Report Overview
Visitedpublic
2025-07-16 15:53:54
Tags
Submit Tags
URL
click.retirefunded.com/nfrtrumpendg0725/6e620ea01f01b120885f69a041559061/70/WI_CR/[CAMPAIGN_ID]/139914/7458b6d2da3791f2927d0052a095495c/sb
Finishing URL
secure.brownstoneresearch.com/?cid=MKT841823&eid=MKT842522&tid=fb0ef6b7317a41239b6841b9fd49677f&oid=21&affid=60&uid=0&aff_click_id=3415984047573519595&assetId=AST372837&page=1
IP / ASN
104.21.62.181
#13335 CLOUDFLARENET
Title
Brownstone Research

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5

Host Summary

HostRankRegisteredFirst SeenLast Seen
p.typekit.net
6202010-08-022012-05-232025-07-09
use.typekit.net
4942010-08-022012-07-052025-07-09
embed-ssl.wistia.com
227952007-03-182017-01-292025-07-14
embed-cloudfront.wistia.com
unknown2007-03-182022-11-082025-07-11
reports.sdiapi.com
186742016-09-222018-08-092025-07-11
4071fd28d0c2.12e9ef7c.us-east-2.token.awswaf.com
unknown2015-10-052024-07-232025-07-12
www.paypal.com
25831999-07-152012-05-212025-07-10
fast.wistia.com
51532007-03-182012-07-042025-07-11
click.retirefunded.com
unknown2019-07-152022-06-302025-07-14
static.zuora.com
796482006-08-022014-12-122025-07-12
code.jquery.com
6342005-12-102012-05-212025-07-09
pipedream.wistia.com
69582007-03-182017-01-302025-07-11
distillery.wistia.com
67082007-03-182012-09-302025-07-11
browser.sentry-cdn.com
43932018-05-302018-07-132025-07-10
www.google.com
71997-09-152015-05-102025-07-16
static.marketwise.com
unknown1994-11-152025-04-302025-07-09
www.paypalobjects.com
14672005-05-122012-05-302025-07-10
secure.brownstoneresearch.com
2313272020-01-082020-09-162025-07-10
marketingassets.marketwise.com
unknown1994-11-152024-06-202025-07-12
4071fd28d0c2.12e9ef7c.us-east-2.captcha.awswaf.com
unknown2015-10-052024-07-232025-07-11
www.googletagmanager.com
752011-11-112012-10-042025-07-16
d3t4gzjyl7evuc.cloudfront.net
unknown2008-04-252024-12-092025-07-15
services.sdiapi.com
187112016-09-222020-11-232025-07-12
www.ef-brownstone10.com
unknown2025-06-152025-07-052025-07-13
cdnjs.cloudflare.com
2352009-02-172012-05-232025-07-16
cmp.osano.com
87631999-10-182019-10-162025-07-12
www.bfhhty6trk.com
unknown2024-09-172024-09-172025-07-15
vice-prod.sdiapi.com
317492016-09-222019-05-302025-07-13
verifiedlinks.org
unknown2024-08-272024-09-052025-07-10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
medium4071fd28d0c2.12e9ef7c.us-east-2.token.awswaf.com/4071fd28d0c2/challenge.jsUnique code from Jetriz, Swid & Jeniva of the Tetris framework
mediumjavascript.script.md5:a22cedb9f43d179519839a7d272ba967Unique code from Jetriz, Swid & Jeniva of the Tetris framework

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumverifiedlinks.orgSinkholed

ThreatFox

No alerts detected


JavaScript (53)

HTTP Transactions (89)

URLIPResponseSize
POST reports.sdiapi.com/service/viceEvent
54.160.95.183200 OK2 B
GET d3t4gzjyl7evuc.cloudfront.net/25/bnf/2507-trump-eg/img/bnf-trump-bg-1.jpg
3.167.2.26200 OK137 kB
GET static.zuora.com/Resources/libs/hosted/1.3.1/zuora-min.js
3.167.2.18200 OK19 kB
GET code.jquery.com/ui/1.13.2/themes/base/jquery-ui.css
151.101.130.137200 OK36 kB
GET www.paypalobjects.com/api/checkout.js
151.101.131.1200 OK1.5 MB
GET secure.brownstoneresearch.com/store/PROD/plugins/jquery-payment/jquery.payment.min.js
13.33.141.78200 OK8.4 kB
GET marketingassets.marketwise.com/prod/javascript/legacy/casey/legacyExternalJs.js
3.167.2.18200 OK1.7 kB
POST distillery.wistia.com/x
3.167.2.82204 No Content0 B
POST 4071fd28d0c2.12e9ef7c.us-east-2.token.awswaf.com/4071fd28d0c2/telemetry
3.167.2.15200 OK1.0 kB
GET secure.brownstoneresearch.com/store/PROD/js/mymixpanel.js
13.33.141.78200 OK1.8 kB
GET 4071fd28d0c2.12e9ef7c.us-east-2.token.awswaf.com/4071fd28d0c2/challenge.js
3.167.2.15200 OK1.1 MB
GET www.paypal.com/tagmanager/pptm.js?id=secure.brownstoneresearch.com&source=checkoutjs&t=xo&v=4.0.344
151.101.129.21200 OK0 B
GET fast.wistia.com/embed/medias/g3anuj3sku.jsonp
151.101.194.132200 OK65 kB
GET click.retirefunded.com/nfrtrumpendg0725/6e620ea01f01b120885f69a041559061/70/WI_CR/[CAMPAIGN_ID]/139914/7458b6d2da3791f2927d0052a095495c/sb
172.67.138.2302 Found1.5 kB
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/webfonts/fa-regular-400.woff2
104.17.24.14200 OK25 kB
GET browser.sentry-cdn.com/9.6.1/bundle.min.js
151.101.130.217200 OK74 kB
GET marketingassets.marketwise.com/prod/common/BNF/inlinejs/1751468136311.js?versionId=HASw3C8DYZyTKnZjpwk5hhyOIeBWv3PQ&ts=1752681202201
3.167.2.18200 OK2.7 kB
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/webfonts/fa-solid-900.woff2
104.17.24.14200 OK150 kB
GET d3t4gzjyl7evuc.cloudfront.net/_/js/e-data/1.0.2/e-data.js?_=1752681197987
3.167.2.26200 OK10 kB
GET secure.brownstoneresearch.com/jsapi.js
13.33.141.78307 Temporary Redirect183 kB
GET secure.brownstoneresearch.com/store/PROD/js/mygtm.js
13.33.141.78200 OK474 B
GET cmp.osano.com/AzydZ7TEJc3cu8mk6/3735769d-7dc9-4376-85da-b66c9943a2e4/osano.js
3.167.2.35200 OK373 kB
GET secure.brownstoneresearch.com/store/PROD/js/encryption_util.js
13.33.141.78200 OK6.2 kB
GET cmp.osano.com/
3.167.2.35200 OK4.7 kB
GET p.typekit.net/p.css?s=1&k=efl1vav&ht=tk&f=15498.15501.15505.15510.26839.26840.26841.26842.28900.28901.28904.28905.45710.45713.45717.45720.45724.45727.45731.45734.45745.45748.45703.45706.45738.45741&a=230903054&app=typekit&e=css
23.36.77.57200 OK5 B
GET www.bfhhty6trk.com/sdk/click?_ef_transaction_id=fb0ef6b7317a41239b6841b9fd49677f&oid=21&affid=60&__cc=&async=json&uid=0&sub1=3415984047573519595&__qp=cid%7Ceid%7Ctid%7Coid%7Caffid%7Cuid%7Caff_click_id%7CassetId%7Cpage&__rf=&__efckuq=18
34.111.24.240200 OK86 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB
GET marketingassets.marketwise.com/prod/common/BNF/inlinecss/1751468136886.css?versionId=vsIzFihiBvn5.keFU1uLWyScXGrb_fx1&ts=1752681200881
3.167.2.18200 OK409 B
GET marketingassets.marketwise.com/prod/common/BNF/VideoLandingPage/1751038659805.html?versionId=Mph54kX.ZqNVZzGteXv2gE_slcYuVTlK&ts=1752681200884
3.167.2.18200 OK11 kB
GET d3t4gzjyl7evuc.cloudfront.net/_/css/bootstrap/5.3.3/bootstrap.min.css
3.167.2.26200 OK246 kB
GET vice-prod.sdiapi.com/vice_loader/marketwise/brownstoneresearch
54.240.174.11200 OK113 kB
GET services.sdiapi.com/reporter/1.0.7.43/receiver.js
54.240.174.48200 OK95 kB
GET use.typekit.net/af/dcfb51/00000000000000007735a0ac/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
23.36.77.81200 OK31 kB
GET embed-cloudfront.wistia.com/deliveries/cc471a9aaa11d8609a05fdbe09d5484fc91f66fc.m3u8
3.167.2.99200 OK114 kB
POST pipedream.wistia.com/mput?topic=metrics
3.167.2.58200 OK2 B
GET fast.wistia.com/embed/medias/g3anuj3sku.m3u8
151.101.194.132200 OK1.4 kB
GET secure.brownstoneresearch.com/store/store-d943032a6aff95698791.min.js
13.33.141.78200 OK129 kB
GET 4071fd28d0c2.12e9ef7c.us-east-2.captcha.awswaf.com/4071fd28d0c2/jsapi.js
54.240.174.64200 OK183 kB
GET use.typekit.net/af/bb10de/00000000000000007735a09f/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
23.36.77.81200 OK31 kB
GET d3t4gzjyl7evuc.cloudfront.net/_/logos/1.0.0/logo-br-sm-1.svg
3.167.2.26200 OK4.6 kB
GET fast.wistia.com/embed/captions/g3anuj3sku.json
151.101.194.132200 OK108 kB
GET d3t4gzjyl7evuc.cloudfront.net/_/js/ouibounce/ouibounce.min.js?_=1752681197989
3.167.2.26200 OK1.6 kB
GET fast.wistia.com/assets/external/playPauseLoadingControl.js
151.101.194.132200 OK84 kB
POST pipedream.wistia.com/mput?topic=metrics
3.167.2.58200 OK2 B
GET fast.wistia.com/assets/external/captions.js
151.101.194.132200 OK241 kB
GET verifiedlinks.org/go?ehash=6e620ea01f01b120885f69a041559061&product=68516&ar=70&cid=[CAMPAIGN_ID]&lid=139914&slhash=7458b6d2da3791f2927d0052a095495c&mtaid=sb&cid2=[s8]
172.66.173.131302 Found1.5 kB
POST 4071fd28d0c2.12e9ef7c.us-east-2.token.awswaf.com/4071fd28d0c2/telemetry
3.167.2.15200 OK868 B
GET d3t4gzjyl7evuc.cloudfront.net/25/bnf/2507-trump-eg/css/custom.css
3.167.2.26200 OK148 kB
GET use.typekit.net/af/cfb7fe/00000000000000007735e026/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
23.36.77.81200 OK21 kB
GET d3t4gzjyl7evuc.cloudfront.net/_/js/video-wistia/v-cues/1.0.3/v-cues.js?_=1752681197991
3.167.2.26200 OK7.2 kB
POST www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2Fsecure.brownstoneresearch.com%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=449043370.1752681203&dt=Brownstone%20Research&navt=n&npa=1&us_privacy=1---&gtm=45He57e1v9195887179za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104732253~104732255~104908321~104908323~104964062~104964064&tft=1752681202656&tfd=8455&apve=1&apvf=sb
142.250.178.36200 OK0 B
GET www.ef-brownstone10.com/3P8KRP/225JFQ/?sub1=3415984047573519595
34.111.24.240302 Found1.5 kB
GET secure.brownstoneresearch.com/styles.7748d24d435279b5fe77.css
13.33.141.78200 OK55 B
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.1/css/all.min.css
104.17.24.14200 OK102 kB
GET services.sdiapi.com/bolt/1.0.3.3/bolt.js
54.240.174.48200 OK64 kB
GET services.sdiapi.com/reporter/1.0.7.43/reporter.html
54.240.174.48200 OK469 B
