Report - goadstracker.com/tracking.php?hash=8333ad7efd35f24b6c5db63cde907b8b&source=PUBLISHER_ID&sub_source=1708_1&aff

Report Overview

Visitedpublic

2025-05-16 01:16:15

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
goadstracker.com	unknown	2024-09-25	2024-09-25	2025-05-11	614 B	298 B	185.32.28.136
1d6ceb551fc.terrifictc.net	unknown	2021-11-29	2022-10-27	2025-05-12	568 B	695 B	94.237.90.104
www.warfulbaculi.top	unknown	2025-04-04	2025-05-09	2025-05-09	1.1 kB	404 B	212.117.187.156

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-05-15	medium	warfulbaculi.top	Sinkholed
2025-05-15	medium	warfulbaculi.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

URL IP Response Size

GET goadstracker.com/tracking.php?hash=8333ad7efd35f24b6c5db63cde907b8b&source=PUBLISHER_ID&sub_source=1708_1&aff_sub=c84c27e6c26c4637830a4f3b09bd789f

185.32.28.136

302 Moved Temporarily

0 B

URL

goadstracker.com/tracking.php?hash=8333ad7efd35f24b6c5db63cde907b8b&source=PUBLISHER_ID&sub_source=1708_1&aff_sub=c84c27e6c26c4637830a4f3b09bd789f

IP / ASN

185.32.28.136

#15699 Adam EcoTech, S.A

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606674

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectgoadstracker.com

Fingerprint46:02:9D:6A:04:ED:E2:CF:0E:44:7E:58:71:BD:D1:FB:48:B2:32:05

ValidityTue, 25 Mar 2025 04:02:52 GMT - Mon, 23 Jun 2025 04:02:51 GMT

HTTP Headers

GET /tracking.php?hash=8333ad7efd35f24b6c5db63cde907b8b&source=PUBLISHER_ID&sub_source=1708_1&aff_sub=c84c27e6c26c4637830a4f3b09bd789f HTTP/1.1
Host: goadstracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 16 May 2025 01:15:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://1d6ceb551fc.terrifictc.net/?p=12663&media_type=mainstream&click_id=1747358140goa682691bc409b8&pi=118

GET 1d6ceb551fc.terrifictc.net/?p=12663&media_type=mainstream&click_id=1747358140goa682691bc409b8&pi=118

94.237.90.104

302 Found

0 B

URL

1d6ceb551fc.terrifictc.net/?p=12663&media_type=mainstream&click_id=1747358140goa682691bc409b8&pi=118

IP / ASN

94.237.90.104

#202053 UpCloud Ltd

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606674

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectterrifictc.net

Fingerprint0B:07:65:19:AB:47:17:8A:AF:36:C8:89:B3:16:78:9A:55:E1:AC:70

ValidityFri, 04 Apr 2025 10:05:12 GMT - Thu, 03 Jul 2025 10:05:11 GMT

HTTP Headers

GET /?p=12663&media_type=mainstream&click_id=1747358140goa682691bc409b8&pi=118 HTTP/1.1
Host: 1d6ceb551fc.terrifictc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 16 May 2025 01:15:43 GMT
content-type: text/html; charset=UTF-8
set-cookie: rts-trck=1; expires=Fri, 16 May 2025 01:25:43 GMT; Max-Age=600; path=/; domain=1d6ceb551fc.terrifictc.net
t-uuid=66z938c664eivwv7i712cg8sk; expires=Wed, 16 May 2035 01:15:43 GMT; Max-Age=315532800; path=/; domain=.terrifictc.net
rts-trck=1; expires=Fri, 16 May 2025 01:25:43 GMT; Max-Age=600; path=/; domain=1d6ceb551fc.terrifictc.net
traffic-back=ok; expires=Fri, 16 May 2025 01:16:13 GMT; Max-Age=30; path=/; domain=.terrifictc.net
location: https://www.warfulbaculi.top/f/33ca4f00-3eed-4261-a39c-2b71a0965685?click_id=66z938c643uof07epdnok0o0w,18554248,5,12663
X-Firefox-Spdy: h2

GET www.warfulbaculi.top/f/33ca4f00-3eed-4261-a39c-2b71a0965685?click_id=66z938c643uof07epdnok0o0w,18554248,5,12663

212.117.187.156

200 OK

0 B

URL

www.warfulbaculi.top/f/33ca4f00-3eed-4261-a39c-2b71a0965685?click_id=66z938c643uof07epdnok0o0w,18554248,5,12663

IP / ASN

212.117.187.156

#7979 SERVERS-COM

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606674

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectwww.warfulbaculi.top

Fingerprint38:E6:51:02:4C:99:2B:B3:43:5E:26:EC:1C:F8:A9:49:E2:96:13:C2

ValidityFri, 04 Apr 2025 07:21:55 GMT - Thu, 03 Jul 2025 07:21:54 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /f/33ca4f00-3eed-4261-a39c-2b71a0965685?click_id=66z938c643uof07epdnok0o0w,18554248,5,12663 HTTP/1.1
Host: www.warfulbaculi.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 May 2025 01:15:43 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=20
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

GET www.warfulbaculi.top/favicon.ico

212.117.187.156

404 Not Found

9 B

URL

www.warfulbaculi.top/favicon.ico

IP / ASN

212.117.187.156

#7979 SERVERS-COM

Requested byhttps://www.warfulbaculi.top/f/33ca4f00-3eed-4261-a39c-2b71a0965685?click_id=66z938c643uof07epdnok0o0w,18554248,5,12663

Resource Info

File typeASCII text, with no line terminators

First Seen2023-03-08

Last Seen2025-08-02

Times Seen15756

Size9 B (9 bytes)

MD59d1ead73e678fa2f51a70a933b0bf017

SHA1d205cbd6783332a212c5ae92d73c77178c2d2f28

SHA2560019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5

Certificate Info

IssuerLet's Encrypt

Subjectwww.warfulbaculi.top

Fingerprint38:E6:51:02:4C:99:2B:B3:43:5E:26:EC:1C:F8:A9:49:E2:96:13:C2

ValidityFri, 04 Apr 2025 07:21:55 GMT - Thu, 03 Jul 2025 07:21:54 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.warfulbaculi.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.warfulbaculi.top/f/33ca4f00-3eed-4261-a39c-2b71a0965685?click_id=66z938c643uof07epdnok0o0w,18554248,5,12663
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 16 May 2025 01:15:43 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 9
Connection: keep-alive
Keep-Alive: timeout=20