| leikovoleikamarada.com/link?var=8178164&vid=fJ3jURUgliq6iBjuHySUUSvoax&ymid=3t4v2q8hjckc7jz4b2004h&z=6150905 | 139.45.196.64 | 302 Found | 0 B |
URL User Request GET HTTP/2leikovoleikamarada.com/link?var=8178164&vid=fJ3jURUgliq6iBjuHySUUSvoax&ymid=3t4v2q8hjckc7jz4b2004h&z=6150905 IP139.45.196.64:443
CertificateIssuerLet's Encrypt Subjectleikovoleikamarada.com Fingerprint9C:7F:1D:36:F2:CA:5D:6C:14:92:69:91:50:D9:F1:5E:11:9E:C9:A1 ValidityWed, 24 Apr 2024 09:16:15 GMT - Tue, 23 Jul 2024 09:16:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /link?var=8178164&vid=fJ3jURUgliq6iBjuHySUUSvoax&ymid=3t4v2q8hjckc7jz4b2004h&z=6150905 HTTP/1.1
Host: leikovoleikamarada.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 10 May 2024 18:52:25 GMT
content-length: 0
location: https://cdntechone.com/r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=6150905&axcusid1=8178164&clid={ymid}&r=http%3A%2F%2Fleikovoleikamarada.com%2Flink%3Fvar%3D8178164%26vid%3DfJ3jURUgliq6iBjuHySUUSvoax%26ymid%3D3t4v2q8hjckc7jz4b2004h%26z%3D6150905%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=6901
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
link: <https://cdntechone.com>; rel="dns-prefetch preconnect"
set-cookie: OAID=04805810181e4580fc1d2c2bb7f3670c; expires=Sat, 10 May 2025 18:52:25 GMT
oaidts=1715367145; expires=Sat, 10 May 2025 18:52:25 GMT
phpckd6150905=true; expires=Sat, 11 May 2024 18:52:25 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| datatechone.com/log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853&ruid=6f5fdff4-9731-4558-9d21-5e127f5e976c | 37.48.68.71 | 200 OK | 2 B |
URL POST HTTP/1.1datatechone.com/log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853&ruid=6f5fdff4-9731-4558-9d21-5e127f5e976c IP37.48.68.71:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://cdntechone.com/r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=6150905&axcusid1=8178164&clid={ymid}&r=http%3A%2F%2Fleikovoleikamarada.com%2Flink%3Fvar%3D8178164%26vid%3DfJ3jURUgliq6iBjuHySUUSvoax%26ymid%3D3t4v2q8hjckc7jz4b2004h%26z%3D6150905%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=6901 CertificateIssuerSectigo Limited Subjectdatatechone.com FingerprintFD:AA:8A:21:49:9F:48:59:78:C7:B2:00:75:4F:CD:2C:AF:49:2C:37 ValiditySun, 10 Dec 2023 00:00:00 GMT - Mon, 23 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853&ruid=6f5fdff4-9731-4558-9d21-5e127f5e976c HTTP/1.1
Host: datatechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1665
Origin: https://cdntechone.com
DNT: 1
Connection: keep-alive
Referer: https://cdntechone.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 10 May 2024 18:52:26 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: https://cdntechone.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| leikovoleikamarada.com/link?var=8178164&vid=fJ3jURUgliq6iBjuHySUUSvoax&ymid=3t4v2q8hjckc7jz4b2004h&z=6150905&acb=proxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=6901 | 139.45.196.64 | 204 No Content | 0 B |
URL User Request GET HTTP/2leikovoleikamarada.com/link?var=8178164&vid=fJ3jURUgliq6iBjuHySUUSvoax&ymid=3t4v2q8hjckc7jz4b2004h&z=6150905&acb=proxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=6901 IP139.45.196.64:443
CertificateIssuerLet's Encrypt Subjectleikovoleikamarada.com Fingerprint9C:7F:1D:36:F2:CA:5D:6C:14:92:69:91:50:D9:F1:5E:11:9E:C9:A1 ValidityWed, 24 Apr 2024 09:16:15 GMT - Tue, 23 Jul 2024 09:16:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /link?var=8178164&vid=fJ3jURUgliq6iBjuHySUUSvoax&ymid=3t4v2q8hjckc7jz4b2004h&z=6150905&acb=proxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=6901 HTTP/1.1
Host: leikovoleikamarada.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: OAID=04805810181e4580fc1d2c2bb7f3670c; oaidts=1715367145; phpckd6150905=true
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 10 May 2024 18:52:26 GMT
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=04805810181e4580fc1d2c2bb7f3670c; expires=Sat, 10 May 2025 18:52:26 GMT
oaidts=1715367145; expires=Sat, 10 May 2025 18:52:26 GMT
allcnt=1; expires=Sat, 10 May 2025 18:52:26 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| leikovoleikamarada.com/ | 139.45.196.64 | | 16 B |
IP139.45.196.64:0
CertificateIssuerLet's Encrypt Subjectleikovoleikamarada.com Fingerprint9C:7F:1D:36:F2:CA:5D:6C:14:92:69:91:50:D9:F1:5E:11:9E:C9:A1 ValidityWed, 24 Apr 2024 09:16:15 GMT - Tue, 23 Jul 2024 09:16:14 GMT
File typeASCII text, with no line terminators Hash7feadfe891c04432562e6d2b4d35f38a fc25b473cdcdf8551d51bed416dd604f3e1d158f e836cf151c055c64b3b2991de7067f3d9e925b51d1050e57ff93a7b88667031f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: leikovoleikamarada.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 10 May 2024 18:52:29 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 16
Connection: keep-alive
|
|
| cdntechone.com/r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=6150905&axcusid1=8178164&clid={ymid}&r=http%3A%2F%2Fleikovoleikamarada.com%2Flink%3Fvar%3D8178164%26vid%3DfJ3jURUgliq6iBjuHySUUSvoax%26ymid%3D3t4v2q8hjckc7jz4b2004h%26z%3D6150905%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=6901 | 172.67.195.28 | 200 OK | 23 kB |
URL User Request GET HTTP/2cdntechone.com/r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=6150905&axcusid1=8178164&clid={ymid}&r=http%3A%2F%2Fleikovoleikamarada.com%2Flink%3Fvar%3D8178164%26vid%3DfJ3jURUgliq6iBjuHySUUSvoax%26ymid%3D3t4v2q8hjckc7jz4b2004h%26z%3D6150905%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=6901 IP172.67.195.28:443
CertificateIssuerGoogle Trust Services LLC Subjectcdntechone.com Fingerprint3D:20:D4:11:5D:06:B3:63:9C:08:BF:D9:D9:16:22:D5:DC:3B:9A:CB ValidityMon, 22 Apr 2024 03:33:58 GMT - Sun, 21 Jul 2024 03:33:57 GMT
File typeHTML document, ASCII text, with very long lines (18452) Hashbb831dd6d50f6c8b53353103ec9a3703 9d78eba98e3da16601fb5492a7d66030865293e0 785c9ae55eb9710019f4b32060731514e6bf11d2fb96e0c5bc5dec7d2bfc9319
GET /r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=6150905&axcusid1=8178164&clid={ymid}&r=http%3A%2F%2Fleikovoleikamarada.com%2Flink%3Fvar%3D8178164%26vid%3DfJ3jURUgliq6iBjuHySUUSvoax%26ymid%3D3t4v2q8hjckc7jz4b2004h%26z%3D6150905%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=6901 HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:52:26 GMT
content-type: text/html
last-modified: Wed, 07 Feb 2024 12:51:04 GMT
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HQwMZF8qZTcvGF9V%2Fef475vzqdD8yj99I7%2FxE%2Fsvv4tM06pLovf0TTItNPCV2zZ7xm0W6aMmnnVNqQ2RtVnJPfelhhBcKj1nW5nEu3GbcKlmt4%2BjlMOMf0v7w4KAEpo44w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881c2056e9f95696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|