Report - m.exactag.com/ai.aspx?tc=d9282403bc40b07205bbd26a23a8d2e6b6b4f9

Report Overview

Visited public
2024-07-09 05:15:54
Tags
URL
m.exactag.com/ai.aspx?tc=d9282403bc40b07205bbd26a23a8d2e6b6b4f9
Finishing URL
cdn.exactag.com/1x1.gif
IP / ASN
85.14.248.71
#24961 myLoc managed IT AG
Title
1x1.gif (GIF Image, 1 × 1 pixels)

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
m.exactag.com	11114	2010-08-24	2015-04-09 07:39:20	2024-07-08 21:27:25	517 B	970 B	85.14.248.71
cdn.exactag.com	43938	2010-08-24	2012-10-03 21:54:12	2024-07-08 15:11:36	921 B	7.7 kB	185.76.9.26
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-08 18:12:20	2.6 kB	7.1 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (11)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash b34ca6af54e2b9fea57d418f5d1928f7 510b69f4470789a573217726d6f1a3d6ee765460 41e6a348aac9e9db44bfa14b3aa29d411f4489b375ae1f1be6b0d280af98541d HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "41E6A348AAC9E9DB44BFA14B3AA29D411F4489B375AE1F1BE6B0D280AF98541D" Last-Modified: Mon, 08 Jul 2024 01:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5748 Expires: Tue, 09 Jul 2024 06:51:16 GMT Date: Tue, 09 Jul 2024 05:15:28 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 2e4f22ff50349b865eca4c1585ad6712 6186a14999dc2525e4584a6a12d0edff2fdafcac a1afcf9ca90cdddb7f7ddd29a0f8c7a5fa7b012dcc030d2d004c70c84010fd86 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "A1AFCF9CA90CDDDB7F7DDD29A0F8C7A5FA7B012DCC030D2D004C70C84010FD86" Last-Modified: Sun, 07 Jul 2024 03:28:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10665 Expires: Tue, 09 Jul 2024 08:13:13 GMT Date: Tue, 09 Jul 2024 05:15:28 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 41036a4c62e61466443bce27a927e029 39a2a8a258c5feaf020246696135700b0c30740d e38b3080a1752122f5a174604bd307c54be31c02e0cdb8e2d9354e2a04e1b50f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "E38B3080A1752122F5A174604BD307C54BE31C02E0CDB8E2D9354E2A04E1B50F" Last-Modified: Sun, 07 Jul 2024 11:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6642 Expires: Tue, 09 Jul 2024 07:06:11 GMT Date: Tue, 09 Jul 2024 05:15:29 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash e430ff7defba95ef2e40c2a2623032a3 4df33994f03cf02626fdfe9c6a51a71f5fea6058 ea2bc04f18953a2d203b059f541bf8bfcd32c63d67b8e1113d927453d8cc9a58 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "EA2BC04F18953A2D203B059F541BF8BFCD32C63D67B8E1113D927453D8CC9A58" Last-Modified: Sun, 07 Jul 2024 04:21:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2923 Expires: Tue, 09 Jul 2024 06:04:12 GMT Date: Tue, 09 Jul 2024 05:15:29 GMT Connection: keep-alive`

	m.exactag.com/ai.aspx?tc=d9282403bc40b07205bbd26a23a8d2e6b6b4f9	85.14.248.71	302 Found	0 B
URL User Request GET HTTP/1.1 m.exactag.com/ai.aspx?tc=d9282403bc40b07205bbd26a23a8d2e6b6b4f9 IP 85.14.248.71:443 ASN #24961 myLoc managed IT AG Certificate IssuerSectigo Limited Subject.exactag.com FingerprintDE:A5:BE:65:7A:EC:4F:67:5A:6F:3A:29:12:6D:20:EE:FA:6B:6A:90 ValidityTue, 22 Aug 2023 00:00:00 GMT - Sun, 15 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ai.aspx?tc=d9282403bc40b07205bbd26a23a8d2e6b6b4f9 HTTP/1.1 Host: m.exactag.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 302 Found Cache-Control: max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Type: text/html Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Di, 09 Jul 2024 05:15:29 GMT Location: https://cdn.exactag.com/1x1.gif P3P: policyref="https://m.exactag.com/w3c/p3p.xml", CP="NOI NID STP STA CUR OUR" Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: * X-ET-Code: 20 X-ET-Camp: 0 X-ET-Monitoring: 1 Accept-CH: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64 Strict-Transport-Security: max-age=31536000 Date: Tue, 09 Jul 2024 05:15:29 GMT Connection: close Content-Length: 0 cross-origin-resource-policy: cross-origin X-Xss-Protection: 0 X-Content-Type-Options: nosniff

	cdn.exactag.com/1x1.gif	185.76.9.26	200 OK	799 B
URL User Request GET HTTP/2 cdn.exactag.com/1x1.gif IP 185.76.9.26:443 ASN #60068 Datacamp Limited Certificate IssuerSectigo Limited Subject.exactag.com FingerprintBA:79:92:16:88:9E:9D:BD:C4:2A:75:7D:74:B9:18:5C:1C:66:02:3C ValidityThu, 04 Apr 2024 00:00:00 GMT - Sat, 03 May 2025 23:59:59 GMT File type GIF image data, version 89a, 1 x 1 Size 799 B (799 bytes) Hash 124eca84abce0cccb0208c5ef285e6fd aa5973034eeb0fa83fa772ac526641b24a135b94 86927cafa657ae14a28bdca63befb837251fc4ce67683aa19fdccf4d1bfeef3b HTTP Headers `GET /1x1.gif HTTP/1.1 Host: cdn.exactag.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Tue, 09 Jul 2024 05:15:29 GMT content-type: image/gif content-length: 799 last-modified: Tue, 09 Jan 2024 16:31:09 GMT x-rgw-object-type: Normal etag: "07b81fc1dad971b1c82bff6798131113-1" x-amz-request-id: tx00000e7c92caaf2062a51-00659d7523-2bc55ff-prg x-77-nzt: BLlMCRQ3Nzf/wAAAALlMChM3Nzf/CwAAACUTwjQ3Nzf/AgAAAFm7vKY4V8MA x-77-nzt-ray: af585630500388fb71c78c6608e18427 x-accel-expires: @1720502464 x-accel-date: 1720501937 x-77-cache: HIT x-77-age: 192 x-cache-lb: HIT x-age-lb: 11 server: CDN77-Turbo access-control-allow-origin: x-accel-date-max: 1704817969 x-cache: HIT x-age: 192 x-77-pop: stockholmSE accept-ranges: bytes X-Firefox-Spdy: h2

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash d7b2c37e4b6c062d80ad32046f42d3d8 131cd5c2ca2a258c3cf11746f94cfd43a6a4f04c 317f60a1498c7b52833955e8a54a0ba66b5b8dc9e9862c2ac262b874d491fce2 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "317F60A1498C7B52833955E8A54A0BA66B5B8DC9E9862C2AC262B874D491FCE2" Last-Modified: Mon, 08 Jul 2024 05:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3196 Expires: Tue, 09 Jul 2024 06:08:47 GMT Date: Tue, 09 Jul 2024 05:15:31 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash d7b2c37e4b6c062d80ad32046f42d3d8 131cd5c2ca2a258c3cf11746f94cfd43a6a4f04c 317f60a1498c7b52833955e8a54a0ba66b5b8dc9e9862c2ac262b874d491fce2 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "317F60A1498C7B52833955E8A54A0BA66B5B8DC9E9862C2AC262B874D491FCE2" Last-Modified: Mon, 08 Jul 2024 05:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3196 Expires: Tue, 09 Jul 2024 06:08:47 GMT Date: Tue, 09 Jul 2024 05:15:31 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash d7b2c37e4b6c062d80ad32046f42d3d8 131cd5c2ca2a258c3cf11746f94cfd43a6a4f04c 317f60a1498c7b52833955e8a54a0ba66b5b8dc9e9862c2ac262b874d491fce2 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "317F60A1498C7B52833955E8A54A0BA66B5B8DC9E9862C2AC262B874D491FCE2" Last-Modified: Mon, 08 Jul 2024 05:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3196 Expires: Tue, 09 Jul 2024 06:08:47 GMT Date: Tue, 09 Jul 2024 05:15:31 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash d7b2c37e4b6c062d80ad32046f42d3d8 131cd5c2ca2a258c3cf11746f94cfd43a6a4f04c 317f60a1498c7b52833955e8a54a0ba66b5b8dc9e9862c2ac262b874d491fce2 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "317F60A1498C7B52833955E8A54A0BA66B5B8DC9E9862C2AC262B874D491FCE2" Last-Modified: Mon, 08 Jul 2024 05:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3196 Expires: Tue, 09 Jul 2024 06:08:47 GMT Date: Tue, 09 Jul 2024 05:15:31 GMT Connection: keep-alive`

	cdn.exactag.com/favicon.ico	185.76.9.26	200 OK	5.5 kB
URL GET HTTP/2 cdn.exactag.com/favicon.ico IP 185.76.9.26:443 ASN #60068 Datacamp Limited Requested by https://cdn.exactag.com/1x1.gif Certificate IssuerSectigo Limited Subject.exactag.com FingerprintBA:79:92:16:88:9E:9D:BD:C4:2A:75:7D:74:B9:18:5C:1C:66:02:3C ValidityThu, 04 Apr 2024 00:00:00 GMT - Sat, 03 May 2025 23:59:59 GMT File type gzip compressed data, from Unix Size 5.5 kB (5472 bytes) Hash 81577cbf15159bf2b52a7514e294cb89 b455ccf306a4ece5b9ce523da2d1a6d20b25ec3a ff42c34fe9e489d16ae12a5db3bab623e98d74883256f20b74f4eb4abc6b81fe HTTP Headers `GET /favicon.ico HTTP/1.1 Host: cdn.exactag.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://cdn.exactag.com/1x1.gif Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK date: Tue, 09 Jul 2024 05:15:30 GMT content-type: image/x-icon vary: Accept-Encoding, Accept-Encoding last-modified: Tue, 09 Jan 2024 17:12:19 GMT x-rgw-object-type: Normal etag: W/"b3d745601af53dd937816023d8782cff-1" x-amz-request-id: tx00000b9b5eac845bd4323-00659d7e92-3f5a3f3-prg x-77-nzt: BLlMCRQ3NzfOB2kAALlMCgE3NzfeMwQAACUTwjQ3Nzf/XQEAAG09Wg25vh0A x-77-nzt-ray: af585630500388fb72c78c660a35ad21 x-accel-expires: @1720502316 x-accel-date: 1720475243 x-77-cache: HIT x-77-age: 26887 content-encoding: gzip server: CDN77-Turbo access-control-allow-origin: * x-accel-date-max: 1720099366 x-cache: REVALIDATED x-age: 26887 x-77-pop: stockholmSE X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (11)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL