| www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true |  142.250.74.68 | 200 OK | 143 kB |
URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true IP142.250.74.68:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint84:BD:0D:9A:51:CC:86:3E:E9:2F:6E:7C:2D:58:AC:4C:FB:B5:3D:8C ValidityMon, 12 May 2025 08:44:44 GMT - Mon, 04 Aug 2025 08:44:43 GMT
File typeJavaScript source, ASCII text, with very long lines (1839) Size143 kB (142877 bytes) Hash807987e6b19c15307c301d5646a37d00 7364293bd263c7e3bc8d91ba0421e14fbf2bf90e 399350f108d4de5ff30a3fa3590ab4d6fabd30f927099b6016207df5637f7ce9
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 03 Jun 2025 16:53:07 GMT
expires: Tue, 03 Jun 2025 16:53:07 GMT
cache-control: private, max-age=3600
etag: "14314193756250997239"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| connect-advance.net/favicon.ico | 15.197.130.221 | 200 OK | 0 B |
URL GET connect-advance.net/favicon.ico IP15.197.130.221:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerLet's Encrypt Subjectconnect-advance.net Fingerprint1D:D4:A1:AB:D2:36:8A:17:6A:5F:1D:9F:B5:26:00:80:9E:39:8D:2A ValidityFri, 28 Mar 2025 23:51:37 GMT - Thu, 26 Jun 2025 23:51:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: connect-advance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/IPKO/auth/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50559"; ma=2592000
content-type: image/x-icon
date: Tue, 03 Jun 2025 16:53:06 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/ct |  3.248.162.96 | 200 OK | 3.4 kB |
URL POST obseu.astarsbuilding.com/ct IP3.248.162.96:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89 ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hashc29d187832983a56cba7a5f5849dc7ac cd2eb40799abe782e1bc091fc80a37c81fd83705 934f4f12925804db4e6d3f07a924c20a2d3771aa0664bbdd0d498d3e4785c034
POST /ct HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4455
Origin: https://connect-advance.net
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://connect-advance.net
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: application/json
date: Tue, 03 Jun 2025 16:53:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=a73f41dbb6f7cd42b08b11791087aa44; Max-Age=29030400; Path=/; Expires=Tue, 05 May 2026 16:53:07 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://connect-advance.net
content-length: 1134
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fconnect-advance.net%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.175rE7Z37X4TZi-YZH1jpLN_q2jzJu3fnzxxAOP4jpnLiW8r4GRMrg.skR85T70YtRNIVKeKuM5xA.XJLZ2k_ImSiZWOaSvLSbGWc4UT2kIPKrvkO3JsVCRKzneTmO2SkxQ7YGf2i9PoKQdNWu9-eN0-XdIJiqgYahFEIyKMhkjQFLHwDxd5-dC5vMgtUCqf9vTJLUQyDmTQyv6-i8QjKqS8dTLdQmzG5G6PRDU3FHalznR3A-HI_-VTPavHGGCVGXXV8KYgeSf8sUAeq5Is7LJEHi_Tb7ryqFYbkKPZzNwOOf_WobreDbfeoj0rfnNR8UUhviVETh6UcaY1xabPmpdDjiXCTUmoQPVVRmQKwF8uAxXAmWRmsSaXTYrxdFI7a-JbTog5IpBdEjtnWurGNNUkQTakoFpJIHs1q276gACAuXxNLn28pTAWuvtc4Bye0LpDaUurzLQ8nl1AyXEnuzyNIZk__2FwYlw0RGQoYtB5AOTelt4TekFoopCGpgIxLPSj2qpOu9mXNkR6Sb1Ij_uKE4_0XJn-_8r3fqDtPccjZmxKMcN0UNm2d2XQYwNW55wKujJAIu4MKOSYvSIWWLsgKwaaPF9gMkeHdLSlutRIxRk-kVtF5B7tzagfU3b4SAjLOVQjXCkuE30tc7Q5-zMO4evUxqAv1YwWjbgGE6LuykTH3E7OazXxlrNWuZDvESL1rICqce4qCF.Wh0Uv_P4YcGfrqbPx-n76Q&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=5691748969587198&num=0&output=afd_ads&domain_name=connect-advance.net&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1748969587200&u_w=1280&u_h=1024&biw=1152&bih=921&psw=1152&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=763775455&rurl=https%3A%2F%2Fconnect-advance.net%2FIPKO%2Fauth%2Flogin.php CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint27:E5:A6:4D:A7:35:A0:F7:7B:EA:CD:2E:47:1A:64:DB:8B:2C:E6:06 ValidityMon, 12 May 2025 08:43:56 GMT - Mon, 04 Aug 2025 08:43:55 GMT
File typeSVG Scalable Vector Graphics image Hash11b3089d616633ca6b73b57aa877eeb4 07632f63e06b30d9b63c97177d3a8122629bda9b 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 03 Jun 2025 08:27:13 GMT
expires: Wed, 04 Jun 2025 07:27:13 GMT
cache-control: public, max-age=82800
age: 30355
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89 ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2505
Origin: https://connect-advance.net
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Cookie: cg_uuid=a73f41dbb6f7cd42b08b11791087aa44
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://connect-advance.net
content-type: application/json
date: Tue, 03 Jun 2025 16:53:08 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89 ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1727
Origin: https://connect-advance.net
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Cookie: cg_uuid=a73f41dbb6f7cd42b08b11791087aa44
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://connect-advance.net
content-type: application/json
date: Tue, 03 Jun 2025 16:53:12 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=xa3em1byrsj7&cd_fexp=72717108&aqid=cyg_aMerF8GkxdwP9-2P4A8&psid=5837883959&pbt=bs&adbx=311&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=763775455&csala=7%7C0%7C413%7C117%7C93&lle=0&ifv=1&hpt=1 | 216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=xa3em1byrsj7&cd_fexp=72717108&aqid=cyg_aMerF8GkxdwP9-2P4A8&psid=5837883959&pbt=bs&adbx=311&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=763775455&csala=7%7C0%7C413%7C117%7C93&lle=0&ifv=1&hpt=1 IP216.58.207.238:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintEB:8E:2F:9E:C4:6D:95:6E:65:C8:4E:08:A5:5E:E8:56:20:3C:53:83 ValidityMon, 12 May 2025 08:45:56 GMT - Mon, 04 Aug 2025 08:45:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=xa3em1byrsj7&cd_fexp=72717108&aqid=cyg_aMerF8GkxdwP9-2P4A8&psid=5837883959&pbt=bs&adbx=311&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=763775455&csala=7%7C0%7C413%7C117%7C93&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-xox0X1VZ1ScJ1c2YktUECQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Tue, 03 Jun 2025 16:53:09 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89 ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1727
