Report - get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true

Report Overview

Submitted URL
get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
IP
172.67.179.117
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-10 18:26:32
Access
public
Website Title
get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Final URL
get.extensions-installs.com/blank
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
get.extensions-installs.com	unknown	unknown	No data	No data	8.2 kB	332 kB	172.67.179.117
undefined	142677	unknown	2020-01-28	2023-07-23	490 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	undefined	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	get.extensions-installs.com/_next/static/chunks/7928-4771a8700009962c.js	96 kB	2024-05-10	2024-05-10
Pretty URL get.extensions-installs.com/_next/static/chunks/7928-4771a8700009962c.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 01:51:16 Last Seen2024-05-10 21:34:06 Times Seen8 Hash 092c0f673a09b0002386080b946fd9c6 dfaf791333af70fa7a4417d0e928eda0950e5366 b49f9f4196d28744aa27cb12d9a229a87bc48266a7d550f33fd65a1c3231607d Loading...

	get.extensions-installs.com/_next/static/chunks/pages/index-05f521585ad7e6e7.js	22 kB	2024-05-10	2024-05-10
Pretty URL get.extensions-installs.com/_next/static/chunks/pages/index-05f521585ad7e6e7.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 01:51:16 Last Seen2024-05-10 21:34:06 Times Seen10 Hash f4150a59d247f759a7bd0cde033c3154 2bbe70bd00c526a5dddd6bb4098ef2c1a6390dec 18e6ec25a8350413c40de56d5c4585bab5defadd3d470b9ebad3266d8d22b21d Loading...

	get.extensions-installs.com/_next/static/rvKSYbBGuUWk7pw9GOGSQ/_buildManifest.js	1.0 kB	2024-05-10	2024-05-10
Pretty URL get.extensions-installs.com/_next/static/rvKSYbBGuUWk7pw9GOGSQ/_buildManifest.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 01:51:16 Last Seen2024-05-10 21:34:06 Times Seen5 Hash 99b0a06c755c23ac66596d080a7adde7 b010b81ba0fc28ecaba7a48518279d8066febaa1 2ed0b4bea2e4519578736d99741f5681a43d14a16a7ffcef97d90ca206f62c9e Loading...

	get.extensions-installs.com/_next/static/rvKSYbBGuUWk7pw9GOGSQ/_ssgManifest.js	77 B	2023-03-07	2024-05-20
Pretty URL get.extensions-installs.com/_next/static/rvKSYbBGuUWk7pw9GOGSQ/_ssgManifest.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:02 Last Seen2024-05-20 20:38:07 Times Seen87735 Hash b6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e Loading...

	get.extensions-installs.com/_next/static/chunks/webpack-5338d45a2392c66f.js	11 kB	2024-05-10	2024-05-10
Pretty URL get.extensions-installs.com/_next/static/chunks/webpack-5338d45a2392c66f.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 01:51:16 Last Seen2024-05-10 21:34:06 Times Seen10 Hash 831e04c28ba497ff25ede3848f143ab7 7ec7e465a6dd2821e69ee825a7a8f5eee25a21b5 a6f6632f2a74228027d51f9b1f76938ef7188e923df19e193e93c368680e1861 Loading...

	get.extensions-installs.com/_next/static/chunks/framework-3671d8951bf44e4e.js	141 kB	2023-04-09	2024-05-20
Pretty URL get.extensions-installs.com/_next/static/chunks/framework-3671d8951bf44e4e.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-09 05:13:29 Last Seen2024-05-20 12:11:06 Times Seen232 Hash 6081d0683ad8f48c96c1fa6ba4b00a6c 288295b31b2be8ca70324de3142b75483a4571cf 1845c289c582dd2b58a3ab7f8eadb695ebabbfe7a2685e5f9012ae16e0541580 Loading...

	get.extensions-installs.com/_next/static/chunks/main-403c8612371c9360.js	89 kB	2023-12-01	2024-05-20
Pretty URL get.extensions-installs.com/_next/static/chunks/main-403c8612371c9360.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 17:43:42 Last Seen2024-05-20 12:11:07 Times Seen122 Hash 8de5f1bfeb434ccf34a254a49093706a 78e1085a0f56e6e20f14f84a70ed45079b2a4da9 0514cea519259a90ef195e663ef8f544520a3b08a3e3986179e7e43a56cfba1a Loading...

	get.extensions-installs.com/_next/static/chunks/pages/_app-a08abce5e54275ba.js	19 kB	2024-05-10	2024-05-10
Pretty URL get.extensions-installs.com/_next/static/chunks/pages/_app-a08abce5e54275ba.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 01:51:16 Last Seen2024-05-10 21:34:06 Times Seen10 Hash a520d21b8a2e69e0b40c633bb5d80c85 ad852d2c010098b1f90a3187b8a94a9508594536 02f7f872b9237b9c2cc4aaf738ab8a26cfc7da641cf6a94038aa7fb36def1aa8 Loading...

	get.extensions-installs.com/_next/static/chunks/pages/blank-f6c98c684ec9dfca.js	1.0 kB	2024-05-04	2024-05-18
Pretty URL get.extensions-installs.com/_next/static/chunks/pages/blank-f6c98c684ec9dfca.js IP 172.67.179.117 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 04:47:25 Last Seen2024-05-18 21:40:41 Times Seen51 Hash d0bcb5f9e15743f4e22a4c39e4d4f6fe 0fc39dee567a79392ddb79ed43f580e75ec7a588 1d19115599b7e2c0b820b9e889e43e7d3112612606b2460424cdd7ae4f8f337d Loading...

HTTP Transactions (13)

URL IP Response Size

get.extensions-installs.com/_next/static/chunks/framework-3671d8951bf44e4e.js

172.67.179.117

200 OK

55 kB

URL GET HTTP/3
get.extensions-installs.com/_next/static/chunks/framework-3671d8951bf44e4e.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
gzip compressed data, from Unix
Size
55 kB (54555 bytes)
Hash
78d052ed092a26c460291b0c87fd3502
711e5ca0acad8e85cf636db8d27b2c527b3c9d59
0da780cb0629b61d2416dff96dcffea9d52601873933b34085080f2aee03a988

HTTP Headers

GET /_next/static/chunks/framework-3671d8951bf44e4e.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"226fd-18f5f8b9f79"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f2wm%2BooeX3E6VRjiBAwFPgiFkDUE0ecty7uYIczBh3Bq7xcKaOc3spnqMAbfCCwsmoI8uOA7rc2RTpFUVhsNsjWQm7WTI%2FeECZxBgYGy5LvLVu2CZ7oPHvyjSoSGlXGPWM2ZGOQuy%2BFR7Y4y5HA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce88231c16-OSL
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/_next/static/chunks/main-403c8612371c9360.js

172.67.179.117

200 OK

89 kB

URL GET HTTP/3
get.extensions-installs.com/_next/static/chunks/main-403c8612371c9360.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
89 kB (89343 bytes)
Hash
8de5f1bfeb434ccf34a254a49093706a
78e1085a0f56e6e20f14f84a70ed45079b2a4da9
0514cea519259a90ef195e663ef8f544520a3b08a3e3986179e7e43a56cfba1a

HTTP Headers

GET /_next/static/chunks/main-403c8612371c9360.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"15cff-18f5f8b9f79"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LMPcfS7E2lLNq9KIPJFh97yJhcVBCYxuAWj0DY93%2FBCLcbWFZQ2FeSJucXwQAU%2B5rfLBzBQ%2FpXVl9ChoSspDOwl%2Byj%2FNsxWivURyu2Nv7wkLKGO%2FFazlSu9v1o7CF7M%2FAxlXvJ6LRMIKQspZ29o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce88251c16-OSL
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/_next/static/chunks/pages/_app-a08abce5e54275ba.js

