Report - ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID_

Report Overview

Submitted URL
ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
IP
52.19.101.114
ASN
#16509 AMAZON-02
Submitted
2023-04-19 07:01:45
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
tt.stfilecamp.com	unknown	2022-03-08	2023-04-18	843 B	6.6 kB	205.185.216.10
stormtrk.com	289095	2019-05-17	2023-04-18	612 B	1.0 kB	104.26.4.120
cdnjs.cloudflare.com	235	2015-04-17	2023-04-18	438 B	24 kB	104.17.24.14
cdn-adef.akamaized.net	125719	2018-02-06	2023-04-18	6.7 kB	617 kB	95.101.10.67
api.imotech.video	140520	2021-01-28	2023-04-17	2.8 kB	9.1 kB	164.90.105.129
cdnjs.claudflare.io	unknown	2021-08-12	2023-04-18	443 B	92 kB	206.189.196.86
cdn.stfilecamp.com	400667	2021-09-06	2023-04-18	820 B	40 kB	205.185.216.42
route.frest.pro	unknown	2023-01-02	2023-04-18	506 B	770 B	172.67.211.109
ntn.giveawayprize.site	unknown	2023-04-13	2023-04-18	488 B	2.6 kB	52.19.101.114

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-04-19	medium	cdn.stfilecamp.com/stormtrk.js
2023-04-19	medium	cdn.stfilecamp.com/fp.min.js

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-04-19	medium	claudflare.io

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1681385839	92 kB	2023-04-19	2023-07-15
Pretty URL cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1681385839 IP 206.189.196.86 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-19 00:01:44 Last Seen2023-07-15 10:00:47 Times Seen16 Hash cfc93420c3939ee4aca6e5985ec3c0bd f13982462a9e8a5bd15b18363419ee88d52ea68e 6450a1b47a2e8bd98efbdcfa45b8dee963ade7ec2b6d37408122a09b5bd029a1 Loading...

	cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1681385839	64 kB	2023-03-07	2024-04-16
Pretty URL cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1681385839 IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:40 Last Seen2024-04-16 09:59:17 Times Seen381 Hash 6ceffd5b35d350764ce6cb72313190f5 1a8bcae2241d253c1a41050b20c840d29878f3ae 6dbe9c2e13cf06c6633ea3fcf6d7bd30452561202a205c75a035cd1d8b93368f Loading...

	cdn-adef.akamaized.net/landings/279978/1681385839/js/collector.js?1681385839	4.8 kB	2023-04-08	2023-05-10
Pretty URL cdn-adef.akamaized.net/landings/279978/1681385839/js/collector.js?1681385839 IP 95.101.10.67 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-08 22:01:50 Last Seen2023-05-10 05:01:58 Times Seen28 Hash 74ead626718325b050af04041a19a2ba 4b31b7a400fc6eae9c16e4e1c51d67f01df52c0b 45b35c04b53ceabc8fa8db451d51f916e0119c354dc5403fe5ada8b88f3f3583 Loading...

	cdn.stfilecamp.com/stormtrk.js	6.8 kB	2023-03-12	2024-03-03
Pretty URL cdn.stfilecamp.com/stormtrk.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:32:38 Last Seen2024-03-03 21:18:43 Times Seen307 Hash 39e5f8ad757fe438c784e8d883e47ab0 6b2905489485100c83605f43186c5843031e1f3b e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a Loading...

	tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js	2.3 kB	2023-03-08	2024-02-28
Pretty URL tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js IP 205.185.216.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 19:39:24 Last Seen2024-02-28 09:22:10 Times Seen127 Hash 96af925d55cad494665471c73ac01b04 5d2b1c06d2edb1a1ba9a5335c5dbb73c508b879b 1109fbd42583528695ba5995a756fd0fd09a992a85f50e54862e4b13c1cf75c2 Loading...

	cdn.stfilecamp.com/fp.min.js	32 kB	2023-04-06	2024-03-30
Pretty URL cdn.stfilecamp.com/fp.min.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 21:01:52 Last Seen2024-03-30 15:36:25 Times Seen835 Hash 198f2f5b0a649f41fe890c59d37319aa f24629687612889bb59f610df3879afcd766fb80 d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912 Loading...

	cdn-adef.akamaized.net/landings/279978/1681385839/js/main.js?1681385839	5.1 kB	2023-03-26	2023-10-28
Pretty URL cdn-adef.akamaized.net/landings/279978/1681385839/js/main.js?1681385839 IP 95.101.10.67 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 06:32:53 Last Seen2023-10-28 00:00:39 Times Seen37 Hash 0647bc6aba8f91680bbc14c8d2573f8a 3a11e5cffc095bd06d0717569de39d428febd13b 0742cee6fe637d7f11d6428f09a356e21a28ff9c826bd677429cc46bd928da18 Loading...

	ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__	190 B	2023-04-14	2023-04-19
Pretty URL ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__ IP 52.19.101.114 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-14 16:01:59 Last Seen2023-04-19 10:01:44 Times Seen11 Hash 36f62425d0ca45ed6e6302322c2c6879 75282e1224fd80e4d74c7e9ad0d6e8519fdf462f 88c417e5eda321353894589d657579b8185b102608454ef7265fe192705b8d59 Loading...

	api.imotech.video/ad/events.js?pixel_id=902760083831232256	17 kB	2023-03-08	2024-02-28
Pretty URL api.imotech.video/ad/events.js?pixel_id=902760083831232256 IP 164.90.105.129 ASN #10122 BIGO TECHNOLOGY PTE. LTD. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 19:39:24 Last Seen2024-02-28 09:22:00 Times Seen127 Hash 65e92d1f5cd6a66edd798d8e31a0f5a4 ee20b1d89622bcf1787c29b0480e6547996acadf b047e3cd894e371bc43a81292ba872d0f81fd03a8a9e66aa7e063c7e96f76098 Loading...

	tt.stfilecamp.com/jsfiles/site-protect2.0.js	3.1 kB	2023-03-07	2024-03-03
Pretty URL tt.stfilecamp.com/jsfiles/site-protect2.0.js IP 205.185.216.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:44 Last Seen2024-03-03 21:18:43 Times Seen271 Hash fc96ab06b0f9fcea6731405215ae5daf 8af9f27d895eb69754919a2fc0d74760fecd3860 9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e Loading...

HTTP Transactions (28)

URL IP Response Size

ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__

52.19.101.114

200 OK

2.2 kB

URL User Request GET HTTP/1.1
ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
IP
52.19.101.114:80
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1347)
Size
2.2 kB (2209 bytes)
Hash
a02350aa96de7b2b6e5fcbe3b327434b
beeb5891de8f252afd4c8ef914156cb7cbc4d91e
5addae788a47221350907227532f471578fd8366b31fed0c17b274b40529acea

HTTP Headers

GET /c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__ HTTP/1.1
Host: ntn.giveawayprize.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 19 Apr 2023 07:01:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: unique_id=643f91ca00022809; Path=/; Expires=Sun, 18 Jun 2023 07:01:30 GMT
unique_id2=643f91ca00022e23; Path=/; Expires=Tue, 18 Jul 2023 07:01:30 GMT
impression=; Path=/; Expires=Wed, 19 Apr 2023 07:01:30 GMT
Content-Encoding: gzip

cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1681385839

104.17.24.14

200 OK

23 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1681385839
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT

File type
ASCII text, with very long lines (63851)
Size
23 kB (22890 bytes)
Hash
54f1891cb82fd16d04d8133f13079a5b
6582233e611f99b744e271aa71198ae245df9e3a
4ebe73a5c9b58dedbc529078b52c203a036bb2d32082de4535d21ab1c5cc308d

HTTP Headers

GET /ajax/libs/gsap/3.9.1/gsap.min.js?1681385839 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 19 Apr 2023 07:01:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 22890
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61c68a7c-596a"
last-modified: Sat, 25 Dec 2021 03:05:32 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2364558
expires: Mon, 08 Apr 2024 07:01:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=co6iMRi3m9t6cH8w9Zd8Ii6ECvCVxPa1kFsAELPrjE1vnwLVZfDubsiNbcMZX1VdEvNh0qc1n7ZHZ3aV%2F89jtrq1P3dR0HrVy7GkjM9M5IKvMe2MsBhvujgScoP16SymVH16trF%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ba346d30a080b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdn-adef.akamaized.net/landings/279978/1681385839/js/collector.js?1681385839

95.101.10.67

200 OK

1.2 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279978/1681385839/js/collector.js?1681385839
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
ASCII text
Size
1.2 kB (1208 bytes)
Hash
13e683a863b00eb8a1299e95d9c2a494
b59f2757cb5a802a8d923b2df96a26b0a085e6a5
ec80071e8cfabf514fc8fb9de1eb5787a5c1c749df76510b2c81fad0edd57449

HTTP Headers

GET /landings/279978/1681385839/js/collector.js?1681385839 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: eRcn702haiixx8weIRcNtXvgvVAFH6RI8NopDbLZjkz2KMaTdRpFoX3aJSLAH38ow9Cn4i3WiJc=
x-amz-request-id: 5C34RVQE4EKSQAAR
Last-Modified: Thu, 13 Apr 2023 11:37:21 GMT
ETag: "74ead626718325b050af04041a19a2ba"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 19 Apr 2023 07:01:30 GMT
Content-Length: 1208
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/279978/1681385839/css/basics.css?1681385839

95.101.10.67

200 OK

2.7 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279978/1681385839/css/basics.css?1681385839
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
ASCII text, with very long lines (402), with CRLF line terminators
Size
2.7 kB (2665 bytes)
Hash
5057a59cf0f36260bb0d8f03993573cc
fe346638fbc91939bc9f031e0e0ac1f67e46af6c
9fe6ddb5ba4206ba2f7347298770f8a4902d19a9ac4ec30d4eb4c8e503764e2b

HTTP Headers

GET /landings/279978/1681385839/css/basics.css?1681385839 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: TMJOcghfPcNbMGCLF4scHL3eIBeyGcsqz2gEtqYVcyUbS/kjCcMvSvyO4T4WGElK3NnjG/W2kE4=
x-amz-request-id: 5C3APFPEKZQAD4S7
Last-Modified: Thu, 13 Apr 2023 11:37:21 GMT
ETag: "19a998463fe040bb8bdbc07b8c842414"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 19 Apr 2023 07:01:30 GMT
Content-Length: 2665
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/279978/1681385839/js/main.js?1681385839

95.101.10.67

200 OK

1.8 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279978/1681385839/js/main.js?1681385839
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
ASCII text
Size
1.8 kB (1754 bytes)
Hash
0a6722f6e13a15dd4c0aa8bd1ba9a8b6
1d0a7efc48971f4efce7cbfde68483468ac999c1
642068c83c335409a36e160624cc9dc4d5a0caba94a992d08216e5d832055db3

HTTP Headers

GET /landings/279978/1681385839/js/main.js?1681385839 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: YE/MlSjfSb3P1bCaqTR51TnDHsc1Ftpg8JjkqmYDixeLql3DJ08Vva8jWjnIedbz+4ivTzBqKok=
x-amz-request-id: 5C33S5VBFS30SH7Y
Last-Modified: Thu, 13 Apr 2023 11:37:21 GMT
ETag: "0647bc6aba8f91680bbc14c8d2573f8a"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 19 Apr 2023 07:01:30 GMT
Content-Length: 1754
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

api.imotech.video/ad/events.js?pixel_id=902760083831232256

164.90.105.129

200 OK

6.1 kB

URL GET HTTP/2
api.imotech.video/ad/events.js?pixel_id=902760083831232256
IP
164.90.105.129:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
FingerprintA0:67:1C:F6:41:66:7E:FA:52:CC:92:38:EA:B5:88:77:7A:A4:6B:D0
ValidityTue, 05 Jul 2022 02:31:37 GMT - Sun, 06 Aug 2023 02:31:36 GMT

File type
Unicode text, UTF-8 text, with very long lines (17299), with no line terminators
Size
6.1 kB (6084 bytes)
Hash
04e28f6f27e56120dbd628602d454aa8
bd60441a6df5ff0d634a18081fd958c08cea8d4e
2cc39d592792855eb5562cff1fc480c32634d9e7af315afcca0d983d8f0927ed

HTTP Headers

GET /ad/events.js?pixel_id=902760083831232256 HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 19 Apr 2023 07:01:30 GMT
content-type: application/json,application/javascript;charset=utf-8
content-length: 6084
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, max-age=900
X-Firefox-Spdy: h2

cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1681385839

206.189.196.86

200 OK

92 kB

URL GET HTTP/1.1
cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1681385839
IP
206.189.196.86:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerLet's Encrypt
Subjectcdnjs.claudflare.io
FingerprintBF:D4:AB:9A:D0:EB:75:E1:A0:33:BA:D0:58:58:99:64:E0:75:B9:0C
ValidityThu, 06 Apr 2023 22:54:27 GMT - Wed, 05 Jul 2023 22:54:26 GMT

File type
ASCII text, with very long lines (65447)
Size
92 kB (92013 bytes)
Hash
cfc93420c3939ee4aca6e5985ec3c0bd
f13982462a9e8a5bd15b18363419ee88d52ea68e
6450a1b47a2e8bd98efbdcfa45b8dee963ade7ec2b6d37408122a09b5bd029a1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /ajax/libs/jquery/3.6.0/d/jquery.min.js?1681385839 HTTP/1.1
Host: cdnjs.claudflare.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Wed, 19 Apr 2023 07:01:31 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 92013
Connection: keep-alive
Cache-Control: public, max-age=43200
Expires: Wed, 19 Apr 2023 19:01:31 GMT

cdn-adef.akamaized.net/landings/279978/1681385839/images/Amazon_logo.png

95.101.10.67

200 OK

18 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279978/1681385839/images/Amazon_logo.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
PNG image data, 603 x 182, 8-bit/color RGBA, non-interlaced\012- data
Size
18 kB (18335 bytes)
Hash
66bd0e9f7dc3079113bf142d300edf64
c5df2623dd3bd008ec4fdcf73a24b5fa46569881
135a5c232848199b30e5d18ba283ee64a1b87d44fc2c1fda80e3cde374669b3d

HTTP Headers

GET /landings/279978/1681385839/images/Amazon_logo.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: yRsBVAx9gdo+S5ZsRGyi4raCP6YdonUHXogWzn6s5uYPcA3aUgI13jn8eGdRCMP/hus4U4Lf8RM=
x-amz-request-id: 5C3BEDGRB0RH1B3D
Last-Modified: Thu, 13 Apr 2023 11:37:21 GMT
ETag: "66bd0e9f7dc3079113bf142d300edf64"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 18335
Date: Wed, 19 Apr 2023 07:01:31 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/279978/1681385839/images/prize.png

95.101.10.67

200 OK

517 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279978/1681385839/images/prize.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
PNG image data, 800 x 687, 8-bit/color RGBA, non-interlaced\012- data
Size
517 kB (516972 bytes)
Hash
ec93c12593cad74c3a3f4b0acecf5c88
6f210b7e69ca976a4c39529df774bf5000df84d1
f073bc0029b0528e6136f723445d29b9c1f58bfbf513f31cd3ecd146b5e9fceb

HTTP Headers

GET /landings/279978/1681385839/images/prize.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: wHmwv4OET5Ov3e44bHBJxo5ninSIbytkhN36BOHHmW06eIJ/D29bCgkNE5NTLhZFYZYc8j2Eku8=
x-amz-request-id: 5C3A3K665T4WJPKN
Last-Modified: Thu, 13 Apr 2023 11:37:21 GMT
ETag: "ec93c12593cad74c3a3f4b0acecf5c88"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 516972
Date: Wed, 19 Apr 2023 07:01:31 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/279978/1681385839/images/kisteAufOpt.png

95.101.10.67

200 OK

66 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279978/1681385839/images/kisteAufOpt.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
PNG image data, 360 x 399, 8-bit colormap, non-interlaced\012- data
Size
66 kB (66481 bytes)
Hash
86e2ced3db878d2895d254b5283099d3
3f54058f4bc521ea9c5f8758ae973993d70dfc0d
ce3dae87354c59731b7a43eb49cd949c704a148f196a530afdb744080d649f05

