Hagezi Threat Feed Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://retailjunkiez.com/partnerv4/working/?country=gb&zoneid=6786568&bannerid=26328034&browser=chrome&os=ios&device=iphone®ion=glg&isp=britishskybroadcastinglimited&useragent=Mozilla/5.0(iPhone;CPUiPhoneOS26_1_0likeMacOSX)AppleWebKit/605.1.15(KHTML,likeGecko)CriOS/143.0.7499.151Mobile/15E148Safari/604.1&language=en&connectiontype=xdsl&cost=0.002600&visitor_id=1092388567495221249&ts=PA-IC&mb=Nextwell&ch=rej
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://retailjunkiez.com/partnerv4/working/?country=gb&zoneid=6786568&bannerid=26328034&browser=chrome&os=ios&device=iphone®ion=glg&isp=britishskybroadcastinglimited&useragent=Mozilla/5.0(iPhone;CPUiPhoneOS26_1_0likeMacOSX)AppleWebKit/605.1.15(KHTML,likeGecko)CriOS/143.0.7499.151Mobile/15E148Safari/604.1&language=en&connectiontype=xdsl&cost=0.002600&visitor_id=1092388567495221249&ts=PA-IC&mb=Nextwell&ch=rej
- Submitted IP / ASN
172.67.214.208 AS13335 · CLOUDFLARENET
- Final URL
- https://retailjunkiez.com/partnerv4/working/?country=gb&zoneid=6786568&bannerid=26328034&browser=chrome&os=ios&device=iphone®ion=glg&isp=britishskybroadcastinglimited&useragent=Mozilla/5.0(iPhone;CPUiPhoneOS26_1_0likeMacOSX)AppleWebKit/605.1.15(KHTML,likeGecko)CriOS/143.0.7499.151Mobile/15E148Safari/604.1&language=en&connectiontype=xdsl&cost=0.002600&visitor_id=1092388567495221249&ts=PA-IC&mb=Nextwell&ch=rej
- Final IP / ASN
- 172.67.214.208 AS13335 · CLOUDFLARENET
Final page
- Page title
- Campaigns
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 293
- Observed hosts
- 33
- Script records
- 4
Estimated HTTP data
- Sent
- ~227.8 KB
- Received
- ~281.2 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| tatrck.com | 131147 | 2023-06-15 | 2023-06-16 | 2026-06-19 | 9.5 KB | 13.4 KB | 172.67.173.8 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.pushchairexpert.com | N/A | 2012-01-27 | 2025-10-12 | 2025-10-27 | 595 B | 0 B | Not recorded | |
| r.bestadperf.com 2 alerts | 4283320 | 2023-11-24 | 2024-01-31 | 2026-06-19 | 1.4 KB | 897 B |  63.33.119.172 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| lamp.glopss.com | 3418524 | 2015-08-18 | 2017-06-19 | 2026-06-18 | 675 B | 0 B | Not recorded | |
| deals.boltpharmacy.co.uk | N/A | 2023-09-09 | 2026-02-27 | 2026-06-19 | 554 B | 906 B | 52.210.201.178 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| deal.bioethanol-fireplace.co.uk | N/A | 2016-10-11 | 2025-01-27 | 2026-03-25 | 637 B | 0 B | Not recorded | |
| r.linksprf.com | 963970 | 2023-09-05 | 2023-09-14 | 2026-06-19 | 4.5 KB | 3.7 KB | 63.33.119.172 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.linkprefer.com | 4151685 | 2022-07-12 | 2022-10-31 | 2026-06-17 | 6.2 KB | 1.2 KB |  8.209.109.198 | |
| deals.gotraka.com | N/A | 2021-05-07 | 2025-10-19 | 2025-10-19 | 590 B | 872 B | 52.210.201.178 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| lkht.top | 907089 | 2022-06-20 | 2022-07-08 | 2026-06-14 | 2.0 KB | 1.4 KB |  15.161.3.62 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. PHP:5.6.40 Programming languages PHP is a general-purpose scripting language used for web development. |
