Report - now.thebestflowingtraff.co/?utm_medium=5cdf3f2e9bdd0f598699b1eebac2dca497745ad9&utm_campaign=mainstream&1=73752&cid=333efe2732ca4aedb1d8d26acc30694c5862

Report Overview

Visited public
2023-09-23 21:33:47
Tags
URL
now.thebestflowingtraff.co/?utm_medium=5cdf3f2e9bdd0f598699b1eebac2dca497745ad9&utm_campaign=mainstream&1=73752&cid=333efe2732ca4aedb1d8d26acc30694c5862
Finishing URL
ak.itponytaa.com/afu.php?zoneid=6061939&var=ww5d45d13c_503c6&ymid=w25784u5btnocdqri77reog8
IP / ASN
67.212.184.150
#32475 SINGLEHOP-LLC
Title
ak.itponytaa.com/afu.php?zoneid=6061939&var=ww5d45d13c_503c6&ymid=w25784u5btnocdqri77reog8

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.marketfoog.co	unknown	2023-09-07	2023-09-07 12:36:25	2023-09-23 03:11:32	2.4 kB	5.4 kB	51.68.85.158
ocsp.godaddy.com	698	1999-03-02	2012-05-20 21:28:57	2023-09-23 05:11:26	330 B	2.6 kB	192.124.249.22
admoustache.media-412.com	unknown	2019-02-26	2023-02-17 11:44:29	2023-09-23 10:06:06	688 B	424 B	34.141.137.168
perserymanked.com	unknown	2021-09-16	2021-09-27 10:52:22	2023-09-23 19:59:13	601 B	848 B	18.158.88.249
ak.itponytaa.com	unknown	2022-06-27	2022-06-28 05:35:26	2023-09-23 09:31:10	1.1 kB	1.1 kB	23.36.76.250
now.thebestflowingtraff.co	unknown	2021-07-05	2021-07-05 14:30:17	2023-09-15 23:07:54	510 B	1.5 kB	67.212.184.150

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-09-23	medium	itponytaa.com	Sinkholed
2023-09-23	medium	itponytaa.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (10)

URL IP Response Size

now.thebestflowingtraff.co/favicon.ico

67.212.184.150

1.2 kB

URL
now.thebestflowingtraff.co/favicon.ico
IP
67.212.184.150:0
ASN
#32475 SINGLEHOP-LLC

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
91abe01116ab422c598e9c8af72cf4da
0f2815fe8e067d48537ad168225ab4674271fa27
b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: now.thebestflowingtraff.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://now.thebestflowingtraff.co/proc.php?2820aebf269dad55e2b2d11c8676edb4f9211724
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sat, 23 Sep 2023 21:33:31 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Wed, 31 Jul 2019 07:48:51 GMT
etag: "5d4147e3-47e"
expires: Sun, 24 Sep 2023 21:33:31 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2

www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951

51.68.85.158

4.3 kB

URL
www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951
IP
51.68.85.158:0
ASN
#16276 OVH SAS

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3486)
Size
4.3 kB (4339 bytes)
Hash
0681c2ea6343ec6a8862673dc1b831de
fcfac4665206f975299207d236dacb0ace2649fb
1be0be1b391baec69445013d880a95982ef4aac4323a0610d5a8cbf32e30011f

HTTP Headers

GET /?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951 HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://now.thebestflowingtraff.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:33:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-transform
Accept-CH: Sec-CH-UA-Platform-Version

www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951&eyeg=88b34537994fa3f41221446a439c14c1&eyer=0.04814506581441447&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=now.thebestflowingtraff.co

51.68.85.158

0 B

URL
www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951&eyeg=88b34537994fa3f41221446a439c14c1&eyer=0.04814506581441447&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=now.thebestflowingtraff.co
IP
51.68.85.158:0
ASN
#16276 OVH SAS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951&eyeg=88b34537994fa3f41221446a439c14c1&eyer=0.04814506581441447&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=now.thebestflowingtraff.co HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Sat, 23 Sep 2023 21:33:31 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951&eyeg=3&eyer=0.04814506581441447&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=now.thebestflowingtraff.co

www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951&eyeg=3&eyer=0.04814506581441447&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=now.thebestflowingtraff.co

51.68.85.158

0 B

URL
www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951&eyeg=3&eyer=0.04814506581441447&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=now.thebestflowingtraff.co
IP
51.68.85.158:0
ASN
#16276 OVH SAS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7282137709177471086&website=951-85f31f3c&placement=951&eyeg=3&eyer=0.04814506581441447&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=now.thebestflowingtraff.co HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Sat, 23 Sep 2023 21:33:31 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000edef1e91972d54e297a7453ce839dee90923-202309-flb*5688507-49bf8*M7282137709177471086*sl_5688507-49bf8*429f76f878ae45faab190c110ffde37b51c2525d*951-85f31f3c*951

www.marketfoog.co/favicon.ico

51.68.85.158

0 B

URL
www.marketfoog.co/favicon.ico
IP
51.68.85.158:0
ASN
#16276 OVH SAS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Date: Sat, 23 Sep 2023 21:33:32 GMT
Connection: keep-alive

ocsp.godaddy.com/

192.124.249.22

2.1 kB

URL
ocsp.godaddy.com/
IP
192.124.249.22:0
ASN
#30148 SUCURI-SEC

File type
data
Size
2.1 kB (2108 bytes)
Hash
74c5502cc55bc7c8e05ad1f3766310f0
0189c17042179cc19f9c15371b5e4e83e112deb9
fd67fb6e4384585d489932b561a6c8f6278625affb80bf4ffa1136b055c507bf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 23 Sep 2023 21:33:32 GMT
Content-Type: application/ocsp-response
Content-Length: 2108
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 23 Sep 2023 04:42:20 GMT
Expires: Sun, 24 Sep 2023 04:42:20 GMT
ETag: "0189c17042179cc19f9c15371b5e4e83e112deb9"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000edef1e91972d54e297a7453ce839dee90923-202309-flb*5688507-49bf8*M7282137709177471086*sl_5688507-49bf8*429f76f878ae45faab190c110ffde37b51c2525d*951-85f31f3c*951

34.141.137.168

0 B

URL
admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000edef1e91972d54e297a7453ce839dee90923-202309-flb*5688507-49bf8*M7282137709177471086*sl_5688507-49bf8*429f76f878ae45faab190c110ffde37b51c2525d*951-85f31f3c*951
IP
34.141.137.168:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000edef1e91972d54e297a7453ce839dee90923-202309-flb*5688507-49bf8*M7282137709177471086*sl_5688507-49bf8*429f76f878ae45faab190c110ffde37b51c2525d*951-85f31f3c*951 HTTP/1.1
Host: admoustache.media-412.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Sat, 23 Sep 2023 21:33:32 GMT
content-length: 0
location: https://fangthatsack.com/rc/a91581ead4?affclick=650f59ac53cc3e000158a41c&pubid=503
x-adjust-use-original-forwarded-for: 1
referer: 
referrer-policy: no-referrer
set-cookie: afclick=650f59ac53cc3e000158a41c; expires=Sun, 22 Sep 2024 21:33:32 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

perserymanked.com/b12060d5-e9c9-4b85-9eb5-b41285f82634?c2=5d45d13c_503&c1=puba7442e56c7b9439ea279111941cc8f5f

18.158.88.249

302 Found

0 B

URL User Request GET HTTP/2
perserymanked.com/b12060d5-e9c9-4b85-9eb5-b41285f82634?c2=5d45d13c_503&c1=puba7442e56c7b9439ea279111941cc8f5f
IP
18.158.88.249:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subjectperserymanked.com
Fingerprint22:F1:A5:F7:35:D6:4F:62:45:B8:EE:FA:72:52:3C:18:A3:0F:F4:04
ValidityWed, 20 Sep 2023 05:50:03 GMT - Tue, 19 Dec 2023 05:50:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /b12060d5-e9c9-4b85-9eb5-b41285f82634?c2=5d45d13c_503&c1=puba7442e56c7b9439ea279111941cc8f5f HTTP/1.1
Host: perserymanked.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fangthatsack.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Sat, 23 Sep 2023 21:33:33 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://ak.itponytaa.com/afu.php?zoneid=6061939&var=ww5d45d13c_503c6&ymid=w25784u5btnocdqri77reog8
pragma: no-cache
set-cookie: b12060d5-e9c9-4b85-9eb5-b41285f82634-v4=KOKD0NFGVtC0JB_aZaOF9aYFOL6UzuZmmUD-Rx3OHfo; Max-Age=86400; Expires=Sun, 24-Sep-2023 21:33:33 GMT; Domain=perserymanked.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=9Ffb63lbmGKCU4gIvwMf8xKUL2Oa1r2REGvUtPAdHQhr0x%2BRCF4kFja3X2shN89NYeXlg%2FKervXmTKLF2Ok2HDlliTOn4SEDvS%2BYvNkWjHN9uWVJA6hdtI1OQIAUdgpbCMJhDZItSCoKHAdwFkCB3g%3D%3D; Max-Age=31536000; Expires=Sun, 22-Sep-2024 21:33:33 GMT; Domain=perserymanked.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

ak.itponytaa.com/afu.php?zoneid=6061939&var=ww5d45d13c_503c6&ymid=w25784u5btnocdqri77reog8

23.36.76.250

403 Forbidden

7 B

URL User Request GET HTTP/2
ak.itponytaa.com/afu.php?zoneid=6061939&var=ww5d45d13c_503c6&ymid=w25784u5btnocdqri77reog8
IP
23.36.76.250:443
ASN
#20940 Akamai International B.V.

Certificate
IssuerLet's Encrypt
Subjectak.hetaruwg.com
FingerprintD1:DE:0D:DF:E3:AA:5E:0B:03:AF:D9:A7:87:CB:02:A7:B2:8D:DA:4F
ValidityFri, 08 Sep 2023 17:21:40 GMT - Thu, 07 Dec 2023 17:21:39 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
758ff964ee78d0c90f3a14d8d4af8ab3
f248d30ac9849b0ead400537632beb02c9c703d1
00e3fbbf542561da72fdc5ea89cfd1405c17739dd49210252e611c3122018efe

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /afu.php?zoneid=6061939&var=ww5d45d13c_503c6&ymid=w25784u5btnocdqri77reog8 HTTP/1.1
Host: ak.itponytaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fangthatsack.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
content-type: text/plain; charset=utf-8
content-length: 7
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
expires: Sat, 23 Sep 2023 21:33:33 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 23 Sep 2023 21:33:33 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=20, origin; dur=1, ak_p; desc="1695504813135_388254966_112980038_2107_943_1_26_41";dur=1
X-Firefox-Spdy: h2

ak.itponytaa.com/favicon.ico

23.36.76.250

204 No Content

0 B

URL GET HTTP/2
ak.itponytaa.com/favicon.ico
IP
23.36.76.250:443
ASN
#20940 Akamai International B.V.

Requested by
https://ak.itponytaa.com/afu.php?zoneid=6061939&var=ww5d45d13c_503c6&ymid=w25784u5btnocdqri77reog8
Certificate
IssuerLet's Encrypt
Subjectak.hetaruwg.com
FingerprintD1:DE:0D:DF:E3:AA:5E:0B:03:AF:D9:A7:87:CB:02:A7:B2:8D:DA:4F
ValidityFri, 08 Sep 2023 17:21:40 GMT - Thu, 07 Dec 2023 17:21:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ak.itponytaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.itponytaa.com/afu.php?zoneid=6061939&var=ww5d45d13c_503c6&ymid=w25784u5btnocdqri77reog8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
pragma: public
cache-control: public, must-revalidate, proxy-revalidate, max-age=2591983
date: Sat, 23 Sep 2023 21:33:33 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=9, origin; dur=0, ak_p; desc="1695504813407_388254966_112980222_907_630_1_0_21";dur=1
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (10)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers