Report - gladsince.com/api/users?in=false&pii=&token=L3FidGdja3hnP2tleT1jODk1MDkwYjA2ZjY0ODQ4ZDg3MDZmNjk0YWNhYjdjZSZwc3Q9MTcxNTE5ODg3NSZyZWZlcj1odHRwcyUzQSUyRiUyRmxpYnJhcnl3aGlzcGVyaW5nLmNvbSUyRiZybXRjPXQmc2h1PTc0MjE0MmQyZGI2MmIyNmUzNzRjN2U0M2M3MDBmYTJkN2M4NGI5M2NjZWRiZjRiYmJiMTYyNjJkODYzNWVjZDYyNjAyOTY0MmVjNDQzZTIzYjA1NDZiZmRiZGQ3MzdhNzFkZTc5YmZkMWVjNzBkODhmNGI1MDEwODA5ZGM5YmViNDcyZDFhNmJkNTcxYjhjMTUxNjhmM2U0MDcyNjVjZTk0ZjYyZmVhMDVhMTY1M2VhYmFhN2Q1YjYxNTE5MzViNmRk&uuid=

Report Overview

Submitted URL
gladsince.com/api/users?in=false&pii=&token=L3FidGdja3hnP2tleT1jODk1MDkwYjA2ZjY0ODQ4ZDg3MDZmNjk0YWNhYjdjZSZwc3Q9MTcxNTE5ODg3NSZyZWZlcj1odHRwcyUzQSUyRiUyRmxpYnJhcnl3aGlzcGVyaW5nLmNvbSUyRiZybXRjPXQmc2h1PTc0MjE0MmQyZGI2MmIyNmUzNzRjN2U0M2M3MDBmYTJkN2M4NGI5M2NjZWRiZjRiYmJiMTYyNjJkODYzNWVjZDYyNjAyOTY0MmVjNDQzZTIzYjA1NDZiZmRiZGQ3MzdhNzFkZTc5YmZkMWVjNzBkODhmNGI1MDEwODA5ZGM5YmViNDcyZDFhNmJkNTcxYjhjMTUxNjhmM2U0MDcyNjVjZTk0ZjYyZmVhMDVhMTY1M2VhYmFhN2Q1YjYxNTE5MzViNmRk&uuid=
IP
172.240.127.234
ASN
#7979 SERVERS-COM
Submitted
2024-05-08 20:07:39
Access
public
Website Title
gladsince.com/api/users?token=L3FidGdja3hnP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MjI5MDgxNTY
Final URL
gladsince.com/api/users?token=L3FidGdja3hnP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MjI5MDgxNTY
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gladsince.com	unknown	2024-04-18	2024-04-27	2024-04-30	5.3 kB	7.8 kB	192.243.59.12
proftrafficcounter.com	unknown	2023-11-16	2023-11-21	2024-05-08	429 B	0 B	0.0.0.0
www.linksforfree.com	unknown	2022-07-13	2022-07-17	2024-02-19	510 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	gladsince.com	Sinkholed
2024-05-08	medium	gladsince.com	Sinkholed
2024-05-08	medium	gladsince.com	Sinkholed
2024-05-08	medium	gladsince.com	Sinkholed
2024-05-08	medium	gladsince.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	gladsince.com/qbtgckxg?key=c895090b06f64848d8706f694acab7ce&refer=https%3A%2F%2Flibrarywhispering.com%2F&dlrt=t	0 B	2023-03-07	2024-05-20
Pretty URL gladsince.com/qbtgckxg?key=c895090b06f64848d8706f694acab7ce&refer=https%3A%2F%2Flibrarywhispering.com%2F&dlrt=t IP 192.243.59.12 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 00:42:35 Times Seen37847458 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (7)

URL IP Response Size

gladsince.com/api/users?in=false&pii=&token=L3FidGdja3hnP2tleT1jODk1MDkwYjA2ZjY0ODQ4ZDg3MDZmNjk0YWNhYjdjZSZwc3Q9MTcxNTE5ODg3NSZyZWZlcj1odHRwcyUzQSUyRiUyRmxpYnJhcnl3aGlzcGVyaW5nLmNvbSUyRiZybXRjPXQmc2h1PTc0MjE0MmQyZGI2MmIyNmUzNzRjN2U0M2M3MDBmYTJkN2M4NGI5M2NjZWRiZjRiYmJiMTYyNjJkODYzNWVjZDYyNjAyOTY0MmVjNDQzZTIzYjA1NDZiZmRiZGQ3MzdhNzFkZTc5YmZkMWVjNzBkODhmNGI1MDEwODA5ZGM5YmViNDcyZDFhNmJkNTcxYjhjMTUxNjhmM2U0MDcyNjVjZTk0ZjYyZmVhMDVhMTY1M2VhYmFhN2Q1YjYxNTE5MzViNmRk&uuid=

192.243.59.12

307 Temporary Redirect

0 B

URL User Request GET HTTP/1.1
gladsince.com/api/users?in=false&pii=&token=L3FidGdja3hnP2tleT1jODk1MDkwYjA2ZjY0ODQ4ZDg3MDZmNjk0YWNhYjdjZSZwc3Q9MTcxNTE5ODg3NSZyZWZlcj1odHRwcyUzQSUyRiUyRmxpYnJhcnl3aGlzcGVyaW5nLmNvbSUyRiZybXRjPXQmc2h1PTc0MjE0MmQyZGI2MmIyNmUzNzRjN2U0M2M3MDBmYTJkN2M4NGI5M2NjZWRiZjRiYmJiMTYyNjJkODYzNWVjZDYyNjAyOTY0MmVjNDQzZTIzYjA1NDZiZmRiZGQ3MzdhNzFkZTc5YmZkMWVjNzBkODhmNGI1MDEwODA5ZGM5YmViNDcyZDFhNmJkNTcxYjhjMTUxNjhmM2U0MDcyNjVjZTk0ZjYyZmVhMDVhMTY1M2VhYmFhN2Q1YjYxNTE5MzViNmRk&uuid=
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Certificate
IssuerLet's Encrypt
Subjectgladsince.com
Fingerprint5B:3C:0F:AB:21:71:A7:D3:59:B2:B5:E3:F1:A7:E5:90:C0:CE:9B:57
ValidityThu, 18 Apr 2024 13:19:08 GMT - Wed, 17 Jul 2024 13:19:07 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?in=false&pii=&token=L3FidGdja3hnP2tleT1jODk1MDkwYjA2ZjY0ODQ4ZDg3MDZmNjk0YWNhYjdjZSZwc3Q9MTcxNTE5ODg3NSZyZWZlcj1odHRwcyUzQSUyRiUyRmxpYnJhcnl3aGlzcGVyaW5nLmNvbSUyRiZybXRjPXQmc2h1PTc0MjE0MmQyZGI2MmIyNmUzNzRjN2U0M2M3MDBmYTJkN2M4NGI5M2NjZWRiZjRiYmJiMTYyNjJkODYzNWVjZDYyNjAyOTY0MmVjNDQzZTIzYjA1NDZiZmRiZGQ3MzdhNzFkZTc5YmZkMWVjNzBkODhmNGI1MDEwODA5ZGM5YmViNDcyZDFhNmJkNTcxYjhjMTUxNjhmM2U0MDcyNjVjZTk0ZjYyZmVhMDVhMTY1M2VhYmFhN2Q1YjYxNTE5MzViNmRk&uuid= HTTP/1.1
Host: gladsince.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Wed, 08 May 2024 20:07:11 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://gladsince.com/qbtgckxg?key=c895090b06f64848d8706f694acab7ce&refer=https%3A%2F%2Flibrarywhispering.com%2F&dlrt=t
Set-Cookie: u_pl=22908156; expires=Thu, 09 May 2024 20:07:11 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8b4cf3222c8f386ffde22b49e91b7533
Strict-Transport-Security: max-age=0; includeSubdomains

gladsince.com/qbtgckxg?key=c895090b06f64848d8706f694acab7ce&refer=https%3A%2F%2Flibrarywhispering.com%2F&dlrt=t

192.243.59.12

200 OK

1.4 kB

URL User Request GET HTTP/1.1
gladsince.com/qbtgckxg?key=c895090b06f64848d8706f694acab7ce&refer=https%3A%2F%2Flibrarywhispering.com%2F&dlrt=t
IP
192.243.59.12:443
ASN
#39572 DataWeb Global Group B.V.

Certificate
IssuerLet's Encrypt
Subjectgladsince.com
Fingerprint5B:3C:0F:AB:21:71:A7:D3:59:B2:B5:E3:F1:A7:E5:90:C0:CE:9B:57
ValidityThu, 18 Apr 2024 13:19:08 GMT - Wed, 17 Jul 2024 13:19:07 GMT

File type
HTML document, ASCII text, with very long lines (476)
Size
1.4 kB (1434 bytes)
Hash
82aabd56967b813f25461bfaae621aba
31556178374638e2cf42ca484463eb80d21b6f16
1c007cfd0c11a8913a0d2f9bbe67a924988075e04b5540741a8930630e24070d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /qbtgckxg?key=c895090b06f64848d8706f694acab7ce&refer=https%3A%2F%2Flibrarywhispering.com%2F&dlrt=t HTTP/1.1
Host: gladsince.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 20:07:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=22908156; expires=Thu, 09 May 2024 20:07:11 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.ASvdYlu0qi1P7OjwrmViHvpenwmzFWPjB1w78nTOkZ4; expires=Wed, 08 May 2024 20:08:11 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5963d8c971c5de430ef8c980fd480952
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

gladsince.com/api/users?token=L3FidGdja3hnP2RscnQ9dCZrZXk9Yzg5NTA5MGIwNmY2NDg0OGQ4NzA2ZjY5NGFjYWI3Y2UmcHN0PTE3MTUxOTg4OTEmcmVmZXI9aHR0cHMlM0ElMkYlMkZsaWJyYXJ5d2hpc3BlcmluZy5jb20lMkYmcm10Yz10JnNodT0zYTQzZDI1ZmJmZTc2MGQ1ODI1NTdjMzk5ZGVjYWEwNzFmYzFiNTZkMDlkNGNhZWJiN2Q5YWFlNTQ0ZmUzNDljZDQzMTJmMTdhNTA4ZTU2MTNmMDUyMzFlYWFiYTRlMDM5Njg1N2E5MDI5ZjI2Y2I5ZjhjYTFiODFhYjg3ZTNmYjliM2JmM2I2NzNhYWJiZWVkMmU4YzA4MzIyNjc0NTZhNWNjZjk3ZjI4N2U3NWY1NmMxOWJmMjUxZWZmYzA1&uuid=&pii=&in=false

172.240.108.68

0 B

URL User Request GET
gladsince.com/api/users?token=L3FidGdja3hnP2RscnQ9dCZrZXk9Yzg5NTA5MGIwNmY2NDg0OGQ4NzA2ZjY5NGFjYWI3Y2UmcHN0PTE3MTUxOTg4OTEmcmVmZXI9aHR0cHMlM0ElMkYlMkZsaWJyYXJ5d2hpc3BlcmluZy5jb20lMkYmcm10Yz10JnNodT0zYTQzZDI1ZmJmZTc2MGQ1ODI1NTdjMzk5ZGVjYWEwNzFmYzFiNTZkMDlkNGNhZWJiN2Q5YWFlNTQ0ZmUzNDljZDQzMTJmMTdhNTA4ZTU2MTNmMDUyMzFlYWFiYTRlMDM5Njg1N2E5MDI5ZjI2Y2I5ZjhjYTFiODFhYjg3ZTNmYjliM2JmM2I2NzNhYWJiZWVkMmU4YzA4MzIyNjc0NTZhNWNjZjk3ZjI4N2U3NWY1NmMxOWJmMjUxZWZmYzA1&uuid=&pii=&in=false
IP
172.240.108.68:0
ASN
#7979 SERVERS-COM

Certificate
IssuerLet's Encrypt
Subjectgladsince.com
Fingerprint5B:3C:0F:AB:21:71:A7:D3:59:B2:B5:E3:F1:A7:E5:90:C0:CE:9B:57
ValidityThu, 18 Apr 2024 13:19:08 GMT - Wed, 17 Jul 2024 13:19:07 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=L3FidGdja3hnP2RscnQ9dCZrZXk9Yzg5NTA5MGIwNmY2NDg0OGQ4NzA2ZjY5NGFjYWI3Y2UmcHN0PTE3MTUxOTg4OTEmcmVmZXI9aHR0cHMlM0ElMkYlMkZsaWJyYXJ5d2hpc3BlcmluZy5jb20lMkYmcm10Yz10JnNodT0zYTQzZDI1ZmJmZTc2MGQ1ODI1NTdjMzk5ZGVjYWEwNzFmYzFiNTZkMDlkNGNhZWJiN2Q5YWFlNTQ0ZmUzNDljZDQzMTJmMTdhNTA4ZTU2MTNmMDUyMzFlYWFiYTRlMDM5Njg1N2E5MDI5ZjI2Y2I5ZjhjYTFiODFhYjg3ZTNmYjliM2JmM2I2NzNhYWJiZWVkMmU4YzA4MzIyNjc0NTZhNWNjZjk3ZjI4N2U3NWY1NmMxOWJmMjUxZWZmYzA1&uuid=&pii=&in=false HTTP/1.1
Host: gladsince.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gladsince.com/api/users?token=L3FidGdja3hnP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MjI5MDgxNTY
Cookie: u_pl=22908156; u_pl=22908156; ain=eyJhbGciOiJIUzI1NiJ9.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.ASvdYlu0qi1P7OjwrmViHvpenwmzFWPjB1w78nTOkZ4; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Wed, 08 May 2024 20:07:11 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://www.linksforfree.com/
Set-Cookie: pdhtkv=true; expires=Thu, 09 May 2024 20:07:11 GMT
uncs=1; expires=Thu, 09 May 2024 20:07:11 GMT
pdhtkv28=true; expires=Thu, 09 May 2024 20:07:11 GMT
uncs28=1; expires=Thu, 09 May 2024 20:07:11 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9c0db076e1e838ee3cb29d934fdde3ff
Strict-Transport-Security: max-age=0; includeSubdomains

