Report - vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site

Report Overview

Submitted URL
vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
IP
154.38.187.104
ASN
#40021 NL-811-40021
Submitted
2024-04-29 13:30:32
Access
public
Website Title
Friends-with-benefits
Final URL
vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vertf.com	unknown	unknown	No data	No data	13 kB	478 kB	154.38.187.104
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-29	414 B	97 kB	142.250.74.168
bat.bing.com	387	1996-01-29	2014-04-08	2024-04-28	1.5 kB	15 kB	204.79.197.237
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17	2024-04-28	473 B	28 kB	104.21.26.223

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed
2024-04-29	medium	vertf.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47	357 B	2024-02-29	2024-04-29
Pretty URL vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47 IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-29 07:38:54 Last Seen2024-04-29 15:30:38 Times Seen4 Hash 69c9678c225577e568781afa40da66eb 673039f4f727454173bf6b1e447e1fa4a8d2714a 08efe1ba46fa063e58193c3d3d4fb96bd9977cc82ff48e0cf7499b3e76a84273 Loading...

	vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc08c.js	20 kB	2023-03-09	2024-04-29
Pretty URL vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc08c.js IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:38:18 Last Seen2024-04-29 15:30:39 Times Seen11 Hash 19f1ccb4c93a8b5ca57aaf46a8b8bd05 200a4b15edf4e75697761380b55c469f4f6a0ce1 61017aa071ee865b4b3956ad832ae8fbd056ebfafdb9918a7ff3c443f08f9462 Loading...

	vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc0ca.js	35 kB	2024-02-29	2024-04-29
Pretty URL vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc0ca.js IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-29 07:38:54 Last Seen2024-04-29 15:30:39 Times Seen8 Hash f43b941d2ba906dda84c7673a9fbb652 b872286a1ceca6888afc07ec3d7b678552e5e8c7 4cd8b6431e8d41c1f528b0d5564fc12ad72ddc62dc0026a2f78d48ff65ecc585 Loading...

	vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47	4.0 kB	2023-05-07	2024-04-29
Pretty URL vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47 IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-07 22:16:44 Last Seen2024-04-29 15:30:38 Times Seen5 Hash d976576f6df738069c08ea26d2d5eac6 ac031ae4ffc59173b56b6af2d77d68f3b15cfee3 c2e38e5ef785d10e4be29aec3dc78fe1dadcfbed3d135bed8896c50e5aa1e875 Loading...

	vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc16d.js	10 kB	2024-02-29	2024-04-29
Pretty URL vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc16d.js IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-29 07:38:54 Last Seen2024-04-29 15:30:39 Times Seen8 Hash e4aabb38b4b01f9033b107420e051812 819705a1210539e37684ac1bc7b843b1d0455fb8 01ae404db311cba65ba73a8c9f89f25430392d13cf8cf418e37b35257b7d4445 Loading...

	unknown	103 B	2023-03-07	2024-05-16
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:27 Last Seen2024-05-16 19:23:08 Times Seen41532 Hash f481efc2bba6cbb80162d62119eca686 f02e37e8c3ef5dfef24891d41cd44d2ce3814990 fc84c626fbb18273105c78d547cddc1e0db2a0fe49c7948a762ba7c9ef7c3b01 Loading...

	www.googletagmanager.com/gtm.js?id=GTM-WGJSH9M	279 kB	2024-04-29	2024-04-29
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-WGJSH9M IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-29 15:30:38 Last Seen2024-04-29 15:30:39 Times Seen2 Hash 6801b9e8f87a887b4820594ca1f222d8 900f9884d488ffe98073d9ca5e2fdf0fffe30cc6 f2226118e41f34ab5119d1bfeb178c864ca18352b1945bbb037ff406f9644ad7 Loading...

	vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc04c.js	4.5 kB	2023-03-08	2024-04-29
Pretty URL vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc04c.js IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 22:50:18 Last Seen2024-04-29 15:30:39 Times Seen9 Hash d8a0a7729f10d1e178d1b5294c83acc2 c4c0a589380bcfa2d8c99cf73c134553df8f478a de2f97427eb4ff9641bb2de002cd51b2647b488f1475791340851825799b5d7c Loading...

	vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc11d.js	11 kB	2023-03-08	2024-04-29
Pretty URL vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc11d.js IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 22:50:18 Last Seen2024-04-29 15:30:39 Times Seen9 Hash de5c77936db65ca13cb3e455f45cacff b93aa214d7f28226ddffdaa499a6091f9ca8f215 93530428224d16b1319b00f5caa1fbcf98ab2c4e7bf2b189b66d4c6036261373 Loading...

	bat.bing.com/bat.js	46 kB	2024-03-01	2024-05-16
Pretty URL bat.bing.com/bat.js IP 204.79.197.237 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-01 02:46:32 Last Seen2024-05-16 22:11:34 Times Seen6213 Hash 72bca04fd669eb89fc65d59052d0fc00 27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21 823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721 Loading...

	bat.bing.com/p/action/355008974.js	3.7 kB	2024-02-29	2024-04-29
Pretty URL bat.bing.com/p/action/355008974.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-29 07:38:54 Last Seen2024-04-29 15:30:39 Times Seen4 Hash 54df1d63bf53721109ff20883e36c2fd f24280960fe8eadb1b2cd9549ea28895760a05de cd38465970204b325fc2e894882d78deef68061227940c0000439dc8f3bc2419 Loading...

	vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47	1.4 kB	2024-02-29	2024-04-29
Pretty URL vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47 IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-29 07:38:54 Last Seen2024-04-29 15:30:39 Times Seen4 Hash 6004409a4835c302a459c0edb2e89e72 b27beaac22c8e15841f40351388fba6b1c9a42e3 825f2a300f8dfd83831d8430d512ff9d34bb0136c568b163a2c55db6f15ee1c9 Loading...

	vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47	197 B	2023-03-08	2024-04-29
Pretty URL vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47 IP 154.38.187.104 ASN #40021 NL-811-40021 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 22:50:18 Last Seen2024-04-29 15:30:39 Times Seen8 Hash 58f84dec61b189299df049141b4721c1 84219fa33176833280ed33a72076ce72892394b7 99821a3d12371e9b092e5f5ba4d06c585e9de7f43fddcfd4ff0ba8cda6be816d Loading...

HTTP Transactions (19)

URL IP Response Size

vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47

154.38.187.104

8.6 kB

URL
vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
HTML document, Unicode text, UTF-8 text, with very long lines (711)
Size
8.6 kB (8643 bytes)
Hash
87916e39ee3bb99cbb00e92c22cfc488
ffaeb01f32fe67ff05c8c0511b8421513a7c93d1
a030fbf356caec273f8a0a226197b9cd009ec80676f3cd139a86806ece0b23fd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47 HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=us6jydsc; expires=Tue, 30-Apr-2024 13:30:06 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a; expires=Tue, 30-Apr-2024 13:30:06 GMT; Max-Age=86400; path=/; secure; SameSite=none
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc1a2.txt

154.38.187.104

395 B

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc1a2.txt
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
ASCII text
Size
395 B (395 bytes)
Hash
8c77e5eb80014c28b11193ee63a98f26
be35db5c2893eba8b5a1cd91e4f062ae29e58faf
7658c06e4c2090ece3af299ba9fa43ef1073a793ae45e8c25dd11ce5716fffcc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc1a2.txt HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: text/plain
Content-Length: 395
Last-Modified: Mon, 18 Dec 2023 16:54:44 GMT
Connection: keep-alive
ETag: "65807954-18b"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

www.googletagmanager.com/gtm.js?id=GTM-WGJSH9M

142.250.74.168

96 kB

URL
www.googletagmanager.com/gtm.js?id=GTM-WGJSH9M
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (9518)
Size
96 kB (96441 bytes)
Hash
6801b9e8f87a887b4820594ca1f222d8
900f9884d488ffe98073d9ca5e2fdf0fffe30cc6
f2226118e41f34ab5119d1bfeb178c864ca18352b1945bbb037ff406f9644ad7

HTTP Headers

GET /gtm.js?id=GTM-WGJSH9M HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 29 Apr 2024 13:30:06 GMT
expires: Mon, 29 Apr 2024 13:30:06 GMT
cache-control: private, max-age=900
last-modified: Mon, 29 Apr 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 96441
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc239.css

154.38.187.104

16 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc239.css
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
ASCII text
Size
16 kB (15478 bytes)
Hash
a25633b2502e9f496760b7ca3ef01dfb
f3a790d056c91675a3528267a541d7cbc3ed386b
6a58012bc7b27c234fa18dbb4ace7f21d16f7d9acb692b197dee1cd72ccab080

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc239.css HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: text/css
Content-Length: 15478
Last-Modified: Mon, 18 Dec 2023 16:54:47 GMT
Connection: keep-alive
ETag: "65807957-3c76"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc1ce.txt

154.38.187.104

2.3 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc1ce.txt
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
ASCII text
Size
2.3 kB (2322 bytes)
Hash
c106f94e86ef0dc45137a4d89cd8e85e
c54559535559bd429bdce653cbe42e724f4b25ef
63e7de4e319ea0046afcd7c758f701abb67a0f113eb97b0a1ee02a1335a1dd18

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc1ce.txt HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: text/plain
Content-Length: 2322
Last-Modified: Mon, 18 Dec 2023 16:54:49 GMT
Connection: keep-alive
ETag: "65807959-912"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc04c.js

154.38.187.104

4.5 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc04c.js
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
JavaScript source, ASCII text, with very long lines (4487), with no line terminators
Size
4.5 kB (4487 bytes)
Hash
d8a0a7729f10d1e178d1b5294c83acc2
c4c0a589380bcfa2d8c99cf73c134553df8f478a
de2f97427eb4ff9641bb2de002cd51b2647b488f1475791340851825799b5d7c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc04c.js HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: application/javascript
Content-Length: 4487
Last-Modified: Mon, 18 Dec 2023 16:54:49 GMT
Connection: keep-alive
ETag: "65807959-1187"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc26b.css

154.38.187.104

200 OK

6.2 kB

URL GET HTTP/1.1
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc26b.css
IP
154.38.187.104:443
ASN
#40021 NL-811-40021

Requested by
https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Certificate
IssuerLet's Encrypt
Subjectvertf.com
Fingerprint39:92:67:92:EB:A8:C3:FF:4A:DB:E3:4A:40:12:A4:2F:E2:5E:84:85
ValidityMon, 08 Apr 2024 22:59:14 GMT - Sun, 07 Jul 2024 22:59:13 GMT

File type
ASCII text
Size
6.2 kB (6155 bytes)
Hash
5ba84126003571ea3236be78004763a2
f7ebefd8932648c6836a2a39d056a0bb4f8fe547
02f43997f9636af74fc2387245054f2e934ae4b62c5389833fb5b6cf2eeba6f5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc26b.css HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: text/css
Content-Length: 6155
Last-Modified: Mon, 18 Dec 2023 16:54:41 GMT
Connection: keep-alive
ETag: "65807951-180b"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc2df.css

154.38.187.104

7.8 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc2df.css
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
ASCII text
Size
7.8 kB (7837 bytes)
Hash
9857f23e220ae821032ac418210d0f04
dc461952e9abec254978ec3324e293b91d17994d
c9db2cc35e47bf8dd3945662608d104ca8d0a7a5d53129bdd48aa58f3e0e0d0f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc2df.css HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: text/css
Content-Length: 7837
Last-Modified: Mon, 18 Dec 2023 16:54:50 GMT
Connection: keep-alive
ETag: "6580795a-1e9d"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc11d.js

154.38.187.104

11 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc11d.js
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
JavaScript source, ASCII text, with very long lines (10594)
Size
11 kB (11024 bytes)
Hash
de5c77936db65ca13cb3e455f45cacff
b93aa214d7f28226ddffdaa499a6091f9ca8f215
93530428224d16b1319b00f5caa1fbcf98ab2c4e7bf2b189b66d4c6036261373

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc11d.js HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: application/javascript
Content-Length: 11024
Last-Modified: Mon, 18 Dec 2023 16:54:44 GMT
Connection: keep-alive
ETag: "65807954-2b10"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc16d.js

154.38.187.104

10 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc16d.js
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
JavaScript source, ASCII text, with very long lines (10497), with no line terminators
Size
10 kB (10497 bytes)
Hash
e4aabb38b4b01f9033b107420e051812
819705a1210539e37684ac1bc7b843b1d0455fb8
01ae404db311cba65ba73a8c9f89f25430392d13cf8cf418e37b35257b7d4445

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc16d.js HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: application/javascript
Content-Length: 10497
Last-Modified: Mon, 18 Dec 2023 16:54:48 GMT
Connection: keep-alive
ETag: "65807958-2901"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc0ca.js

154.38.187.104

35 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc0ca.js
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
JavaScript source, ASCII text, with very long lines (35133), with no line terminators
Size
35 kB (35133 bytes)
Hash
f43b941d2ba906dda84c7673a9fbb652
b872286a1ceca6888afc07ec3d7b678552e5e8c7
4cd8b6431e8d41c1f528b0d5564fc12ad72ddc62dc0026a2f78d48ff65ecc585

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc0ca.js HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: application/javascript
Content-Length: 35133
Last-Modified: Mon, 18 Dec 2023 16:54:46 GMT
Connection: keep-alive
ETag: "65807956-893d"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc08c.js

154.38.187.104

20 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc08c.js
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
JavaScript source, ASCII text, with very long lines (19665), with no line terminators
Size
20 kB (19665 bytes)
Hash
19f1ccb4c93a8b5ca57aaf46a8b8bd05
200a4b15edf4e75697761380b55c469f4f6a0ce1
61017aa071ee865b4b3956ad832ae8fbd056ebfafdb9918a7ff3c443f08f9462

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc08c.js HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: application/javascript
Content-Length: 19665
Last-Modified: Mon, 18 Dec 2023 16:54:45 GMT
Connection: keep-alive
ETag: "65807955-4cd1"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba34ac6a.jpg

154.38.187.104

13 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba34ac6a.jpg
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
PNG image data, 1000 x 503, 8-bit/color RGB, non-interlaced
Size
13 kB (13431 bytes)
Hash
cc3875d1ebc3a6e7d7433e92891b293c
051a59f13e2271d7e067f911eef4f9f19ced39e1
3b8f3fb29ec95eeb546d4ad0b10f7731ccabbe57f89af984adb97adcbe8bfea1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba34ac6a.jpg HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a; _gcl_au=1.1.1505230787.1714397407
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: image/jpeg
Content-Length: 13431
Last-Modified: Mon, 18 Dec 2023 16:54:40 GMT
Connection: keep-alive
ETag: "65807950-3477"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bbf72.png

154.38.187.104

19 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bbf72.png
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
PNG image data, 284 x 81, 8-bit/color RGBA, non-interlaced
Size
19 kB (19384 bytes)
Hash
693d87acac5a98b012141cccc8fe0955
3eadd7aa762b19ca8c2b025c8f03c821ec30b0b9
1c77b3032e806905de3311ad0962fb27623470ca40c829ea1ef4fb3b28d9e9f3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bbf72.png HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: image/png
Content-Length: 19384
Last-Modified: Mon, 18 Dec 2023 16:54:45 GMT
Connection: keep-alive
ETag: "65807955-4bb8"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba34abec.jpg

154.38.187.104

304 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba34abec.jpg
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1412x787, components 3
Size
304 kB (303510 bytes)
Hash
18059feffbe69ab064be84070e5c41a4
52f0f46e4231db30dacc8a88ee5e72028c5a490c
3a021ce0558c187f82527817161deec598368aedfd3a840fc121228d3a118a69

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba34abec.jpg HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a; _gcl_au=1.1.1505230787.1714397407
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:06 GMT
Content-Type: image/jpeg
Content-Length: 303510
Last-Modified: Mon, 18 Dec 2023 16:54:51 GMT
Connection: keep-alive
ETag: "6580795b-4a196"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

bat.bing.com/bat.js

204.79.197.237

13 kB

URL
bat.bing.com/bat.js
IP
204.79.197.237:0
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Size
13 kB (13261 bytes)
Hash
72bca04fd669eb89fc65d59052d0fc00
27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21
823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721

HTTP Headers

GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0ABDA12FC8D442179C8BB3CF5E85530D Ref B: OSL30EDGE0313 Ref C: 2024-04-29T13:30:07Z
date: Mon, 29 Apr 2024 13:30:07 GMT
X-Firefox-Spdy: h2

vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc205.png

154.38.187.104

15 kB

URL
vertf.com/landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc205.png
IP
154.38.187.104:0
ASN
#40021 NL-811-40021

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
15 kB (15208 bytes)
Hash
a2655d2744a67a95f26d2ec408be2e51
6b4880186119870f2a12aa5d41a13b1ccb2211eb
9a776e89b1c468bd096d6c4c640cd7008fdf51bbfa5666797bf5609af952e31e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landers/datingLPeMail63324ba27d33a/63324ba27d39c/63324ba2bc205.png HTTP/1.1
Host: vertf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Cookie: uclick=us6jydsc; uclickhash=us6jydsc-us6jydsc-h9-0-pm-qdbl-e2-d1167a; _gcl_au=1.1.1505230787.1714397407
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 29 Apr 2024 13:30:07 GMT
Content-Type: image/png
Content-Length: 15208
Last-Modified: Mon, 18 Dec 2023 16:54:43 GMT
Connection: keep-alive
ETag: "65807953-3b68"
Strict-Transport-Security: max-age=31536000
Accept-Ranges: bytes

bat.bing.com/action/0?ti=355008974&tm=gtm002&Ver=2&mid=da51a52f-b9ee-4f4f-a41a-385972094357&sid=98396b00062c11efb164a1e488b4bf94&vid=98397190062c11ef97c20fbc05a5b9bf&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Friends-with-benefits&p=https%3A%2F%2Fvertf.com%2Findex.php%3Fcampid%3D548573%26cat%3DGay%26click_id%3DT1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi%26cost%3D8.612%26cr_id%3D3551036%26format%3Ddirect%26geo%3DUS%26ip%3D146.12.157.32%26key2%3Dal0mq2w0qd%26price_model%3D%7Bprice_model%7D%26referrer%3Dhttps%3A%2F%2Fxhamster.com%2F%26site_id%3D12%26spotid%3D47&r=&lt=1799&evt=pageLoad&sv=1&rn=786074

204.79.197.237

0 B

URL
bat.bing.com/action/0?ti=355008974&tm=gtm002&Ver=2&mid=da51a52f-b9ee-4f4f-a41a-385972094357&sid=98396b00062c11efb164a1e488b4bf94&vid=98397190062c11ef97c20fbc05a5b9bf&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Friends-with-benefits&p=https%3A%2F%2Fvertf.com%2Findex.php%3Fcampid%3D548573%26cat%3DGay%26click_id%3DT1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi%26cost%3D8.612%26cr_id%3D3551036%26format%3Ddirect%26geo%3DUS%26ip%3D146.12.157.32%26key2%3Dal0mq2w0qd%26price_model%3D%7Bprice_model%7D%26referrer%3Dhttps%3A%2F%2Fxhamster.com%2F%26site_id%3D12%26spotid%3D47&r=&lt=1799&evt=pageLoad&sv=1&rn=786074
IP
204.79.197.237:0
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /action/0?ti=355008974&tm=gtm002&Ver=2&mid=da51a52f-b9ee-4f4f-a41a-385972094357&sid=98396b00062c11efb164a1e488b4bf94&vid=98397190062c11ef97c20fbc05a5b9bf&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Friends-with-benefits&p=https%3A%2F%2Fvertf.com%2Findex.php%3Fcampid%3D548573%26cat%3DGay%26click_id%3DT1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi%26cost%3D8.612%26cr_id%3D3551036%26format%3Ddirect%26geo%3DUS%26ip%3D146.12.157.32%26key2%3Dal0mq2w0qd%26price_model%3D%7Bprice_model%7D%26referrer%3Dhttps%3A%2F%2Fxhamster.com%2F%26site_id%3D12%26spotid%3D47&r=&lt=1799&evt=pageLoad&sv=1&rn=786074 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vertf.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=391579D2E4566D6928506DA2E5016CB5; domain=.bing.com; expires=Sat, 24-May-2025 13:30:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3AFB9EF394BD4A2685140D3FC86C1E2C Ref B: OSL30EDGE0313 Ref C: 2024-04-29T13:30:07Z
date: Mon, 29 Apr 2024 13:30:07 GMT
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=974a8748c4

104.21.26.223

200 OK

27 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=974a8748c4
IP
104.21.26.223:443
ASN
#13335 CLOUDFLARENET

Requested by
https://vertf.com/index.php?campid=548573&cat=Gay&click_id=T1s68Ht1d4AVaJYYQ7PknyuRRAu70sf3vWTfhZBqAOAY3iq5bNhKhGkwH3OwwcRw1Q8K1U1kpTQjXv2bv0KngMPGeOjfilcLFdPv0P4I8A_gUIDRUi&cost=8.612&cr_id=3551036&format=direct&geo=US&ip=146.12.157.32&key2=al0mq2w0qd&price_model={price_model}&referrer=https://xhamster.com/&site_id=12&spotid=47
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (26500)
Size
27 kB (26682 bytes)
Hash
76f34b71fc9fb641507ff6a822cc07f5
73ed2f8f21cd40fb496e61306acbb5849d4dbff4
6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8

HTTP Headers

GET /releases/v5.15.4/css/free-v4-shims.min.css?token=974a8748c4 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vertf.com/
Origin: https://vertf.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 29 Apr 2024 13:30:06 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HQsdxtNQol3XNjRGptNGu4Ulgys_v4npJYdOLUMSgvNRlFE7LOD9lA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WTkyBNW9TgTB2nMLbBpo35oC43f%2BE5DMTJQ54yWtMKVKcGE6RMLQ7O4l4%2FzcgRxdcBQxTYEyqzcKytNoOggFsAOc%2F4L8GUlS2%2Biwj31zU%2FXFq1iK%2FJNMng56Q11vSePZJRbY0bRUGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87bfa5116edcb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL