Report - abre.ai/dominuis

Report Overview

Submitted URL
abre.ai/dominuis
IP
167.71.108.29
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-04-26 19:24:08
Access
public
Website Title
bsgmisip.web.app/
Final URL
bsgmisip.web.app/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	439 B	34 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	2.7 kB	170 kB	216.58.207.227
tag.leadplace.fr	28142	2010-08-20	2015-07-08	2024-04-25	393 B	4.2 kB	145.239.193.51
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-04-26	338 B	942 B	143.204.53.97
abre.ai	631689	2017-12-16	2012-10-03	2024-02-23	728 B	1.1 kB	167.71.108.29
sc.link	unknown	2020-06-16	2020-11-28	2024-02-21	467 B	857 B	178.248.232.231
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-26	861 B	164 kB	142.250.74.168
assets.unlayer.com	unknown	2017-10-10	2022-03-14	2024-04-23	4.0 kB	621 kB	143.204.55.46
bsgmisip.web.app	unknown	unknown	No data	No data	2.4 kB	15 kB	199.36.158.100
ads.themoneytizer.com	28463	2013-10-29	2014-05-26	2024-04-25	1.7 kB	748 kB	104.22.62.227
onetag-sys.com	1840	2015-04-05	2015-04-08	2024-04-25	539 B	163 B	51.89.9.253

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2024-03-07	medium	bsgmisip.web.app/	Other
2024-03-07	medium	bsgmisip.web.app/favicon.ico	Other
2024-03-07	medium	bsgmisip.web.app/	Other
2024-03-07	medium	bsgmisip.web.app/	Other
2024-03-07	medium	bsgmisip.web.app/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	sc.link	Sinkholed
2024-04-26	medium	bsgmisip.web.app	Sinkholed
2024-04-26	medium	bsgmisip.web.app	Sinkholed
2024-04-26	medium	bsgmisip.web.app	Sinkholed
2024-04-26	medium	bsgmisip.web.app	Sinkholed
2024-04-26	medium	bsgmisip.web.app	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (31)

URL IP Response Size

abre.ai/dominuis

167.71.108.29

87 B

URL
abre.ai/dominuis
IP
167.71.108.29:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document, ASCII text, with no line terminators
Size
87 B (87 bytes)
Hash
48d44e7eca336be18c33c308a1a1fc3c
d1c352b3f7cd5d24dc973803d0ce06b38673914f
934855e01d6ab22013c31614aa4a275b0bcf8255ee75b952318de53190ca5e80

HTTP Headers

GET /dominuis HTTP/1.1
Host: abre.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.2
Date: Fri, 26 Apr 2024 19:23:42 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Location: https://sc.link/N7Awt
Content-Language: en
Cache-Control: no-cache
Content-Security-Policy: script-src 'self' https: 'unsafe-inline' *.fontawesome.com
X-Request-Id: 9d55cf04-439e-4e69-9a42-1f535e81decf
X-Runtime: 0.044046
Strict-Transport-Security: max-age=63072000; includeSubDomains

sc.link/N7Awt

178.248.232.231

56 B

URL
sc.link/N7Awt
IP
178.248.232.231:0
ASN
#51115 HLL LLC

File type
HTML document, ASCII text
Size
56 B (56 bytes)
Hash
999fffade91945518f78c02ce1e05234
d1a6b8d727c89303e799325b24b31a654f4c2e9a
f7dc27c96be880b608ba89123d37f9aabddea89fb8852bbef5446f9043105ed6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /N7Awt HTTP/1.1
Host: sc.link
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 308 Permanent Redirect
Server: QRATOR
Date: Fri, 26 Apr 2024 19:23:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 56
Connection: keep-alive
Keep-Alive: timeout=15
vary: Origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
location: https://urlz.fr/pN53
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), camera=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), usb=()
content-security-policy: default-src 'self' 'unsafe-inline'; style-src cdn.jsdelivr.net 'unsafe-inline'; sc-link.dev.site.sbercloud.dev 'unsafe-inline'; img-src sc-link.dev.site.sbercloud.dev data:
x-content-type-options: nosniff
strict-transport-security: max-age=31536000

abre.ai/

167.71.108.29

169 B

URL
abre.ai/
IP
167.71.108.29:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
a87214c763d8d02c4974f57782772284
8f1b323fae58e08b5c438e7f02fc656c74bd75a6
02c16af2716719ba8f3673b9d115d318ce4549e6fa59771c4c20569b28a406af

HTTP Headers

GET / HTTP/1.1
Host: abre.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.2
Date: Fri, 26 Apr 2024 19:23:45 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://abre.ai/

www.googletagmanager.com/gtag/js?id=UA-162669458-1

142.250.74.168

73 kB

URL
www.googletagmanager.com/gtag/js?id=UA-162669458-1
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
73 kB (73188 bytes)
Hash
1d14f5fceaa92c470e0b65b572623d6c
d58fedb46c6ab734349eae98898b49c8fdbddaef
c146692eeb6915b3274abba0db888dedd3710340aa226f4663d96b1f7ab394fe

HTTP Headers

GET /gtag/js?id=UA-162669458-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 19:23:46 GMT
expires: Fri, 26 Apr 2024 19:23:46 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73188
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

bsgmisip.web.app/

199.36.158.100

200 OK

2.3 kB

URL User Request GET HTTP/2
bsgmisip.web.app/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (758)
Size
2.3 kB (2309 bytes)
Hash
9ad177f6e247b898efed7c9e93cfb0fb
26fdadf73b53db6e94e2098d6dfbb18909f94638
1e9449e7ef22ed97b0d06f6272ded910db942909850096974701bc35ecf4169f

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: bsgmisip.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "97e98352c533b4a665ab93f568c78bd614afe7f1f99fff69ba17c3046028d3b5-br"
last-modified: Mon, 22 Apr 2024 02:23:58 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 26 Apr 2024 19:23:46 GMT
x-served-by: cache-hel1410027-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714159426.100625,VS0,VE191
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2309
X-Firefox-Spdy: h2

bsgmisip.web.app/favicon.ico

199.36.158.100

200 OK

2.3 kB

URL GET HTTP/3
bsgmisip.web.app/favicon.ico
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://bsgmisip.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (758)
Size
2.3 kB (2309 bytes)
Hash
9ad177f6e247b898efed7c9e93cfb0fb
26fdadf73b53db6e94e2098d6dfbb18909f94638
1e9449e7ef22ed97b0d06f6272ded910db942909850096974701bc35ecf4169f

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bsgmisip.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "97e98352c533b4a665ab93f568c78bd614afe7f1f99fff69ba17c3046028d3b5-br"
last-modified: Mon, 22 Apr 2024 02:23:58 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 26 Apr 2024 19:23:46 GMT
x-served-by: cache-hel1410027-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714159426.299104,VS0,VE92
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2309
X-Firefox-Spdy: h2

assets.unlayer.com/projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png

143.204.55.46

200 OK

108 kB

URL GET HTTP/2
assets.unlayer.com/projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png
IP
143.204.55.46:443
ASN
#16509 AMAZON-02

Requested by
https://bsgmisip.web.app/
Certificate
IssuerAmazon
Subjectassets.unlayer.com
Fingerprint5F:CA:70:81:3D:92:25:0A:19:15:32:6C:59:35:31:69:2A:D7:9D:87
ValiditySat, 23 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT

File type
PNG image data, 3204 x 713, 8-bit/color RGBA, non-interlaced
Size
108 kB (108300 bytes)
Hash
713ec317b44dab39d20cde90c009f3af
334726f2ffda64a5d9972c02ff5cc95f3b4de132
8e58533b29b80bda8910e2581612d7cb412dd5b4064f7e3ce3fae44d08300a8c

HTTP Headers

GET /projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png HTTP/1.1
Host: assets.unlayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 108300
last-modified: Sat, 11 Feb 2023 21:13:20 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 18:43:06 GMT
etag: "713ec317b44dab39d20cde90c009f3af"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: il7T0swDoyyrcVH30UElhqJWC9BpOr9c7t-nufKnG7I3O5XUyqHksQ==
age: 2440
X-Firefox-Spdy: h2

assets.unlayer.com/projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png

143.204.55.46

200 OK

50 kB

URL GET HTTP/2
assets.unlayer.com/projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png
IP
143.204.55.46:443
ASN
#16509 AMAZON-02

Requested by
https://bsgmisip.web.app/
Certificate
IssuerAmazon
Subjectassets.unlayer.com
Fingerprint5F:CA:70:81:3D:92:25:0A:19:15:32:6C:59:35:31:69:2A:D7:9D:87
ValiditySat, 23 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT

File type
PNG image data, 618 x 429, 8-bit/color RGBA, non-interlaced
Size
50 kB (49708 bytes)
Hash
5d1d99a4a5a768dff060fa6583e66398
81cbec4992199f65b0981a589cbdd5077ec49d8c
8a127630e2c027f7554a1230c692365078a585a7ec7c7e872ffb73d2b0fea3f0

HTTP Headers

GET /projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png HTTP/1.1
Host: assets.unlayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 49708
last-modified: Sat, 11 Feb 2023 21:13:27 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 19:04:03 GMT
etag: "5d1d99a4a5a768dff060fa6583e66398"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LNuQ34bvvF7pJ6sgIETcjWQvWAgTwqenB8zNi-GcIWKKdVq2c3yewA==
age: 1184
X-Firefox-Spdy: h2

assets.unlayer.com/projects/134015/1676150302676-aebd5b1fe-0e52-4589-a6a8-634883c62208.png

143.204.55.46

200 OK

71 kB

URL GET HTTP/2
assets.unlayer.com/projects/134015/1676150302676-aebd5b1fe-0e52-4589-a6a8-634883c62208.png
IP
143.204.55.46:443
ASN
#16509 AMAZON-02

Requested by
https://bsgmisip.web.app/
Certificate
IssuerAmazon
Subjectassets.unlayer.com
Fingerprint5F:CA:70:81:3D:92:25:0A:19:15:32:6C:59:35:31:69:2A:D7:9D:87
ValiditySat, 23 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT

File type
PNG image data, 2401 x 801, 8-bit/color RGBA, non-interlaced
Size
71 kB (71420 bytes)
Hash
18832138ac49bad957472f5c34d72527
9ed1a8c9969ff6c74864dcdd47c7b8ca3aa503d6
cf27a0ae44d231a9e0713b7633944942ddb2d517fcef722954fe98582157c88a

HTTP Headers

GET /projects/134015/1676150302676-aebd5b1fe-0e52-4589-a6a8-634883c62208.png HTTP/1.1
Host: assets.unlayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 71420
last-modified: Sat, 11 Feb 2023 21:18:24 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 19:04:03 GMT
etag: "18832138ac49bad957472f5c34d72527"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gbZSsN8tEyfyVpIFKmEPwobXDiw0d7uiLPwUSS4OJs8ado17o8F72w==
age: 1184
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Montserrat:400,700

142.250.74.106

200 OK

34 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Montserrat:400,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://bsgmisip.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
34 kB (33645 bytes)
Hash
5f695c81eef5353e0f0730392f3aeb77
d3b446595e8bcaa74420015e3d0dec351d71d702
5229e008c40317206614158c90b2a5e6830ec176e02b651940630e8a4f9c09d4

HTTP Headers

GET /css?family=Montserrat:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 19:23:46 GMT
date: Fri, 26 Apr 2024 19:23:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bsgmisip.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bsgmisip.web.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 146744
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ads.themoneytizer.com/lib_adagio.js

104.22.62.227

1.8 kB

URL
ads.themoneytizer.com/lib_adagio.js
IP
104.22.62.227:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
1.8 kB (1839 bytes)
Hash
f2ae4810b618b8843df5265f6320f1a4
9f7877c38a4984d932d6065b574e6d226fc5196c
e1a3214e6ad4fe4355c5b99490b2e66ed2331ae65f8d7bdb8a864552c4532dfb

HTTP Headers

GET /lib_adagio.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:23:46 GMT
content-type: application/javascript
content-length: 1839
last-modified: Fri, 19 Apr 2024 15:28:59 GMT
expires: Sat, 27 Apr 2024 04:00:22 GMT
cache-control: public, max-age=259200, no-transform
pragma: public
cf-cache-status: HIT
age: 55404
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8f3027b615694-OSL
X-Firefox-Spdy: h2

bsgmisip.web.app/

199.36.158.100

200 OK

2.3 kB

URL User Request GET HTTP/2
bsgmisip.web.app/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (758)
Size
2.3 kB (2309 bytes)
Hash
9ad177f6e247b898efed7c9e93cfb0fb
26fdadf73b53db6e94e2098d6dfbb18909f94638
1e9449e7ef22ed97b0d06f6272ded910db942909850096974701bc35ecf4169f

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: bsgmisip.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 2309
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "97e98352c533b4a665ab93f568c78bd614afe7f1f99fff69ba17c3046028d3b5-br"
last-modified: Mon, 22 Apr 2024 02:23:58 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 26 Apr 2024 19:23:46 GMT
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714159427.975267,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

ads.themoneytizer.com/s/requestform3.js?siteId=15056&formatId=6

104.22.62.227

89 kB

URL
ads.themoneytizer.com/s/requestform3.js?siteId=15056&formatId=6
IP
104.22.62.227:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (25906)
Size
89 kB (88678 bytes)
Hash
37dabf5436be465eafd70149547f197b
a433ce06b267101ea98ee03c6f48a5c253f0ce66
f147d3280d234839bf688bcdadda95cff066cfb2d8d49a13315a4251df0e9604

HTTP Headers

GET /s/requestform3.js?siteId=15056&formatId=6 HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:23:46 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=604800
cf-cache-status: HIT
age: 47667
last-modified: Fri, 26 Apr 2024 06:09:19 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8f3027b7c5694-OSL
content-encoding: br
X-Firefox-Spdy: h2

assets.unlayer.com/projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png

143.204.55.46

200 OK

50 kB

URL GET HTTP/2
assets.unlayer.com/projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png
IP
143.204.55.46:443
ASN
#16509 AMAZON-02

Requested by
https://bsgmisip.web.app/
Certificate
IssuerAmazon
Subjectassets.unlayer.com
Fingerprint5F:CA:70:81:3D:92:25:0A:19:15:32:6C:59:35:31:69:2A:D7:9D:87
ValiditySat, 23 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT

File type
PNG image data, 618 x 429, 8-bit/color RGBA, non-interlaced
Size
50 kB (49708 bytes)
Hash
5d1d99a4a5a768dff060fa6583e66398
81cbec4992199f65b0981a589cbdd5077ec49d8c
8a127630e2c027f7554a1230c692365078a585a7ec7c7e872ffb73d2b0fea3f0

HTTP Headers

GET /projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png HTTP/1.1
Host: assets.unlayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 49708
last-modified: Sat, 11 Feb 2023 21:13:27 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 19:04:03 GMT
etag: "5d1d99a4a5a768dff060fa6583e66398"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ea480Odk8dutNLzvhUaP4fcfIdt5_4qUMK1z1sHgaNeeNFvMtrthYQ==
age: 1185
X-Firefox-Spdy: h2

assets.unlayer.com/projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png

143.204.55.46

200 OK

108 kB

URL GET HTTP/2
assets.unlayer.com/projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png
IP
143.204.55.46:443
ASN
#16509 AMAZON-02

Requested by
https://bsgmisip.web.app/
Certificate
IssuerAmazon
Subjectassets.unlayer.com
Fingerprint5F:CA:70:81:3D:92:25:0A:19:15:32:6C:59:35:31:69:2A:D7:9D:87
ValiditySat, 23 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT

File type
PNG image data, 3204 x 713, 8-bit/color RGBA, non-interlaced
Size
108 kB (108300 bytes)
Hash
713ec317b44dab39d20cde90c009f3af
334726f2ffda64a5d9972c02ff5cc95f3b4de132
8e58533b29b80bda8910e2581612d7cb412dd5b4064f7e3ce3fae44d08300a8c

HTTP Headers

GET /projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png HTTP/1.1
Host: assets.unlayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 108300
last-modified: Sat, 11 Feb 2023 21:13:20 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 18:43:06 GMT
etag: "713ec317b44dab39d20cde90c009f3af"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TAIpNYv0f-x9npPS0RQp5Dfj81J4rjIIhwCSigc5MmpF9FMKWdgYpA==
age: 2441
X-Firefox-Spdy: h2

ads.themoneytizer.com/lib_fs_close.js

104.22.62.227

669 B

URL
ads.themoneytizer.com/lib_fs_close.js
IP
104.22.62.227:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
669 B (669 bytes)
Hash
f89d0e6522595e21fce019c5366e441d
81fe8463adbd7d98ad3344738dd9dd7626bbaa3a
6e149b82e9bde8226e779d50fcdcfd9c7b942abfc49cda2890af41dbd04153f6

HTTP Headers

GET /lib_fs_close.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:23:47 GMT
content-type: application/javascript
content-length: 669
last-modified: Thu, 14 Mar 2024 13:32:32 GMT
expires: Sat, 27 Apr 2024 04:00:21 GMT
cache-control: public, max-age=259200, no-transform
pragma: public
cf-cache-status: HIT
age: 55406
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8f303ad735694-OSL
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-YETLCG4WNK&l=dataLayer&cx=c

142.250.74.168

89 kB

URL
www.googletagmanager.com/gtag/js?id=G-YETLCG4WNK&l=dataLayer&cx=c
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (5945)
Size
89 kB (89154 bytes)
Hash
117f2f89ac4136184c152a571fe7733c
11098a3f8b1bc272025002e1eb42202e64366b71
94128c2aa237c170b228e16479c3f92f24e78a86a2325f5ae5745ce95ec034e8

HTTP Headers

GET /gtag/js?id=G-YETLCG4WNK&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 19:23:47 GMT
expires: Fri, 26 Apr 2024 19:23:47 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89154
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bsgmisip.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bsgmisip.web.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 146745
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bsgmisip.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bsgmisip.web.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 146745
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1714159427045

51.89.9.253

0 B

URL
onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1714159427045
IP
51.89.9.253:0
ASN
#16276 OVH SAS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /usync/?pubId=2a897e3f18e6769&cb=1714159427045 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2

tag.leadplace.fr/libJsLP.js

145.239.193.51

3.9 kB

URL
tag.leadplace.fr/libJsLP.js
IP
145.239.193.51:0
ASN
#16276 OVH SAS

File type
JavaScript source, ASCII text
Size
3.9 kB (3894 bytes)
Hash
9da2703e284a68f7cf5eac9182b5c455
55b751e55972b7228303a5e5011882515f81db25
97c32278e8275102822dd3f18f9de62b7ff1f796bb43cf04c0845114ec912d16

HTTP Headers

GET /libJsLP.js HTTP/1.1
Host: tag.leadplace.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: nginx/1.20.1
date: Fri, 26 Apr 2024 19:23:47 GMT
content-type: application/javascript
content-length: 3894
last-modified: Wed, 06 Dec 2023 10:36:32 GMT
etag: "65704eb0-f36"
accept-ranges: bytes
x-iplb-request-id: 5B5A2A9A:C681_91EFC133:01BB_662BFF43_F9A83893:2EEA
x-iplb-instance: 57201

ocsp.r2m03.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
6cf3dcb983d62c9eb272bb6221d3c1d2
0dba14ef9dc347be55e5e3933de5555e3ccee13a
b960565fc5e3c7dc0f6a8aabb733e7a2ac773b96b5e6e48c9853631fd0dc935b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 26 Apr 2024 19:23:47 GMT
Last-Modified: Fri, 26 Apr 2024 18:43:04 GMT
Server: ECAcc (ska/F7A5)
X-Cache: Miss from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sVG4lcbcTO2DLJsKWJB04XRBWnqDsieLbZxvzKGGotzYa3rh_IIVjQ==
Age: 2443

ads.themoneytizer.com/moneybid8_38/build/dist/prebid.js

104.22.62.227

655 kB

URL
ads.themoneytizer.com/moneybid8_38/build/dist/prebid.js
IP
104.22.62.227:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (64144)
Size
655 kB (654981 bytes)
Hash
468db22c30f63801eeaba2e4c7972359
485b2d000e986bd3daacac0fd95e3b6005f6fb27
e0b995d3fd304ef1af8059440aad028fe070dfca78bfd5a4a737eb24c593cb09

HTTP Headers

GET /moneybid8_38/build/dist/prebid.js HTTP/1.1
Host: ads.themoneytizer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:23:47 GMT
content-type: application/javascript
content-length: 654981
last-modified: Thu, 28 Mar 2024 14:18:53 GMT
expires: Sat, 27 Apr 2024 04:05:04 GMT
cache-control: public, max-age=259200, no-transform
pragma: public
cf-cache-status: HIT
age: 55123
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a8f30548895694-OSL
X-Firefox-Spdy: h2

bsgmisip.web.app/

199.36.158.100

200 OK

2.3 kB

URL User Request GET HTTP/2
bsgmisip.web.app/
IP
199.36.158.100:443
ASN
#54113 FASTLY

Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (758)
Size
2.3 kB (2309 bytes)
Hash
9ad177f6e247b898efed7c9e93cfb0fb
26fdadf73b53db6e94e2098d6dfbb18909f94638
1e9449e7ef22ed97b0d06f6272ded910db942909850096974701bc35ecf4169f

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: bsgmisip.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urlz.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "97e98352c533b4a665ab93f568c78bd614afe7f1f99fff69ba17c3046028d3b5-br"
last-modified: Mon, 22 Apr 2024 02:23:58 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 26 Apr 2024 19:23:47 GMT
x-served-by: cache-hel1410028-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714159427.459175,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2309
X-Firefox-Spdy: h2

assets.unlayer.com/projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png

143.204.55.68

200 OK

108 kB

URL GET HTTP/2
assets.unlayer.com/projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png
IP
143.204.55.68:443
ASN
#16509 AMAZON-02

Requested by
https://bsgmisip.web.app/
Certificate
IssuerAmazon
Subjectassets.unlayer.com
Fingerprint5F:CA:70:81:3D:92:25:0A:19:15:32:6C:59:35:31:69:2A:D7:9D:87
ValiditySat, 23 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT

File type
PNG image data, 3204 x 713, 8-bit/color RGBA, non-interlaced
Size
108 kB (108300 bytes)
Hash
713ec317b44dab39d20cde90c009f3af
334726f2ffda64a5d9972c02ff5cc95f3b4de132
8e58533b29b80bda8910e2581612d7cb412dd5b4064f7e3ce3fae44d08300a8c

HTTP Headers

GET /projects/134015/1676149999070-c95ffa4e6-5cb5-406a-8211-8d81a1383ba6.png HTTP/1.1
Host: assets.unlayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 108300
last-modified: Sat, 11 Feb 2023 21:13:20 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 18:43:06 GMT
etag: "713ec317b44dab39d20cde90c009f3af"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s7_KOfS3pxp5gp4ma5_9c5iuL0K43u-RBIwGrTmNikD4qt3l_Cvedg==
age: 2441
X-Firefox-Spdy: h2

assets.unlayer.com/projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png

143.204.55.68

200 OK

50 kB

URL GET HTTP/2
assets.unlayer.com/projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png
IP
143.204.55.68:443
ASN
#16509 AMAZON-02

Requested by
https://bsgmisip.web.app/
Certificate
IssuerAmazon
Subjectassets.unlayer.com
Fingerprint5F:CA:70:81:3D:92:25:0A:19:15:32:6C:59:35:31:69:2A:D7:9D:87
ValiditySat, 23 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT

File type
PNG image data, 618 x 429, 8-bit/color RGBA, non-interlaced
Size
50 kB (49708 bytes)
Hash
5d1d99a4a5a768dff060fa6583e66398
81cbec4992199f65b0981a589cbdd5077ec49d8c
8a127630e2c027f7554a1230c692365078a585a7ec7c7e872ffb73d2b0fea3f0

HTTP Headers

GET /projects/134015/1676150006254-b29c8fb25-8996-4e8a-b418-6e31e35ebfc3.png HTTP/1.1
Host: assets.unlayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 49708
last-modified: Sat, 11 Feb 2023 21:13:27 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 19:04:03 GMT
etag: "5d1d99a4a5a768dff060fa6583e66398"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zFd05XWMsXMrvqd7731Unev6MpM_724wGAqGRPeHHDTT85e1HSnqxw==
age: 1185
X-Firefox-Spdy: h2

assets.unlayer.com/projects/134015/1676150302676-aebd5b1fe-0e52-4589-a6a8-634883c62208.png

143.204.55.68

200 OK

71 kB

URL GET HTTP/2
assets.unlayer.com/projects/134015/1676150302676-aebd5b1fe-0e52-4589-a6a8-634883c62208.png
IP
143.204.55.68:443
ASN
#16509 AMAZON-02

Requested by
https://bsgmisip.web.app/
Certificate
IssuerAmazon
Subjectassets.unlayer.com
Fingerprint5F:CA:70:81:3D:92:25:0A:19:15:32:6C:59:35:31:69:2A:D7:9D:87
ValiditySat, 23 Mar 2024 00:00:00 GMT - Tue, 22 Apr 2025 23:59:59 GMT

File type
PNG image data, 2401 x 801, 8-bit/color RGBA, non-interlaced
Size
71 kB (71420 bytes)
Hash
18832138ac49bad957472f5c34d72527
9ed1a8c9969ff6c74864dcdd47c7b8ca3aa503d6
cf27a0ae44d231a9e0713b7633944942ddb2d517fcef722954fe98582157c88a

HTTP Headers

GET /projects/134015/1676150302676-aebd5b1fe-0e52-4589-a6a8-634883c62208.png HTTP/1.1
Host: assets.unlayer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 71420
last-modified: Sat, 11 Feb 2023 21:18:24 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 19:04:03 GMT
etag: "18832138ac49bad957472f5c34d72527"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: w2dHvj9xH9h5IVG4-wFdOSdPXLywT9lHWz0xQn3bGkFbEQHMnEHrhQ==
age: 1185
X-Firefox-Spdy: h2

bsgmisip.web.app/favicon.ico

199.36.158.100

200 OK

2.3 kB

URL GET HTTP/3
bsgmisip.web.app/favicon.ico
IP
199.36.158.100:443
ASN
#54113 FASTLY

Requested by
https://bsgmisip.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectweb.app
Fingerprint6C:B8:FC:5E:5B:DF:AB:31:E6:02:C5:A6:D8:E2:D0:77:BB:5D:BC:7B
ValidityThu, 21 Mar 2024 15:14:42 GMT - Wed, 19 Jun 2024 15:14:41 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (758)
Size
2.3 kB (2309 bytes)
Hash
9ad177f6e247b898efed7c9e93cfb0fb
26fdadf73b53db6e94e2098d6dfbb18909f94638
1e9449e7ef22ed97b0d06f6272ded910db942909850096974701bc35ecf4169f

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bsgmisip.web.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bsgmisip.web.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 2309
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "97e98352c533b4a665ab93f568c78bd614afe7f1f99fff69ba17c3046028d3b5-br"
last-modified: Mon, 22 Apr 2024 02:23:58 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Fri, 26 Apr 2024 19:23:47 GMT
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714159428.668068,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bsgmisip.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bsgmisip.web.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 146745
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://bsgmisip.web.app/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bsgmisip.web.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 146745
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (31)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate