| best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown | 103.224.182.247 | 302 Found | 2 B |
URL User Request GET HTTP/1.1best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown IP103.224.182.247:443 ASN#133618 Trellian Pty. Limited
CertificateIssuerLet's Encrypt Subjectftvpn.net FingerprintA0:F8:64:B4:80:2E:A8:AB:5D:34:AC:C9:F6:3B:35:17:DC:B8:39:8A ValidityThu, 02 May 2024 15:44:19 GMT - Wed, 31 Jul 2024 15:44:18 GMT
Hashe1c06d85ae7b8b032bef47e42e4c08f9 71853c6197a6a7f222db0f1978c7cb232b87c5ee 75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown HTTP/1.1
Host: best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Sun, 05 May 2024 16:37:49 GMT
server: Apache
set-cookie: __tad=1714927069.3973142; expires=Wed, 03-May-2034 16:37:49 GMT; Max-Age=315360000
location: http://ww16.best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown&sub1=20240506-0237-496a-aa7f-3c0f13cb5234
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
|
| ww16.best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown&sub1=20240506-0237-496a-aa7f-3c0f13cb5234 | 64.190.63.136 | 200 OK | 7.2 kB |
URL User Request GET HTTP/1.1ww16.best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown&sub1=20240506-0237-496a-aa7f-3c0f13cb5234 IP64.190.63.136:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (9597) Hashb26ba868d431114471931705fc74d2c1 36209d33a55cd607ae981e3e88ac7ca656c4a61e 8c9b5030cea575d3622b31e47d96ec813f8b8185e194e9e40e7fc0dd07d3e002
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown&sub1=20240506-0237-496a-aa7f-3c0f13cb5234 HTTP/1.1
Host: ww16.best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sun, 05 May 2024 16:37:50 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.17
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_dPX3i88kLc4D5ASuCIkVWBLh7wOKhWwlKfiHoZdA7/EK5YfiCjQFXwH/mS5eoHkzktN8qhhGb2VYMNnZid7tiA==
last-modified: Sun, 05 May 2024 16:37:49 GMT
x-cache-miss-from: parking-7cbf88ff6b-bsk5t
server: NginX
content-encoding: gzip
|
| ww16.best-targeted-traffic.com/search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTcxNDkyNzA3MDA2NjY0NzJhMmFmMGEzYzFjNTA1NjA3MmJmYzNhMThi&crc=96804eac4b8ba73b34c902fb2a4cd27b50a40272&cv=1 | 64.190.63.136 | 200 OK | 0 B |
URL GET HTTP/1.1ww16.best-targeted-traffic.com/search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTcxNDkyNzA3MDA2NjY0NzJhMmFmMGEzYzFjNTA1NjA3MmJmYzNhMThi&crc=96804eac4b8ba73b34c902fb2a4cd27b50a40272&cv=1 IP64.190.63.136:80
Requested byhttp://ww16.best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown&sub1=20240506-0237-496a-aa7f-3c0f13cb5234
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTcxNDkyNzA3MDA2NjY0NzJhMmFmMGEzYzFjNTA1NjA3MmJmYzNhMThi&crc=96804eac4b8ba73b34c902fb2a4cd27b50a40272&cv=1 HTTP/1.1
Host: ww16.best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww16.best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown&sub1=20240506-0237-496a-aa7f-3c0f13cb5234
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sun, 05 May 2024 16:37:50 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.17
x-cache-miss-from: parking-7cbf88ff6b-w8ldc
server: NginX
|
| img.sedoparking.com/templates/bg/arrows-1-colors-3.png | 205.234.175.175 | 200 OK | 82 kB |
URL GET HTTP/1.1img.sedoparking.com/templates/bg/arrows-1-colors-3.png IP205.234.175.175:80
Requested byhttp://ww16.best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown&sub1=20240506-0237-496a-aa7f-3c0f13cb5234
File typePNG image data, 3024 x 2000, 8-bit/color RGBA, non-interlaced Hashb68c0210cadb1e12efc4557d7e49e48e ad24ed2b2d5d166d07fbf0680693c88fb56fcb4b e7ff091c85669b175de49d629d7d77bd20cd08d2c16ae74deef2ab06aec5854d
GET /templates/bg/arrows-1-colors-3.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww16.best-targeted-traffic.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 16:37:50 GMT
Content-Type: image/png
Content-Length: 82231
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Sun, 12 May 2024 16:37:50 GMT
X-CFHash: "b68c0210cadb1e12efc4557d7e49e48e"
X-CFF: B
Last-Modified: Wed, 22 Apr 2020 09:38:21 GMT
X-CF3: H
CF4Age: 910155
x-cf-tsc: 1711587909
CF4ttl: 30625844.000
X-CF2: H
Server: CFS 1124
X-CF-ReqID: 042ec2ca9e78ecfe3176e419ee49e078
X-CF1: 11696:fD.arn1:cf:nom:cacheN.arn1-01:H
Accept-Ranges: bytes
|
| img.sedoparking.com/templates/logos/sedo_logo.png | 205.234.175.175 | 200 OK | 15 kB |
URL GET HTTP/1.1img.sedoparking.com/templates/logos/sedo_logo.png IP205.234.175.175:80
Requested byhttp://ww16.best-targeted-traffic.com/install.php?unq=5n52491839mwpmdgr&version=1.7&pais=Unknown&sub1=20240506-0237-496a-aa7f-3c0f13cb5234
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashdef00c11b1596db4efee6a9fbe64fc27 bd298981e6d8d7e4ffa18abcf687041f4246672d 95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4
GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww16.best-targeted-traffic.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 16:37:50 GMT
Content-Type: image/png
Content-Length: 15086
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Sun, 12 May 2024 16:37:50 GMT
X-CFHash: "def00c11b1596db4efee6a9fbe64fc27"
X-CFF: B
Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT
X-CF3: H
CF4Age: 21299
x-cf-tsc: 1711144658
CF4ttl: 31514700.000
X-CF2: H
Server: CFS 1124
X-CF-ReqID: 05109a176a5142140f427becd4d438c4
X-CF1: 11696:fD.arn1:cf:nom:cacheN.arn1-01:H
Accept-Ranges: bytes
|