{"report_id":"5f5dd7ea-0937-4201-a267-108d5291e83c","version":6,"status":"done","tags":[],"date":"2025-03-28T12:35:23Z","url":{"schema":"http","addr":"track.cybersafezones.com/go/83fc2698-726b-4c30-99b4-d4f3681a31db","fqdn":"track.cybersafezones.com","domain":"cybersafezones.com","tld":"com"},"ip":{"addr":"3.127.216.164","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"d.turbinrumor.com/?groupds=149\u0026productId=1857\u0026clientId=676\u0026af=5002264538265438\u0026tracking=3A8DGfjC515bE3qXdhk29u","fqdn":"d.turbinrumor.com","domain":"turbinrumor.com","tld":"com"},"title":"Human Verify"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-06T12:35:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"track.cybersafezones.com","ip":{"addr":"35.158.71.179","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2024-05-09","domain_rank":0,"first_seen":"2024-05-09T20:22:16Z","last_seen":"2025-03-23T06:35:54.699774Z","alert_count":0,"request_count":1,"received_data":2442,"sent_data":532,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bunterhader.com","ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"domain_registered":"2024-12-16","domain_rank":0,"first_seen":"2024-12-24T00:56:17.336317Z","last_seen":"2025-03-25T19:36:08.759028Z","alert_count":0,"request_count":1,"received_data":2110,"sent_data":594,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d.turbinrumor.com","ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"domain_registered":"2024-10-17","domain_rank":0,"first_seen":"2024-12-22T08:04:07.449358Z","last_seen":"2025-03-25T04:34:52.967122Z","alert_count":0,"request_count":2,"received_data":119955,"sent_data":3733,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-28T12:35:05Z","timestamp":1743165305,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":49852,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-03-28T12:35:05.571149+0000\",\"flow_id\":775836838511962,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":49852,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"8fjwfr8x.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":467,\"bytes_toclient\":116,\"start\":\"2025-03-28T12:33:45.509274+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-03-28T12:35:07Z","timestamp":1743165307,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":38878,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-03-28T12:35:07.553448+0000\",\"flow_id\":1762644229613471,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":38878,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"8fjwfr8x.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":467,\"bytes_toclient\":116,\"start\":\"2025-03-28T12:33:47.649119+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-03-28T12:35:13Z","timestamp":1743165313,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":38924,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-03-28T12:35:13.599587+0000\",\"flow_id\":1203246214216957,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":38924,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"8fjwfr8x.