jsPhishing
mediumpromediaitc.com/lib/jq/otherInput/fb.otherInput.jsPhishing
mediumpromediaitc.com/lib/jq/fb.utils.jsPhishing
mediumpromediaitc.com/lib/jq/fb.autoSubmit.jsPhishing
mediumpromediaitc.com/lpScripts/assetsBehavior.js?v=1Phishing
mediumpromediaitc.com/lib/uri/uri.jsPhishing
mediumpromediaitc.com/lib/jq/validator/localization/jq_validation_localizations.boundled.jsPhishing
mediumpromediaitc.com/ckeditor/contents.css?t=M7OEPhishing
mediumpromediaitc.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1664830751847Phishing
mediumpromediaitc.com/lpScripts/assetsBehavior.js?v=1Phishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


Files detected

  1. URL

    promediaitc.com/16459-120931-typ/62603?uid=EYGpAF9GBy9rphmMLupYtEChDmDMzCmTZzVxajT&mode=file

  2. IP

    35.169.201.93

  3. ASN

    #14618 AMAZON-AES

  1. File type

    PDF document, version 1.7, 0 pages (zip deflate encoded)\012- data

    Size

    3.4 MB (3401444 bytes)

  2. Hash

    dd85854b66da3f99367de5c161c067e9

    16476c3a64628a39f610144a72aabd8f8ed50256

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (16)

HTTP Transactions (67)

URLIPResponseSize
promediaitc.com/16459-120932/62603?uid=EYGpAF9GBy9rphmMLupYtEChDmDMzCmTZzVxajT&prom_type=regular&prom_id=190265&pld=26L81sNgpwNGuK&answer=5
35.169.201.93301 Moved Permanently169 B
firefox.settings.services.mozilla.com/v1/
54.230.111.65200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.65200 OK329 B
promediaitc.com/16459-120932/62603?uid=EYGpAF9GBy9rphmMLupYtEChDmDMzCmTZzVxajT&prom_type=regular&prom_id=190265&pld=26L81sNgpwNGuK&answer=5
35.169.201.93200 OK8.2 kB
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
104.17.25.14200 OK28 kB
cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/js/select2.min.js
104.17.25.14200 OK16 kB
promediaitc.com/ckeditor/contents.css?t=M7OE
35.169.201.93200 OK2.9 kB
cdn.jsdelivr.net/npm/jquery-validation@1.19.1/dist/jquery.validate.min.js
151.101.85.229200 OK7.8 kB
polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7
151.101.1.26200 OK74 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK1.5 kB
promediaitc.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1664830988399
35.169.201.93200 OK5.2 kB
promediaitc.com/lib/jq/validator/fb.validation.js
35.169.201.93200 OK2.0 kB
promediaitc.com/ckeditor/plugins/lpLinkV2/css/styles.css
35.169.201.93200 OK2.2 kB
promediaitc.com/lib/jq/cqParams/fb.cqParams.js
35.169.201.93200 OK2.8 kB
promediaitc.com/lib/jq/otherInput/fb.otherInput.js
35.169.201.93200 OK2.3 kB
promediaitc.com/lib/jq/fb.utils.js
35.169.201.93200 OK18 kB
push.services.mozilla.com/
52.43.46.140101 Switching Protocols0 B
promediaitc.com/lib/jq/fb.autoSubmit.js
35.169.201.93200 OK631 B
promediaitc.com/lpScripts/assetsBehavior.js?v=1
35.169.201.93200 OK9.5 kB
promediaitc.com/lib/uri/uri.js
35.169.201.93200 OK77 kB
promediaitc.com/uploads/uploadedFonts/fontsImport.css?v=1665012125
35.169.201.93200 OK107 kB
promediaitc.com/lib/jq/validator/localization/jq_validation_localizations.boundled.js
35.169.201.93200 OK110 kB
stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
104.18.11.207200 OK25 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
via.placeholder.com/1280x320?text=LOGO
104.21.33.39200 OK1.8 kB
use.typekit.net/mgr2odi.css
23.36.76.122200 OK4.1 kB
p.typekit.net/p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css
23.36.76.122200 OK5 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK16 kB
ocsp.pki.goog/gts1c3
142.250.74.3200 OK471 B
promediaitc.com/favicon.ico
35.169.201.93200 OK34 kB
promediaitc.com/16459-120932/62603?uid=EYGpAF9GBy9rphmMLupYtEChDmDMzCmTZzVxajT&prom_type=regular&prom_id=190265&pld=26L81sNgpwNGuK&answer=5
35.169.201.93200 OK20 B
promediaitc.com/16459-120931-typ/62603?uid=EYGpAF9GBy9rphmMLupYtEChDmDMzCmTZzVxajT
35.169.201.93200 OK5.1 kB
promediaitc.com/ckeditor/contents.css?t=M7OE
35.169.201.93304 Not Modified0 B
promediaitc.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1664830751847
35.169.201.93200 OK5.2 kB
fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
142.250.74.10200 OK1.2 kB
fonts.googleapis.com/css?family=Muli
142.250.74.10200 OK400 B
promediaitc.com/lpScripts/assetsBehavior.js?v=1
35.169.201.93304 Not Modified0 B
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap
142.250.74.10200 OK108 kB
fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap
142.250.74.10200 OK14 kB
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
216.58.207.195200 OK31 kB
fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
142.250.74.10200 OK9.6 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbffd8689-87c3-4efb-b880-4109e3dc9294.jpeg
34.120.237.76200 OK7.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg
34.120.237.76200 OK9.3 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6476b35e-8b14-44b0-a85a-4793280f25c1.jpeg
34.120.237.76200 OK3.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F585959dc-efc9-453b-bdef-59b834c43800.jpeg
34.120.237.76200 OK6.4 kB
promediaitc.com/uploads/c_16459/backgrounds/Group-4.png
35.169.201.93200 OK1.3 MB
promediaitc.com/16459-120931-typ/62603?uid=EYGpAF9GBy9rphmMLupYtEChDmDMzCmTZzVxajT&mode=file
35.169.201.93200 OK3.4 MB
fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap
142.250.74.10200 OK0 B
fonts.googleapis.com/css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap
142.250.74.10200 OK0 B
fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap
142.250.74.10200 OK0 B