Report Overview

  1. Visited public
    2025-06-09 23:34:32
    Tags
    Submit Tags
  2. URL

    lootdest.com/s?COpA

  3. Finishing URL

    vnqry.retobeassilentasaf.org/AWDI?tag_id=935173&sub_id1=&sub_id2=192966158684688527&cookie_id=570576933&lp=black_screen_arrow&tb=redirect&allb=redirect&ob=redirect&href=https%3A%2F%2Fcuryrentattrib.info%2F%3Ftid%3D935173%26noocp%3D1&hop=7&geo=NO

  4. IP / ASN
    172.67.164.142

    #13335 CLOUDFLARENET

    Title
    Press Allow!
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
pagead2.googlesyndication.com1012003-01-212012-05-212025-06-05
fonts.googleapis.com88772005-01-252012-05-232025-06-04
d2vptth0euqbxm.cloudfront.netunknown2008-04-252025-06-082025-06-08
unpkg.com116932016-01-062016-01-072025-06-04
fonts.gstatic.comunknown2008-02-112014-04-022025-06-04
app.unlockr.appunknown2024-08-182025-03-202025-06-02
d1wzdj81h1hubn.cloudfront.netunknown2008-04-252023-01-182025-06-03
cdn.jsdelivr.net4392012-05-162012-09-302025-06-04
fingerprinting36542.s3.us-east-1.amazonaws.comunknown2005-08-182024-12-092025-06-02
nerventualken.comunknown2024-01-012024-10-082025-06-02
lootdest.comunknown2023-09-142023-09-182025-05-11
0.onsultingco.comunknown2024-01-012024-08-262025-04-19
curyrentattrib.infounknown2024-04-012024-04-282025-05-10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (9)

HTTP Transactions (21)

URLIPResponseSize
GET fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js
52.216.28.96200 OK38 kB
OPTIONS nerventualken.com/tc
172.67.197.84200 OK0 B
GET pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.178.98200 OK163 kB
GET fonts.googleapis.com/css2?family=Play:wght@400;700&display=swap
142.250.74.10200 OK4.2 kB
GET lootdest.com/1.js
104.21.89.193200 OK79 kB
GET d2vptth0euqbxm.cloudfront.net/?tid=1001651&params_only=1
54.230.245.64200 OK601 B
GET lootdest.com/favicon.ico
104.21.89.193404 Not Found159 B
GET lootdest.com/unlocker.png
104.21.89.193200 OK31 kB
GET unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js
104.18.0.22302 Found384 kB
GET wss://0.onsultingco.com/c?uid=192966158684688527&cat=2&key=877336493324667265&session_id=694093600803426350&is_loot=1&tid=1001651
104.21.41.244101 Switching Protocols0 B
GET curyrentattrib.info/ptr?i=2ad8db2ee12908f
108.157.229.66200 OK0 B
GET lootdest.com/s?COpA
104.21.89.193200 OK22 kB
GET lootdest.com/qr.png
104.21.89.193200 OK7.2 kB
GET unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js
104.18.0.22200 OK384 kB
GET fonts.gstatic.com/s/play/v20/6ae84K2oVqwItm4TCpAy2g.woff2
142.250.74.35200 OK18 kB
POST app.unlockr.app/pixel?event=unlockrPromote&session_id=694093600803426350
104.21.81.47200 OK0 B
GET d1wzdj81h1hubn.cloudfront.net/46821adac67c4ec2.png
3.164.226.216200 OK764 kB
GET cdn.jsdelivr.net/npm/babel-regenerator-runtime@6.5.0/runtime.js
151.101.65.229200 OK22 kB
GET fonts.gstatic.com/s/play/v20/6aez4K2oVqwIvtU2Hw.woff2
142.250.74.35200 OK18 kB
POST nerventualken.com/tc
172.67.197.84200 OK727 B
GET d1wzdj81h1hubn.cloudfront.net/icons/bell.png
3.164.226.216200 OK3.2 kB