| getrunkhomuto.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 |  3.164.230.72 | 302 Found | 0 B |
URL User Request GET HTTP/2getrunkhomuto.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 IP3.164.230.72:443
CertificateIssuerAmazon Subjectgetrunkhomuto.info Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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 HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/plain
content-length: 0
location: https://tracking.pretrackings.com/click?pid=8&offer_id=4935&sub1=3757750807672494836&sub2=1072250
date: Tue, 21 Jan 2025 01:28:33 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=97uUQ16YLf7937q/tReP5kWzQpJ8B597ElAYD7GDn1NV8EpBgDSOuNu+S0JmHXYMHKzGLmVNSa3kbNipG8GgsP5nfL8am3HhYZ4dLM+0cmz7Cw2CeUIF6di62vxP; Expires=Tue, 28 Jan 2025 01:28:33 GMT; Path=/
AWSALBCORS=97uUQ16YLf7937q/tReP5kWzQpJ8B597ElAYD7GDn1NV8EpBgDSOuNu+S0JmHXYMHKzGLmVNSa3kbNipG8GgsP5nfL8am3HhYZ4dLM+0cmz7Cw2CeUIF6di62vxP; Expires=Tue, 28 Jan 2025 01:28:33 GMT; Path=/; SameSite=None
csu=134ad87c-444b-40ce-8b79-06151e903999
csu=120839328375091
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
x-cache: Miss from cloudfront
via: 1.1 da5d88dbc4ee6cd5f6a430e9228644f8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: RIfOR0eMI2E_Hxq_wOL4l4nEu4WD4811ovYBcD0TDSYkAw_KLEMtlg==
X-Firefox-Spdy: h2
|
|
| tracking.pretrackings.com/click?pid=8&offer_id=4935&sub1=3757750807672494836&sub2=1072250 |  34.147.21.42 | 302 Found | 0 B |
URL User Request GET HTTP/2tracking.pretrackings.com/click?pid=8&offer_id=4935&sub1=3757750807672494836&sub2=1072250 IP34.147.21.42:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerSectigo Limited Subjectoffers.primerevenues.com FingerprintEE:1D:DE:69:F9:09:45:26:C5:4F:4F:EC:07:13:57:09:E8:DE:45:5D ValidityTue, 06 Feb 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=8&offer_id=4935&sub1=3757750807672494836&sub2=1072250 HTTP/1.1
Host: tracking.pretrackings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 21 Jan 2025 01:28:34 GMT
content-length: 0
location: https://oojaishaibak.net/link?z=8604965&var=8_1072250&ymid=678ef842b8032600016e1187
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=678ef842b8032600016e1187; expires=Wed, 21 Jan 2026 01:28:34 GMT; secure; SameSite=None
afoffers={"4935":1737422914}; expires=Wed, 21 Jan 2026 01:28:34 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| oojaishaibak.net/link?z=8604965&var=8_1072250&ymid=678ef842b8032600016e1187 |  139.45.196.64 | 302 Found | 0 B |
URL User Request GET HTTP/2oojaishaibak.net/link?z=8604965&var=8_1072250&ymid=678ef842b8032600016e1187 IP139.45.196.64:443
CertificateIssuerLet's Encrypt Subjectoojaishaibak.net FingerprintC2:E0:49:63:47:D9:30:D5:C5:6C:9B:40:9E:75:CD:94:6C:69:A4:9A ValidityFri, 20 Dec 2024 12:59:12 GMT - Thu, 20 Mar 2025 12:59:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /link?z=8604965&var=8_1072250&ymid=678ef842b8032600016e1187 HTTP/1.1
Host: oojaishaibak.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 21 Jan 2025 01:28:34 GMT
content-length: 0
location: https://saigopooramee.net/link?z=3956710&var=8604965
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
link: <https://saigopooramee.net>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=0481587fff9e4bc7f8dd4fa6f291a1dc; expires=Wed, 21 Jan 2026 01:28:34 GMT
oaidts=1737422914; expires=Wed, 21 Jan 2026 01:28:34 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| saigopooramee.net/link?z=3956710&var=8604965 |  104.18.22.222 | 302 Found | 0 B |
URL User Request GET HTTP/2saigopooramee.net/link?z=3956710&var=8604965 IP104.18.22.222:443
CertificateIssuerGoogle Trust Services Subjectsaigopooramee.net Fingerprint21:C0:BB:93:97:E9:6C:DC:A1:5B:6F:71:21:C4:F1:08:ED:57:73:4A ValiditySat, 21 Dec 2024 15:08:39 GMT - Fri, 21 Mar 2025 16:08:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /link?z=3956710&var=8604965 HTTP/1.1
Host: saigopooramee.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 21 Jan 2025 01:28:34 GMT
content-length: 0
location: https://availtauphu.com/main/
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
link: <https://availtauphu.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=0481586b00994005e2cf9f58dcec5b09; expires=Wed, 21 Jan 2026 01:28:34 GMT
oaidts=1737422914; expires=Wed, 21 Jan 2026 01:28:34 GMT
OXCCLK=4105106.1; expires=Wed, 21 Jan 2026 01:28:34 GMT
allcnt=1; expires=Wed, 21 Jan 2026 01:28:34 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 9053873fbfe81c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| | 104.18.3.4 | 404 Not Found | 313 B |
URL User Request GET HTTP/2IP104.18.3.4:443
CertificateIssuerGoogle Trust Services Subjectavailtauphu.com Fingerprint0D:8F:DC:EB:1F:63:B7:4B:41:34:54:39:32:53:2F:F6:EB:01:CD:07 ValidityFri, 10 Jan 2025 20:35:16 GMT - Thu, 10 Apr 2025 21:35:10 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash370e16c3b7dba286cff055f93b9a94d8 65f3537c3c798f7da146c55aef536f7b5d0cb943 d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090
GET /main/ HTTP/1.1
Host: availtauphu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 21 Jan 2025 01:28:34 GMT
content-type: text/html
cf-ray: 905387402b6cb4fa-OSL
cf-cache-status: HIT
age: 164
cache-control: public, max-age=3600
expires: Tue, 21 Jan 2025 02:28:34 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| availtauphu.com/favicon.ico | 104.18.3.4 | 204 No Content | 0 B |
URL GET HTTP/3availtauphu.com/favicon.ico IP104.18.3.4:443
Requested byhttps://availtauphu.com/main/ CertificateIssuerGoogle Trust Services Subjectavailtauphu.com Fingerprint0D:8F:DC:EB:1F:63:B7:4B:41:34:54:39:32:53:2F:F6:EB:01:CD:07 ValidityFri, 10 Jan 2025 20:35:16 GMT - Thu, 10 Apr 2025 21:35:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: availtauphu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://availtauphu.com/main/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 21 Jan 2025 01:28:35 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: MISS
expires: Tue, 21 Jan 2025 02:28:35 GMT
cache-control: public, max-age=3600
priority: u=6,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 90538742ec6256b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| | 104.18.3.4 | 404 Not Found | 650 B |
URL User Request GET HTTP/2IP104.18.3.4:443
CertificateIssuerGoogle Trust Services Subjectavailtauphu.com Fingerprint0D:8F:DC:EB:1F:63:B7:4B:41:34:54:39:32:53:2F:F6:EB:01:CD:07 ValidityFri, 10 Jan 2025 20:35:16 GMT - Thu, 10 Apr 2025 21:35:10 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash370e16c3b7dba286cff055f93b9a94d8 65f3537c3c798f7da146c55aef536f7b5d0cb943 d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090
GET /main/ HTTP/1.1
Host: availtauphu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 21 Jan 2025 01:28:34 GMT
content-type: text/html
cf-ray: 905387423c2656b5-OSL
cf-cache-status: HIT
age: 164
cache-control: public, max-age=3600
expires: Tue, 21 Jan 2025 02:28:34 GMT
vary: Accept-Encoding
priority: u=1,i=?0
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|