Report - clck.ru/3AJ2SL

Report Overview

Submitted URL
clck.ru/3AJ2SL
IP
213.180.204.221
ASN
#13238 YANDEX LLC
Submitted
2024-04-25 23:36:04
Access
public
Website Title
cuuen35.com/?index=278
Final URL
cuuen35.com/?index=278
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cuuen35.com	unknown	unknown	No data	No data	1.3 kB	1.1 kB	168.76.121.114
clck.ru	105004	2007-08-13	2017-02-01	2024-04-18	468 B	1.4 kB	213.180.204.221
sba.yandex.ru	unknown	1997-09-23	2020-04-14	2024-04-18	633 B	546 B	87.250.250.232

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 23:35:40	medium	168.76.121.114	Client IP	ET DROP Spamhaus DROP Listed Traffic Inbound group 27

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	clck.ru/3AJ2SL	213.180.204.221	302 FOUND	572 B
URL User Request GET HTTP/1.1 clck.ru/3AJ2SL IP 213.180.204.221:443 ASN #13238 YANDEX LLC Certificate IssuerGlobalSign nv-sa Subjectclck.ru FingerprintE4:1A:F4:4C:60:E3:51:E7:15:7A:DF:84:8A:8D:54:A5:10:6B:66:E9 ValidityTue, 26 Dec 2023 17:08:29 GMT - Mon, 24 Jun 2024 20:59:59 GMT File type HTML document, ASCII text, with very long lines (462) Size 572 B (572 bytes) Hash c1146c44886a891b5693ce6a9a083b16 cd0c35f58e8e144b5672c8b6d84b7adfea8f0436 6519de83639fc654c929c73cce061fbf376bbad48603bdaf85730df63b2827df HTTP Headers `GET /3AJ2SL HTTP/1.1 Host: clck.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 FOUND Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Origin: * Content-Length: 572 Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 23:35:39 GMT Location: https://sba.yandex.ru/redirect?url=http%3A%2F%2Fcuuen35.com%3Findex%3D278&client=clck&request_id=1714088139402804-7635916536880025031&sign=6774916921b3b34094c050217e55c356 Set-Cookie: _yasc=pVoA+OSkytLZiFvNF+9UD2PpLvgsjyzQcEzYtkNWcnyKBdDbta33ULtScLL6Uw4xzQ==; domain=.clck.ru; path=/; expires=Sun, 23 Apr 2034 23:35:39 GMT; secure Strict-Transport-Security: max-age=31536000

	sba.yandex.ru/redirect?url=http%3A%2F%2Fcuuen35.com%3Findex%3D278&client=clck&request_id=1714088139402804-7635916536880025031&sign=6774916921b3b34094c050217e55c356	87.250.250.232	302 FOUND	262 B
URL User Request GET HTTP/1.1 sba.yandex.ru/redirect?url=http%3A%2F%2Fcuuen35.com%3Findex%3D278&client=clck&request_id=1714088139402804-7635916536880025031&sign=6774916921b3b34094c050217e55c356 IP 87.250.250.232:443 ASN #13238 YANDEX LLC Certificate IssuerGlobalSign nv-sa Subjectsba.yandex.net Fingerprint08:96:BF:33:F4:7A:45:90:A9:84:93:18:F9:BA:10:8F:6C:CC:78:F7 ValidityTue, 26 Dec 2023 16:46:17 GMT - Mon, 24 Jun 2024 20:59:59 GMT File type HTML document, ASCII text Size 262 B (262 bytes) Hash 3ca90b9067fd011f09261ba00a4f3329 9b8707d9a03db2d9f941500489bcc9db306f3ddd 7fd0cda69dffd38840777afbb067d0635771a0883d143aa28be6bd930bf70340 HTTP Headers GET /redirect?url=http%3A%2F%2Fcuuen35.com%3Findex%3D278&client=clck&request_id=1714088139402804-7635916536880025031&sign=6774916921b3b34094c050217e55c356 HTTP/1.1 Host: sba.yandex.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: gdpr=1 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 302 FOUND Content-Length: 262 Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 23:35:39 GMT Location: http://cuuen35.com?index=278 Strict-Transport-Security: max-age=3600; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block`

	cuuen35.com/?index=278	168.76.121.114	404 Not Found	162 B
URL User Request GET HTTP/2 cuuen35.com/?index=278 IP 168.76.121.114:443 ASN #137951 ASLINE LIMITED Certificate IssuerLet's Encrypt Subjectcuuen34.com FingerprintE3:FA:20:82:CA:E9:AD:74:CD:05:7A:E9:48:9D:50:31:FD:28:5A:01 ValidityThu, 25 Apr 2024 12:01:04 GMT - Wed, 24 Jul 2024 12:01:03 GMT File type HTML document, ASCII text, with CRLF line terminators Size 162 B (162 bytes) Hash 4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a HTTP Headers `GET /?index=278 HTTP/1.1 Host: cuuen35.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 25 Apr 2024 23:34:33 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://cuuen35.com/?index=278 Strict-Transport-Security: max-age=31536000`

	cuuen35.com/?index=278	168.76.121.114	404 Not Found	162 B
URL User Request GET HTTP/2 cuuen35.com/?index=278 IP 168.76.121.114:443 ASN #137951 ASLINE LIMITED Certificate IssuerLet's Encrypt Subjectcuuen34.com FingerprintE3:FA:20:82:CA:E9:AD:74:CD:05:7A:E9:48:9D:50:31:FD:28:5A:01 ValidityThu, 25 Apr 2024 12:01:04 GMT - Wed, 24 Jul 2024 12:01:03 GMT File type HTML document, ASCII text, with CRLF line terminators Size 162 B (162 bytes) Hash 4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a HTTP Headers `GET /?index=278 HTTP/1.1 Host: cuuen35.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Cookie: PHPSESSID=dni9vmh830oig2l9suqqj6aspj Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 25 Apr 2024 23:34:35 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://cuuen35.com/?index=278 Strict-Transport-Security: max-age=31536000`

	cuuen35.com/favicon.ico	168.76.121.114	404 Not Found	0 B
URL GET HTTP/2 cuuen35.com/favicon.ico IP 168.76.121.114:443 ASN #137951 ASLINE LIMITED Requested by https://cuuen35.com/?index=278 Certificate IssuerLet's Encrypt Subjectcuuen34.com FingerprintE3:FA:20:82:CA:E9:AD:74:CD:05:7A:E9:48:9D:50:31:FD:28:5A:01 ValidityThu, 25 Apr 2024 12:01:04 GMT - Wed, 24 Jul 2024 12:01:03 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: cuuen35.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://cuuen35.com/?index=278 Cookie: PHPSESSID=dni9vmh830oig2l9suqqj6aspj Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found server: nginx date: Thu, 25 Apr 2024 23:34:35 GMT content-type: text/html; charset=UTF-8 vary: Accept-Encoding expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-encoding: gzip X-Firefox-Spdy: h2`