Report - 12kbps.xyz/repo/vir/others/windowspolicepro.exe

Report Overview

URL

12kbps.xyz/repo/vir/others/windowspolicepro.exe
IP

81.171.28.43

ASN

#60781 LeaseWeb Netherlands B.V.
Submitted

2023-05-06T09:12:44Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

4
Threat Detection Systems

0

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
12kbps.xyz (3)	unknown	2017-12-23 16:29:12	2023-05-05 10:15:27	1973	1497	81.171.28.43
ww1.12kbps.xyz (7)	unknown	2021-02-12 03:29:23	2023-05-05 10:21:04	2966	28088	199.59.243.223
ocsp.pki.goog (5)	175	2018-07-01 08:43:07	2023-05-05 05:09:12	1665	3499	142.250.74.131
www.google.com (5)	7	2015-05-10 13:11:19	2023-05-05 09:39:47	3425	302543	142.250.74.164
afs.googleusercontent.com (2)	12123	2013-05-06 21:11:00	2023-05-05 05:10:39	981	2094	142.250.74.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-06T09:12:29Z	medium	81.171.28.43	Client IP	ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)
2023-05-06T09:12:29Z	medium	81.171.28.43	Client IP	ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)
2023-05-06T09:12:29Z	medium	81.171.28.43	Client IP	ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)
2023-05-06T09:12:29Z	medium	81.171.28.43	Client IP	ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

HTTP Transactions (22)

	URL	IP	Response	Size
	12kbps.xyz/repo/vir/others/windowspolicepro.exe	81.171.28.43		508
Search urlquery URL 12kbps.xyz/repo/vir/others/windowspolicepro.exe DOMAIN 12kbps.xyz FQDN 12kbps.xyz IP 81.171.28.43 Hash ce215ddc2b61f6c58d7734b65ff09093 External sources Mnemonic PDNS FQDN 12kbps.xyz DOMAIN 12kbps.xyz IP 81.171.28.43 VirusTotal HASH 8082ec22c1f32628ef0c8ddd4167c6480783f47c FQDN 12kbps.xyz DOMAIN 12kbps.xyz IP 81.171.28.43 crt.sh FQDN 12kbps.xyz DOMAIN 12kbps.xyz URL 12kbps.xyz/repo/vir/others/windowspolicepro.exe IP 81.171.28.43:0 ASN #60781 LeaseWeb Netherlands B.V. Magic HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (508), with no line terminators Size 508 Hash ce215ddc2b61f6c58d7734b65ff09093 8082ec22c1f32628ef0c8ddd4167c6480783f47c 6825ddb7c4e114866191e465f151ed66faf63c0ca9293ae38c956d0499ce3bb8 HTTP Headers `GET /repo/vir/others/windowspolicepro.exe HTTP/1.1 Host: 12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile cache-control: max-age=0, private, must-revalidate content-length: 508 content-type: text/html; charset=utf-8 date: Sat, 06 May 2023 09:12:27 GMT server: Cowboy set-cookie: sid=1f8cef2c-ebee-11ed-a273-fe69ddb61d7c; path=/; domain=.12kbps.xyz; expires=Thu, 24 May 2091 12:26:35 GMT; max-age=2147483647; secure; HttpOnly X-Firefox-Spdy: h2`

	12kbps.xyz/favicon.ico	81.171.28.43		9
Search urlquery URL 12kbps.xyz/favicon.ico DOMAIN 12kbps.xyz FQDN 12kbps.xyz IP 81.171.28.43 Hash d8f4a1993546cc4b850cde3599e27aec External sources Mnemonic PDNS FQDN 12kbps.xyz DOMAIN 12kbps.xyz IP 81.171.28.43 VirusTotal HASH 094b763b4cfcc0b05e5d040581cd513c3ca08067 FQDN 12kbps.xyz DOMAIN 12kbps.xyz IP 81.171.28.43 crt.sh FQDN 12kbps.xyz DOMAIN 12kbps.xyz URL 12kbps.xyz/favicon.ico IP 81.171.28.43:0 ASN #60781 LeaseWeb Netherlands B.V. Magic ASCII text, with no line terminators Size 9 Hash d8f4a1993546cc4b850cde3599e27aec 094b763b4cfcc0b05e5d040581cd513c3ca08067 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: 12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://12kbps.xyz/repo/vir/others/windowspolicepro.exe Cookie: sid=1f8cef2c-ebee-11ed-a273-fe69ddb61d7c Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found cache-control: max-age=0, private, must-revalidate content-length: 9 date: Sat, 06 May 2023 09:12:28 GMT server: Cowboy X-Firefox-Spdy: h2`

	12kbps.xyz/repo/vir/others/windowspolicepro.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4MzM3MTU0OCwiaWF0IjoxNjgzMzY0MzQ4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGU4NXQ1a3U3cWFqMnZvdm80NGRrbW4iLCJuYmYiOjE2ODMzNjQzNDgsInRzIjoxNjgzMzY0MzQ4MjQ5MDMxfQ.vtYNKdxEkyAOkk-8sG4e__7cYWZnpcqjoCFsCIiZ_XI&sid=1f8cef2c-ebee-11ed-a273-fe69ddb61d7c	81.171.28.43	302 Found	11
Search urlquery URL 12kbps.xyz/repo/vir/others/windowspolicepro.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4MzM3MTU0OCwiaWF0IjoxNjgzMzY0MzQ4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGU4NXQ1a3U3cWFqMnZvdm80NGRrbW4iLCJuYmYiOjE2ODMzNjQzNDgsInRzIjoxNjgzMzY0MzQ4MjQ5MDMxfQ.vtYNKdxEkyAOkk-8sG4e__7cYWZnpcqjoCFsCIiZ_XI&sid=1f8cef2c-ebee-11ed-a273-fe69ddb61d7c DOMAIN 12kbps.xyz FQDN 12kbps.xyz IP 81.171.28.43 Hash 32682312d17c7cbf18e73594f5570319 External sources Mnemonic PDNS FQDN 12kbps.xyz DOMAIN 12kbps.xyz IP 81.171.28.43 VirusTotal HASH 60e22121bdd0bc71cdb2bae2a3aa577006b2eae9 FQDN 12kbps.xyz DOMAIN 12kbps.xyz IP 81.171.28.43 crt.sh FQDN 12kbps.xyz DOMAIN 12kbps.xyz Fingerprint 57:2F:EA:2A:B4:F2:B5:81:DF:F6:89:AD:17:A9:C6:F0:47:9B:93:D9 URL User Request GET HTTP/2 12kbps.xyz/repo/vir/others/windowspolicepro.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4MzM3MTU0OCwiaWF0IjoxNjgzMzY0MzQ4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGU4NXQ1a3U3cWFqMnZvdm80NGRrbW4iLCJuYmYiOjE2ODMzNjQzNDgsInRzIjoxNjgzMzY0MzQ4MjQ5MDMxfQ.vtYNKdxEkyAOkk-8sG4e__7cYWZnpcqjoCFsCIiZ_XI&sid=1f8cef2c-ebee-11ed-a273-fe69ddb61d7c IP 81.171.28.43:443 ASN #60781 LeaseWeb Netherlands B.V. Certificate IssuerLet's Encrypt Subject12kbps.xyz Fingerprint57:2F:EA:2A:B4:F2:B5:81:DF:F6:89:AD:17:A9:C6:F0:47:9B:93:D9 ValidityThu, 04 May 2023 13:56:23 GMT - Wed, 02 Aug 2023 13:56:22 GMT Magic ASCII text, with no line terminators Size 11 Hash 32682312d17c7cbf18e73594f5570319 60e22121bdd0bc71cdb2bae2a3aa577006b2eae9 e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47 HTTP Headers GET /repo/vir/others/windowspolicepro.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY4MzM3MTU0OCwiaWF0IjoxNjgzMzY0MzQ4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydGU4NXQ1a3U3cWFqMnZvdm80NGRrbW4iLCJuYmYiOjE2ODMzNjQzNDgsInRzIjoxNjgzMzY0MzQ4MjQ5MDMxfQ.vtYNKdxEkyAOkk-8sG4e__7cYWZnpcqjoCFsCIiZ_XI&sid=1f8cef2c-ebee-11ed-a273-fe69ddb61d7c HTTP/1.1 Host: 12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://12kbps.xyz/repo/vir/others/windowspolicepro.exe Cookie: sid=1f8cef2c-ebee-11ed-a273-fe69ddb61d7c Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 302 Found cache-control: max-age=0, private, must-revalidate content-length: 11 date: Sat, 06 May 2023 09:12:28 GMT location: http://ww1.12kbps.xyz server: Cowboy set-cookie: sid=1f8cef2c-ebee-11ed-a273-fe69ddb61d7c; path=/; domain=.12kbps.xyz; expires=Thu, 24 May 2091 12:26:36 GMT; max-age=2147483647; secure; HttpOnly X-Firefox-Spdy: h2`

	ww1.12kbps.xyz/	199.59.243.223	200 OK	663
Search urlquery URL ww1.12kbps.xyz/ DOMAIN 12kbps.xyz FQDN ww1.12kbps.xyz IP 199.59.243.223 Hash da1c4c376ff61b9b929b1c1d61b9357c External sources Mnemonic PDNS FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 VirusTotal HASH a87e54b841b1710f85c6488f20cf3298397c891c FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 crt.sh FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz URL User Request GET HTTP/1.1 ww1.12kbps.xyz/ IP 199.59.243.223:80 ASN #16509 AMAZON-02 Magic HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (847), with no line terminators Size 663 Hash da1c4c376ff61b9b929b1c1d61b9357c a87e54b841b1710f85c6488f20cf3298397c891c df5313dfc9753383ca19595ddc913d4392e62d67e2d96409f543b32086136781 HTTP Headers `GET / HTTP/1.1 Host: ww1.12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Sat, 06 May 2023 09:12:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce; expires=Sat, 06-May-2023 09:27:29 GMT; Max-Age=900; path=/; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ieCswDQMrENCsO2lWe8mcKFbtY70u2z73ujRYMH1hLUuDpXPugrYVJIW6VBAODH+Iq5dKcuedK2L7OIHT0rHEQ== Accept-CH: sec-ch-prefers-color-scheme Critical-CH: sec-ch-prefers-color-scheme Vary: sec-ch-prefers-color-scheme Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip

	ww1.12kbps.xyz/js/parking.2.104.9.js	199.59.243.223	200 OK	22161
Search urlquery URL ww1.12kbps.xyz/js/parking.2.104.9.js DOMAIN 12kbps.xyz FQDN ww1.12kbps.xyz IP 199.59.243.223 Hash 4373b6882998614499e168219b1e44ca External sources Mnemonic PDNS FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 VirusTotal HASH 6591de3f6d18020cc8de3549f9a87115b44bea8b FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 crt.sh FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz URL GET HTTP/1.1 ww1.12kbps.xyz/js/parking.2.104.9.js IP 199.59.243.223:80 ASN #16509 AMAZON-02 Requested by http://ww1.12kbps.xyz/ Magic HTML document, ASCII text, with very long lines (65536), with no line terminators Size 22161 Hash 4373b6882998614499e168219b1e44ca 6591de3f6d18020cc8de3549f9a87115b44bea8b e93edbb073fa2a6feedcdcec64b6d6b2f9e85b481f11ad8f5a66facac76cb101 HTTP Headers `GET /js/parking.2.104.9.js HTTP/1.1 Host: ww1.12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ww1.12kbps.xyz/ Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Date: Sat, 06 May 2023 09:12:29 GMT Content-Type: application/javascript; charset=utf-8 Last-Modified: Wed, 03 May 2023 19:31:19 GMT Transfer-Encoding: chunked Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip`

	ww1.12kbps.xyz/_fd	199.59.243.223	200 OK	2021
Search urlquery URL ww1.12kbps.xyz/_fd DOMAIN 12kbps.xyz FQDN ww1.12kbps.xyz IP 199.59.243.223 Hash 4f65ce1280cb677bd2aa1ec3b9601561 External sources Mnemonic PDNS FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 VirusTotal HASH c9862b5d0083e477707cb87f4d2364ae3f6f5b41 FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 crt.sh FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz URL POST HTTP/1.1 ww1.12kbps.xyz/_fd IP 199.59.243.223:80 ASN #16509 AMAZON-02 Requested by http://ww1.12kbps.xyz/ Magic ASCII text, with very long lines (3941), with no line terminators Size 2021 Hash 4f65ce1280cb677bd2aa1ec3b9601561 c9862b5d0083e477707cb87f4d2364ae3f6f5b41 a42dedfc76a9a6fa3a42a08a27f52bbfa818163856e251fee79428fc38d5c7c5 HTTP Headers `POST /_fd HTTP/1.1 Host: ww1.12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://ww1.12kbps.xyz/ Content-Type: application/json Origin: http://ww1.12kbps.xyz DNT: 1 Connection: keep-alive Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce Pragma: no-cache Cache-Control: no-cache Content-Length: 0` `HTTP/1.1 200 OK Server: openresty Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Date: Sat, 06 May 2023 09:12:30 GMT X-Version: 2.104.9 Set-Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce; expires=Sat, 06-May-2023 09:27:30 GMT; Max-Age=900; path=/; httponly Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip`

	ww1.12kbps.xyz/px.gif?ch=1&rn=9.9911520609606	199.59.243.223	200 OK	42
Search urlquery URL ww1.12kbps.xyz/px.gif?ch=1&rn=9.9911520609606 DOMAIN 12kbps.xyz FQDN ww1.12kbps.xyz IP 199.59.243.223 Hash d89746888da2d9510b64a9f031eaecd5 External sources Mnemonic PDNS FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 VirusTotal HASH d5fceb6532643d0d84ffe09c40c481ecdf59e15a FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 crt.sh FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz URL GET HTTP/1.1 ww1.12kbps.xyz/px.gif?ch=1&rn=9.9911520609606 IP 199.59.243.223:80 ASN #16509 AMAZON-02 Requested by http://ww1.12kbps.xyz/ Magic GIF image data, version 89a, 1 x 1\012- data Size 42 Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers `GET /px.gif?ch=1&rn=9.9911520609606 HTTP/1.1 Host: ww1.12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ww1.12kbps.xyz/ Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Date: Sat, 06 May 2023 09:12:30 GMT Content-Type: image/gif Content-Length: 42 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Accept-Ranges: bytes`

	ww1.12kbps.xyz/px.gif?ch=2&rn=9.9911520609606	199.59.243.223	200 OK	42
Search urlquery URL ww1.12kbps.xyz/px.gif?ch=2&rn=9.9911520609606 DOMAIN 12kbps.xyz FQDN ww1.12kbps.xyz IP 199.59.243.223 Hash d89746888da2d9510b64a9f031eaecd5 External sources Mnemonic PDNS FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 VirusTotal HASH d5fceb6532643d0d84ffe09c40c481ecdf59e15a FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 crt.sh FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz URL GET HTTP/1.1 ww1.12kbps.xyz/px.gif?ch=2&rn=9.9911520609606 IP 199.59.243.223:80 ASN #16509 AMAZON-02 Requested by http://ww1.12kbps.xyz/ Magic GIF image data, version 89a, 1 x 1\012- data Size 42 Hash d89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 HTTP Headers `GET /px.gif?ch=2&rn=9.9911520609606 HTTP/1.1 Host: ww1.12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ww1.12kbps.xyz/ Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Date: Sat, 06 May 2023 09:12:30 GMT Content-Type: image/gif Content-Length: 42 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Accept-Ranges: bytes`

	ocsp.pki.goog/gts1c3	142.250.74.131		471
Search urlquery URL ocsp.pki.goog/gts1c3 DOMAIN pki.goog FQDN ocsp.pki.goog IP 142.250.74.131 Hash 02ba75903f02c48b30395328fff9927e External sources Mnemonic PDNS FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 VirusTotal HASH 43f817f355059ed03490ef1bab8ff0deffbfe744 FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 crt.sh FQDN ocsp.pki.goog DOMAIN pki.goog URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE Magic data Size 471 Hash 02ba75903f02c48b30395328fff9927e 43f817f355059ed03490ef1bab8ff0deffbfe744 53a5ffd09f760367667dd07ef2d98936e2e49d616ed75fcac4ccf1182c89ca0e HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 06 May 2023 09:12:30 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ww1.12kbps.xyz/favicon.ico	199.59.243.223	200 OK	0
Search urlquery URL ww1.12kbps.xyz/favicon.ico DOMAIN 12kbps.xyz FQDN ww1.12kbps.xyz IP 199.59.243.223 Hash d41d8cd98f00b204e9800998ecf8427e External sources Mnemonic PDNS FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 VirusTotal HASH da39a3ee5e6b4b0d3255bfef95601890afd80709 FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 crt.sh FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz URL GET HTTP/1.1 ww1.12kbps.xyz/favicon.ico IP 199.59.243.223:80 ASN #16509 AMAZON-02 Requested by http://ww1.12kbps.xyz/ Magic Size 0 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: ww1.12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ww1.12kbps.xyz/ Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Date: Sat, 06 May 2023 09:12:30 GMT Content-Type: image/x-icon Content-Length: 0 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive ETag: "61424bb6-0" x-backend-server: ip-10-201-16-158.ec2.internal Accept-Ranges: bytes`

	ocsp.pki.goog/gts1c3	142.250.74.131		472
Search urlquery URL ocsp.pki.goog/gts1c3 DOMAIN pki.goog FQDN ocsp.pki.goog IP 142.250.74.131 Hash bf34384a7fd9e62b9045178ff81864df External sources Mnemonic PDNS FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 VirusTotal HASH 732744c22cd182dac8ab80666ef2d8985a47d3a9 FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 crt.sh FQDN ocsp.pki.goog DOMAIN pki.goog URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE Magic data Size 472 Hash bf34384a7fd9e62b9045178ff81864df 732744c22cd182dac8ab80666ef2d8985a47d3a9 89f580bee129d929f610dcbb61af775e59ebd60acf584cf274346ecf638816f5 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 06 May 2023 09:12:30 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol130%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol309%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol436&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.12kbps.xyz%3Fcaf%26&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301140%2C17301144%2C17301146&format=r3&nocache=6261683364351934&num=0&output=afd_ads&domain_name=ww1.12kbps.xyz&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1683364351936&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=528505921&uio=-&cont=rs&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fww1.12kbps.xyz%2F&adbw=master-1%3A1264	142.250.74.164	200 OK	2101
Search urlquery URL www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol130%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol309%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol436&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.12kbps.xyz%3Fcaf%26&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301140%2C17301144%2C17301146&format=r3&nocache=6261683364351934&num=0&output=afd_ads&domain_name=ww1.12kbps.xyz&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1683364351936&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=528505921&uio=-&cont=rs&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fww1.12kbps.xyz%2F&adbw=master-1%3A1264 DOMAIN google.com FQDN www.google.com IP 142.250.74.164 Hash d68a7fb503e5c084e3b7e29fa332471d External sources Mnemonic PDNS FQDN www.google.com DOMAIN google.com IP 142.250.74.164 VirusTotal HASH e538662347b01973d508f25de763eadae6e44af5 FQDN www.google.com DOMAIN google.com IP 142.250.74.164 crt.sh FQDN www.google.com DOMAIN google.com Fingerprint A3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5 URL GET HTTP/3 www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol130%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol309%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol436&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.12kbps.xyz%3Fcaf%26&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301140%2C17301144%2C17301146&format=r3&nocache=6261683364351934&num=0&output=afd_ads&domain_name=ww1.12kbps.xyz&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1683364351936&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=528505921&uio=-&cont=rs&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fww1.12kbps.xyz%2F&adbw=master-1%3A1264 IP 142.250.74.164:443 ASN #15169 GOOGLE Requested by http://ww1.12kbps.xyz/ Certificate IssuerGoogle Trust Services LLC Subject.google.com FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5 ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT Magic HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5402) Size 2101 Hash d68a7fb503e5c084e3b7e29fa332471d e538662347b01973d508f25de763eadae6e44af5 245af9583bdc3d08c4dcd1e343932579257ad8e0325ba53440f6a2fe0bd737c8 HTTP Headers GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol130%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol309%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol436&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.12kbps.xyz%3Fcaf%26&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301140%2C17301144%2C17301146&format=r3&nocache=6261683364351934&num=0&output=afd_ads&domain_name=ww1.12kbps.xyz&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1683364351936&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=528505921&uio=-&cont=rs&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fww1.12kbps.xyz%2F&adbw=master-1%3A1264 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://ww1.12kbps.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK content-type: text/html; charset=UTF-8 content-disposition: inline date: Sat, 06 May 2023 09:12:30 GMT expires: Sat, 06 May 2023 09:12:30 GMT cache-control: private, max-age=3600 content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-cMFqffeXwnEV1VLmu2t8Zg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other cross-origin-opener-policy: same-origin-allow-popups; report-to="gws" report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} content-encoding: br server: gws content-length: 2101 x-xss-protection: 0 set-cookie: CONSENT=PENDING+744; expires=Mon, 05-May-2025 09:12:30 GMT; path=/; domain=.google.com; Secure p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	ocsp.pki.goog/gts1c3	142.250.74.131		472
Search urlquery URL ocsp.pki.goog/gts1c3 DOMAIN pki.goog FQDN ocsp.pki.goog IP 142.250.74.131 Hash 83dad3af2b1ee0e4ce48cc6b69d62a79 External sources Mnemonic PDNS FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 VirusTotal HASH df5b55e2b188311fc398f0e7d08e34a924a9e9c2 FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 crt.sh FQDN ocsp.pki.goog DOMAIN pki.goog URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE Magic data Size 472 Hash 83dad3af2b1ee0e4ce48cc6b69d62a79 df5b55e2b188311fc398f0e7d08e34a924a9e9c2 5f89aa03d3930f0afe5e5bce6e90473130d26ff85a49e2e97d1c73504debca9e HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 06 May 2023 09:12:30 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b	142.250.74.97	200 OK	174
Search urlquery URL afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b DOMAIN googleusercontent.com FQDN afs.googleusercontent.com IP 142.250.74.97 Hash 76243f91f45c199f29a2f9764e77fa55 External sources Mnemonic PDNS FQDN afs.googleusercontent.com DOMAIN googleusercontent.com IP 142.250.74.97 VirusTotal HASH b1ed51f71738d78aac5092ac24184c51dd85bd6a FQDN afs.googleusercontent.com DOMAIN googleusercontent.com IP 142.250.74.97 crt.sh FQDN afs.googleusercontent.com DOMAIN googleusercontent.com Fingerprint 5B:7C:CC:9B:35:65:AF:5C:4A:0A:CA:A9:D5:41:DA:66:86:43:19:CD URL GET HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b IP 142.250.74.97:443 ASN #15169 GOOGLE Requested by https://www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol130%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol309%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol436&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.12kbps.xyz%3Fcaf%26&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301140%2C17301144%2C17301146&format=r3&nocache=6261683364351934&num=0&output=afd_ads&domain_name=ww1.12kbps.xyz&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1683364351936&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=528505921&uio=-&cont=rs&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fww1.12kbps.xyz%2F&adbw=master-1%3A1264 Certificate IssuerGoogle Trust Services LLC Subject.googleusercontent.com Fingerprint5B:7C:CC:9B:35:65:AF:5C:4A:0A:CA:A9:D5:41:DA:66:86:43:19:CD ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT Magic SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators Size 174 Hash 76243f91f45c199f29a2f9764e77fa55 b1ed51f71738d78aac5092ac24184c51dd85bd6a 428f3f236ea430d0bd41a7766888b04a7445773ee4be7597944be1f53327ec96 HTTP Headers `GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1 Host: afs.googleusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.google.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers" report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} content-length: 174 x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 date: Sat, 06 May 2023 06:00:13 GMT expires: Sun, 07 May 2023 05:00:13 GMT cache-control: public, max-age=82800 age: 11537 last-modified: Thu, 22 Oct 2020 21:45:00 GMT content-type: image/svg+xml vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131		472
Search urlquery URL ocsp.pki.goog/gts1c3 DOMAIN pki.goog FQDN ocsp.pki.goog IP 142.250.74.131 Hash 83dad3af2b1ee0e4ce48cc6b69d62a79 External sources Mnemonic PDNS FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 VirusTotal HASH df5b55e2b188311fc398f0e7d08e34a924a9e9c2 FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 crt.sh FQDN ocsp.pki.goog DOMAIN pki.goog URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE Magic data Size 472 Hash 83dad3af2b1ee0e4ce48cc6b69d62a79 df5b55e2b188311fc398f0e7d08e34a924a9e9c2 5f89aa03d3930f0afe5e5bce6e90473130d26ff85a49e2e97d1c73504debca9e HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 06 May 2023 09:12:30 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff	142.250.74.97	200 OK	278
Search urlquery URL afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff DOMAIN googleusercontent.com FQDN afs.googleusercontent.com IP 142.250.74.97 Hash bb7fc36f627255dd4783f849dca0932e External sources Mnemonic PDNS FQDN afs.googleusercontent.com DOMAIN googleusercontent.com IP 142.250.74.97 VirusTotal HASH 80e89ef8f3c2c8ee982523757fce214ea7323a69 FQDN afs.googleusercontent.com DOMAIN googleusercontent.com IP 142.250.74.97 crt.sh FQDN afs.googleusercontent.com DOMAIN googleusercontent.com Fingerprint 5B:7C:CC:9B:35:65:AF:5C:4A:0A:CA:A9:D5:41:DA:66:86:43:19:CD URL GET HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff IP 142.250.74.97:443 ASN #15169 GOOGLE Requested by https://www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol130%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol309%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol436&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.12kbps.xyz%3Fcaf%26&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301140%2C17301144%2C17301146&format=r3&nocache=6261683364351934&num=0&output=afd_ads&domain_name=ww1.12kbps.xyz&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1683364351936&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=528505921&uio=-&cont=rs&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fww1.12kbps.xyz%2F&adbw=master-1%3A1264 Certificate IssuerGoogle Trust Services LLC Subject.googleusercontent.com Fingerprint5B:7C:CC:9B:35:65:AF:5C:4A:0A:CA:A9:D5:41:DA:66:86:43:19:CD ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT Magic SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (306) Size 278 Hash bb7fc36f627255dd4783f849dca0932e 80e89ef8f3c2c8ee982523757fce214ea7323a69 735f48c2876099e6a731c65fc46ec1ec133c316e0997d04eb0ee246741bee647 HTTP Headers `GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.google.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers" report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} content-length: 278 x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 date: Fri, 05 May 2023 23:05:24 GMT expires: Sat, 06 May 2023 22:05:24 GMT cache-control: public, max-age=82800 age: 36426 last-modified: Tue, 09 Feb 2021 14:15:00 GMT content-type: image/svg+xml vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131		472
Search urlquery URL ocsp.pki.goog/gts1c3 DOMAIN pki.goog FQDN ocsp.pki.goog IP 142.250.74.131 Hash 83dad3af2b1ee0e4ce48cc6b69d62a79 External sources Mnemonic PDNS FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 VirusTotal HASH df5b55e2b188311fc398f0e7d08e34a924a9e9c2 FQDN ocsp.pki.goog DOMAIN pki.goog IP 142.250.74.131 crt.sh FQDN ocsp.pki.goog DOMAIN pki.goog URL ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE Magic data Size 472 Hash 83dad3af2b1ee0e4ce48cc6b69d62a79 df5b55e2b188311fc398f0e7d08e34a924a9e9c2 5f89aa03d3930f0afe5e5bce6e90473130d26ff85a49e2e97d1c73504debca9e HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 06 May 2023 09:12:30 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ww1.12kbps.xyz/_tr	199.59.243.223	200 OK	22
Search urlquery URL ww1.12kbps.xyz/_tr DOMAIN 12kbps.xyz FQDN ww1.12kbps.xyz IP 199.59.243.223 Hash 5cfde9b47de2d84bd26fc473632647c0 External sources Mnemonic PDNS FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 VirusTotal HASH fd53c70631b6068328be57daec71bd94bf004d41 FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz IP 199.59.243.223 crt.sh FQDN ww1.12kbps.xyz DOMAIN 12kbps.xyz URL POST HTTP/1.1 ww1.12kbps.xyz/_tr IP 199.59.243.223:80 ASN #16509 AMAZON-02 Requested by http://ww1.12kbps.xyz/ Magic ASCII text, with no line terminators Size 22 Hash 5cfde9b47de2d84bd26fc473632647c0 fd53c70631b6068328be57daec71bd94bf004d41 47fd05ef74fef5da03fa22483e63fc977cad8e026ae41dadbbcc3745907f306b HTTP Headers `POST /_tr HTTP/1.1 Host: ww1.12kbps.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://ww1.12kbps.xyz/ Content-Type: application/json Content-Length: 1557 Origin: http://ww1.12kbps.xyz DNT: 1 Connection: keep-alive Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Date: Sat, 06 May 2023 09:12:31 GMT X-Version: 2.104.9 Set-Cookie: parking_session=4b3b43f7-3f28-a3f8-7022-1a6bf1d266ce; expires=Sat, 06-May-2023 09:27:31 GMT; Max-Age=900; path=/; httponly Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip`

	www.google.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=pp13q8ano5d4&aqid=_hlWZJPOGdbXtwfnpa7IAQ&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=528505921&csala=7%7C0%7C306%7C49%7C232&lle=0&ifv=1&usr=1	142.250.74.164	204 No Content	0
Search urlquery URL www.google.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=pp13q8ano5d4&aqid=_hlWZJPOGdbXtwfnpa7IAQ&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=528505921&csala=7%7C0%7C306%7C49%7C232&lle=0&ifv=1&usr=1 DOMAIN google.com FQDN www.google.com IP 142.250.74.164 Hash d41d8cd98f00b204e9800998ecf8427e External sources Mnemonic PDNS FQDN www.google.com DOMAIN google.com IP 142.250.74.164 VirusTotal HASH da39a3ee5e6b4b0d3255bfef95601890afd80709 FQDN www.google.com DOMAIN google.com IP 142.250.74.164 crt.sh FQDN www.google.com DOMAIN google.com Fingerprint A3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5 URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=pp13q8ano5d4&aqid=_hlWZJPOGdbXtwfnpa7IAQ&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=528505921&csala=7%7C0%7C306%7C49%7C232&lle=0&ifv=1&usr=1 IP 142.250.74.164:443 ASN #15169 GOOGLE Requested by http://ww1.12kbps.xyz/ Certificate IssuerGoogle Trust Services LLC Subject.google.com FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5 ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT Magic Size 0 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=pp13q8ano5d4&aqid=_hlWZJPOGdbXtwfnpa7IAQ&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=528505921&csala=7%7C0%7C306%7C49%7C232&lle=0&ifv=1&usr=1 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://ww1.12kbps.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 204 No Content content-type: text/html; charset=UTF-8 content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-BuPZnkIxEXP9VZP4Prsj-w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other cross-origin-opener-policy: same-origin-allow-popups; report-to="gws" report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." date: Sat, 06 May 2023 09:12:32 GMT server: gws content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN set-cookie: NID=511=ov6dGqP-JQdbXrQ2-b_TP0KdehQnsapYvcB3IIRjpSq9QIQlWfgvloC7T6tqLoR2VPnUg_tSwekjLfi0lxXNMQcyW0sKPPV75S-gUNVPkykuG9bBf8-sGBx7jcK1vZajKU6f5of0Hw6Fplx88DOvyRdx6qr8AUoixSSoI9WZVD4; expires=Sun, 05-Nov-2023 09:12:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+756; expires=Mon, 05-May-2025 09:12:32 GMT; path=/; domain=.google.com; Secure alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	www.google.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=q2fsq6oo6vh3&aqid=_hlWZJPOGdbXtwfnpa7IAQ&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=528505921&csala=7%7C0%7C306%7C49%7C232&lle=0&ifv=1&usr=1	142.250.74.164	204 No Content	0
Search urlquery URL www.google.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=q2fsq6oo6vh3&aqid=_hlWZJPOGdbXtwfnpa7IAQ&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=528505921&csala=7%7C0%7C306%7C49%7C232&lle=0&ifv=1&usr=1 DOMAIN google.com FQDN www.google.com IP 142.250.74.164 Hash d41d8cd98f00b204e9800998ecf8427e External sources Mnemonic PDNS FQDN www.google.com DOMAIN google.com IP 142.250.74.164 VirusTotal HASH da39a3ee5e6b4b0d3255bfef95601890afd80709 FQDN www.google.com DOMAIN google.com IP 142.250.74.164 crt.sh FQDN www.google.com DOMAIN google.com Fingerprint A3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5 URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=q2fsq6oo6vh3&aqid=_hlWZJPOGdbXtwfnpa7IAQ&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=528505921&csala=7%7C0%7C306%7C49%7C232&lle=0&ifv=1&usr=1 IP 142.250.74.164:443 ASN #15169 GOOGLE Requested by http://ww1.12kbps.xyz/ Certificate IssuerGoogle Trust Services LLC Subject.google.com FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5 ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT Magic Size 0 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=q2fsq6oo6vh3&aqid=_hlWZJPOGdbXtwfnpa7IAQ&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=528505921&csala=7%7C0%7C306%7C49%7C232&lle=0&ifv=1&usr=1 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://ww1.12kbps.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 204 No Content content-type: text/html; charset=UTF-8 content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-PG43mOpYjn8u8QOFNjRhxw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other cross-origin-opener-policy: same-origin-allow-popups; report-to="gws" report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." date: Sat, 06 May 2023 09:12:32 GMT server: gws content-length: 0 x-xss-protection: 0 x-frame-options: SAMEORIGIN set-cookie: NID=511=tzZKz015_CPzC7GrB8VKVztm-RpDiEazxQLurgbUFO0dlb1tJeNEF92wYIHodw6QKuDfmnx0aRdvYRzTW9qK8D4bCtdJdmBhn-fs6IHWT3BBXz4lqnnAaAjBc713edeKnUmpAZMLakl0GStdrkOi-Dazz-6u2olcDcnbHpBufvY; expires=Sun, 05-Nov-2023 09:12:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+177; expires=Mon, 05-May-2025 09:12:32 GMT; path=/; domain=.google.com; Secure alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	www.google.com/adsense/domains/caf.js	142.250.74.164	200 OK	147910
Search urlquery URL www.google.com/adsense/domains/caf.js DOMAIN google.com FQDN www.google.com IP 142.250.74.164 Hash eb9274c7263234a5132d55fee18e88a3 External sources Mnemonic PDNS FQDN www.google.com DOMAIN google.com IP 142.250.74.164 VirusTotal HASH 4b91156eacd8b91f1c384e6a887e9598c90a36a8 FQDN www.google.com DOMAIN google.com IP 142.250.74.164 crt.sh FQDN www.google.com DOMAIN google.com Fingerprint 22:2A:81:06:18:D1:68:C5:1A:F7:E4:D9:FB:DF:C4:9B:E3:FD:BF:6E URL GET HTTP/2 www.google.com/adsense/domains/caf.js IP 142.250.74.164:443 ASN #15169 GOOGLE Requested by http://ww1.12kbps.xyz/ Certificate IssuerGoogle Trust Services LLC Subjectwww.google.com Fingerprint22:2A:81:06:18:D1:68:C5:1A:F7:E4:D9:FB:DF:C4:9B:E3:FD:BF:6E ValidityMon, 17 Apr 2023 08:26:19 GMT - Mon, 10 Jul 2023 08:26:18 GMT Magic ASCII text, with very long lines (2125) Size 147910 Hash eb9274c7263234a5132d55fee18e88a3 4b91156eacd8b91f1c384e6a887e9598c90a36a8 4ccbc9276cfecca91adf11c66602a4b71c701dd1a73ce0c6e6d56343ce6c9a28 HTTP Headers `GET /adsense/domains/caf.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://ww1.12kbps.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes vary: Accept-Encoding content-type: text/javascript; charset=UTF-8 content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="ads-afs-ui" report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} date: Sat, 06 May 2023 09:12:30 GMT expires: Sat, 06 May 2023 09:12:30 GMT cache-control: private, max-age=3600 etag: "924554934017509793" x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	www.google.com/adsense/domains/caf.js	142.250.74.164	200 OK	147812
Search urlquery URL www.google.com/adsense/domains/caf.js DOMAIN google.com FQDN www.google.com IP 142.250.74.164 Hash 2b81572eb26b5b487266c51af2ec4cec External sources Mnemonic PDNS FQDN www.google.com DOMAIN google.com IP 142.250.74.164 VirusTotal HASH 0c89d880d11700ea0efb853de51c6693f4e0e8df FQDN www.google.com DOMAIN google.com IP 142.250.74.164 crt.sh FQDN www.google.com DOMAIN google.com Fingerprint A3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5 URL GET HTTP/3 www.google.com/adsense/domains/caf.js IP 142.250.74.164:443 ASN #15169 GOOGLE Requested by https://www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol130%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol309%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol436&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww1.12kbps.xyz%3Fcaf%26&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301140%2C17301144%2C17301146&format=r3&nocache=6261683364351934&num=0&output=afd_ads&domain_name=ww1.12kbps.xyz&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1683364351936&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=528505921&uio=-&cont=rs&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fww1.12kbps.xyz%2F&adbw=master-1%3A1264 Certificate IssuerGoogle Trust Services LLC Subject.google.com FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5 ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT Magic ASCII text, with very long lines (2125) Size 147812 Hash 2b81572eb26b5b487266c51af2ec4cec 0c89d880d11700ea0efb853de51c6693f4e0e8df f5f58396b191db3de7b9981fc9e4f03d33a29697b7e8705449e064b4b8a2684d HTTP Headers `GET /adsense/domains/caf.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.google.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK accept-ranges: bytes vary: Accept-Encoding content-type: text/javascript; charset=UTF-8 content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="ads-afs-ui" report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} date: Sat, 06 May 2023 09:12:30 GMT expires: Sat, 06 May 2023 09:12:30 GMT cache-control: private, max-age=3600 etag: "7274119577584337245" x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

#1 JS:Script (size: 147812)

#2 JS:Script (size: 299)

#3 JS:Script (size: 68934)

#4 JS:Script (size: 147910)

#5 JS:Script (size: 6259)

HTTP Transactions (22)

URL

IP

ASN

Magic

Size

Hash

HTTP Headers

URL

IP

ASN

Magic

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

Magic

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

HTTP Headers

URL POST HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic