Report - triggertrack1.com/nlp/index.php?target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name={t8}&banner_id={creativeid}&pub_id={t9}&category_id=16&ad_type=pop&url_bnm

Report Overview

Visited public
2024-06-22 19:37:43
Tags
URL
triggertrack1.com/nlp/index.php?target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name={t8}&banner_id={creativeid}&pub_id={t9}&category_id=16&ad_type=pop&url_bnm_redirect=https://affilnk.com/
Finishing URL
milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1
IP / ASN
157.230.25.67
#14061 DIGITALOCEAN-ASN
Title
milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
	unknown				582 B	232 B	52.210.137.205
static.dcbprotect.com	unknown	2017-09-27	2023-07-23 22:41:55	2024-03-27 08:54:37	495 B	552 B	34.249.203.64
m.idhad.com	unknown	2012-09-18	2014-07-18 08:48:11	2022-11-23 18:26:44	452 B	674 B	212.61.166.130
milftube.biz	unknown	2020-05-18	2013-09-16 01:21:50	2022-11-23 18:26:45	2.0 kB	13 kB	62.240.232.130
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-06-22 18:19:57	2.0 kB	5.3 kB	23.36.77.32
affilnk.com	318384	2019-11-19	2019-12-13 13:03:49	2024-04-22 17:01:05	2.4 kB	44 kB	212.61.166.140
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21 01:06:24	2024-06-22 18:12:52	338 B	863 B	18.238.246.206

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-06-22 19:37:20	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)
2024-06-22 19:37:20	low	Client IP	74.125.250.129	ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1	ScriptElement	0 B	0001-01-01	2025-06-22
Pretty URL milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 IP 62.240.232.130 ASN #8426 Claranet Limited Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-22 04:08 Times Seen5062443 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	milftube.biz/xtrem/sandbox%20eval%20code		147 B	2023-04-11	2025-06-22
Pretty URL milftube.biz/xtrem/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-06-22 04:08 Times Seen361466 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.google-analytics.com/analytics.js	ScriptElement	4.7 kB	2023-04-11	2025-06-22
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07 Last Seen2025-06-22 04:08 Times Seen360776 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

HTTP Transactions (17)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 6d997a3e4c838d12e34de2dd2d4208c3 386abb53e2df86f291b6a86765d9a6feb88ba30b 32e00abd54407308b80a14e2916a119d95d90b1e7842f8cf0e87df306287869c HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "32E00ABD54407308B80A14E2916A119D95D90B1E7842F8CF0E87DF306287869C" Last-Modified: Thu, 20 Jun 2024 13:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18302 Expires: Sun, 23 Jun 2024 00:42:20 GMT Date: Sat, 22 Jun 2024 19:37:18 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 31c219b3ac9b4615f1a78cd882995e6c 1bb1aedb59500ceabd4f44ae9b7317c544084afd 6e8de7454df9b981f3c2bd8746558f3eb5c48599c66fc0f5301169c0ed42c8fe HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "6E8DE7454DF9B981F3C2BD8746558F3EB5C48599C66FC0F5301169C0ED42C8FE" Last-Modified: Sat, 22 Jun 2024 11:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8547 Expires: Sat, 22 Jun 2024 21:59:45 GMT Date: Sat, 22 Jun 2024 19:37:18 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash f0269d61bdfd971c035a90020cb9f629 06631fd5df5a9bd3b9673361601cc37a34e64f69 47b785dc0588f89f6a0bd23143e340c2fa04f194c59853f63e8b937964655373 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "47B785DC0588F89F6A0BD23143E340C2FA04F194C59853F63E8B937964655373" Last-Modified: Sat, 22 Jun 2024 04:21:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3324 Expires: Sat, 22 Jun 2024 20:32:42 GMT Date: Sat, 22 Jun 2024 19:37:18 GMT Connection: keep-alive`

	affilnk.com/?target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name=%7Bt8%7D&banner_id=%7Bcreativeid%7D&pub_id=%7Bt9%7D&category_id=16&ad_type=pop	212.61.166.140		43 kB
URL affilnk.com/?target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name=%7Bt8%7D&banner_id=%7Bcreativeid%7D&pub_id=%7Bt9%7D&category_id=16&ad_type=pop IP 212.61.166.140:0 ASN #8426 Claranet Limited File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 43 kB (42704 bytes) Hash 25e9d158436c49a11ed613be3d5067d0 9c6e454f618a06f8e9fd7c0e21ca4722efc1d2c3 7d95ade1961b7dc12c533813b8e40339513e567e6e4ec6b47e83b400eac1e87b HTTP Headers GET /?target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name=%7Bt8%7D&banner_id=%7Bcreativeid%7D&pub_id=%7Bt9%7D&category_id=16&ad_type=pop HTTP/1.1 Host: affilnk.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Sat, 22 Jun 2024 19:37:19 GMT content-type: text/html; charset=UTF-8 content-length: 42704 set-cookie: pw_cli=WB7MSCQ9QSEW9TU3R1NR193725220621,94f28f8051f217c01b2f57cff90f5bdb; Expires=2147483647; Secure; HttpOnly; path=/; SameSite=None vary: Accept-Encoding content-encoding: gzip strict-transport-security: max-age=15768000 age: 0 accept-ranges: bytes x-content-type-options: nosniff x-clara-wadp: 1107936427 server: wadp2 x-wadp-cache: MISS X-Firefox-Spdy: h2`

	affilnk.com/favicon.ico	212.61.166.140		196 B
URL affilnk.com/favicon.ico IP 212.61.166.140:0 ASN #8426 Claranet Limited File type HTML document, ASCII text Size 196 B (196 bytes) Hash 62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880 HTTP Headers GET /favicon.ico HTTP/1.1 Host: affilnk.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://affilnk.com/?target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name=%7Bt8%7D&banner_id=%7Bcreativeid%7D&pub_id=%7Bt9%7D&category_id=16&ad_type=pop Cookie: pw_cli=WB7MSCQ9QSEW9TU3R1NR193725220621,94f28f8051f217c01b2f57cff90f5bdb Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 404 Not Found date: Sat, 22 Jun 2024 19:37:19 GMT content-type: text/html; charset=iso-8859-1 content-length: 196 age: 0 x-content-type-options: nosniff x-clara-wadp: 1107936429 server: wadp2 x-wadp-cache: MISS X-Firefox-Spdy: h2`

	ocsp.r2m03.amazontrust.com/	18.238.246.206		471 B
URL ocsp.r2m03.amazontrust.com/ IP 18.238.246.206:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 7851a52b6654e4641b3e05dae8c755dc 091604842696201708f8f47cd9d30aa1d6196590 3d5bb6757b9bbc2becd9f29bfa7248cad85c43a4c0a9b5a6b5c3f3da613bf910 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m03.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: max-age=7200 Date: Sat, 22 Jun 2024 19:37:20 GMT Server: ECAcc (amb/6B66) X-Cache: Miss from cloudfront Via: 1.1 432282689bafd802e8ec9636c256a3b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: gzznsfH6ZIik48U7L05Wv9rvIXqjuhGD4cVUNeSSmY0uvaEk1-j_vQ==`

	ws.dcbprotect.com:8080/	52.210.137.205		0 B
URL ws.dcbprotect.com:8080/ IP 52.210.137.205:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: ws.dcbprotect.com:8080 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://affilnk.com Sec-WebSocket-Protocol: echo-protocol Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: /wK0l73lTVgym2fNO1lllA== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols upgrade: websocket connection: Upgrade sec-websocket-accept: 5NehxfXS9b9GRxTi4sFy87jglL8= sec-websocket-protocol: echo-protocol origin: https://affilnk.com date: Sat, 22 Jun 2024 19:37:20 GMT`

	static.dcbprotect.com/f/img.ico	34.249.203.64		2 B
URL static.dcbprotect.com/f/img.ico IP 34.249.203.64:0 ASN #16509 AMAZON-02 File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash e0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3 HTTP Headers `GET /f/img.ico HTTP/1.1 Host: static.dcbprotect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Language: A554818520990142326686224226644646440864488882228 Origin: https://affilnk.com DNT: 1 Connection: keep-alive Referer: https://affilnk.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version, Viewport-Width, Width, Downlink access-control-allow-origin: * cache-control: no-cache etag: 7b16b8e0e29a2227c8a55e62ea68e303e69af71f8995c25670272b75d6f48a21203594a70e3bef1b95a4acad77f9d637570c7f5ed7c44b67b1d42b5cbd63921b content-type: text/plain; charset=utf-8 content-length: 2 date: Sat, 22 Jun 2024 19:37:20 GMT X-Firefox-Spdy: h2

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 6720792332fb717894b4e5221fdc3d86 f79b1d3611fb53cea950acb15000473ae7174149 67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965" Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12228 Expires: Sat, 22 Jun 2024 23:01:09 GMT Date: Sat, 22 Jun 2024 19:37:21 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 6720792332fb717894b4e5221fdc3d86 f79b1d3611fb53cea950acb15000473ae7174149 67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965" Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12228 Expires: Sat, 22 Jun 2024 23:01:09 GMT Date: Sat, 22 Jun 2024 19:37:21 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 6720792332fb717894b4e5221fdc3d86 f79b1d3611fb53cea950acb15000473ae7174149 67dd6ffe107c77c5f8bea4a3d6771b6026efc51bd4a9b26c66c8791c1ef48965 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965" Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12228 Expires: Sat, 22 Jun 2024 23:01:09 GMT Date: Sat, 22 Jun 2024 19:37:21 GMT Connection: keep-alive`

	m.idhad.com/xtrem/short_redirect.php?key=628e893c966fe64f9907b118fee4ad1d213719701	212.61.166.130		320 B
URL m.idhad.com/xtrem/short_redirect.php?key=628e893c966fe64f9907b118fee4ad1d213719701 IP 212.61.166.130:0 ASN #8426 Claranet Limited File type HTML document, ASCII text, with very long lines (375) Size 320 B (320 bytes) Hash 5001ef04457c9ac20f8d8e0bd5407a4b 34d93ea272af595921a5fd23f911fe237592a682 793a4f906226d1b0a2c762de2303f016093f454b7f2a4f0938589fb15b46a480 HTTP Headers `GET /xtrem/short_redirect.php?key=628e893c966fe64f9907b118fee4ad1d213719701 HTTP/1.1 Host: m.idhad.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sat, 22 Jun 2024 19:37:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 320 Connection: keep-alive Vary: Accept-Encoding Content-Encoding: gzip Strict-Transport-Security: max-age=15768000 Age: 0 Accept-Ranges: bytes X-Content-Type-Options: nosniff X-Clara-WADP: 903139506 Server: wadp2 X-WADP-Cache: MISS`

	GET affilnk.com/?dcb_token=628e893c966fe64f9907b118fee4ad1d&k913=true&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name=%7Bt8%7D&banner_id=%7Bcreativeid%7D&pub_id=%7Bt9%7D&category_id=16&ad_type=pop	212.61.166.140	302 Found	0 B
URL User Request GET HTTP/2 affilnk.com/?dcb_token=628e893c966fe64f9907b118fee4ad1d&k913=true&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name=%7Bt8%7D&banner_id=%7Bcreativeid%7D&pub_id=%7Bt9%7D&category_id=16&ad_type=pop IP 212.61.166.140:443 ASN #8426 Claranet Limited Certificate IssuerGandi Subjectaffilnk.com FingerprintC2:08:B8:CE:46:F6:EF:30:61:A3:BF:1D:50:2F:4C:D0:9D:02:BA:8F ValidityTue, 07 Nov 2023 00:00:00 GMT - Tue, 03 Dec 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /?dcb_token=628e893c966fe64f9907b118fee4ad1d&k913=true&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&target_id=86588&stat_tracker=adalchemy_fr_ora_sma_pops_popxpop_str_2022-05-23_milf&partner_id=108&subaffiliate_tracker=ccbcbfnkt8pa36oae9&zone=7351347&site_name=%7Bt8%7D&banner_id=%7Bcreativeid%7D&pub_id=%7Bt9%7D&category_id=16&ad_type=pop HTTP/1.1 Host: affilnk.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://m.idhad.com/ Cookie: pw_cli=WB7MSCQ9QSEW9TU3R1NR193725220621,94f28f8051f217c01b2f57cff90f5bdb Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 302 Found date: Sat, 22 Jun 2024 19:37:21 GMT content-type: text/html; charset=UTF-8 content-length: 0 location: http://milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 strict-transport-security: max-age=15768000 age: 0 x-content-type-options: nosniff x-clara-wadp: 1108207510 server: wadp2 x-wadp-cache: MISS X-Firefox-Spdy: h2`

	GET milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1	62.240.232.130	200 OK	1.1 kB
URL User Request GET HTTP/1.1 milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 IP 62.240.232.130:80 ASN #8426 Claranet Limited File type HTML document, Unicode text, UTF-8 text Size 1.1 kB (1114 bytes) Hash b04c66311ba861715ca3eb1b3559c25c d41124aa7fc2343c48a49c2f70ca40a0670fddb8 112e38e05de9a7b0af2157f6dcbd959dff3b6b6a187db13c3e44f8a791682bf6 HTTP Headers GET /xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 HTTP/1.1 Host: milftube.biz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://m.idhad.com/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Sat, 22 Jun 2024 19:37:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 1114 Connection: keep-alive Set-Cookie: pw_cli=WB7MSCQ9QSEW9TU3R1NR193725220621,94f28f8051f217c01b2f57cff90f5bdb; Expires=2147483647; Secure; HttpOnly; path=/; SameSite=None Vary: Accept-Encoding Content-Encoding: gzip Strict-Transport-Security: max-age=15768000 Age: 0 Accept-Ranges: bytes X-Content-Type-Options: nosniff X-Clara-WADP: 6522380174 Server: wadp2 X-WADP-Cache: MISS`

	GET milftube.biz/base_services/2.2/tmplSmarty/errors/css/styles.css?v=2	62.240.232.130	200 OK	1.4 kB
URL GET HTTP/1.1 milftube.biz/base_services/2.2/tmplSmarty/errors/css/styles.css?v=2 IP 62.240.232.130:80 ASN #8426 Claranet Limited Requested by http://milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 File type ASCII text Size 1.4 kB (1406 bytes) Hash 133b4e884ca041383b5f85903254a45e b5a928922b79c767873aeb408fecb9a548fce741 a62aa7027a48d01b681bddf3a311778a9af0490a8b1a9f6bf9c0b1f6fae8a05d HTTP Headers `GET /base_services/2.2/tmplSmarty/errors/css/styles.css?v=2 HTTP/1.1 Host: milftube.biz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sat, 22 Jun 2024 19:37:22 GMT Content-Type: text/css Content-Length: 1406 Connection: keep-alive Last-Modified: Tue, 23 Aug 2022 14:18:03 GMT ETag: "57e-5e6e93b7c1aa6" Strict-Transport-Security: max-age=15768000 Age: 3154 Accept-Ranges: bytes X-Content-Type-Options: nosniff X-Clara-WADP: 6524934686 6523919598 Server: wadp2 X-WADP-Cache: HIT`

	GET milftube.biz/base_services/2.2/tmplSmarty/errors/images/back.jpg	62.240.232.130	200 OK	4.9 kB
URL GET HTTP/1.1 milftube.biz/base_services/2.2/tmplSmarty/errors/images/back.jpg IP 62.240.232.130:80 ASN #8426 Claranet Limited Requested by http://milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 172x311, components 3 Size 4.9 kB (4900 bytes) Hash 380f915309fbf1c90632b246eee261f0 5936a532ad053430bded64aab10384bfeb324ed0 d84539ab8b44361d325a0f2a636ab41380ae7a509eee6fe9e2c8e78b8df28c40 HTTP Headers `GET /base_services/2.2/tmplSmarty/errors/images/back.jpg HTTP/1.1 Host: milftube.biz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://milftube.biz/base_services/2.2/tmplSmarty/errors/css/styles.css?v=2 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sat, 22 Jun 2024 19:37:22 GMT Content-Type: image/jpeg Content-Length: 4900 Connection: keep-alive Last-Modified: Tue, 23 Aug 2022 14:18:03 GMT ETag: "1324-5e6e93b7c3225" Strict-Transport-Security: max-age=15768000 Age: 0 Accept-Ranges: bytes X-Clara-WADP: 6401544768 Server: wadp2 X-WADP-Cache: MISS`

	GET milftube.biz/favicon.ico	62.240.232.130	200 OK	3.6 kB
URL GET HTTP/1.1 milftube.biz/favicon.ico IP 62.240.232.130:80 ASN #8426 Claranet Limited Requested by http://milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 File type MS Windows icon resource - 2 icons, 16x16, 32x32 Size 3.6 kB (3638 bytes) Hash 6be6074224ee9ffcb09c9110ac603243 a80a37d1e9a74d171bd35cbd63fc0606613ddf5a b79ec18516a5ae73ff9a56f30df1c13b88aaf0ecbcb43c65382d15c89ae3b990 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: milftube.biz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://milftube.biz/xtrem/index.wiml?session_id=Cc3fbfa2c53d8f0fc3d3908ca77943ec&wasf=fall&kafid=C934ca900ecbeefb08cbf477dc0f7d6d&ad_type=pop&wmlredirect=1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sat, 22 Jun 2024 19:37:22 GMT Content-Type: image/x-icon Content-Length: 3638 Connection: keep-alive Last-Modified: Wed, 01 Mar 2023 08:24:34 GMT ETag: "e36-5f5d2712b36c1" Strict-Transport-Security: max-age=15768000 Age: 0 Accept-Ranges: bytes X-Clara-WADP: 6523923972 Server: wadp2 X-WADP-Cache: MISS`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN