| globalcareerlab.com/wsza/page/images/open/bbva/login.php?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true | 13.248.213.45 | | 271 B |
URL globalcareerlab.com/wsza/page/images/open/bbva/login.php?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true IP13.248.213.45:0
File typeHTML document, ASCII text, with no line terminators Hash6ab0b6fc5b4fbf858074176a169f5bb9 be35753ef00a26efeb28bbfc98740b315a488f58 121f0b68d07598debba8dc83deed3d9e8c4b0a61115a33a54eccf87fffdf582d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /wsza/page/images/open/bbva/login.php?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true HTTP/1.1
Host: globalcareerlab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 271
date: Thu, 28 Mar 2024 22:02:40 GMT
X-Firefox-Spdy: h2
|
|
| globalcareerlab.com/lander?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true | 13.248.213.45 | 200 OK | 525 B |
URL User Request GET HTTP/2globalcareerlab.com/lander?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true IP13.248.213.45:443
CertificateIssuerGoDaddy.com, Inc. Subjectglobalcareerlab.com Fingerprint44:B6:B4:68:1C:72:1D:A8:78:1D:13:69:5C:7E:C0:32:D4:89:47:1C ValidityWed, 06 Mar 2024 14:29:43 GMT - Thu, 06 Mar 2025 14:29:43 GMT
File typeHTML document, ASCII text, with very long lines (524) Hash40b9122d2dbac902b41900f48445ee9b 379c7f503ea28d62e53f8676c09da1f0bef258aa efc2cb7bea587eda94fee71fa961043d1d8dbd20d3fd3a941a8ad02f2f398325
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /lander?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true HTTP/1.1
Host: globalcareerlab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://globalcareerlab.com/wsza/page/images/open/bbva/login.php?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=86400
content-type: text/html
date: Thu, 28 Mar 2024 22:02:40 GMT
server: openresty
set-cookie: traffic_target=reseller;Path=/;Max-Age=86400;
caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="Oslo";Path=/;Max-Age=86400;
lander_type=parkweb-reseller;Path=/;Max-Age=86400;
_policy={"restricted_market":true,"tracking_market":"explicit"};Path=/;Max-Age=86400;
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_IW0CF7ApTwABv1tzTdi8p58g8tezUjQ7zRFAmEz0FUuNTzbobrn7R8Vw3obsu9u4LId9XYsv+mJI4tnKQo0JMw
x-content-type-options: nosniff
content-length: 525
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/static/js/main.d22c8476.js | 95.101.10.131 | 200 OK | 175 kB |
URL GET HTTP/2img1.wsimg.com/parking-lander/static/js/main.d22c8476.js IP95.101.10.131:443 ASN#20940 Akamai International B.V.
Requested byhttps://globalcareerlab.com/lander?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typeJavaScript source, ASCII text, with very long lines (65465) Size175 kB (175341 bytes) Hash735b8e4d814a21a5d376c1786741bfbe 50d468764bc366fec7d1877fea81da47e503492a 2d45df0edc2f5b5e02671ec964592a011a416fe0c281dd2d5ce1b9239049f46a
GET /parking-lander/static/js/main.d22c8476.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://globalcareerlab.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: YUwpNgrnVI/lNQvM15oEDaoqb6x6dy34Ij5TUbloDmQX90WtdKvcfWdnVE+Sd2nLTOPjZUdKYcC7H3g5YwHDTQ==
x-amz-request-id: H4DTYYDVYF2K77RD
last-modified: Mon, 11 Mar 2024 23:35:27 GMT
etag: "735b8e4d814a21a5d376c1786741bfbe"
x-amz-server-side-encryption: AES256
x-amz-version-id: x58_oHo8dSvCSdZmWS_2NMcAlVQf91LU
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Fri, 28 Mar 2025 22:02:40 GMT
date: Thu, 28 Mar 2024 22:02:40 GMT
content-length: 175341
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/static/css/main.1b609023.css | 95.101.10.131 | 200 OK | 768 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/static/css/main.1b609023.css IP95.101.10.131:443 ASN#20940 Akamai International B.V.
Requested byhttps://globalcareerlab.com/lander?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typeASCII text, with very long lines (2736) Hash71209b0bd8f6138dafd143fcfa77c6b4 bfcdfa56a30d2d730cd7583851d8101a2bedbcd9 fe56d067a03c4c2dc4c325d1caa4e16e1c0b4b2348b4995ee01b6d8c96cb3322
GET /parking-lander/static/css/main.1b609023.css HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://globalcareerlab.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: lUkHcqUOs04WHGK+pHtn+A+ae/hsUwalGTP7jJ6LlxFD6lqFi826I6xu7v41diXSoc5QGKbNIDY=
x-amz-request-id: 6ETGKS00QDM9KAE0
last-modified: Mon, 11 Mar 2024 23:35:34 GMT
etag: "71209b0bd8f6138dafd143fcfa77c6b4"
x-amz-server-side-encryption: AES256
x-amz-version-id: L6wfNQd5dHXwr5DtiIYm8WepeUJHrD3.
accept-ranges: bytes
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Fri, 28 Mar 2025 22:02:40 GMT
date: Thu, 28 Mar 2024 22:02:40 GMT
content-length: 768
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/px.js?ch=1&abp=1 | 95.101.10.131 | 200 OK | 20 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/px.js?ch=1&abp=1 IP95.101.10.131:443 ASN#20940 Akamai International B.V.
Requested byhttps://globalcareerlab.com/lander?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash3970e82605c7d109bb348fc94e9eecc0 e03849ea786b9f7b28a35c17949e85a93eb1cff1 f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /parking-lander/px.js?ch=1&abp=1 HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://globalcareerlab.com/
Origin: https://globalcareerlab.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: bQQ2BJg+r8PuN+cPcf502/1IxltadvxnCHSk2TDGU5z36y7x4OYXc2NdLIMuOW6xhIzSV5k9z+o=
x-amz-request-id: FBDE09TCBG9Y0AE5
last-modified: Mon, 11 Mar 2024 23:35:36 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-server-side-encryption: AES256
x-amz-version-id: vaAyx1Qe.KZgm0y6p0O8SghyHT7xJ8Oh
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 20
cache-control: max-age=31536000
expires: Fri, 28 Mar 2025 22:02:40 GMT
date: Thu, 28 Mar 2024 22:02:40 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/px.js?ch=2&abp=1 | 95.101.10.131 | 200 OK | 20 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/px.js?ch=2&abp=1 IP95.101.10.131:443 ASN#20940 Akamai International B.V.
Requested byhttps://globalcareerlab.com/lander?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash3970e82605c7d109bb348fc94e9eecc0 e03849ea786b9f7b28a35c17949e85a93eb1cff1 f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /parking-lander/px.js?ch=2&abp=1 HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://globalcareerlab.com/
Origin: https://globalcareerlab.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: qhzWmIzu7egwJLQTIQRkbLUl4qo1hcD7fmzqRmbVM36q/ZqjtcsTl/n5EWIskrDDNcYwuCOnL3s=
x-amz-request-id: 1E55V4YVVEG8N6B3
last-modified: Mon, 11 Mar 2024 23:35:36 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-server-side-encryption: AES256
x-amz-version-id: vaAyx1Qe.KZgm0y6p0O8SghyHT7xJ8Oh
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Fri, 28 Mar 2025 22:02:40 GMT
date: Thu, 28 Mar 2024 22:02:40 GMT
content-length: 20
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.google.com/adsense/domains/caf.js?abp=1 | 142.250.74.164 | 200 OK | 63 kB |
URL GET HTTP/2www.google.com/adsense/domains/caf.js?abp=1 IP142.250.74.164:443
Requested byhttps://globalcareerlab.com/lander?sessionid=p0nw4nnzim3cDie8A0NngfIemE0suhkdJsDeWGAXaibcvSDgzNfHg11tKcYhJxT7kdm1o4Iv6ALQff523GzTnpgpK5EhnYmmOAZLX85ksTeFg4H9GLFsBad7gfEGyxNTqP&sslchannel=true CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com Fingerprint32:A3:19:7A:6B:D5:C7:5E:CA:7C:C8:08:79:14:56:FD:FC:3E:06:F0 ValidityMon, 26 Feb 2024 08:18:59 GMT - Mon, 20 May 2024 08:18:58 GMT
File typegzip compressed data, max compression Hashc79dcfa8332525bfec04df8e9135a70a e793c04378cc7c3b5dd369f92ccb342836c071ac ebe6f485a9ed0a7bd108a91b467b13860c5ad872646d811a9e19282e89b17a23
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://globalcareerlab.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 28 Mar 2024 22:02:40 GMT
expires: Thu, 28 Mar 2024 22:02:40 GMT
cache-control: private, max-age=3600
etag: "1403097391178795343"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|