POST 4071fd28d0c2.12e9ef7c.us-east-2.token.awswaf.com/4071fd28d0c2/telemetry
3.167.2.15200 OK1.0 kB
GET secure.brownstoneresearch.com/?cid=MKT841823&eid=MKT842522&tid=fb0ef6b7317a41239b6841b9fd49677f&oid=21&affid=60&uid=0&aff_click_id=3415984047573519595
13.33.141.78200 OK1.5 kB
GET secure.brownstoneresearch.com/store/PROD/js/HPM2Security-min.js
13.33.141.78200 OK45 kB
GET code.jquery.com/ui/1.13.2/jquery-ui.min.js
151.101.130.137200 OK255 kB
GET fast.wistia.com/assets/external/E-v1.js
151.101.194.132200 OK901 kB
GET embed-cloudfront.wistia.com/deliveries/4920606c5d2ba28815f4a388a4593e584bafc75e.m3u8/seg-1-v1-a1.ts
3.167.2.99200 OK632 kB
GET secure.brownstoneresearch.com/runtime-es2015.4b6045a328abc16331da.js
13.33.141.78200 OK1.2 kB
GET secure.brownstoneresearch.com/site/api/v2/details/public?cid=MKT841823&eid=MKT842522&chainId=&plcid=&preview=false&baseUrl=secure.brownstoneresearch.com
13.33.141.78200 OK75 kB
GET secure.brownstoneresearch.com/store/PROD/js/postToIframe.js
13.33.141.78200 OK1.8 kB
GET d3t4gzjyl7evuc.cloudfront.net/_/js/bootstrap/5.3.3/bootstrap.bundle.min.js?_=1752681197988
3.167.2.26200 OK81 kB
GET embed-ssl.wistia.com/deliveries/81c970ba01bb7f53d10d90f074c4ebaa.webp?image_crop_resized=1280x720
3.167.2.63200 OK118 kB
GET www.bfhhty6trk.com/scripts/sdk/everflow.js
34.111.24.240200 OK32 kB
GET d3t4gzjyl7evuc.cloudfront.net/_/js/dynamic-content/1.0.1/dynamic-content.js?_=1752681197990
3.167.2.26200 OK1.8 kB
GET fast.wistia.com/assets/external/interFontFace.js
151.101.194.132200 OK53 kB
GET d3t4gzjyl7evuc.cloudfront.net/_/logos/1.0.0/logo-br-1.svg
3.167.2.26200 OK18 kB
GET fast.wistia.com/assets/external/engines/hls_video.js
151.101.194.132200 OK651 kB
GET fast.wistia.com/assets/images/blank.gif
151.101.194.132200 OK1.2 kB
GET secure.brownstoneresearch.com/polyfills-es2015.230a5cd92a29d12d56b5.js
13.33.141.78200 OK791 kB
POST 4071fd28d0c2.12e9ef7c.us-east-2.token.awswaf.com/4071fd28d0c2/verify
3.167.2.15200 OK304 B
GET use.typekit.net/efl1vav.css
23.36.77.81200 OK19 kB
GET static.marketwise.com/images/legacy/brownstone/Brownstone+favicon.ico
54.240.174.26200 OK75 kB
GET secure.brownstoneresearch.com/main-es2015.16fbec0fa2935dda9ab8.js
13.33.141.78200 OK497 kB
POST secure.brownstoneresearch.com/snowflake/api/v1/generic/public
13.33.141.78200 OK21 B
POST pipedream.wistia.com/mput?topic=metrics
3.167.2.58200 OK2 B
GET embed-cloudfront.wistia.com/deliveries/4920606c5d2ba28815f4a388a4593e584bafc75e.m3u8
3.167.2.99200 OK114 kB
POST 4071fd28d0c2.12e9ef7c.us-east-2.token.awswaf.com/4071fd28d0c2/telemetry
3.167.2.15200 OK956 B
POST secure.brownstoneresearch.com/snowflake/api/v1/generic/public
13.33.141.78200 OK21 B
GET fast.wistia.com/embed/medias/g3anuj3sku/swatch
151.101.194.132200 OK4.1 kB
GET secure.brownstoneresearch.com/store/PROD/js/listrak.js
13.33.141.78200 OK1.2 kB
GET secure.brownstoneresearch.com/favicon.ico
13.33.141.78200 OK1.5 kB
GET cdnjs.cloudflare.com/ajax/libs/jsencrypt/2.3.1/jsencrypt.min.js
104.17.24.14200 OK56 kB
GET services.sdiapi.com/reporter/1.0.7.43/reporter.js
54.240.174.48200 OK2.7 kB
GET www.googletagmanager.com/gtm.js?id=GTM-PG5533JP
142.250.74.136200 OK569 kB