Report Overview

  1. Submitted URL

    abcfghq12ik345de--loading.12pl5q8i34sx.xyz/specialoffer/

  2. IP

    104.21.53.244

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2022-09-07 18:29:26

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    10

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
redirect.7a0ltxdy8u0p.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sectigo.com4870001-01-01T00:00:00Z0001-01-01T00:00:00Z
backgood.mu0c0mptr58h.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
abcfghq12ik345de--loading.12pl5q8i34sx.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
my.rtmark.net90540001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
trk.bosaf6t4pvuf.xyzunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
d0zi.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.pushflow.net1555800001-01-01T00:00:00Z0001-01-01T00:00:00Z
e1.o.lencr.org61590001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumabcfghq12ik345de--loading.12pl5q8i34sx.xyz/specialoffer/Phishing

mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediummu0c0mptr58h.xyzSinkholed
mediummu0c0mptr58h.xyzSinkholed
mediummu0c0mptr58h.xyzSinkholed
mediummu0c0mptr58h.xyzSinkholed

JavaScript (10)

HTTP Transactions (33)

URLIPResponseSize
firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK939 B
abcfghq12ik345de--loading.12pl5q8i34sx.xyz/specialoffer/
104.21.53.244200 OK2.5 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.25200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
abcfghq12ik345de--loading.12pl5q8i34sx.xyz/specialoffer/css/style.css
104.21.53.244200 OK656 B
abcfghq12ik345de--loading.12pl5q8i34sx.xyz/specialoffer/img/.png
104.21.53.244404 Not Found109 B
ocsp.sectigo.com/
104.18.32.68200 OK471 B
my.rtmark.net/p.js?f=sync&lr=1&partner=2f586e63ecc3dd2e4d3725c1ac88ed0458b4d4bea82c4396563bc8d29bca99db
139.45.195.8200 OK697 B
abcfghq12ik345de--loading.12pl5q8i34sx.xyz/favicon.ico
104.21.53.244404 Not Found109 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
my.rtmark.net/img.gif?f=sync&partner=2f586e63ecc3dd2e4d3725c1ac88ed0458b4d4bea82c4396563bc8d29bca99db&ttl=&rurl=http%3A%2F%2Fabcfghq12ik345de--loading.12pl5q8i34sx.xyz%2Fspecialoffer%2F
139.45.195.8200 OK43 B
push.services.mozilla.com/
54.187.34.135101 Switching Protocols0 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
e1.o.lencr.org/
23.36.76.226200 OK345 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0766520-2dbc-4f52-b0e2-1a908af4cd29.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8510bf06-7808-4fda-a5d9-b75fc73021c9.jpeg
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
34.120.237.76200 OK6.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba86944-df9f-4d50-9b10-d50644b978e3.jpeg
34.120.237.76200 OK4.8 kB
redirect.7a0ltxdy8u0p.xyz/specialoffer/redirect.php?subid=1205223091&country=%3C%3Fphp+echo+%24_GET%5B%27country%27%5D%3F%3E
104.21.16.234200 OK3.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b220c7c-ed68-4f56-82a7-5748d044635a.jpeg
34.120.237.76200 OK8.5 kB
backgood.mu0c0mptr58h.xyz/favicon.ico
108.178.23.118200 OK1.2 kB
d0zi.com/go.php?ad=6pvgwjuc578zbpcgxykd&sid=M7140706789762269186&pub=3630&pid=3630-bdecd6cz&c=0&app=unknown&br=Firefox&os=[[os]]&d=Mozilla+Firefox&ca=NO+WiFi&a=0&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b380b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b85
162.55.4.52302 Found746 kB
d0zi.com/favicon.ico
162.55.4.52200 OK20 B
trk.bosaf6t4pvuf.xyz/click.php?c=301&key=09ewk0dg22ia19yc1utshh1t&clickid=&website=&brand=&cate=&isp=&os=&browser=&country=&lang=&type=failed
104.21.50.32302 Found0 B
backgood.mu0c0mptr58h.xyz/?utm_medium=88992e4399445fac565cbd49f08f656a87c08633&utm_campaign=OtherCountries&cid=1205223091&np=1&np=2
108.178.23.118200 OK0 B
backgood.mu0c0mptr58h.xyz/?utm_term=7140706789762269186&ver=4viyaptcjo&utm_content=e6c2c6dcd68fd49594fc9695a6a79597828bb8888e8f8ebdb2c6b0c4b6b78587b2bb88b0bdb68cbd82b080b3b6b6bcb4aaaba9a9aeafacada293a1919697f8f4848f9b8a8f9f89c09291898c87959de5cbfbf8cbcaffcec9f2f3f085848291f5cafac8f8fcf7fccdf3f3f2f5c6c7c4c5dae8edebe8ebebebebebe6e2e0efece61b82
108.178.23.118200 OK0 B
backgood.mu0c0mptr58h.xyz/proc.php?5ccfab76336e654c709264302b86e6c5fa91177e
108.178.23.118200 OK0 B
cdn.pushflow.net/scripts/current/sdk/pushflowSDK.js
104.21.234.205200 OK0 B