| ww16.best-targeted-traffic.com/search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTcxNDkyNzA3NGUxZTFkYzdkNDg4YjkwOTdkY2I1Yzg2MTRmNGUzNzc3&crc=ca976f17d04d000b0da9d201d034df81bbffbc14&cv=1 | 64.190.63.136 | 200 OK | 0 B |
URL GET HTTP/2ww16.best-targeted-traffic.com/search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTcxNDkyNzA3NGUxZTFkYzdkNDg4YjkwOTdkY2I1Yzg2MTRmNGUzNzc3&crc=ca976f17d04d000b0da9d201d034df81bbffbc14&cv=1 IP64.190.63.136:443
Requested byhttps://ww16.best-targeted-traffic.com/install.php?unq=5k52491827gljjxai&version=1.7&pais=Unknown&sub1=20240506-0218-2932-bd6c-299177348760 CertificateIssuerDigiCert Inc Subjectww16.best-targeted-traffic.com FingerprintCA:2F:D5:7E:14:60:28:CB:D2:9B:F8:10:84:0E:FA:23:F3:D2:72:A9 ValidityThu, 22 Feb 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTcxNDkyNzA3NGUxZTFkYzdkNDg4YjkwOTdkY2I1Yzg2MTRmNGUzNzc3&crc=ca976f17d04d000b0da9d201d034df81bbffbc14&cv=1 HTTP/1.1
Host: ww16.best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.best-targeted-traffic.com/install.php?unq=5k52491827gljjxai&version=1.7&pais=Unknown&sub1=20240506-0218-2932-bd6c-299177348760
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Sun, 05 May 2024 16:37:54 GMT
server: NginX
x-cache-miss-from: parking-7cbf88ff6b-bsk5t
x-powered-by: PHP/8.1.17
content-length: 0
X-Firefox-Spdy: h2
|
| img.sedoparking.com/templates/bg/arrows-1-colors-3.png | 205.234.175.175 | 200 OK | 82 kB |
URL GET HTTP/2img.sedoparking.com/templates/bg/arrows-1-colors-3.png IP205.234.175.175:443
Requested byhttps://ww16.best-targeted-traffic.com/install.php?unq=5k52491827gljjxai&version=1.7&pais=Unknown&sub1=20240506-0218-2932-bd6c-299177348760 CertificateIssuerGlobalSign nv-sa Subject*.cachefly.net Fingerprint0F:4E:B2:D7:96:B9:94:D0:35:66:76:6C:4B:16:18:49:DE:42:80:71 ValidityMon, 13 Nov 2023 19:46:02 GMT - Sat, 14 Dec 2024 19:46:01 GMT
File typePNG image data, 3024 x 2000, 8-bit/color RGBA, non-interlaced Hashb68c0210cadb1e12efc4557d7e49e48e ad24ed2b2d5d166d07fbf0680693c88fb56fcb4b e7ff091c85669b175de49d629d7d77bd20cd08d2c16ae74deef2ab06aec5854d
GET /templates/bg/arrows-1-colors-3.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.best-targeted-traffic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 16:37:54 GMT
content-type: image/png
content-length: 82231
access-control-allow-origin: *
cache-control: max-age=604800
expires: Sun, 12 May 2024 16:37:54 GMT
x-cfhash: "b68c0210cadb1e12efc4557d7e49e48e"
x-cff: B
last-modified: Wed, 22 Apr 2020 09:38:21 GMT
x-cf3: H
cf4age: 910155
x-cf-tsc: 1711587909
cf4ttl: 30625844.000
x-cf2: H
server: CFS 1124
x-cf-reqid: 7f2e7d0c49c0697c07f250091b6c46aa
x-cf1: 11696:fC.arn1:cf:nom:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2
|
| ww16.best-targeted-traffic.com/install.php?unq=5k52491827gljjxai&version=1.7&pais=Unknown&sub1=20240506-0218-2932-bd6c-299177348760 | 64.190.63.136 | 200 OK | 7.7 kB |
URL User Request GET HTTP/2ww16.best-targeted-traffic.com/install.php?unq=5k52491827gljjxai&version=1.7&pais=Unknown&sub1=20240506-0218-2932-bd6c-299177348760 IP64.190.63.136:443
CertificateIssuerDigiCert Inc Subjectww16.best-targeted-traffic.com FingerprintCA:2F:D5:7E:14:60:28:CB:D2:9B:F8:10:84:0E:FA:23:F3:D2:72:A9 ValidityThu, 22 Feb 2024 00:00:00 GMT - Sat, 22 Feb 2025 23:59:59 GMT
File typegzip compressed data, from Unix Hash028a3a1a56cc70d543e78ebb6806c6bb 5585fdfc6e93660f50e821e26bf1f442a1c9605b 01f641c192acd6214680bbf9e655703e95db99d249b1eaf0b2b845b8c39c7276
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /install.php?unq=5k52491827gljjxai&version=1.7&pais=Unknown&sub1=20240506-0218-2932-bd6c-299177348760 HTTP/1.1
Host: ww16.best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sun, 05 May 2024 16:37:54 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Sun, 05 May 2024 16:37:53 GMT
pragma: no-cache
server: NginX
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_IOS5JHJlWU/Dw4yweXDzNYSJSdE6Rv+tzHwbScAntbccULRnnjIZq7do9K6saVnGZobcp4A++tAoH3atGlnVPw==
x-cache-miss-from: parking-7cbf88ff6b-tlz7g
x-powered-by: PHP/8.1.17
X-Firefox-Spdy: h2
|
| img.sedoparking.com/templates/logos/sedo_logo.png | 205.234.175.175 | 200 OK | 15 kB |
URL GET HTTP/2img.sedoparking.com/templates/logos/sedo_logo.png IP205.234.175.175:443
Requested byhttps://ww16.best-targeted-traffic.com/install.php?unq=5k52491827gljjxai&version=1.7&pais=Unknown&sub1=20240506-0218-2932-bd6c-299177348760 CertificateIssuerGlobalSign nv-sa Subject*.cachefly.net Fingerprint0F:4E:B2:D7:96:B9:94:D0:35:66:76:6C:4B:16:18:49:DE:42:80:71 ValidityMon, 13 Nov 2023 19:46:02 GMT - Sat, 14 Dec 2024 19:46:01 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashdef00c11b1596db4efee6a9fbe64fc27 bd298981e6d8d7e4ffa18abcf687041f4246672d 95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4
GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.best-targeted-traffic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 May 2024 16:37:54 GMT
content-type: image/png
content-length: 15086
access-control-allow-origin: *
cache-control: max-age=604800
expires: Sun, 12 May 2024 16:37:54 GMT
x-cfhash: "def00c11b1596db4efee6a9fbe64fc27"
x-cff: B
last-modified: Mon, 11 Jan 2021 07:44:34 GMT
x-cf3: H
cf4age: 0
x-cf-tsc: 1711123359
cf4ttl: 31536000.000
x-cf2: H
server: CFS 1124
x-cf-reqid: bfcfe05cd34b7fab05d939400e055932
x-cf1: 11696:fC.arn1:cf:nom:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2
|