Report - forrastfoods.com/

Report Overview

Submitted URL
forrastfoods.com/
IP
173.255.194.134
ASN
#63949 Akamai Connected Cloud
Submitted
2024-04-18 06:47:02
Access
public
Website Title
forrastfoods.com
Final URL
www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
forrastfoods.com	unknown	2023-06-05	2020-12-08	2024-03-11	1.2 kB	1.4 kB	45.33.2.79
www3.forrastfoods.com	unknown	unknown	No data	No data	2.7 kB	8.4 kB	173.255.194.134
d38psrni17bvxu.cloudfront.net	unknown	2008-04-25	2022-09-22	2024-04-17	482 B	12 kB	54.230.241.187
www.adsensecustomsearchads.com	unknown	2011-01-28	2015-09-02	2024-04-17	3.6 kB	197 kB	216.58.211.14
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2024-04-17	995 B	2.1 kB	142.250.74.97
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	436 B	75 kB	142.250.74.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	forrastfoods.com	Sinkholed
2024-04-18	medium	forrastfoods.com	Sinkholed
2024-04-18	medium	forrastfoods.com	Sinkholed
2024-04-18	medium	forrastfoods.com	Sinkholed
2024-04-18	medium	forrastfoods.com	Sinkholed
2024-04-18	medium	forrastfoods.com	Sinkholed
2024-04-18	medium	forrastfoods.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	www.adsensecustomsearchads.com/adsense/domains/caf.js	191 kB	2024-04-17	2024-04-18
Pretty URL www.adsensecustomsearchads.com/adsense/domains/caf.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 18:58:39 Last Seen2024-04-18 13:41:11 Times Seen15 Hash e1657422877e5fcd9acb906da8626d13 19e9d0ecbe8a5f0f3d206a1be6fc441f4e0fb8ca 5a5916cb0d090bd94c6fabeb902c80baabe02c2251ba43161af76f046e875140 Loading...

	www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000	968 B	2023-03-08	2024-05-01
Pretty URL www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000 IP 173.255.194.134 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:24:08 Last Seen2024-05-01 08:57:06 Times Seen27805 Hash c77554570ae0fa8e4fb31747dc213058 e989fbde07e6a68975c7a31e1d4df76afd90b96f c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77 Loading...

	www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000	8.5 kB	2024-04-18	2024-04-18
Pretty URL www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000 IP 173.255.194.134 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 08:47:08 Last Seen2024-04-18 08:47:08 Times Seen1 Hash 88f928f83f68fd0b0f6370b65c190e7c 448bcbbb3e06d3af5d42c5a4abbf7cc28149099d 73eb768e720d23cfc141a90c089622f5b3ec3d18b81c863704ed4942bcfde459 Loading...

	www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000	669 B	2024-04-18	2024-04-18
Pretty URL www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000 IP 173.255.194.134 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 08:47:08 Last Seen2024-04-18 08:47:08 Times Seen1 Hash 2b6f1f6e2d75022e632310a3feff6cfd e82c8f5c70a9eb53fbf99b9e4201ccf4baad5f8d 1bb2006c7f257491bae256b70036668e00c4ac8732c638fa2b666d9c922e2125 Loading...

	www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2C000003%2C001539%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjIwYzFjZTE2Y2FhfHx8MTcxMzQyMjc5OC4xNHwyMWYxZjIzNDNlNGMwN2VhNWNlOTgyNjcwNWIxZmI0OTBkNTNlMjM0fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE56RXpOREl5TnprM0xqQTBNVEF5TVRBd01EQWlmUT09fDJjMzVjMzhhYzY2Mzg2MzY5MDMzOGRiYjI1OWJlOGM5MzJjM2I2ZmF8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301467%2C17301470%2C17301472%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=8421713422798935&num=0&output=afd_ads&domain_name=www3.forrastfoods.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713422798937&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Ftm%3D1%26subid4%3D1713422797.0410210000	872 B	2024-04-18	2024-04-18
Pretty URL www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2C000003%2C001539%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjIwYzFjZTE2Y2FhfHx8MTcxMzQyMjc5OC4xNHwyMWYxZjIzNDNlNGMwN2VhNWNlOTgyNjcwNWIxZmI0OTBkNTNlMjM0fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE56RXpOREl5TnprM0xqQTBNVEF5TVRBd01EQWlmUT09fDJjMzVjMzhhYzY2Mzg2MzY5MDMzOGRiYjI1OWJlOGM5MzJjM2I2ZmF8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301467%2C17301470%2C17301472%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=8421713422798935&num=0&output=afd_ads&domain_name=www3.forrastfoods.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713422798937&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Ftm%3D1%26subid4%3D1713422797.0410210000 IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 08:47:08 Last Seen2024-04-18 08:47:08 Times Seen1 Hash 913f8639c9aa13effac2d6965461c5e8 9da7f6c84a085825f5702fb48ca5548def20acba cca336c9ac876af4bd2ea2267d085de76795319df87e8c2dc94f7d03271daf01 Loading...