| www.bioethanol-fireplace.co.uk | 6482504 | 2016-10-11 | 2017-01-26 | 2026-02-24 | 1.1 KB | 0 B | Not recorded | |
| thebeautystore.com | 492526 | 2000-10-31 | 2025-12-01 | 2026-03-12 | 628 B | 0 B | Not recorded | |
| maxoraa.com | N/A | 2025-09-12 | 2026-01-06 | 2026-06-15 | 17.0 KB | 23.2 KB | 172.67.209.145 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-06-14 | 2.2 KB | 0 B | Not recorded | |
| furnitureinfashion.net | 290431 | 2006-04-16 | 2017-01-31 | 2026-05-23 | 631 B | 0 B | Not recorded | |
| clcktrck.com | 109815 | 2023-02-28 | 2021-01-31 | 2026-06-19 | 54.6 KB | 37.4 KB | 3.73.249.248 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| www.boltpharmacy.co.uk | N/A | 2023-09-09 | 2026-02-11 | 2026-06-15 | 1014 B | 1.6 KB |  198.202.211.1 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.my-little-darling-shop.com | N/A | N/A | N/A | N/A | 610 B | 0 B | Not recorded | |
| click.rdoo.shop | N/A | 2022-01-04 | 2023-06-08 | 2026-06-13 | 1.5 KB | 3.2 KB | 104.26.11.174 | PHP:5.6.40 Programming languages PHP is a general-purpose scripting language used for web development. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| trckclck451.io | 1949432 | 2025-04-10 | 2025-04-17 | 2026-06-18 | 2.2 KB | 1.9 KB | 3.66.200.65 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| v.boltpharmacy.co.uk | N/A | 2023-09-09 | 2026-05-11 | 2026-06-15 | 954 B | 0 B | Not recorded | |
| www.awin1.com | 164043 | 2000-05-19 | 2012-07-02 | 2026-06-14 | 1.4 KB | 1.5 KB |  23.49.29.238 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| link.fatcoupon.com | 1532704 | 2018-10-06 | 2021-03-26 | 2026-06-18 | 1.2 KB | 0 B | Not recorded | |
| assets.ikhnaie.me | 3553930 | 2022-04-28 | 2025-07-08 | 2026-06-18 | 1.3 KB | 0 B | Not recorded | |
| uk.jackery.com | 988048 | 2000-02-07 | 2022-02-15 | 2026-06-18 | 678 B | 3.2 KB |  23.227.38.65 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-06-14 | 592 B | 0 B | Not recorded | |
| bbux.me | 365103 | 2025-05-23 | 2025-06-05 | 2026-06-20 | 4.0 KB | 10.9 KB | 47.254.142.87 | |
| velouuraa.com | N/A | 2025-08-21 | 2026-06-15 | 2026-06-15 | 68.6 KB | 76.4 KB | 172.67.135.178 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Amazon CloudFront CDN Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds. |
| retailjunkiez.com | N/A | 2025-08-21 | 2026-01-09 | 2026-05-27 | 37.9 KB | 97.9 KB | 172.67.214.208 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| link.shoplooks.com | 2974017 | 2015-04-09 | 2022-05-31 | 2026-06-18 | 712 B | 367 B | 8.211.33.144 | |
| track.flexlinkspro.com | 1648553 | 2016-08-24 | 2016-09-30 | 2026-06-19 | 670 B | 0 B | Not recorded | |
| www.tenstickers.co.uk | N/A | 2014-09-29 | 2015-01-05 | 2025-08-16 | 590 B | 0 B | Not recorded | |
| fxo.co | 473158 | 2014-08-16 | 2017-03-15 | 2025-06-24 | 1.1 KB | 1.4 KB | 104.17.195.8 | Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Microsoft ASP.NET:4.0.30319 Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. |