Report - rule34video.arielfuuk.ru/

Report Overview

Visited public
2024-07-12 19:46:55
Tags
URL
rule34video.arielfuuk.ru/
Finishing URL
href.li/?runative-syndicate.com/api/v1/direct/0c83054d59f7412da4bd091bc04cb177?extid={extid}
IP / ASN
87.236.146.83
#62212 SmartApe OU
Title
href.li

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
href.li	36866	unknown	2012-05-22 14:39:06	2024-07-12 12:04:26	555 B	976 B	192.0.78.27
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-11 18:12:19	981 B	2.7 kB	23.36.76.249
rule34video.arielfuuk.ru	unknown	unknown	No data	No data	395 B	328 B	87.236.146.83
runative-syndicate.com	31587	2019-01-25	2019-03-19 13:21:36	2024-06-26 12:29:22	810 B	1.4 kB	195.201.244.188
u-9125.topduppy.info	unknown	unknown	No data	No data	660 B	1.2 kB	188.114.97.1
gstguj.com	unknown	2023-10-06	2023-10-06 15:34:21	2024-06-19 14:10:44	604 B	505 B	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-07-12 19:46:21	low	Client IP	192.0.78.27	ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.249		504 B
URL r10.o.lencr.org/ IP 23.36.76.249:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 4a4d81b1c193182fe2b1122877e94203 fd1f4427cb5867a8f63ae15825279827bbf768e6 4cd1772d378248e886ee96f55d956ff0856ba3f2eae9f15a10136e68f450ca70 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "4CD1772D378248E886EE96F55D956FF0856BA3F2EAE9F15A10136E68F450CA70" Last-Modified: Fri, 12 Jul 2024 11:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11153 Expires: Fri, 12 Jul 2024 22:52:14 GMT Date: Fri, 12 Jul 2024 19:46:21 GMT Connection: keep-alive`

	rule34video.arielfuuk.ru/	87.236.146.83	302 Found	0 B
URL User Request GET HTTP/1.1 rule34video.arielfuuk.ru/ IP 87.236.146.83:80 ASN #62212 SmartApe OU File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: rule34video.arielfuuk.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Server: nginx/1.24.0 (Ubuntu) Date: Fri, 12 Jul 2024 19:46:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Referrer-Policy: no-referrer Location: http://href.li/?http://runative-syndicate.com/api/v1/direct/0c83054d59f7412da4bd091bc04cb177?extid={extid}`

	runative-syndicate.com/api/v1/direct/0c83054d59f7412da4bd091bc04cb177?extid={extid}	195.201.244.188	302 Found	0 B
URL User Request GET HTTP/2 runative-syndicate.com/api/v1/direct/0c83054d59f7412da4bd091bc04cb177?extid={extid} IP 195.201.244.188:443 ASN #24940 Hetzner Online GmbH Certificate IssuerLet's Encrypt Subjectrunative-syndicate.com FingerprintAB:C7:2F:3D:BA:CB:F2:17:FA:0A:67:B5:5F:8B:F1:67:EF:AD:43:B5 ValiditySun, 30 Jun 2024 23:06:38 GMT - Sat, 28 Sep 2024 23:06:37 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /api/v1/direct/0c83054d59f7412da4bd091bc04cb177?extid={extid} HTTP/1.1 Host: runative-syndicate.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: nginx date: Fri, 12 Jul 2024 19:46:22 GMT content-length: 0 pragma: no-cache expires: 0 vary: * x-api-version: 2 location: https://u-9125.topduppy.info/api/rtb-pops/go?id=3061558223756713&sig=e343ae8c839c3d348ed562a8159c03&u=aHR0cHM6Ly9nc3RndWouY29tL2N1aGRsP3doPVhyQXZmV1VkY1Q2ZlVKRHNERXNxU2wtcSZjbGlja2lkPXtjbGlja19pZH0mc2kxPXtzdWJfaWR9 x-request-id: a9ea3cc9c65b37c2 set-cookie: ts_uid=64b476e0-3ce5-4b5b-a550-6200ca9f9a9e; expires=Sun, 12 Jan 2025 19:46:22 GMT; domain=.runative-syndicate.com; path=/; HttpOnly; secure; SameSite=None ts_last_click_id=ZUIED56PPE3yTNce_-s0VhKCRcDrApAvyPDMsFLl4EDZcAA4IAb_oK2v811zbeyCxgUkpQNzBNUy1ZR7XQqBrRM8DYfWcnxu_ACgiw_gUIDRUi; expires=Fri, 19 Jul 2024 19:46:22 GMT; domain=.runative-syndicate.com; path=/; HttpOnly; secure; SameSite=None cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform x-robots-tag: none, noindex, nofollow report-to: { "url": "https://pxl.runative-syndicate.com/api/v1/heavy-ad/report", "max_age": 86401 } X-Firefox-Spdy: h2

	u-9125.topduppy.info/api/rtb-pops/go?id=3061558223756713&sig=e343ae8c839c3d348ed562a8159c03&u=aHR0cHM6Ly9nc3RndWouY29tL2N1aGRsP3doPVhyQXZmV1VkY1Q2ZlVKRHNERXNxU2wtcSZjbGlja2lkPXtjbGlja19pZH0mc2kxPXtzdWJfaWR9	188.114.97.1	302 Found	0 B
URL User Request GET HTTP/2 u-9125.topduppy.info/api/rtb-pops/go?id=3061558223756713&sig=e343ae8c839c3d348ed562a8159c03&u=aHR0cHM6Ly9nc3RndWouY29tL2N1aGRsP3doPVhyQXZmV1VkY1Q2ZlVKRHNERXNxU2wtcSZjbGlja2lkPXtjbGlja19pZH0mc2kxPXtzdWJfaWR9 IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjecttopduppy.info Fingerprint22:39:87:A0:B7:0E:D5:BB:69:DF:ED:85:37:DD:6A:6C:C7:25:E2:FF ValiditySun, 19 May 2024 12:44:23 GMT - Sat, 17 Aug 2024 12:44:22 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /api/rtb-pops/go?id=3061558223756713&sig=e343ae8c839c3d348ed562a8159c03&u=aHR0cHM6Ly9nc3RndWouY29tL2N1aGRsP3doPVhyQXZmV1VkY1Q2ZlVKRHNERXNxU2wtcSZjbGlja2lkPXtjbGlja19pZH0mc2kxPXtzdWJfaWR9 HTTP/1.1 Host: u-9125.topduppy.info User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found date: Fri, 12 Jul 2024 19:46:22 GMT content-type: text/html; charset=UTF-8 location: https://gstguj.com/cuhdl?wh=XrAvfWUdcT6fUJDsDEsqSl-q&clickid=NnF6N3xkYXp8OWhjbXFufFcxb3FtZz09fDMwNjE1NTgyMjM3NTY3MTN8MA==&si1=3537333333383339395f3137323433 referrer-policy: no-referrer set-cookie: pop-u-id=a5ed0a6e450ab6228bdda831b9f31632a%3A2%3A%7Bi%3A0%3Bs%3A8%3A%22pop-u-id%22%3Bi%3A1%3Bs%3A33%3A%22dc26782a937912f526d0857215db6ed83%22%3B%7D; expires=Wed, 11-Jul-2029 19:46:22 GMT; Max-Age=157680000; path=/; HttpOnly; SameSite=None pop-u-uni-dc2678=d868806d8b779204f967f45534c862b0a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22pop-u-uni-dc2678%22%3Bi%3A1%3Bs%3A2%3A%22no%22%3B%7D; expires=Sat, 13-Jul-2024 19:46:22 GMT; Max-Age=86400; path=/; HttpOnly; SameSite=None cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpa03oLq6AFJ9XahQEnUPZY3%2B6HDlIMAOB3bTR1rBReUypjFL9kSH235pwT1%2FBrvpW0YkmNtNs%2By9bodMnESAOpwxXgmuo5NSMNbifIvkIqcchqKOFCrwCc%2BjfbeoCOiR%2BeCmzuAgQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 8a2389fa9a85b4fd-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	r10.o.lencr.org/	23.36.76.249		504 B
URL r10.o.lencr.org/ IP 23.36.76.249:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16674 Expires: Sat, 13 Jul 2024 00:24:17 GMT Date: Fri, 12 Jul 2024 19:46:23 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.249		504 B
URL r10.o.lencr.org/ IP 23.36.76.249:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16674 Expires: Sat, 13 Jul 2024 00:24:17 GMT Date: Fri, 12 Jul 2024 19:46:23 GMT Connection: keep-alive`

	runative-syndicate.com/	195.201.244.188		0 B
URL runative-syndicate.com/ IP 195.201.244.188:0 ASN #24940 Hetzner Online GmbH Certificate IssuerLet's Encrypt Subjectrunative-syndicate.com FingerprintAB:C7:2F:3D:BA:CB:F2:17:FA:0A:67:B5:5F:8B:F1:67:EF:AD:43:B5 ValiditySun, 30 Jun 2024 23:06:38 GMT - Sat, 28 Sep 2024 23:06:37 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: runative-syndicate.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 204 No Content Server: nginx Date: Fri, 12 Jul 2024 19:46:25 GMT Connection: keep-alive X-Request-Id: 6ee041dcfb70fe7d Cache-Control: no-transform X-Robots-Tag: none, noindex, nofollow Report-To: { "url": "https://pxl.runative-syndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }`

	gstguj.com/cuhdl?wh=XrAvfWUdcT6fUJDsDEsqSl-q&clickid=NnF6N3xkYXp8OWhjbXFufFcxb3FtZz09fDMwNjE1NTgyMjM3NTY3MTN8MA==&si1=3537333333383339395f3137323433	188.114.97.1	204 No Content	0 B
URL User Request GET HTTP/2 gstguj.com/cuhdl?wh=XrAvfWUdcT6fUJDsDEsqSl-q&clickid=NnF6N3xkYXp8OWhjbXFufFcxb3FtZz09fDMwNjE1NTgyMjM3NTY3MTN8MA==&si1=3537333333383339395f3137323433 IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectgstguj.com Fingerprint02:C4:E1:C6:38:AE:04:30:8B:40:70:06:E4:CB:2C:4C:DE:1E:05:53 ValidityWed, 29 May 2024 20:38:56 GMT - Tue, 27 Aug 2024 20:38:55 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cuhdl?wh=XrAvfWUdcT6fUJDsDEsqSl-q&clickid=NnF6N3xkYXp8OWhjbXFufFcxb3FtZz09fDMwNjE1NTgyMjM3NTY3MTN8MA==&si1=3537333333383339395f3137323433 HTTP/1.1 Host: gstguj.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 204 No Content date: Fri, 12 Jul 2024 19:46:22 GMT cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1tF0n7lYr8gCXMsuupxmYpiz15yuAULCle0%2BYGZJBBgjo4oxIAD2Y%2FWs%2BtWbEs5Bc45r1vE1W%2BNghZvMb7CYeRdMD1cufHQVXwLyE738rSIfVINZVCKdSx2mFEOo"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 8a2389fb795756bd-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`

	href.li/?http://runative-syndicate.com/api/v1/direct/0c83054d59f7412da4bd091bc04cb177?extid={extid}	192.0.78.27	200 OK	704 B
URL User Request GET HTTP/2 href.li/?http://runative-syndicate.com/api/v1/direct/0c83054d59f7412da4bd091bc04cb177?extid={extid} IP 192.0.78.27:443 ASN #2635 AUTOMATTIC Certificate IssuerLet's Encrypt Subjecttls.automattic.com Fingerprint0E:CF:31:C9:F4:E9:37:33:F9:7D:3E:1F:0B:E7:17:48:2B:0A:F4:80 ValiditySun, 07 Jul 2024 00:30:51 GMT - Sat, 05 Oct 2024 00:30:50 GMT File type HTML document, ASCII text, with very long lines (735), with no line terminators Size 704 B (704 bytes) Hash b5b1694142aa9b18a9f328a279e60bb7 c998cc1e9f48d6b706f5e16458f3ef5261046784 32ebbd19f7e819f86b1c1181bfb6a81023ff81e0ec0775455bea1c08c570012f HTTP Headers GET /?http://runative-syndicate.com/api/v1/direct/0c83054d59f7412da4bd091bc04cb177?extid={extid} HTTP/1.1 Host: href.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Fri, 12 Jul 2024 19:46:21 GMT content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000 vary: Accept-Encoding content-encoding: br x-ac: 3.arn _dca MISS alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size