HTTP Headers

GET /landings/279978/1681385839/images/kisteAufOpt.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/279978/1681385839/css/basics.css?1681385839
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: EWFW6pLpH/N2Er7KWE/VTbRZ0ysqQUAwgfTz36bfI3cKSb4wTchN9IzJvjmI8s3NP7bgzYWuzkQ=
x-amz-request-id: 5C3190AQNHATAWZB
Last-Modified: Thu, 13 Apr 2023 11:37:21 GMT
ETag: "86e2ced3db878d2895d254b5283099d3"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 66481
Date: Wed, 19 Apr 2023 07:01:31 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

api.imotech.video/ad/pixelfile.html

164.90.105.129

200 OK

1.9 kB

URL GET HTTP/2
api.imotech.video/ad/pixelfile.html
IP
164.90.105.129:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
FingerprintA0:67:1C:F6:41:66:7E:FA:52:CC:92:38:EA:B5:88:77:7A:A4:6B:D0
ValidityTue, 05 Jul 2022 02:31:37 GMT - Sun, 06 Aug 2023 02:31:36 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
1.9 kB (1888 bytes)
Hash
276e9f07c55ed5404d2b4118da99c454
f3556fab4dbc2f9dc0ed954685e733466a44cae2
906f6effab44b23ce90ce63d03fea117c7a9346983bd27972b37f4085d561869

HTTP Headers

GET /ad/pixelfile.html HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 19 Apr 2023 07:01:31 GMT
content-type: application/json,text/html;charset=utf-8
content-length: 1888
X-Firefox-Spdy: h2

api.imotech.video/bigoad/trackingview?it=1681887833446&title=Electronics%20Pallet&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__&host=ntn.giveawayprize.site&cookie_id=BA1.1.3390406068.1681887833&session_id=BA1.1.7703130444.1681887833&pixel_id=902760083831232256&ts=1681887833453&extra=%7B%22action%22%3A%22init%22%2C%22wst%22%3A118%2C%22drt%22%3A1410%2C%22lgt%22%3A1421%7D

164.90.105.129

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?it=1681887833446&title=Electronics%20Pallet&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__&host=ntn.giveawayprize.site&cookie_id=BA1.1.3390406068.1681887833&session_id=BA1.1.7703130444.1681887833&pixel_id=902760083831232256&ts=1681887833453&extra=%7B%22action%22%3A%22init%22%2C%22wst%22%3A118%2C%22drt%22%3A1410%2C%22lgt%22%3A1421%7D
IP
164.90.105.129:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
FingerprintA0:67:1C:F6:41:66:7E:FA:52:CC:92:38:EA:B5:88:77:7A:A4:6B:D0
ValidityTue, 05 Jul 2022 02:31:37 GMT - Sun, 06 Aug 2023 02:31:36 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
831f03527cd4881dfe23af63d726abdc
01882b5eb8f33fef98157f8443d803b825097426
3ff24faf79b23cc9b3dc6e047f76f79c611be581361d3ba88d54544cf1eb2e3a

HTTP Headers

POST /bigoad/trackingview?it=1681887833446&title=Electronics%20Pallet&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__&host=ntn.giveawayprize.site&cookie_id=BA1.1.3390406068.1681887833&session_id=BA1.1.7703130444.1681887833&pixel_id=902760083831232256&ts=1681887833453&extra=%7B%22action%22%3A%22init%22%2C%22wst%22%3A118%2C%22drt%22%3A1410%2C%22lgt%22%3A1421%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ntn.giveawayprize.site
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 19 Apr 2023 07:01:32 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-592ada77bca2540f4e16ab395c48f5a8-0-00
X-Firefox-Spdy: h2

api.imotech.video/bigoad/trackingview?it=1681887833446&title=Electronics%20Pallet&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__&host=ntn.giveawayprize.site&cookie_id=BA1.1.3390406068.1681887833&session_id=BA1.1.7703130444.1681887833&pixel_id=902760083831232256&ts=1681887833453&extra=%7B%22action%22%3A%22page_view%22%2C%22wst%22%3A118%2C%22drt%22%3A1410%2C%22lgt%22%3A1422%7D

