Report - click.xpurity.co/adw0fryrkf

Report Overview

Submitted URL
click.xpurity.co/adw0fryrkf
IP
54.37.197.238
ASN
#16276 OVH SAS
Submitted
2024-04-25 14:02:55
Access
public
Website Title
adw0fryrkf - Click by Xpurity
Final URL
click.xpurity.co/adw0fryrkf
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn2.xpurity.co	unknown	unknown	No data	No data	936 B	18 kB	143.204.55.89
adserver.wildravenmedia.com	unknown	unknown	No data	No data	868 B	0 B	0.0.0.0
click.xpurity.co	unknown	2019-03-18	2022-03-05	2023-10-19	6.3 kB	616 kB	54.37.197.238

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	wildravenmedia.com	Sinkholed
2024-04-25	medium	wildravenmedia.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	click.xpurity.co/themes/altum/assets/js/libraries/jquery.min.js?v=4500	88 kB	2023-08-31	2024-05-04
Pretty URL click.xpurity.co/themes/altum/assets/js/libraries/jquery.min.js?v=4500 IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 16:03:19 Last Seen2024-05-04 20:21:29 Times Seen8659 Hash 2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a Loading...

	click.xpurity.co/themes/altum/assets/js/libraries/popper.min.js?v=4500	21 kB	2023-03-08	2024-04-25
Pretty URL click.xpurity.co/themes/altum/assets/js/libraries/popper.min.js?v=4500 IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 12:45:10 Last Seen2024-04-25 16:03:03 Times Seen31 Hash 58650e6ecacecf06c34935703e03083a 438ac976fb8cd15935bb61b7159384a5660ef708 b4ef79d3c83a6b1166c2b95c6aee7c66d5aae727d1d70ba7a52478ea13f81baf Loading...

	click.xpurity.co/themes/altum/assets/js/libraries/fontawesome.min.js?v=4500	57 kB	2023-10-13	2024-04-25
Pretty URL click.xpurity.co/themes/altum/assets/js/libraries/fontawesome.min.js?v=4500 IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 23:40:12 Last Seen2024-04-25 16:03:03 Times Seen58 Hash 462c350724d58490bab52ede010bc143 40ce97040474bf5c9b20ad8f99300ed5b62069a5 9d86a276aee130232fa0ef2134c750628acac1072a31e35eb7d65624652f549d Loading...

	click.xpurity.co/themes/altum/assets/js/libraries/fontawesome-brands.min.js?v=4500	476 kB	2023-10-13	2024-04-25
Pretty URL click.xpurity.co/themes/altum/assets/js/libraries/fontawesome-brands.min.js?v=4500 IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 23:40:11 Last Seen2024-04-25 16:03:03 Times Seen50 Hash 8fc3a0e0ae298d25f5faf8e97acee41b a3b1df07094cec8030f4a5a9d6f2f2a4aa12c657 a53e31edb30f99af3ca1057b04b78ffd82306614059042531adea8ee830a25e3 Loading...

	click.xpurity.co/adw0fryrkf	0 B	2023-03-07	2024-05-04
Pretty URL click.xpurity.co/adw0fryrkf IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-04 22:12:20 Times Seen37347483 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	click.xpurity.co/themes/altum/assets/js/libraries/bootstrap.min.js?v=4500	62 kB	2023-03-26	2024-04-25
Pretty URL click.xpurity.co/themes/altum/assets/js/libraries/bootstrap.min.js?v=4500 IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 08:59:41 Last Seen2024-04-25 16:03:03 Times Seen9 Hash 3da73d3fb20a3f1a71eae74c97c5810f 60b6d7b2140e5ae709c85d1c8c5bde569561af4c 8c1dea3ffbb8a0974366fc2c7748d4db4f7ff15e0d6d1dc9f18e7d52a366414b Loading...

	click.xpurity.co/themes/altum/assets/js/custom.js?v=4500	35 kB	2024-04-14	2024-04-25
Pretty URL click.xpurity.co/themes/altum/assets/js/custom.js?v=4500 IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-14 08:12:19 Last Seen2024-04-25 16:03:03 Times Seen3 Hash 21a759b3bf5765a283d0283f57a3b027 2effdb2c37b534b8b8e735ca813cc750fdcb4434 407d03f6602ffb7d8fab46c8d5cf126bb536a36d81a0fec81c2b3a07a96a6946 Loading...

	click.xpurity.co/themes/altum/assets/js/libraries/fontawesome-solid.min.js?v=4500	826 kB	2023-10-13	2024-04-25
Pretty URL click.xpurity.co/themes/altum/assets/js/libraries/fontawesome-solid.min.js?v=4500 IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 23:40:11 Last Seen2024-04-25 16:03:03 Times Seen52 Hash 6ee785a77d67d49a8fd88569c9d44a71 f8e52454580782cb19490042d7721ccd24dc80a7 f9442a526f76a4fad3bc9c7b8e7e7a9041f507649c9c8ca653f8ab4ce0d3dc02 Loading...

	click.xpurity.co/adw0fryrkf	0 B	2023-03-07	2024-05-04
Pretty URL click.xpurity.co/adw0fryrkf IP 54.37.197.238 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-04 22:12:20 Times Seen37347483 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (16)

URL IP Response Size

click.xpurity.co/adw0fryrkf

54.37.197.238

200 OK

2.1 kB

URL User Request GET HTTP/1.1
click.xpurity.co/adw0fryrkf
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (586), with CRLF, LF line terminators
Size
2.1 kB (2108 bytes)
Hash
32404c9ad07ba103069c2cc402b38a7e
92bdb144f638fd02d1d08c9918e78f5cc3ae02ca
d13e3619898124ffc113d44b3441560402896556751cf23d10bb5796ced42330

HTTP Headers

GET /adw0fryrkf HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Max-Age: 7200
Set-Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; path=/; SameSite=Lax
s_statistics_66=0; expires=Fri, 26 Apr 2024 14:02:29 GMT; Max-Age=86400
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2108
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

click.xpurity.co/themes/altum/assets/css/bootstrap.min.css?v=4500

54.37.197.238

200 OK

34 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/css/bootstrap.min.css?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (65320)
Size
34 kB (33507 bytes)
Hash
3c025a45a8f3f2a99d385acf4cd01733
0b28c9ea25432c75c31631f8b3ce2d4ad7d7689a
0da41443374b43361d9f451d2ef2a78a0a5fac9d7931823426c8eefcd000fcd5

HTTP Headers

GET /themes/altum/assets/css/bootstrap.min.css?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2024 19:36:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Sat, 25 May 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 33507
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

click.xpurity.co/themes/altum/assets/js/libraries/bootstrap.min.js?v=4500

54.37.197.238

200 OK

15 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/js/libraries/bootstrap.min.js?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (62284)
Size
15 kB (15288 bytes)
Hash
3da73d3fb20a3f1a71eae74c97c5810f
60b6d7b2140e5ae709c85d1c8c5bde569561af4c
8c1dea3ffbb8a0974366fc2c7748d4db4f7ff15e0d6d1dc9f18e7d52a366414b

HTTP Headers

GET /themes/altum/assets/js/libraries/bootstrap.min.js?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2024 19:36:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Fri, 01 Nov 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 15288
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

click.xpurity.co/themes/altum/assets/css/custom.css?v=4500

54.37.197.238

200 OK

5.6 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/css/custom.css?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1242)
Size
5.6 kB (5569 bytes)
Hash
0e3f9db24b967656f6047f5c28953ebc
bdd4787216e477308fcb896cf97a9bf0a9a90fb9
126902945b84d4809a9d009614ee2245dc7a327cad4a878c6cc10f3c231aa6ea

HTTP Headers

GET /themes/altum/assets/css/custom.css?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Mon, 26 Feb 2024 23:50:51 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Sat, 25 May 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5569
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

click.xpurity.co/themes/altum/assets/css/link-custom.css?v=4500

54.37.197.238

200 OK

1.3 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/css/link-custom.css?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
ASCII text
Size
1.3 kB (1265 bytes)
Hash
7fa338925b393ddbb3a8f340e68a4d2f
e5c7234f5ab6cb0706d3d958f43417540e0ffbe6
af44a985e8cf7664896e69d35f4084496e7e28b2d1dd512a79df1ec567340f90

HTTP Headers

GET /themes/altum/assets/css/link-custom.css?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Mon, 26 Feb 2024 23:50:51 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Sat, 25 May 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1265
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

click.xpurity.co/themes/altum/assets/css/animate.min.css?v=4500

54.37.197.238

200 OK

5.3 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/css/animate.min.css?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65348)
Size
5.3 kB (5272 bytes)
Hash
acc544860202ca85bd85dc0429880450
ab2e786b8f411e124e9fbcbc02f323269beff034
721fd25fad2ceea766b483f7692fc840097de75bb54185273920adf62da63e15

HTTP Headers

GET /themes/altum/assets/css/animate.min.css?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Sat, 25 Nov 2023 20:20:52 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Sat, 25 May 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5272
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

click.xpurity.co/themes/altum/assets/js/libraries/popper.min.js?v=4500

54.37.197.238

200 OK

7.5 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/js/libraries/popper.min.js?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (21060)
Size
7.5 kB (7476 bytes)
Hash
58650e6ecacecf06c34935703e03083a
438ac976fb8cd15935bb61b7159384a5660ef708
b4ef79d3c83a6b1166c2b95c6aee7c66d5aae727d1d70ba7a52478ea13f81baf

HTTP Headers

GET /themes/altum/assets/js/libraries/popper.min.js?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2024 21:23:47 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Fri, 01 Nov 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7476
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

click.xpurity.co/themes/altum/assets/js/custom.js?v=4500

54.37.197.238

200 OK

8.8 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/js/custom.js?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19965)
Size
8.8 kB (8841 bytes)
Hash
21a759b3bf5765a283d0283f57a3b027
2effdb2c37b534b8b8e735ca813cc750fdcb4434
407d03f6602ffb7d8fab46c8d5cf126bb536a36d81a0fec81c2b3a07a96a6946

HTTP Headers

GET /themes/altum/assets/js/custom.js?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Mon, 26 Feb 2024 23:50:51 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Fri, 01 Nov 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8841
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript

click.xpurity.co/themes/altum/assets/js/libraries/jquery.min.js?v=4500

54.37.197.238

200 OK

30 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/js/libraries/jquery.min.js?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (30362 bytes)
Hash
2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

HTTP Headers

GET /themes/altum/assets/js/libraries/jquery.min.js?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2024 19:36:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Fri, 01 Nov 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 30362
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

click.xpurity.co/themes/altum/assets/js/libraries/fontawesome.min.js?v=4500

54.37.197.238

200 OK

16 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/js/libraries/fontawesome.min.js?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (56644)
Size
16 kB (16107 bytes)
Hash
462c350724d58490bab52ede010bc143
40ce97040474bf5c9b20ad8f99300ed5b62069a5
9d86a276aee130232fa0ef2134c750628acac1072a31e35eb7d65624652f549d

HTTP Headers

GET /themes/altum/assets/js/libraries/fontawesome.min.js?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2024 19:36:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Fri, 01 Nov 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 16107
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

click.xpurity.co/themes/altum/assets/js/libraries/fontawesome-brands.min.js?v=4500

54.37.197.238

200 OK

208 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/js/libraries/fontawesome-brands.min.js?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65317)
Size
208 kB (207802 bytes)
Hash
8fc3a0e0ae298d25f5faf8e97acee41b
a3b1df07094cec8030f4a5a9d6f2f2a4aa12c657
a53e31edb30f99af3ca1057b04b78ffd82306614059042531adea8ee830a25e3

HTTP Headers

GET /themes/altum/assets/js/libraries/fontawesome-brands.min.js?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2024 19:36:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Fri, 01 Nov 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

click.xpurity.co/themes/altum/assets/js/libraries/fontawesome-solid.min.js?v=4500

54.37.197.238

200 OK

278 kB

URL GET HTTP/1.1
click.xpurity.co/themes/altum/assets/js/libraries/fontawesome-solid.min.js?v=4500
IP
54.37.197.238:443
ASN
#16276 OVH SAS

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuercPanel, Inc.
Subjectclick.xpurity.co
Fingerprint4E:0B:78:9F:23:5A:B6:20:FE:43:64:A6:34:8C:64:19:5F:AB:66:A4
ValiditySat, 24 Feb 2024 00:00:00 GMT - Fri, 24 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65317)
Size
278 kB (277819 bytes)
Hash
6ee785a77d67d49a8fd88569c9d44a71
f8e52454580782cb19490042d7721ccd24dc80a7
f9442a526f76a4fad3bc9c7b8e7e7a9041f507649c9c8ca653f8ab4ce0d3dc02

HTTP Headers

GET /themes/altum/assets/js/libraries/fontawesome-solid.min.js?v=4500 HTTP/1.1
Host: click.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/adw0fryrkf
Cookie: PHPSESSID=cp45m47h96uuj8mbo1hc1178dt; s_statistics_66=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 14:02:29 GMT
Server: Apache
Last-Modified: Sun, 18 Feb 2024 19:36:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Fri, 01 Nov 2024 14:02:29 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

cdn2.xpurity.co/uploads/main/163f63c1c7b22b0ec7a1c50570fcf968.png

143.204.55.89

200 OK

14 kB

URL GET HTTP/2
cdn2.xpurity.co/uploads/main/163f63c1c7b22b0ec7a1c50570fcf968.png
IP
143.204.55.89:443
ASN
#16509 AMAZON-02

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuerAmazon
Subject*.xpurity.co
FingerprintF4:79:C0:34:B4:4F:84:38:6D:F5:38:A9:E6:5F:85:18:21:28:C7:00
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
14 kB (14249 bytes)
Hash
1011f864a483ebeb2645aa43d36fe5f3
75f6584dd64ee06165ce453252062f0b8e0ff4a9
37e295dbed68a900c1d9948bcba580b20c9e8734313c677bac4a0abab821b880

HTTP Headers

GET /uploads/main/163f63c1c7b22b0ec7a1c50570fcf968.png HTTP/1.1
Host: cdn2.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 14249
date: Thu, 25 Apr 2024 14:02:31 GMT
last-modified: Wed, 06 Jul 2022 15:46:07 GMT
etag: "1011f864a483ebeb2645aa43d36fe5f3"
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OMEAKWhODmZ5PX8ri68WXPkJZmkghdU66raQ8F5_ef2q87PSTHQL1Q==
X-Firefox-Spdy: h2

cdn2.xpurity.co/uploads/logo/706998016b99043d71ad02642e520f87.svg

143.204.55.89

200 OK

2.6 kB

URL GET HTTP/2
cdn2.xpurity.co/uploads/logo/706998016b99043d71ad02642e520f87.svg
IP
143.204.55.89:443
ASN
#16509 AMAZON-02

Requested by
https://click.xpurity.co/adw0fryrkf
Certificate
IssuerAmazon
Subject*.xpurity.co
FingerprintF4:79:C0:34:B4:4F:84:38:6D:F5:38:A9:E6:5F:85:18:21:28:C7:00
ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
2.6 kB (2604 bytes)
Hash
eb309889005dd0f5b080aab8effc137b
8de9f168fe4ecf7aa9d994291d69acbdacbdb1f5
54686867fdf74ac07363a38abbe635db05fc26e2e9909006f1c2e20e0e79e563

HTTP Headers

GET /uploads/logo/706998016b99043d71ad02642e520f87.svg HTTP/1.1
Host: cdn2.xpurity.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 25 Apr 2024 14:02:30 GMT
last-modified: Wed, 09 Feb 2022 02:16:14 GMT
etag: W/"23ae0b5780432fbb4c810b6bff358576"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z7qDvOIzYQ-vr9Pv8qnDna0U3F-wmLjgvpP6iMDl30Rx1GZFx1ILQw==
X-Firefox-Spdy: h2

adserver.wildravenmedia.com/live/www/delivery/asyncjs.php

0.0.0.0

0 B

URL GET
adserver.wildravenmedia.com/live/www/delivery/asyncjs.php
IP
0.0.0.0:0
ASN
#0

Requested by
https://click.xpurity.co/adw0fryrkf

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /live/www/delivery/asyncjs.php HTTP/1.1
Host: adserver.wildravenmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

adserver.wildravenmedia.com/live/www/delivery/asyncjs.php

0.0.0.0

0 B

URL GET
adserver.wildravenmedia.com/live/www/delivery/asyncjs.php
IP
0.0.0.0:0
ASN
#0

Requested by
https://click.xpurity.co/adw0fryrkf

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /live/www/delivery/asyncjs.php HTTP/1.1
Host: adserver.wildravenmedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://click.xpurity.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML