| d0atb22naffc73a8as80.roscguard.pro/x/?lp_key=1746236a01e3b6e6a1ea83c6f845c3d21d25b61684&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads&key=66e5a790cc9067f6c530&clickid=d0atb22naffc73a8as80&trk=momotrk.com&fdd=d37e9974973a418dbc44449c3d8882ac&vpb=BNo5oW59e04hbd2mSEhXMWmv8kVp7S_X9BFfUhId6kAx70i1NWDsugMg5TgcZbHvPmJheSANlNElxJ1vt5THz0k&language=en-US&feed=800e&zone=4497adf3&dm=1 |  104.21.96.1 | 200 OK | 52 kB |
URL User Request GET d0atb22naffc73a8as80.roscguard.pro/x/?lp_key=1746236a01e3b6e6a1ea83c6f845c3d21d25b61684&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads&key=66e5a790cc9067f6c530&clickid=d0atb22naffc73a8as80&trk=momotrk.com&fdd=d37e9974973a418dbc44449c3d8882ac&vpb=BNo5oW59e04hbd2mSEhXMWmv8kVp7S_X9BFfUhId6kAx70i1NWDsugMg5TgcZbHvPmJheSANlNElxJ1vt5THz0k&language=en-US&feed=800e&zone=4497adf3&dm=1 IP104.21.96.1:443
CertificateIssuerLet's Encrypt Subjectroscguard.pro FingerprintEA:73:41:B5:87:A3:94:08:E1:BA:33:EA:54:CC:B6:12:5A:6A:AD:BA ValiditySat, 19 Apr 2025 09:32:28 GMT - Fri, 18 Jul 2025 09:32:27 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (15902), with CRLF line terminators Hashbe336b5ba8f0248f57a9c5ffe822db57 e32c8c33828436ad93b22744bbcc1227ebf3df4f 794fc30ced4c52066b2905a7b245f8f51c21b146bdc934c888fd4915af7a1497
GET /x/?lp_key=1746236a01e3b6e6a1ea83c6f845c3d21d25b61684&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads&key=66e5a790cc9067f6c530&clickid=d0atb22naffc73a8as80&trk=momotrk.com&fdd=d37e9974973a418dbc44449c3d8882ac&vpb=BNo5oW59e04hbd2mSEhXMWmv8kVp7S_X9BFfUhId6kAx70i1NWDsugMg5TgcZbHvPmJheSANlNElxJ1vt5THz0k&language=en-US&feed=800e&zone=4497adf3&dm=1 HTTP/1.1
Host: d0atb22naffc73a8as80.roscguard.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wearychallengeraise.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 03 May 2025 08:36:24 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: accept-encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 939e6e330f225695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| d0atb22naffc73a8as80.roscguard.pro/favicon.ico | 104.21.96.1 | 404 Not Found | 153 B |
URL GET d0atb22naffc73a8as80.roscguard.pro/favicon.ico IP104.21.96.1:443
Requested byhttps://d0atb22naffc73a8as80.roscguard.pro/x/?lp_key=1746236a01e3b6e6a1ea83c6f845c3d21d25b61684&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads&key=66e5a790cc9067f6c530&clickid=d0atb22naffc73a8as80&trk=momotrk.com&fdd=d37e9974973a418dbc44449c3d8882ac&vpb=BNo5oW59e04hbd2mSEhXMWmv8kVp7S_X9BFfUhId6kAx70i1NWDsugMg5TgcZbHvPmJheSANlNElxJ1vt5THz0k&language=en-US&feed=800e&zone=4497adf3&dm=1 CertificateIssuerLet's Encrypt Subjectroscguard.pro FingerprintEA:73:41:B5:87:A3:94:08:E1:BA:33:EA:54:CC:B6:12:5A:6A:AD:BA ValiditySat, 19 Apr 2025 09:32:28 GMT - Fri, 18 Jul 2025 09:32:27 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash706a98254456810d3e849c3957af9d01 e461d072a6ba8f0082d6f187eba7f053343529c6 8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /favicon.ico HTTP/1.1
Host: d0atb22naffc73a8as80.roscguard.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d0atb22naffc73a8as80.roscguard.pro/x/?lp_key=1746236a01e3b6e6a1ea83c6f845c3d21d25b61684&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads&key=66e5a790cc9067f6c530&clickid=d0atb22naffc73a8as80&trk=momotrk.com&fdd=d37e9974973a418dbc44449c3d8882ac&vpb=BNo5oW59e04hbd2mSEhXMWmv8kVp7S_X9BFfUhId6kAx70i1NWDsugMg5TgcZbHvPmJheSANlNElxJ1vt5THz0k&language=en-US&feed=800e&zone=4497adf3&dm=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 03 May 2025 08:36:24 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=25SwglSsFMPlevlxh8pvomZgeR5wpJlAj6idCnqoYyNDov%2BbLWJbg8JRmA%2FEqCQJhvkQr519GjUVjfoLGB2zdWLyVUwEIJTL%2F9MBN9PbunNasOyikZty579a6PTHIx9CL%2FkkcUOi9e1%2FDH5ovJhip%2Fasuu96"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 939e6e3508f456c9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3384&min_rtt=726&rtt_var=2177&sent=111&recv=181&lost=0&retrans=0&sent_bytes=8692&recv_bytes=10501&delivery_rate=2252&cwnd=12000&unsent_bytes=0&cid=c6fc9ef8bd9ee9b9&ts=312&x=16"
|
|
| wearychallengeraise.com/rfpdzwdi?stzi=54&refer=https://apkretro.com/rusty-lake-roots-apk-download/&kw=[%22rusty%22,%22lake%22,%22roots%22,%22apk%22,%22download%22]&key=b35eecf7f8da65e78a693accc11cbcbb&scrWidth=376&scrHeight=835&tz=-6&v=25.4.8000&ship=&psid=apkretro.com,apkretro.com&sub3=invoke_layer&res=14.229&dev=r&uuid=0c78dd49-cda3-42b2-b06c-5e974bba704e:3:1 |  172.240.108.68 | 200 OK | 4.9 kB |
URL User Request GET wearychallengeraise.com/rfpdzwdi?stzi=54&refer=https://apkretro.com/rusty-lake-roots-apk-download/&kw=[%22rusty%22,%22lake%22,%22roots%22,%22apk%22,%22download%22]&key=b35eecf7f8da65e78a693accc11cbcbb&scrWidth=376&scrHeight=835&tz=-6&v=25.4.8000&ship=&psid=apkretro.com,apkretro.com&sub3=invoke_layer&res=14.229&dev=r&uuid=0c78dd49-cda3-42b2-b06c-5e974bba704e:3:1 IP172.240.108.68:443
CertificateIssuerLet's Encrypt Subjectwearychallengeraise.com Fingerprint59:0D:D9:8E:52:01:C0:D1:1E:83:C9:8F:D9:E2:AA:FF:AF:B7:B8:51 ValiditySun, 20 Apr 2025 03:17:43 GMT - Sat, 19 Jul 2025 03:17:42 GMT
File typeHTML document, ASCII text, with very long lines (4899) Hash5938ad74fddff0a1e5e563ecd9672117 cb097fe3c15ac5cbdc2d9205dec9f8862de3f12d 41c57c8a1674ba0eb89fc3d3bf5ce7605c18fabfdad4e2027c7d8b63bc582e89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rfpdzwdi?stzi=54&refer=https://apkretro.com/rusty-lake-roots-apk-download/&kw=[%22rusty%22,%22lake%22,%22roots%22,%22apk%22,%22download%22]&key=b35eecf7f8da65e78a693accc11cbcbb&scrWidth=376&scrHeight=835&tz=-6&v=25.4.8000&ship=&psid=apkretro.com,apkretro.com&sub3=invoke_layer&res=14.229&dev=r&uuid=0c78dd49-cda3-42b2-b06c-5e974bba704e:3:1 HTTP/1.1
Host: wearychallengeraise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 03 May 2025 08:36:23 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: uid_id2=0c78dd49-cda3-42b2-b06c-5e974bba704e:3:1; expires=Sat, 10 May 2025 08:36:23 GMT; path=/
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzM2MTk0NSwiayI6ImIzNWVlY2Y3ZjhkYTY1ZTc4YTY5M2FjY2MxMWNiY2JiIiwic2lkIjoiYXBrcmV0cm8uY29tLGFwa3JldHJvLmNvbSIsImlzaWQiOjIsImFzaWQiOjEsInppZCI6MTg5MDk5MCwicGlkIjo0ODY3NDcsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjEsImFpZCI6MjgsInB0Ijo0LCJwayI6InJmcGR6d2RpIiwiY3BrcyI6eyIyOSI6ImU5NjM0MWVhNDY1ZWIwYjE2MzcwZTQzOWI4ZmNjMWRhIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vYXBrcmV0cm8uY29tL3J1c3R5LWxha2Utcm9vdHMtYXBrLWRvd25sb2FkLyIsImFyIjpbXX19.OiHFm4yFR4exrD-iw6PwxJjaHA1aux4YyZC_vXKHpeY; expires=Sat, 03 May 2025 08:37:23 GMT; path=/
x-envoy-upstream-service-time: 1
Host: wearychallengeraise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 5b75be4f4ab2d344a6241afd262b4cfb
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| wearychallengeraise.com/api/users?token=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 | 172.240.108.68 | 302 Found | 52 kB |
URL User Request GET wearychallengeraise.com/api/users?token=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 IP172.240.108.68:443
CertificateIssuerLet's Encrypt Subjectwearychallengeraise.com Fingerprint59:0D:D9:8E:52:01:C0:D1:1E:83:C9:8F:D9:E2:AA:FF:AF:B7:B8:51 ValiditySun, 20 Apr 2025 03:17:43 GMT - Sat, 19 Jul 2025 03:17:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=L3JmcGR6d2RpP2Rldj1yJmtleT1iMzVlZWNmN2Y4ZGE2NWU3OGE2OTNhY2NjMTFjYmNiYiZrdz0lNUIlMjJydXN0eSUyMiUyQyUyMmxha2UlMjIlMkMlMjJyb290cyUyMiUyQyUyMmFwayUyMiUyQyUyMmRvd25sb2FkJTIyJTVEJnBzaWQ9YXBrcmV0cm8uY29tJTJDYXBrcmV0cm8uY29tJnBzdD0xNzQ2MjYxNDQzJnJlZmVyPWh0dHBzJTNBJTJGJTJGYXBrcmV0cm8uY29tJTJGcnVzdHktbGFrZS1yb290cy1hcGstZG93bmxvYWQlMkYmcmVzPTE0LjIyOSZybXRjPXQmc2NySGVpZ2h0PTgzNSZzY3JXaWR0aD0zNzYmc2hpcD0mc2h1PWViYTAwZjlhMTNlMzlkMmUxMjgxMmE0NmIyYTE1NTk1MDgxNGY5ZTk3ZWJjNDI4MDQ5YTI0MWU4Y2VmNjI1ZDc2ZWVlNjFkNmY4MzgyNTc0Y2EzMmJlNjczYTRmMzlmOGNiYjNlZTM5NWY1MDg5MjRiNmRlMTcxOTVmNmZhYmMzNzNiZWNlMTA3NGJiOTFiOTY0MDUxMzMxMTJlZGE5ZTE0NTNmMmFiZDZlZjg0YzFjYzIyMSZzdHppPTU0JnN1YjM9aW52b2tlX2xheWVyJnR6PS02JnY9MjUuNC44MDAwJnBpaT0maW49JnV1aWQ9MGM3OGRkNDktY2RhMy00MmIyLWIwNmMtNWU5NzRiYmE3MDRlJTNBMyUzQTE HTTP/1.1
Host: wearychallengeraise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wearychallengeraise.com/api/users?token=L3JmcGR6d2RpP2tleT0xMGFmYWVjMzU0MDRmZmQ1ZWRiYWQwMTMxYmIzOGVlNiZzdWJtZXRyaWM9MTczNjE5NDU
Cookie: uid_id2=0c78dd49-cda3-42b2-b06c-5e974bba704e:3:1; ain=eyJhbGciOiJIUzI1NiJ9.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.OiHFm4yFR4exrD-iw6PwxJjaHA1aux4YyZC_vXKHpeY; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Sat, 03 May 2025 08:36:23 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
location: https://momotrk.com/click?key=66e5a790cc9067f6c530&t=0.004420&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads
set-cookie: uid_id2=0c78dd49-cda3-42b2-b06c-5e974bba704e:3:1; expires=Sat, 10 May 2025 08:36:23 GMT; path=/
iprcb18c28a625b19b602f537f4c1356d3d9=5807120; expires=Sun, 04 May 2025 08:36:23 GMT; path=/
pdhtkv=true; expires=Sun, 04 May 2025 08:36:23 GMT; path=/
uncs=1; expires=Sun, 04 May 2025 08:36:23 GMT; path=/
pdhtkv28=true; expires=Sun, 04 May 2025 08:36:23 GMT; path=/
uncs28=1; expires=Sun, 04 May 2025 08:36:23 GMT; path=/
u_pl17361945=1; expires=Sun, 04 May 2025 08:36:23 GMT; path=/
x-envoy-upstream-service-time: 164
Host: wearychallengeraise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d7a32ac7ab231cf6976063fb696773ca
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| momotrk.com/click?key=66e5a790cc9067f6c530&t=0.004420&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads |  157.90.104.39 | 307 Temporary Redirect | 52 kB |
URL User Request GET momotrk.com/click?key=66e5a790cc9067f6c530&t=0.004420&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads IP157.90.104.39:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectmomotrk.com FingerprintE1:14:A8:61:97:98:EA:02:D3:F9:C9:C4:59:C4:2F:74:43:C0:30:9A ValidityThu, 03 Apr 2025 17:42:02 GMT - Wed, 02 Jul 2025 17:42:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /click?key=66e5a790cc9067f6c530&t=0.004420&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads HTTP/1.1
Host: momotrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wearychallengeraise.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Sat, 03 May 2025 08:36:24 GMT
location: https://d0atb22naffc73a8as80.roscguard.pro/x/?lp_key=1746236a01e3b6e6a1ea83c6f845c3d21d25b61684&t1=4.420000&t2=17361945&t3=486747&t4=1890990&t5=3280004&t6=s&t12=Downloads&key=66e5a790cc9067f6c530&clickid=d0atb22naffc73a8as80&trk=momotrk.com&fdd=d37e9974973a418dbc44449c3d8882ac&vpb=BNo5oW59e04hbd2mSEhXMWmv8kVp7S_X9BFfUhId6kAx70i1NWDsugMg5TgcZbHvPmJheSANlNElxJ1vt5THz0k&language=en-US&feed=800e&zone=4497adf3&dm=1
server: Caddy
set-cookie: uclick=nOiIxlYNPNg10uf8bmCYv5uSiqMJU8vdMHVtqNNCjRnZFTpkCwxODoTVP7MVPlnJ2Yqsrc4=; Max-Age=31536000; SameSite=Lax
bcid=d0atb22naffc73a8as80; Max-Age=31536000; SameSite=Lax
x-request-id: 3b65c6ce-0f50-4cb0-b5a4-2833fdbfe4ce
content-length: 0
X-Firefox-Spdy: h2
|
|