Report - urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y

Report Overview

Visited public
2024-12-20 16:23:30
Tags
Submit Tags
URL
urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y
Finishing URL
urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng
IP / ASN
194.39.109.114
#202053 UpCloud Ltd
Title
Dangerous content | Urlsand

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2024-12-18	938 B	229 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2024-12-18	561 B	49 kB	216.58.207.227
urlsand.esvalabs.com	162933	2016-06-30	2016-07-27	2024-12-20	7.6 kB	597 kB	194.39.109.114

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	urlsand.esvalabs.com/js/polyfill.js	ScriptElement	1.3 kB	2023-03-09	2025-07-11
Pretty URL urlsand.esvalabs.com/js/polyfill.js IP 194.39.109.114 ASN #202053 UpCloud Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 22:22 Last Seen2025-07-11 05:06 Times Seen156 Hash 62f474cb475f9c1dce9a2a44b2c0f2c4 0372381efe3338706396a1642f318d13f0d5dcdc b5ddb60604ac7c649070dc629ab1729ddfc0927463b3891d0d6c7d1b18419738 Loading...

	urlsand.esvalabs.com/js/helper.js	ScriptElement	3.4 kB	2023-03-09	2025-07-11
Pretty URL urlsand.esvalabs.com/js/helper.js IP 194.39.109.114 ASN #202053 UpCloud Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 22:22 Last Seen2025-07-11 05:06 Times Seen152 Hash dfea07219beb9dcadf13a38c15d0be5d ab1e8b2a17c7553b990c1be0adbb194cadc34ce2 6b9d2b61facecada8129475b245089790d9efb851a05fabc70ee2cb42c58d46b Loading...

HTTP Transactions (18)

	URL	IP	Response	Size
	GET urlsand.esvalabs.com/css/urlsand.css	194.39.109.114	200 OK	1.8 kB
URL GET HTTP/2 urlsand.esvalabs.com/css/urlsand.css IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type ASCII text Size 1.8 kB (1755 bytes) Hash 8e6b9b536da58525ca395bfa6b5ea661 02de19d96b7d6b428ce8e5ab5919fc50d38fd792 fb55650bbb7a33af4f2925696ef0765dc57aaeeadadad1193969554f07d0f957 HTTP Headers `GET /css/urlsand.css HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:07 GMT content-type: text/css content-length: 1755 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-6db" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y	194.39.109.114	302 Found	3.0 kB
URL urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y IP 194.39.109.114:0 ASN #202053 UpCloud Ltd Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type HTML document, ASCII text, with very long lines (797) Size 3.0 kB (3013 bytes) Hash c1a6c2066ba8402a2af500912734eb4e 802726d41c4aa99f1630b4c2f16f59a26a7f9738 3ae487b94637f49646c80c730ab93d47135cb6b9c24dc4ca26edf417e1a11709 HTTP Headers GET /?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: nginx content-type: text/html; charset=UTF-8 cache-control: no-cache, private date: Fri, 20 Dec 2024 16:23:06 GMT location: //urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&l=1 strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/js/helper.js	194.39.109.114	200 OK	3.4 kB
URL GET HTTP/2 urlsand.esvalabs.com/js/helper.js IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type JavaScript source, ASCII text Size 3.4 kB (3399 bytes) Hash dfea07219beb9dcadf13a38c15d0be5d ab1e8b2a17c7553b990c1be0adbb194cadc34ce2 6b9d2b61facecada8129475b245089790d9efb851a05fabc70ee2cb42c58d46b HTTP Headers `GET /js/helper.js HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:07 GMT content-type: application/javascript content-length: 3399 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-d47" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	urlsand.esvalabs.com/js/redirect.js	194.39.109.114	200 OK	1.8 kB
URL urlsand.esvalabs.com/js/redirect.js IP 194.39.109.114:0 ASN #202053 UpCloud Ltd Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type JavaScript source, ASCII text Size 1.8 kB (1818 bytes) Hash 70cea999ecc63440734e438c1b1abe83 b997f62f155d28e39f181187f1dd8e4ba8641237 1856e9eb336c1eb373538389dd55e7063d0c7598f2b1191c37c1bd1d7697c892 HTTP Headers `GET /js/redirect.js HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:07 GMT content-type: application/javascript content-length: 1818 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-71a" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/templates/default/img/logo.png	194.39.109.114	200 OK	19 kB
URL GET HTTP/2 urlsand.esvalabs.com/templates/default/img/logo.png IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type PNG image data, 358 x 52, 8-bit/color RGBA, non-interlaced Size 19 kB (19237 bytes) Hash f636c0ac12d4ae1e2df61fa355a85ca1 d3d3f5d3a8b6efea1538200d3e9078167fcb3cb0 81793beb150a889b0d407981e2c19a362cd56dead1445af5d314c7117d885ffc HTTP Headers `GET /templates/default/img/logo.png HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:07 GMT content-type: image/png content-length: 19237 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-4b25" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/templates/default/css/urlsandbox.css	194.39.109.114	200 OK	176 kB
URL GET HTTP/2 urlsand.esvalabs.com/templates/default/css/urlsandbox.css IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type Unicode text, UTF-8 text, with very long lines (562) Size 176 kB (176141 bytes) Hash daa98d2b475df72e4404afd238d5d5fe f69cc788914dcc8becbb897feaabeb0fd9f02d18 ddecd2ad2233ab438431d166b27a344d574be40c47c4ae2d0242d4b3b8e834c4 HTTP Headers `GET /templates/default/css/urlsandbox.css HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:07 GMT content-type: text/css content-length: 176141 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-2b00d" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/templates/default/css/urlsandbox-dark.css	194.39.109.114	200 OK	176 kB
URL GET HTTP/2 urlsand.esvalabs.com/templates/default/css/urlsandbox-dark.css IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type Unicode text, UTF-8 text, with very long lines (562) Size 176 kB (175990 bytes) Hash ad8d1df78e0966f1e78ac4b37e68fc7f d7f7f853a6fde93437a6b93b8e9d25e79ea87744 1a445f9139642a90d7644fcfdec0239a3ea2f2acc6325b78cd29591df4ad4f07 HTTP Headers `GET /templates/default/css/urlsandbox-dark.css HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:07 GMT content-type: text/css content-length: 175990 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-2af76" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET fonts.googleapis.com/css?family=Open+Sans:400italic,700italic,400,700	142.250.74.106	200 OK	50 kB
URL GET HTTP/3 fonts.googleapis.com/css?family=Open+Sans:400italic,700italic,400,700 IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT File type gzip compressed data, max compression Size 50 kB (50135 bytes) Hash 9076223a4ed6261f607ed53239b531de 62d62475d8d6dd9b592f27f84b8f586d3aae2c0f fc967697e336a929d008867db88c3b3987f4340af58187fcbce134e90f955d61 HTTP Headers `GET /css?family=Open+Sans:400italic,700italic,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Fri, 20 Dec 2024 16:23:07 GMT date: Fri, 20 Dec 2024 16:23:07 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/favicon.ico	194.39.109.114	200 OK	968 B
URL GET HTTP/2 urlsand.esvalabs.com/favicon.ico IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced Size 968 B (968 bytes) Hash 97a251c3476409ea95861b39eca16a2c 4de41d20e5e536fae11f4ccc841b06e41b09e8ae 5325493f9962c98bcecb371060179456aa9aeb8a4bc5ddf429ada9e31873c5f3 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:07 GMT content-type: image/x-icon content-length: 968 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-3c8" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/templates/default/css/urlsandbox.css	194.39.109.114	200 OK	176 kB
URL GET HTTP/2 urlsand.esvalabs.com/templates/default/css/urlsandbox.css IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type Unicode text, UTF-8 text, with very long lines (562) Size 176 kB (176141 bytes) Hash daa98d2b475df72e4404afd238d5d5fe f69cc788914dcc8becbb897feaabeb0fd9f02d18 ddecd2ad2233ab438431d166b27a344d574be40c47c4ae2d0242d4b3b8e834c4 HTTP Headers `GET /templates/default/css/urlsandbox.css HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:11 GMT content-type: text/css content-length: 176141 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-2b00d" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/css/urlsand.css	194.39.109.114	200 OK	1.8 kB
URL GET HTTP/2 urlsand.esvalabs.com/css/urlsand.css IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type ASCII text Size 1.8 kB (1755 bytes) Hash 8e6b9b536da58525ca395bfa6b5ea661 02de19d96b7d6b428ce8e5ab5919fc50d38fd792 fb55650bbb7a33af4f2925696ef0765dc57aaeeadadad1193969554f07d0f957 HTTP Headers `GET /css/urlsand.css HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:11 GMT content-type: text/css content-length: 1755 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-6db" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/js/polyfill.js	194.39.109.114	200 OK	1.3 kB
URL GET HTTP/2 urlsand.esvalabs.com/js/polyfill.js IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type JavaScript source, ASCII text Size 1.3 kB (1251 bytes) Hash 62f474cb475f9c1dce9a2a44b2c0f2c4 0372381efe3338706396a1642f318d13f0d5dcdc b5ddb60604ac7c649070dc629ab1729ddfc0927463b3891d0d6c7d1b18419738 HTTP Headers `GET /js/polyfill.js HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:11 GMT content-type: application/javascript content-length: 1251 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-4e3" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/js/helper.js	194.39.109.114	200 OK	3.4 kB
URL GET HTTP/2 urlsand.esvalabs.com/js/helper.js IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type JavaScript source, ASCII text Size 3.4 kB (3399 bytes) Hash dfea07219beb9dcadf13a38c15d0be5d ab1e8b2a17c7553b990c1be0adbb194cadc34ce2 6b9d2b61facecada8129475b245089790d9efb851a05fabc70ee2cb42c58d46b HTTP Headers `GET /js/helper.js HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:11 GMT content-type: application/javascript content-length: 3399 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-d47" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/templates/default/img/logo.png	194.39.109.114	200 OK	19 kB
URL GET HTTP/2 urlsand.esvalabs.com/templates/default/img/logo.png IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type PNG image data, 358 x 52, 8-bit/color RGBA, non-interlaced Size 19 kB (19237 bytes) Hash f636c0ac12d4ae1e2df61fa355a85ca1 d3d3f5d3a8b6efea1538200d3e9078167fcb3cb0 81793beb150a889b0d407981e2c19a362cd56dead1445af5d314c7117d885ffc HTTP Headers `GET /templates/default/img/logo.png HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:11 GMT content-type: image/png content-length: 19237 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-4b25" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2	216.58.207.227	200 OK	48 kB
URL GET HTTP/2 fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerGoogle Trust Services Subject.gstatic.com Fingerprint40:A7:D7:D3:7D:FA:BE:34:C0:7E:6F:F7:9F:55:52:22:92:07:C7:EF ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT File type Web Open Font Format (Version 2), TrueType, length 48236, version 1.0 Size 48 kB (48236 bytes) Hash 015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa HTTP Headers GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://urlsand.esvalabs.com DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 48236 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sat, 14 Dec 2024 03:56:30 GMT expires: Sun, 14 Dec 2025 03:56:30 GMT cache-control: public, max-age=31536000 last-modified: Thu, 14 Dec 2023 02:08:40 GMT content-type: font/woff2 age: 563201 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET fonts.googleapis.com/css?family=Open+Sans:400italic,700italic,400,700	142.250.74.106	200 OK	178 kB
URL GET HTTP/3 fonts.googleapis.com/css?family=Open+Sans:400italic,700italic,400,700 IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint30:E5:7E:29:A5:A1:81:DB:C8:A8:49:80:67:40:12:AB:30:C0:34:8D ValidityMon, 02 Dec 2024 08:36:58 GMT - Mon, 24 Feb 2025 08:36:57 GMT File type gzip compressed data, max compression Size 178 kB (177889 bytes) Hash c56b66d5f56a036dcc21e1d77f10b30f cac7ca61f6e00e2ef5cce081f5ce8f7d4c815102 46e8417ad9cc51c6648630927470ae286610e201737f12eb7a0153370b17e407 HTTP Headers `GET /css?family=Open+Sans:400italic,700italic,400,700 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK content-type: text/css; charset=utf-8 vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Fri, 20 Dec 2024 16:23:11 GMT date: Fri, 20 Dec 2024 16:23:11 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	GET urlsand.esvalabs.com/favicon.ico	194.39.109.114	200 OK	968 B
URL GET HTTP/2 urlsand.esvalabs.com/favicon.ico IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Requested by https://urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced Size 968 B (968 bytes) Hash 97a251c3476409ea95861b39eca16a2c 4de41d20e5e536fae11f4ccc841b06e41b09e8ae 5325493f9962c98bcecb371060179456aa9aeb8a4bc5ddf429ada9e31873c5f3 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 20 Dec 2024 16:23:11 GMT content-type: image/x-icon content-length: 968 last-modified: Thu, 19 Dec 2024 08:07:10 GMT etag: "6763d42e-3c8" strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' accept-ranges: bytes X-Firefox-Spdy: h2

	GET urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng	194.39.109.114	200 OK	2.6 kB
URL User Request GET HTTP/2 urlsand.esvalabs.com/?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng IP 194.39.109.114:443 ASN #202053 UpCloud Ltd Certificate IssuerLet's Encrypt Subjectesvalabs.com Fingerprint27:0A:3F:60:FD:4B:5D:A1:90:63:EB:F6:FE:C5:07:3E:03:CB:F7:CE ValidityMon, 16 Dec 2024 00:05:36 GMT - Sun, 16 Mar 2025 00:05:35 GMT File type HTML document, ASCII text, with very long lines (2756), with no line terminators Size 2.6 kB (2604 bytes) Hash 06a03da623d5d7daa8f0409702428c46 1143df9a0b34c8bbf456dd4d465e1ce5fd8ce4bb 7e611a98ed33f21cc80e06a75dcb917d3318689a64af847a851f5201a553c1cd HTTP Headers GET /?u=https%3A%2F%2Fgoogle.com.mx%2F%5Curl%3Fob%3Dpwj2maayqljbM2dWBuuV7ic1KFgH%26aw%3Df_rand_string_lowercase%288%29n9QXkBk0w4OyBDvUpuk%26sa%3Dt%26whi%3Df_rand_string_lowercase%288%29zOPGXNRztppHiTbPIt5f%26url%3Damp%252Famazingtoolpro.com%2F.dd%2FKcx0teyanE-SUREDANN-YWxlc3Npby5jYXJ1c29AbmhvYS5lbmVyZ3k%3D&e=a957078a&h=bd213be0&f=y&p=y&c=dangerous-behaviour&d=0nlineauthentication-0nlineauthentication-0nlineauthentication.goldspotgroup.com.ng HTTP/1.1 Host: urlsand.esvalabs.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://urlsand.esvalabs.com/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: nginx content-type: text/html; charset=UTF-8 cache-control: no-cache, private date: Fri, 20 Dec 2024 16:23:11 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload; x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data: 'unsafe-inline'; x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin feature-policy: fullscreen 'self' X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2