Report - p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

Report Overview

Submitted URL
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
IP
75.2.18.233
ASN
#16509 AMAZON-02
Submitted
2023-06-04 10:13:57
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info	unknown	unknown	No data	No data	4.4 kB	17 kB	75.2.18.233
www.google.com	7	1997-09-15	2015-05-10	2023-06-02	2.8 kB	112 kB	142.250.74.132
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-03	666 B	1.4 kB	142.250.74.131
d38psrni17bvxu.cloudfront.net	unknown	2008-04-25	2022-09-22	2023-06-03	505 B	12 kB	54.230.245.22
d1lxhc4jvstzrp.cloudfront.net	unknown	2008-04-25	2020-12-02	2023-06-03	575 B	12 kB	54.230.245.166

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator
2023-06-04	medium	rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
2023-06-04	medium	rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
2023-06-04	medium	rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
2023-06-04	medium	rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
2023-06-04	medium	rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
2023-06-04	medium	rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
2023-06-04	medium	rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	968 B	2023-03-08	2024-04-26
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:24:08 Last Seen2024-04-26 21:34:04 Times Seen27738 Hash c77554570ae0fa8e4fb31747dc213058 e989fbde07e6a68975c7a31e1d4df76afd90b96f c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77 Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	784 B	2023-06-04	2023-06-04
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-04 12:14:04 Last Seen2023-06-04 12:14:04 Times Seen1 Hash 81d4e2ddf9674545ee35d3c5a184748f 6c04e53888810e79e382223002db16fb29945463 28a6927041705e8cfe5a6bc522e01eba6bca4145fcb15974aa650636396a7687 Loading...

	www.google.com/adsense/domains/caf.js?abp=1	148 kB	2023-06-02	2023-06-06
Pretty URL www.google.com/adsense/domains/caf.js?abp=1 IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-02 04:50:53 Last Seen2023-06-06 00:07:54 Times Seen20 Hash f53a5c8aa4dbefb2d20ff24ae8d54692 c6939084be66ec515eefc9571b2cd3a48c0d13f6 d78d0d3d3451462c0c6f7cc4bf2cbbf2fb9d98269d66caf390cfb901b1b65044 Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	246 B	2023-06-04	2023-06-04
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-04 12:14:04 Last Seen2023-06-04 12:14:04 Times Seen1 Hash ea17249185ee9814e14030de800642eb 7bc09eae8da7b16f441c464d67f3b4bbb2d057f8 5e7d31c52c59585a304c9f444f9cd50726746dc37952153102bb7bb2f8b3d0fb Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	7.0 kB	2023-03-13	2024-01-03
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 06:10:31 Last Seen2024-01-03 14:22:39 Times Seen25920 Hash 04b2b624f94797c26d17a57f399d9356 3143986e839c47a5c1eff03bd9df63ecc54dca9c 233b1cbfb295a0629bcf68a2a4198a62132f02ee1f061ada2ce7143bd5d2dabb Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	1.4 kB	2023-06-04	2023-06-04
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-04 12:14:04 Last Seen2023-06-04 12:14:04 Times Seen1 Hash 09adfada319b57ca85386e2e2975e1b7 ba13e10bfc46d1aa9e6acdec9cc1af479017f611 1135ae6cc34d9f242edf2d00ebd9458f10f310f17d4e0dcebad847eea7dbec7c Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	20 B	2023-03-12	2024-01-03
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 13:00:05 Last Seen2024-01-03 14:22:39 Times Seen13851 Hash bb9472ed191ad69435d630c50e139a17 4efa10c70dbfe37ec4c8bb5a04b907c549de7e3d eec645c8d410f4d6accc5c4c3326bbff80fdd9d105e423ad50c5c87b22845492 Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	65 B	2023-03-12	2023-10-31
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 13:50:53 Last Seen2023-10-31 06:44:41 Times Seen2161 Hash 62fb68db3a7f1a5728e00eebc88621bd 69f165691e40c4ceb9bc5fe70dbf0139826eebb6 52910149dd73101c1716a6cb4805c6c8475976be06768a9851776f79b3c45cae Loading...

	www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDdjNjNkNzdjYjU3fHx8MTY4NTg3MzYyMy41MTY3fDI4ODM4MjI4MjYzZGViMWNiNzJjMmEyMmU4OWI4MTMzYWM0NjcxM2V8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI3MDQ2MjVlMjhiMWFkMTYyY2QzNTBjZjIzNDVkODcwMDQzMzI3NTB8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=7351685873623455&num=0&output=afd_ads&domain_name=p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1685873623457&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=840&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2FVERSION.TXT&adbw=master-1%3A530	6.6 kB	2023-06-04	2023-06-04
Pretty URL www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDdjNjNkNzdjYjU3fHx8MTY4NTg3MzYyMy41MTY3fDI4ODM4MjI4MjYzZGViMWNiNzJjMmEyMmU4OWI4MTMzYWM0NjcxM2V8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI3MDQ2MjVlMjhiMWFkMTYyY2QzNTBjZjIzNDVkODcwMDQzMzI3NTB8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=7351685873623455&num=0&output=afd_ads&domain_name=p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1685873623457&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=840&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2FVERSION.TXT&adbw=master-1%3A530 IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-04 12:14:04 Last Seen2023-06-04 12:14:04 Times Seen1 Hash b8a0c0e1718b2e354c1e4084e3cb6fac 76482086b655b86f254c49b6f9179627a4343fee 41e9c94f41ad5ba42b5e37f7d587542d03882c4842408f30a0033cf31b0d638d Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	472 B	2023-03-13	2024-01-03
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 06:13:46 Last Seen2024-01-03 14:22:39 Times Seen25251 Hash d31eefc1e54bdae9204297e4ae5b9cce fc49bf319586a623670a81c01d43bbd93b477fbb 2683a6247a15433dd269eaefbc7131b1326c7bc0146361913ea10ad8fa23bb14 Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	669 B	2023-06-04	2023-06-04
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-04 12:14:04 Last Seen2023-06-04 12:14:04 Times Seen1 Hash d7c72dcd347ebfe88425638c51450a89 e978355995bcf5d8d3ae6e8b6364e24bac61c365 e32c207cc0c168074561980568dc0d316ba7d619d76a9ab146d4ce157ce9ee07 Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	40 B	2023-04-18	2023-06-27
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-18 09:10:37 Last Seen2023-06-27 14:44:07 Times Seen10821 Hash bcdb5f35f5da29644017c63a72a72921 5bd1c81154b546c01c88b02fdb29b687f0c9cef3 a71d2bc0274b66fc2cb2c8daf1bf8b8a6a4cbfd5bd1e30574e9abb61aa9c3983 Loading...

	p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT	71 B	2023-03-08	2024-01-04
Pretty URL p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT IP 75.2.18.233 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:23:53 Last Seen2024-01-04 08:38:22 Times Seen25410 Hash 1a5a5e1b6a26f57b95e3dd42f60612f4 b62a27e55a59b49084e682bd3c1588f6a40881ab 4066da16910907c7962da8e7011bf0cd62b6f2dcddb1911e3ea2de03ce3e1dc7 Loading...

	www.google.com/adsense/domains/caf.js	148 kB	2023-05-31	2023-06-06
Pretty URL www.google.com/adsense/domains/caf.js IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-31 17:06:42 Last Seen2023-06-06 14:33:34 Times Seen204 Hash f0126695646d0a0d73f18bfc200affe7 3d726bbd9bc267127db5fbd6b54cbba9ad2b5db1 c98c8343731a4fbda6a0e467ee26ae287d55fc12ee9b64648c1d666cf065a0f7 Loading...

HTTP Transactions (14)

URL IP Response Size

p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/

75.2.18.233

6.3 kB

URL
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/
IP
75.2.18.233:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1484)
Size
6.3 kB (6301 bytes)
Hash
d10460ea89eb9c5e7a87375cb374264f
b9466a36153bf245a22cc1d95c7d6aecb0677a66
513fd483467747a80f4b77d9b821fc74ce33847c59f73eade7dc14b6409e4e6f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 10:13:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_pjtVH5rLb7ZJm1zfLJPGiVplWjVVMXr8K/o8n/tbXBODRTNoZSmwOo3IYj5FEAdXpckkquYCYlBqnafBU7Eipw==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
X-Subdomain: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-
Content-Encoding: gzip

p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

75.2.18.233

200 OK

6.3 kB

URL User Request GET HTTP/1.1
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
IP
75.2.18.233:80
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1484)
Size
6.3 kB (6293 bytes)
Hash
072528da8a3b57602dd1f1e8f1c1ecc8
5c6290f396969610c852f9dc50f91a71756d7b17
b8756be02475d9a46d71db580bd35ab671c90576528dcfdd1318b704e8182250

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /VERSION.TXT HTTP/1.1
Host: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 10:13:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_NCh/E/kRdIylla2CxGtxTf+OhPaGxKG8Jjy3aIAPCJyv62rBmviJGt8hkP2vcQag3V9R20kWKGPJ3A1LcUTvEg==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
X-Subdomain: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-
Content-Encoding: gzip

www.google.com/adsense/domains/caf.js?abp=1

142.250.74.132

200 OK

54 kB

URL GET HTTP/1.1
www.google.com/adsense/domains/caf.js?abp=1
IP
142.250.74.132:80
ASN
#15169 GOOGLE

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

File type
ASCII text, with very long lines (2125)
Size
54 kB (53996 bytes)
Hash
f53a5c8aa4dbefb2d20ff24ae8d54692
c6939084be66ec515eefc9571b2cd3a48c0d13f6
d78d0d3d3451462c0c6f7cc4bf2cbbf2fb9d98269d66caf390cfb901b1b65044

HTTP Headers

GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Sun, 04 Jun 2023 10:13:43 GMT
Expires: Sun, 04 Jun 2023 10:13:43 GMT
Cache-Control: private, max-age=3600
ETag: "2258324624677236813"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0

p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&toggle=browserjs&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D

75.2.18.233

200 OK

20 B

URL GET HTTP/1.1
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&toggle=browserjs&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D
IP
75.2.18.233:80
ASN
#16509 AMAZON-02

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

File type
gzip compressed data, max speed, from Unix\012- data
Size
20 B (20 bytes)
Hash
a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&toggle=browserjs&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D HTTP/1.1
Host: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 10:13:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
0f9b480992f630430e33e1063b414542
bcaedb7914f5c0069c7f4187dad0ae8a4e2d94d9
bfcc73247d3e026090d69a4b8348f2a506fa1f8eb40fbd2e709482b7f5c5b750

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 10:13:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/ls.php?t=647c63d7&token=b704625e28b1ad162cd350cf2345d87004332750

75.2.18.233

201 Created

16 B

URL GET HTTP/1.1
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/ls.php?t=647c63d7&token=b704625e28b1ad162cd350cf2345d87004332750
IP
75.2.18.233:80
ASN
#16509 AMAZON-02

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

File type
JSON data\012- , ASCII text, with no line terminators
Size
16 B (16 bytes)
Hash
7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /ls.php?t=647c63d7&token=b704625e28b1ad162cd350cf2345d87004332750 HTTP/1.1
Host: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 201 Created
Date: Sun, 04 Jun 2023 10:13:44 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 647c63d82131d87470363fbe
Charset: utf-8
Access-Control-Allow-Origin: 
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_rz4LLtzDCMcRVYyLVMxNFyAzRp1wILjbaKAR6Ibi5vLDaJ9bapmucaSlZPdc5M+hGFD6O12HV3TLsKZYpkAHcA==

d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png

54.230.245.22

200 OK

11 kB

URL GET HTTP/1.1
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
54.230.245.22:80
ASN
#16509 AMAZON-02

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

File type
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Size
11 kB (11375 bytes)
Hash
0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865

HTTP Headers

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Sun, 04 Jun 2023 01:25:07 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nmifGrsde8ilW1dBSyLRE59wY9yHPYUMipLCwyynaYeWqfJiyHFfLw==
Age: 31717

d1lxhc4jvstzrp.cloudfront.net/themes/registrar/images/logo_dynadot3.png

54.230.245.166

200 OK

12 kB

URL GET HTTP/2
d1lxhc4jvstzrp.cloudfront.net/themes/registrar/images/logo_dynadot3.png
IP
54.230.245.166:443
ASN
#16509 AMAZON-02

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT

File type
PNG image data, 512 x 360, 8-bit/color RGBA, non-interlaced\012- data
Size
12 kB (11597 bytes)
Hash
3489ddefcbe1d2740a2c19d68ed0036d
c5002e2bc054d41b2b8b5bf71f42b1ea5925bec0
5688485453df1fb693d1c7c401075db22569dbe607dbcddd2cb2cba84d2a98a1

HTTP Headers

GET /themes/registrar/images/logo_dynadot3.png HTTP/1.1
Host: d1lxhc4jvstzrp.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 11597
server: nginx
date: Sun, 04 Jun 2023 00:13:51 GMT
last-modified: Mon, 15 Mar 2021 08:16:37 GMT
accept-ranges: bytes
etag: "604f17e5-2d4d"
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o6ZHk2rR_9j6b-ypHrQWssJiqQcojnZF1fa3rK7emL4NTEihkW-zuQ==
age: 35993
X-Firefox-Spdy: h2

www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDdjNjNkNzdjYjU3fHx8MTY4NTg3MzYyMy41MTY3fDI4ODM4MjI4MjYzZGViMWNiNzJjMmEyMmU4OWI4MTMzYWM0NjcxM2V8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI3MDQ2MjVlMjhiMWFkMTYyY2QzNTBjZjIzNDVkODcwMDQzMzI3NTB8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=7351685873623455&num=0&output=afd_ads&domain_name=p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1685873623457&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=840&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2FVERSION.TXT&adbw=master-1%3A530

142.250.74.132

200 OK

2.1 kB

URL GET HTTP/2
www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDdjNjNkNzdjYjU3fHx8MTY4NTg3MzYyMy41MTY3fDI4ODM4MjI4MjYzZGViMWNiNzJjMmEyMmU4OWI4MTMzYWM0NjcxM2V8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI3MDQ2MjVlMjhiMWFkMTYyY2QzNTBjZjIzNDVkODcwMDQzMzI3NTB8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=7351685873623455&num=0&output=afd_ads&domain_name=p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1685873623457&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=840&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2FVERSION.TXT&adbw=master-1%3A530
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintA8:95:C3:CB:D6:3F:BC:0A:7D:FF:36:72:5E:2F:56:26:9F:EB:77:0E
ValidityFri, 19 May 2023 12:58:13 GMT - Fri, 11 Aug 2023 12:58:12 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5815)
Size
2.1 kB (2084 bytes)
Hash
624e4b45130914e89488cc92857e8bb5
cb5bd9036acd0eb78e809e86ca6266954e1836a0
bb752a016c52365610554563b0ba4ed938d989ea572619947bae3e8283b35ea3

HTTP Headers

GET /afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDdjNjNkNzdjYjU3fHx8MTY4NTg3MzYyMy41MTY3fDI4ODM4MjI4MjYzZGViMWNiNzJjMmEyMmU4OWI4MTMzYWM0NjcxM2V8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI3MDQ2MjVlMjhiMWFkMTYyY2QzNTBjZjIzNDVkODcwMDQzMzI3NTB8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=7351685873623455&num=0&output=afd_ads&domain_name=p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1685873623457&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=840&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2FVERSION.TXT&adbw=master-1%3A530 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sun, 04 Jun 2023 10:13:44 GMT
expires: Sun, 04 Jun 2023 10:13:44 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-74a11fHcktPtgsm0Z4RKvw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2084
x-xss-protection: 0
set-cookie: CONSENT=PENDING+840; expires=Tue, 03-Jun-2025 10:13:44 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/favicon.ico

75.2.18.233

200 OK

0 B

URL GET HTTP/1.1
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/favicon.ico
IP
75.2.18.233:80
ASN
#16509 AMAZON-02

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 10:13:44 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
ca359c54531ea823812a5abbcf85eb97
6c9d445dc87b58e70dfd8d80a15374667f9f0b4f
32015b73ad6385df42848ae288806993cab31ee8f210e61ac5d2857fa0d30805

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 10:13:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/adsense/domains/caf.js

142.250.74.132

200 OK

54 kB

URL GET HTTP/3
www.google.com/adsense/domains/caf.js
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDdjNjNkNzdjYjU3fHx8MTY4NTg3MzYyMy41MTY3fDI4ODM4MjI4MjYzZGViMWNiNzJjMmEyMmU4OWI4MTMzYWM0NjcxM2V8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI3MDQ2MjVlMjhiMWFkMTYyY2QzNTBjZjIzNDVkODcwMDQzMzI3NTB8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=7351685873623455&num=0&output=afd_ads&domain_name=p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1685873623457&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=840&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fp-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info%2FVERSION.TXT&adbw=master-1%3A530
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT

File type
ASCII text, with very long lines (2125)
Size
54 kB (53996 bytes)
Hash
f0126695646d0a0d73f18bfc200affe7
3d726bbd9bc267127db5fbd6b54cbba9ad2b5db1
c98c8343731a4fbda6a0e467ee26ae287d55fc12ee9b64648c1d666cf065a0f7

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sun, 04 Jun 2023 10:13:44 GMT
expires: Sun, 04 Jun 2023 10:13:44 GMT
cache-control: private, max-age=3600
etag: "7644709339552436961"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&caf=1&toggle=answercheck&answer=rejected&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D

75.2.18.233

200 OK

20 B

URL GET HTTP/1.1
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&caf=1&toggle=answercheck&answer=rejected&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D
IP
75.2.18.233:80
ASN
#16509 AMAZON-02

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

File type
gzip compressed data, max speed, from Unix\012- data
Size
20 B (20 bytes)
Hash
a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&caf=1&toggle=answercheck&answer=rejected&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D HTTP/1.1
Host: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 10:13:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: answercheck
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&caf=1&toggle=errorcode&code=22&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D

75.2.18.233

200 OK

0 B

URL GET HTTP/1.1
p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&caf=1&toggle=errorcode&code=22&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D
IP
75.2.18.233:80
ASN
#16509 AMAZON-02

Requested by
http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /track.php?domain=rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info&caf=1&toggle=errorcode&code=22&uid=MTY4NTg3MzYyMy41MTA4OjNhN2Y0Yzc5ZjVhOWQ3Mzk0MzIwNmU3NGYxNmZhZDJiNTZhODk3YjZjNGQyOTNiN2E1YTY1Njg4ZmIyMTA4ODY6NjQ3YzYzZDc3Y2I2ZQ%3D%3D HTTP/1.1
Host: p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p-1-e-g-h-v-0-k-b-f-9-8-b-1-l-j-2-5-5-a-a-c-u-k-3-w-3-i-5-6-t-.rb-e-e3-j-fi-1-il-h-il-3e-z-u-r-u-lk-h-wm-3-6-g-0o-s-dx.info/VERSION.TXT
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 10:13:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: errorcode
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML