Report - hf6fhayhvhjfc.xyz/

Report Overview

Submitted URL
hf6fhayhvhjfc.xyz/
IP
34.98.99.30
ASN
#15169 GOOGLE
Submitted
2023-03-27 11:38:28
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
hf6fhayhvhjfc.xyz	unknown	2022-07-27T17:09:49Z	2022-12-25T03:25:47Z	1.1 kB	5.0 kB	34.98.99.30
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-29T05:09:11Z	1.4 kB	3.5 kB	95.101.11.115
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-29T05:09:31Z	413 B	5.9 kB	34.160.144.191
img1.wsimg.com	9893	2012-06-20T16:42:31Z	2023-03-29T08:03:35Z	1.2 kB	201 kB	95.101.10.131
ocsp.godaddy.com	698	2012-05-20T21:28:57Z	2023-03-29T05:12:39Z	680 B	4.6 kB	192.124.249.23
api.aws.parking.godaddy.com	36127	2020-03-23T22:33:37Z	2023-03-29T08:03:35Z	2.1 kB	3.4 kB	18.235.167.98
partner.googleadservices.com	798	2012-10-03T03:04:21Z	2023-03-29T05:22:48Z	462 B	793 B	172.217.21.162
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-29T05:09:03Z	782 B	2.4 kB	35.241.9.150
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-29T05:09:31Z	333 B	391 B	34.117.237.239
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-29T05:09:04Z	2.4 kB	4.9 kB	142.250.74.131
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-29T05:09:32Z	606 B	127 B	44.230.4.151
afs.googleusercontent.com	12123	2013-05-06T21:11:00Z	2023-03-29T05:22:49Z	885 B	2.1 kB	216.58.207.193

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-03-27	medium	hf6fhayhvhjfc.xyz	Sinkholed
2023-03-27	medium	hf6fhayhvhjfc.xyz	Sinkholed
2023-03-27	medium	hf6fhayhvhjfc.xyz	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	www.google.com/afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=hf6fhayhvhjfc.xyz&client=dp-godaddy1_xml&r=m&rpbu=http%3A%2F%2Fhf6fhayhvhjfc.xyz%2F&type=3&uiopt=true&swp=as-drid-oo-1885714186540894&oe=UTF-8&ie=UTF-8&fexp=21404&format=r3&nocache=541679917116196&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1679917116196&u_w=1280&u_h=1024&biw=1280&bih=892&psw=1280&psh=400&frm=0&cl=518347065&uio=-&cont=relatedLinks&jsid=caf&jsv=518347065&rurl=http%3A%2F%2Fhf6fhayhvhjfc.xyz%2F&adbw=master-1%3A854	5.1 kB	2023-03-29	2023-03-29
Pretty URL www.google.com/afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=hf6fhayhvhjfc.xyz&client=dp-godaddy1_xml&r=m&rpbu=http%3A%2F%2Fhf6fhayhvhjfc.xyz%2F&type=3&uiopt=true&swp=as-drid-oo-1885714186540894&oe=UTF-8&ie=UTF-8&fexp=21404&format=r3&nocache=541679917116196&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1679917116196&u_w=1280&u_h=1024&biw=1280&bih=892&psw=1280&psh=400&frm=0&cl=518347065&uio=-&cont=relatedLinks&jsid=caf&jsv=518347065&rurl=http%3A%2F%2Fhf6fhayhvhjfc.xyz%2F&adbw=master-1%3A854 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 23:18:31 Last Seen2023-03-29 23:18:31 Times Seen1 Hash 4a517455a644b36d1e5a3fc9739dcfd1 ba5d31755f9178ce45fa0d7786d77193d2b87b3d ffc7d5e0085271a9fdf2f238d2eb789bbb8ad90818e0c7184b28840d028fea0c Loading...

	img1.wsimg.com/parking-lander/static/js/1.3fa140ef.chunk.js	271 kB	2023-03-13	2023-04-26
Pretty URL img1.wsimg.com/parking-lander/static/js/1.3fa140ef.chunk.js IP 95.101.10.131 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 23:20:11 Last Seen2023-04-26 22:15:13 Times Seen5287 Hash 06166eb9b942e7c63d8ee1eba5b3de68 26bb2d87cd0a7f132cffeabfffe2c233543c452a e78594877ba5c99a27233b27d5b843c7bd83d5ec16f675a8f39291d419136142 Loading...

	unknown	0 B	2023-03-07	2024-04-16
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-16 08:20:34 Times Seen36893588 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.google.com/adsense/domains/caf.js?abp=1	148 kB	2023-03-29	2023-04-03
Pretty URL www.google.com/adsense/domains/caf.js?abp=1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 21:36:43 Last Seen2023-04-03 23:55:31 Times Seen1240 Hash 0c5b4721e6541e3bc709392e548a5de6 65c656511fa7f56bd0637d222ae061a27f06bc0c df656d0490300ae7f9ed9c6a7f4664d7d202f0e048108a9e93445363de65f6b2 Loading...

	hf6fhayhvhjfc.xyz/	25 B	2023-03-07	2023-04-05
Pretty URL hf6fhayhvhjfc.xyz/ IP 34.98.99.30 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:18 Last Seen2023-04-05 02:12:06 Times Seen3169 Hash 0101edc617f0c823dd41e318c9d39fc9 d6464936a6d2fa4c765c4d92a2771f812ee1898f ac6eaa139076a0142af7792131f998e6fd1805556c5f7174c3bcb149b2fe3aae Loading...

	hf6fhayhvhjfc.xyz/	14 B	2023-03-13	2023-10-27
Pretty URL hf6fhayhvhjfc.xyz/ IP 34.98.99.30 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 23:06:48 Last Seen2023-10-27 14:34:41 Times Seen5037 Hash 61efebe7a2e2a748a9733d120e9a6e8f db96a95f1a5e8bfd9b8d24b0e48f063162f38602 cc8e37cc21d25c3b205d6218eeb41c3728cbcdb0c430402d66e6114b8645d2aa Loading...

	hf6fhayhvhjfc.xyz/px.js?ch=1&abp=1	476 B	2023-03-13	2024-03-28
Pretty URL hf6fhayhvhjfc.xyz/px.js?ch=1&abp=1 IP 34.98.99.30 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 06:28:57 Last Seen2024-03-28 23:13:37 Times Seen80000 Hash d2183968f9080b37babfeba3ccf10df2 24b9cf589ee6789e567fac3ae5acfc25826d00c6 4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc Loading...

	hf6fhayhvhjfc.xyz/	1.6 kB	2023-03-13	2023-07-20
Pretty URL hf6fhayhvhjfc.xyz/ IP 34.98.99.30 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 06:28:57 Last Seen2023-07-20 02:49:41 Times Seen4390 Hash c8041b2772880cdeb213f9ea29a01b7e f7e83ea582cc2ab250a4a0379475a95578db4896 c187e78df010dddf9087e827839f182af174eece8c4bf7ad7ab8359c3b0d1e16 Loading...

	img1.wsimg.com/parking-lander/static/js/main.727544c3.chunk.js	5.0 kB	2023-03-13	2023-04-26
Pretty URL img1.wsimg.com/parking-lander/static/js/main.727544c3.chunk.js IP 95.101.10.131 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 23:06:48 Last Seen2023-04-26 22:15:13 Times Seen6624 Hash 5fdf5d5d4c43969c55a42e692b95b2c9 519f1b7eaf76225c158147a13c06f16415d6e58e a71d4333476d9de0eb823e8f8a8c89d9a57f149661a8723b539e010b84d08708 Loading...

	partner.googleadservices.com/gampad/cookie.js?domain=hf6fhayhvhjfc.xyz&client=dp-godaddy1_xml&product=SAS&callback=__sasCookie	374 B	2023-03-29	2023-03-29
Pretty URL partner.googleadservices.com/gampad/cookie.js?domain=hf6fhayhvhjfc.xyz&client=dp-godaddy1_xml&product=SAS&callback=__sasCookie IP 172.217.21.162 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 23:18:31 Last Seen2023-03-29 23:18:31 Times Seen1 Hash f3fd74c82ad0acf8762591647e8e65ec 1e488ca8617f49df6043837f66ccce0058a21c23 370322eea21add0ffaf5a0388174286a0540d038dd9f95db9967a94f6a4b0805 Loading...

	www.google.com/adsense/domains/caf.js	148 kB	2023-03-29	2023-04-03
Pretty URL www.google.com/adsense/domains/caf.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 21:38:16 Last Seen2023-04-03 23:55:33 Times Seen477 Hash d5fa89ee83b7193615caa52f437c0a89 ace7706eb99f0b91c4f95b9eeb20d40d7a97b7f8 b1b6469dc228a271783b9198992c5952d95a944e68661a01e080e309acf310dd Loading...

HTTP Transactions (31)

URL IP Response Size

hf6fhayhvhjfc.xyz/

34.98.99.30

200 OK

2.8 kB

URL HTTP/1.1
hf6fhayhvhjfc.xyz/
IP
34.98.99.30:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2830), with no line terminators
Size
2.8 kB (2830 bytes)
Hash
deab82e9d004d18ea5e4edb807893b97
1906a16dbe947a41a97dee404adfbde7b797d1b2
bae5192883df949868c99fe9be72cbc1f340716dce6bb22bc1d7381be88860a6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: hf6fhayhvhjfc.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: openresty
Date: Mon, 27 Mar 2023 11:38:17 GMT
Content-Type: text/html
Content-Length: 2830
Last-Modified: Sat, 25 Mar 2023 19:18:59 GMT
ETag: "641f4923-b0e"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_Eve9INFicmkoW7l2wpy+YqAR+LQUs0/4aQW/vnv4d43DmWzPd8P2Cm5Fn4Ry2Tje0XAsu/JqkLvct+EGDXL3tw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: system=PW;Path=/;Max-Age=86400;
caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
traffic_target=reseller;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c83d39f350161ed2f5d20dcd68e47c92
2695a888e652cb314f8094cc6073c3364336d272
62e5cc6aea61c3c32acd964d4bbe143806416008181eebc4451a8f035b69a0bc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62E5CC6AEA61C3C32ACD964D4BBE143806416008181EEBC4451A8F035B69A0BC"
Last-Modified: Mon, 27 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12385
Expires: Mon, 27 Mar 2023 15:04:42 GMT
Date: Mon, 27 Mar 2023 11:38:17 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19219
Expires: Mon, 27 Mar 2023 16:58:36 GMT
Date: Mon, 27 Mar 2023 11:38:17 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 27 Mar 2023 11:15:42 GMT
content-type: application/json
age: 1355
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5ad3eec59bebbf969f175627757507c1
b176af3a70db378c9e1f219bab24d9d446070d6f
704fa284035b4c9aa487331b516f5f11c324e204756ae2503bad2606ed34f25e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "704FA284035B4C9AA487331B516F5F11C324E204756AE2503BAD2606ED34F25E"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11096
Expires: Mon, 27 Mar 2023 14:43:13 GMT
Date: Mon, 27 Mar 2023 11:38:17 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: kIGcfCgFcAAR2xIqT7b1+OUIHiqrvcy8D9aHu/1flAgOI7+XMq9XVhwJlNFb3JtWp4mWnT6mU2FgvwL7A6q6FQ==
x-amz-request-id: DMKBX8HRS9C68CD4
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 27 Mar 2023 10:55:45 GMT
age: 2552
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

img1.wsimg.com/parking-lander/static/js/1.3fa140ef.chunk.js

95.101.10.131

200 OK

57 kB

URL HTTP/2
img1.wsimg.com/parking-lander/static/js/1.3fa140ef.chunk.js
IP
95.101.10.131:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (65536), with no line terminators
Size
57 kB (57353 bytes)
Hash
b1a9331d6c0e8a1b66863c6ca8477641
90dfe8b3d4571613ed3e04e53d2503d58684dc03
d21e9a17b3f1a8d15dff4aee534040b740009c16ef74c4185eb151ca52ba1c66

HTTP Headers

GET /parking-lander/static/js/1.3fa140ef.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hf6fhayhvhjfc.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: HW0NHA3Albod6oFCRnw2R42BhD1x+OewPFFE7QMmup1HaYjfgVsTJtbd4VgddMdlqCfwsn5eH/jSfMC4T/NyNw==
x-amz-request-id: KYVREEGDGP4XS8VQ
last-modified: Tue, 14 Feb 2023 15:44:40 GMT
etag: "06166eb9b942e7c63d8ee1eba5b3de68"
x-amz-server-side-encryption: AES256
x-amz-version-id: Qm3JNw36qGFoIyTVwvXuxJRglKzwn3oO
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 57353
cache-control: max-age=31536000
expires: Tue, 26 Mar 2024 11:38:17 GMT
date: Mon, 27 Mar 2023 11:38:17 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 11:38:17 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
aacadb94b44e557195c202f9eac3d422
ae45e0a668927354b659a0050ec4f37421acfc12
e3efec2ec99be9c753808134094e95ea88d59e2898a180327a5a0818050a3859

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:38:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

img1.wsimg.com/parking-lander/static/js/0.40743286.chunk.js

95.101.10.131

200 OK

140 kB

URL HTTP/2
img1.wsimg.com/parking-lander/static/js/0.40743286.chunk.js
IP
95.101.10.131:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (65462)
Size
140 kB (139862 bytes)
Hash
86e3cfb33222003b0db28f9a3dd97c0b
be2be171a4e55332472ee32fd73f5a1b5dcb952f
24f9d9e26c29c25042fe573f938d08afd365f83a1f5e32853c26d2f72df65411

HTTP Headers

GET /parking-lander/static/js/0.40743286.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hf6fhayhvhjfc.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: Yjp2p5icxHsMOxSknZnibrWHAIi8aWv8v3sWFfa3zMa2WGtY4YthIzDk/XN1vRuZ2P5UiteClEM=
x-amz-request-id: KYVS66V07FS8XKWK
last-modified: Tue, 14 Feb 2023 15:44:39 GMT
etag: "b068012e619429e22f89192c5175a1e0"
x-amz-server-side-encryption: AES256
x-amz-version-id: gYg2nrvw6dt8CWezF3ZJ_Af3PN3NBmJj
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 139862
cache-control: max-age=31536000
expires: Tue, 26 Mar 2024 11:38:17 GMT
date: Mon, 27 Mar 2023 11:38:17 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

img1.wsimg.com/parking-lander/static/js/main.727544c3.chunk.js

95.101.10.131

200 OK

1.8 kB

URL HTTP/2
img1.wsimg.com/parking-lander/static/js/main.727544c3.chunk.js
IP
95.101.10.131:0
ASN
#20940 Akamai International B.V.

File type
ASCII text, with very long lines (4918)
Size
1.8 kB (1827 bytes)
Hash
4765833f8aa1de1e75804851ab0449f3
b56fc269f045d73338c8dd55f638aa633de28e7d
c42908523310021f78e7a1c65746224723cda12e89730b0efeb24430b84dac1c

HTTP Headers

GET /parking-lander/static/js/main.727544c3.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hf6fhayhvhjfc.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: gHF1Yvo8/cxTyoQC84dmlVS5mf9KoU9UOio8fKGM04b6tT3hHeepKPJbI0nnYbEqKsKoE1CDzJI=
x-amz-request-id: KYVXY6SA6XMQKW2X
last-modified: Tue, 14 Feb 2023 15:44:39 GMT
etag: "5fdf5d5d4c43969c55a42e692b95b2c9"
x-amz-server-side-encryption: AES256
x-amz-version-id: K0T3Ca3fAhPnHOiGo0Ai9_inM.KjDWrk
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 1827
cache-control: max-age=31536000
expires: Tue, 26 Mar 2024 11:38:17 GMT
date: Mon, 27 Mar 2023 11:38:17 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

hf6fhayhvhjfc.xyz/px.js?ch=1&abp=1

34.98.99.30

200 OK

476 B

URL HTTP/1.1
hf6fhayhvhjfc.xyz/px.js?ch=1&abp=1
IP
34.98.99.30:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
476 B (476 bytes)
Hash
d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /px.js?ch=1&abp=1 HTTP/1.1
Host: hf6fhayhvhjfc.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hf6fhayhvhjfc.xyz/
Cookie: system=PW; caf_ipaddr=91.90.42.154; country=NO; city=""; traffic_target=reseller

HTTP/1.1 200 OK
Server: openresty
Date: Mon, 27 Mar 2023 11:38:17 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Mon, 27 Mar 2023 03:36:20 GMT
ETag: "64210f34-1dc"
Accept-Ranges: bytes
Via: 1.1 google

hf6fhayhvhjfc.xyz/px.js?ch=2&abp=1

34.98.99.30

200 OK

476 B

URL HTTP/1.1
hf6fhayhvhjfc.xyz/px.js?ch=2&abp=1
IP
34.98.99.30:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
476 B (476 bytes)
Hash
d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /px.js?ch=2&abp=1 HTTP/1.1
Host: hf6fhayhvhjfc.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://hf6fhayhvhjfc.xyz/
Cookie: system=PW; caf_ipaddr=91.90.42.154; country=NO; city=""; traffic_target=reseller

HTTP/1.1 200 OK
Server: openresty
Date: Mon, 27 Mar 2023 11:38:17 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Mon, 27 Mar 2023 03:36:20 GMT
ETag: "64210f34-1dc"
Accept-Ranges: bytes
Via: 1.1 google

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:38:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 27 Mar 2023 11:17:24 GMT
age: 1253
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.godaddy.com/

192.124.249.23

200 OK

1.8 kB

URL HTTP/1.1
ocsp.godaddy.com/
IP
192.124.249.23:0
ASN
#30148 SUCURI-SEC

File type
data
Size
1.8 kB (1778 bytes)
Hash
f8865500035f854169eaf61aa112fe85
cc106624f62816f005ee27e560c0ae8f8ab105f4
3f29994a2c731d960f7d0adef86b0ad8271981bf1466e0879dbb3a7b76bef2ce

HTTP Headers

POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 11:38:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 20:39:31 GMT
Expires: Mon, 27 Mar 2023 20:39:31 GMT
ETag: "cc106624f62816f005ee27e560c0ae8f8ab105f4"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

ocsp.godaddy.com/

192.124.249.23

200 OK

1.8 kB

URL HTTP/1.1
ocsp.godaddy.com/
IP
192.124.249.23:0
ASN
#30148 SUCURI-SEC

File type
data
Size
1.8 kB (1778 bytes)
Hash
f8865500035f854169eaf61aa112fe85
cc106624f62816f005ee27e560c0ae8f8ab105f4
3f29994a2c731d960f7d0adef86b0ad8271981bf1466e0879dbb3a7b76bef2ce

HTTP Headers

POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 11:38:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 20:39:31 GMT
Expires: Mon, 27 Mar 2023 20:39:31 GMT
ETag: "cc106624f62816f005ee27e560c0ae8f8ab105f4"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

api.aws.parking.godaddy.com/v1/parking/landers/hf6fhayhvhjfc.xyz?trafficTarget=reseller&abp=1

18.235.167.98

200 OK

0 B

URL HTTP/2
api.aws.parking.godaddy.com/v1/parking/landers/hf6fhayhvhjfc.xyz?trafficTarget=reseller&abp=1
IP
18.235.167.98:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /v1/parking/landers/hf6fhayhvhjfc.xyz?trafficTarget=reseller&abp=1 HTTP/1.1
Host: api.aws.parking.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-request-id
Referer: http://hf6fhayhvhjfc.xyz/
Origin: http://hf6fhayhvhjfc.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:38:18 GMT
content-length: 0
set-cookie: AWSALB=iRZ0eBlUX281NJxTtG0V6WyIe75wwAJl060+hY5LllVnT3cwtSDrjBf/aNpQeRedXezHZwZbI68C/aRLlF/HqAbFNsaeWs5FU/d9CVMh//7KnmGpO+ec+3lnwaTn; Expires=Mon, 03 Apr 2023 11:38:18 GMT; Path=/
AWSALBCORS=iRZ0eBlUX281NJxTtG0V6WyIe75wwAJl060+hY5LllVnT3cwtSDrjBf/aNpQeRedXezHZwZbI68C/aRLlF/HqAbFNsaeWs5FU/d9CVMh//7KnmGpO+ec+3lnwaTn; Expires=Mon, 03 Apr 2023 11:38:18 GMT; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
access-control-allow-headers: X-Request-Id
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: http://hf6fhayhvhjfc.xyz
access-control-max-age: 600
x-request-id: oRRoptRL
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
da5340ee69a1000f751686df9e716663
a5da880a61ed119790a7990bbdcc0c97eecf04f2
d1ff10bfe40f290935abe1feeb975a6af8cf310f9ce9d45bbf482a604da73560

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1FF10BFE40F290935ABE1FEEB975A6AF8CF310F9CE9D45BBF482A604DA73560"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3063
Expires: Mon, 27 Mar 2023 12:29:21 GMT
Date: Mon, 27 Mar 2023 11:38:18 GMT
Connection: keep-alive

api.aws.parking.godaddy.com/v1/parking/landers/hf6fhayhvhjfc.xyz?trafficTarget=reseller&abp=1

18.235.167.98

200 OK

844 B

URL HTTP/2
api.aws.parking.godaddy.com/v1/parking/landers/hf6fhayhvhjfc.xyz?trafficTarget=reseller&abp=1
IP
18.235.167.98:0
ASN
#14618 AMAZON-AES

File type
JSON data\012- , ASCII text, with very long lines (843)
Size
844 B (844 bytes)
Hash
7f12ea06061baf08439d90338eeecb69
8155087d364a55fbfce1e0fa6a1797c21e278f6c
0f4b53347dbea0020d2324cc4a143dacac5820af7d289b2b23cec261b966d4f6

HTTP Headers

GET /v1/parking/landers/hf6fhayhvhjfc.xyz?trafficTarget=reseller&abp=1 HTTP/1.1
Host: api.aws.parking.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://hf6fhayhvhjfc.xyz/
X-Request-Id: 4188bc17-a2e1-4ca0-926b-7527727a8512
Origin: http://hf6fhayhvhjfc.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:38:18 GMT
content-type: application/json
content-length: 844
set-cookie: AWSALB=BOzPtxbm58R+uKkTkrzCQiqmwR+vEA5FcUthT5iTzOlPKhoKrXi3SE7q4KWOyryyjqwK0GiI5i8EkKyDmkJOb8FIJhaeI4/1uh0aTEKtlvUxQkPkKW1bteI4c0L+; Expires=Mon, 03 Apr 2023 11:38:18 GMT; Path=/
AWSALBCORS=BOzPtxbm58R+uKkTkrzCQiqmwR+vEA5FcUthT5iTzOlPKhoKrXi3SE7q4KWOyryyjqwK0GiI5i8EkKyDmkJOb8FIJhaeI4/1uh0aTEKtlvUxQkPkKW1bteI4c0L+; Expires=Mon, 03 Apr 2023 11:38:18 GMT; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
access-control-allow-origin: http://hf6fhayhvhjfc.xyz
access-control-max-age: 600
x-request-id: 4188bc17-a2e1-4ca0-926b-7527727a8512
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
39df75474d1984e41a4417313d866284
750f7332130526dd381a4590224a0c2d98b22af4
eae5bca0ec792b76ccc026ba8eec1c0852c5405552304eff9e749083650535cd

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:38:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

partner.googleadservices.com/gampad/cookie.js?domain=hf6fhayhvhjfc.xyz&client=dp-godaddy1_xml&product=SAS&callback=__sasCookie

172.217.21.162

200 OK

246 B

URL HTTP/2
partner.googleadservices.com/gampad/cookie.js?domain=hf6fhayhvhjfc.xyz&client=dp-godaddy1_xml&product=SAS&callback=__sasCookie
IP
172.217.21.162:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (374), with no line terminators
Size
246 B (246 bytes)
Hash
076ae6c7e05182dbee521ea8d4eb1b51
edf8a48db003bf9bbcd1a5a42825979880800669
a2e47b2d8adda98f781132ddacf75f67b46e48f46e77a026106640a668e2b3dd

HTTP Headers

GET /gampad/cookie.js?domain=hf6fhayhvhjfc.xyz&client=dp-godaddy1_xml&product=SAS&callback=__sasCookie HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://hf6fhayhvhjfc.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 27 Mar 2023 11:38:18 GMT
server: cafe
cache-control: private
content-length: 246
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
39df75474d1984e41a4417313d866284
750f7332130526dd381a4590224a0c2d98b22af4
eae5bca0ec792b76ccc026ba8eec1c0852c5405552304eff9e749083650535cd

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:38:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

44.230.4.151

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.230.4.151:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4W83/QNvAVzUjG9QHCYwwQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /xDmJWRuyVD9ra5f+fsc+roGeA8=

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
474a5d47cc23e28fea70e3d32fe95427
db4e4a58803bea6ecdaf992a4fc73d90ddd4c375
831b3e8febf102b90cf79251960c1ea2f436e39dd5d5ca71facde10f67a19dd7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:38:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

216.58.207.193

200 OK

174 B

URL HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size
174 B (174 bytes)
Hash
4de8b85c8915995b571bde50e231be7c
29c226ca7b9cbe1d44e5480ce95bbb42727b2d99
2ec9168c4507546748c5f400f5030031f0eb06f2aed8deaa11362c395bff4f7a

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 27 Mar 2023 09:43:12 GMT
expires: Tue, 28 Mar 2023 08:43:12 GMT
cache-control: public, max-age=82800
age: 6906
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
474a5d47cc23e28fea70e3d32fe95427
db4e4a58803bea6ecdaf992a4fc73d90ddd4c375
831b3e8febf102b90cf79251960c1ea2f436e39dd5d5ca71facde10f67a19dd7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:38:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2

216.58.207.193

200 OK

272 B

URL HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size
272 B (272 bytes)
Hash
bbbac37f0b6e29a6099e4aa7cb19d6ca
0acafe95e2141f0af6109203efeb2d98e6b926c6
a3d7b37475de5a3a350d4dc4790f14a6a5f4045726d2eae4cbe9bd59aeba2fe2

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sun, 26 Mar 2023 14:05:27 GMT
expires: Mon, 27 Mar 2023 13:05:27 GMT
cache-control: public, max-age=82800
age: 77571
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

api.aws.parking.godaddy.com/v1/parkingEvents?abp=1

18.235.167.98

200 OK

0 B

URL HTTP/2
api.aws.parking.godaddy.com/v1/parkingEvents?abp=1
IP
18.235.167.98:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /v1/parkingEvents?abp=1 HTTP/1.1
Host: api.aws.parking.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://hf6fhayhvhjfc.xyz/
Origin: http://hf6fhayhvhjfc.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:38:18 GMT
content-type: text/plain
content-length: 0
set-cookie: AWSALB=4R6kZXE8GWPTfbSR7uH2e0rC20qtP9MBPEpXmNBPm1mZVwTWY16cmIjLTcU9fCmPUdXRGbIpnPwQMrQ4K2w/rCPp3ZBCYK/VOri9hS4Dn89BSHTaIdR371NjgLBq; Expires=Mon, 03 Apr 2023 11:38:18 GMT; Path=/
AWSALBCORS=4R6kZXE8GWPTfbSR7uH2e0rC20qtP9MBPEpXmNBPm1mZVwTWY16cmIjLTcU9fCmPUdXRGbIpnPwQMrQ4K2w/rCPp3ZBCYK/VOri9hS4Dn89BSHTaIdR371NjgLBq; Expires=Mon, 03 Apr 2023 11:38:18 GMT; Path=/; SameSite=None; Secure
access-control-allow-methods: POST
access-control-allow-headers: content-type
access-control-allow-origin: *
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
474a5d47cc23e28fea70e3d32fe95427
db4e4a58803bea6ecdaf992a4fc73d90ddd4c375
831b3e8febf102b90cf79251960c1ea2f436e39dd5d5ca71facde10f67a19dd7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 11:38:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

api.aws.parking.godaddy.com/v1/parkingEvents?abp=1

18.235.167.98

200 OK

0 B

URL HTTP/2
api.aws.parking.godaddy.com/v1/parkingEvents?abp=1
IP
18.235.167.98:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /v1/parkingEvents?abp=1 HTTP/1.1
Host: api.aws.parking.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://hf6fhayhvhjfc.xyz/
Content-Type: application/json
Origin: http://hf6fhayhvhjfc.xyz
Content-Length: 704
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 27 Mar 2023 11:38:18 GMT
content-type: text/plain
content-length: 0
set-cookie: AWSALB=Ug12DZF9pvN+SGnuRGWBoSGNv6CrDpx+fm9oelQ8Vg3Tv1EKYcPGK7NICyk6Ugbbze5h6WNJaVMNVFN6W6T3unm5/QBlEDiPrtASkxRc5qxpvZAsO+EeQZwizm9X; Expires=Mon, 03 Apr 2023 11:38:18 GMT; Path=/
AWSALBCORS=Ug12DZF9pvN+SGnuRGWBoSGNv6CrDpx+fm9oelQ8Vg3Tv1EKYcPGK7NICyk6Ugbbze5h6WNJaVMNVFN6W6T3unm5/QBlEDiPrtASkxRc5qxpvZAsO+EeQZwizm9X; Expires=Mon, 03 Apr 2023 11:38:18 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: *
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL