Proxy Request 84cb44e8-46d7-4af4-82d6-cd3c7b7d488e

Parent Attack 46acc689-333e-48f8-9a3e-757d10165faa
Date 2019-05-10 06:18:16AM
URL 
tr.kqzamd.com/track/ccu.php?m=63536&c=51124&k=b676870e&aff_sub=023777635046206
Form Data ["aff_sub: 023777635046206", "c: 51124", "k: b676870e", "m: 63536"]
Headers ["Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8", "Accept-Encoding: gzip, deflate", "Accept-Language: en-US,en;q=0.5", "Connection: keep-alive", "Referer: http://www.google.com/", "User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36"] 
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="referrer" content="no-referrer">
<meta http-equiv="refresh" content="5;url='http://tr.kqzamd.com/track/c2.php?tcuid=mcd517a84f646970599677'">
<title>Page is loading, please wait!</title>
<script type="text/javascript">
function redirect() {
	var a1 = null;
	if(document.getElementById) {
		a1 = document.getElementById("link1");
	}else if ( document.all ) {
		a1 = document.all("link1");
	}

	if( a1 ) {
		if (typeof(a1.click) != "undefined") {
			var fr1 = '3';
			try { fr1 = (window.top==window.self)? '0':'1' ;} catch (e) { fr1 = '2'; }
			a1.href = a1.href + '&fr1=' + fr1;
			a1.click();
		}
	}
}
</script>
</head>
<body>
<a href="http://tr.kqzamd.com/track/c2.php?tcuid=mcd517a84f646970599677" target="_self" id="link1" rel="noreferrer" referrerpolicy="no-referrer" >Click here</a>
<script type="text/javascript"> redirect(); </script>
</body>
</html>
© 2021 threat.gg