| click.sleadtrack.com/link?messageId=%3C3mail@b.c%3E&url=https://webtotalnet.com.br/imp/destnu/0367037/michelle@slurpmail.net |  52.64.76.222 | 302 Found | 180 B |
URL User Request GET HTTP/2click.sleadtrack.com/link?messageId=%3C3mail@b.c%3E&url=https://webtotalnet.com.br/imp/destnu/0367037/michelle@slurpmail.net IP52.64.76.222:443
CertificateIssuerAmazon Subjectopen.sleadtrack.com Fingerprint0E:0C:14:B8:C6:E3:89:46:90:62:C0:C7:0A:CC:6B:2D:9D:F2:22:0C ValidityThu, 29 Feb 2024 00:00:00 GMT - Sun, 30 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text, with no line terminators Hash1f354e797168c6913b7482ce5e41d77b 2b44a70d5756e91c27ea7b60b3f7d2a08ecfbb99 27128d755953471ae694460b2115778077c611e1fcbc9ddee41ae25f3472742f
GET /link?messageId=%3C3mail@b.c%3E&url=https://webtotalnet.com.br/imp/destnu/0367037/michelle@slurpmail.net HTTP/1.1
Host: click.sleadtrack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 05:35:31 GMT
content-type: text/html; charset=utf-8
content-length: 180
location: https://webtotalnet.com.br/imp/destnu/0367037/michelle@slurpmail.net
server: nginx/1.22.1
x-powered-by: Express
vary: Accept
X-Firefox-Spdy: h2
|
| webtotalnet.com.br/imp/destnu/0367037/michelle@slurpmail.net |  192.185.223.157 | 200 OK | 106 B |
URL User Request GET HTTP/2webtotalnet.com.br/imp/destnu/0367037/michelle@slurpmail.net IP192.185.223.157:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.webtotalnet.com.br Fingerprint70:44:07:F9:EB:AB:F6:23:F7:82:54:60:28:C8:F7:A5:80:A5:0D:0A ValidityMon, 15 Apr 2024 02:28:55 GMT - Sun, 14 Jul 2024 02:28:54 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imp/destnu/0367037/michelle@slurpmail.net HTTP/1.1
Host: webtotalnet.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=0e57462065bf9c79ee5b897332ac380e; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 106
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 05:35:32 GMT
server: Apache
X-Firefox-Spdy: h2
|
| webtotalnet.com.br/favicon.ico | 192.185.223.157 | 200 OK | 106 B |
URL GET HTTP/2webtotalnet.com.br/favicon.ico IP192.185.223.157:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
Requested byhttps://webtotalnet.com.br/imp/destnu/0367037/michelle@slurpmail.net CertificateIssuerLet's Encrypt Subject*.webtotalnet.com.br Fingerprint70:44:07:F9:EB:AB:F6:23:F7:82:54:60:28:C8:F7:A5:80:A5:0D:0A ValidityMon, 15 Apr 2024 02:28:55 GMT - Sun, 14 Jul 2024 02:28:54 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: webtotalnet.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://webtotalnet.com.br/imp/destnu/0367037/michelle@slurpmail.net
Cookie: PHPSESSID=0e57462065bf9c79ee5b897332ac380e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
content-length: 106
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 05:35:33 GMT
server: Apache
X-Firefox-Spdy: h2
|