Report - api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?id=c446b230-4309-4443-8cc6-5ccda7cc26e8&country=us&custom1=01K0J867BATB4B1RE05HN0MBQ1&custom2=01JX1M334AT090HKKPF6A6XHQT&merchantUrl=https://bedbathandbeyond.com&publisherClickId=01K0J867BATB4B1RE05HN0MBQ1&publisherSubId=01JX1M334AT090HKKPF6A6XHQT

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
static.captcha-delivery.com	38537	2019-12-23	2020-05-12	2025-07-17	3.6 kB	62 kB	54.240.174.39
dd.prod.captcha-delivery.com	unknown	2019-12-23	2022-04-28	2025-07-13	1.1 kB	28 kB	54.240.174.72
us-go.kelkoogroup.net	389369	2017-08-18	2018-06-25	2025-07-14	3.2 kB	3.2 kB	95.211.116.26
geo.captcha-delivery.com	43337	2019-12-23	2020-03-18	2025-07-13	7.2 kB	1.3 MB	13.49.167.109
api.kelkoogroup.net	468795	2017-08-18	2020-06-09	2025-07-13	777 B	179 kB	3.164.240.36
ct.captcha-delivery.com	42546	2019-12-23	2020-02-05	2025-07-13	422 B	14 kB	54.240.174.110

Scan Date	Severity	Indicator	Alert
2025-07-19	medium	api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?id=c446b230-4309-4443-8cc6-5ccda7cc26e8&country=us&custom1=01K0J867BATB4B1RE05HN0MBQ1&custom2=01JX1M334AT090HKKPF6A6XHQT&merchantUrl=https://bedbathandbeyond.com&publisherClickId=01K0J867BATB4B1RE05HN0MBQ1&publisherSubId=01JX1M334AT090HKKPF6A6XHQT	Code and strings of plugins from the Tetris framework loaded by Swid
2025-07-19	medium	javascript.script.md5:ed0042c80eb0dca12aac2c31faaeca41	Code and strings of plugins from the Tetris framework loaded by Swid

URL

ct.captcha-delivery.com/i.js

IP / ASN

54.240.174.110

#16509 AMAZON-02

Requested byhttps://us-go.kelkoogroup.net/redirect?country=us&k=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&url=https%3A%2F%2Fclick.validclick.net%2Frdr2.php%3Faff%3Dkelkoo%26q%3Dbar%26cmp%3D92079%26url%3Dhttps%253A%252F%252Fbedbathandbeyond.com&initiator=timeout&dc=false

Resource Info

File typeJavaScript source, Unicode text, UTF-8 text

First Seen2025-06-25

Last Seen2025-08-02

Times Seen546

Size14 kB (13786 bytes)

MD54d8b19e144663a4b0a34e2030e9d1cc8

SHA15b9eaf949689ac7820c221a5911f4fff98c5ab02

SHA256d5c4c11916c7bd5f5ad25bb4647f735d4a0704aa63f59835017ff625f82363dd

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /i.js HTTP/1.1
Host: ct.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us-go.kelkoogroup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
content-length: 13786
date: Sat, 19 Jul 2025 12:24:50 GMT
last-modified: Wed, 25 Jun 2025 12:23:22 GMT
etag: "4d8b19e144663a4b0a34e2030e9d1cc8"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UCBkoryAOXugjLCKwHuLFWcgymRhLAnY_bdwOHvdtK7NSxmGJz9keQ==
age: 31364
X-Firefox-Spdy: h2

URL

static.captcha-delivery.com/common/fonts/roboto/font-face.css

IP / ASN

54.240.174.39

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%3D612f7a9541cd6ea61eb554c0e4cff437319ad1514fbf359978478027bff18e36348f20cc483b25d17672477ee720ea79584fcd2985955ef73fddd55129f84d67e2822fd2ce6274abbd1d7e657b414ca9be80a87d52a648e331f45f444813a3b9c32d39d2c59fc8584e06596c7aaa62821d456b1dff6bb579a30c659b02514cbdb8c2eef522055b3548538611455e85eb4cc6ed281a0f4c39a6b80c5f6f02748dbc82337f9362e49b1f5a3e5fc6b6330ed70a7fc9d7535a28be825b343d8b76e0bd8f355dc538a1d2f92b8a77e15a1b526fef205719d188a77947713ef4e5c94a0af56c644ecb21396591822b270b73ac81bbcce563f7f684f2908effdbc19b9ca31f5d9ff532468c8cba571bdbbc6eb70d5ea1cbbaf017ec5281677c481a71ab024d5f3df29cb7147d30cf2da86b34951d281eb44549b4f104273e2f02509f493084537bdc444dbee3a388a505d9ff40ccb31dc491dfdd0767e9b2fe30bc4daecdf3604af96dd63a7fda3851dc7fb22e652934270692dd0f06a2dc259e685f3e4b15cdda57e77e081d0813042a9ded272a3fc14b89b97e3ea6da57dfdf3f2db7%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&s=35103&b=32286&dm=cd

