romele.ru/cl/225c507b0693290b
104.21.69.131302 Found 0 B URL User Request GET HTTP/2 romele.ru/cl/225c507b0693290b
IP 104.21.69.131:443
Certificate IssuerGoogle Trust Services LLC
Subjectromele.ru
FingerprintA0:E3:DF:56:00:07:0C:06:BB:B1:42:75:94:EB:E2:8C:E6:5A:84:86
ValidityMon, 24 Apr 2023 01:02:39 GMT - Sun, 23 Jul 2023 01:02:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /cl/225c507b0693290b HTTP/1.1
Host: romele.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 04 May 2023 12:44:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 04 May 2023 13:44:51 GMT
Location: https://romele.ru/cl/225c507b0693290b
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vJ6HQbbAypQF%2FpgxC3hKinHmCOtS%2FzqFYzbHkntcN6BqnMm%2FL%2BEQctMldF9JsjFMjd%2BD0V7p5aYl2nqnNYfsQy54eTb0x1liEXH4GEZ0rukZnZFFr0G6a8eSDXY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7c20d6661a5db503-OSL
alt-svc: h2=":443"; ma=60
fometrust.com/?cat=3&groupds=104&clientId=519&productId=1727&publisher_id=301861&tracking=4548176073
185.32.28.133200 OK 28 kB URL User Request GET HTTP/1.1 fometrust.com/?cat=3&groupds=104&clientId=519&productId=1727&publisher_id=301861&tracking=4548176073
IP 185.32.28.133:443
ASN #15699 OGIC Informatica S.L.
Certificate IssuerLet's Encrypt
Subjectfometrust.com
Fingerprint25:7F:59:13:E2:1D:63:3C:0D:BF:32:22:8A:16:9E:53:E2:65:18:D0
ValiditySun, 09 Apr 2023 03:11:07 GMT - Sat, 08 Jul 2023 03:11:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (13393)
Hash dc77a0383a9107cb37a997d3a28bf64d
e703f11bb7b0cf0518fb3acc988e8d31be3c6aa0
92ae86bcc09a99846cc12c13920e42096a82db3c38f1aaf535a96aa8c9d36434
GET /?cat=3&groupds=104&clientId=519&productId=1727&publisher_id=301861&tracking=4548176073 HTTP/1.1
Host: fometrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 04 May 2023 12:44:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: redirect_user_data=%7B%22country%22%3A%22NO%22%2C%22city%22%3Anull%2C%22isp%22%3A%22blix+solutions%22%2C%22netspeed%22%3A%22%22%7D; expires=Thu, 04-May-2023 12:54:51 GMT; Max-Age=600
_tracker_ikangoo=a%3A5%3A%7Bs%3A4%3A%22_key%22%3Bs%3A7%3A%22IKPANEL%22%3Bs%3A6%3A%22_subid%22%3Bs%3A16%3A%225002131243920626%22%3Bs%3A8%3A%22_country%22%3Bs%3A2%3A%22NO%22%3Bs%3A4%3A%22_isp%22%3Bs%3A14%3A%22blix+solutions%22%3Bs%3A5%3A%22_time%22%3Bi%3A1683204291%3B%7D; expires=Thu, 04-May-2023 12:46:51 GMT; Max-Age=120
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
fometrust.com/assets/js/backlink_back_button.js
185.32.28.133200 OK 632 B URL GET HTTP/1.1 fometrust.com/assets/js/backlink_back_button.js
IP 185.32.28.133:443
ASN #15699 OGIC Informatica S.L.
Requested by https://fometrust.com/?cat=3&groupds=104&clientId=519&productId=1727&publisher_id=301861&tracking=4548176073
Certificate IssuerLet's Encrypt
Subjectfometrust.com
Fingerprint25:7F:59:13:E2:1D:63:3C:0D:BF:32:22:8A:16:9E:53:E2:65:18:D0
ValiditySun, 09 Apr 2023 03:11:07 GMT - Sat, 08 Jul 2023 03:11:06 GMT
Hash 7c847657cd58fd5f3b656c5dd486808a
54781827b08eb75f27786b20bfded403c3117a69
b1b1b5affe702bae9e97deabbdb3f19bcf8f12a1ddd410ff189c61c3bc159c06
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/backlink_back_button.js HTTP/1.1
Host: fometrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fometrust.com/?cat=3&groupds=104&clientId=519&productId=1727&publisher_id=301861&tracking=4548176073
Cookie: redirect_user_data=%7B%22country%22%3A%22NO%22%2C%22city%22%3Anull%2C%22isp%22%3A%22blix+solutions%22%2C%22netspeed%22%3A%22%22%7D; _tracker_ikangoo=a%3A5%3A%7Bs%3A4%3A%22_key%22%3Bs%3A7%3A%22IKPANEL%22%3Bs%3A6%3A%22_subid%22%3Bs%3A16%3A%225002131243920626%22%3Bs%3A8%3A%22_country%22%3Bs%3A2%3A%22NO%22%3Bs%3A4%3A%22_isp%22%3Bs%3A14%3A%22blix+solutions%22%3Bs%3A5%3A%22_time%22%3Bi%3A1683204291%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 04 May 2023 12:44:51 GMT
Content-Type: application/javascript
Content-Length: 632
Last-Modified: Mon, 28 Nov 2022 14:36:49 GMT
Connection: keep-alive
ETag: "6384c781-278"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Accept-Ranges: bytes