Report - casaqo03.blogspot.com/

Report Overview

Visitedpublic

2025-03-11 00:54:40

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
casaqo03.blogspot.com	unknown	unknown	No data	No data	925 B	71 kB	142.250.74.161
zoa.ath.cx	unknown	2001-05-08	2024-12-10	2024-12-23	487 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-03-11	medium	zoa.ath.cx	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	casaqo03.blogspot.com/	ScriptElement	428 B	2025-03-11	2025-03-29
URL casaqo03.blogspot.com/ IP / ASN 142.250.74.161 #15169 GOOGLE Introduced by ScriptElement Embedded false Resource Info First Seen 2025-03-11 Last Seen 2025-03-29 Times Seen 2 Size 428 B (428 bytes) MD5 a1f2817e5ea2725847f325a03365f734 SHA1 5477e786241a0df0dda949c0b033c5d120f0c0d0 SHA256 524a8ea5904b58cdd55007b48337a2345cc621997b7a0bb1f6e0b7ed31685660 Format Code Loading...

	casaqo03.blogspot.com/	ScriptElement	8.6 kB	2025-03-11	2025-03-11
URL casaqo03.blogspot.com/ IP / ASN 142.250.74.161 #15169 GOOGLE Introduced by ScriptElement Embedded true Resource Info First Seen 2025-03-11 Last Seen 2025-03-11 Times Seen 1 Size 8.6 kB (8556 bytes) MD5 7d05aad1432fda330874b57fbd89ebcc SHA1 f689283047729fb2ca948dc3656ba4d0b72c0adc SHA256 f8eb34a96322fbb9115f0398381ad51b572b4305b8969a48a528d0685de235ab Format Code Loading...

	casaqo03.blogspot.com/	Eval	0 B	0001-01-01	2025-08-02
URL casaqo03.blogspot.com/ IP / ASN 142.250.74.161 #15169 GOOGLE Introduced by Eval Embedded false Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5605996 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

	about:neterror?e=dnsNotFound&u=https%3A//zoa.ath.cx/ads.php%3F&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20zoa.ath.cx.	ScriptElement	111 B	2025-03-02	2025-08-02
URL about:neterror?e=dnsNotFound&u=https%3A//zoa.ath.cx/ads.php%3F&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20zoa.ath.cx. IP / ASN 0.0.0.0 #0 Introduced by ScriptElement Embedded true Resource Info First Seen 2025-03-02 Last Seen 2025-08-02 Times Seen 44714 Size 111 B (111 bytes) MD5 1fc778fb81973516c7df9ee7caca05e6 SHA1 7953945d192422cc2b1d8610d1b0fa1469bb5b7f SHA256 a09c624476cbe1462a188d07d0ce0a20e258a5e9b7890f44b3c8b68a0a3b26eb Format Code Loading...

	HASH	FROM	Size	First Seen	Last Seen
	c0f61a6dfc95f996e8e1002d8e84a7a8	DocumentWrite	471 B	2023-03-08	2025-03-29
Introduced by DocumentWrite First Seen 2023-03-08 Last Seen 2025-03-29 Times Seen 13 Size 471 B (471 bytes) MD5 c0f61a6dfc95f996e8e1002d8e84a7a8 SHA1 48cc16cdde32ab973c6e6ccf5b4c14e23fff0007 SHA256 cfe5a61c8a7d1f4970bbebb34feed2b16b236492956eab9c9c6d81b79c784299 Format Code Loading...

HTTP Transactions (3)

URL IP Response Size

GET casaqo03.blogspot.com/js/cookienotice.js

142.250.74.161

200 OK

6.5 kB

URL

casaqo03.blogspot.com/js/cookienotice.js

IP / ASN

142.250.74.161

#15169 GOOGLE

Requested byhttps://casaqo03.blogspot.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (6697), with no line terminators

First Seen2023-04-08

Last Seen2025-04-06

Times Seen2218

Size6.5 kB (6513 bytes)

MD558fae8c90b64305d219093c844ee9dea

SHA1f47708279a9fd6051380766656d03b4dbf450262

SHA2568e6cc498f85167b53b3e1b0937d0764b7c2753214e2365570481b750638a6f64

Certificate Info

IssuerGoogle Trust Services

Subjectmisc-sni.blogspot.com

FingerprintE0:F5:CA:17:E2:F4:44:81:53:EB:48:F0:DA:35:D0:F5:1E:F3:3B:0C

ValidityWed, 26 Feb 2025 15:33:37 GMT - Wed, 21 May 2025 15:33:36 GMT

HTTP Headers

GET /js/cookienotice.js HTTP/1.1
Host: casaqo03.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casaqo03.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Tue, 11 Mar 2025 00:54:21 GMT
expires: Tue, 18 Mar 2025 00:54:21 GMT
cache-control: public, max-age=604800
last-modified: Mon, 10 Mar 2025 20:55:49 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET zoa.ath.cx/ads.php?

0.0.0.0

0 B

URL

zoa.ath.cx/ads.php?

IP / ASN

0.0.0.0

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5605996

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed
urlquery	suspicious	Suspicious - DynDNS domain

HTTP Headers

GET /ads.php? HTTP/1.1
Host: zoa.ath.cx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET casaqo03.blogspot.com/

142.250.74.161

200 OK

63 kB

URL

casaqo03.blogspot.com/

IP / ASN

142.250.74.161

#15169 GOOGLE

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5605996

Size63 kB (63317 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerGoogle Trust Services

Subjectmisc-sni.blogspot.com

FingerprintE0:F5:CA:17:E2:F4:44:81:53:EB:48:F0:DA:35:D0:F5:1E:F3:3B:0C

ValidityWed, 26 Feb 2025 15:33:37 GMT - Wed, 21 May 2025 15:33:36 GMT

HTTP Headers

GET / HTTP/1.1
Host: casaqo03.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Tue, 11 Mar 2025 00:54:20 GMT
date: Tue, 11 Mar 2025 00:54:20 GMT
cache-control: private, max-age=0
last-modified: Thu, 29 Aug 2024 09:39:53 GMT
etag: W/"06250dc2aba62a71cab4d9f94ab1674c977bdb570df0d10e00c84373a04057ee"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 17996
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2