Report Overview
Visitedpublic
2025-04-20 01:17:19
Tags
Submit Tags
URL
xred2.net/actor/sarah-sofhia/
Finishing URL
xred2.net/actor/sarah-sofhia/
IP / ASN
104.21.71.137
#13335 CLOUDFLARENET
Title
Arquivo de Sarah Sofhia - xred2

Detections

urlquery
0
Network Intrusion Detection
21
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
xred2.net
unknown2025-04-022025-04-202025-04-20
s3t3d2y8.afcdn.net
unknown2022-06-272022-08-082025-04-19
puabvo.com
unknown2023-07-312023-07-312025-04-17
adsco.re
85412017-02-142017-04-032025-04-16
feldot.com
unknown2025-03-282025-04-042025-04-17
a.magsrv.com
unknown2023-08-012023-08-042025-04-15
6.adsco.re
178122017-02-142018-01-152025-04-16
ekc0okhqazs7.s4.adsco.re
unknown2017-02-142025-04-202025-04-20
s.magsrv.com
unknown2023-08-012023-08-042025-04-19
blockadsnot.com
328962020-04-182020-04-282025-04-17
www.googletagmanager.com
752011-11-112012-10-042025-04-16
ekc0okhqazs7.l4.adsco.re
unknown2017-02-142025-04-202025-04-20
ekc0okhqazs7.n4.adsco.re
unknown2017-02-142025-04-202025-04-20
go.xlivrdr.com
unknown2021-06-222021-07-022025-04-16
4.adsco.re
191792017-02-142021-01-042025-04-14
c.adsco.re
165772017-02-142017-11-292025-04-13
www.blockadsnot.com
750432020-04-182020-04-182025-04-17

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP
185.200.118.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
38.132.109.186
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.116.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.118.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
38.132.109.186
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.116.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.118.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
38.132.109.186
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.116.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.118.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
38.132.109.186
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.116.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.118.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
38.132.109.186
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.116.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.118.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
38.132.109.186
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.116.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.118.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
38.132.109.186
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
lowClient IP
185.200.116.90
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (30)

HTTP Transactions (51)

URLIPResponseSize
GET a.magsrv.com/ad-provider.js
95.173.205.15200 OK182 kB
GET xred2.net/wp-content/uploads/2025/04/fgdfg-2.png
172.67.170.153200 OK1.4 MB
GET s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11PW04DMQy8ChdoNH4lTr/5BgnEAbabLV8tUovQIvnwJBWlFbbiKJ5xZsxg20A3VB+YtlS24KiUKpJyItN4en4JpVhPS+N0XD5DqGZGVMmCHARzdg2zUrz0Gx7ZoVDvmJr7+EQRErhmAiRziYJ4e328HBrZScDKhv4YskEeOgB2rATWPtx4t3i3MtfadlbZZdIKaTlrZmvS6bgze1UkliHBNxOxGUwhFVaNHohLezp/H+eIO+JI+/M/pv6jv0i57UiXek6H6f18+krzx6G3evQdSXXgYcS6z9g3q9g180LUMtNsxTCRyA8JSnD7mgEAAA==&cb=e2e_68044b0e16e556.00391482&scr_info=YXN5bmN8fDM%3D
95.211.229.247200 OK0 B
GET xred2.net/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0
172.67.170.153200 OK31 kB
GET xred2.net/wp-content/plugins/burst-statistics/assets/js/build/burst.min.js?ver=1.8.0.1
172.67.170.153200 OK6.3 kB
GET go.xlivrdr.com/smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&affiliateClickId=orddNHdLHTPHNVS4ASOqqsttppddLNXNRTW6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOdtPpvbvtPrddtpVdPbRnTdLRtXXTXPVtQ6Vyib7Txg3M6ae2VU0s9LnTVuldK6V0rpXSuldK6aymqaaa2edznSuldK6V0rpXSuldK6V0zpXSuLH_nyUiI9Q_uc5201u1G9tvFtlGk.2tPFE2mtG.1W9093Fzg.w--&sourceId=5578844&p1=6294594&p2=xred2.net&p3=5578844&noc=1&ax=0&skipOffset=00:00:05
104.18.40.50302 Found2.6 kB
GET xred2.net/wp-content/uploads/2025/04/cropped-XRED2-192x192.png
172.67.170.153200 OK5.8 kB
GET 4.adsco.re:2087/
162.252.214.5200 OK45 B
GET 6.adsco.re/
0.0.0.0 0 B
POST ekc0okhqazs7.s4.adsco.re/
185.200.116.60200 OK0 B
GET blockadsnot.com/xwjomgdiqgxxoraz?bQhZtpyO=BQOCAAAAAAAACZUAAqC3adsoB6dSYSgu6Gpridb5YETGuOkgjJycQwK95vD9gib4wuSsrS2Yo2g8izoeR0wcz-NahIfkFerDOqkGyyg0F8MrkEyU6dFqn0ahjS_S1qc7HS2zqot_Dzuq-vENs8TcxKbKmn62rVJhViLzLn8JASrPy3xy1sra1cdV9gQX0NBcVKVBCKgcIu9VFiUezujHzQH5mSyJWPlobEbj0v97GT_36oSXWx0JRdB3BCEqoGyHLDKRCKc8KhtKAZI5wEPDY2L6BziKAXZuoR5IJOSF4QhH4pnwZ4tUg_S0Lqpgem-Q2qub7FHbyvpNVpEF_dkC6qnGCbegblQjDR3hxyGIFFpnZ4ODXElvXcozWVO_WhiweVmJVyeWvD_Bm2GRB6fC1ZqieQK82EQwBfCCfnPxmPjtS_CSayyWzH0XIFp8_VgivKziOzxh1Cp10cDW3fNyfNiBJL0EXuEOdWi5a7GOBTfIMRC4kVTZ5i5hMDFtMXVg7ymC5mCzsHn2YLlk4Y2MR4I1v0Q7Nq_FJmkGJESYWbiX-u1me1oyWmKYUZ-kNq4Wwd5Z0-HhaavkgHCa4YRWfeqAgVgPWgB1ss9YOESZiV1LrVCbSfVRW3kVanneZOjTrlPSucQ9sR9oYXEaYN5PF2N50pGaR4s32HgY1fomS8bqiByNb_8EyyFWzcDUj11MWMUENhSaayBl4nPdtUaosyryLxnnjh1M5B_6ramp2Wm9WThB6f6rt8R8cCQARcB1HpNAWiDAtuvqyclbxobDSNBtyJUfg0OJoe8WZMdnJFYDvC1Wm4iZ1h4i5vH6kl8VKCznj7ph4ZDfBWljuwiSINOC6EGNJb-ymsVAwT_hLcBORn_N00vA28ys-kTi9mriBmxPlOJpYNG2pqVqqCqrlRiwAlHv4MRrhkN_GuGJdwdV_FPYlII5XxFVQsnebpCvky90yBWxU9J_gsbXYuJX25v5oZbRs76TgrOfhipu0kFn1HYKsH_Iv7v9VvSVJlrOr-RmiYGhwMQdTo4YrA93v-JZ8AUClkEVDAUc8l5U4_4LjnFFDXeYsmyi1ipGLgypf-XluM1kyWRb2ld4xHdml3CT0G8WpWoI_bK7R1xSMGE1uKisTHyEgZU_5ZehWpZ0XOcPwBeq7TYsRwGVdbdkW2YKFQ43m1oS8g2QosfZD56xhvxkCbhsYuZf874k&sVoyWeRA=4&owRnTpeS=5189272&eaXVCnTv=&oJPcBvqK=0,0&pmiZzUwJ=&KxQDmFLz=&s=1280,1024,1,1280,1024,0
208.95.112.254200 OK44 B
GET xred2.net/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1744255709
172.67.170.153200 OK39 kB
GET s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11PW04DMQy8ChdoNH4lTr/5BgnEAXY3K75apLZCRfLhSRZRKjxK4njG8pjBtoPuqD4w7answVEpVSTlRKbx9PwSSnE9rY3Tcb2EUM2MqJIFOQjm7BpmpXjpLzyyQ6EeRMJejD0UIYFfJFDlKIi318ft0ECXAFc29M8YGoVDB8GOK4G1tzaeV+9GllrbbJVdJq2QlrNmtiZdjjurt3lm3U3wn4XYDaWQCqtGD8RWns5fxyXiTjhgN/ej6z/7Ay5+y2m7z+kwvZ9Pn2n5OPRSj74jqQ4+Jl0y1kmazS4QXtEmIQaVufC8tG8W1VCGmAEAAA==&cb=e2e_68044b0e16d356.47999734&scr_info=YXN5bmN8fDM%3D
95.211.229.247200 OK0 B
GET xred2.net/wp-content/themes/retrotube/style.css?ver=1.7.6.1744255709
172.67.170.153200 OK75 kB
GET xred2.net/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18
172.67.170.153200 OK20 kB
GET s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA11PW07EMBC7Chdo5Hnlsd98gwTiAG1S+NpF2iJUpDk8aQVlxViZRGOP7DDYBuhA5Y7pROkE9kKhICgHMvWHxydX8vU6Nw6X+cOFSmR4kSiITrDMWd0spSz9RvaYodDsRMI5mcAVLo5fBHRWPcFfnu/3Qx3sAqxs6O/N1Cm7bgxnrATWvtp4mnMPUktpkxXOMmqBtBg1sjXpctxEPfzEdoMjgQ+bUEiFVb0XfB+Py9elut8IN9gRftv6z/4w6e+DtPclnMe35foZ6vu5j3pRp1Q33mvVSNamMSKhpJEqJ5rtlacidSrpG4B53hCXAQAA&cb=e2e_68044b0e0e56d2.08233412&scr_info=YXN5bmN8fDM%3D
95.211.229.247200 OK0 B
GET s3t3d2y8.afcdn.net/library/319620/f4bcd4ee211837e0c2a2f362241bdae0ef49cd0d.mp4
95.173.205.15206 Partial Content285 kB
GET 6.adsco.re:2087/
0.0.0.0 0 B
GET xred2.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
172.67.170.153200 OK88 kB
GET puabvo.com/code/native.js?h=waWQiOjExOTk4MDUsInNpZCI6MTUwMTU1Miwid2lkIjo3MDk1MjIsInNyYyI6Mn0=eyJ
88.208.38.96200 OK7.9 kB
GET go.xlivrdr.com/api/models/vast?action=sbSignupWithModelSoft&affiliateClickId=orddNHdLHTPHNVS4ASOqqsttppddLNXNRTW6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOdtPpvbvtPrddtpVdPbRnTdLRtXXTXPVtQ6Vyib7Txg3M6ae2VU0s9LnTVuldK6V0rpXSuldK6aymqaaa2edznSuldK6V0rpXSuldK6V0zpXSuLH_nyUiI9Q_uc5201u1G9tvFtlGk.2tPFE2mtG.1W9093Fzg.w--&ax=0&campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af&campaignType=smartpop&creativeId=64aa773d65c5f686d1966f029df63edc83b8a97f98d2fb375d94354688799472&duration=00%3A00%3A30&iterationId=919937&masterSmartpopId=2683&noc=1&p1=6294594&p2=xred2.net&p3=5578844&ruleId=29&skipOffset=00%3A00%3A05&smartpopId=3564&sourceId=5578844&tag=girls&usePreroll=true&userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9&variationId=34019&videoType=ol
104.18.40.50200 OK2.6 kB
GET www.googletagmanager.com/gtag/js?id=G-7LL0RB8SKX&l=dataLayer&cx=c&gtm=45He54g3h1v9210206512za200&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316~103116025
142.250.74.168200 OK386 kB
GET a.magsrv.com/ad-provider.js
95.173.205.15200 OK182 kB
POST adsco.re/p
162.252.214.5200 OK1.2 kB
GET a.magsrv.com/ad-provider.js
95.173.205.15200 OK182 kB
GET a.magsrv.com/ad-provider.js
95.173.205.15200 OK182 kB
GET xred2.net/wp-content/uploads/2025/04/cropped-XRED2.png
172.67.170.153200 OK281 kB
GET feldot.com/v1/sdk.js?h=waWQiOjExOTk4MDUsInNpZCI6MTUwMTU1Miwid2lkIjo3MDk1MjIsInNyYyI6Mn0=eyJ&d=xred2.net&sw=evasw.js&pbd=iOjExOTk4MDUsInNpZCI6MTUwMTU1Miwid2lkIjo3MDk1MjJ9eyJwaWQ
172.67.181.169200 OK5.2 kB
GET 4.adsco.re/
162.252.214.5200 OK45 B
GET xred2.net/wp-content/plugins/burst-statistics/helpers/timeme/timeme.min.js?ver=1.8.0.1
172.67.170.153200 OK6.4 kB
GET xred2.net/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.18.0
172.67.170.153200 OK8.2 kB
POST ekc0okhqazs7.l4.adsco.re/
185.200.118.62200 OK0 B
GET xred2.net/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0
172.67.170.153200 OK5.8 kB
GET xred2.net/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0
172.67.170.153200 OK683 B
POST xred2.net/wp-content/plugins/burst-statistics/endpoint.php
172.67.170.153200 OK0 B
GET xred2.net/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
172.67.170.153200 OK77 kB
GET s3t3d2y8.afcdn.net/library/319620/db94e0fb4b309c53bb7b2a3adcbe97fb83e62bb1.mp4
95.173.205.15206 Partial Content177 kB
POST ekc0okhqazs7.n4.adsco.re/
38.132.109.126200 OK0 B
GET xred2.net/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0
172.67.170.153200 OK4.5 kB
GET xred2.net/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15
172.67.170.153200 OK24 kB
POST s.magsrv.com/v1/api.php
95.211.229.247200 OK3.3 kB
GET c.adsco.re/#0.08370063354690815
104.17.166.186200 OK79 kB
GET xred2.net/wp-includes/css/dist/block-library/style.min.css?ver=6.8
172.67.170.153200 OK116 kB
GET www.blockadsnot.com/vwb/jhr.min.js
95.173.205.14200 OK37 kB
GET xred2.net/wp-content/uploads/2025/04/cropped-XRED2-32x32.png
172.67.170.153200 OK493 B
POST s.magsrv.com/v1/api.php
95.211.229.247200 OK1.7 kB
GET s3t3d2y8.afcdn.net/library/319620/db94e0fb4b309c53bb7b2a3adcbe97fb83e62bb1.mp4
95.173.205.15206 Partial Content177 kB
POST s.magsrv.com/v1/api.php
95.211.229.247200 OK13 kB
GET www.googletagmanager.com/gtm.js?id=GTM-PZSXKZSB
142.250.74.168200 OK259 kB
GET xred2.net/actor/sarah-sofhia/
172.67.170.153200 OK36 kB
GET xred2.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
172.67.170.153200 OK14 kB