Report - 89466.click.validclick.net/

Report Overview

Visited public
2024-07-11 07:19:55
Tags
URL
89466.click.validclick.net/
Finishing URL
validclick.net/
IP / ASN
173.198.250.30
#40244 TURNKEY-INTERNET
Title
ValidClick.net

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-09 18:12:41	2.3 kB	6.2 kB	23.36.76.226
validclick.net	198045	2006-09-01	2012-10-22 21:16:39	2021-12-17 03:30:38	1.8 kB	19 kB	66.63.171.134
89466.click.validclick.net	unknown	2006-09-01	2023-10-30 22:20:12	2023-11-16 09:22:23	481 B	1.0 kB	173.198.250.30

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-07-11 07:19:46	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (13)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash ee5b6dc3e7ab972df60b36582e3eaaf4 2a5185acc539fcddac9c33895ec74faf552b62dd be84262bbb3f3aabae368745bc3e85b816e372b16bc37327a1887d3a19992df6 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "BE84262BBB3F3AABAE368745BC3E85B816E372B16BC37327A1887D3A19992DF6" Last-Modified: Wed, 10 Jul 2024 13:53:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3748 Expires: Thu, 11 Jul 2024 08:21:57 GMT Date: Thu, 11 Jul 2024 07:19:29 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c2f3e4e1f94efa7a80f9deeb3d459176 7a8f013a3d13ffe4241b8e2a8b9ca63daeeace53 5f9feb641b1e74a7c14eee1104953d1e9faa0341d1f27fdbd50fa8207e6c0ac8 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5F9FEB641B1E74A7C14EEE1104953D1E9FAA0341D1F27FDBD50FA8207E6C0AC8" Last-Modified: Tue, 09 Jul 2024 15:27:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10363 Expires: Thu, 11 Jul 2024 10:12:12 GMT Date: Thu, 11 Jul 2024 07:19:29 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash e7492695b5254a3a63fcffb4f1ee8cec 0361713c6d8129210245347284c7c6babfd28fb7 5d1bc1c01894fd88a0d4680490977488d6458bb58a98ace24ef8aa103538bc1f HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5D1BC1C01894FD88A0D4680490977488D6458BB58A98ACE24EF8AA103538BC1F" Last-Modified: Tue, 09 Jul 2024 23:47:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10335 Expires: Thu, 11 Jul 2024 10:11:44 GMT Date: Thu, 11 Jul 2024 07:19:29 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash fc076d7a99abd74b9da6b35304bb93e9 9d541501d5141dcf7b4d839d6fcffabec81e1a14 c86804eff01a7bb9ff866508bfdb1b071cfa4a26617d11094b9f5226e1a4b970 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C86804EFF01A7BB9FF866508BFDB1B071CFA4A26617D11094B9F5226E1A4B970" Last-Modified: Tue, 09 Jul 2024 16:18:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10370 Expires: Thu, 11 Jul 2024 10:12:19 GMT Date: Thu, 11 Jul 2024 07:19:29 GMT Connection: keep-alive`

	validclick.net/	66.63.171.134	200 OK	920 B
URL User Request GET HTTP/1.1 validclick.net/ IP 66.63.171.134:80 ASN #8100 ASN-QUADRANET-GLOBAL File type HTML document, ASCII text, with very long lines (369) Size 920 B (920 bytes) Hash ad5a419f5319bc977aa83b041fd58f33 76406081eb79a51ff514b67b6d9be7923bb31128 bbdcd08ebcf5150ce910ae1878a408ea05020da985a56820b484402b1bbbf1ec HTTP Headers `GET / HTTP/1.1 Host: validclick.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 07:19:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip`

	89466.click.validclick.net/	173.198.250.30	301 Moved Permanently	851 B
URL User Request GET HTTP/2 89466.click.validclick.net/ IP 173.198.250.30:443 ASN #40244 TURNKEY-INTERNET Certificate IssuerSectigo Limited Subject.click.validclick.net Fingerprint11:8D:64:FF:47:59:33:36:AF:5E:B7:F1:82:AB:58:D5:BD:41:0A:C9 ValidityFri, 15 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT File type HTML document, ASCII text Size 851 B (851 bytes) Hash 5f6daff0ac2c4f2eddfbe94e28cf30f5 51178d5120e8a11149ecd7be2de26ba7f2291ccc 0dac0cd106134dda9a73122e747f734a60348d9e1bfe6fcccf893851166bbc56 HTTP Headers `GET / HTTP/1.1 Host: 89466.click.validclick.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently server: nginx date: Thu, 11 Jul 2024 07:19:29 GMT content-type: text/html; charset=UTF-8 location: http://validclick.net/ X-Firefox-Spdy: h2`

	validclick.net/images/999.css	66.63.171.134	200 OK	831 B
URL GET HTTP/1.1 validclick.net/images/999.css IP 66.63.171.134:80 ASN #8100 ASN-QUADRANET-GLOBAL Requested by http://validclick.net/ File type assembler source, ASCII text Size 831 B (831 bytes) Hash cb38f72faa32825b1b205e836210a769 822903800b6e659ed3d1c9605f64441eb5dc00ae 1c60073b6944a09965d04b4d484272df979cb496b7d4673aca16ccb89964adff HTTP Headers `GET /images/999.css HTTP/1.1 Host: validclick.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://validclick.net/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 07:19:30 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 12 Dec 2014 02:36:38 GMT ETag: W/"548a54b6-8b4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Content-Encoding: gzip`

	validclick.net/images/validclick.jpg	66.63.171.134	200 OK	5.6 kB
URL GET HTTP/1.1 validclick.net/images/validclick.jpg IP 66.63.171.134:80 ASN #8100 ASN-QUADRANET-GLOBAL Requested by http://validclick.net/ File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 205x47, components 3 Size 5.6 kB (5633 bytes) Hash b34df6ef270607da7dbf282a3332aa71 9a38f178c0eeee715157746c2d58e1cd81e3aae9 a2edbc52324e70bc896c008453cd5d8babbe9cfe3e34b1e06b0ffe80dbe6aa90 HTTP Headers `GET /images/validclick.jpg HTTP/1.1 Host: validclick.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://validclick.net/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 07:19:30 GMT Content-Type: image/jpeg Content-Length: 5633 Connection: keep-alive Last-Modified: Fri, 12 Dec 2014 02:36:38 GMT ETag: "548a54b6-1601" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes`

	validclick.net/images/shield.jpg	66.63.171.134	200 OK	10 kB
URL GET HTTP/1.1 validclick.net/images/shield.jpg IP 66.63.171.134:80 ASN #8100 ASN-QUADRANET-GLOBAL Requested by http://validclick.net/ File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x261, components 3 Size 10 kB (10157 bytes) Hash c0f3ac966f857d63806d63ad93e142d1 a443d98316ef607033de03197db1e498d561a1d5 d415b5df7360791a08463e154a9cc0f6a3f325f62eb4437230159df0a4531dc0 HTTP Headers `GET /images/shield.jpg HTTP/1.1 Host: validclick.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://validclick.net/images/999.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 11 Jul 2024 07:19:30 GMT Content-Type: image/jpeg Content-Length: 10157 Connection: keep-alive Last-Modified: Fri, 12 Dec 2014 02:36:38 GMT ETag: "548a54b6-27ad" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes`

	validclick.net/favicon.ico	66.63.171.134	404 Not Found	107 B
URL GET HTTP/1.1 validclick.net/favicon.ico IP 66.63.171.134:80 ASN #8100 ASN-QUADRANET-GLOBAL Requested by http://validclick.net/ File type HTML document, ASCII text, with CRLF line terminators Size 107 B (107 bytes) Hash 8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: validclick.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://validclick.net/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx Date: Thu, 11 Jul 2024 07:19:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10413 Expires: Thu, 11 Jul 2024 10:13:04 GMT Date: Thu, 11 Jul 2024 07:19:31 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10413 Expires: Thu, 11 Jul 2024 10:13:04 GMT Date: Thu, 11 Jul 2024 07:19:31 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 50e4489707989517510128817aedd2ea 36a54d7b34a9ac621715b569e5a870f62671c574 3e28ea2cede92dae0f7bfcd98eaf9bd016ab8ecc4ea81b7e8f7b90ba4e20aa40 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "3E28EA2CEDE92DAE0F7BFCD98EAF9BD016AB8ECC4EA81B7E8F7B90BA4E20AA40" Last-Modified: Wed, 10 Jul 2024 17:32:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10413 Expires: Thu, 11 Jul 2024 10:13:04 GMT Date: Thu, 11 Jul 2024 07:19:31 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (13)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash