Report Overview
Visitedpublic
2026-02-12 21:19:55
Tags
Submit Tags
URL
resorttravelclub.com.co
Finishing URL
dexchangegenius.com/jump/next.php?r=9700482&pub_clickid=57c239f5f84a4c5ab7c6918a97c65daa28c5b&sub1=32606&sub2=12684244
IP / ASN
5.79.68.110
Title
dexchangegenius.com/jump/next.php?r=9700482&pub_clickid=57c239f5f84a4c5ab7c6918a97c65daa28c5b&sub1=32606&sub2=12684244
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
dexchangegenius.com 6 alert(s) on this Host | 628111 | 2018-03-05 | 2019-07-09 | 2026-02-07 | 2.9 kB | 14 MB |  188.114.97.1 |    |
rmut-glo.mywebsafety.com | unknown | 2024-10-02 | 2024-11-30 | 2026-02-10 | 1.3 kB | 14 MB |  63.180.58.121 |   |
resorttravelclub.com.co 3 alert(s) on this Host | unknown | unknown | 2020-03-01 | 2023-03-17 | 1.9 kB | 1.5 kB | 212.92.105.24 |   |
q1.quotes.com | 3978262 | 1997-05-20 | 2022-09-19 | 2026-02-12 | 952 B | 10 kB | 5.79.68.236 | |
my.toruftuiov.com 1 alert(s) on this Host | 956986 | 2020-09-30 | 2020-10-01 | 2026-02-08 | 767 B | 7.1 MB | 52.84.50.87 |   |
download.avastbrowser.com | unknown | 2015-04-07 | 2025-10-30 | 2026-02-08 | 587 B | 7.1 MB | 104.20.37.116 |  |
cddtsecure.com 2 alert(s) on this Host | 1696246 | 2021-12-08 | 2021-12-09 | 2026-02-06 | 527 B | 13 kB |  52.50.103.50 | |
Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Ubuntu (Operating systems)
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.Nginx:1.18.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Erlang (Programming languages)
Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.Cowboy (Web servers)
Cowboy is a small, fast, modular HTTP server written in Erlang.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.PHP:8.5.1 (Programming languages)
PHP is a general-purpose scripting language used for web development.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | dexchangegenius.com | malicious | Sinkholed |
| Cloudflare DNS | dexchangegenius.com | malicious | Sinkholed |
| DNS4EU | resorttravelclub.com.co | malicious | Sinkholed |
| Cloudflare DNS | my.toruftuiov.com | malicious | Sinkholed |
| Cloudflare DNS | cddtsecure.com | malicious | Sinkholed |
| DNS4EU | cddtsecure.com | malicious | Sinkholed |
File detected
URL
download.avastbrowser.com/avast/avast_secure_browser_setup.exe?cid=6379&source_tag=47b09ff3-9fd5-49f6-85d5-9fdbbadf6040
IP / ASN
104.20.37.116
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
Size7.1 MB (7129824 bytes)
MD5163088f033e810c8d3b2bd7b80635f58
SHA196c9f3502f225d397d2cb94fb708157bb7e88d14
JavaScript (0)
No JavaScripts
HTTP Transactions (13)
| URL | IP | Response | Size |
|---|