gladsince.com/api/users?token=L3FidGdja3hnP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MjI5MDgxNTY

192.243.59.13

1.3 kB

URL
gladsince.com/api/users?token=L3FidGdja3hnP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MjI5MDgxNTY
IP
192.243.59.13:0
ASN
#39572 DataWeb Global Group B.V.

Certificate
IssuerLet's Encrypt
Subjectgladsince.com
Fingerprint5B:3C:0F:AB:21:71:A7:D3:59:B2:B5:E3:F1:A7:E5:90:C0:CE:9B:57
ValidityThu, 18 Apr 2024 13:19:08 GMT - Wed, 17 Jul 2024 13:19:07 GMT

File type
HTML document, ASCII text, with very long lines (432)
Size
1.3 kB (1329 bytes)
Hash
26ea40cac3ed59d0a1cb0ec3fd707043
4128f21a0cedfa4ca5b34cae460f0453a4219b9b
bf9766b9eaae56ab315e9c3f28de66514cc8970e36ac99ae2d915969cb98bef1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=L3FidGdja3hnP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MjI5MDgxNTY HTTP/1.1
Host: gladsince.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 08 May 2024 20:07:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=15548089; expires=Thu, 09 May 2024 20:07:33 GMT
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTU0ODA4OSwiayI6ImE5NjljYTVjOWFkMjYxMTc2MmYxMWI3OWE1MjZlMmQyIiwic2lkIjoiMjI5MDgxNTYiLCJpc2lkIjoyLCJhc2lkIjoxLCJ6aWQiOjEwMzczOCwicGlkIjo4MzMyMCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjoyOCwicHQiOjQsInBrIjoidm4wZGJ2eTUiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6IiIsImFyIjpbXX19.bpL7yk0o4ABetXLNlkS8GD61wt4qAxryCvi2DTTkTI0; expires=Wed, 08 May 2024 20:08:33 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f04cd4065d1415c04db08505092a9033
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

proftrafficcounter.com/stats

0.0.0.0

0 B

URL GET
proftrafficcounter.com/stats
IP
0.0.0.0:0
ASN
#0

Requested by
https://gladsince.com/qbtgckxg?key=c895090b06f64848d8706f694acab7ce&refer=https%3A%2F%2Flibrarywhispering.com%2F&dlrt=t

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gladsince.com
DNT: 1
Connection: keep-alive
Referer: https://gladsince.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

gladsince.com/favicon.ico

0.0.0.0

0 B

URL GET
gladsince.com/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://gladsince.com/qbtgckxg?key=c895090b06f64848d8706f694acab7ce&refer=https%3A%2F%2Flibrarywhispering.com%2F&dlrt=t
Certificate
IssuerLet's Encrypt
Subjectgladsince.com
Fingerprint5B:3C:0F:AB:21:71:A7:D3:59:B2:B5:E3:F1:A7:E5:90:C0:CE:9B:57
ValidityThu, 18 Apr 2024 13:19:08 GMT - Wed, 17 Jul 2024 13:19:07 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: gladsince.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gladsince.com/api/users?token=L3FidGdja3hnP2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MjI5MDgxNTY
Cookie: u_pl=22908156; ain=eyJhbGciOiJIUzI1NiJ9.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.ASvdYlu0qi1P7OjwrmViHvpenwmzFWPjB1w78nTOkZ4; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

www.linksforfree.com/

0.0.0.0

0 B

URL User Request GET
www.linksforfree.com/
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: www.linksforfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gladsince.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP