Report - partivers-acting.icu/905ceef2-54f7-4f56-8d21-6e6b432a8091

Report Overview

Submitted URL
partivers-acting.icu/905ceef2-54f7-4f56-8d21-6e6b432a8091
IP
18.193.209.105
ASN
#16509 AMAZON-02
Submitted
2023-06-07 05:55:15
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
adzappy.go2cloud.org	unknown	2010-10-28	2018-09-27	2022-06-17	545 B	788 B	52.210.2.133
ads.clickv1.com	unknown	2018-03-03	2020-08-02	2023-06-06	1.0 kB	911 B	34.250.4.239
partivers-acting.icu	unknown	2020-06-30	2020-07-17	2023-06-06	513 B	849 B	18.193.209.105

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-07 05:54:58	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .icu Domain
2023-06-07 05:54:58	medium	Client IP	18.193.209.105	ET INFO Suspicious Domain (*.icu) in TLS SNI

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	partivers-acting.icu/905ceef2-54f7-4f56-8d21-6e6b432a8091	18.193.209.105	302 Found	0 B
URL User Request GET HTTP/2 partivers-acting.icu/905ceef2-54f7-4f56-8d21-6e6b432a8091 IP 18.193.209.105:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subjectpartivers-acting.icu Fingerprint5B:06:E6:5B:8A:B5:74:46:07:D2:DF:80:EC:BB:6C:B1:A4:C1:64:46 ValidityTue, 06 Jun 2023 05:52:12 GMT - Mon, 04 Sep 2023 05:52:11 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /905ceef2-54f7-4f56-8d21-6e6b432a8091 HTTP/1.1 Host: partivers-acting.icu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found server: nginx date: Wed, 07 Jun 2023 05:54:58 GMT content-length: 0 cache-control: no-store, no-cache, pre-check=0, post-check=0 expires: Thu, 01 Jan 1970 00:00:00 GMT location: https://adzappy.go2cloud.org/aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu pragma: no-cache set-cookie: 905ceef2-54f7-4f56-8d21-6e6b432a8091-v4=pMIcH-J_zyJTgqFxZ92zSPTmLJLurrOY2jNYHqrYpHQ; Max-Age=86400; Expires=Thu, 08-Jun-2023 05:54:58 GMT; Domain=partivers-acting.icu; Path=/; Secure; HttpOnly;SameSite=None cc-v4=poBsDyIxizkydznTVSIiTx40sWsxqt7X80M06q9dzOqMV9M3cp4Rb1Wf9A4kJV7bZHhFLDMJzaj3q7zXPP3HyV1lLlJ4floSe598NkOFV1QwGTlJ3wfQONYbneggHMYVTC0pC%2B3iiBGObNlqcTiGWw%3D%3D; Max-Age=31536000; Expires=Thu, 06-Jun-2024 05:54:58 GMT; Domain=partivers-acting.icu; Path=/; Secure; HttpOnly;SameSite=None X-Firefox-Spdy: h2

	adzappy.go2cloud.org/aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu	52.210.2.133	302 Found	284 B
URL User Request GET HTTP/1.1 adzappy.go2cloud.org/aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu IP 52.210.2.133:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subject.go2cloud.org Fingerprint5B:28:59:EA:4F:D9:54:04:B5:4C:7A:0B:6D:93:DF:D5:1B:00:BD:90 ValidityTue, 21 Feb 2023 00:00:00 GMT - Thu, 21 Mar 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 284 B (284 bytes) Hash 8817a620da78b5742cd60d44e1520d0c 9059d4d2a21fab9c1aead74f2920e6876c15139e b5da0295d5f10829e4637a52b9bee4fb333a42fd287994bfefe9e8113cb8ea3f HTTP Headers GET /aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu HTTP/1.1 Host: adzappy.go2cloud.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 302 Found Server: nginx Date: Wed, 07 Jun 2023 05:54:59 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 284 Connection: keep-alive Cache-Control: no-cache, no-store, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Location: https://ads.clickv1.com/aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu Pragma: no-cache Access-Control-Allow-Origin: X-Request-Id: 3e578fd714b209a9f947fb06cbb12e24 Access-Control-Allow-Headers: Tune-SDK-Version`

	ads.clickv1.com/aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu	34.250.4.239	200 OK	0 B
URL User Request GET HTTP/1.1 ads.clickv1.com/aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu IP 34.250.4.239:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectads.clickv1.com Fingerprint5C:DD:59:89:09:F6:A4:D9:B4:78:40:F1:B8:36:3B:14:5C:C4:14:24 ValiditySat, 06 May 2023 00:00:00 GMT - Mon, 03 Jun 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu HTTP/1.1 Host: ads.clickv1.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx Date: Wed, 07 Jun 2023 05:54:59 GMT Content-Length: 0 Connection: keep-alive Cache-Control: no-cache, no-store, must-revalidate Expires: Sat, 26 Jul 1997 05:00:00 GMT Pragma: no-cache Tracking_id: 10258410c1d3dd9a41005647177268 X-Robots-Tag: noindex, nofollow Access-Control-Allow-Origin: * X-Request-Id: f7b651169e012657a9b10dcf19107cd9 Access-Control-Allow-Headers: Tune-SDK-Version`

	ads.clickv1.com/favicon.ico	34.250.4.239	200 OK	0 B
URL GET HTTP/1.1 ads.clickv1.com/favicon.ico IP 34.250.4.239:443 ASN #16509 AMAZON-02 Requested by https://ads.clickv1.com/aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu Certificate IssuerAmazon Subjectads.clickv1.com Fingerprint5C:DD:59:89:09:F6:A4:D9:B4:78:40:F1:B8:36:3B:14:5C:C4:14:24 ValiditySat, 06 May 2023 00:00:00 GMT - Mon, 03 Jun 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: ads.clickv1.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://ads.clickv1.com/aff_c?offer_id=637&aff_id=1343&aff_click_id=wmsqro43t5r5lt8p29d7kubu Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Wed, 07 Jun 2023 05:54:59 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: keep-alive Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Etag: "0-5fd2dae3ad480" Expires: Sat, 26 Jul 1997 05:00:00 GMT Last-Modified: Fri, 02 Jun 2023 23:12:02 GMT Pragma: no-cache Access-Control-Allow-Origin: * X-Request-Id: 077849113bd770d0557934e43a59c70b Access-Control-Allow-Headers: Tune-SDK-Version`