Resource Info

File typeASCII text

First Seen2024-07-20

Last Seen2025-08-02

Times Seen3102

Size519 B (519 bytes)

MD5e4f77074c0ffbfab377011e19283eb13

SHA19160259165ca1ef84209d4dd675c3ed367babff1

SHA25666599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /common/fonts/roboto/font-face.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 519
last-modified: Fri, 19 Jul 2024 12:42:09 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Sat, 19 Jul 2025 00:58:02 GMT
etag: "e4f77074c0ffbfab377011e19283eb13"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zAiyDPOaKg88tKmT2RCzzj9bkAmMeMOtXtru6MoFOKONcdXBMP-gWQ==
age: 72573
X-Firefox-Spdy: h2

URL

dd.prod.captcha-delivery.com/image/2025-07-19/1817b42ce4fb1deede22ab6646013b08.jpg

IP / ASN

54.240.174.72

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg==&cid=z0utT71Nl1nfaUtYbh2NX~Nhe4wiJp0SdTgFe~iLv93xAFegRVxzbEE4e7zcF856uHXzZXP2f0iufvxECm7aiXeaZ_MJNDCT6A2gOh9U4IonSEX9WvCo3OP80Hv0iqNm&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=67abfa1615a38c8e4c51e15e86760c192da26646169b1333522182776d2ced52&ir=676%2C36%2C20&dm=dc_ir

Resource Info

File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x155, components 3

First Seen2025-07-19

Last Seen2025-07-19

Times Seen1

Size18 kB (18048 bytes)

MD54693fa214d4ef8a01012defa77ed4143

SHA1e7d111782ee8bf029ef87bc5b644429e17380d37

SHA2567347c9d991ea39f18c5552fb3443632bee115d0923ffc26656e8416e971b6e04

Certificate Info

IssuerAmazon

Subjectdd.prod.captcha-delivery.com

Fingerprint78:DE:FA:F7:3D:63:84:2A:F7:68:BE:5E:19:5C:02:C6:7A:A4:A2:DA

ValidityMon, 27 Jan 2025 00:00:00 GMT - Wed, 25 Feb 2026 23:59:59 GMT

HTTP Headers

GET /image/2025-07-19/1817b42ce4fb1deede22ab6646013b08.jpg HTTP/1.1
Host: dd.prod.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 18048
date: Sat, 19 Jul 2025 00:00:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3600
last-modified: Tue, 15 Jul 2025 05:06:27 GMT
x-amz-expiration: expiry-date="Wed, 23 Jul 2025 00:00:00 GMT", rule-id="auto-clean old captchas image (7 days)"
etag: "4693fa214d4ef8a01012defa77ed4143"
x-amz-server-side-encryption: AES256
x-amz-version-id: qw5aztcqMlNWtTJGGT7e927jANtoTlzn
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SR_LvbbbxJhBkI6bYfd9Zd4jzjqG7e7aJn_9_2ZgLhkdlCZOe2cYkQ==
age: 76041
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

URL

us-go.kelkoogroup.net/redirect?country=us&k=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&url=https%3A%2F%2Fclick.validclick.net%2Frdr2.php%3Faff%3Dkelkoo%26q%3Dbar%26cmp%3D92079%26url%3Dhttps%253A%252F%252Fbedbathandbeyond.com&initiator=timeout&dc=false

IP / ASN

95.211.116.26

#60781 LeaseWeb Netherlands B.V.

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (744), with no line terminators

First Seen2025-07-19

Last Seen2025-07-19

Times Seen1

Size744 B (744 bytes)

MD520f9f0988a05757614eaf67fb73e96e6

SHA101c60de167abd76fac0ef769a4dd550e1e2bca93

SHA25655771ac951c85bee0b25c13ba7c8a1c9cf8039be9d6788b9b663ddc8a7fdb538

Certificate Info

IssuerDigiCert Inc

Subject*.kelkoogroup.net

FingerprintAB:7F:31:B1:66:46:76:99:39:20:8C:5B:A4:03:6B:DE:E6:6B:F4:17

ValidityThu, 26 Sep 2024 00:00:00 GMT - Fri, 10 Oct 2025 23:59:59 GMT

HTTP Headers

GET /redirect?country=us&k=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&url=https%3A%2F%2Fclick.validclick.net%2Frdr2.php%3Faff%3Dkelkoo%26q%3Dbar%26cmp%3D92079%26url%3Dhttps%253A%252F%252Fbedbathandbeyond.com&initiator=timeout&dc=false HTTP/1.1
Host: us-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c626f-19824837863-65b6c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Pragma: no-cache
X-DD-B: 3
Charset: utf-8
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK; Max-Age=31104000; Expires=Tue, 14 Jul 2026 21:07:33 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
X-DataDome: protected
Request-Time: PT0.014132925S
Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate
X-DataDome-CID: AHrlqAAAAAMA_HX093P2GjMAW1oqmg==
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Sat, 19 Jul 2025 21:07:33 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 744

URL

static.captcha-delivery.com/captcha/assets/tpl/device-check/index.css

IP / ASN

54.240.174.39

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&s=35103&b=32286&dm=cd

Resource Info

File typeASCII text

First Seen2025-04-07

Last Seen2025-08-02

Times Seen1490

Size3.7 kB (3683 bytes)

MD5d24f433ae1916185b0e4e20ed76cb64b

SHA1e0c8d4c58b7d0983f9b4042bea94c014cd5ec668

SHA256f40a7b02a8a2d420aa9d4cb5b0b26a92468828984fdc4b0d1202de4e24f59859

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /captcha/assets/tpl/device-check/index.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 08 Feb 2024 08:41:29 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
date: Sat, 19 Jul 2025 01:11:26 GMT
etag: W/"d24f433ae1916185b0e4e20ed76cb64b"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6N_XYg7m3meML47gHIoe7fHSGun11R4dIo660hTniT0dSdtQM2_2SA==
age: 71788
X-Firefox-Spdy: h2

URL

geo.captcha-delivery.com/interstitial/

IP / ASN

13.49.167.109

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%3D612f7a9541cd6ea61eb554c0e4cff437319ad1514fbf359978478027bff18e36348f20cc483b25d17672477ee720ea79584fcd2985955ef73fddd55129f84d67e2822fd2ce6274abbd1d7e657b414ca9be80a87d52a648e331f45f444813a3b9c32d39d2c59fc8584e06596c7aaa62821d456b1dff6bb579a30c659b02514cbdb8c2eef522055b3548538611455e85eb4cc6ed281a0f4c39a6b80c5f6f02748dbc82337f9362e49b1f5a3e5fc6b6330ed70a7fc9d7535a28be825b343d8b76e0bd8f355dc538a1d2f92b8a77e15a1b526fef205719d188a77947713ef4e5c94a0af56c644ecb21396591822b270b73ac81bbcce563f7f684f2908effdbc19b9ca31f5d9ff532468c8cba571bdbbc6eb70d5ea1cbbaf017ec5281677c481a71ab024d5f3df29cb7147d30cf2da86b34951d281eb44549b4f104273e2f02509f493084537bdc444dbee3a388a505d9ff40ccb31dc491dfdd0767e9b2fe30bc4daecdf3604af96dd63a7fda3851dc7fb22e652934270692dd0f06a2dc259e685f3e4b15cdda57e77e081d0813042a9ded272a3fc14b89b97e3ea6da57dfdf3f2db7%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&s=35103&b=32286&dm=cd

Resource Info

File typeJSON text data

First Seen2025-07-19

Last Seen2025-07-19

Times Seen1

Size1.7 kB (1736 bytes)

MD51bbccc7de3033b966f9e417e36285bf1

SHA1c2a9122346381110ca9d53151ac2886dca76cd6d

SHA2560e7cd7fc716cd08c9f0607187bb91431188af3aec05956baf5450db0559e4207

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

POST /interstitial/ HTTP/1.1
Host: geo.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 7329
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&s=35103&b=32286&dm=cd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 19 Jul 2025 21:07:36 GMT
Content-Type: application/json;charset=utf-8
Content-Length: 1736
Connection: keep-alive

URL

static.captcha-delivery.com/common/fonts/roboto/roboto.woff2

IP / ASN

54.240.174.39

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg==&cid=z0utT71Nl1nfaUtYbh2NX~Nhe4wiJp0SdTgFe~iLv93xAFegRVxzbEE4e7zcF856uHXzZXP2f0iufvxECm7aiXeaZ_MJNDCT6A2gOh9U4IonSEX9WvCo3OP80Hv0iqNm&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%3D612f7a9541cd6ea61eb554c0e4cff437319ad1514fbf359978478027bff18e36348f20cc483b25d17672477ee720ea79584fcd2985955ef73fddd55129f84d67e2822fd2ce6274abbd1d7e657b414ca9be80a87d52a648e331f45f444813a3b9c32d39d2c59fc8584e06596c7aaa62821d456b1dff6bb579a30c659b02514cbdb8c2eef522055b3548538611455e85eb4cc6ed281a0f4c39a6b80c5f6f02748dbc82337f9362e49b1f5a3e5fc6b6330ed70a7fc9d7535a28be825b343d8b76e0bd8f355dc538a1d2f92b8a77e15a1b526fef205719d188a77947713ef4e5c94a0af56c644ecb21396591822b270b73ac81bbcce563f7f684f2908effdbc19b9ca31f5d9ff532468c8cba571bdbbc6eb70d5ea1cbbaf017ec5281677c481a71ab024d5f3df29cb7147d30cf2da86b34951d281eb44549b4f104273e2f02509f493084537bdc444dbee3a388a505d9ff40ccb31dc491dfdd0767e9b2fe30bc4daecdf3604af96dd63a7fda3851dc7fb22e652934270692dd0f06a2dc259e685f3e4b15cdda57e77e081d0813042a9ded272a3fc14b89b97e3ea6da57dfdf3f2db7%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=67abfa1615a38c8e4c51e15e86760c192da26646169b1333522182776d2ced52&ir=676%2C36%2C20&dm=dc_ir

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 15688, version 1.0

First Seen2023-04-09

Last Seen2025-08-02

Times Seen4767

Size16 kB (15688 bytes)

MD5aa23b7b4bcf2b8f0e876106bb3de69c6

SHA1106ac454ba4e503e0a1cd15e1275130918049182

SHA256cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /common/fonts/roboto/roboto.woff2 HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://static.captcha-delivery.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff2
content-length: 15688
access-control-allow-origin: https://geo.captcha-delivery.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 06 May 2022 16:47:07 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Sat, 19 Jul 2025 01:11:50 GMT
etag: "aa23b7b4bcf2b8f0e876106bb3de69c6"
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZCN2v91ZZWxPkW2G_fAnjOLdPiEbp3A2WXo8ARsPuB9EvUy0XQaPuw==
age: 71748
X-Firefox-Spdy: h2

URL

us-go.kelkoogroup.net/favicon.ico

IP / ASN

95.211.116.26

#60781 LeaseWeb Netherlands B.V.

Requested byhttps://us-go.kelkoogroup.net/redirect?country=us&k=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&url=https%3A%2F%2Fclick.validclick.net%2Frdr2.php%3Faff%3Dkelkoo%26q%3Dbar%26cmp%3D92079%26url%3Dhttps%253A%252F%252Fbedbathandbeyond.com&initiator=timeout&dc=false

Resource Info

File typeHTML document, ASCII text

First Seen2023-04-08

Last Seen2025-08-02

Times Seen2869

Size1.1 kB (1144 bytes)

MD58560de521c4990c7c870121fc9643508

SHA10cacf7a6b96cceeb6ceae74d5f14dc87406a6f39

SHA25673a434285c3a752bc8c44aebd50e10f1a766853cbc7184e78d5c934c7b52b620

Certificate Info

IssuerDigiCert Inc

Subject*.kelkoogroup.net

FingerprintAB:7F:31:B1:66:46:76:99:39:20:8C:5B:A4:03:6B:DE:E6:6B:F4:17

ValidityThu, 26 Sep 2024 00:00:00 GMT - Fri, 10 Oct 2025 23:59:59 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: us-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://us-go.kelkoogroup.net/redirect?country=us&k=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&url=https%3A%2F%2Fclick.validclick.net%2Frdr2.php%3Faff%3Dkelkoo%26q%3Dbar%26cmp%3D92079%26url%3Dhttps%253A%252F%252Fbedbathandbeyond.com&initiator=timeout&dc=false
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c626f-19824837863-65b6c; datadome=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Request-Time: PT0.000289804S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: frame-ancestors 'none'
X-Permitted-Cross-Domain-Policies: master-only
Date: Sat, 19 Jul 2025 21:07:33 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1144

URL

static.captcha-delivery.com/common/fonts/roboto/roboto.woff2

IP / ASN

54.240.174.39

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&s=35103&b=32286&dm=cd

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 15688, version 1.0

First Seen2023-04-09

Last Seen2025-08-02

Times Seen4767

Size16 kB (15688 bytes)

MD5aa23b7b4bcf2b8f0e876106bb3de69c6

SHA1106ac454ba4e503e0a1cd15e1275130918049182

SHA256cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /common/fonts/roboto/roboto.woff2 HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://static.captcha-delivery.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff2
content-length: 15688
access-control-allow-origin: https://geo.captcha-delivery.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 06 May 2022 16:47:07 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Sat, 19 Jul 2025 01:11:50 GMT
etag: "aa23b7b4bcf2b8f0e876106bb3de69c6"
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dqBmkjOjqsm4fyVWi7LI0rkbp77sF3_Y-g526ENSexFBZiiTa86l2A==
age: 71745
X-Firefox-Spdy: h2

URL

static.captcha-delivery.com/common/fonts/roboto/font-face.css

IP / ASN

54.240.174.39

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg==&cid=z0utT71Nl1nfaUtYbh2NX~Nhe4wiJp0SdTgFe~iLv93xAFegRVxzbEE4e7zcF856uHXzZXP2f0iufvxECm7aiXeaZ_MJNDCT6A2gOh9U4IonSEX9WvCo3OP80Hv0iqNm&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=67abfa1615a38c8e4c51e15e86760c192da26646169b1333522182776d2ced52&ir=676%2C36%2C20&dm=dc_ir

Resource Info

File typeASCII text

First Seen2024-07-20

Last Seen2025-08-02

Times Seen3102

Size519 B (519 bytes)

MD5e4f77074c0ffbfab377011e19283eb13

SHA19160259165ca1ef84209d4dd675c3ed367babff1

SHA25666599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /common/fonts/roboto/font-face.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 519
last-modified: Fri, 19 Jul 2024 12:42:09 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Sat, 19 Jul 2025 00:58:02 GMT
etag: "e4f77074c0ffbfab377011e19283eb13"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uB9wHbXTYDqdJwU85EekRBZs3eQ9jvBMhvKQT3oPiXE3icMa03_Gug==
age: 72576
X-Firefox-Spdy: h2

URL

static.captcha-delivery.com/common/fonts/roboto/roboto.woff2

IP / ASN

54.240.174.39

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg==&cid=z0utT71Nl1nfaUtYbh2NX~Nhe4wiJp0SdTgFe~iLv93xAFegRVxzbEE4e7zcF856uHXzZXP2f0iufvxECm7aiXeaZ_MJNDCT6A2gOh9U4IonSEX9WvCo3OP80Hv0iqNm&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=67abfa1615a38c8e4c51e15e86760c192da26646169b1333522182776d2ced52&ir=676%2C36%2C20&dm=dc_ir

Resource Info

File typeWeb Open Font Format (Version 2), TrueType, length 15688, version 1.0

First Seen2023-04-09

Last Seen2025-08-02

Times Seen4767

Size16 kB (15688 bytes)

MD5aa23b7b4bcf2b8f0e876106bb3de69c6

SHA1106ac454ba4e503e0a1cd15e1275130918049182

SHA256cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /common/fonts/roboto/roboto.woff2 HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://static.captcha-delivery.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: font/woff2
content-length: 15688
access-control-allow-origin: https://geo.captcha-delivery.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 06 May 2022 16:47:07 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Sat, 19 Jul 2025 01:11:50 GMT
etag: "aa23b7b4bcf2b8f0e876106bb3de69c6"
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7xAWjtt_E2S-JroDD6V0JaRKkJEGwAzSoSLNU04gceR5OuhnLNf8TQ==
age: 71750
X-Firefox-Spdy: h2

URL

api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?id=c446b230-4309-4443-8cc6-5ccda7cc26e8&country=us&custom1=01K0J867BATB4B1RE05HN0MBQ1&custom2=01JX1M334AT090HKKPF6A6XHQT&merchantUrl=https://bedbathandbeyond.com&publisherClickId=01K0J867BATB4B1RE05HN0MBQ1&publisherSubId=01JX1M334AT090HKKPF6A6XHQT

IP / ASN

3.164.240.36

#16509 AMAZON-02

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (30599)

First Seen2025-07-19

Last Seen2025-07-19

Times Seen1

Size177 kB (177054 bytes)

MD5312643b93d55293044a72fae8bd01d14

SHA143ea82d30002005bfc68cc9f8633bafe896b382a

SHA25655b8eae7e9d301c24a2d5fac79c28b7a48770814e4ae1312f88b62bd391a068c

Certificate Info

IssuerAmazon

Subjectapi.kelkoogroup.net

FingerprintDE:F8:09:ED:61:51:96:48:CB:23:37:6D:A6:4F:C8:7C:0C:15:69:2D

ValidityMon, 18 Nov 2024 00:00:00 GMT - Tue, 16 Dec 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	Code and strings of plugins from the Tetris framework loaded by Swid

HTTP Headers

GET /publisher/shopping/v2/link-monetizer/link?id=c446b230-4309-4443-8cc6-5ccda7cc26e8&country=us&custom1=01K0J867BATB4B1RE05HN0MBQ1&custom2=01JX1M334AT090HKKPF6A6XHQT&merchantUrl=https://bedbathandbeyond.com&publisherClickId=01K0J867BATB4B1RE05HN0MBQ1&publisherSubId=01JX1M334AT090HKKPF6A6XHQT HTTP/1.1
Host: api.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 177054
leadid: 62A001K0J86Y3KCQDVG331VW3K1ECN
pragma: no-cache
x-dd-b: 3
charset: utf-8
clickid: 107698111_1752959252579_4577722
country: us
accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
set-cookie: datadome=lLuz6ohLQlxo67QMOem40eOr4ILxzVl2GpCDLvQufwPXbvTlm1xXc1cGrCS1Az2u6r8HD5_~MWUPOqi1O62ZQ7cHODjqMw3qm61zwkSS~GlG~leux7meUymzANdHlLkM; Max-Age=31104000; Expires=Tue, 14 Jul 2026 21:07:32 GMT; SameSite=Lax; Path=/; Domain=.kelkoo.net; Secure
kelkooID=a4c626f-19824837863-65b6c; Max-Age=31536000; Expires=Sun, 19 Jul 2026 21:07:32 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
x-datadome: protected
request-time: PT0.025048573S
x-robots-tag: noindex,nofollow
cache-control: max-age=0, private, no-cache, no-store, must-revalidate
x-datadome-cid: AHrlqAAAAAMAuMZImU9ZDLEAW1oqmg==
referrer-policy: origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'none'
x-permitted-cross-domain-policies: master-only
date: Sat, 19 Jul 2025 21:07:31 GMT
x-gravitee-transaction-id: 05761e0b-e43e-415f-b61e-0be43ea15fe3
x-gravitee-request-id: 05761e0b-e43e-415f-b61e-0be43ea15fe3
x-cache: Miss from cloudfront
via: 1.1 5f7dfed9ac84be147f8e4e2e474596fc.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: LpW9QkLMEDMfPSUslwi_IUbFvqdPeifB3ZrNLetxu-qRaAFXQg5Wmg==
X-Firefox-Spdy: h2

URL

geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&s=35103&b=32286&dm=cd

IP / ASN

13.49.167.109

#16509 AMAZON-02

Requested byhttps://us-go.kelkoogroup.net/redirect?country=us&k=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&url=https%3A%2F%2Fclick.validclick.net%2Frdr2.php%3Faff%3Dkelkoo%26q%3Dbar%26cmp%3D92079%26url%3Dhttps%253A%252F%252Fbedbathandbeyond.com&initiator=timeout&dc=false

Resource Info

File typeHTML document, ASCII text, with very long lines (61855)

First Seen2025-07-19

Last Seen2025-07-19

Times Seen1

Size560 kB (560142 bytes)

MD57f51d300c276131fa6f5db5fb9e1367c

SHA124b22d8454e0fe6b6201c267ac8be6499406f452

SHA2562aa2cd36f2d624bf31d1284253df9f84c55f646437d868048bd2e8507bc46299

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /interstitial/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&s=35103&b=32286&dm=cd HTTP/1.1
Host: geo.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://us-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 19 Jul 2025 21:07:34 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip

URL

geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg==&cid=z0utT71Nl1nfaUtYbh2NX~Nhe4wiJp0SdTgFe~iLv93xAFegRVxzbEE4e7zcF856uHXzZXP2f0iufvxECm7aiXeaZ_MJNDCT6A2gOh9U4IonSEX9WvCo3OP80Hv0iqNm&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=67abfa1615a38c8e4c51e15e86760c192da26646169b1333522182776d2ced52&ir=676%2C36%2C20&dm=dc_ir

IP / ASN

13.49.167.109

#16509 AMAZON-02

Requested byhttps://us-go.kelkoogroup.net/redirect?country=us&k=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&url=https%3A%2F%2Fclick.validclick.net%2Frdr2.php%3Faff%3Dkelkoo%26q%3Dbar%26cmp%3D92079%26url%3Dhttps%253A%252F%252Fbedbathandbeyond.com&initiator=timeout&dc=false

Resource Info

File typeHTML document, ASCII text, with very long lines (40923)

First Seen2025-07-19

Last Seen2025-07-19

Times Seen1

Size784 kB (784312 bytes)

MD5f49d0bc9c166a02323f7d8064eefd615

SHA13795f16d238994799a7f5f4484ea746ac6c0377b

SHA25602fe2e8665ba48bca7e6c70d6586e75c6d40b9947484c869c4b56e1371b05220

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /captcha/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg==&cid=z0utT71Nl1nfaUtYbh2NX~Nhe4wiJp0SdTgFe~iLv93xAFegRVxzbEE4e7zcF856uHXzZXP2f0iufvxECm7aiXeaZ_MJNDCT6A2gOh9U4IonSEX9WvCo3OP80Hv0iqNm&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=67abfa1615a38c8e4c51e15e86760c192da26646169b1333522182776d2ced52&ir=676%2C36%2C20&dm=dc_ir HTTP/1.1
Host: geo.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=z0utT71Nl1nfaUtYbh2NXmu0S2Fq8HMu5zK9h7AirKhlePNrI2Bdw8dbdRV7tX_h~y~dl70SJjG~ZJ98E50cBiFbqlxz48x~15ysMyuapBicmvrAaOLZU3My2ObBszNK&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%3D612f7a9541cd6ea61eb554c0e4cff437319ad1514fbf359978478027bff18e36348f20cc483b25d17672477ee720ea79584fcd2985955ef73fddd55129f84d67e2822fd2ce6274abbd1d7e657b414ca9be80a87d52a648e331f45f444813a3b9c32d39d2c59fc8584e06596c7aaa62821d456b1dff6bb579a30c659b02514cbdb8c2eef522055b3548538611455e85eb4cc6ed281a0f4c39a6b80c5f6f02748dbc82337f9362e49b1f5a3e5fc6b6330ed70a7fc9d7535a28be825b343d8b76e0bd8f355dc538a1d2f92b8a77e15a1b526fef205719d188a77947713ef4e5c94a0af56c644ecb21396591822b270b73ac81bbcce563f7f684f2908effdbc19b9ca31f5d9ff532468c8cba571bdbbc6eb70d5ea1cbbaf017ec5281677c481a71ab024d5f3df29cb7147d30cf2da86b34951d281eb44549b4f104273e2f02509f493084537bdc444dbee3a388a505d9ff40ccb31dc491dfdd0767e9b2fe30bc4daecdf3604af96dd63a7fda3851dc7fb22e652934270692dd0f06a2dc259e685f3e4b15cdda57e77e081d0813042a9ded272a3fc14b89b97e3ea6da57dfdf3f2db7%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&s=35103&b=32286&dm=cd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 19 Jul 2025 21:07:37 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip

URL

dd.prod.captcha-delivery.com/image/2025-07-19/1817b42ce4fb1deede22ab6646013b08.frag.png

IP / ASN

54.240.174.72

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg==&cid=z0utT71Nl1nfaUtYbh2NX~Nhe4wiJp0SdTgFe~iLv93xAFegRVxzbEE4e7zcF856uHXzZXP2f0iufvxECm7aiXeaZ_MJNDCT6A2gOh9U4IonSEX9WvCo3OP80Hv0iqNm&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=67abfa1615a38c8e4c51e15e86760c192da26646169b1333522182776d2ced52&ir=676%2C36%2C20&dm=dc_ir

Resource Info

File typePNG image data, 63 x 155, 8-bit/color RGBA, non-interlaced

First Seen2025-07-19

Last Seen2025-07-19

Times Seen1

Size7.6 kB (7570 bytes)

MD56edd295e100511cff234dca17c0569ec

SHA1ed55912087c439328f60ca1e7201dac3ea8e6072

SHA256b3b873b9d9ba27cb57b4b96acc4b88ba64a8ee60aa2e0ed826d43fd18d80c376

Certificate Info

IssuerAmazon

Subjectdd.prod.captcha-delivery.com

Fingerprint78:DE:FA:F7:3D:63:84:2A:F7:68:BE:5E:19:5C:02:C6:7A:A4:A2:DA

ValidityMon, 27 Jan 2025 00:00:00 GMT - Wed, 25 Feb 2026 23:59:59 GMT

HTTP Headers

GET /image/2025-07-19/1817b42ce4fb1deede22ab6646013b08.frag.png HTTP/1.1
Host: dd.prod.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 7570
date: Sat, 19 Jul 2025 00:00:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3600
last-modified: Tue, 15 Jul 2025 05:06:27 GMT
x-amz-expiration: expiry-date="Wed, 23 Jul 2025 00:00:00 GMT", rule-id="auto-clean old captchas image (7 days)"
etag: "6edd295e100511cff234dca17c0569ec"
x-amz-server-side-encryption: AES256
x-amz-version-id: lrD0d4wD6brAOBA2Gel4MICOX6wCaxmh
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7h3Xb870y4AN__qn-mYpwGNxKcbNuFECUGD8yaZF4E3iYh-dy0kDaQ==
age: 76041
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

URL

static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css

IP / ASN

54.240.174.39

#16509 AMAZON-02

Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_HX093P2GjMAW1oqmg==&cid=z0utT71Nl1nfaUtYbh2NX~Nhe4wiJp0SdTgFe~iLv93xAFegRVxzbEE4e7zcF856uHXzZXP2f0iufvxECm7aiXeaZ_MJNDCT6A2gOh9U4IonSEX9WvCo3OP80Hv0iqNm&referer=https%3A%2F%2Fus-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dus%26k%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%26url%3Dhttps%253A%252F%252Fclick.validclick.net%252Frdr2.php%253Faff%253Dkelkoo%2526q%253Dbar%2526cmp%253D92079%2526url%253Dhttps%25253A%25252F%25252Fbedbathandbeyond.com%26initiator%3Dtimeout%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=67abfa1615a38c8e4c51e15e86760c192da26646169b1333522182776d2ced52&ir=676%2C36%2C20&dm=dc_ir

Resource Info

File typeASCII text, with CRLF line terminators

First Seen2024-08-19

Last Seen2025-08-02

Times Seen2690

Size6.2 kB (6162 bytes)

MD51f113f0b6d6855568c684e354bb853d1

SHA12a2fbd27d5408fa3e53c74f04b7790ab1aea9b2c

SHA256d49fce4d3745c6d9f755f6be625eb218238baec337cfdb30be0e87d8c0ff6653

Certificate Info

IssuerAmazon

Subject*.captcha-delivery.com

Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D

ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT

HTTP Headers

GET /captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 11 Apr 2024 08:21:58 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
date: Sat, 19 Jul 2025 01:16:34 GMT
etag: W/"1f113f0b6d6855568c684e354bb853d1"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qcNTz6xg8UdHkWZINFgDZexkt-c3mtHcoKbGOmEpv4WGV9sp1H_gQQ==
age: 71464
X-Firefox-Spdy: h2

Detections

Host Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (6)

Detections

HTTP Transactions (16)

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

Detections

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers

HTTP Headers