Report - majesticsecondary.com/ir314vqt4j?adb=y&adb=y&dev=r&jua=12&key=da741a49e5b4bcaa15fa1cc6fa329c7b&kw=["otaku","ni","yasashii","gal","wa","iru","by","bakuya","page","1","of","102","-","175453","-","read","hentai","manga","online","for","free","at","hentairead"]&psid=hentairead.com,hentairead.com&refer=https://hentairead.com/hentai/otaku-ni-yasashii-gal-wa-iru/english/p/1/&res=14.31&scrHeight=1440&scrWidth=2560&ship=&sub3=invoke

Report Overview

Visitedpublic

2024-04-01 14:55:15

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ifdtrcking.com	unknown	2023-01-08	2023-01-08 15:21:58	2024-03-28 10:03:04	1.1 kB	869 B	185.142.239.85
majesticsecondary.com	unknown	unknown	No data	No data	3.7 kB	4.9 kB	172.240.108.76
secureltrk.com	unknown	2023-10-10	2024-01-09 22:07:38	2024-03-29 15:08:28	896 B	539 B	176.97.112.149

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-01	medium	majesticsecondary.com	Sinkholed
2024-04-01	medium	majesticsecondary.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

majesticsecondary.com/ir314vqt4j?adb=y&adb=y&dev=r&jua=12&key=da741a49e5b4bcaa15fa1cc6fa329c7b&kw=[%22otaku%22,%22ni%22,%22yasashii%22,%22gal%22,%22wa%22,%22iru%22,%22by%22,%22bakuya%22,%22page%22,%221%22,%22of%22,%22102%22,%22-%22,%22175453%22,%22-%22,%22read%22,%22hentai%22,%22manga%22,%22online%22,%22for%22,%22free%22,%22at%22,%22hentairead%22]&psid=hentairead.com,hentairead.com&refer=https://hentairead.com/hentai/otaku-ni-yasashii-gal-wa-iru/english/p/1/&res=14.31&scrHeight=1440&scrWidth=2560&ship=&sub3=invoke_layer&tz=-4&v=24.3.3459

172.240.108.76

1.8 kB

URL

IP / ASN

172.240.108.76

#7979 SERVERS-COM

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (1122)

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size1.8 kB (1754 bytes)

MD59f9d0407227ebb074ec805d4af7e6889

SHA1c17ade137fdd935c1b4375be99740c653f16dfef

SHA256c141a4b5aa27ca969f0d0c791ed5b9211dddff5707dbd5fe4d282cccf18017ba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ir314vqt4j?adb=y&adb=y&dev=r&jua=12&key=da741a49e5b4bcaa15fa1cc6fa329c7b&kw=[%22otaku%22,%22ni%22,%22yasashii%22,%22gal%22,%22wa%22,%22iru%22,%22by%22,%22bakuya%22,%22page%22,%221%22,%22of%22,%22102%22,%22-%22,%22175453%22,%22-%22,%22read%22,%22hentai%22,%22manga%22,%22online%22,%22for%22,%22free%22,%22at%22,%22hentairead%22]&psid=hentairead.com,hentairead.com&refer=https://hentairead.com/hentai/otaku-ni-yasashii-gal-wa-iru/english/p/1/&res=14.31&scrHeight=1440&scrWidth=2560&ship=&sub3=invoke_layer&tz=-4&v=24.3.3459 HTTP/1.1
Host: majesticsecondary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 01 Apr 2024 14:54:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16969935; expires=Tue, 02 Apr 2024 14:54:50 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.1WVsl1mk1KTs0j2qG7ltfVUC_xAvKT_504lkKC0HIdE; expires=Mon, 01 Apr 2024 14:55:50 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8892aaa5ae450bcd5683bc6c5e0c4270
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

GET majesticsecondary.com/api/users?token=L2lyMzE0dnF0NGo_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&uuid=&pii=&in=false

192.243.59.13

302 Found

0 B

URL

majesticsecondary.com/api/users?token=L2lyMzE0dnF0NGo_YWRiPXkmZGV2PXImanVhPTEyJmtleT1kYTc0MWE0OWU1YjRiY2FhMTVmYTFjYzZmYTMyOWM3YiZrdz0lNUIlMjJvdGFrdSUyMiUyQyUyMm5pJTIyJTJDJTIyeWFzYXNoaWklMjIlMkMlMjJnYWwlMjIlMkMlMjJ3YSUyMiUyQyUyMmlydSUyMiUyQyUyMmJ5JTIyJTJDJTIyYmFrdXlhJTIyJTJDJTIycGFnZSUyMiUyQyUyMjElMjIlMkMlMjJvZiUyMiUyQyUyMjEwMiUyMiUyQyUyMi0lMjIlMkMlMjIxNzU0NTMlMjIlMkMlMjItJTIyJTJDJTIycmVhZCUyMiUyQyUyMmhlbnRhaSUyMiUyQyUyMm1hbmdhJTIyJTJDJTIyb25saW5lJTIyJTJDJTIyZm9yJTIyJTJDJTIyZnJlZSUyMiUyQyUyMmF0JTIyJTJDJTIyaGVudGFpcmVhZCUyMiU1RCZwc2lkPWhlbnRhaXJlYWQuY29tJTJDaGVudGFpcmVhZC5jb20mcHN0PTE3MTE5ODMzNTAmcmVmZXI9aHR0cHMlM0ElMkYlMkZoZW50YWlyZWFkLmNvbSUyRmhlbnRhaSUyRm90YWt1LW5pLXlhc2FzaGlpLWdhbC13YS1pcnUlMkZlbmdsaXNoJTJGcCUyRjElMkYmcmVzPTE0LjMxJnJtdGM9dCZzY3JIZWlnaHQ9MTQ0MCZzY3JXaWR0aD0yNTYwJnNoaXA9JnNodT05N2I2NzJlNjQ4ZmMxNzY4OGY2ZDc5NDk2NmY2YjFhZDM5MTNhN2Y4MDAwYWY1MGZmMDhkZGQwOTBhNzFiZmM2MzExZTQ2Mzc2ZWFlNzdhM2NlMmRkODlkYmNmNTc3Mjk4YWQxMDFlNDU2ZGI5Y2IxZDUwZDllMzBkYWI3M2Y0NjQ1YmFkMTE0YmZkYTk2ODQ4NDdlMTEzMDM2MjY0M2JjNzQyZDdmMWY3MjY1M2FjMmQ1MmViM2VmNzc1MCZzdWIzPWludm9rZV9sYXllciZ0ej0tNCZ2PTI0LjMuMzQ1OQ&uuid=&pii=&in=false

IP / ASN

192.243.59.13

#39572 DataWeb Global Group B.V.

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606209

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectmajesticsecondary.com

Fingerprint8F:E4:1C:35:22:4B:B1:8F:84:2A:A5:D7:2E:FB:9B:10:4B:76:A6:B1

ValidityFri, 29 Mar 2024 13:20:18 GMT - Thu, 27 Jun 2024 13:20:17 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=L2lyMzE0dnF0NGo_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&uuid=&pii=&in=false HTTP/1.1
Host: majesticsecondary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://majesticsecondary.com/api/users?token=L2lyMzE0dnF0NGo_a2V5PTljYTYwMWE5ZjQ3YzczNWRmNzZkNWNhNDZmYTI2YTY2JnN1Ym1ldHJpYz0xNjk2OTkzNQ
Cookie: u_pl=16969935; ain=eyJhbGciOiJIUzI1NiJ9.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.1WVsl1mk1KTs0j2qG7ltfVUC_xAvKT_504lkKC0HIdE; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Mon, 01 Apr 2024 14:54:51 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://secureltrk.com/click?key=738d3b0a8b38ffeea519&SUB_ID_SHORT=3781af4157b3b840d6e7bf0ecee86389&COST_CPC=0.000850&PLACEMENT_ID=16969935&CAMPAIGN_ID=958413&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2747786&CATEGORY_ALIAS=Adult
Set-Cookie: iprc1f946406afb9beaef2afea65aac802dd=4929250; expires=Tue, 02 Apr 2024 14:54:51 GMT
pdhtkv=true; expires=Tue, 02 Apr 2024 14:54:51 GMT
uncs=1; expires=Tue, 02 Apr 2024 14:54:51 GMT
pdhtkv28=true; expires=Tue, 02 Apr 2024 14:54:51 GMT
uncs28=1; expires=Tue, 02 Apr 2024 14:54:51 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b817ad9cd87b56e795731987288c5645
Strict-Transport-Security: max-age=0; includeSubdomains

GET secureltrk.com/click?key=738d3b0a8b38ffeea519&SUB_ID_SHORT=3781af4157b3b840d6e7bf0ecee86389&COST_CPC=0.000850&PLACEMENT_ID=16969935&CAMPAIGN_ID=958413&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2747786&CATEGORY_ALIAS=Adult

176.97.112.149

307 Temporary Redirect

0 B

URL

secureltrk.com/click?key=738d3b0a8b38ffeea519&SUB_ID_SHORT=3781af4157b3b840d6e7bf0ecee86389&COST_CPC=0.000850&PLACEMENT_ID=16969935&CAMPAIGN_ID=958413&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2747786&CATEGORY_ALIAS=Adult

IP / ASN

176.97.112.149

#43180 Virtual Systems LLC

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606209

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectsecureltrk.com

Fingerprint91:A8:57:2C:3B:9E:B5:B7:A7:E4:55:0C:08:59:E7:45:9D:A9:4C:9D

ValidityFri, 22 Mar 2024 12:23:21 GMT - Thu, 20 Jun 2024 12:23:20 GMT

HTTP Headers

GET /click?key=738d3b0a8b38ffeea519&SUB_ID_SHORT=3781af4157b3b840d6e7bf0ecee86389&COST_CPC=0.000850&PLACEMENT_ID=16969935&CAMPAIGN_ID=958413&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2747786&CATEGORY_ALIAS=Adult HTTP/1.1
Host: secureltrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://majesticsecondary.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 307 Temporary Redirect
date: Mon, 01 Apr 2024 14:54:52 GMT
location: https://ifdtrcking.com/click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=co5cleta6vts738juo3g
server: Caddy
set-cookie: uclick=nLmCwldaats1h+L3PWCYv8nbl2dCvYQD9E7RpzaNT+KeXNFn3ST/3+da64sMT1DbEtUJ3g==; Max-Age=31536000; SameSite=Lax
bcid=co5cleta6vts738juo3g; Max-Age=31536000; SameSite=Lax
cid=co5cleta6vts738juo3g; Max-Age=31536000; SameSite=Lax
x-request-id: 32f8c2f7-e03f-44d2-be6e-eeff24cea106
content-length: 0
X-Firefox-Spdy: h2

GET ifdtrcking.com/click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=co5cleta6vts738juo3g

185.142.239.85

404 Not Found

123 B

URL

ifdtrcking.com/click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=co5cleta6vts738juo3g

IP / ASN

185.142.239.85

#174 COGENT-174

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-03-07

Last Seen2025-08-02

Times Seen9991

Size123 B (123 bytes)

MD570461da8b94c6ca5d2fda3260c5a8c3b

SHA1994bc667720c21257500e29038c1a5f61e25da1e

SHA256f33c27745f2bd87344be790465ef984a972fd539dc83bd4f61d4242c607ef1ee

Certificate Info

IssuerLet's Encrypt

Subjectifdtrcking.com

Fingerprint78:E6:1D:72:73:71:26:50:EF:D2:22:7F:42:8D:E8:84:EE:9E:0D:76

ValiditySun, 03 Mar 2024 02:03:36 GMT - Sat, 01 Jun 2024 02:03:35 GMT

HTTP Headers

GET /click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=co5cleta6vts738juo3g HTTP/1.1
Host: ifdtrcking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://majesticsecondary.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 01 Apr 2024 14:54:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
X-Server: faucibus
PX-X-Request-Id: be3805f4dd0d10a322a4fa8be72447ad

GET ifdtrcking.com/favicon.ico

185.142.239.85

404 Not Found

180 B

URL

ifdtrcking.com/favicon.ico

IP / ASN

185.142.239.85

#174 COGENT-174

Requested byhttps://ifdtrcking.com/click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=co5cleta6vts738juo3g

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-06

Last Seen2025-07-30

Times Seen346

Size180 B (180 bytes)

MD58e325dc2fea7c8900fc6c4b8c6c394fe

SHA11b3291d4eea179c84145b2814cb53e6a506ec201

SHA2560b52c5338af355699530a47683420e48c7344e779d3e815ff9943cbfdc153cf2

Certificate Info

IssuerLet's Encrypt

Subjectifdtrcking.com

Fingerprint78:E6:1D:72:73:71:26:50:EF:D2:22:7F:42:8D:E8:84:EE:9E:0D:76

ValiditySun, 03 Mar 2024 02:03:36 GMT - Sat, 01 Jun 2024 02:03:35 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ifdtrcking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ifdtrcking.com/click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=co5cleta6vts738juo3g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 01 Apr 2024 14:54:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
PX-Cache-Status: STALE
X-Server: faucibus
PX-X-Request-Id: a7506e3b023068f96f11a572ea951e33