Origin: https://connect-advance.net
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Cookie: cg_uuid=a73f41dbb6f7cd42b08b11791087aa44
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://connect-advance.net
content-type: application/json
date: Tue, 03 Jun 2025 16:53:10 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89 ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1730
Origin: https://connect-advance.net
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Cookie: cg_uuid=a73f41dbb6f7cd42b08b11791087aa44
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://connect-advance.net
content-type: application/json
date: Tue, 03 Jun 2025 16:53:17 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| connect-advance.net/IPKO/auth/login.php | 15.197.130.221 | 200 OK | 17 kB |
URL User Request GET connect-advance.net/IPKO/auth/login.php IP15.197.130.221:443
CertificateIssuerLet's Encrypt Subjectconnect-advance.net Fingerprint1D:D4:A1:AB:D2:36:8A:17:6A:5F:1D:9F:B5:26:00:80:9E:39:8D:2A ValidityFri, 28 Mar 2025 23:51:37 GMT - Thu, 26 Jun 2025 23:51:36 GMT
File typeHTML document, ASCII text, with very long lines (9136) Hash4e31316d15db0df4da1a203a2dad8414 68bb41eeba118095bbdc24c78bf6dd5925a070e9 16cd2c2a00af6ee48be656872fb18f81af2586ce7b27b349e52d612f3b1cc615
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /IPKO/auth/login.php HTTP/1.1
Host: connect-advance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50559"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 03 Jun 2025 16:53:06 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_t02IOxvjOFz9fjRTU/8E5DOl/elxS/WKUtzyGVDnt5WJ4tjAjzaCnQCFueHz16ZsMIPiSVQBEWITTts5DpZV0Q==
x-buckets: bucket102,bucket077
x-domain: connect-advance.net
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain:
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
|
|
| euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js | 18.165.122.16 | 200 OK | 112 kB |
URL GET euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js IP18.165.122.16:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerAmazon Subject*.astarsbuilding.com FingerprintAF:5D:7D:29:4F:F3:A2:2A:2D:40:A9:AC:24:CC:23:08:D0:B8:D1:57 ValidityTue, 20 May 2025 00:00:00 GMT - Thu, 18 Jun 2026 23:59:59 GMT
Size112 kB (112175 bytes) Hash453f165d3f1aca02442e64ee950be037 8e9e2603974de107431ae8fa68fa9cb65285eac2 bb2e6b04f95d21e7136e292bb8ba12b9bf155a2c5824b3c4afdf9db8cf60184c
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 41177
content-encoding: gzip
server: Caddy
cache-control: max-age=43200
date: Tue, 03 Jun 2025 13:58:19 GMT
expires: Wed, 04 Jun 2025 01:58:19 GMT
etag: "1b62f-jp4mA5dN4QdDGuj6aPqctlKF6sI"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 21305ab0d95c2d5c15ba0379048ef740.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P2
x-amz-cf-id: rjYuHPF5mOKg0bHBYb7E0rQVKhSalZgijDgJfCKIlreM-VyxyLPh3Q==
age: 10487
X-Firefox-Spdy: h2
|
|
| connect-advance.net/munin/a/tr/browserjs?domain=connect-advance.net&toggle=browserjs&uid=MTc0ODk2OTU4Ni40NzEzOjdmOWMyMDBlN2ViY2Y4YzExMTk2YjcyNTY2ZTMwODdkZmQ2YzhkZDcwOWE3NDY2ZGQwMDI4NWVhMTlmMjZlMWY6NjgzZjI4NzI3MzBlNQ%3D%3D | 15.197.130.221 | 200 OK | 0 B |
URL GET connect-advance.net/munin/a/tr/browserjs?domain=connect-advance.net&toggle=browserjs&uid=MTc0ODk2OTU4Ni40NzEzOjdmOWMyMDBlN2ViY2Y4YzExMTk2YjcyNTY2ZTMwODdkZmQ2YzhkZDcwOWE3NDY2ZGQwMDI4NWVhMTlmMjZlMWY6NjgzZjI4NzI3MzBlNQ%3D%3D IP15.197.130.221:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerLet's Encrypt Subjectconnect-advance.net Fingerprint1D:D4:A1:AB:D2:36:8A:17:6A:5F:1D:9F:B5:26:00:80:9E:39:8D:2A ValidityFri, 28 Mar 2025 23:51:37 GMT - Thu, 26 Jun 2025 23:51:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/tr/browserjs?domain=connect-advance.net&toggle=browserjs&uid=MTc0ODk2OTU4Ni40NzEzOjdmOWMyMDBlN2ViY2Y4YzExMTk2YjcyNTY2ZTMwODdkZmQ2YzhkZDcwOWE3NDY2ZGQwMDI4NWVhMTlmMjZlMWY6NjgzZjI4NzI3MzBlNQ%3D%3D HTTP/1.1
Host: connect-advance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/IPKO/auth/login.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50559"; ma=2592000
content-type: text/html; charset=UTF-8
date: Tue, 03 Jun 2025 16:53:06 GMT
server: Caddy, nginx
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
|
|
| connect-advance.net/munin/a/ls?t=683f2872&token=e6ece280ca011feeaa09d586f4b93e91b134fd52 | 15.197.130.221 | 201 Created | 0 B |
URL GET connect-advance.net/munin/a/ls?t=683f2872&token=e6ece280ca011feeaa09d586f4b93e91b134fd52 IP15.197.130.221:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerLet's Encrypt Subjectconnect-advance.net Fingerprint1D:D4:A1:AB:D2:36:8A:17:6A:5F:1D:9F:B5:26:00:80:9E:39:8D:2A ValidityFri, 28 Mar 2025 23:51:37 GMT - Thu, 26 Jun 2025 23:51:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/ls?t=683f2872&token=e6ece280ca011feeaa09d586f4b93e91b134fd52 HTTP/1.1
Host: connect-advance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/IPKO/auth/login.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50559"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Tue, 03 Jun 2025 16:53:06 GMT
server: Caddy, nginx
status: 201 Created
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_V2bIQ1dw334P1VAShPlUZg3B9RzbR4tb6BHZcvHOxOXsMrlpa+NKGgy7iEbENEfrceHJs4NxoZ2oKfJiK5b3zw==
x-log-success: 683f2872958f7bf7460b635f
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 216.58.207.238 | 200 OK | 143 kB |
URL GET syndicatedsearch.goog/adsense/domains/caf.js IP216.58.207.238:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fconnect-advance.net%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.175rE7Z37X4TZi-YZH1jpLN_q2jzJu3fnzxxAOP4jpnLiW8r4GRMrg.skR85T70YtRNIVKeKuM5xA.XJLZ2k_ImSiZWOaSvLSbGWc4UT2kIPKrvkO3JsVCRKzneTmO2SkxQ7YGf2i9PoKQdNWu9-eN0-XdIJiqgYahFEIyKMhkjQFLHwDxd5-dC5vMgtUCqf9vTJLUQyDmTQyv6-i8QjKqS8dTLdQmzG5G6PRDU3FHalznR3A-HI_-VTPavHGGCVGXXV8KYgeSf8sUAeq5Is7LJEHi_Tb7ryqFYbkKPZzNwOOf_WobreDbfeoj0rfnNR8UUhviVETh6UcaY1xabPmpdDjiXCTUmoQPVVRmQKwF8uAxXAmWRmsSaXTYrxdFI7a-JbTog5IpBdEjtnWurGNNUkQTakoFpJIHs1q276gACAuXxNLn28pTAWuvtc4Bye0LpDaUurzLQ8nl1AyXEnuzyNIZk__2FwYlw0RGQoYtB5AOTelt4TekFoopCGpgIxLPSj2qpOu9mXNkR6Sb1Ij_uKE4_0XJn-_8r3fqDtPccjZmxKMcN0UNm2d2XQYwNW55wKujJAIu4MKOSYvSIWWLsgKwaaPF9gMkeHdLSlutRIxRk-kVtF5B7tzagfU3b4SAjLOVQjXCkuE30tc7Q5-zMO4evUxqAv1YwWjbgGE6LuykTH3E7OazXxlrNWuZDvESL1rICqce4qCF.Wh0Uv_P4YcGfrqbPx-n76Q&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=5691748969587198&num=0&output=afd_ads&domain_name=connect-advance.net&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1748969587200&u_w=1280&u_h=1024&biw=1152&bih=921&psw=1152&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=763775455&rurl=https%3A%2F%2Fconnect-advance.net%2FIPKO%2Fauth%2Flogin.php CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintEB:8E:2F:9E:C4:6D:95:6E:65:C8:4E:08:A5:5E:E8:56:20:3C:53:83 ValidityMon, 12 May 2025 08:45:56 GMT - Mon, 04 Aug 2025 08:45:55 GMT
File typeJavaScript source, ASCII text, with very long lines (1839) Size143 kB (142875 bytes) Hashdcfed53e329294a9ae4795bbddae567f 75003f85b84b5935b7674ddf33f96ba773779fc6 31e4231c3dbee2ffe322f325f86f37b8182fc4fc61078a2efca499470b5a4189
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 03 Jun 2025 16:53:07 GMT
expires: Tue, 03 Jun 2025 16:53:07 GMT
cache-control: private, max-age=3600
etag: "10324493846234436397"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 391 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fconnect-advance.net%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.175rE7Z37X4TZi-YZH1jpLN_q2jzJu3fnzxxAOP4jpnLiW8r4GRMrg.skR85T70YtRNIVKeKuM5xA.XJLZ2k_ImSiZWOaSvLSbGWc4UT2kIPKrvkO3JsVCRKzneTmO2SkxQ7YGf2i9PoKQdNWu9-eN0-XdIJiqgYahFEIyKMhkjQFLHwDxd5-dC5vMgtUCqf9vTJLUQyDmTQyv6-i8QjKqS8dTLdQmzG5G6PRDU3FHalznR3A-HI_-VTPavHGGCVGXXV8KYgeSf8sUAeq5Is7LJEHi_Tb7ryqFYbkKPZzNwOOf_WobreDbfeoj0rfnNR8UUhviVETh6UcaY1xabPmpdDjiXCTUmoQPVVRmQKwF8uAxXAmWRmsSaXTYrxdFI7a-JbTog5IpBdEjtnWurGNNUkQTakoFpJIHs1q276gACAuXxNLn28pTAWuvtc4Bye0LpDaUurzLQ8nl1AyXEnuzyNIZk__2FwYlw0RGQoYtB5AOTelt4TekFoopCGpgIxLPSj2qpOu9mXNkR6Sb1Ij_uKE4_0XJn-_8r3fqDtPccjZmxKMcN0UNm2d2XQYwNW55wKujJAIu4MKOSYvSIWWLsgKwaaPF9gMkeHdLSlutRIxRk-kVtF5B7tzagfU3b4SAjLOVQjXCkuE30tc7Q5-zMO4evUxqAv1YwWjbgGE6LuykTH3E7OazXxlrNWuZDvESL1rICqce4qCF.Wh0Uv_P4YcGfrqbPx-n76Q&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=5691748969587198&num=0&output=afd_ads&domain_name=connect-advance.net&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1748969587200&u_w=1280&u_h=1024&biw=1152&bih=921&psw=1152&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=763775455&rurl=https%3A%2F%2Fconnect-advance.net%2FIPKO%2Fauth%2Flogin.php CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint27:E5:A6:4D:A7:35:A0:F7:7B:EA:CD:2E:47:1A:64:DB:8B:2C:E6:06 ValidityMon, 12 May 2025 08:43:56 GMT - Mon, 04 Aug 2025 08:43:55 GMT
File typeSVG Scalable Vector Graphics image Hash8959ddcd9712196961d93f58064ed655 62ab1e38e7e9fbf58a04381b76c2d96a9c829f24 17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 03 Jun 2025 08:14:31 GMT
expires: Wed, 04 Jun 2025 07:14:31 GMT
cache-control: public, max-age=82800
age: 31117
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=b1by51kufcu&cd_fexp=72717108&aqid=cyg_aMerF8GkxdwP9-2P4A8&psid=5837883959&pbt=bv&adbx=311&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=763775455&csala=7%7C0%7C413%7C117%7C93&lle=0&ifv=1&hpt=1 | 216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=b1by51kufcu&cd_fexp=72717108&aqid=cyg_aMerF8GkxdwP9-2P4A8&psid=5837883959&pbt=bv&adbx=311&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=763775455&csala=7%7C0%7C413%7C117%7C93&lle=0&ifv=1&hpt=1 IP216.58.207.238:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintEB:8E:2F:9E:C4:6D:95:6E:65:C8:4E:08:A5:5E:E8:56:20:3C:53:83 ValidityMon, 12 May 2025 08:45:56 GMT - Mon, 04 Aug 2025 08:45:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=b1by51kufcu&cd_fexp=72717108&aqid=cyg_aMerF8GkxdwP9-2P4A8&psid=5837883959&pbt=bv&adbx=311&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=763775455&csala=7%7C0%7C413%7C117%7C93&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-tRGDcOOSY3Da4NJVHaeTJA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Tue, 03 Jun 2025 16:53:09 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89 ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1730
Origin: https://connect-advance.net
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Cookie: cg_uuid=a73f41dbb6f7cd42b08b11791087aa44
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://connect-advance.net
content-type: application/json
date: Tue, 03 Jun 2025 16:53:22 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png | 3.167.7.19 | 200 OK | 11 kB |
URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png IP3.167.7.19:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72 ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File typePNG image data, 1500 x 600, 8-bit colormap, non-interlaced Hash0cb2e5165dc9324eb462199f04e1ffa9 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Tue, 03 Jun 2025 11:05:18 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: zmwZb0CdchFuXQMb5Mh273uSgMXZn8dZ-SMCCnhbYQHuWCfe6W6Fpw==
age: 20868
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fconnect-advance.net%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.175rE7Z37X4TZi-YZH1jpLN_q2jzJu3fnzxxAOP4jpnLiW8r4GRMrg.skR85T70YtRNIVKeKuM5xA.XJLZ2k_ImSiZWOaSvLSbGWc4UT2kIPKrvkO3JsVCRKzneTmO2SkxQ7YGf2i9PoKQdNWu9-eN0-XdIJiqgYahFEIyKMhkjQFLHwDxd5-dC5vMgtUCqf9vTJLUQyDmTQyv6-i8QjKqS8dTLdQmzG5G6PRDU3FHalznR3A-HI_-VTPavHGGCVGXXV8KYgeSf8sUAeq5Is7LJEHi_Tb7ryqFYbkKPZzNwOOf_WobreDbfeoj0rfnNR8UUhviVETh6UcaY1xabPmpdDjiXCTUmoQPVVRmQKwF8uAxXAmWRmsSaXTYrxdFI7a-JbTog5IpBdEjtnWurGNNUkQTakoFpJIHs1q276gACAuXxNLn28pTAWuvtc4Bye0LpDaUurzLQ8nl1AyXEnuzyNIZk__2FwYlw0RGQoYtB5AOTelt4TekFoopCGpgIxLPSj2qpOu9mXNkR6Sb1Ij_uKE4_0XJn-_8r3fqDtPccjZmxKMcN0UNm2d2XQYwNW55wKujJAIu4MKOSYvSIWWLsgKwaaPF9gMkeHdLSlutRIxRk-kVtF5B7tzagfU3b4SAjLOVQjXCkuE30tc7Q5-zMO4evUxqAv1YwWjbgGE6LuykTH3E7OazXxlrNWuZDvESL1rICqce4qCF.Wh0Uv_P4YcGfrqbPx-n76Q&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=5691748969587198&num=0&output=afd_ads&domain_name=connect-advance.net&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1748969587200&u_w=1280&u_h=1024&biw=1152&bih=921&psw=1152&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=763775455&rurl=https%3A%2F%2Fconnect-advance.net%2FIPKO%2Fauth%2Flogin.php | 216.58.207.238 | 200 OK | 16 kB |
URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fconnect-advance.net%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.175rE7Z37X4TZi-YZH1jpLN_q2jzJu3fnzxxAOP4jpnLiW8r4GRMrg.skR85T70YtRNIVKeKuM5xA.XJLZ2k_ImSiZWOaSvLSbGWc4UT2kIPKrvkO3JsVCRKzneTmO2SkxQ7YGf2i9PoKQdNWu9-eN0-XdIJiqgYahFEIyKMhkjQFLHwDxd5-dC5vMgtUCqf9vTJLUQyDmTQyv6-i8QjKqS8dTLdQmzG5G6PRDU3FHalznR3A-HI_-VTPavHGGCVGXXV8KYgeSf8sUAeq5Is7LJEHi_Tb7ryqFYbkKPZzNwOOf_WobreDbfeoj0rfnNR8UUhviVETh6UcaY1xabPmpdDjiXCTUmoQPVVRmQKwF8uAxXAmWRmsSaXTYrxdFI7a-JbTog5IpBdEjtnWurGNNUkQTakoFpJIHs1q276gACAuXxNLn28pTAWuvtc4Bye0LpDaUurzLQ8nl1AyXEnuzyNIZk__2FwYlw0RGQoYtB5AOTelt4TekFoopCGpgIxLPSj2qpOu9mXNkR6Sb1Ij_uKE4_0XJn-_8r3fqDtPccjZmxKMcN0UNm2d2XQYwNW55wKujJAIu4MKOSYvSIWWLsgKwaaPF9gMkeHdLSlutRIxRk-kVtF5B7tzagfU3b4SAjLOVQjXCkuE30tc7Q5-zMO4evUxqAv1YwWjbgGE6LuykTH3E7OazXxlrNWuZDvESL1rICqce4qCF.Wh0Uv_P4YcGfrqbPx-n76Q&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=5691748969587198&num=0&output=afd_ads&domain_name=connect-advance.net&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1748969587200&u_w=1280&u_h=1024&biw=1152&bih=921&psw=1152&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=763775455&rurl=https%3A%2F%2Fconnect-advance.net%2FIPKO%2Fauth%2Flogin.php IP216.58.207.238:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintEB:8E:2F:9E:C4:6D:95:6E:65:C8:4E:08:A5:5E:E8:56:20:3C:53:83 ValidityMon, 12 May 2025 08:45:56 GMT - Mon, 04 Aug 2025 08:45:55 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (15383) Hashccd72eb51657d4eab7b6d8ed37a9c5e0 d5847f138e1e3acd9cb7d4513f0c77a489732da6 554d62e2aa2032a1c634087b390345a994ffbf581e3320977b3b8fc7d3aa1f25
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fconnect-advance.net%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.175rE7Z37X4TZi-YZH1jpLN_q2jzJu3fnzxxAOP4jpnLiW8r4GRMrg.skR85T70YtRNIVKeKuM5xA.XJLZ2k_ImSiZWOaSvLSbGWc4UT2kIPKrvkO3JsVCRKzneTmO2SkxQ7YGf2i9PoKQdNWu9-eN0-XdIJiqgYahFEIyKMhkjQFLHwDxd5-dC5vMgtUCqf9vTJLUQyDmTQyv6-i8QjKqS8dTLdQmzG5G6PRDU3FHalznR3A-HI_-VTPavHGGCVGXXV8KYgeSf8sUAeq5Is7LJEHi_Tb7ryqFYbkKPZzNwOOf_WobreDbfeoj0rfnNR8UUhviVETh6UcaY1xabPmpdDjiXCTUmoQPVVRmQKwF8uAxXAmWRmsSaXTYrxdFI7a-JbTog5IpBdEjtnWurGNNUkQTakoFpJIHs1q276gACAuXxNLn28pTAWuvtc4Bye0LpDaUurzLQ8nl1AyXEnuzyNIZk__2FwYlw0RGQoYtB5AOTelt4TekFoopCGpgIxLPSj2qpOu9mXNkR6Sb1Ij_uKE4_0XJn-_8r3fqDtPccjZmxKMcN0UNm2d2XQYwNW55wKujJAIu4MKOSYvSIWWLsgKwaaPF9gMkeHdLSlutRIxRk-kVtF5B7tzagfU3b4SAjLOVQjXCkuE30tc7Q5-zMO4evUxqAv1YwWjbgGE6LuykTH3E7OazXxlrNWuZDvESL1rICqce4qCF.Wh0Uv_P4YcGfrqbPx-n76Q&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=5691748969587198&num=0&output=afd_ads&domain_name=connect-advance.net&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1748969587200&u_w=1280&u_h=1024&biw=1152&bih=921&psw=1152&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=763775455&rurl=https%3A%2F%2Fconnect-advance.net%2FIPKO%2Fauth%2Flogin.php HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Tue, 03 Jun 2025 16:53:07 GMT
expires: Tue, 03 Jun 2025 16:53:07 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-8o1ey8_NQiki2PZGHyDDew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3458
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/tracker/tc_imp.gif?e=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&cri=Ak2v8BuChH&ts=394&cb=1748969587760 | 3.248.162.96 | 200 OK | 43 B |
URL GET obseu.astarsbuilding.com/tracker/tc_imp.gif?e=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&cri=Ak2v8BuChH&ts=394&cb=1748969587760 IP3.248.162.96:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89 ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashdb04c7b378cb2db912c3ba8a5a774ee3 dee34bd86c3484d31002182aa2b7caa4699126b8 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=Ak2v8BuChH&ts=394&cb=1748969587760 HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/
Cookie: cg_uuid=a73f41dbb6f7cd42b08b11791087aa44
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 03 Jun 2025 16:53:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
|
|
| connect-advance.net/munin/a/tr/answercheck/yes?domain=connect-advance.net&caf=1&toggle=answercheck&answer=yes&uid=MTc0ODk2OTU4Ni40NzEzOjdmOWMyMDBlN2ViY2Y4YzExMTk2YjcyNTY2ZTMwODdkZmQ2YzhkZDcwOWE3NDY2ZGQwMDI4NWVhMTlmMjZlMWY6NjgzZjI4NzI3MzBlNQ%3D%3D | 15.197.130.221 | 200 OK | 0 B |
URL GET connect-advance.net/munin/a/tr/answercheck/yes?domain=connect-advance.net&caf=1&toggle=answercheck&answer=yes&uid=MTc0ODk2OTU4Ni40NzEzOjdmOWMyMDBlN2ViY2Y4YzExMTk2YjcyNTY2ZTMwODdkZmQ2YzhkZDcwOWE3NDY2ZGQwMDI4NWVhMTlmMjZlMWY6NjgzZjI4NzI3MzBlNQ%3D%3D IP15.197.130.221:443
Requested byhttps://connect-advance.net/IPKO/auth/login.php CertificateIssuerLet's Encrypt Subjectconnect-advance.net Fingerprint1D:D4:A1:AB:D2:36:8A:17:6A:5F:1D:9F:B5:26:00:80:9E:39:8D:2A ValidityFri, 28 Mar 2025 23:51:37 GMT - Thu, 26 Jun 2025 23:51:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/tr/answercheck/yes?domain=connect-advance.net&caf=1&toggle=answercheck&answer=yes&uid=MTc0ODk2OTU4Ni40NzEzOjdmOWMyMDBlN2ViY2Y4YzExMTk2YjcyNTY2ZTMwODdkZmQ2YzhkZDcwOWE3NDY2ZGQwMDI4NWVhMTlmMjZlMWY6NjgzZjI4NzI3MzBlNQ%3D%3D HTTP/1.1
Host: connect-advance.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://connect-advance.net/IPKO/auth/login.php
Cookie: _cq_duid=1.1748969587.WvWfzlWkFdDqnhRC; _cq_suid=1.1748969587.Jci8mB5SDQapycFV
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50559"; ma=2592000
content-type: text/html; charset=UTF-8
date: Tue, 03 Jun 2025 16:53:07 GMT
server: Caddy, nginx
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
|
|