Report - b470.rpstreamed.xyz/adult_video_3/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_6384584637512109210_671569_2_0&sub1=a671569

Report Overview

Visited public
2024-12-08 14:42:48
Tags
URL
b470.rpstreamed.xyz/adult_video_3/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_6384584637512109210_671569_2_0&sub1=a671569
Finishing URL
loupush.com/kO9qT2AlXH8=?utm_source=3333
IP / ASN
192.133.142.177
#15317 SERVEREL-AS
Title
Landing template

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
loupush.com	unknown	2024-07-24	2024-08-23	2024-12-03	992 B	1.7 kB	168.119.39.123

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-08 14:42:24	medium	192.133.142.177	Client IP	ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	loupush.com/kO9qT2AlXH8=?utm_source=3333	0 B	0001-01-01 00:00	2024-12-26 11:46
Pretty URL loupush.com/kO9qT2AlXH8=?utm_source=3333 IP 168.119.39.123 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2024-12-26 11:46 Times Seen3626735 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (2)

	URL	IP	Response	Size
	loupush.com/favicon.ico	168.119.39.123	200 OK	0 B
URL GET HTTP/2 loupush.com/favicon.ico IP 168.119.39.123:443 ASN #24940 Hetzner Online GmbH Requested by https://loupush.com/kO9qT2AlXH8=?utm_source=3333 Certificate IssuerLet's Encrypt Subjectloupush.com Fingerprint4A:8E:8C:A2:6A:05:0B:F8:96:9E:B8:B4:DB:99:F4:F0:F8:4A:4B:49 ValiditySat, 23 Nov 2024 01:49:42 GMT - Fri, 21 Feb 2025 01:49:41 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: loupush.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://loupush.com/kO9qT2AlXH8=?utm_source=3333 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx/1.24.0 date: Sun, 08 Dec 2024 14:42:25 GMT content-type: text/plain; charset=utf-8 content-length: 0 accept-ranges: bytes last-modified: Tue, 19 Nov 2024 13:20:26 GMT X-Firefox-Spdy: h2`

	loupush.com/kO9qT2AlXH8=?utm_source=3333	168.119.39.123	200 OK	1.3 kB
URL User Request GET HTTP/2 loupush.com/kO9qT2AlXH8=?utm_source=3333 IP 168.119.39.123:443 ASN #24940 Hetzner Online GmbH Certificate IssuerLet's Encrypt Subjectloupush.com Fingerprint4A:8E:8C:A2:6A:05:0B:F8:96:9E:B8:B4:DB:99:F4:F0:F8:4A:4B:49 ValiditySat, 23 Nov 2024 01:49:42 GMT - Fri, 21 Feb 2025 01:49:41 GMT File type HTML document, ASCII text, with very long lines (1382), with no line terminators Size 1.3 kB (1333 bytes) Hash 89ba5e400ceef4a68787a9392a5a4ed6 4838b6011e6dd4f1c3e6035a70370cb3bd310763 10b9de62163b2cbdf6365f0f27955dcd52f6c9288fda77a5a6bfff633e1d65dd HTTP Headers GET /kO9qT2AlXH8=?utm_source=3333 HTTP/1.1 Host: loupush.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://b470.rpstreamed.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx/1.24.0 date: Sun, 08 Dec 2024 14:42:25 GMT content-type: text/html; charset=UTF-8 cache-control: no-cache, private content-encoding: gzip X-Firefox-Spdy: h2`