| trckfollowme.com/click.php?key=i089bmk9trbffdqxa9hx&clickid=GOcBOMODAWidqRtwv7Y-6AHH20OAApfdoJae95HSAQ&cost=0.0000&zoneid=1109447&device=desktop&useragent=Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/112.0.0.0+Safari/537.36+AppEngine-Google;+(+code.google.com/appengine;+appid:+s~virustotalcloud)&browserVersion=0&creativeid=1022783&osversion=osx_catalina&carrier=Google+user-triggered+fetchers&source=231&campaignid=447645&agegroup=AGE_0_3 |  116.202.12.61 | 302 Found | 15 kB |
URL User Request GET HTTP/2trckfollowme.com/click.php?key=i089bmk9trbffdqxa9hx&clickid=GOcBOMODAWidqRtwv7Y-6AHH20OAApfdoJae95HSAQ&cost=0.0000&zoneid=1109447&device=desktop&useragent=Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/112.0.0.0+Safari/537.36+AppEngine-Google;+(+code.google.com/appengine;+appid:+s~virustotalcloud)&browserVersion=0&creativeid=1022783&osversion=osx_catalina&carrier=Google+user-triggered+fetchers&source=231&campaignid=447645&agegroup=AGE_0_3 IP116.202.12.61:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjecttrckfollowme.com Fingerprint51:CD:E7:76:31:07:06:34:A6:7D:2C:35:DE:8A:0D:A5:B8:96:BC:1F ValiditySun, 17 Mar 2024 01:04:15 GMT - Sat, 15 Jun 2024 01:04:14 GMT
File typeHTML document, ASCII text, with very long lines (5740) Hash3cf9a1061715255fa0923e0f568dabd5 b24d9d4f49835022383cd4d688deadf1f5ef666e 5515212c25125f4d29d8297a3a063d5b5a2bdb7c808f0823f6e1cbb3da14a405
GET /click.php?key=i089bmk9trbffdqxa9hx&clickid=GOcBOMODAWidqRtwv7Y-6AHH20OAApfdoJae95HSAQ&cost=0.0000&zoneid=1109447&device=desktop&useragent=Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/112.0.0.0+Safari/537.36+AppEngine-Google;+(+code.google.com/appengine;+appid:+s~virustotalcloud)&browserVersion=0&creativeid=1022783&osversion=osx_catalina&carrier=Google+user-triggered+fetchers&source=231&campaignid=447645&agegroup=AGE_0_3 HTTP/1.1
Host: trckfollowme.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.1
date: Wed, 08 May 2024 12:36:42 GMT
content-type: text/html; charset=UTF-8
location: https://nastobad.com/s?k=cdcfc65765dfac27&click_id=3ab3e6jsy1nfyfec28&source_id=1109447
set-cookie: uclick=6jsy1nfyfe; expires=Thu, 09-May-2024 12:36:42 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=6jsy1nfyfe-6jsy1nfyfe-16a0-0-lpj2-ciu33y-ikqe-6a405e; expires=Thu, 09-May-2024 12:36:42 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
| wisssmackin.com/assets/js/backlink_back_button.js |  185.32.28.133 | 200 OK | 632 B |
URL GET HTTP/1.1wisssmackin.com/assets/js/backlink_back_button.js IP185.32.28.133:443 ASN#15699 OGIC Informatica S.L.
Requested byhttps://wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=90101010125b2b858e000402 CertificateIssuerLet's Encrypt Subjectwisssmackin.com FingerprintA2:26:AE:8C:05:84:60:1B:60:7B:5E:06:A1:B9:9E:A1:74:94:1A:79 ValidityMon, 22 Apr 2024 03:03:55 GMT - Sun, 21 Jul 2024 03:03:54 GMT
Hash7c847657cd58fd5f3b656c5dd486808a 54781827b08eb75f27786b20bfded403c3117a69 b1b1b5affe702bae9e97deabbdb3f19bcf8f12a1ddd410ff189c61c3bc159c06
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/js/backlink_back_button.js HTTP/1.1
Host: wisssmackin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=90101010125b2b858e000402
Cookie: redirect_user_data=%7B%22country%22%3A%22NO%22%2C%22city%22%3Anull%2C%22isp%22%3A%22blix+solutions%22%2C%22netspeed%22%3A%22%22%7D; _tracker_ikangoo=a%3A5%3A%7Bs%3A4%3A%22_key%22%3Bs%3A7%3A%22IKPANEL%22%3Bs%3A6%3A%22_subid%22%3Bs%3A16%3A%225002193349817150%22%3Bs%3A8%3A%22_country%22%3Bs%3A2%3A%22NO%22%3Bs%3A4%3A%22_isp%22%3Bs%3A14%3A%22blix+solutions%22%3Bs%3A5%3A%22_time%22%3Bi%3A1715171797%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 12:36:37 GMT
Content-Type: application/javascript
Content-Length: 632
Last-Modified: Mon, 28 Nov 2022 14:36:49 GMT
Connection: keep-alive
ETag: "6384c781-278"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
|
| nastobad.com/s?k=cdcfc65765dfac27&click_id=3ab3e6jsy1nfyfec28&source_id=1109447 | 46.4.172.148 | 302 Found | 15 kB |
URL User Request GET HTTP/2nastobad.com/s?k=cdcfc65765dfac27&click_id=3ab3e6jsy1nfyfec28&source_id=1109447 IP46.4.172.148:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectnastobad.com Fingerprint3C:C6:E3:9B:37:0B:52:27:AE:BC:DE:17:0A:0D:57:64:84:41:29:11 ValidityFri, 05 Apr 2024 23:19:09 GMT - Thu, 04 Jul 2024 23:19:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?k=cdcfc65765dfac27&click_id=3ab3e6jsy1nfyfec28&source_id=1109447 HTTP/1.1
Host: nastobad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.2
date: Wed, 08 May 2024 12:36:42 GMT
content-type: text/html; charset=UTF-8
location: https://wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=90101010125b2b858e000402
x-powered-by: PHP/8.1.27
referrer-policy: no-referrer
set-cookie: aff_tds_id=e7b616028d7af1366dbd4ac5bc43e7a7e208118495fd2e34146be4d88f780a68a%3A2%3A%7Bi%3A0%3Bs%3A10%3A%22aff_tds_id%22%3Bi%3A1%3Bs%3A16%3A%2254efe6355998a23a%22%3B%7D; expires=Wed, 08-May-2024 20:59:59 GMT; Max-Age=30197; path=/; HttpOnly; SameSite=Lax
expires: Wed, 08 May 2024 12:36:41 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
|
| wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=90101010125b2b858e000402 | 185.32.28.133 | 200 OK | 15 kB |
URL User Request GET HTTP/1.1wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=90101010125b2b858e000402 IP185.32.28.133:443 ASN#15699 OGIC Informatica S.L.
CertificateIssuerLet's Encrypt Subjectwisssmackin.com FingerprintA2:26:AE:8C:05:84:60:1B:60:7B:5E:06:A1:B9:9E:A1:74:94:1A:79 ValidityMon, 22 Apr 2024 03:03:55 GMT - Sun, 21 Jul 2024 03:03:54 GMT
File typeHTML document, ASCII text, with very long lines (5740) Hash3cf9a1061715255fa0923e0f568dabd5 b24d9d4f49835022383cd4d688deadf1f5ef666e 5515212c25125f4d29d8297a3a063d5b5a2bdb7c808f0823f6e1cbb3da14a405
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?cat=1&groupds=111&clientId=452&productId=1714&tracking=90101010125b2b858e000402 HTTP/1.1
Host: wisssmackin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 08 May 2024 12:36:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: redirect_user_data=%7B%22country%22%3A%22NO%22%2C%22city%22%3Anull%2C%22isp%22%3A%22blix+solutions%22%2C%22netspeed%22%3A%22%22%7D; expires=Wed, 08-May-2024 12:46:37 GMT; Max-Age=600
_tracker_ikangoo=a%3A5%3A%7Bs%3A4%3A%22_key%22%3Bs%3A7%3A%22IKPANEL%22%3Bs%3A6%3A%22_subid%22%3Bs%3A16%3A%225002193349817150%22%3Bs%3A8%3A%22_country%22%3Bs%3A2%3A%22NO%22%3Bs%3A4%3A%22_isp%22%3Bs%3A14%3A%22blix+solutions%22%3Bs%3A5%3A%22_time%22%3Bi%3A1715171797%3B%7D; expires=Wed, 08-May-2024 12:38:37 GMT; Max-Age=120
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
|