Report - 39.pexeburay.com/index/m3?diff=0&utm_source=ogdd&utm_campaign=26670&utm_content=&utm_clickid=jk08s08ckkc8s8o4&aurl=https:/d5.hotplayer.ru/downloadm/3495bb640cd12f54e151adbe7a0dbd1f/-66571095_286559027/1301a0159b076-9f90bf88473b-cd524ba3c3b/%C3%90%E2%80%99%C3%90%C2%BE%C3%90%C2%B5%C3%90%C2%BD%C3%90%C2%BD%C3%91%E2%80%B9%C3%90%C2%B5%20-%20%C3%90%C5%A1%C3%90%C2%B0%C3%91%E2%80%9A%C3%91%C5%BD%C3%91%CB%86%C3%90%C2%B0%20(%C3%90%C2%BC%C3%90%C2%B8%C3%90%C2%BD%C3%91%C6%92%C3%91%C2%81)%20%C3%90%C2%BA%C3%90%C2%B4%C3%91%E2%80%A0.mp3?play&an=&utm

Report Overview

Submitted URL
39.pexeburay.com/index/m3?diff=0&utm_source=ogdd&utm_campaign=26670&utm_content=&utm_clickid=jk08s08ckkc8s8o4&aurl=https:/d5.hotplayer.ru/downloadm/3495bb640cd12f54e151adbe7a0dbd1f/-66571095_286559027/1301a0159b076-9f90bf88473b-cd524ba3c3b/%C3%90%E2%80%99%C3%90%C2%BE%C3%90%C2%B5%C3%90%C2%BD%C3%90%C2%BD%C3%91%E2%80%B9%C3%90%C2%B5%20-%20%C3%90%C5%A1%C3%90%C2%B0%C3%91%E2%80%9A%C3%91%C5%BD%C3%91%CB%86%C3%90%C2%B0%20(%C3%90%C2%BC%C3%90%C2%B8%C3%90%C2%BD%C3%91%C6%92%C3%91%C2%81)%20%C3%90%C2%BA%C3%90%C2%B4%C3%91%E2%80%A0.mp3?play&an=&utm_term=&site=&isubs=0
IP
172.67.188.74
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-10 09:27:55
Access
public
Website Title
39.pexeburay.com/d5.hotplayer.ru/downloadm/3495bb640cd12f54e151adbe7a0dbd1f/-66571095_286559027/1301a0159b076-9f90bf88473b-cd524ba3c3b/Ð’Ð¾ÐµÐ½Ð½Ñ‹Ðµ-ÐšÐ°Ñ‚ÑŽÑˆÐ°(Ð¼Ð¸Ð½ÑƒÑ)ÐºÐ´Ñ†.mp3?play
Final URL
39.pexeburay.com/d5.hotplayer.ru/downloadm/3495bb640cd12f54e151adbe7a0dbd1f/-66571095_286559027/1301a0159b076-9f90bf88473b-cd524ba3c3b/%C3%90%E2%80%99%C3%90%C2%BE%C3%90%C2%B5%C3%90%C2%BD%C3%90%C2%BD%C3%91%E2%80%B9%C3%90%C2%B5-%C3%90%C5%A1%C3%90%C2%B0%C3%91%E2%80%9A%C3%91%C5%BD%C3%91%CB%86%C3%90%C2%B0(%C3%90%C2%BC%C3%90%C2%B8%C3%90%C2%BD%C3%91%C6%92%C3%91%C2%81)%C3%90%C2%BA%C3%90%C2%B4%C3%91%E2%80%A0.mp3?play
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
hdtcode.com	unknown	2019-04-29	2019-05-01	2024-04-29	425 B	272 B	185.196.197.130
cesupufius.com	unknown	2023-03-09	2023-03-09	2024-04-29	487 B	3.9 kB	88.208.46.23
39.pexeburay.com	unknown	2023-05-11	2023-06-08	2024-04-17	2.9 kB	50 kB	104.21.32.236

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 09:27:52	medium	Client IP	45.154.14.75	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Size
	hdtcode.com/event?data=&id=10	185.196.197.130	0 B
URL hdtcode.com/event?data=&id=10 IP 185.196.197.130:0 ASN #39572 DataWeb Global Group B.V. File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /event?data=&id=10 HTTP/1.1 Host: hdtcode.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://39.pexeburay.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.23.2 date: Fri, 10 May 2024 09:27:31 GMT content-length: 0 access-control-allow-headers: X-Requested-With, Cache-Control, Content-Type access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * X-Firefox-Spdy: h2`

	cesupufius.com/61457	88.208.46.23	3.2 kB
URL cesupufius.com/61457 IP 88.208.46.23:0 ASN #39572 DataWeb Global Group B.V. File type JSON text data Size 3.2 kB (3246 bytes) Hash 14a71b3314014a37d8c1ad5f55b597ae 3222368cdd2a4c3a1cd7a72c5ac9cc2a7737d4ec a32335fa55f5ca69a978fcea8ebd018a496c3d7043be83545abb55e9f38b6abb HTTP Headers `POST /61457 HTTP/1.1 Host: cesupufius.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://39.pexeburay.com/ Content-Type: text/plain;charset=UTF-8 Content-Length: 217 Origin: https://39.pexeburay.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: nginx Date: Fri, 10 May 2024 09:27:31 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: https://39.pexeburay.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: userid=02abd7ee-d503-4ad3-88ca-77c2be5e4a79; expires=Thu, 10-May-2029 09:27:31 GMT; Path=/; SameSite=None; Secure Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version

	39.pexeburay.com/favicon.ico	104.21.32.236	11 kB
URL 39.pexeburay.com/favicon.ico IP 104.21.32.236:0 ASN #13335 CLOUDFLARENET File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size 11 kB (10730 bytes) Hash 4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0 HTTP Headers GET /favicon.ico HTTP/1.1 Host: 39.pexeburay.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://39.pexeburay.com/d5.hotplayer.ru/downloadm/3495bb640cd12f54e151adbe7a0dbd1f/-66571095_286559027/1301a0159b076-9f90bf88473b-cd524ba3c3b/%C3%90%E2%80%99%C3%90%C2%BE%C3%90%C2%B5%C3%90%C2%BD%C3%90%C2%BD%C3%91%E2%80%B9%C3%90%C2%B5-%C3%90%C5%A1%C3%90%C2%B0%C3%91%E2%80%9A%C3%91%C5%BD%C3%91%CB%86%C3%90%C2%B0(%C3%90%C2%BC%C3%90%C2%B8%C3%90%C2%BD%C3%91%C6%92%C3%91%C2%81)%C3%90%C2%BA%C3%90%C2%B4%C3%91%E2%80%A0.mp3?play Cookie: pmvid=02abd7ee-d503-4ad3-88ca-77c2be5e4a79 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 10 May 2024 09:27:31 GMT content-type: image/x-icon last-modified: Wed, 02 Nov 2022 12:29:48 GMT etag: W/"636262bc-1007" cache-control: max-age=14400 cf-cache-status: HIT age: 1524 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F31gV4zPhKu39tZBmXen%2B1CkbAIRi48cejkO%2FByxtP4FB9QKbI5iWRY6BHxehRyiQLOZGIa68S%2FpCx43Zjt0siEkPYZKasEjRInS3TJIdx%2BrcOLA%2FcHYOLrSZkgzZcXR2hY%2B"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8818e4d73b5756b9-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	39.pexeburay.com/199f8c6.php?utm_source=ogdd&utm_campaign=26670	104.21.32.236	25 kB
URL 39.pexeburay.com/199f8c6.php?utm_source=ogdd&utm_campaign=26670 IP 104.21.32.236:0 ASN #13335 CLOUDFLARENET File type gzip compressed data, from Unix Size 25 kB (25012 bytes) Hash 1f9d8f60e1afa457fa6742d870ddfe77 10dab288fd84c69b3ba90a8b124a56045ad32315 102b432bc7d82b663309567d672d686d73cd2c1798a083b60929309c159cc2e4 HTTP Headers GET /199f8c6.php?utm_source=ogdd&utm_campaign=26670 HTTP/1.1 Host: 39.pexeburay.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://39.pexeburay.com/index/m3?diff=0&utm_source=ogdd&utm_campaign=26670&utm_content=&utm_clickid=jk08s08ckkc8s8o4&aurl=https:/d5.hotplayer.ru/downloadm/3495bb640cd12f54e151adbe7a0dbd1f/-66571095_286559027/1301a0159b076-9f90bf88473b-cd524ba3c3b/%C3%90%E2%80%99%C3%90%C2%BE%C3%90%C2%B5%C3%90%C2%BD%C3%90%C2%BD%C3%91%E2%80%B9%C3%90%C2%B5%20-%20%C3%90%C5%A1%C3%90%C2%B0%C3%91%E2%80%9A%C3%91%C5%BD%C3%91%CB%86%C3%90%C2%B0%20(%C3%90%C2%BC%C3%90%C2%B8%C3%90%C2%BD%C3%91%C6%92%C3%91%C2%81)%20%C3%90%C2%BA%C3%90%C2%B4%C3%91%E2%80%A0.mp3?play&an=&utm_term=&site=&isubs=0 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 10 May 2024 09:27:31 GMT content-type: application/javascript cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 content-encoding: gzip cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P7Sld3Yn9nZXd%2BC5s3eJywUgJirO5kCyaKsvEUJ6AXU%2Fcgb0K70WMbM343t6TFhKsk%2FVXQvrQrH6bWurzVdtZaG4ZRctZSmR%2B4RQy3Ks7HBXYyP8TN5Vt0sxKTUS8RLcL1VT"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 8818e4d41d8a56b9-OSL alt-svc: h3=":443"; ma=86400

	39.pexeburay.com/favicon.ico	104.21.32.236	12 kB
URL 39.pexeburay.com/favicon.ico IP 104.21.32.236:0 ASN #13335 CLOUDFLARENET File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size 12 kB (12342 bytes) Hash 4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0 HTTP Headers GET /favicon.ico HTTP/1.1 Host: 39.pexeburay.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://39.pexeburay.com/index/m3?diff=0&utm_source=ogdd&utm_campaign=26670&utm_content=&utm_clickid=jk08s08ckkc8s8o4&aurl=https:/d5.hotplayer.ru/downloadm/3495bb640cd12f54e151adbe7a0dbd1f/-66571095_286559027/1301a0159b076-9f90bf88473b-cd524ba3c3b/%C3%90%E2%80%99%C3%90%C2%BE%C3%90%C2%B5%C3%90%C2%BD%C3%90%C2%BD%C3%91%E2%80%B9%C3%90%C2%B5%20-%20%C3%90%C5%A1%C3%90%C2%B0%C3%91%E2%80%9A%C3%91%C5%BD%C3%91%CB%86%C3%90%C2%B0%20(%C3%90%C2%BC%C3%90%C2%B8%C3%90%C2%BD%C3%91%C6%92%C3%91%C2%81)%20%C3%90%C2%BA%C3%90%C2%B4%C3%91%E2%80%A0.mp3?play&an=&utm_term=&site=&isubs=0 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 10 May 2024 09:27:31 GMT content-type: image/x-icon last-modified: Wed, 02 Nov 2022 12:29:48 GMT etag: W/"636262bc-1007" cache-control: max-age=14400 cf-cache-status: HIT age: 1524 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=63pyvNV6SmM2iFkD9g3ddjThQwPAJEQ5Y5GnJe6aQv6gOSK41ecOoCXZbwB12lPqgNogFRUd9DAMyb7H6R%2BNwqcDRPbw7Zw5d2AzoXW2MvsS94sCznOmF9XnGxZ%2BcFbvLTdY"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8818e4d53f7d56b9-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers