Report - www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852

Report Overview

Visited public
2023-12-09 02:02:53
Tags
URL
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Finishing URL
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
IP / ASN
78.46.153.173
#24940 Hetzner Online GmbH
Title
تبریک

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.cashgiveawayday.com	unknown	2023-12-07	2023-12-07 12:01:23	2023-12-08 07:05:46	14 kB	870 kB	78.46.153.173
psothoms.com	unknown	2022-10-03	2022-10-03 18:42:51	2023-12-08 11:10:42	1.1 kB	28 kB	139.45.197.251

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-09	medium	psothoms.com	Sinkholed
2023-12-09	medium	psothoms.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852	ScriptElement	1.0 kB	2023-11-16	2024-08-20
Pretty URL www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852 IP 78.46.153.173 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-16 21:27 Last Seen2024-08-20 19:13 Times Seen21 Hash 7b7620f96453bbdb8c6a4d7b61458749 44c7d54a979f704fdcb99eaf995cfa4372adf02d 2865ad8004e43daffed76597ff6f8af31038f20d53c452334805dcaf24c73e23 Loading...

	www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852	ScriptElement	307 B	2023-12-09	2024-08-20
Pretty URL www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852 IP 78.46.153.173 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-09 03:02 Last Seen2024-08-20 16:18 Times Seen4 Hash 3d2f24e2f24954ecc199b8e31f32318a 258e1caaed3b79c4c3bc5a705475fb83daa0ec80 6c64699b6308d4f4f4dbcdb1054bf06f35c219af01119f6bbdd67a31a298e1b8 Loading...

	www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852	ScriptElement	1.4 kB	2023-08-13	2024-08-21
Pretty URL www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852 IP 78.46.153.173 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-13 09:21 Last Seen2024-08-21 08:52 Times Seen40 Hash d78bc51987bc1c430bcc86292be4c9c0 e719ef47e7d39fc4b925821f1a5c2861e156b078 027310f3f17fc85ebbf91548c29821b1fd145f6049944be4c02edd9b0aa77949 Loading...

	psothoms.com/pfe/current/micro.tag.min.js?z=5653160&sw=/sw-check-permissions-d1fba.js	ScriptElement	27 kB	2023-11-02	2024-08-20
Pretty URL psothoms.com/pfe/current/micro.tag.min.js?z=5653160&sw=/sw-check-permissions-d1fba.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-02 09:44 Last Seen2024-08-20 21:23 Times Seen8998 Hash 5ccd2d5882a06f293d07510ac91c92e6 b44dc0eaa03981adb70d3313e728f9359c1d21c1 9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba Loading...

	www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/app.js	ScriptElement	148 kB	2023-12-05	2024-10-25
Pretty URL www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/app.js IP 78.46.153.173 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 12:09 Last Seen2024-10-25 03:26 Times Seen686 Hash c1fe814c2cb785207dbe1e4996b00544 b7e2357dd7ae1f7befed4a5d833f8908a44648f6 0c5a71eb30cf091fdca031fffcb5a40944b61962a564f4aacccae2f9e035d772 Loading...

	unknown	Function	16 kB	2023-12-09	2024-08-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-12-09 03:02 Last Seen2024-08-20 16:18 Times Seen4 Hash 23249a450535b97d3f979b6ebe93c071 aeaf826e11689148d9dd2ba5f1070e7fce978a05 da3a66d892bed9ae76bdc94cebc46ada3830bdae75f934e3de64171eaad0abd3 Loading...

HTTP Transactions (21)

URL IP Response Size

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852

78.46.153.173

200 OK

13 kB

URL User Request GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1699)
Size
13 kB (12951 bytes)
Hash
ce0cde493f3ac9644aea48f2d8d72f3c
a8240edee4a3938de198fc52fb2f393612f2d90e
6126c159e65b7f073cf307e613fceab75dd5ae39c2f0c6a9723340e8e4bfb8d0

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852 HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:13:58 GMT
etag: "3297-60be70cb0b5d2"
accept-ranges: bytes
content-length: 12951
content-type: text/html
date: Sat, 09 Dec 2023 02:02:35 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/app.css

78.46.153.173

200 OK

7.4 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/app.css
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (7362)
Size
7.4 kB (7364 bytes)
Hash
ecb213163a3433b3f3eac500461b96d9
5353564ca231d1054266ab939c9361a925893510
8091c6c17750f7d04f42c64a9a167ede769848456807a6aebbad4385c2c9f793

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/app.css HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:34:26 GMT
etag: "1cc4-60be755e58661"
accept-ranges: bytes
content-length: 7364
content-type: text/css
date: Sat, 09 Dec 2023 02:02:35 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/notification.png

78.46.153.173

200 OK

1.2 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/notification.png
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data
Size
1.2 kB (1159 bytes)
Hash
1ac287a86eb7505ab78b712f4b3e8832
1482a500578b578448be10e4302c9fef100eafe5
b26e23b65ebda6a7d7024e80bfbf784ebf42a29b7fcf9c93f312e22d7c2bd5b9

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/notification.png HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:57 GMT
etag: "487-60be7a2d74018"
accept-ranges: bytes
content-length: 1159
content-type: image/png
date: Sat, 09 Dec 2023 02:02:35 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/prizewheel_spinner.jpg

78.46.153.173

200 OK

47 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/prizewheel_spinner.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1002x1002, components 3\012- data
Size
47 kB (46626 bytes)
Hash
2bb63e02d96c10358c6b74e62ae700c2
97c554524a0f3d7a811f822dc0cbc635182e8c9c
d4ad30d41c5afeae4172627646f736703674043dd7e08f9f717602f697b1003e

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/prizewheel_spinner.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:57 GMT
etag: "b622-60be7a2d37758"
accept-ranges: bytes
content-length: 46626
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:35 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/prizes/cash-2500-usd/ir/default@0.5x.png

78.46.153.173

200 OK

199 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/prizes/cash-2500-usd/ir/default@0.5x.png
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
PNG image data, 499 x 347, 8-bit/color RGBA, non-interlaced\012- data
Size
199 kB (198911 bytes)
Hash
ffb9aaef075b4df3c3ffc7b6a2bb5682
cfa8daf33324a7cd58599897a1e49958361de5b0
0dedc740cb7bb27321844252c98b4c049879f7c480558ca4ed898a017c110273

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/prizes/cash-2500-usd/ir/default@0.5x.png HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:56 GMT
etag: "308ff-60be7a2cd3d97"
accept-ranges: bytes
content-length: 198911
content-type: image/png
date: Sat, 09 Dec 2023 02:02:35 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/loader.gif

78.46.153.173

200 OK

5.4 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/loader.gif
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
GIF image data, version 89a, 50 x 50\012- data
Size
5.4 kB (5381 bytes)
Hash
11784a08d4ea78a70245079746c2c7e6
49066b13931c37c3107cc91655c0112737f5a56b
2c2d27fbb655aa94d2ac35b08fbe141fa389ad7dbf6900ca4933675a58d13ba0

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/loader.gif HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:57 GMT
etag: "1505-60be7a2d4deb8"
accept-ranges: bytes
content-length: 5381
content-type: image/gif
date: Sat, 09 Dec 2023 02:02:35 GMT
server: Apache
X-Firefox-Spdy: h2

psothoms.com/zone?&pub=0&zone_id=5653160&is_mobile=false&domain=www.cashgiveawayday.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest

139.45.197.251

200 OK

0 B

URL POST HTTP/2
psothoms.com/zone?&pub=0&zone_id=5653160&is_mobile=false&domain=www.cashgiveawayday.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerLet's Encrypt
Subjectpsothoms.com
FingerprintE5:BE:13:9F:C8:F8:27:45:2D:96:0B:9C:A1:44:4C:27:9C:AF:7E:E7
ValidityTue, 07 Nov 2023 05:18:35 GMT - Mon, 05 Feb 2024 05:18:34 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /zone?&pub=0&zone_id=5653160&is_mobile=false&domain=www.cashgiveawayday.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: psothoms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.cashgiveawayday.com
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:02:35 GMT
content-length: 0
x-trace-id: 10002b741e8684ecf63199d0f0ef51fc
access-control-allow-origin: https://www.cashgiveawayday.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/app.js

78.46.153.173

200 OK

148 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/app.js
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
148 kB (148445 bytes)
Hash
c1fe814c2cb785207dbe1e4996b00544
b7e2357dd7ae1f7befed4a5d833f8908a44648f6
0c5a71eb30cf091fdca031fffcb5a40944b61962a564f4aacccae2f9e035d772

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/app.js HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:34:26 GMT
etag: "243dd-60be755e65181"
accept-ranges: bytes
content-length: 148445
content-type: application/javascript
date: Sat, 09 Dec 2023 02:02:35 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/prizewheel_static.png

78.46.153.173

200 OK

32 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/prizewheel_static.png
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
PNG image data, 1002 x 1002, 8-bit/color RGBA, non-interlaced\012- data
Size
32 kB (31686 bytes)
Hash
78157e63b5becb56ef9377dba4f0c432
cc5413e15831f34b64c5f345ed1c33da77aeede1
7cbc6a446b5ff318226eb7248e2c915062328e0b166cea24e7b4ee4b3eb5c7d1

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/prizewheel_static.png HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:57 GMT
etag: "7bc6-60be7a2d338d8"
accept-ranges: bytes
content-length: 31686
content-type: image/png
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/3@0.25x.jpg

78.46.153.173

200 OK

2.5 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/3@0.25x.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.5 kB (2506 bytes)
Hash
e69e56799051d24a67414a67301ac984
7d7db0281213342c25abf9e08937e38c7d1e8449
cff50b269e3afdcf620ba9a8f6d3ac55b03a953136f3148d1b3296798bf57210

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/3@0.25x.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:56 GMT
etag: "9ca-60be7a2c38936"
accept-ranges: bytes
content-length: 2506
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/3@0.25x.jpg

78.46.153.173

200 OK

3.3 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/3@0.25x.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
3.3 kB (3301 bytes)
Hash
49f1b40f2ed2ef127cb64293ae8b1524
7939aacf51d0ba9b4358cb17ef40eb91fa31e27b
c5e6dbfaac2e982618aa4ea88a1785ca965b57f3149551f194cdaae2d8406a53

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/3@0.25x.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:56 GMT
etag: "ce5-60be7a2bf62b5"
accept-ranges: bytes
content-length: 3301
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/10@0.25x.jpg

78.46.153.173

200 OK

3.2 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/10@0.25x.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
3.2 kB (3175 bytes)
Hash
f8002e02aac0ac1bb22d2c80f36ebf15
bf277a8747caf561b91a25860e772cf0f1a834a5
0e98e32d27f59276dc137de153e32c28220a635701413565a4646dc8361fd94c

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/10@0.25x.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:55 GMT
etag: "c67-60be7a2bca395"
accept-ranges: bytes
content-length: 3175
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/6@0.25x.jpg

78.46.153.173

200 OK

3.0 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/6@0.25x.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
3.0 kB (2950 bytes)
Hash
5f6bc62e6e66a94b4ce9b971a798ceff
05faaed9dbd1a5462485d4deeed888312a3b4973
cfa55f5831710c40e2429ec2528b080fb2e6b11b560abfa8eaa1710b63770af3

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/6@0.25x.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:56 GMT
etag: "b86-60be7a2c657f6"
accept-ranges: bytes
content-length: 2950
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/fb-like.svg

78.46.153.173

200 OK

5.7 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/fb-like.svg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
5.7 kB (5718 bytes)
Hash
9300a13d0155ce253fef23732456e437
15619ae11b1d4c0a9bc22acabbd11201923ab81b
f093971590dc0d67084f2a085b3a628639727b2950288cd95e3117e9e307a4bf

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/landers/prizewheel-fb/assets/img/fb-like.svg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:57 GMT
etag: "1656-60be7a2d51d38"
accept-ranges: bytes
content-length: 5718
content-type: image/svg+xml
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/9@0.25x.jpg

78.46.153.173

200 OK

2.2 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/9@0.25x.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.2 kB (2224 bytes)
Hash
444a95e7661a07d48ae8a2b7d67792be
e31aa744a72a17d6a3e04cd0e6f9a9fc59a47b59
d815f00761793a93ef88b73ea6451d9300a052ce64f454d30f9446af3bd9ccda

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/9@0.25x.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:55 GMT
etag: "8b0-60be7a2bca395"
accept-ranges: bytes
content-length: 2224
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/prizes/cash-2500-usd/default/proof.png

78.46.153.173

200 OK

385 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/prizes/cash-2500-usd/default/proof.png
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
PNG image data, 528 x 389, 8-bit/color RGBA, non-interlaced\012- data
Size
385 kB (385010 bytes)
Hash
378f6a27cf3d40807144c8c9785129b4
2437575bbdd6a2821a6f56c7fb861508fbfc6399
50f08e27b4d8a454c61293a7c4b88ab6d991ffb9892a435586b10895577f4cab

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/prizes/cash-2500-usd/default/proof.png HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:57 GMT
etag: "5dff2-60be7a2cde977"
accept-ranges: bytes
content-length: 385010
content-type: image/png
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/5@0.25x.jpg

78.46.153.173

200 OK

2.8 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/5@0.25x.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.8 kB (2787 bytes)
Hash
6063e3355d6e928b55810c359ee1d382
a6a19cb61b8a8f9ed538a6467a7a41ed85fc01ad
9db1c16bd8c27942b3d83cff9d81462ced2b7827ab45fe53ff3fcec32ed138d9

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/5@0.25x.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:56 GMT
etag: "ae3-60be7a2c38936"
accept-ranges: bytes
content-length: 2787
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/1@0.25x.jpg

78.46.153.173

200 OK

2.9 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/1@0.25x.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.9 kB (2853 bytes)
Hash
4ccf612375cb7df45e271ecd2983281e
db4bc5414c30c39531e38c9a3f34b087cd68b4b6
75f237c0722d2dd3ef7d7e4bad43a70ac57bad90c81b9cb8b9c9b445c0a76a1b

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/female/1@0.25x.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:56 GMT
etag: "b25-60be7a2c657f6"
accept-ranges: bytes
content-length: 2853
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/2@0.25x.jpg

78.46.153.173

200 OK

2.3 kB

URL GET HTTP/2
www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/2@0.25x.jpg
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.3 kB (2258 bytes)
Hash
07ee3d87dba4f97110c83432fcc8f3f6
80f21d2258991eaecca028683f58b16019bf9deb
50479fd6ff7c08b64aa01f0a415bba20d8ddd79a43becae604955e9086098cff

HTTP Headers

GET /bemob/iframe/farsi/iran/general/prizewheel-fb-lander/img/profiles/mena/male/2@0.25x.jpg HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:55:56 GMT
etag: "8d2-60be7a2bf5315"
accept-ranges: bytes
content-length: 2258
content-type: image/jpeg
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

www.cashgiveawayday.com/sw-check-permissions-d1fba.js

78.46.153.173

200 OK

566 B

URL GET HTTP/2
www.cashgiveawayday.com/sw-check-permissions-d1fba.js
IP
78.46.153.173:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerDigiCert Inc
Subjectcashgiveawayday.com
Fingerprint51:A6:1C:20:DF:0E:81:81:EF:70:80:AF:3F:95:ED:AC:EC:9A:D1:54
ValidityThu, 07 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT

File type
Java source, ASCII text
Size
566 B (566 bytes)
Hash
772fbb13a1eed03390fe28950f2f1250
6c53a425ec0500c2802de3d7df10c0c14972bf01
57e5311f9f8c7f6089e534e250aac692954f6b19e67efac2be6e74d797335bbd

HTTP Headers

GET /sw-check-permissions-d1fba.js HTTP/1.1
Host: www.cashgiveawayday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 08:05:31 GMT
etag: "236-60be6ee7adf2a"
accept-ranges: bytes
content-length: 566
content-type: application/javascript
date: Sat, 09 Dec 2023 02:02:36 GMT
server: Apache
X-Firefox-Spdy: h2

psothoms.com/pfe/current/micro.tag.min.js?z=5653160&sw=/sw-check-permissions-d1fba.js

139.45.197.251

200 OK

27 kB

URL GET HTTP/2
psothoms.com/pfe/current/micro.tag.min.js?z=5653160&sw=/sw-check-permissions-d1fba.js
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://www.cashgiveawayday.com/bemob/iframe/farsi/iran/general/prizewheel-fb-lander/?click_id=Xr4NuDYcCm9QQ7g4BbRLbG&bemobdata=c=03d4368f-c728-4724-aeaa-4accc71a5ed1..l=1d3ed19a-344d-4897-8d22-34b3e59fe653..a=0..b=0..r=n1sav.bemobtrcks.com..ts=1702087335852
Certificate
IssuerLet's Encrypt
Subjectpsothoms.com
FingerprintE5:BE:13:9F:C8:F8:27:45:2D:96:0B:9C:A1:44:4C:27:9C:AF:7E:E7
ValidityTue, 07 Nov 2023 05:18:35 GMT - Mon, 05 Feb 2024 05:18:34 GMT

File type
ASCII text, with very long lines (27007), with no line terminators
Size
27 kB (27007 bytes)
Hash
5ccd2d5882a06f293d07510ac91c92e6
b44dc0eaa03981adb70d3313e728f9359c1d21c1
9fc2aa21f3a7bfe66783d35fdbb48147f73e72a41f87aea848f64a8cb4518eba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5653160&sw=/sw-check-permissions-d1fba.js HTTP/1.1
Host: psothoms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.cashgiveawayday.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:02:35 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-697f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2