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":467,\"bytes_toclient\":116,\"start\":\"2025-03-28T12:33:48.392445+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-03-28T12:35:21Z","timestamp":1743165321,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.11","port":38874,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-03-28T12:35:21.629306+0000\",\"flow_id\":1911134133884390,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":38874,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"8fjwfr8x.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":467,\"bytes_toclient\":116,\"start\":\"2025-03-28T12:33:47.398822+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bunterhader.com/?cat=2\u0026groupds=149\u0026clientId=676\u0026productId=1857\u0026publisher_id=%7Bpublisher_id%7D\u0026tracking=3A8DGfjC515bE3qXdhk29u","fqdn":"bunterhader.com","domain":"bunterhader.com","tld":"com"},"ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fdece755ea9b5efbfbddc1c7c1b4446","sha1":"1b7036315f8bbf66c7d715b55b6a0ee876c7ded6","sha256":"eb5a570b85e28a49b8ed86da4d49f1d736b3f08e04bab87822fc90ccbdbdc22e","sha512":"8729c3746d2f4bec21761826cc98a51dc0b88fdf8335eb91488e79783c034ef936b592107ca0b7a2aed0953c9d932469883feed3b8aafcca12035e2600f9ab83","ssdeep":"","tlshash":"26d0a7fb56560d381657f069971eb2582567019b68089803ba5c8fa40f54b8f017559a","size":246,"data":"","first_seen":"2025-03-28T12:35:24.96771Z","last_seen":"2025-03-28T12:35:24.96771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.turbinrumor.com/?groupds=149\u0026productId=1857\u0026clientId=676\u0026af=5002264538265438\u0026tracking=3A8DGfjC515bE3qXdhk29u","fqdn":"d.turbinrumor.com","domain":"turbinrumor.com","tld":"com"},"ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"23090838b005543fd4754a959c1cef96","sha1":"be18d560aa3fbe95191db97f1eb0531f0fb74aed","sha256":"c755434caad464691d0edc1c16f131643e2b6341228127ab473282b2141631d1","sha512":"51597506c11ac79203bc2a2fb65c3c2069b20786e21be0f2df2e552c16096a93014e32da89db3858414cce8716934a49c9e5f6fd5bd4dc24fc92607bb8d155fd","ssdeep":"","tlshash":"b011ef4acea708d87d582471b33eb0a12dd501c7458cd526ba9cfd1b9f0280702fd4cd","size":1063,"data":"","first_seen":"2025-03-28T12:35:24.968719Z","last_seen":"2025-03-28T12:35:24.968719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.turbinrumor.com/?groupds=149\u0026productId=1857\u0026clientId=676\u0026af=5002264538265438\u0026tracking=3A8DGfjC515bE3qXdhk29u","fqdn":"d.turbinrumor.com","domain":"turbinrumor.com","tld":"com"},"ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"02628c230ea15a73aa93974c5631152b","sha1":"89200a12c406669e83cf77592d13bc4bff7db7d4","sha256":"3f9d02d4e5472019784e8dec8e1aef36e92f6c77d2460a298628709d5adda023","sha512":"df5729c7ef3d02a67e2c3e3ed1ade0e2f49175cd6bd40d3d6d54832f89462c4bd1d31d65313fd14e18cdbc904cc92100b66e4450796ab60c5a04fcd430dee336","ssdeep":"","tlshash":"32d022dfce86ac493c0280ccc32822389800010f9ca2d883b6eca0b10f0898606b61a4","size":216,"data":"","first_seen":"2025-03-28T12:35:24.969744Z","last_seen":"2025-03-28T12:35:24.969744Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.turbinrumor.com/groupds/assets/js/backlink_back_button.js","fqdn":"d.turbinrumor.com","domain":"turbinrumor.com","tld":"com"},"ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":false,"md5":"60af47aa63c3bf9235687f706af2e899","sha1":"9b651a755c24a2e61617f574579b4d43db107609","sha256":"0faf991e33ce5cfde4a76de0c10f4271f51d30244da938b0e2b2e3f80b4cc035","sha512":"d9dd9a090d3a0bbbb6059b44171577ab1c836c0058b5bb8824a51f9dbf796077c33475150ca0ca033a4eb67ce2484ead2e766b04b6a98415dfef0a193f1c1a48","ssdeep":"","tlshash":"00f0b48d58a60078597331a9dfafa5283563046f3403ea117a8d97904f6472ec389fe9","size":620,"data":"","first_seen":"2023-03-11T20:55:10Z","last_seen":"2026-05-08T20:40:00.282943Z","times_seen":552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.turbinrumor.com/?groupds=149\u0026productId=1857\u0026clientId=676\u0026af=5002264538265438\u0026tracking=3A8DGfjC515bE3qXdhk29u","fqdn":"d.turbinrumor.com","domain":"turbinrumor.com","tld":"com"},"ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"8dd6c7c0f791ad2e0ebf174933bd256a","sha1":"cbd4415ce4211e5ee871da6d9ad3e3ad031c1fad","sha256":"74c6abcb3ba4182bb8dd41160bbaaa2887a3c7d1a244930cc7e2a3156abdce6c","sha512":"95cb29d5c163bfa2cde689910f2d6c73af2e590c727bf7b297941c9a38df461a3e3d5b03169b06cac5a2df3e75a8669652ed4efafede0d51d60c854108797c4f","ssdeep":"96:H8uV2q6jyq7eEqDR7zIGkpsfRXzLoGJxj/bRJCuA/l:H8uV2q6mq6E8R7hkpq9zsexjzvCu4l","tlshash":"79b1438ffe7b16a80997b46f6bdf61182462d01b2005f4017dbc51904fe4e4cb694bf5","size":5565,"data":"","first_seen":"2025-03-28T12:35:24.971289Z","last_seen":"2025-03-28T12:35:24.971289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"track.cybersafezones.com/go/83fc2698-726b-4c30-99b4-d4f3681a31db","fqdn":"track.cybersafezones.com","domain":"cybersafezones.com","tld":"com"},"ip":{"addr":"35.158.71.179","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-28T12:35:01.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.cybersafezones.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Mar 2025 16:02:41 GMT","end":"Sat, 07 Jun 2025 16:02:40 GMT"},"fingerprint":{"sha1":"DE:2A:31:EC:81:AE:4C:0A:98:0B:88:03:ED:3F:03:9F:8E:D2:0A:DD","sha256":"AF:8C:5A:10:09:ED:BE:C6:E5:E2:91:D5:A9:75:1F:20:07:77:87:17:49:BF:42:5D:DE:99:3C:DF:3B:E1:F7:64"}}},"request":{"raw":"GET /go/83fc2698-726b-4c30-99b4-d4f3681a31db HTTP/1.1\r\nHost: track.cybersafezones.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 28 Mar 2025 12:35:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 352\r\naccess-control-allow-origin: *\r\nlocation: https://bunterhader.com/?cat=2\u0026groupds=149\u0026clientId=676\u0026productId=1857\u0026publisher_id=%7Bpublisher_id%7D\u0026tracking=3A8DGfjC515bE3qXdhk29u\r\nset-cookie: bemob-viewer-id=9aec3028-426f-4181-9c42-27ba23dd3a9a; Domain=track.cybersafezones.com; Path=/; Expires=Sat, 28 Mar 2026 12:35:01 GMT; HttpOnly; Secure; SameSite=None\nbemob-uniq-visit:83fc2698-726b-4c30-99b4-d4f3681a31db=1; Domain=track.cybersafezones.com; Path=/; Expires=Sat, 29 Mar 2025 12:35:01 GMT; HttpOnly; Secure; SameSite=None\nbemob-rotation:83fc2698-726b-4c30-99b4-d4f3681a31db:random:cf2c635d90ffa25069a7a2e3411b747a=0-0-2; Domain=track.cybersafezones.com; Path=/; Expires=Sat, 29 Mar 2025 12:35:01 GMT; HttpOnly; Secure; SameSite=None\nbemob-click-id=3A8DGfjC515bE3qXdhk29u; Domain=track.cybersafezones.com; Path=/; Expires=Sun, 27 Apr 2025 12:35:01 GMT; HttpOnly; Secure; SameSite=None\r\nvary: Accept\r\nx-response-time: 44.619ms\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1291,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":180,"dns":0,"connect":21,"send":0,"wait":69,"receive":1,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bunterhader.com/?cat=2\u0026groupds=149\u0026clientId=676\u0026productId=1857\u0026publisher_id=%7Bpublisher_id%7D\u0026tracking=3A8DGfjC515bE3qXdhk29u","fqdn":"bunterhader.com","domain":"bunterhader.com","tld":"com"},"ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-28T12:35:01.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bunterhader.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Feb 2025 04:05:55 GMT","end":"Fri, 16 May 2025 04:05:54 GMT"},"fingerprint":{"sha1":"C4:15:7C:C1:9E:02:C2:82:E5:DD:A6:BD:5D:12:B0:C8:6C:4F:EF:A0","sha256":"5B:13:67:FD:40:E2:C3:B6:72:C3:B1:93:D1:6D:18:DA:24:07:AD:99:EA:82:2C:7C:F2:C0:A1:8C:ED:B1:28:74"}}},"request":{"raw":"GET /?cat=2\u0026groupds=149\u0026clientId=676\u0026productId=1857\u0026publisher_id=%7Bpublisher_id%7D\u0026tracking=3A8DGfjC515bE3qXdhk29u HTTP/1.1\r\nHost: bunterhader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1670,"data":"e=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\u0026cri=XBkMc9lw6L\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=10017\u0026mo=0\u0026pn=11467\u0026spn=1448\u0026fp=427\u0026snt=1"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 28 Mar 2025 12:34:53 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nSet-Cookie: redirect_user_data=%7B%22country%22%3A%22NO%22%2C%22city%22%3Anull%2C%22isp%22%3A%22blix+solutions%22%2C%22netspeed%22%3A%22%22%7D; expires=Fri, 28-Mar-2025 12:44:53 GMT; Max-Age=600\n_tracker_ikangoo=a%3A5%3A%7Bs%3A4%3A%22_key%22%3Bs%3A7%3A%22IKPANEL%22%3Bs%3A6%3A%22_subid%22%3Bs%3A16%3A%225002264538265438%22%3Bs%3A8%3A%22_country%22%3Bs%3A2%3A%22NO%22%3Bs%3A4%3A%22_isp%22%3Bs%3A14%3A%22blix+solutions%22%3Bs%3A5%3A%22_time%22%3Bi%3A1743165293%3B%7D; expires=Fri, 28-Mar-2025 12:36:53 GMT; Max-Age=120\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1291,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1381), with no line terminators","md5":"e9bef41d7622ab2f4efcfc4406fc4639","sha1":"95dea8291fed614277686d7e3307fb5826d31a01","sha256":"a1987caf71702f57c80815f86fbeb8118297a20a9b1e2937b2d23b743653f325","sha512":"ba7659c7cfcbf43edb789ade9d8fea63cd88dcdab921b6e197f0d2443cb3b929f107f179ba2454c286720e9f02d0a1d57eb3ee3799ae8d1de0e79ab050456b02","ssdeep":"","tlshash":"13218bbf2898813a2a41dea015fab22d0d73bc82a6144840b6cc59ac4bc4fd5ccf72a0","first_seen":"2025-03-28T12:35:24.965037Z","last_seen":"2025-03-28T12:35:24.965037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":331,"dns":15,"connect":51,"send":0,"wait":101,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.turbinrumor.com/?groupds=149\u0026productId=1857\u0026clientId=676\u0026af=5002264538265438\u0026tracking=3A8DGfjC515bE3qXdhk29u","fqdn":"d.turbinrumor.com","domain":"turbinrumor.com","tld":"com"},"ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-28T12:35:02.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"d.turbinrumor.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Feb 2025 04:06:12 GMT","end":"Fri, 16 May 2025 04:06:11 GMT"},"fingerprint":{"sha1":"AC:94:8D:0A:6D:28:8B:50:8F:29:31:F9:00:0C:52:93:AB:31:AD:51","sha256":"34:D8:E5:97:EA:AF:CD:80:01:BE:27:46:73:48:8E:AA:8C:8F:A0:D2:CE:B3:DA:AB:CE:29:56:A8:49:B3:68:F9"}}},"request":{"raw":"GET /?groupds=149\u0026productId=1857\u0026clientId=676\u0026af=5002264538265438\u0026tracking=3A8DGfjC515bE3qXdhk29u HTTP/1.1\r\nHost: d.turbinrumor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bunterhader.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 28 Mar 2025 12:34:54 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: c2s_step_des=%5B7%2C5%2C9%5D; expires=Fri, 28-Mar-2025 12:49:54 GMT; Max-Age=900\nc2s_step_limit=3; expires=Fri, 28-Mar-2025 12:49:54 GMT; Max-Age=900\nc2s_user_data=%7B%22isp%22%3A%22blix+solutions%22%2C%22country%22%3A%22NO%22%2C%22lang%22%3A%22en%22%2C%22clientId%22%3A%22676%22%2C%22operator%22%3Anull%2C%22action%22%3Anull%2C%22valid_products%22%3A%5B1414%2C1415%2C1416%2C1417%2C1418%2C1422%2C1732%2C1896%2C1897%2C2822%2C2823%2C2834%2C1898%2C1899%2C1904%2C2563%2C1870%2C1981%2C1831%2C1814%2C2791%2C2798%2C2793%2C2800%2C2661%2C2666%2C1907%2C2665%2C2670%2C2790%2C2797%2C2664%2C2669%2C2663%2C2668%2C2794%2C2801%2C2792%2C2799%2C1676%2C2795%2C2802%2C2796%2C2803%2C1829%2C1815%2C2662%2C2667%2C1847%2C1722%2C1738%2C1749%2C1748%2C1874%2C1843%2C1724%2C1827%2C1718%2C1872%2C1913%2C1970%2C2807%2C2812%2C2805%2C2810%2C2804%2C2809%2C1717%2C2024%2C2806%2C2811%2C2816%2C2808%2C2813%2C1727%2C1909%2C1825%2C1750%2C2562%2C1849%2C1721%2C1863%2C1747%2C1853%2C1720%2C1971%2C1768%2C1767%2C1857%2C1855%2C2774%2C1902%2C2829%2C2828%2C1697%2C1763%2C1839%2C1764%2C1845%2C1723%2C1968%2C1972%2C1769%2C1716%2C1728%2C2781%2C1726%2C1725%2C1835%2C1711%2C1851%2C1719%2C1841%2C1741%2C2780%2C1911%2C2001%2C1861%2C1859%2C1837%2C1733%2C1715%2C1900%2C1766%2C2833%2C1823%2C1821%2C1765%2C1964%2C1963%2C1890%2C1889%2C1892%2C1891%2C1680%2C1967%2C1966%2C2509%2C2508%2C1868%2C2510%2C2513%2C1866%2C1975%2C2511%2C2514%2C2512%2C2515%2C1710%2C2771%2C2772%2C2773%2C2827%2C2824%2C2826%2C2825%2C1713%2C1714%2C1983%2C1969%2C1988%2C2071%2C1658%2C1657%2C1977%2C1591%2C1592%2C1593%2C1594%2C1595%2C1596%2C1974%2C1997%2C1752%2C1411%2C1706%2C1701%2C1665%2C1405%2C1404%2C1406%2C1503%2C1502%2C1504%2C1505%2C1908%2C1943%2C1942%2C1702%2C1547%2C1635%2C1627%2C1628%2C1629%2C1630%2C1631%2C1632%2C1633%2C1675%2C1941%2C1940%2C1906%2C2609%2C1616%2C1744%2C1705%2C1672%2C1667%2C2072%2C1699%2C1673%2C1599%2C1481%2C2250%2C1651%2C1662%2C1650%2C1654%2C1656%2C1655%2C1647%2C1648%2C1649%2C1660%2C1663%2C2028%2C1668%2C1666%2C1408%2C1407%2C1409%2C2023%2C1597%2C1659%2C1559%2C2070%2C1598%2C1536%2C1540%2C1652%2C1653%2C1901%2C1987%2C1637%2C1674%2C1537%2C1538%2C1539%2C1961%2C1413%2C1420%2C1421%2C1412%2C1499%2C1679%2C1696%2C1483%2C1661%2C1579%2C1484%2C1570%2C1553%2C1581%2C1490%2C1546%2C1580%2C1485%2C1550%2C1569%2C1486%2C1541%2C1712%2C1833%2C1803%2C1482%2C1636%2C1487%2C1551%2C1556%2C1568%2C1535%2C1488%2C1554%2C1552%2C1555%2C1489%2C1340%2C1460%2C1366%2C1367%2C1368%2C1341%2C1342%2C1449%2C1450%2C1451%2C1369%2C1370%2C1371%2C1372%2C1373%2C1425%2C1423%2C1424%2C1343%2C1344%2C1345%2C1354%2C1617%2C1626%2C1618%2C1619%2C1620%2C1621%2C1622%2C1623%2C1624%2C1625%2C1664%2C2002%5D%2C%22invalid_product%22%3Anull%2C%22successRate%22%3A0.24%7D; expires=Fri, 28-Mar-2025 12:37:54 GMT; Max-Age=180\nactual_step=1; expires=Fri, 28-Mar-2025 12:37:54 GMT; Max-Age=180\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115929,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (46839)","md5":"bfc995d836a553fb9409851070f5ee93","sha1":"56ce12afa7bc3443836a2d86063c2b0db4504346","sha256":"95a1b5f29ba93c613dd7416340a63fa5d5b95ecaf0de5b16e6b2374cede74e5d","sha512":"fe05108b846c629635145eb608ab757578d5308bca8d3c8ada3d67267fc1c332930bde92b5dbe1a5b37f69f23024b1f07cc5988e15f1f09fc254916f607513d4","ssdeep":"1536:l7Ke/lk8NJTgZ5HVMxufAdTjZECMSJciiG4YYMFJ4w2Cb43XM0Amci+O3zJreDLV:5y0wHCAuZECx4gFUP3XM0aIsEjFYZlT","tlshash":"06b3d0363d67060e2a93b42d7bdb2306ae64d6439189e8843e4c72d49fc1e3d54b7b9c","first_seen":"2025-03-28T12:35:24.966061Z","last_seen":"2025-03-28T12:35:24.966061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":282,"dns":15,"connect":51,"send":0,"wait":152,"receive":105,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.turbinrumor.com/groupds/assets/js/backlink_back_button.js","fqdn":"d.turbinrumor.com","domain":"turbinrumor.com","tld":"com"},"ip":{"addr":"185.32.28.133","port":443,"asn":15699,"as":"Adam EcoTech, S.A","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"","requested_by":"https://d.turbinrumor.com/?groupds=149\u0026productId=1857\u0026clientId=676\u0026af=5002264538265438\u0026tracking=3A8DGfjC515bE3qXdhk29u","date":"2025-03-28T12:35:03.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"d.turbinrumor.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Feb 2025 04:06:12 GMT","end":"Fri, 16 May 2025 04:06:11 GMT"},"fingerprint":{"sha1":"AC:94:8D:0A:6D:28:8B:50:8F:29:31:F9:00:0C:52:93:AB:31:AD:51","sha256":"34:D8:E5:97:EA:AF:CD:80:01:BE:27:46:73:48:8E:AA:8C:8F:A0:D2:CE:B3:DA:AB:CE:29:56:A8:49:B3:68:F9"}}},"request":{"raw":"GET /groupds/assets/js/backlink_back_button.js HTTP/1.1\r\nHost: d.turbinrumor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d.turbinrumor.com/?groupds=149\u0026productId=1857\u0026clientId=676\u0026af=5002264538265438\u0026tracking=3A8DGfjC515bE3qXdhk29u\r\nCookie: c2s_step_des=%5B7%2C5%2C9%5D; c2s_step_limit=3; c2s_user_data=%7B%22isp%22%3A%22blix+solutions%22%2C%22country%22%3A%22NO%22%2C%22lang%22%3A%22en%22%2C%22clientId%22%3A%22676%22%2C%22operator%22%3Anull%2C%22action%22%3Anull%2C%22valid_products%22%3A%5B1414%2C1415%2C1416%2C1417%2C1418%2C1422%2C1732%2C1896%2C1897%2C2822%2C2823%2C2834%2C1898%2C1899%2C1904%2C2563%2C1870%2C1981%2C1831%2C1814%2C2791%2C2798%2C2793%2C2800%2C2661%2C2666%2C1907%2C2665%2C2670%2C2790%2C2797%2C2664%2C2669%2C2663%2C2668%2C2794%2C2801%2C2792%2C2799%2C1676%2C2795%2C2802%2C2796%2C2803%2C1829%2C1815%2C2662%2C2667%2C1847%2C1722%2C1738%2C1749%2C1748%2C1874%2C1843%2C1724%2C1827%2C1718%2C1872%2C1913%2C1970%2C2807%2C2812%2C2805%2C2810%2C2804%2C2809%2C1717%2C2024%2C2806%2C2811%2C2816%2C2808%2C2813%2C1727%2C1909%2C1825%2C1750%2C2562%2C1849%2C1721%2C1863%2C1747%2C1853%2C1720%2C1971%2C1768%2C1767%2C1857%2C1855%2C2774%2C1902%2C2829%2C2828%2C1697%2C1763%2C1839%2C1764%2C1845%2C1723%2C1968%2C1972%2C1769%2C1716%2C1728%2C2781%2C1726%2C1725%2C1835%2C1711%2C1851%2C1719%2C1841%2C1741%2C2780%2C1911%2C2001%2C1861%2C1859%2C1837%2C1733%2C1715%2C1900%2C1766%2C2833%2C1823%2C1821%2C1765%2C1964%2C1963%2C1890%2C1889%2C1892%2C1891%2C1680%2C1967%2C1966%2C2509%2C2508%2C1868%2C2510%2C2513%2C1866%2C1975%2C2511%2C2514%2C2512%2C2515%2C1710%2C2771%2C2772%2C2773%2C2827%2C2824%2C2826%2C2825%2C1713%2C1714%2C1983%2C1969%2C1988%2C2071%2C1658%2C1657%2C1977%2C1591%2C1592%2C1593%2C1594%2C1595%2C1596%2C1974%2C1997%2C1752%2C1411%2C1706%2C1701%2C1665%2C1405%2C1404%2C1406%2C1503%2C1502%2C1504%2C1505%2C1908%2C1943%2C1942%2C1702%2C1547%2C1635%2C1627%2C1628%2C1629%2C1630%2C1631%2C1632%2C1633%2C1675%2C1941%2C1940%2C1906%2C2609%2C1616%2C1744%2C1705%2C1672%2C1667%2C2072%2C1699%2C1673%2C1599%2C1481%2C2250%2C1651%2C1662%2C1650%2C1654%2C1656%2C1655%2C1647%2C1648%2C1649%2C1660%2C1663%2C2028%2C1668%2C1666%2C1408%2C1407%2C1409%2C2023%2C1597%2C1659%2C1559%2C2070%2C1598%2C1536%2C1540%2C1652%2C1653%2C1901%2C1987%2C1637%2C1674%2C1537%2C1538%2C1539%2C1961%2C1413%2C1420%2C1421%2C1412%2C1499%2C1679%2C1696%2C1483%2C1661%2C1579%2C1484%2C1570%2C1553%2C1581%2C1490%2C1546%2C1580%2C1485%2C1550%2C1569%2C1486%2C1541%2C1712%2C1833%2C1803%2C1482%2C1636%2C1487%2C1551%2C1556%2C1568%2C1535%2C1488%2C1554%2C1552%2C1555%2C1489%2C1340%2C1460%2C1366%2C1367%2C1368%2C1341%2C1342%2C1449%2C1450%2C1451%2C1369%2C1370%2C1371%2C1372%2C1373%2C1425%2C1423%2C1424%2C1343%2C1344%2C1345%2C1354%2C1617%2C1626%2C1618%2C1619%2C1620%2C1621%2C1622%2C1623%2C1624%2C1625%2C1664%2C2002%5D%2C%22invalid_product%22%3Anull%2C%22successRate%22%3A0.24%7D; actual_step=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 28 Mar 2025 12:34:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 620\r\nLast-Modified: Wed, 05 Oct 2022 15:26:27 GMT\r\nConnection: keep-alive\r\nETag: \"633da223-26c\"\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":620,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (646), with no line terminators","md5":"f19ab7bf4ad638de52427afbe60b516b","sha1":"0da36a79acfa30fc73a11e5c754e48d84b16ff4b","sha256":"9e3058ce1b730475a322639b1a6159455cf376e06b11cc9e42866cfc9e9a9c83","sha512":"cb2f01f68bb25751aa970b31a16ba5d62476f9d172404d8c7a767310f7ebf37c39839b55daf7c76c55effb752489549468c88990c5ecf387ecd2f0881d4f5af3","ssdeep":"","tlshash":"a2f02b8e582040784e533ae4dfffa5143463345e2413a2013f4c4a930b18719c389ffd","first_seen":"2024-08-29T17:54:20.527369Z","last_seen":"2025-04-05T07:43:17.252351Z","times_seen":5,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}