164.90.105.129

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?it=1681887833446&title=Electronics%20Pallet&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__&host=ntn.giveawayprize.site&cookie_id=BA1.1.3390406068.1681887833&session_id=BA1.1.7703130444.1681887833&pixel_id=902760083831232256&ts=1681887833453&extra=%7B%22action%22%3A%22page_view%22%2C%22wst%22%3A118%2C%22drt%22%3A1410%2C%22lgt%22%3A1422%7D
IP
164.90.105.129:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
FingerprintA0:67:1C:F6:41:66:7E:FA:52:CC:92:38:EA:B5:88:77:7A:A4:6B:D0
ValidityTue, 05 Jul 2022 02:31:37 GMT - Sun, 06 Aug 2023 02:31:36 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
15ce5b7dc574f3622d36968b71357892
65510d2386e0c50fb641a1997fc7ff4576ea1576
36df4f6b53736311f1490a578c133b8784731c94775470275d6f83b36845cda7

HTTP Headers

POST /bigoad/trackingview?it=1681887833446&title=Electronics%20Pallet&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__&host=ntn.giveawayprize.site&cookie_id=BA1.1.3390406068.1681887833&session_id=BA1.1.7703130444.1681887833&pixel_id=902760083831232256&ts=1681887833453&extra=%7B%22action%22%3A%22page_view%22%2C%22wst%22%3A118%2C%22drt%22%3A1410%2C%22lgt%22%3A1422%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ntn.giveawayprize.site
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 19 Apr 2023 07:01:32 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-4d7479189c4b0a6acb10c37105b06d16-0-00
X-Firefox-Spdy: h2

tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js

205.185.216.10

200 OK

2.3 kB

URL GET HTTP/2
tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js
IP
205.185.216.10:443
ASN
#20446 STACKPATH-CDN

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint65:15:17:88:19:63:61:B1:C7:04:76:41:E8:75:B4:E1:B1:39:B7:9F
ValiditySun, 02 Apr 2023 07:03:21 GMT - Sat, 01 Jul 2023 07:03:20 GMT

File type
HTML document, ASCII text
Size
2.3 kB (2307 bytes)
Hash
96af925d55cad494665471c73ac01b04
5d2b1c06d2edb1a1ba9a5335c5dbb73c508b879b
1109fbd42583528695ba5995a756fd0fd09a992a85f50e54862e4b13c1cf75c2

HTTP Headers

GET /jsfiles/second_back_multi_bigo.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 19 Apr 2023 07:01:32 GMT
cache-control: max-age=0
content-length: 2307
content-type: text/javascript
last-modified: Mon, 27 Feb 2023 13:49:23 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "96af925d55cad494665471c73ac01b04"
x-amz-request-id: tx00000000000002a0be1dc-00643f83bc-65bc352a-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1681887692.dop026.sk1.t,1681887692.cds209.sk1.hn,1681887692.cds239.sk1.c
X-Firefox-Spdy: h2

tt.stfilecamp.com/jsfiles/site-protect2.0.js

205.185.216.10

200 OK

3.1 kB

URL GET HTTP/2
tt.stfilecamp.com/jsfiles/site-protect2.0.js
IP
205.185.216.10:443
ASN
#20446 STACKPATH-CDN

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint65:15:17:88:19:63:61:B1:C7:04:76:41:E8:75:B4:E1:B1:39:B7:9F
ValiditySun, 02 Apr 2023 07:03:21 GMT - Sat, 01 Jul 2023 07:03:20 GMT

File type
ASCII text
Size
3.1 kB (3137 bytes)
Hash
fc96ab06b0f9fcea6731405215ae5daf
8af9f27d895eb69754919a2fc0d74760fecd3860
9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e

HTTP Headers

GET /jsfiles/site-protect2.0.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 19 Apr 2023 07:01:32 GMT
cache-control: max-age=0
content-length: 3137
content-type: text/javascript
last-modified: Mon, 27 Feb 2023 13:49:23 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "fc96ab06b0f9fcea6731405215ae5daf"
x-amz-request-id: tx00000000000002cb6dc2b-00643f83bc-652bc218-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1681887692.dop026.sk1.t,1681887692.cds209.sk1.hn,1681887692.cds231.sk1.c
X-Firefox-Spdy: h2

cdn.stfilecamp.com/stormtrk.js

205.185.216.42

200 OK

6.8 kB

URL GET HTTP/2
cdn.stfilecamp.com/stormtrk.js
IP
205.185.216.42:443
ASN
#20446 STACKPATH-CDN

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintF8:BE:41:B6:07:30:9E:79:85:9A:4B:38:AC:93:26:3E:F7:61:9A:19
ValidityThu, 30 Mar 2023 15:05:12 GMT - Wed, 28 Jun 2023 15:05:11 GMT

File type
ASCII text
Size
6.8 kB (6807 bytes)
Hash
39e5f8ad757fe438c784e8d883e47ab0
6b2905489485100c83605f43186c5843031e1f3b
e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /stormtrk.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 19 Apr 2023 07:01:32 GMT
cache-control: max-age=3022
content-length: 6807
content-type: text/javascript
last-modified: Sat, 24 Dec 2022 08:48:24 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "39e5f8ad757fe438c784e8d883e47ab0"
x-amz-request-id: tx00000000000000bb551fa-00643f8f89-3593b118-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1681887692.dop013.sk1.t,1681887692.cds202.sk1.hn,1681887692.cds014.sk1.c
X-Firefox-Spdy: h2

cdn-adef.akamaized.net/6214f3584ae31.png

95.101.10.67

302 Moved Temporarily

0 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/6214f3584ae31.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /6214f3584ae31.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://cdn-adef.akamaized.net/404
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/6214f35848a47.png

95.101.10.67

302 Moved Temporarily

0 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/6214f35848a47.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /6214f35848a47.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://cdn-adef.akamaized.net/404
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/404

95.101.10.67

404 Not Found

134 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/404
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
134 B (134 bytes)
Hash
9c7c01b7650d428a3540bd1d22390a2f
1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0
08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1

HTTP Headers

GET /404 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ntn.giveawayprize.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Length: 134
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/404

95.101.10.67

404 Not Found

134 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/404
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
134 B (134 bytes)
Hash
9c7c01b7650d428a3540bd1d22390a2f
1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0
08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1

HTTP Headers

GET /404 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ntn.giveawayprize.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Length: 134
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/6214f358475bf.png

95.101.10.67

302 Moved Temporarily

0 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/6214f358475bf.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /6214f358475bf.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://cdn-adef.akamaized.net/404
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/404

95.101.10.67

404 Not Found

134 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/404
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
134 B (134 bytes)
Hash
9c7c01b7650d428a3540bd1d22390a2f
1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0
08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1

HTTP Headers

GET /404 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ntn.giveawayprize.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Length: 134
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

route.frest.pro/is_redirect

172.67.211.109

200 OK

17 B

URL POST HTTP/2
route.frest.pro/is_redirect
IP
172.67.211.109:443
ASN
#13335 CLOUDFLARENET

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerGoogle Trust Services LLC
Subjectfrest.pro
FingerprintBF:79:17:15:EB:F6:8D:E0:44:93:02:1B:18:9B:0E:C8:06:68:24:E1
ValidityFri, 14 Apr 2023 08:42:39 GMT - Thu, 13 Jul 2023 08:42:38 GMT

File type
JSON data\012- , ASCII text
Size
17 B (17 bytes)
Hash
6dec798efb56f56f33660938f6249ff6
e889219883cef38754dc1e5df7ca5277b3b314c8
b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4

HTTP Headers

POST /is_redirect HTTP/1.1
Host: route.frest.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 10
Origin: http://ntn.giveawayprize.site
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 19 Apr 2023 07:01:32 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xRklpfu5UCsMTuhlEx0AYoBAj5YgFm40e5bkPn4tuTDC9Lotew8QSqWrNVM1oPKvw6fWhXi2CZ0lq%2FzV4maFRGmUxtnw3tA3vfpwQVJAp6MdEAcbd%2F1fHe31HtUVRyv%2F87I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ba346daa84cb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdn-adef.akamaized.net/6214f35849cd6.png

95.101.10.67

302 Moved Temporarily

0 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/6214f35849cd6.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /6214f35849cd6.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://cdn-adef.akamaized.net/404
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/404

95.101.10.67

404 Not Found

134 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/404
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
134 B (134 bytes)
Hash
9c7c01b7650d428a3540bd1d22390a2f
1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0
08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1

HTTP Headers

GET /404 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ntn.giveawayprize.site/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Length: 134
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/images/favicon.ico

95.101.10.67

200 OK

4.1 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/images/favicon.ico
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
Fingerprint7B:62:AB:D4:32:FB:D8:97:04:07:9A:AB:8E:BE:E6:48:AE:5C:8D:37
ValidityTue, 28 Jun 2022 00:00:00 GMT - Fri, 30 Jun 2023 23:59:59 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
4.1 kB (4103 bytes)
Hash
4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0

HTTP Headers

GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: IjvSRVcJlrA8KRtuHCIvySb7T9M4setamspkp4J4t5oLIH6qyzaHxu8PdVPZHXMCPnB1SRcSZOs=
x-amz-request-id: 9B7689322D7626CA
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
Unused62: 8096267
Date: Wed, 19 Apr 2023 07:01:32 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn.stfilecamp.com/fp.min.js

205.185.216.42

200 OK

32 kB

URL GET HTTP/2
cdn.stfilecamp.com/fp.min.js
IP
205.185.216.42:443
ASN
#20446 STACKPATH-CDN

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintF8:BE:41:B6:07:30:9E:79:85:9A:4B:38:AC:93:26:3E:F7:61:9A:19
ValidityThu, 30 Mar 2023 15:05:12 GMT - Wed, 28 Jun 2023 15:05:11 GMT

File type
Unicode text, UTF-8 text, with very long lines (31370)
Size
32 kB (31705 bytes)
Hash
198f2f5b0a649f41fe890c59d37319aa
f24629687612889bb59f610df3879afcd766fb80
d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fp.min.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 19 Apr 2023 07:01:33 GMT
cache-control: max-age=3600
content-length: 31705
content-type: text/javascript
last-modified: Mon, 13 Jun 2022 11:23:14 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "198f2f5b0a649f41fe890c59d37319aa"
x-amz-request-id: tx00000000000000b068e44-00643f91cd-35e189a3-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1681887692.dop013.sk1.t,1681887692.cds202.sk1.hn,1681887693.cds237.sk1.pr
X-Firefox-Spdy: h2

stormtrk.com/api/1.0/ping/pong?location=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__

104.26.4.120

200 OK

345 B

URL GET HTTP/2
stormtrk.com/api/1.0/ping/pong?location=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__
IP
104.26.4.120:443
ASN
#13335 CLOUDFLARENET

Requested by
http://ntn.giveawayprize.site/c/4d060de0a5b5a703?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint12:CF:2B:DC:A1:B5:77:12:91:68:E8:DD:F0:22:9A:1B:06:84:6A:74
ValidityFri, 09 Dec 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (366), with no line terminators
Size
345 B (345 bytes)
Hash
e2baf042a9a11b6755899d872dcbfa5f
5edbdda30ad4132925ada5da32aaa2e1b4f44aa5
c545306f425defe3352904647c65a0129934a8f3608fa1d6d194580b2fb6ded5

HTTP Headers

GET /api/1.0/ping/pong?location=http%3A%2F%2Fntn.giveawayprize.site%2Fc%2F4d060de0a5b5a703%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__ HTTP/1.1
Host: stormtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ntn.giveawayprize.site
Connection: keep-alive
Referer: http://ntn.giveawayprize.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 19 Apr 2023 07:01:32 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5EtWb87j1U6G6WJptGM1vH0Yk6Zre665%2Fe7BHz5e1WMYWHpeQVciF8OFDsgSJCXty8CbDhbU%2BdyqYjQ9qwG3WN%2BsheetXzbmlh9zuS%2BwrF0QgyeK7J72zo8txMU8UA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ba346dcc84bb524-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML