Report - www.googleadservices.com/pagead/aclk?sa=L&ai=CyRiOTwJjZd7nMb2koPMPsuCUmAqyyKOtdLOe-7_dEc6Focr2ARABIIaPgAJgt4SAgPQwoAGCjIGJKcgBBqkCtPCaCrOWbD6oAwGqBO0BT9B7t6l6CqJDxrd8YVByT7tc2dsV0TqfJ1_GykBgeYiahFHhxxgW3wTURhgL-tAQtJY2FRhOBpyxZv0ADKWztmv7dbGm3em3Z0E708ZruC5b62KNfytYSZVfKb1Tf5O68tyRsd3arsovNTWRthdXLEreCI9OJUgh4sSaQ8RvY71psPrqnEHVohd-GtDHRkq5IIHaLoiMLwFyo4etBYyOIkSxZBC4-0B2hewVQOWMW5i7laQ7T5rdop7fZeY2p_ADv9R55EmqFewee7yzCdWhaqNxk-08B0OpOioZ75BYTbdjKHV6hL9kK_YNgQwLwAT06-Hb2QSIBe75g7RMkAYBoAY32AYCgAeCxNHoA4gHAZAHAqgH2baxAqgH4p6xAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAf0mbECqAfmmrECqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHAKAItOipBKgIAbAIArgIAdIIHAiAgICABBACGEIyAoAEOge_8YCAgIBESLfmvyGxCcoaOoGdkD0qgAoTmAsByAsF0AstgAwBogwUKhIKEOS0sQLutbECtbixAru7sQLSDAIIAegMCZoNAS2qDQJOR8gNAdgTDIIUERoPbWFpbC5nb29nbGUuY29tqBUH0BUBmBYB-BYBgBcBuhcCEAE&gclid=CjwKCAiA9ourBhAVEiwA3L5RFgn7euqyDdZN4GkkyO2LQmDf013OYVzEBgezrsfATdCpsszHFoawIRoCmkMQAvD_BwE&cit=CkUKCQiA9ourBhDRARI0AAqinVblpJcV6hFdI6WOA2AnhGqpxF80GubQcgDQWzv_iw9RxvXDM10y5brpKyPNYPjmTBoCGw_w_wcB&num=1&cid=CAQSIgDICaaNNWlrFPVRVO5FNn8zxEPkVnKT9wxodEhzrNIxD5oYAQ&sig=AOD64_23cH0DCJLByH5G6DznpTBH4lKXmw&client=ca-gmail&label=gmail_message_ad_external_click&adurl=https://resettingdetails.ju.mp?/YS5wQHNsdXJwbWFpbC5uZXQ=

Report Overview

Visitedpublic

2025-07-23 03:30:35

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
realresetwarningset.xyz	unknown	2025-07-22	2025-07-22	2025-07-22	2.6 kB	9.3 kB	104.21.112.1
www.googleadservices.com	107	2003-06-19	2012-06-26	2025-07-19	1.8 kB	17 kB	142.250.178.66
resettingdetails.ju.mp	unknown	unknown	2025-07-22	2025-07-22	1.0 kB	17 kB	104.18.32.215

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-22	medium	resettingdetails.ju.mp	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net	Eval	4.4 kB	2025-07-23	2025-07-23
URL realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net IP / ASN 104.21.112.1 #13335 CLOUDFLARENET Introduced by Eval Embedded false Resource Info First Seen 2025-07-23 Last Seen 2025-07-23 Times Seen 1 Size 4.4 kB (4367 bytes) MD5 78e75eb92be87288a1a882ac74d18649 SHA1 f67a508ad8c2b248239e8e69520939ee34fdbbd2 SHA256 cc920e7e9cbd7d36aeae8d2bc04729a7f221ca1330f1b2a93166e7db14017e47 Format Code Loading...

	realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net	ScriptElement	5.9 kB	2025-07-23	2025-07-23
URL realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net IP / ASN 104.21.112.1 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2025-07-23 Last Seen 2025-07-23 Times Seen 1 Size 5.9 kB (5903 bytes) MD5 4cc2a9266ef1ab558fda232970d0a920 SHA1 5c48ecf99944444f492fb9e3e43a9d2f6f9c9356 SHA256 acf48859739fa0de2282eb1435e622013db22975f7fb64256b1a0941736c9339 Format Code Loading...

HTTP Transactions (6)

URL IP Response Size

GET resettingdetails.ju.mp/favicon.ico

104.18.32.215

404 Not Found

637 B

URL

resettingdetails.ju.mp/favicon.ico

IP / ASN

104.18.32.215

#13335 CLOUDFLARENET

Requested byhttps://resettingdetails.ju.mp/?/YS5wQHNsdXJwbWFpbC5uZXQ=

Resource Info

File typeHTML document, ASCII text, with very long lines (637), with no line terminators

First Seen2023-04-09

Last Seen2025-07-29

Times Seen149

Size637 B (637 bytes)

MD51edbd3ce1cf8863d9f95eae3c6119b21

SHA1c5455f1905107eaff94e3e60682538ffa0a8c2f4

SHA256219e5ae2778f7c3e1a9a0609f5f465a4fa58a9cf0655657d9274b3c5bd043671

Certificate Info

IssuerGoogle Trust Services

Subjectju.mp

Fingerprint41:E6:37:F9:0A:ED:A9:39:A9:D1:D9:CB:46:12:54:70:13:CA:C7:4D

ValidityTue, 01 Jul 2025 12:56:08 GMT - Mon, 29 Sep 2025 13:55:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: resettingdetails.ju.mp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://resettingdetails.ju.mp/?/YS5wQHNsdXJwbWFpbC5uZXQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 23 Jul 2025 03:30:00 GMT
content-type: text/html
vary: Accept-Encoding
server: cloudflare
cf-ray: 963818c06ba156b1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net

104.21.112.1

403 Forbidden

146 B

URL

realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net

IP / ASN

104.21.112.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-05

Last Seen2025-08-02

Times Seen15567

Size146 B (146 bytes)

MD59fe3cb2b7313dc79bb477bc8fde184a7

SHA14d7b3cb41e90618358d0ee066c45c76227a13747

SHA25632f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864

Certificate Info

IssuerGoogle Trust Services

Subjectrealresetwarningset.xyz

Fingerprint74:1B:B7:8D:7B:5D:3B:47:42:BC:7D:03:18:7C:5B:8E:71:C7:12:B8

ValidityTue, 22 Jul 2025 12:57:42 GMT - Mon, 20 Oct 2025 13:56:33 GMT

HTTP Headers

GET /3J7A3J7K2H9Z5M1B8H3J7 HTTP/1.1
Host: realresetwarningset.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://resettingdetails.ju.mp/
DNT: 1
Connection: keep-alive
Cookie: DhM_l7BAlYrK2wvsO5AlLnmpbdg=d8zpgSlhfdpy5rQIAOW24SI5t5I; Wonz9NrzAav83PSASVb9G-HzZaA=1753241392; 5fU-zbYZSAtsux3RasVzGA3FFpE=1753327792; ea5grc_zLwgF5eByR4jx1bMzSAw=W2KyIqOS1Z5BQ3pRoL9CHLGERLk; dBj_FEYpmzXPLq_gK-ksR7lXt-E=lkLPZiL_UVgRTxwDers97UXe5XU; uMlcujiDrn0hgJPduoqjABdseBE=LwzgqdY6wFFHjwBlNyVbmCZBrVw; 40cVsFbO1zfkwDMwrAGtzUj9Ato=1753241399; vYy6CrzFWVnoTAMQLXi4V0r8X9Y=1753327799; pDZQs8vwJ-CZRWTrAEUasyUuzFM=EyMkv6qWgkDLCZmzf97HwGmtvaM; MooMciC-gcz6u4P6jYTlYrTDxtM=rlhJ3znMzjPTj2j9MLCUZSBn0js
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Wed, 23 Jul 2025 03:30:01 GMT
content-type: text/html
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kLqrO9WJPKnzO2yHQxR5ddc0rwvAmE2osourY3HOKYJFwv0OgOli4a1xN5uLx8mreda4bm9FtJfftWEyL6BfzfEkj7kkourkcnbBiqk5zogD8%2FFVCg%3D%3D"}]}
content-encoding: br
server: cloudflare
cf-ray: 963818c42b700b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET realresetwarningset.xyz/favicon.ico

104.21.112.1

403 Forbidden

146 B

URL

realresetwarningset.xyz/favicon.ico

IP / ASN

104.21.112.1

#13335 CLOUDFLARENET

Requested byhttps://realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-05

Last Seen2025-08-02

Times Seen15567

Size146 B (146 bytes)

MD59fe3cb2b7313dc79bb477bc8fde184a7

SHA14d7b3cb41e90618358d0ee066c45c76227a13747

SHA25632f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864

Certificate Info

IssuerGoogle Trust Services

Subjectrealresetwarningset.xyz

Fingerprint74:1B:B7:8D:7B:5D:3B:47:42:BC:7D:03:18:7C:5B:8E:71:C7:12:B8

ValidityTue, 22 Jul 2025 12:57:42 GMT - Mon, 20 Oct 2025 13:56:33 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: realresetwarningset.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7
Cookie: DhM_l7BAlYrK2wvsO5AlLnmpbdg=d8zpgSlhfdpy5rQIAOW24SI5t5I; Wonz9NrzAav83PSASVb9G-HzZaA=1753241392; 5fU-zbYZSAtsux3RasVzGA3FFpE=1753327792; ea5grc_zLwgF5eByR4jx1bMzSAw=W2KyIqOS1Z5BQ3pRoL9CHLGERLk; dBj_FEYpmzXPLq_gK-ksR7lXt-E=lkLPZiL_UVgRTxwDers97UXe5XU; uMlcujiDrn0hgJPduoqjABdseBE=LwzgqdY6wFFHjwBlNyVbmCZBrVw; 40cVsFbO1zfkwDMwrAGtzUj9Ato=1753241399; vYy6CrzFWVnoTAMQLXi4V0r8X9Y=1753327799; pDZQs8vwJ-CZRWTrAEUasyUuzFM=EyMkv6qWgkDLCZmzf97HwGmtvaM; MooMciC-gcz6u4P6jYTlYrTDxtM=rlhJ3znMzjPTj2j9MLCUZSBn0js
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Wed, 23 Jul 2025 03:30:01 GMT
content-type: text/html
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
cache-control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable
pragma: public
age: 29839
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=E%2FaQzcItHopSBhiALiaNdD2IfiMWrLef%2Fz6qCo3AMgG97BU4iIV0b3tXwVm3%2F6iczlpNLRx44N2BflH5Ct3IKlPYRHn0YGmuqPqOxKGSg0FucbwkhQ%3D%3D"}]}
content-encoding: br
server: cloudflare
cf-ray: 963818c4fbf90b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET www.googleadservices.com/pagead/aclk?sa=L&ai=CyRiOTwJjZd7nMb2koPMPsuCUmAqyyKOtdLOe-7_dEc6Focr2ARABIIaPgAJgt4SAgPQwoAGCjIGJKcgBBqkCtPCaCrOWbD6oAwGqBO0BT9B7t6l6CqJDxrd8YVByT7tc2dsV0TqfJ1_GykBgeYiahFHhxxgW3wTURhgL-tAQtJY2FRhOBpyxZv0ADKWztmv7dbGm3em3Z0E708ZruC5b62KNfytYSZVfKb1Tf5O68tyRsd3arsovNTWRthdXLEreCI9OJUgh4sSaQ8RvY71psPrqnEHVohd-GtDHRkq5IIHaLoiMLwFyo4etBYyOIkSxZBC4-0B2hewVQOWMW5i7laQ7T5rdop7fZeY2p_ADv9R55EmqFewee7yzCdWhaqNxk-08B0OpOioZ75BYTbdjKHV6hL9kK_YNgQwLwAT06-Hb2QSIBe75g7RMkAYBoAY32AYCgAeCxNHoA4gHAZAHAqgH2baxAqgH4p6xAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAf0mbECqAfmmrECqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHAKAItOipBKgIAbAIArgIAdIIHAiAgICABBACGEIyAoAEOge_8YCAgIBESLfmvyGxCcoaOoGdkD0qgAoTmAsByAsF0AstgAwBogwUKhIKEOS0sQLutbECtbixAru7sQLSDAIIAegMCZoNAS2qDQJOR8gNAdgTDIIUERoPbWFpbC5nb29nbGUuY29tqBUH0BUBmBYB-BYBgBcBuhcCEAE&gclid=CjwKCAiA9ourBhAVEiwA3L5RFgn7euqyDdZN4GkkyO2LQmDf013OYVzEBgezrsfATdCpsszHFoawIRoCmkMQAvD_BwE&cit=CkUKCQiA9ourBhDRARI0AAqinVblpJcV6hFdI6WOA2AnhGqpxF80GubQcgDQWzv_iw9RxvXDM10y5brpKyPNYPjmTBoCGw_w_wcB&num=1&cid=CAQSIgDICaaNNWlrFPVRVO5FNn8zxEPkVnKT9wxodEhzrNIxD5oYAQ&sig=AOD64_23cH0DCJLByH5G6DznpTBH4lKXmw&client=ca-gmail&label=gmail_message_ad_external_click&adurl=https://resettingdetails.ju.mp?/YS5wQHNsdXJwbWFpbC5uZXQ=

142.250.178.66

302 Found

16 kB

URL

IP / ASN

142.250.178.66

#15169 GOOGLE

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606062

Size16 kB (16147 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerGoogle Trust Services

Subjectwww.googleadservices.com

FingerprintED:D3:1D:1D:FA:F4:BE:6B:C8:FD:F3:33:88:71:B7:8B:B9:FE:19:3F

ValidityMon, 23 Jun 2025 08:41:48 GMT - Mon, 15 Sep 2025 08:41:47 GMT

HTTP Headers

GET /pagead/aclk?sa=L&ai=CyRiOTwJjZd7nMb2koPMPsuCUmAqyyKOtdLOe-7_dEc6Focr2ARABIIaPgAJgt4SAgPQwoAGCjIGJKcgBBqkCtPCaCrOWbD6oAwGqBO0BT9B7t6l6CqJDxrd8YVByT7tc2dsV0TqfJ1_GykBgeYiahFHhxxgW3wTURhgL-tAQtJY2FRhOBpyxZv0ADKWztmv7dbGm3em3Z0E708ZruC5b62KNfytYSZVfKb1Tf5O68tyRsd3arsovNTWRthdXLEreCI9OJUgh4sSaQ8RvY71psPrqnEHVohd-GtDHRkq5IIHaLoiMLwFyo4etBYyOIkSxZBC4-0B2hewVQOWMW5i7laQ7T5rdop7fZeY2p_ADv9R55EmqFewee7yzCdWhaqNxk-08B0OpOioZ75BYTbdjKHV6hL9kK_YNgQwLwAT06-Hb2QSIBe75g7RMkAYBoAY32AYCgAeCxNHoA4gHAZAHAqgH2baxAqgH4p6xAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAf0mbECqAfmmrECqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHAKAItOipBKgIAbAIArgIAdIIHAiAgICABBACGEIyAoAEOge_8YCAgIBESLfmvyGxCcoaOoGdkD0qgAoTmAsByAsF0AstgAwBogwUKhIKEOS0sQLutbECtbixAru7sQLSDAIIAegMCZoNAS2qDQJOR8gNAdgTDIIUERoPbWFpbC5nb29nbGUuY29tqBUH0BUBmBYB-BYBgBcBuhcCEAE&gclid=CjwKCAiA9ourBhAVEiwA3L5RFgn7euqyDdZN4GkkyO2LQmDf013OYVzEBgezrsfATdCpsszHFoawIRoCmkMQAvD_BwE&cit=CkUKCQiA9ourBhDRARI0AAqinVblpJcV6hFdI6WOA2AnhGqpxF80GubQcgDQWzv_iw9RxvXDM10y5brpKyPNYPjmTBoCGw_w_wcB&num=1&cid=CAQSIgDICaaNNWlrFPVRVO5FNn8zxEPkVnKT9wxodEhzrNIxD5oYAQ&sig=AOD64_23cH0DCJLByH5G6DznpTBH4lKXmw&client=ca-gmail&label=gmail_message_ad_external_click&adurl=https://resettingdetails.ju.mp?/YS5wQHNsdXJwbWFpbC5uZXQ= HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
p3p: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
date: Wed, 23 Jul 2025 03:29:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64
location: https://resettingdetails.ju.mp?/YS5wQHNsdXJwbWFpbC5uZXQ=
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: adclick_server
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET resettingdetails.ju.mp/?/YS5wQHNsdXJwbWFpbC5uZXQ=

104.18.32.215

200 OK

16 kB

URL

resettingdetails.ju.mp/?/YS5wQHNsdXJwbWFpbC5uZXQ=

IP / ASN

104.18.32.215

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (8127)

First Seen2025-07-22

Last Seen2025-07-23

Times Seen17

Size16 kB (16147 bytes)

MD5d84468a04e8f27150ef5f442b1d010c6

SHA1d52e16178810b7ec4598c0a21c410e75e237c452

SHA256c418491bd0cc742466b4d1693b2147527c67847abf3a0ba199ca14949a99f578

Certificate Info

IssuerGoogle Trust Services

Subjectju.mp

Fingerprint41:E6:37:F9:0A:ED:A9:39:A9:D1:D9:CB:46:12:54:70:13:CA:C7:4D

ValidityTue, 01 Jul 2025 12:56:08 GMT - Mon, 29 Sep 2025 13:55:45 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?/YS5wQHNsdXJwbWFpbC5uZXQ= HTTP/1.1
Host: resettingdetails.ju.mp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 23 Jul 2025 03:29:59 GMT
content-type: text/html
last-modified: Tue, 22 Jul 2025 14:51:00 GMT
cache-control: max-age=0
expires: Wed, 23 Jul 2025 03:29:59 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 963818b978e956b1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net

104.21.112.1

503 Service Unavailable

6.4 kB

URL

realresetwarningset.xyz/3J7A3J7K2H9Z5M1B8H3J7#a.p@slurpmail.net

IP / ASN

104.21.112.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (5987)

First Seen2025-07-23

Last Seen2025-07-23

Times Seen1

Size6.4 kB (6367 bytes)

MD57d372b82be5780d471219a6376270007

SHA17424c95314bb5f194d0579aba63cd99be638ceaf

SHA256320fde563c5814caaabf617cec539d1bd91b155e1a372aa2cef66befbbd1fa34

Certificate Info

IssuerGoogle Trust Services

Subjectrealresetwarningset.xyz

Fingerprint74:1B:B7:8D:7B:5D:3B:47:42:BC:7D:03:18:7C:5B:8E:71:C7:12:B8

ValidityTue, 22 Jul 2025 12:57:42 GMT - Mon, 20 Oct 2025 13:56:33 GMT

HTTP Headers

GET /3J7A3J7K2H9Z5M1B8H3J7 HTTP/1.1
Host: realresetwarningset.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://resettingdetails.ju.mp/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 503 Service Unavailable
date: Wed, 23 Jul 2025 03:30:00 GMT
content-type: text/html; charset=utf-8
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
x-frame-options: SAMEORIGIN
cache-control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Y9dzjf%2FO9xEFF9USsuUN1WQ9w25SUnU1u6jHXAjDoVEeA%2BkjIPMjVSSeNttjnvpftxweqFVaXM7flzHB0gZswTxkPI%2B6Lm7i775yxTl8KQafyw%2Fs5Q%3D%3D"}]}
server: cloudflare
set-cookie: DhM_l7BAlYrK2wvsO5AlLnmpbdg=d8zpgSlhfdpy5rQIAOW24SI5t5I; Path=/; Max-Age=86400; Expires=Thu, 24 Jul 2025 03:29:52 GMT
Wonz9NrzAav83PSASVb9G-HzZaA=1753241392; Path=/; Max-Age=86400; Expires=Thu, 24 Jul 2025 03:29:52 GMT
5fU-zbYZSAtsux3RasVzGA3FFpE=1753327792; Path=/; Max-Age=86400; Expires=Thu, 24 Jul 2025 03:29:52 GMT
ea5grc_zLwgF5eByR4jx1bMzSAw=W2KyIqOS1Z5BQ3pRoL9CHLGERLk; Path=/; Max-Age=86400; Expires=Thu, 24 Jul 2025 03:29:52 GMT
cf-ray: 963818c069ac0b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2