172.67.179.117

200 OK

19 kB

URL GET HTTP/3
get.extensions-installs.com/_next/static/chunks/pages/_app-a08abce5e54275ba.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
JavaScript source, ASCII text, with very long lines (19123), with no line terminators
Size
19 kB (19123 bytes)
Hash
a520d21b8a2e69e0b40c633bb5d80c85
ad852d2c010098b1f90a3187b8a94a9508594536
02f7f872b9237b9c2cc4aaf738ab8a26cfc7da641cf6a94038aa7fb36def1aa8

HTTP Headers

GET /_next/static/chunks/pages/_app-a08abce5e54275ba.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"4ab3-18f5f8b9f79"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TN9DHoAOj%2BAZo4H6%2FOiqrZYvn%2BdPzpapkCiEdRhsxpQUlglj3LZCdCVWfekNUIadCIo01h6BbTRT8%2BwZOZ0rKac1etUz317MByG09qQT%2BHe0rcLUrN6pQWV5mcm3vmMJX3oh%2FJ5Cg4NfKbkzDxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce88271c16-OSL
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/_next/static/chunks/7928-4771a8700009962c.js

172.67.179.117

200 OK

96 kB

URL GET HTTP/3
get.extensions-installs.com/_next/static/chunks/7928-4771a8700009962c.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
96 kB (95829 bytes)
Hash
092c0f673a09b0002386080b946fd9c6
dfaf791333af70fa7a4417d0e928eda0950e5366
b49f9f4196d28744aa27cb12d9a229a87bc48266a7d550f33fd65a1c3231607d

HTTP Headers

GET /_next/static/chunks/7928-4771a8700009962c.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"17655-18f5f8b9f79"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yoa2xJ4Ymb0GVrBPO0%2FuUkiu0RuIqcojCXSpxRMOaLPjCbZ79AdYcg%2BJQNxADYLc2Hxx%2FVMAyPk%2BgzEeaCjHD00zl3YiTGJqP4kKgkyK4c%2BnzcAD7ZobjdiNR4zxbyD2jjEwrZGPYSzw4%2BDhBhw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce982a1c16-OSL
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/_next/static/css/9d92a176c9608aa4.css

172.67.179.117

200 OK

102 B

URL GET HTTP/3
get.extensions-installs.com/_next/static/css/9d92a176c9608aa4.css
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
ASCII text, with no line terminators
Size
102 B (102 bytes)
Hash
6cf10bb0ebaccbb83a7d95b8b2faf6a2
0c203afc6a2c883c7b4f0a8561cd6df35dca1ba3
9b5d584b6200dfb2ea17d372ceb88c61ee68bf6e7ae5cabed28d31952b048a10

HTTP Headers

GET /_next/static/css/9d92a176c9608aa4.css HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"66-18f5f8b9f7d"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Mb89oOiTaOVRKUP2yHf7PgX4j8B0%2BODymPlKBSx9NhAAwNbnWyQfyJJlO%2FIvILYefPhE1yNa%2FUQJJY4qFUXjWb4B2ZyLeU3MnEX2tCtAbZxXvnsPOehH0OWnkR1%2Fl32ndz4OpjXebNgRwfMnMA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce881c1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

undefined/click?upd_clickid=cov6d2j2r96s73dqb580&add_event6=1

0.0.0.0

0 B

URL GET
undefined/click?upd_clickid=cov6d2j2r96s73dqb580&add_event6=1
IP
0.0.0.0:0
ASN
#0

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /click?upd_clickid=cov6d2j2r96s73dqb580&add_event6=1 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://get.extensions-installs.com
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true

172.67.179.117

200 OK

1.6 kB

URL User Request GET HTTP/2
get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
HTML document, ASCII text, with very long lines (1750), with no line terminators
Size
1.6 kB (1616 bytes)
Hash
400ebc4ddbdc729c2a9456c1d91a3b95
3f47e0660da0272c73d0109ec61139b0cea38be4
45554970b04370db67bf80e251a4547e98435f4beb56181a9861e16d96c87049

HTTP Headers

GET /?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FbWQvQsBu61vE5UPA25vIFtWSnC741CgtUSY7E%2Fty9xK%2FDfQ6ShwYTShTygMaiqMZ%2BgVGanQt0NAIZBBDJ1IsPITQd%2FZaQwz2tblXUWvdrQPTzTm63c8%2FqwEuB%2BWNL%2BZ8OZABL0j5Lvj3989mno%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9cc2fdc56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

get.extensions-installs.com/_next/static/chunks/webpack-5338d45a2392c66f.js

172.67.179.117

200 OK

11 kB

URL GET HTTP/3
get.extensions-installs.com/_next/static/chunks/webpack-5338d45a2392c66f.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
JavaScript source, ASCII text, with very long lines (10662), with no line terminators
Size
11 kB (10662 bytes)
Hash
831e04c28ba497ff25ede3848f143ab7
7ec7e465a6dd2821e69ee825a7a8f5eee25a21b5
a6f6632f2a74228027d51f9b1f76938ef7188e923df19e193e93c368680e1861

HTTP Headers

GET /_next/static/chunks/webpack-5338d45a2392c66f.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"29a6-18f5f8b9f7d"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vK7QKL7kWUXrlRCpRsQ0LjuLR5f%2FnfdBLsb1qUMj4R10COYPl8WJur4U1x7eehcMESvfXf8fUPfSreGkV4S3IIYvajDdPX1eb9YDh7KN20ujSElECtHbjpZmac4pRESUzQZOQi3NQkfrpP4wymY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce881f1c16-OSL
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/_next/static/rvKSYbBGuUWk7pw9GOGSQ/_ssgManifest.js

172.67.179.117

200 OK

77 B

URL GET HTTP/3
get.extensions-installs.com/_next/static/rvKSYbBGuUWk7pw9GOGSQ/_ssgManifest.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
ASCII text, with no line terminators
Size
77 B (77 bytes)
Hash
b6652df95db52feb4daf4eca35380933
65451d110137761b318c82d9071c042db80c4036
6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

HTTP Headers

GET /_next/static/rvKSYbBGuUWk7pw9GOGSQ/_ssgManifest.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"4d-18f5f8b9f7d"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JWaBMUE2KLS6a4KDUKb%2Fm6dgRWFTmgUE38op9FV4RTlly2TcfeBCov4lwEZH3R%2Fy%2BshcXRNxRQdBMOoaPgtImA4ZwQTONvTpjxoPKSMrthFi5Va8tmSGNxwOcaTj%2BZtQ016NusAemPN1V0Bw0CU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce983e1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/_next/static/chunks/pages/blank-f6c98c684ec9dfca.js

172.67.179.117

200 OK

1.0 kB

URL GET HTTP/3
get.extensions-installs.com/_next/static/chunks/pages/blank-f6c98c684ec9dfca.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
JavaScript source, ASCII text, with very long lines (1026), with no line terminators
Size
1.0 kB (1026 bytes)
Hash
d0bcb5f9e15743f4e22a4c39e4d4f6fe
0fc39dee567a79392ddb79ed43f580e75ec7a588
1d19115599b7e2c0b820b9e889e43e7d3112612606b2460424cdd7ae4f8f337d

HTTP Headers

GET /_next/static/chunks/pages/blank-f6c98c684ec9dfca.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"402-18f5f8b9f79"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fwEoh7LaIQ1%2BIvDOCVWy5yMbtciH4dy%2BxHnRSF8kNnCCpZ3vYQEVYvzBppRBYLBakVPBavoSIjWasEjHHlZ5AjMrPJuOOGfmMsikQGOjMax1gaKXr%2F22V5tZn%2Bze9%2FmT081zHhE3Y7F%2BiacOY0o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9cf69181c16-OSL
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/favicon.ico

172.67.179.117

200 OK

26 kB

URL GET HTTP/3
get.extensions-installs.com/favicon.ico
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
26 kB (25931 bytes)
Hash
c30c7d42707a47a3f4591831641e50dc
9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e
2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Thu, 09 May 2024 22:48:41 GMT
etag: W/"654b-18f5f8b62ed"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ErkI933dP%2FTcyeaTDmTrxr0ODK1sgn9HMZupxl6neVh%2FCXOcfoJff04K2vh8M17fsMfWPt6VrEDWKZK3kdx02w%2FdUBRe1khndBjmka6Kv%2BSV2U1fLH7kkmYnAtzAtR%2BYF0lmfNznf2IN36YUsU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9cf89491c16-OSL
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/_next/static/chunks/pages/index-05f521585ad7e6e7.js

172.67.179.117

200 OK

22 kB

URL GET HTTP/3
get.extensions-installs.com/_next/static/chunks/pages/index-05f521585ad7e6e7.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
JavaScript source, ASCII text, with very long lines (22265), with no line terminators
Size
22 kB (22265 bytes)
Hash
f4150a59d247f759a7bd0cde033c3154
2bbe70bd00c526a5dddd6bb4098ef2c1a6390dec
18e6ec25a8350413c40de56d5c4585bab5defadd3d470b9ebad3266d8d22b21d

HTTP Headers

GET /_next/static/chunks/pages/index-05f521585ad7e6e7.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"56f9-18f5f8b9f79"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2FQw%2F0DDMSC2TE49j1c1FU8597CZK0jjjIjTTrNzHxrQrsBriv6cTp7LPp1p2QzrDl%2Fqoef5OndbXcPgGgvZBA4IFx06zVmRR%2BrT6ThZZX%2Bs8YnOEA2MnKq0hXT7L7iMhvgCq5GNfKwNl9DV8N4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce982c1c16-OSL
alt-svc: h3=":443"; ma=86400

get.extensions-installs.com/_next/static/rvKSYbBGuUWk7pw9GOGSQ/_buildManifest.js

172.67.179.117

200 OK

1.0 kB

URL GET HTTP/3
get.extensions-installs.com/_next/static/rvKSYbBGuUWk7pw9GOGSQ/_buildManifest.js
IP
172.67.179.117:443
ASN
#13335 CLOUDFLARENET

Requested by
https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectextensions-installs.com
Fingerprint9E:1E:9B:57:4C:69:32:43:D6:21:EA:99:A6:0D:C1:2B:79:D3:C4:38
ValidityTue, 07 May 2024 11:36:46 GMT - Mon, 05 Aug 2024 11:36:45 GMT

File type
ASCII text, with very long lines (1102), with no line terminators
Size
1.0 kB (1034 bytes)
Hash
156e3531bf6b2c7b41ee62ad5046b9f1
5a6cab41fe3d21623708e493869f996cb8e56d08
c1db6e4b0f2279e3f5bdaf3b2ba20545193bf3e0b36f4c81462f36a1b395addd

HTTP Headers

GET /_next/static/rvKSYbBGuUWk7pw9GOGSQ/_buildManifest.js HTTP/1.1
Host: get.extensions-installs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get.extensions-installs.com/?extension=ad_sweeper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&src=6118780&cid=cov6d2j2r96s73dqb580&trafficsource=32&lpkey=1715398d16ac279c7d8c29f300f125822482f65814&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 18:26:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Thu, 09 May 2024 22:48:56 GMT
etag: W/"40a-18f5f8b9f7d"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4380
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FfNAVWhWkzZ51kxhcA1APaMjlhDshhQougN%2BYTyQ60QuLJnKiSg%2Byq47jdVVnlEO5YVkW4CyAK5Hxghg5b6oUsxlAVdOYBcagbS2XMI%2BDzUzltkzuwKpyAC7adPN21DtfYjWbHjbEYBOP2sfBdE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf9ce982f1c16-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML