Report - ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a

Report Overview

Submitted URL
ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a
IP
64.190.63.136
ASN
#47846 SEDO GmbH
Submitted
2024-04-17 23:53:30
Access
public
Website Title
galyqaz.com - Dette nettstedet er til salgs! - galyqaz Ressurser og informasjon
Final URL
ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ww3.galyqaz.com	unknown	2011-08-08	2023-09-21	2024-04-17	1.1 kB	8.7 kB	64.190.63.136
img.sedoparking.com	54200	2001-09-18	2013-04-23	2024-04-17	896 B	29 kB	205.234.175.175
syndicatedsearch.goog	unknown	2023-04-14	2023-09-25	2024-04-17	4.8 kB	8.1 kB	216.58.207.206
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2024-04-17	977 B	2.1 kB	142.250.74.97
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	411 B	159 kB	142.250.74.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	galyqaz.com	Sinkholed
2024-04-17	medium	galyqaz.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a	3.2 kB	2024-04-18	2024-04-18
Pretty URL ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a IP 64.190.63.136 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 01:53:30 Last Seen2024-04-18 01:53:30 Times Seen1 Hash cba46eaa4a5fce3e306e6e57f02c6e11 d5d084ae10d61119c31ca4af2c01dbf5df0a1f9b 14ca19750c3eabfc242f8597496dae89f0d067bf61ddc6f8379e379130b65c27 Loading...

	www.google.com/adsense/domains/caf.js	191 kB	2024-04-15	2024-04-18
Pretty URL www.google.com/adsense/domains/caf.js IP 142.250.74.164 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-15 22:07:14 Last Seen2024-04-18 15:50:30 Times Seen101 Hash b3392f1ceb5b4390e2513062f96c6f64 fcf8bb53156d0042957386fa4c3986e430fa6405 f10e8318b21c5d1ac38f2b83f35cdcd6448f228fc6b89113bc9d093648ee20f1 Loading...

	ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a	622 B	2023-03-07	2024-05-01
Pretty URL ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a IP 64.190.63.136 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:10:36 Last Seen2024-05-01 00:38:33 Times Seen7175 Hash 4ddc86a1d8ae00753cc792ab72a58071 b405fd8562e0d0582f25f4b7ac6d180d72e0e935 4a5f92285fc4b884f74fbf249d3c256136ae5f4c387ba90230f0f357322a6d8d Loading...

	ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a	5.5 kB	2024-01-10	2024-05-01
Pretty URL ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a IP 64.190.63.136 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-10 16:33:42 Last Seen2024-05-01 00:38:33 Times Seen6785 Hash 8dea1c8dd04f9474489541bca012175b ada487edd0cde69a3b8dc8fc0d15a393ac865e65 f1b4243e2948e50bd1024644673f303d9e5a14873f86ae05fd3e27b55009ddb1 Loading...

	syndicatedsearch.goog/afs/ads/i/iframe.html	1.3 kB	2023-04-05	2024-05-01
Pretty URL syndicatedsearch.goog/afs/ads/i/iframe.html IP 216.58.207.206 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:36:39 Last Seen2024-05-01 00:38:33 Times Seen23006 Hash 33839cb72649c81ab58b763c95b4a163 0c9b62881e660fded013cee58439ae287690065a cdded269406c9b2b49a3066d12e75913abf338cdd7fa00e31fff299efef1cb76 Loading...

	syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=9330244380&channel=%2Cexp-0051%2Cauxa-control-1%2C12519653&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww3.galyqaz.com%2Fcaf%2F%3Fses%3DY3JlPTE3MTMzOTc5ODUmdGNpZD13dzMuZ2FseXFhei5jb202NjIwNjBlMWIxMGU0OC42Mjc3ODg4MSZ0YXNrPXNlYXJjaCZkb21haW49Z2FseXFhei5jb20mYV9pZD0zJnNlc3Npb249N3ZEVl9pNzU4RkZyUlh2WUlNZ3g%3D&type=3&uiopt=false&swp=as-drid-2356511220483999&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301447%2C17301454%2C17301466%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=1431713397986440&num=0&output=afd_ads&domain_name=ww3.galyqaz.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713397986450&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=999&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fww3.galyqaz.com%2Flogin.php%3Fsub1%3D20240418-0804-03de-a544-9033b7a9840a	849 B	2024-04-18	2024-04-18
Pretty URL syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=9330244380&channel=%2Cexp-0051%2Cauxa-control-1%2C12519653&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww3.galyqaz.com%2Fcaf%2F%3Fses%3DY3JlPTE3MTMzOTc5ODUmdGNpZD13dzMuZ2FseXFhei5jb202NjIwNjBlMWIxMGU0OC42Mjc3ODg4MSZ0YXNrPXNlYXJjaCZkb21haW49Z2FseXFhei5jb20mYV9pZD0zJnNlc3Npb249N3ZEVl9pNzU4RkZyUlh2WUlNZ3g%3D&type=3&uiopt=false&swp=as-drid-2356511220483999&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301447%2C17301454%2C17301466%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=1431713397986440&num=0&output=afd_ads&domain_name=ww3.galyqaz.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713397986450&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=999&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fww3.galyqaz.com%2Flogin.php%3Fsub1%3D20240418-0804-03de-a544-9033b7a9840a IP 216.58.207.206 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 01:53:30 Last Seen2024-04-18 01:53:30 Times Seen1 Hash 26f68f508f5e3f930807c7f4e0dee676 51cb3e3fd71e0d1aec503517f60e3ff604164105 e88cdb7d1063e8c360ea5dc53dfb5b24940db4db042cfb86043875abfe10ff0a Loading...

	syndicatedsearch.goog/adsense/domains/caf.js	191 kB	2024-04-18	2024-04-18
Pretty URL syndicatedsearch.goog/adsense/domains/caf.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 01:53:30 Last Seen2024-04-18 13:25:37 Times Seen4 Hash 74192bf60b617e50f023a890c9858687 9411d7a3cbd4f2e29b7e2531c191c54722d56f5f 96716ac22206f3d6eddcb4bfc336407c995aa2e96baea1c0b9ee1ab3ada81024 Loading...

HTTP Transactions (13)

URL IP Response Size

ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a

64.190.63.136

7.8 kB

URL
ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a
IP
64.190.63.136:0
ASN
#47846 SEDO GmbH

File type
gzip compressed data, from Unix
Size
7.8 kB (7835 bytes)
Hash
ed11ee38dad5bc7ca9935a31a3ff1d44
7f31ad98ccf5a89bb8f71621fd0a3b83f271a7a2
be005275939bd17121ee3bcc72b16a1fa6f69bfe3db02b39f8aad31333064921

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.php?sub1=20240418-0804-03de-a544-9033b7a9840a HTTP/1.1
Host: ww3.galyqaz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:53:05 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 17 Apr 2024 23:53:05 GMT
pragma: no-cache
server: NginX
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_nybk+q/7lNod9X+8jrX6bVib5aB+EnGrxp/lqvgrGWR78q5OShGmmd70g8IpRTD/WinDQPLLVtA0ZaDTfqNzkw==
x-cache-miss-from: parking-d5776bf9c-f7mzl
x-powered-by: PHP/8.1.17
X-Firefox-Spdy: h2

img.sedoparking.com/templates/bg/arrows.png

205.234.175.175

13 kB

URL
img.sedoparking.com/templates/bg/arrows.png
IP
205.234.175.175:0
ASN
#30081 CACHENETWORKS

File type
PNG image data, 426 x 475, 8-bit/color RGBA, non-interlaced
Size
13 kB (12642 bytes)
Hash
6dc0bad9aa452ff871b282dabd47131e
01411e6726e033240caa3926141a6adbc18a2d73
3059fbd6cd3550047483dca4071c93e5cf4cc79ce8bafc4388166fbc5279644b

HTTP Headers

GET /templates/bg/arrows.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 23:53:06 GMT
content-type: image/png
content-length: 12642
access-control-allow-origin: *
cache-control: max-age=604800
expires: Wed, 24 Apr 2024 23:53:06 GMT
x-cfhash: "6dc0bad9aa452ff871b282dabd47131e"
x-cff: B
last-modified: Mon, 11 Oct 2021 05:39:44 GMT
x-cf3: H
cf4age: 125042
x-cf-tsc: 1711246615
cf4ttl: 31410958.000
x-cf2: H
server: CFS 1124
x-cf-reqid: 7a0ffeec586062af66c2c9efd206bba7
x-cf1: 11696:fC.arn1:cf:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2

syndicatedsearch.goog/afs/ads/i/iframe.html

216.58.207.206

728 B

URL
syndicatedsearch.goog/afs/ads/i/iframe.html
IP
216.58.207.206:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (1559)
Size
728 B (728 bytes)
Hash
527e0bca617eb59b3cfcc7100a550a2e
8cf6c17a285a981dd6701bad982b64f599db6052
714e09a566ec4b035fe46d75b46cf7b35bcda6a2b95d20236103aee50e1c7149

HTTP Headers

GET /afs/ads/i/iframe.html HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
content-security-policy: script-src 'nonce-yVpDrN9wIYoi7huu2S5cMQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 728
date: Wed, 17 Apr 2024 23:53:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Tue, 12 Mar 2024 06:00:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ww3.galyqaz.com/search/tsc.php?200=NTM0NjM4MjA1&21=OTEuOTAuNDIuMTU0&681=MTcxMzM5Nzk4NWQyNThiODAxYmFlM2U0M2ZjMWY5NjcxMmYxNTM5OGE0&crc=07992bedbab98f170555cef10330e5da2515521b&cv=1

64.190.63.136

0 B

URL
ww3.galyqaz.com/search/tsc.php?200=NTM0NjM4MjA1&21=OTEuOTAuNDIuMTU0&681=MTcxMzM5Nzk4NWQyNThiODAxYmFlM2U0M2ZjMWY5NjcxMmYxNTM5OGE0&crc=07992bedbab98f170555cef10330e5da2515521b&cv=1
IP
64.190.63.136:0
ASN
#47846 SEDO GmbH

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /search/tsc.php?200=NTM0NjM4MjA1&21=OTEuOTAuNDIuMTU0&681=MTcxMzM5Nzk4NWQyNThiODAxYmFlM2U0M2ZjMWY5NjcxMmYxNTM5OGE0&crc=07992bedbab98f170555cef10330e5da2515521b&cv=1 HTTP/1.1
Host: ww3.galyqaz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 23:53:06 GMT
server: NginX
x-cache-miss-from: parking-d5776bf9c-sqjzl
x-powered-by: PHP/8.1.17
content-length: 0
X-Firefox-Spdy: h2

img.sedoparking.com/templates/logos/sedo_logo.png

205.234.175.175

15 kB

URL
img.sedoparking.com/templates/logos/sedo_logo.png
IP
205.234.175.175:0
ASN
#30081 CACHENETWORKS

File type
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15086 bytes)
Hash
def00c11b1596db4efee6a9fbe64fc27
bd298981e6d8d7e4ffa18abcf687041f4246672d
95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4

HTTP Headers

GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 23:53:06 GMT
content-type: image/png
content-length: 15086
access-control-allow-origin: *
cache-control: max-age=604800
expires: Wed, 24 Apr 2024 23:53:06 GMT
x-cfhash: "def00c11b1596db4efee6a9fbe64fc27"
x-cff: B
last-modified: Mon, 11 Jan 2021 07:44:34 GMT
x-cf3: H
cf4age: 0
x-cf-tsc: 1711123359
cf4ttl: 31536000.000
x-cf2: H
server: CFS 1124
x-cf-reqid: 67f40db3805ea26266bba44dc5909b9f
x-cf1: 11696:fC.arn1:cf:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2

syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=9330244380&channel=%2Cexp-0051%2Cauxa-control-1%2C12519653&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww3.galyqaz.com%2Fcaf%2F%3Fses%3DY3JlPTE3MTMzOTc5ODUmdGNpZD13dzMuZ2FseXFhei5jb202NjIwNjBlMWIxMGU0OC42Mjc3ODg4MSZ0YXNrPXNlYXJjaCZkb21haW49Z2FseXFhei5jb20mYV9pZD0zJnNlc3Npb249N3ZEVl9pNzU4RkZyUlh2WUlNZ3g%3D&type=3&uiopt=false&swp=as-drid-2356511220483999&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301447%2C17301454%2C17301466%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=1431713397986440&num=0&output=afd_ads&domain_name=ww3.galyqaz.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713397986450&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=999&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fww3.galyqaz.com%2Flogin.php%3Fsub1%3D20240418-0804-03de-a544-9033b7a9840a

216.58.207.206

2.9 kB

URL
syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=9330244380&channel=%2Cexp-0051%2Cauxa-control-1%2C12519653&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww3.galyqaz.com%2Fcaf%2F%3Fses%3DY3JlPTE3MTMzOTc5ODUmdGNpZD13dzMuZ2FseXFhei5jb202NjIwNjBlMWIxMGU0OC42Mjc3ODg4MSZ0YXNrPXNlYXJjaCZkb21haW49Z2FseXFhei5jb20mYV9pZD0zJnNlc3Npb249N3ZEVl9pNzU4RkZyUlh2WUlNZ3g%3D&type=3&uiopt=false&swp=as-drid-2356511220483999&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301447%2C17301454%2C17301466%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=1431713397986440&num=0&output=afd_ads&domain_name=ww3.galyqaz.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713397986450&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=999&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fww3.galyqaz.com%2Flogin.php%3Fsub1%3D20240418-0804-03de-a544-9033b7a9840a
IP
216.58.207.206:0
ASN
#15169 GOOGLE

File type
HTML document, Unicode text, UTF-8 text, with very long lines (13625)
Size
2.9 kB (2858 bytes)
Hash
8c4ced999c119194156fab154f606325
84a0625f44de0d36bcd6567a57679fabb3dcb43e
080417530c13d89a4a80914f3dc27c6237705a2827b362c96579f96eb8b5396c

HTTP Headers

GET /afs/ads?adsafe=low&adtest=off&psid=9330244380&channel=%2Cexp-0051%2Cauxa-control-1%2C12519653&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww3.galyqaz.com%2Fcaf%2F%3Fses%3DY3JlPTE3MTMzOTc5ODUmdGNpZD13dzMuZ2FseXFhei5jb202NjIwNjBlMWIxMGU0OC42Mjc3ODg4MSZ0YXNrPXNlYXJjaCZkb21haW49Z2FseXFhei5jb20mYV9pZD0zJnNlc3Npb249N3ZEVl9pNzU4RkZyUlh2WUlNZ3g%3D&type=3&uiopt=false&swp=as-drid-2356511220483999&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301447%2C17301454%2C17301466%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=1431713397986440&num=0&output=afd_ads&domain_name=ww3.galyqaz.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713397986450&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=999&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fww3.galyqaz.com%2Flogin.php%3Fsub1%3D20240418-0804-03de-a544-9033b7a9840a HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Wed, 17 Apr 2024 23:53:06 GMT
expires: Wed, 17 Apr 2024 23:53:06 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Jrl7RzNWlQGsH7tT2EhB4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2858
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

142.250.74.97

174 B

URL
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
142.250.74.97:0
ASN
#15169 GOOGLE

File type
SVG Scalable Vector Graphics image
Size
174 B (174 bytes)
Hash
11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 08:37:12 GMT
expires: Thu, 18 Apr 2024 07:37:12 GMT
cache-control: public, max-age=82800
age: 54954
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2

142.250.74.97

273 B

URL
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2
IP
142.250.74.97:0
ASN
#15169 GOOGLE

File type
SVG Scalable Vector Graphics image
Size
273 B (273 bytes)
Hash
6751e07e0f93bd43ab90822f4b2eb62a
d1d0c6f0b4697b0a4e61ffbf171e8c60eac7c832
ff563f41765da081fe9fd40e8bb33a623df033b10050a8ae8c1b46e15107d8f1

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 273
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 21:59:13 GMT
expires: Thu, 18 Apr 2024 20:59:13 GMT
cache-control: public, max-age=82800
age: 6833
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=7v5gaed96w0n&aqid=4mAgZpijIuKyiM0PyqOQyAo&pbt=bs&adbx=490&adby=807.6500244140625&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=8%7C0%7C252%7C104%7C50&lle=0&ifv=1&hpt=0

216.58.207.206

0 B

URL
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=7v5gaed96w0n&aqid=4mAgZpijIuKyiM0PyqOQyAo&pbt=bs&adbx=490&adby=807.6500244140625&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=8%7C0%7C252%7C104%7C50&lle=0&ifv=1&hpt=0
IP
216.58.207.206:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=7v5gaed96w0n&aqid=4mAgZpijIuKyiM0PyqOQyAo&pbt=bs&adbx=490&adby=807.6500244140625&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=8%7C0%7C252%7C104%7C50&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-YL9fCsQ6Z_2eAacRLh3-7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 17 Apr 2024 23:53:08 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=c0lcwq2z4l8i&aqid=4mAgZpijIuKyiM0PyqOQyAo&psid=9330244380&pbt=bs&adbx=406.66668701171875&adby=134.64999389648438&adbh=554&adbw=467&adbah=178%2C178%2C178&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=32%7C0%7C228%7C104%7C50&lle=0&ifv=1&hpt=0

216.58.207.206

204 No Content

0 B

URL GET HTTP/3
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=c0lcwq2z4l8i&aqid=4mAgZpijIuKyiM0PyqOQyAo&psid=9330244380&pbt=bs&adbx=406.66668701171875&adby=134.64999389648438&adbh=554&adbw=467&adbah=178%2C178%2C178&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=32%7C0%7C228%7C104%7C50&lle=0&ifv=1&hpt=0
IP
216.58.207.206:443
ASN
#15169 GOOGLE

Requested by
https://ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a
Certificate
IssuerGoogle Trust Services LLC
Subjectsyndicatedsearch.goog
Fingerprint11:F3:4F:46:25:BD:42:30:18:9B:BA:23:35:18:C2:17:F8:9E:52:98
ValidityMon, 04 Mar 2024 07:27:32 GMT - Mon, 27 May 2024 07:27:31 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=c0lcwq2z4l8i&aqid=4mAgZpijIuKyiM0PyqOQyAo&psid=9330244380&pbt=bs&adbx=406.66668701171875&adby=134.64999389648438&adbh=554&adbw=467&adbah=178%2C178%2C178&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=32%7C0%7C228%7C104%7C50&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-zoDUSknUHQOo91E-v4k3IA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 17 Apr 2024 23:53:08 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=jcjd6bq0nmy9&aqid=4mAgZpijIuKyiM0PyqOQyAo&psid=9330244380&pbt=bv&adbx=406.66668701171875&adby=134.64999389648438&adbh=554&adbw=467&adbah=178%2C178%2C178&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=32%7C0%7C228%7C104%7C50&lle=0&ifv=1&hpt=0

216.58.207.206

204 No Content

0 B

URL GET HTTP/3
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=jcjd6bq0nmy9&aqid=4mAgZpijIuKyiM0PyqOQyAo&psid=9330244380&pbt=bv&adbx=406.66668701171875&adby=134.64999389648438&adbh=554&adbw=467&adbah=178%2C178%2C178&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=32%7C0%7C228%7C104%7C50&lle=0&ifv=1&hpt=0
IP
216.58.207.206:443
ASN
#15169 GOOGLE

Requested by
https://ww3.galyqaz.com/login.php?sub1=20240418-0804-03de-a544-9033b7a9840a
Certificate
IssuerGoogle Trust Services LLC
Subjectsyndicatedsearch.goog
Fingerprint11:F3:4F:46:25:BD:42:30:18:9B:BA:23:35:18:C2:17:F8:9E:52:98
ValidityMon, 04 Mar 2024 07:27:32 GMT - Mon, 27 May 2024 07:27:31 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=jcjd6bq0nmy9&aqid=4mAgZpijIuKyiM0PyqOQyAo&psid=9330244380&pbt=bv&adbx=406.66668701171875&adby=134.64999389648438&adbh=554&adbw=467&adbah=178%2C178%2C178&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=32%7C0%7C228%7C104%7C50&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-4Yd83YMBIjaUyGG69AYpmg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 17 Apr 2024 23:53:08 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=u3uton29sisp&aqid=4mAgZpijIuKyiM0PyqOQyAo&pbt=bv&adbx=490&adby=807.6500244140625&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=8%7C0%7C252%7C104%7C50&lle=0&ifv=1&hpt=0

216.58.207.206

0 B

URL
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=u3uton29sisp&aqid=4mAgZpijIuKyiM0PyqOQyAo&pbt=bv&adbx=490&adby=807.6500244140625&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=8%7C0%7C252%7C104%7C50&lle=0&ifv=1&hpt=0
IP
216.58.207.206:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=u3uton29sisp&aqid=4mAgZpijIuKyiM0PyqOQyAo&pbt=bv&adbx=490&adby=807.6500244140625&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=623135625&csala=8%7C0%7C252%7C104%7C50&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-rgMDZzq9-cFNApcNMsHkiA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 17 Apr 2024 23:53:08 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/adsense/domains/caf.js

142.250.74.164

158 kB

URL
www.google.com/adsense/domains/caf.js
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type
gzip compressed data, max compression
Size
158 kB (158390 bytes)
Hash
5e830c196f302a79f6da3115fafd67fe
600d96d9848ceaf8a8a1ec643253c26b37afd371
bf1189a875fe53e75d175ed46258501ce89880d13f6055536a82dd13e14b7acc

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww3.galyqaz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Wed, 17 Apr 2024 23:53:06 GMT
expires: Wed, 17 Apr 2024 23:53:06 GMT
cache-control: private, max-age=3600
etag: "784717859970832342"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL

IP

ASN

File type