| pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315 | 13.50.59.231 | 200 OK | 14 kB |
URL User Request GET HTTP/1.1pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315 IP13.50.59.231:443
CertificateIssuerLet's Encrypt Subjectpretigicivent.com Fingerprint41:F1:C6:99:6E:F2:36:90:DC:5F:99:78:AC:14:4E:15:99:B9:EC:57 ValidityThu, 04 Apr 2024 18:38:21 GMT - Wed, 03 Jul 2024 18:38:20 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (55472) Hash2af329c311982b7af1bbca00a276fef4 9af083582e6dc29acbe42ce444b3e3ecb2b2b911 0dd87694a5b11074314c5e6d6b600c154ea70638b898e3010ac8d4443b85c1f0
GET /click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315 HTTP/1.1
Host: pretigicivent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 24 Apr 2024 22:30:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=2t8p52cia3; expires=Thu, 25-Apr-2024 22:30:58 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=2t8p52cia3-2t8p52cia3-171z-gx9lbl-17j20-4k15dz-4k15bl-8cb236; expires=Thu, 25-Apr-2024 22:30:58 GMT; Max-Age=86400; path=/; secure; SameSite=none
Content-Encoding: gzip
|
|
| pretigicivent.com/landers/block_land_dm_f/arrow__up.png | 13.50.59.231 | 200 OK | 33 kB |
URL GET HTTP/1.1pretigicivent.com/landers/block_land_dm_f/arrow__up.png IP13.50.59.231:443
Requested byhttps://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315 CertificateIssuerLet's Encrypt Subjectpretigicivent.com Fingerprint41:F1:C6:99:6E:F2:36:90:DC:5F:99:78:AC:14:4E:15:99:B9:EC:57 ValidityThu, 04 Apr 2024 18:38:21 GMT - Wed, 03 Jul 2024 18:38:20 GMT
File typePNG image data, 450 x 592, 8-bit/color RGBA, non-interlaced Hashd806d5f73b4b7ca093a0ad79f47bf0c8 4cdadce2fe96281196aafd62cb41ea85aa8a54fd 4399fd13a2b71e3f70846fd5de33d293ecbba9d870115a1fdef53b3a142b62fb
GET /landers/block_land_dm_f/arrow__up.png HTTP/1.1
Host: pretigicivent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315
Cookie: uclick=2t8p52cia3; uclickhash=2t8p52cia3-2t8p52cia3-171z-gx9lbl-17j20-4k15dz-4k15bl-8cb236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 24 Apr 2024 22:30:59 GMT
Content-Type: image/png
Content-Length: 33223
Last-Modified: Wed, 02 Aug 2023 11:29:15 GMT
Connection: keep-alive
ETag: "64ca3e0b-81c7"
Accept-Ranges: bytes
|
|
| pretigicivent.com/landers/block_land_dm_f/top__icon.png | 13.50.59.231 | 200 OK | 981 B |
URL GET HTTP/1.1pretigicivent.com/landers/block_land_dm_f/top__icon.png IP13.50.59.231:443
Requested byhttps://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315 CertificateIssuerLet's Encrypt Subjectpretigicivent.com Fingerprint41:F1:C6:99:6E:F2:36:90:DC:5F:99:78:AC:14:4E:15:99:B9:EC:57 ValidityThu, 04 Apr 2024 18:38:21 GMT - Wed, 03 Jul 2024 18:38:20 GMT
File typePNG image data, 16 x 28, 8-bit/color RGB, non-interlaced Hash80cd06bdeae8a53de97e50f55c413c13 ed5777c3ad85d05e01457c251e02c2850d52ef3d 247447fc2ac2e2779d5303604f23610264f15bacbdcbf0dce6532e75b6ad4512
GET /landers/block_land_dm_f/top__icon.png HTTP/1.1
Host: pretigicivent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315
Cookie: uclick=2t8p52cia3; uclickhash=2t8p52cia3-2t8p52cia3-171z-gx9lbl-17j20-4k15dz-4k15bl-8cb236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 24 Apr 2024 22:30:59 GMT
Content-Type: image/png
Content-Length: 981
Last-Modified: Wed, 02 Aug 2023 11:29:15 GMT
Connection: keep-alive
ETag: "64ca3e0b-3d5"
Accept-Ranges: bytes
|
|
| pretigicivent.com/landers/block_land_dm_f/firefox__icon.png | 13.50.59.231 | 200 OK | 5.6 kB |
URL GET HTTP/1.1pretigicivent.com/landers/block_land_dm_f/firefox__icon.png IP13.50.59.231:443
Requested byhttps://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315 CertificateIssuerLet's Encrypt Subjectpretigicivent.com Fingerprint41:F1:C6:99:6E:F2:36:90:DC:5F:99:78:AC:14:4E:15:99:B9:EC:57 ValidityThu, 04 Apr 2024 18:38:21 GMT - Wed, 03 Jul 2024 18:38:20 GMT
File typePNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced Hash865abb88855a14957b3dcf765eecfb7b c30d5d3e3a2fbf790bc8d64fe11f1c75cab79696 610d547defd7fd85dc8909abe252fe3da2baa75b77a0ac9b6ee359308180dc06
GET /landers/block_land_dm_f/firefox__icon.png HTTP/1.1
Host: pretigicivent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315
Cookie: uclick=2t8p52cia3; uclickhash=2t8p52cia3-2t8p52cia3-171z-gx9lbl-17j20-4k15dz-4k15bl-8cb236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 24 Apr 2024 22:30:59 GMT
Content-Type: image/png
Content-Length: 5582
Last-Modified: Wed, 02 Aug 2023 11:29:15 GMT
Connection: keep-alive
ETag: "64ca3e0b-15ce"
Accept-Ranges: bytes
|
|
| pretigicivent.com/landers/block_land_dm_f/jquery-3.3.1.min.js | 13.50.59.231 | 200 OK | 87 kB |
URL GET HTTP/1.1pretigicivent.com/landers/block_land_dm_f/jquery-3.3.1.min.js IP13.50.59.231:443
Requested byhttps://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315 CertificateIssuerLet's Encrypt Subjectpretigicivent.com Fingerprint41:F1:C6:99:6E:F2:36:90:DC:5F:99:78:AC:14:4E:15:99:B9:EC:57 ValidityThu, 04 Apr 2024 18:38:21 GMT - Wed, 03 Jul 2024 18:38:20 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /landers/block_land_dm_f/jquery-3.3.1.min.js HTTP/1.1
Host: pretigicivent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315
Cookie: uclick=2t8p52cia3; uclickhash=2t8p52cia3-2t8p52cia3-171z-gx9lbl-17j20-4k15dz-4k15bl-8cb236
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 24 Apr 2024 22:30:59 GMT
Content-Type: application/javascript
Content-Length: 86927
Last-Modified: Wed, 02 Aug 2023 11:29:15 GMT
Connection: keep-alive
ETag: "64ca3e0b-1538f"
Accept-Ranges: bytes
|
|
| update48451.xyz/5005acpl00110/background.jpg | 0.0.0.0 | | 0 B |
URL GET update48451.xyz/5005acpl00110/background.jpg IP0.0.0.0:0
Requested byhttps://pretigicivent.com/click.php?browser=chrome&campaignid=8083070&cost=0.009400&country=FR&countryname=FR&device=desktop&isp=societe+francaise+du+radiotelephone&key=ncnd3ove567q0z5p3tp1&language=fr&os=windows&osversion=win10&user_activity=high&visitor_id=807117875629527277&zoneid=4113315
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /5005acpl00110/background.jpg HTTP/1.1
Host: update48451.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pretigicivent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|