Report - alvsx.coreforger.top/

Report Overview

Visited public
2025-06-09 15:27:42
Tags
URL
alvsx.coreforger.top/
Finishing URL
ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
IP / ASN
103.224.182.208
#133618 Trellian Pty. Limited
Title
coreforger.top

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
alvsx.coreforger.top	unknown	2023-11-23	2023-12-07	2023-12-11	489 B	1.5 kB	103.224.182.208
ww25.alvsx.coreforger.top	unknown	2023-11-23	2025-06-09	2025-06-09	2.1 kB	44 kB	199.59.243.228
syndicatedsearch.goog	unknown	2023-04-14	2023-09-25	2025-06-04	3.3 kB	160 kB	142.250.178.110
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2025-06-04	1.0 kB	2.0 kB	142.250.74.33
www.google.com	7	1997-09-15	2015-05-10	2025-06-04	451 B	144 kB	142.250.74.68

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-06-09 15:27:21	medium	Client IP	199.59.243.228	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	syndicatedsearch.goog/adsense/domains/caf.js	ScriptElement	143 kB	2025-06-06	2025-06-10
Pretty URL syndicatedsearch.goog/adsense/domains/caf.js IP 142.250.178.110 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-06-06 14:56 Last Seen2025-06-10 14:55 Times Seen1900 Hash 51d38d8a11bdee566b78b4b18a1d6777 e48bd2f0b2b3011fe08597a2b57e28567a99a5cd 1010ffc412f467e92c324356d2773cb42fa8c0e930d3d27fbfb62f4940ce40f3 Loading...

	ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0	ScriptElement	445 B	2025-06-09	2025-06-09
Pretty URL ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0 IP 199.59.243.228 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-09 15:27 Last Seen2025-06-09 15:27 Times Seen1 Hash cf4f30b34293d2fc2808ef0b94527321 50d04cb8a4090678401e143665bfc0bd5f62f8fd a7adc0c89287edaa862f15b31aed87f041b37778c07724744f98e8245356cfd8 Loading...

	ww25.alvsx.coreforger.top/bIsKdWFJp.js	ScriptElement	36 kB	2025-05-27	2025-06-12
Pretty URL ww25.alvsx.coreforger.top/bIsKdWFJp.js IP 199.59.243.228 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-27 20:40 Last Seen2025-06-12 16:35 Times Seen2755 Hash ce365574c1dc94614b3e254709897c44 a3a12ca1d23945b6e7c9aa6b89c32a46b9387c4a 57a3706a99779e901f5fa192af684fbe96d7f0d16c2264f447904e58791252bb Loading...

	www.google.com/adsense/domains/caf.js?abp=1&bodis=true	ScriptElement	143 kB	2025-06-06	2025-06-10
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&bodis=true IP 142.250.74.68 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-06-06 14:54 Last Seen2025-06-10 15:09 Times Seen1939 Hash 0c12d599500cae6d08feb2adda22ce4a efe791909c852f40a8346177f40b4979691208eb 39e7dd999707b167c0a3e1830469e5cafb0c34626b8e7057044cc3e3344111bb Loading...

	syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol115%2Cpid-bodis-gcontrol461%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250610-0127-2179-befa-edaf74a9b1a0&max_radlink_len=50&type=3&swp=as-drid-2439451366973938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=521749482842684&num=0&output=afd_ads&domain_name=ww25.alvsx.coreforger.top&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749482842686&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=766755421&rurl=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fsubid1%3D20250610-0127-2179-befa-edaf74a9b1a0	ScriptElement	518 B	2025-06-09	2025-06-09
Pretty URL syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol115%2Cpid-bodis-gcontrol461%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250610-0127-2179-befa-edaf74a9b1a0&max_radlink_len=50&type=3&swp=as-drid-2439451366973938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=521749482842684&num=0&output=afd_ads&domain_name=ww25.alvsx.coreforger.top&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749482842686&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=766755421&rurl=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fsubid1%3D20250610-0127-2179-befa-edaf74a9b1a0 IP 142.250.178.110 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-09 15:27 Last Seen2025-06-09 15:27 Times Seen1 Hash 5832371eafc33fac9447d4f4d513c014 70b4f13695c314c1873e5da73af6ebf83cfdc4c0 95137a84c49552dacbda99a165708d78401d3c39704e3a28eeb553363ac40243 Loading...

HTTP Transactions (12)

URL IP Response Size

GET alvsx.coreforger.top/

103.224.182.208

302 Found

1.2 kB

URL User Request GET
alvsx.coreforger.top/
IP
103.224.182.208:443
ASN
#133618 Trellian Pty. Limited

Certificate
IssuerLet's Encrypt
Subjectbilutv.vip
Fingerprint6C:0F:75:E5:3B:87:CA:31:7D:52:38:88:E8:51:26:A9:0A:63:C9:1B
ValidityTue, 13 May 2025 03:44:25 GMT - Mon, 11 Aug 2025 03:44:24 GMT

File type

Size
1.2 kB (1194 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: alvsx.coreforger.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Mon, 09 Jun 2025 15:27:21 GMT
server: Apache
set-cookie: __tad=1749482841.1852337; expires=Thu, 07-Jun-2035 15:27:21 GMT; Max-Age=315360000
location: http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
content-length: 2
content-type: text/html; charset=UTF-8
connection: close

POST ww25.alvsx.coreforger.top/_fd?subid1=20250610-0127-2179-befa-edaf74a9b1a0

199.59.243.228

200 OK

5.2 kB

URL POST
ww25.alvsx.coreforger.top/_fd?subid1=20250610-0127-2179-befa-edaf74a9b1a0
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0

File type
ASCII text, with very long lines (5189), with no line terminators
Size
5.2 kB (5189 bytes)
Hash
b7f73d6309c7462d6cb7df905ee71393
4da72ad597449e0bf83d240a4bc8733a9b44649d
174dfb2e1519cff67b72fcde003bc269adc4c4d9a53605678c722f1b92817ddc

HTTP Headers

POST /_fd?subid1=20250610-0127-2179-befa-edaf74a9b1a0 HTTP/1.1
Host: ww25.alvsx.coreforger.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
Content-Type: application/json
Origin: http://ww25.alvsx.coreforger.top
DNT: 1
Connection: keep-alive
Cookie: parking_session=6a338831-b10c-44ae-b2f9-eed04de3477c
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
date: Mon, 09 Jun 2025 15:27:21 GMT
content-type: application/json; charset=utf-8
content-length: 5189
x-request-id: 45b8aaa2-9e7c-46b9-9d0f-74844cdc495a
set-cookie: parking_session=6a338831-b10c-44ae-b2f9-eed04de3477c; expires=Mon, 09 Jun 2025 15:42:22 GMT

GET syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol115%2Cpid-bodis-gcontrol461%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250610-0127-2179-befa-edaf74a9b1a0&max_radlink_len=50&type=3&swp=as-drid-2439451366973938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=521749482842684&num=0&output=afd_ads&domain_name=ww25.alvsx.coreforger.top&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749482842686&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=766755421&rurl=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fsubid1%3D20250610-0127-2179-befa-edaf74a9b1a0

142.250.178.110

200 OK

14 kB

URL GET
syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol115%2Cpid-bodis-gcontrol461%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250610-0127-2179-befa-edaf74a9b1a0&max_radlink_len=50&type=3&swp=as-drid-2439451366973938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=521749482842684&num=0&output=afd_ads&domain_name=ww25.alvsx.coreforger.top&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749482842686&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=766755421&rurl=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fsubid1%3D20250610-0127-2179-befa-edaf74a9b1a0
IP
142.250.178.110:443
ASN
#15169 GOOGLE

Requested by
http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintEB:8E:2F:9E:C4:6D:95:6E:65:C8:4E:08:A5:5E:E8:56:20:3C:53:83
ValidityMon, 12 May 2025 08:45:56 GMT - Mon, 04 Aug 2025 08:45:55 GMT

File type
HTML document, ASCII text, with very long lines (13204)
Size
14 kB (13667 bytes)
Hash
374fdafaa8b0d60b2d8920ac9c61ac65
219004194e2fa3674d586eebc72d678b6dd358d7
05bf60dec6384648905322d1a9f48a27f4bebcba159e16d6cd816d3a37dd28cb

HTTP Headers

GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol115%2Cpid-bodis-gcontrol461%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250610-0127-2179-befa-edaf74a9b1a0&max_radlink_len=50&type=3&swp=as-drid-2439451366973938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=521749482842684&num=0&output=afd_ads&domain_name=ww25.alvsx.coreforger.top&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749482842686&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=766755421&rurl=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fsubid1%3D20250610-0127-2179-befa-edaf74a9b1a0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.alvsx.coreforger.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Mon, 09 Jun 2025 15:27:22 GMT
expires: Mon, 09 Jun 2025 15:27:22 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-GLDJxP-FE_Y_QLGfgLyo-w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2690
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b

142.250.74.33

200 OK

200 B

URL GET
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
IP
142.250.74.33:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol115%2Cpid-bodis-gcontrol461%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250610-0127-2179-befa-edaf74a9b1a0&max_radlink_len=50&type=3&swp=as-drid-2439451366973938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=521749482842684&num=0&output=afd_ads&domain_name=ww25.alvsx.coreforger.top&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749482842686&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=766755421&rurl=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fsubid1%3D20250610-0127-2179-befa-edaf74a9b1a0
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
Fingerprint27:E5:A6:4D:A7:35:A0:F7:7B:EA:CD:2E:47:1A:64:DB:8B:2C:E6:06
ValidityMon, 12 May 2025 08:43:56 GMT - Mon, 04 Aug 2025 08:43:55 GMT

File type
SVG Scalable Vector Graphics image
Size
200 B (200 bytes)
Hash
d47125b2ba92be53dcff07ba322ce1de
e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28
5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 09 Jun 2025 14:36:25 GMT
expires: Tue, 10 Jun 2025 13:36:25 GMT
cache-control: public, max-age=82800
age: 3058
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST ww25.alvsx.coreforger.top/_tr

199.59.243.228

200 OK

2 B

URL POST
ww25.alvsx.coreforger.top/_tr
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0

File type
ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

HTTP Headers

POST /_tr HTTP/1.1
Host: ww25.alvsx.coreforger.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
Content-Type: application/json
Content-Length: 2037
Origin: http://ww25.alvsx.coreforger.top
DNT: 1
Connection: keep-alive
Cookie: parking_session=6a338831-b10c-44ae-b2f9-eed04de3477c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Mon, 09 Jun 2025 15:27:22 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-request-id: 74a0f7ec-9470-4805-a8e8-246e4a5408eb
set-cookie: parking_session=6a338831-b10c-44ae-b2f9-eed04de3477c; expires=Mon, 09 Jun 2025 15:42:23 GMT

GET syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=vun64wbzxehu&cd_fexp=72717107&aqid=Wv1GaJCCOYaFhcIP3PPEoQs&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=766755421&csala=17%7C0%7C469%7C133%7C14&lle=0&ifv=1&hpt=0

142.250.178.110

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=vun64wbzxehu&cd_fexp=72717107&aqid=Wv1GaJCCOYaFhcIP3PPEoQs&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=766755421&csala=17%7C0%7C469%7C133%7C14&lle=0&ifv=1&hpt=0
IP
142.250.178.110:443
ASN
#15169 GOOGLE

Requested by
http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintEB:8E:2F:9E:C4:6D:95:6E:65:C8:4E:08:A5:5E:E8:56:20:3C:53:83
ValidityMon, 12 May 2025 08:45:56 GMT - Mon, 04 Aug 2025 08:45:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=vun64wbzxehu&cd_fexp=72717107&aqid=Wv1GaJCCOYaFhcIP3PPEoQs&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=766755421&csala=17%7C0%7C469%7C133%7C14&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.alvsx.coreforger.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-5KPwW0zq4du5cFuv9cLBEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Mon, 09 Jun 2025 15:27:24 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0

199.59.243.228

200 OK

1.2 kB

URL User Request GET
ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (462)
Size
1.2 kB (1194 bytes)
Hash
0ee5dddd1668db9486bf6050f6dad663
c41178eb98c1c56f0f872e758123ccbabf4982b6
4c12ae26c73aaabee73ddef7aa2518252b20bb86acefe6947e2f67f401658189

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET /?subid1=20250610-0127-2179-befa-edaf74a9b1a0 HTTP/1.1
Host: ww25.alvsx.coreforger.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Mon, 09 Jun 2025 15:27:21 GMT
content-type: text/html; charset=utf-8
content-length: 1194
x-request-id: 6a338831-b10c-44ae-b2f9-eed04de3477c
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ZPJSlD/jwGFkhJnxec19Gsh8F2fV3/IMgyyE4V5CeUfuw+H7Qj0lZpS+dewmN1xko0M+VTDQN8uX/K5PrHK6yw==
set-cookie: parking_session=6a338831-b10c-44ae-b2f9-eed04de3477c; expires=Mon, 09 Jun 2025 15:42:21 GMT; path=/

GET ww25.alvsx.coreforger.top/bIsKdWFJp.js

199.59.243.228

200 OK

36 kB

URL GET
ww25.alvsx.coreforger.top/bIsKdWFJp.js
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (36279)
Size
36 kB (36282 bytes)
Hash
ce365574c1dc94614b3e254709897c44
a3a12ca1d23945b6e7c9aa6b89c32a46b9387c4a
57a3706a99779e901f5fa192af684fbe96d7f0d16c2264f447904e58791252bb

HTTP Headers

GET /bIsKdWFJp.js HTTP/1.1
Host: ww25.alvsx.coreforger.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
Cookie: parking_session=6a338831-b10c-44ae-b2f9-eed04de3477c
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Mon, 09 Jun 2025 15:27:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 36282
x-request-id: cbf5d2bb-ea34-44df-b483-5306b83b731c
set-cookie: parking_session=6a338831-b10c-44ae-b2f9-eed04de3477c; expires=Mon, 09 Jun 2025 15:42:22 GMT

GET www.google.com/adsense/domains/caf.js?abp=1&bodis=true

142.250.74.68

200 OK

143 kB

URL GET
www.google.com/adsense/domains/caf.js?abp=1&bodis=true
IP
142.250.74.68:443
ASN
#15169 GOOGLE

Requested by
http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
Certificate
IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint84:BD:0D:9A:51:CC:86:3E:E9:2F:6E:7C:2D:58:AC:4C:FB:B5:3D:8C
ValidityMon, 12 May 2025 08:44:44 GMT - Mon, 04 Aug 2025 08:44:43 GMT

File type
JavaScript source, ASCII text, with very long lines (1839)
Size
143 kB (143195 bytes)
Hash
0c12d599500cae6d08feb2adda22ce4a
efe791909c852f40a8346177f40b4979691208eb
39e7dd999707b167c0a3e1830469e5cafb0c34626b8e7057044cc3e3344111bb

HTTP Headers

GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.alvsx.coreforger.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 09 Jun 2025 15:27:22 GMT
expires: Mon, 09 Jun 2025 15:27:22 GMT
cache-control: private, max-age=3600
etag: "560773302986700416"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/adsense/domains/caf.js

142.250.178.110

200 OK

143 kB

URL GET
syndicatedsearch.goog/adsense/domains/caf.js
IP
142.250.178.110:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol115%2Cpid-bodis-gcontrol461%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250610-0127-2179-befa-edaf74a9b1a0&max_radlink_len=50&type=3&swp=as-drid-2439451366973938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=521749482842684&num=0&output=afd_ads&domain_name=ww25.alvsx.coreforger.top&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749482842686&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=766755421&rurl=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fsubid1%3D20250610-0127-2179-befa-edaf74a9b1a0
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintEB:8E:2F:9E:C4:6D:95:6E:65:C8:4E:08:A5:5E:E8:56:20:3C:53:83
ValidityMon, 12 May 2025 08:45:56 GMT - Mon, 04 Aug 2025 08:45:55 GMT

File type
JavaScript source, ASCII text, with very long lines (1839)
Size
143 kB (143202 bytes)
Hash
51d38d8a11bdee566b78b4b18a1d6777
e48bd2f0b2b3011fe08597a2b57e28567a99a5cd
1010ffc412f467e92c324356d2773cb42fa8c0e930d3d27fbfb62f4940ce40f3

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 09 Jun 2025 15:27:23 GMT
expires: Mon, 09 Jun 2025 15:27:23 GMT
cache-control: private, max-age=3600
etag: "6695926446319617353"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

142.250.74.33

200 OK

200 B

URL GET
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
142.250.74.33:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol115%2Cpid-bodis-gcontrol461%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250610-0127-2179-befa-edaf74a9b1a0&max_radlink_len=50&type=3&swp=as-drid-2439451366973938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3&nocache=521749482842684&num=0&output=afd_ads&domain_name=ww25.alvsx.coreforger.top&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749482842686&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=766755421&rurl=http%3A%2F%2Fww25.alvsx.coreforger.top%2F%3Fsubid1%3D20250610-0127-2179-befa-edaf74a9b1a0
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
Fingerprint27:E5:A6:4D:A7:35:A0:F7:7B:EA:CD:2E:47:1A:64:DB:8B:2C:E6:06
ValidityMon, 12 May 2025 08:43:56 GMT - Mon, 04 Aug 2025 08:43:55 GMT

File type
SVG Scalable Vector Graphics image
Size
200 B (200 bytes)
Hash
11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 09 Jun 2025 02:27:46 GMT
expires: Tue, 10 Jun 2025 01:27:46 GMT
cache-control: public, max-age=82800
age: 46777
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=mruc3nvvk5j6&cd_fexp=72717107&aqid=Wv1GaJCCOYaFhcIP3PPEoQs&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=766755421&csala=17%7C0%7C469%7C133%7C14&lle=0&ifv=1&hpt=0

142.250.178.110

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=mruc3nvvk5j6&cd_fexp=72717107&aqid=Wv1GaJCCOYaFhcIP3PPEoQs&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=766755421&csala=17%7C0%7C469%7C133%7C14&lle=0&ifv=1&hpt=0
IP
142.250.178.110:443
ASN
#15169 GOOGLE

Requested by
http://ww25.alvsx.coreforger.top/?subid1=20250610-0127-2179-befa-edaf74a9b1a0
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintEB:8E:2F:9E:C4:6D:95:6E:65:C8:4E:08:A5:5E:E8:56:20:3C:53:83
ValidityMon, 12 May 2025 08:45:56 GMT - Mon, 04 Aug 2025 08:45:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=mruc3nvvk5j6&cd_fexp=72717107&aqid=Wv1GaJCCOYaFhcIP3PPEoQs&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=766755421&csala=17%7C0%7C469%7C133%7C14&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.alvsx.coreforger.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-btImLckzGxdMFdL1_EJUXQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Mon, 09 Jun 2025 15:27:24 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL POST

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size