	www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000	40 B	2023-08-09	2024-05-01
Pretty URL www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000 IP 173.255.194.134 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-09 10:52:17 Last Seen2024-05-01 08:57:06 Times Seen9031 Hash fca3e6a61d4a07440e4f10c4dbaad8e3 41480802bf872b2d15f9cbcadba025fe326eac03 dfe5c5e10934e7abf7903d4ede3b8fa091c11bef63d675808e6314ec763185ee Loading...

	www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000	483 B	2024-01-04	2024-05-01
Pretty URL www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000 IP 173.255.194.134 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-04 10:26:15 Last Seen2024-05-01 08:57:06 Times Seen2845 Hash 18f2edc58d8a7b9e6b82454e8658c157 e5dfdd0fa61b3a5ef68dab382a0ba93e9e7b67fb 2d9b07a0704d92dda4deae88bc582aeb659923c8d44d0e7362e13cb28d88d250 Loading...

	www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000	50 B	2024-01-04	2024-05-01
Pretty URL www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000 IP 173.255.194.134 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-04 10:26:15 Last Seen2024-05-01 08:57:06 Times Seen2807 Hash 1b334e0123cf0cb113092022fb726782 45abb42a6680499daa10d83d2859329de1843de2 42591f96b9a41a7e2e5ecd0240dd7fecdcf03ef8454b57c68f08697474a4b579 Loading...

	www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	191 kB	2024-04-15	2024-04-18
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true IP 142.250.74.164 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-15 21:06:31 Last Seen2024-04-18 15:57:39 Times Seen59 Hash 2a3f52e20e34b6585a517e7fe41f6b19 ac6d557e9447ae23cff75c5650f66e0728ad5b28 176e0c528f1908ec1c891f5e341620c3c37157234e416911d7b9414e313a3275 Loading...

HTTP Transactions (15)

URL IP Response Size

forrastfoods.com/

45.33.2.79

541 B

URL
forrastfoods.com/
IP
45.33.2.79:0
ASN
#63949 Akamai Connected Cloud

File type
HTML document, ASCII text, with very long lines (304)
Size
541 B (541 bytes)
Hash
af872ec1705c38e082aa1abc086cff1d
8d7b6e772eaed3ef131571e2bcb1314576ebfa93
5d6f106193615eb93d26edd4d9360b670fc2222a8d9ff1461ab5ee5c79e0f7cc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: forrastfoods.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Thu, 18 Apr 2024 06:46:36 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip

forrastfoods.com/?gp=1&js=1&uuid=1713422796.0013560477&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9

198.58.118.167

302 Found

0 B

URL User Request GET HTTP/1.1
forrastfoods.com/?gp=1&js=1&uuid=1713422796.0013560477&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9
IP
198.58.118.167:443
ASN
#63949 Akamai Connected Cloud

Certificate
IssuerLet's Encrypt
Subjectforrastfoods.com
Fingerprint15:8B:42:95:E1:88:21:89:8A:5F:EF:A8:73:BB:AD:32:74:5A:95:B6
ValiditySun, 31 Mar 2024 14:42:42 GMT - Sat, 29 Jun 2024 14:42:41 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?gp=1&js=1&uuid=1713422796.0013560477&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogIiIsICJhY2NlcHQiOiAidGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2UvYXZpZixpbWFnZS93ZWJwLCovKjtxPTAuOCJ9 HTTP/1.1
Host: forrastfoods.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forrastfoods.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Thu, 18 Apr 2024 06:46:37 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
referrer-policy: no-referrer
x-mtm-path: 7
x-mtm-prov: 1:0.00;70:0.00
x-mtm-rd: 0.00
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJmb3JyYXN0Zm9vZHMuY29tIiwiaHR0cHM6Ly93d3czLmZvcnJhc3Rmb29kcy5jb20vP3RtPTEmc3ViaWQ0PTE3MTM0MjI3OTcuMDQxMDIxMDAwMCIsMSwiMjAyNC0wNC0xOCAwNjo0NjozNyIsMSwiMTcxMzQyMjc5Ny4wNDEwMjEwMDAwIiwxLG51bGwsbnVsbF0:1rxLXZ:rwZ5z7_ZESmRJAeapBBMVOAolaw; expires=Thu, 18-Apr-2024 07:46:37 GMT; Max-Age=3600; Path=/

www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000

173.255.194.134

200 OK

5.9 kB

URL User Request GET HTTP/1.1
www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
IP
173.255.194.134:443
ASN
#63949 Akamai Connected Cloud

Certificate
IssuerLet's Encrypt
Subjectforrastfoods.com
Fingerprint15:8B:42:95:E1:88:21:89:8A:5F:EF:A8:73:BB:AD:32:74:5A:95:B6
ValiditySun, 31 Mar 2024 14:42:42 GMT - Sat, 29 Jun 2024 14:42:41 GMT

File type
HTML document, ASCII text, with very long lines (8506)
Size
5.9 kB (5940 bytes)
Hash
2b5fbf5dc31d95e2112b71109cfd49c3
ff4a15ab5c27bb6fb40a96089bb2836718ef6575
72c8529472382b445b649d0617763371bef88e955744e4bb6ccafdfff04b2ef9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?tm=1&subid4=1713422797.0410210000 HTTP/1.1
Host: www3.forrastfoods.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 18 Apr 2024 06:46:38 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
server: nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_R3LeRLSUF8bnW5Byltfu6L5FCtPymd0Q2HdldNk1S5SzEYK3gCx9L1fFPraY5ryMYX15ZFd6a5Ht7Z8XPYHTDA==
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
x-domain: forrastfoods.com
x-subdomain: www1
ret_path: sx_new
content-encoding: gzip

www3.forrastfoods.com/track.php?domain=forrastfoods.com&toggle=browserjs&uid=MTcxMzQyMjc5OC4wOTM0Ojc0Y2YxMDAyMWZhNzQ5YmZiMDg2MGY4ZWM1YThiNjMyNDBkNWM3NTg3MThhMTE3Y2ViNjAxN2I1ODA3YmZlNDk6NjYyMGMxY2UxNmNmMQ%3D%3D

173.255.194.134

200 OK

20 B

URL GET HTTP/1.1
www3.forrastfoods.com/track.php?domain=forrastfoods.com&toggle=browserjs&uid=MTcxMzQyMjc5OC4wOTM0Ojc0Y2YxMDAyMWZhNzQ5YmZiMDg2MGY4ZWM1YThiNjMyNDBkNWM3NTg3MThhMTE3Y2ViNjAxN2I1ODA3YmZlNDk6NjYyMGMxY2UxNmNmMQ%3D%3D
IP
173.255.194.134:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerLet's Encrypt
Subjectforrastfoods.com
Fingerprint15:8B:42:95:E1:88:21:89:8A:5F:EF:A8:73:BB:AD:32:74:5A:95:B6
ValiditySun, 31 Mar 2024 14:42:42 GMT - Sat, 29 Jun 2024 14:42:41 GMT

File type
gzip compressed data, from Unix
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /track.php?domain=forrastfoods.com&toggle=browserjs&uid=MTcxMzQyMjc5OC4wOTM0Ojc0Y2YxMDAyMWZhNzQ5YmZiMDg2MGY4ZWM1YThiNjMyNDBkNWM3NTg3MThhMTE3Y2ViNjAxN2I1ODA3YmZlNDk6NjYyMGMxY2UxNmNmMQ%3D%3D HTTP/1.1
Host: www3.forrastfoods.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 18 Apr 2024 06:46:38 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
server: nginx
vary: Accept-Encoding
x-custom-track: browserjs
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
ret_path: sx_new
content-encoding: gzip

d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png

54.230.241.187

200 OK

11 kB

URL GET HTTP/2
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
54.230.241.187:443
ASN
#16509 AMAZON-02

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Size
11 kB (11375 bytes)
Hash
0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865

HTTP Headers

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Wed, 17 Apr 2024 17:26:54 GMT
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
accept-ranges: bytes
etag: "65fc1e7b-2c6f"
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: orWQXQIa8lKtN4biW2PNhh2BjtGQXM3tGee-AGN3_39DPZaL7BIOIg==
age: 47984
X-Firefox-Spdy: h2

www3.forrastfoods.com/ls.php?t=6620c1ce&token=2c35c38ac663863690338dbb259be8c932c3b6fa

173.255.194.134

201 Created

16 B

URL GET HTTP/1.1
www3.forrastfoods.com/ls.php?t=6620c1ce&token=2c35c38ac663863690338dbb259be8c932c3b6fa
IP
173.255.194.134:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerLet's Encrypt
Subjectforrastfoods.com
Fingerprint15:8B:42:95:E1:88:21:89:8A:5F:EF:A8:73:BB:AD:32:74:5A:95:B6
ValiditySun, 31 Mar 2024 14:42:42 GMT - Sat, 29 Jun 2024 14:42:41 GMT

File type
JSON text data
Size
16 B (16 bytes)
Hash
7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ls.php?t=6620c1ce&token=2c35c38ac663863690338dbb259be8c932c3b6fa HTTP/1.1
Host: www3.forrastfoods.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 201 Created
date: Thu, 18 Apr 2024 06:46:38 GMT
content-type: text/javascript;charset=UTF-8
transfer-encoding: chunked
server: nginx
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
charset: utf-8
access-control-allow-origin: 
access-control-allow-methods: POST, OPTIONS
access-control-max-age: 86400
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_CRZyNidSSKtP9HZElK6QqttxF8obNpxTr+d6s42T0gfhVqqXjs58vdH4lEfYWZEVjDUtPfWew8nReLXImSYKOA==
ret_path: sx_new

www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2C000003%2C001539%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjIwYzFjZTE2Y2FhfHx8MTcxMzQyMjc5OC4xNHwyMWYxZjIzNDNlNGMwN2VhNWNlOTgyNjcwNWIxZmI0OTBkNTNlMjM0fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE56RXpOREl5TnprM0xqQTBNVEF5TVRBd01EQWlmUT09fDJjMzVjMzhhYzY2Mzg2MzY5MDMzOGRiYjI1OWJlOGM5MzJjM2I2ZmF8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301467%2C17301470%2C17301472%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=8421713422798935&num=0&output=afd_ads&domain_name=www3.forrastfoods.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713422798937&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Ftm%3D1%26subid4%3D1713422797.0410210000

216.58.211.14

200 OK

3.1 kB

URL GET HTTP/2
www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2C000003%2C001539%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjIwYzFjZTE2Y2FhfHx8MTcxMzQyMjc5OC4xNHwyMWYxZjIzNDNlNGMwN2VhNWNlOTgyNjcwNWIxZmI0OTBkNTNlMjM0fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE56RXpOREl5TnprM0xqQTBNVEF5TVRBd01EQWlmUT09fDJjMzVjMzhhYzY2Mzg2MzY5MDMzOGRiYjI1OWJlOGM5MzJjM2I2ZmF8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301467%2C17301470%2C17301472%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=8421713422798935&num=0&output=afd_ads&domain_name=www3.forrastfoods.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713422798937&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Ftm%3D1%26subid4%3D1713422797.0410210000
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (14449)
Size
3.1 kB (3124 bytes)
Hash
982d8e0596e10eb1719f64dcb5576fe4
fbd8d841b584a9ece643fa11da180b6c8a59bce9
9b4f2917f23298f7d4382631b9845d5b7f8944e2db4d447347ec2757f830e104

HTTP Headers

GET /afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2C000003%2C001539%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjIwYzFjZTE2Y2FhfHx8MTcxMzQyMjc5OC4xNHwyMWYxZjIzNDNlNGMwN2VhNWNlOTgyNjcwNWIxZmI0OTBkNTNlMjM0fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE56RXpOREl5TnprM0xqQTBNVEF5TVRBd01EQWlmUT09fDJjMzVjMzhhYzY2Mzg2MzY5MDMzOGRiYjI1OWJlOGM5MzJjM2I2ZmF8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301467%2C17301470%2C17301472%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=8421713422798935&num=0&output=afd_ads&domain_name=www3.forrastfoods.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713422798937&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Ftm%3D1%26subid4%3D1713422797.0410210000 HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Thu, 18 Apr 2024 06:46:39 GMT
expires: Thu, 18 Apr 2024 06:46:39 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-yEkwe7dBQ7Je4Egaz9n1Bw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3124
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www3.forrastfoods.com/favicon.ico

173.255.194.134

200 OK

0 B

URL GET HTTP/1.1
www3.forrastfoods.com/favicon.ico
IP
173.255.194.134:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerLet's Encrypt
Subjectforrastfoods.com
Fingerprint15:8B:42:95:E1:88:21:89:8A:5F:EF:A8:73:BB:AD:32:74:5A:95:B6
ValiditySun, 31 Mar 2024 14:42:42 GMT - Sat, 29 Jun 2024 14:42:41 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www3.forrastfoods.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 18 Apr 2024 06:46:39 GMT
content-type: image/x-icon
content-length: 0
server: nginx
accept-ranges: bytes
ret_path: sx_new

www3.forrastfoods.com/track.php?domain=forrastfoods.com&caf=1&toggle=answercheck&answer=yes&uid=MTcxMzQyMjc5OC4wOTM0Ojc0Y2YxMDAyMWZhNzQ5YmZiMDg2MGY4ZWM1YThiNjMyNDBkNWM3NTg3MThhMTE3Y2ViNjAxN2I1ODA3YmZlNDk6NjYyMGMxY2UxNmNmMQ%3D%3D

173.255.194.134

200 OK

20 B

URL GET HTTP/1.1
www3.forrastfoods.com/track.php?domain=forrastfoods.com&caf=1&toggle=answercheck&answer=yes&uid=MTcxMzQyMjc5OC4wOTM0Ojc0Y2YxMDAyMWZhNzQ5YmZiMDg2MGY4ZWM1YThiNjMyNDBkNWM3NTg3MThhMTE3Y2ViNjAxN2I1ODA3YmZlNDk6NjYyMGMxY2UxNmNmMQ%3D%3D
IP
173.255.194.134:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerLet's Encrypt
Subjectforrastfoods.com
Fingerprint15:8B:42:95:E1:88:21:89:8A:5F:EF:A8:73:BB:AD:32:74:5A:95:B6
ValiditySun, 31 Mar 2024 14:42:42 GMT - Sat, 29 Jun 2024 14:42:41 GMT

File type
gzip compressed data, from Unix
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /track.php?domain=forrastfoods.com&caf=1&toggle=answercheck&answer=yes&uid=MTcxMzQyMjc5OC4wOTM0Ojc0Y2YxMDAyMWZhNzQ5YmZiMDg2MGY4ZWM1YThiNjMyNDBkNWM3NTg3MThhMTE3Y2ViNjAxN2I1ODA3YmZlNDk6NjYyMGMxY2UxNmNmMQ%3D%3D HTTP/1.1
Host: www3.forrastfoods.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 18 Apr 2024 06:46:39 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
server: nginx
vary: Accept-Encoding
x-custom-track: answercheck
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
ret_path: sx_new
content-encoding: gzip

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

142.250.74.97

200 OK

174 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2C000003%2C001539%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjIwYzFjZTE2Y2FhfHx8MTcxMzQyMjc5OC4xNHwyMWYxZjIzNDNlNGMwN2VhNWNlOTgyNjcwNWIxZmI0OTBkNTNlMjM0fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE56RXpOREl5TnprM0xqQTBNVEF5TVRBd01EQWlmUT09fDJjMzVjMzhhYzY2Mzg2MzY5MDMzOGRiYjI1OWJlOGM5MzJjM2I2ZmF8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301467%2C17301470%2C17301472%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=8421713422798935&num=0&output=afd_ads&domain_name=www3.forrastfoods.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713422798937&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Ftm%3D1%26subid4%3D1713422797.0410210000
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F
ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT

File type
SVG Scalable Vector Graphics image
Size
174 B (174 bytes)
Hash
11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 08:37:12 GMT
expires: Thu, 18 Apr 2024 07:37:12 GMT
cache-control: public, max-age=82800
age: 79768
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff

142.250.74.97

200 OK

270 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2C000003%2C001539%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjIwYzFjZTE2Y2FhfHx8MTcxMzQyMjc5OC4xNHwyMWYxZjIzNDNlNGMwN2VhNWNlOTgyNjcwNWIxZmI0OTBkNTNlMjM0fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE56RXpOREl5TnprM0xqQTBNVEF5TVRBd01EQWlmUT09fDJjMzVjMzhhYzY2Mzg2MzY5MDMzOGRiYjI1OWJlOGM5MzJjM2I2ZmF8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301467%2C17301470%2C17301472%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=8421713422798935&num=0&output=afd_ads&domain_name=www3.forrastfoods.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713422798937&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Ftm%3D1%26subid4%3D1713422797.0410210000
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F
ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT

File type
SVG Scalable Vector Graphics image
Size
270 B (270 bytes)
Hash
8959ddcd9712196961d93f58064ed655
62ab1e38e7e9fbf58a04381b76c2d96a9c829f24
17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 06:46:39 GMT
expires: Fri, 19 Apr 2024 05:46:39 GMT
cache-control: public, max-age=82800
age: 1
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=muww0fzggqug&aqid=z8EgZpflBKOtiM0Poo2psAM&psid=1167268112&pbt=bs&adbx=375&adby=94&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=623135625&csala=8%7C0%7C538%7C99%7C402&lle=0&ifv=1&hpt=1

216.58.211.14

204 No Content

0 B

URL GET HTTP/3
www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=muww0fzggqug&aqid=z8EgZpflBKOtiM0Poo2psAM&psid=1167268112&pbt=bs&adbx=375&adby=94&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=623135625&csala=8%7C0%7C538%7C99%7C402&lle=0&ifv=1&hpt=1
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=muww0fzggqug&aqid=z8EgZpflBKOtiM0Poo2psAM&psid=1167268112&pbt=bs&adbx=375&adby=94&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=623135625&csala=8%7C0%7C538%7C99%7C402&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-21gD8Rjj8uielYXLkE6W1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 18 Apr 2024 06:46:41 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true

142.250.74.164

200 OK

74 kB

URL GET HTTP/2
www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
IP
142.250.74.164:443
ASN
#15169 GOOGLE

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06
ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT

File type
JavaScript source, ASCII text, with very long lines (2247)
Size
74 kB (74210 bytes)
Hash
2a3f52e20e34b6585a517e7fe41f6b19
ac6d557e9447ae23cff75c5650f66e0728ad5b28
176e0c528f1908ec1c891f5e341620c3c37157234e416911d7b9414e313a3275

HTTP Headers

GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 18 Apr 2024 06:46:38 GMT
expires: Thu, 18 Apr 2024 06:46:38 GMT
cache-control: private, max-age=3600
etag: "16386737287390661741"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=wk3oodal6lh1&aqid=z8EgZpflBKOtiM0Poo2psAM&psid=1167268112&pbt=bv&adbx=375&adby=94&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=623135625&csala=8%7C0%7C538%7C99%7C402&lle=0&ifv=1&hpt=1

216.58.211.14

204 No Content

0 B

URL GET HTTP/3
www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=wk3oodal6lh1&aqid=z8EgZpflBKOtiM0Poo2psAM&psid=1167268112&pbt=bv&adbx=375&adby=94&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=623135625&csala=8%7C0%7C538%7C99%7C402&lle=0&ifv=1&hpt=1
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www3.forrastfoods.com/?tm=1&subid4=1713422797.0410210000
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=wk3oodal6lh1&aqid=z8EgZpflBKOtiM0Poo2psAM&psid=1167268112&pbt=bv&adbx=375&adby=94&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=623135625&csala=8%7C0%7C538%7C99%7C402&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www3.forrastfoods.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TnJ-oQevM3nvk0p9DwHZng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 18 Apr 2024 06:46:42 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.adsensecustomsearchads.com/adsense/domains/caf.js

216.58.211.14

200 OK

191 kB

URL GET HTTP/3
www.adsensecustomsearchads.com/adsense/domains/caf.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=1167268112&pcsa=false&channel=000002%2C000003%2C001539%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjIwYzFjZTE2Y2FhfHx8MTcxMzQyMjc5OC4xNHwyMWYxZjIzNDNlNGMwN2VhNWNlOTgyNjcwNWIxZmI0OTBkNTNlMjM0fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE56RXpOREl5TnprM0xqQTBNVEF5TVRBd01EQWlmUT09fDJjMzVjMzhhYzY2Mzg2MzY5MDMzOGRiYjI1OWJlOGM5MzJjM2I2ZmF8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301467%2C17301470%2C17301472%2C17301266&client_gdprApplies=1&format=r3%7Cs&nocache=8421713422798935&num=0&output=afd_ads&domain_name=www3.forrastfoods.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1713422798937&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=623135625&rurl=https%3A%2F%2Fwww3.forrastfoods.com%2F%3Ftm%3D1%26subid4%3D1713422797.0410210000
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (2247)
Size
191 kB (190642 bytes)
Hash
e1657422877e5fcd9acb906da8626d13
19e9d0ecbe8a5f0f3d206a1be6fc441f4e0fb8ca
5a5916cb0d090bd94c6fabeb902c80baabe02c2251ba43161af76f046e875140

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 18 Apr 2024 06:46:39 GMT
expires: Thu, 18 Apr 2024 06:46:39 GMT
cache-control: private, max-age=3600
etag: "4409120047204803356"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML