| go-g3t-push.net/clk/bFw6rF64P7dkpeLYm_tymf-7eP55kd-F8nlMqOaJr1pVTl1KtnOCwKIROn3D1U9jH2NLDsT_OQ0fewrBOwn7uB97gFM-O4mChIeb1wqeXC7dGVXE5e_slNmmZ0KyWeU3fF3mne5Hrki4XSlYM42yADjBKsoyh4GyEHwfaNBfpc_VEZyGr392zNj5q9iNWzgW_YVeHrs2W_hNfaNc79k9u-Yus-eRg346kRpkwfo4WXvR57xylvA2C3epsosYkWssVLvc2L96YzmhWN4zl-p1FzJwOpT9wF4W9A_gBex2mlKdq0uKCrKwLOLv52fy5AleNNeC7YfSVnq_oMizYEnM5OkjnzGEBNJOrP42t0o-SASas5QWYkf9RCvCVeZpgX9qlvSlgNcd2KbiFSiFm7Q91warRgFBhBDm6QiOi3gDaE4k17Ii9ApVawOUE3k0QHcadgrC-6iMYUsDkg1UYnQqVqX3Ykgg7lU0wc-87cnLNmUqwwIvddBjHw2XudA6FZgW2aa7sSj10ITpRR73Jr0LbDUFHgOUjMrj1NfokIC6_Z4V0ZOtKRdDUuiP3he87WNLaCXcss_jAYariQO561XstJMd_2_-jdFClM6U27FkRyHpcHTqeOlbDokJfJtKkfdDTKRABBgzhf7IENVoeVsCscvysrli3L2WGY8nx7BCbRnNfvYxyi2-JhY3rKw7QUkAC3RcxJ1qtMNasKiK9sy0eUAEuruHRZmZpwzkiURPHMBAFZri6YZqPzWD9tAmWdThOx0XZWCZorF8EgGPBVA9CC5JVkWnzkXSbNmAyqUdRPuy2OJO5161Og |  178.63.248.54 | 302 Found | 0 B |
URL User Request GET HTTP/2go-g3t-push.net/clk/bFw6rF64P7dkpeLYm_tymf-7eP55kd-F8nlMqOaJr1pVTl1KtnOCwKIROn3D1U9jH2NLDsT_OQ0fewrBOwn7uB97gFM-O4mChIeb1wqeXC7dGVXE5e_slNmmZ0KyWeU3fF3mne5Hrki4XSlYM42yADjBKsoyh4GyEHwfaNBfpc_VEZyGr392zNj5q9iNWzgW_YVeHrs2W_hNfaNc79k9u-Yus-eRg346kRpkwfo4WXvR57xylvA2C3epsosYkWssVLvc2L96YzmhWN4zl-p1FzJwOpT9wF4W9A_gBex2mlKdq0uKCrKwLOLv52fy5AleNNeC7YfSVnq_oMizYEnM5OkjnzGEBNJOrP42t0o-SASas5QWYkf9RCvCVeZpgX9qlvSlgNcd2KbiFSiFm7Q91warRgFBhBDm6QiOi3gDaE4k17Ii9ApVawOUE3k0QHcadgrC-6iMYUsDkg1UYnQqVqX3Ykgg7lU0wc-87cnLNmUqwwIvddBjHw2XudA6FZgW2aa7sSj10ITpRR73Jr0LbDUFHgOUjMrj1NfokIC6_Z4V0ZOtKRdDUuiP3he87WNLaCXcss_jAYariQO561XstJMd_2_-jdFClM6U27FkRyHpcHTqeOlbDokJfJtKkfdDTKRABBgzhf7IENVoeVsCscvysrli3L2WGY8nx7BCbRnNfvYxyi2-JhY3rKw7QUkAC3RcxJ1qtMNasKiK9sy0eUAEuruHRZmZpwzkiURPHMBAFZri6YZqPzWD9tAmWdThOx0XZWCZorF8EgGPBVA9CC5JVkWnzkXSbNmAyqUdRPuy2OJO5161Og IP178.63.248.54:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectgo-g3t-push.net Fingerprint32:E7:5D:DA:6E:6D:86:15:15:E5:FE:03:BB:0F:9C:4C:D5:9A:35:48 ValidityMon, 08 Apr 2024 15:17:58 GMT - Sun, 07 Jul 2024 15:17:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clk/bFw6rF64P7dkpeLYm_tymf-7eP55kd-F8nlMqOaJr1pVTl1KtnOCwKIROn3D1U9jH2NLDsT_OQ0fewrBOwn7uB97gFM-O4mChIeb1wqeXC7dGVXE5e_slNmmZ0KyWeU3fF3mne5Hrki4XSlYM42yADjBKsoyh4GyEHwfaNBfpc_VEZyGr392zNj5q9iNWzgW_YVeHrs2W_hNfaNc79k9u-Yus-eRg346kRpkwfo4WXvR57xylvA2C3epsosYkWssVLvc2L96YzmhWN4zl-p1FzJwOpT9wF4W9A_gBex2mlKdq0uKCrKwLOLv52fy5AleNNeC7YfSVnq_oMizYEnM5OkjnzGEBNJOrP42t0o-SASas5QWYkf9RCvCVeZpgX9qlvSlgNcd2KbiFSiFm7Q91warRgFBhBDm6QiOi3gDaE4k17Ii9ApVawOUE3k0QHcadgrC-6iMYUsDkg1UYnQqVqX3Ykgg7lU0wc-87cnLNmUqwwIvddBjHw2XudA6FZgW2aa7sSj10ITpRR73Jr0LbDUFHgOUjMrj1NfokIC6_Z4V0ZOtKRdDUuiP3he87WNLaCXcss_jAYariQO561XstJMd_2_-jdFClM6U27FkRyHpcHTqeOlbDokJfJtKkfdDTKRABBgzhf7IENVoeVsCscvysrli3L2WGY8nx7BCbRnNfvYxyi2-JhY3rKw7QUkAC3RcxJ1qtMNasKiK9sy0eUAEuruHRZmZpwzkiURPHMBAFZri6YZqPzWD9tAmWdThOx0XZWCZorF8EgGPBVA9CC5JVkWnzkXSbNmAyqUdRPuy2OJO5161Og HTTP/1.1
Host: go-g3t-push.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: Angie
date: Fri, 26 Apr 2024 03:13:29 GMT
content-length: 0
accept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
referrer-policy: no-referrer
location: https://trckfollowme.com/click.php?key=i089bmk9trbffdqxa9hx&clickid=GFk4w4MBaJ2pG3C_tj7oAaXoP4ACi8eg6a6ch84B&cost=0.0000&zoneid=1045541&device=desktop&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&browserVersion=96&creativeid=1022783&osversion=&carrier=Blix+Solutions&source=89&campaignid=447645&agegroup=OLD
X-Firefox-Spdy: h2
|
|
| nastobad.com/s?k=cdcfc65765dfac27&click_id=f2b576jgxftdv6o8ad&source_id=1045541 | 46.4.172.148 | 302 Found | 15 kB |
URL User Request GET HTTP/2nastobad.com/s?k=cdcfc65765dfac27&click_id=f2b576jgxftdv6o8ad&source_id=1045541 IP46.4.172.148:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectnastobad.com Fingerprint3C:C6:E3:9B:37:0B:52:27:AE:BC:DE:17:0A:0D:57:64:84:41:29:11 ValidityFri, 05 Apr 2024 23:19:09 GMT - Thu, 04 Jul 2024 23:19:08 GMT
File typeHTML document, ASCII text, with very long lines (5740) Hash6b3340122d13a0ebc5f537694aac8bb2 1a1060b67500549bd481938f8e1f96a50c867b7f 85fcdec086e447d6662db88edc74264fe1cd756ba1e0c546eb480900369dfaca
GET /s?k=cdcfc65765dfac27&click_id=f2b576jgxftdv6o8ad&source_id=1045541 HTTP/1.1
Host: nastobad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.20.2
date: Fri, 26 Apr 2024 03:13:30 GMT
content-type: text/html; charset=UTF-8
location: https://wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=9000e08032aae4f1d5050e0a
x-powered-by: PHP/8.1.27
referrer-policy: no-referrer
set-cookie: aff_tds_id=9d8c6aca1541a8399d138c9753aeb8ec980846e4075c79e18e90130b12b7560fa%3A2%3A%7Bi%3A0%3Bs%3A10%3A%22aff_tds_id%22%3Bi%3A1%3Bs%3A16%3A%22c3874b67eebbea23%22%3B%7D; expires=Fri, 26-Apr-2024 20:59:59 GMT; Max-Age=63989; path=/; HttpOnly; SameSite=Lax
expires: Fri, 26 Apr 2024 03:13:29 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
|
|
| wisssmackin.com/assets/js/backlink_back_button.js |  185.32.28.133 | 200 OK | 632 B |
URL GET HTTP/1.1wisssmackin.com/assets/js/backlink_back_button.js IP185.32.28.133:443 ASN#15699 OGIC Informatica S.L.
Requested byhttps://wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=9000e08032aae4f1d5050e0a CertificateIssuerLet's Encrypt Subjectwisssmackin.com FingerprintA2:26:AE:8C:05:84:60:1B:60:7B:5E:06:A1:B9:9E:A1:74:94:1A:79 ValidityMon, 22 Apr 2024 03:03:55 GMT - Sun, 21 Jul 2024 03:03:54 GMT
Hash7c847657cd58fd5f3b656c5dd486808a 54781827b08eb75f27786b20bfded403c3117a69 b1b1b5affe702bae9e97deabbdb3f19bcf8f12a1ddd410ff189c61c3bc159c06
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/js/backlink_back_button.js HTTP/1.1
Host: wisssmackin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=9000e08032aae4f1d5050e0a
Cookie: redirect_user_data=%7B%22country%22%3A%22NO%22%2C%22city%22%3Anull%2C%22isp%22%3A%22blix+solutions%22%2C%22netspeed%22%3A%22%22%7D; _tracker_ikangoo=a%3A5%3A%7Bs%3A4%3A%22_key%22%3Bs%3A7%3A%22IKPANEL%22%3Bs%3A6%3A%22_subid%22%3Bs%3A16%3A%225002191363419547%22%3Bs%3A8%3A%22_country%22%3Bs%3A2%3A%22NO%22%3Bs%3A4%3A%22_isp%22%3Bs%3A14%3A%22blix+solutions%22%3Bs%3A5%3A%22_time%22%3Bi%3A1714101205%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 03:13:25 GMT
Content-Type: application/javascript
Content-Length: 632
Last-Modified: Mon, 28 Nov 2022 14:36:48 GMT
Connection: keep-alive
ETag: "6384c780-278"
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
|
|
| trckfollowme.com/click.php?key=i089bmk9trbffdqxa9hx&clickid=GFk4w4MBaJ2pG3C_tj7oAaXoP4ACi8eg6a6ch84B&cost=0.0000&zoneid=1045541&device=desktop&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&browserVersion=96&creativeid=1022783&osversion=&carrier=Blix+Solutions&source=89&campaignid=447645&agegroup=OLD | 116.202.12.61 | 302 Found | 15 kB |
URL User Request GET HTTP/2trckfollowme.com/click.php?key=i089bmk9trbffdqxa9hx&clickid=GFk4w4MBaJ2pG3C_tj7oAaXoP4ACi8eg6a6ch84B&cost=0.0000&zoneid=1045541&device=desktop&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&browserVersion=96&creativeid=1022783&osversion=&carrier=Blix+Solutions&source=89&campaignid=447645&agegroup=OLD IP116.202.12.61:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjecttrckfollowme.com Fingerprint51:CD:E7:76:31:07:06:34:A6:7D:2C:35:DE:8A:0D:A5:B8:96:BC:1F ValiditySun, 17 Mar 2024 01:04:15 GMT - Sat, 15 Jun 2024 01:04:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click.php?key=i089bmk9trbffdqxa9hx&clickid=GFk4w4MBaJ2pG3C_tj7oAaXoP4ACi8eg6a6ch84B&cost=0.0000&zoneid=1045541&device=desktop&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&browserVersion=96&creativeid=1022783&osversion=&carrier=Blix+Solutions&source=89&campaignid=447645&agegroup=OLD HTTP/1.1
Host: trckfollowme.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.1
date: Fri, 26 Apr 2024 03:13:29 GMT
content-type: text/html; charset=UTF-8
location: https://nastobad.com/s?k=cdcfc65765dfac27&click_id=f2b576jgxftdv6o8ad&source_id=1045541
set-cookie: uclick=6jgxftdv6o; expires=Sat, 27-Apr-2024 03:13:29 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=6jgxftdv6o-6jgxftdv6o-16a0-0-lpj2-ciu33y-ikqe-428d17; expires=Sat, 27-Apr-2024 03:13:29 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=9000e08032aae4f1d5050e0a | 185.32.28.133 | 200 OK | 15 kB |
URL User Request GET HTTP/1.1wisssmackin.com/?cat=1&groupds=111&clientId=452&productId=1714&tracking=9000e08032aae4f1d5050e0a IP185.32.28.133:443 ASN#15699 OGIC Informatica S.L.
CertificateIssuerLet's Encrypt Subjectwisssmackin.com FingerprintA2:26:AE:8C:05:84:60:1B:60:7B:5E:06:A1:B9:9E:A1:74:94:1A:79 ValidityMon, 22 Apr 2024 03:03:55 GMT - Sun, 21 Jul 2024 03:03:54 GMT
File typeHTML document, ASCII text, with very long lines (5740) Hash6b3340122d13a0ebc5f537694aac8bb2 1a1060b67500549bd481938f8e1f96a50c867b7f 85fcdec086e447d6662db88edc74264fe1cd756ba1e0c546eb480900369dfaca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?cat=1&groupds=111&clientId=452&productId=1714&tracking=9000e08032aae4f1d5050e0a HTTP/1.1
Host: wisssmackin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 03:13:25 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: redirect_user_data=%7B%22country%22%3A%22NO%22%2C%22city%22%3Anull%2C%22isp%22%3A%22blix+solutions%22%2C%22netspeed%22%3A%22%22%7D; expires=Fri, 26-Apr-2024 03:23:25 GMT; Max-Age=600
_tracker_ikangoo=a%3A5%3A%7Bs%3A4%3A%22_key%22%3Bs%3A7%3A%22IKPANEL%22%3Bs%3A6%3A%22_subid%22%3Bs%3A16%3A%225002191363419547%22%3Bs%3A8%3A%22_country%22%3Bs%3A2%3A%22NO%22%3Bs%3A4%3A%22_isp%22%3Bs%3A14%3A%22blix+solutions%22%3Bs%3A5%3A%22_time%22%3Bi%3A1714101205%3B%7D; expires=Fri, 26-Apr-2024 03:15:25 GMT; Max-Age=120
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
|
|