| d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png |  54.230.241.226 | 200 OK | 11 kB |
URL GET HTTP/2d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png IP54.230.241.226:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typePNG image data, 1500 x 600, 8-bit colormap, non-interlaced Hash0cb2e5165dc9324eb462199f04e1ffa9 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Sat, 07 Dec 2024 11:04:57 GMT
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
accept-ranges: bytes
etag: "65fc1e7b-2c6f"
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S4XYTlUq-zsyFF_DtRvws0Mts2aV4AylfJjl32eZ0OVQd4sk6aWnZA==
age: 3279
X-Firefox-Spdy: h2
|
|
| ww12.tipinfolist.xyz/favicon.ico | 76.223.26.96 | 200 OK | 0 B |
URL GET HTTP/2ww12.tipinfolist.xyz/favicon.ico IP76.223.26.96:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerLet's Encrypt Subjectww12.tipinfolist.xyz FingerprintAB:23:5A:A3:16:96:48:06:FC:36:84:0C:A6:C7:2D:D0:F9:AA:35:DA ValidityThu, 05 Dec 2024 22:16:34 GMT - Wed, 05 Mar 2025 22:16:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: ww12.tipinfolist.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50944"; ma=2592000
content-type: image/x-icon
date: Sat, 07 Dec 2024 11:59:36 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2
|
|
| parking3.parklogic.com/page/scribe.php?pcId=12&domain=tipinfolist.xyz&pId=1055&usid=24&utid=9314036808&query=null&domainJs=ww12.tipinfolist.xyz&path=/f5dkvdSbC/Login.php&ss=true&lp=1 | 170.187.143.93 | 200 OK | 491 B |
URL GET HTTP/2parking3.parklogic.com/page/scribe.php?pcId=12&domain=tipinfolist.xyz&pId=1055&usid=24&utid=9314036808&query=null&domainJs=ww12.tipinfolist.xyz&path=/f5dkvdSbC/Login.php&ss=true&lp=1 IP170.187.143.93:443 ASN#63949 Akamai Connected Cloud
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerSectigo Limited Subject*.parklogic.com FingerprintA5:25:E3:1A:B4:C8:32:BD:0D:BA:C8:B4:19:22:F9:75:D4:D3:88:3F ValiditySat, 20 Jan 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash3dd10a85b08bce8c1868aea2d2c2aaa2 1aa75aeae3559f7eca8cb02c354799c028fecf89 5e5feb3f8f043bec2bbc5ef46627fa6518d1bb1914fc2a2e78d195c71429de61
GET /page/scribe.php?pcId=12&domain=tipinfolist.xyz&pId=1055&usid=24&utid=9314036808&query=null&domainJs=ww12.tipinfolist.xyz&path=/f5dkvdSbC/Login.php&ss=true&lp=1 HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ww12.tipinfolist.xyz/
Origin: https://ww12.tipinfolist.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Dec 2024 11:59:36 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| parking3.parklogic.com/page/enhance.js?pcId=12&domain=tipinfolist.xyz | 170.187.143.93 | 200 OK | 7.4 kB |
URL GET HTTP/2parking3.parklogic.com/page/enhance.js?pcId=12&domain=tipinfolist.xyz IP170.187.143.93:443 ASN#63949 Akamai Connected Cloud
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerSectigo Limited Subject*.parklogic.com FingerprintA5:25:E3:1A:B4:C8:32:BD:0D:BA:C8:B4:19:22:F9:75:D4:D3:88:3F ValiditySat, 20 Jan 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT
Hash1b069b0dd3367192638d7636e6fc790a 4ba22bb6fa114640880ef0cac65298e352bbaf9f aa16aec45f4a12a3f51b6816cc5d03ed24091d675c1fbfe5f2c92bc38d2db978
GET /page/enhance.js?pcId=12&domain=tipinfolist.xyz HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 07 Dec 2024 11:59:36 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ww12.tipinfolist.xyz/track.php?domain=tipinfolist.xyz&toggle=browserjs&uid=MTczMzU3Mjc3NS41NzIxOjVhN2ZiYzhhNmNkOTY2ZDBjZTk3OGE4M2RmMWZhNWE1NmNmMjg1YzBmMzllMTdjODIwN2M0NDVhODRlZDZhYzE6Njc1NDM4YTc4YmE5Yw%3D%3D | 76.223.26.96 | 200 OK | 7.2 kB |
URL GET HTTP/2ww12.tipinfolist.xyz/track.php?domain=tipinfolist.xyz&toggle=browserjs&uid=MTczMzU3Mjc3NS41NzIxOjVhN2ZiYzhhNmNkOTY2ZDBjZTk3OGE4M2RmMWZhNWE1NmNmMjg1YzBmMzllMTdjODIwN2M0NDVhODRlZDZhYzE6Njc1NDM4YTc4YmE5Yw%3D%3D IP76.223.26.96:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerLet's Encrypt Subjectww12.tipinfolist.xyz FingerprintAB:23:5A:A3:16:96:48:06:FC:36:84:0C:A6:C7:2D:D0:F9:AA:35:DA ValidityThu, 05 Dec 2024 22:16:34 GMT - Wed, 05 Mar 2025 22:16:33 GMT
File typegzip compressed data, max speed, from Unix Hashf22b9c9eed5ba433341ac219b9df2526 70086b6f385f082bf226e158b1ce21b1878af874 2342375ba961bb25eb3e6f9163848da97253ecb74a4db590750a46cad672f95b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /track.php?domain=tipinfolist.xyz&toggle=browserjs&uid=MTczMzU3Mjc3NS41NzIxOjVhN2ZiYzhhNmNkOTY2ZDBjZTk3OGE4M2RmMWZhNWE1NmNmMjg1YzBmMzllMTdjODIwN2M0NDVhODRlZDZhYzE6Njc1NDM4YTc4YmE5Yw%3D%3D HTTP/1.1
Host: ww12.tipinfolist.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 07 Dec 2024 11:59:36 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-custom-track: browserjs
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww12.tipinfolist.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1NDM4YTc4YmE2ZHx8fDE3MzM1NzI3NzUuNTkzN3w0MDg2YWY4ZjhhN2Q4Y2JjZmQ1MGYxM2YwOWMwZjcyMzRkZGVhNGVjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw3NGM4ZDQzOWM5NmQ2MDRmNjVkMGU0M2Y4MTQ5ZjMwMGFlYjVlZmVjfDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2758074928654248&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=8871733572776608&num=0&output=afd_ads&domain_name=ww12.tipinfolist.xyz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1733572776610&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=702325170&rurl=https%3A%2F%2Fww12.tipinfolist.xyz%2Ff5dkvdSbC%2FLogin.php%3Fusid%3D24%26utid%3D9314036808 | 142.250.74.110 | 200 OK | 3.3 kB |
URL GET HTTP/2syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww12.tipinfolist.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1NDM4YTc4YmE2ZHx8fDE3MzM1NzI3NzUuNTkzN3w0MDg2YWY4ZjhhN2Q4Y2JjZmQ1MGYxM2YwOWMwZjcyMzRkZGVhNGVjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw3NGM4ZDQzOWM5NmQ2MDRmNjVkMGU0M2Y4MTQ5ZjMwMGFlYjVlZmVjfDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2758074928654248&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=8871733572776608&num=0&output=afd_ads&domain_name=ww12.tipinfolist.xyz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1733572776610&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=702325170&rurl=https%3A%2F%2Fww12.tipinfolist.xyz%2Ff5dkvdSbC%2FLogin.php%3Fusid%3D24%26utid%3D9314036808 IP142.250.74.110:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint42:4A:4C:74:EB:C9:BE:1F:AD:36:A3:F2:04:76:50:5B:D8:E9:B1:EF ValidityMon, 21 Oct 2024 08:40:02 GMT - Mon, 13 Jan 2025 08:40:01 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (14359) Hash5cd75227705524309e84a59bddfcafa4 c10ef4ec53edc07300d1392e934d5938478fb731 93d3c386d4e555f94aca3efed144f6f0400bad0d3fb0eb20acbe5441c60173fb
GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww12.tipinfolist.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1NDM4YTc4YmE2ZHx8fDE3MzM1NzI3NzUuNTkzN3w0MDg2YWY4ZjhhN2Q4Y2JjZmQ1MGYxM2YwOWMwZjcyMzRkZGVhNGVjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw3NGM4ZDQzOWM5NmQ2MDRmNjVkMGU0M2Y4MTQ5ZjMwMGFlYjVlZmVjfDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2758074928654248&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=8871733572776608&num=0&output=afd_ads&domain_name=ww12.tipinfolist.xyz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1733572776610&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=702325170&rurl=https%3A%2F%2Fww12.tipinfolist.xyz%2Ff5dkvdSbC%2FLogin.php%3Fusid%3D24%26utid%3D9314036808 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sat, 07 Dec 2024 11:59:36 GMT
expires: Sat, 07 Dec 2024 11:59:36 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-xusTtt9p8Qns4dqd8-GM1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3266
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.97 | 200 OK | 174 B |
URL GET HTTP/2afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.97:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww12.tipinfolist.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1NDM4YTc4YmE2ZHx8fDE3MzM1NzI3NzUuNTkzN3w0MDg2YWY4ZjhhN2Q4Y2JjZmQ1MGYxM2YwOWMwZjcyMzRkZGVhNGVjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw3NGM4ZDQzOWM5NmQ2MDRmNjVkMGU0M2Y4MTQ5ZjMwMGFlYjVlZmVjfDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2758074928654248&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=8871733572776608&num=0&output=afd_ads&domain_name=ww12.tipinfolist.xyz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1733572776610&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=702325170&rurl=https%3A%2F%2Fww12.tipinfolist.xyz%2Ff5dkvdSbC%2FLogin.php%3Fusid%3D24%26utid%3D9314036808 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint1E:EC:6F:A8:CB:AA:F1:D0:22:B4:B9:38:61:D0:49:58:42:5C:6A:6F ValidityMon, 21 Oct 2024 08:37:53 GMT - Mon, 13 Jan 2025 08:37:52 GMT
File typeSVG Scalable Vector Graphics image Hash11b3089d616633ca6b73b57aa877eeb4 07632f63e06b30d9b63c97177d3a8122629bda9b 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 21:14:16 GMT
expires: Sat, 07 Dec 2024 20:14:16 GMT
cache-control: public, max-age=82800
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 53121
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff | 142.250.74.97 | 200 OK | 270 B |
URL GET HTTP/2afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff IP142.250.74.97:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww12.tipinfolist.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1NDM4YTc4YmE2ZHx8fDE3MzM1NzI3NzUuNTkzN3w0MDg2YWY4ZjhhN2Q4Y2JjZmQ1MGYxM2YwOWMwZjcyMzRkZGVhNGVjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw3NGM4ZDQzOWM5NmQ2MDRmNjVkMGU0M2Y4MTQ5ZjMwMGFlYjVlZmVjfDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2758074928654248&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=8871733572776608&num=0&output=afd_ads&domain_name=ww12.tipinfolist.xyz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1733572776610&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=702325170&rurl=https%3A%2F%2Fww12.tipinfolist.xyz%2Ff5dkvdSbC%2FLogin.php%3Fusid%3D24%26utid%3D9314036808 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint1E:EC:6F:A8:CB:AA:F1:D0:22:B4:B9:38:61:D0:49:58:42:5C:6A:6F ValidityMon, 21 Oct 2024 08:37:53 GMT - Mon, 13 Jan 2025 08:37:52 GMT
File typeSVG Scalable Vector Graphics image Hash8959ddcd9712196961d93f58064ed655 62ab1e38e7e9fbf58a04381b76c2d96a9c829f24 17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 08:25:07 GMT
expires: Sun, 08 Dec 2024 07:25:07 GMT
cache-control: public, max-age=82800
age: 12870
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=xg3fjxogwcs9&aqid=qDhUZ4uXL6-exdwP_uONyAI&psid=7840396037&pbt=bv&adbx=375&adby=132.1999969482422&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=702325170&csala=8%7C0%7C320%7C83%7C61&lle=0&ifv=1&hpt=1 | 142.250.74.110 | 204 No Content | 0 B |
URL GET HTTP/3syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=xg3fjxogwcs9&aqid=qDhUZ4uXL6-exdwP_uONyAI&psid=7840396037&pbt=bv&adbx=375&adby=132.1999969482422&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=702325170&csala=8%7C0%7C320%7C83%7C61&lle=0&ifv=1&hpt=1 IP142.250.74.110:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint42:4A:4C:74:EB:C9:BE:1F:AD:36:A3:F2:04:76:50:5B:D8:E9:B1:EF ValidityMon, 21 Oct 2024 08:40:02 GMT - Mon, 13 Jan 2025 08:40:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=xg3fjxogwcs9&aqid=qDhUZ4uXL6-exdwP_uONyAI&psid=7840396037&pbt=bv&adbx=375&adby=132.1999969482422&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=702325170&csala=8%7C0%7C320%7C83%7C61&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-qwWCyWfNp4isCmBOeCq_FQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 07 Dec 2024 11:59:38 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=4d1rf0lwdt9s&aqid=qDhUZ4uXL6-exdwP_uONyAI&psid=7840396037&pbt=bs&adbx=375&adby=132.1999969482422&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=702325170&csala=8%7C0%7C320%7C83%7C61&lle=0&ifv=1&hpt=1 | 142.250.74.110 | 204 No Content | 0 B |
URL GET HTTP/3syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=4d1rf0lwdt9s&aqid=qDhUZ4uXL6-exdwP_uONyAI&psid=7840396037&pbt=bs&adbx=375&adby=132.1999969482422&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=702325170&csala=8%7C0%7C320%7C83%7C61&lle=0&ifv=1&hpt=1 IP142.250.74.110:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint42:4A:4C:74:EB:C9:BE:1F:AD:36:A3:F2:04:76:50:5B:D8:E9:B1:EF ValidityMon, 21 Oct 2024 08:40:02 GMT - Mon, 13 Jan 2025 08:40:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=4d1rf0lwdt9s&aqid=qDhUZ4uXL6-exdwP_uONyAI&psid=7840396037&pbt=bs&adbx=375&adby=132.1999969482422&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=702325170&csala=8%7C0%7C320%7C83%7C61&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-8MOq9v1VCKyh2zuhZFXCEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 07 Dec 2024 11:59:38 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 142.250.74.110 | 200 OK | 147 kB |
URL GET HTTP/3syndicatedsearch.goog/adsense/domains/caf.js IP142.250.74.110:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww12.tipinfolist.xyz%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc1NDM4YTc4YmE2ZHx8fDE3MzM1NzI3NzUuNTkzN3w0MDg2YWY4ZjhhN2Q4Y2JjZmQ1MGYxM2YwOWMwZjcyMzRkZGVhNGVjfHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw3NGM4ZDQzOWM5NmQ2MDRmNjVkMGU0M2Y4MTQ5ZjMwMGFlYjVlZmVjfDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2758074928654248&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301266%2C72717107%2C49280906%2C72771953&format=r3%7Cs&nocache=8871733572776608&num=0&output=afd_ads&domain_name=ww12.tipinfolist.xyz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1733572776610&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=702325170&rurl=https%3A%2F%2Fww12.tipinfolist.xyz%2Ff5dkvdSbC%2FLogin.php%3Fusid%3D24%26utid%3D9314036808 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint42:4A:4C:74:EB:C9:BE:1F:AD:36:A3:F2:04:76:50:5B:D8:E9:B1:EF ValidityMon, 21 Oct 2024 08:40:02 GMT - Mon, 13 Jan 2025 08:40:01 GMT
File typeJavaScript source, ASCII text, with very long lines (1932) Size147 kB (146908 bytes) Hash048f54852d65b9eea6941b842fa64016 a5d222c492fb9ebd22a376c05d0c5e44e2bae025 f38fea1f39505db87438f2e7be2c6dc435f5ee7c335e7662ff37bf358df2a791
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 07 Dec 2024 11:59:36 GMT
expires: Sat, 07 Dec 2024 11:59:36 GMT
cache-control: private, max-age=3600
etag: "9281507903774293386"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ww12.tipinfolist.xyz/ls.php?t=675438a7&token=74c8d439c96d604f65d0e43f8149f300aeb5efec | 76.223.26.96 | 201 Created | 16 B |
URL GET HTTP/2ww12.tipinfolist.xyz/ls.php?t=675438a7&token=74c8d439c96d604f65d0e43f8149f300aeb5efec IP76.223.26.96:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerLet's Encrypt Subjectww12.tipinfolist.xyz FingerprintAB:23:5A:A3:16:96:48:06:FC:36:84:0C:A6:C7:2D:D0:F9:AA:35:DA ValidityThu, 05 Dec 2024 22:16:34 GMT - Wed, 05 Mar 2025 22:16:33 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashdac3510b7572d5d0a91c5cabcfffb808 8f3fde801270c1046ce441e8a9df9a01d5142102 4f32d280a95889bb861167e00c1b95a773707eb98dfe2cc1736bf8884a2259f5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ls.php?t=675438a7&token=74c8d439c96d604f65d0e43f8149f300aeb5efec HTTP/1.1
Host: ww12.tipinfolist.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50944"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Sat, 07 Dec 2024 11:59:36 GMT
server: Caddy, nginx
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_AdUapFTU7O4kmgb5/eZOOuUMx5J7h7oZ0v6cufrbOzAcSl2hVCqSk3QjQOJa8FrPMyJn3M6PtBoB59plZzZ9xA==
x-log-success: 675438a8a888773ee80faf78
X-Firefox-Spdy: h2
|
|
| ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 | 76.223.26.96 | 200 OK | 16 kB |
URL User Request GET HTTP/2ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 IP76.223.26.96:443
CertificateIssuerLet's Encrypt Subjectww12.tipinfolist.xyz FingerprintAB:23:5A:A3:16:96:48:06:FC:36:84:0C:A6:C7:2D:D0:F9:AA:35:DA ValidityThu, 05 Dec 2024 22:16:34 GMT - Wed, 05 Mar 2025 22:16:33 GMT
File typeHTML document, ASCII text, with very long lines (7918) Hash31039806c9da58236e1cc529a2849f75 b53a4a08a93e81449f1b30eeb5199a10ecc36170 00ff368636ea7d28e20993a3b1441eb356f85f04dc481401d3f43a7cd2bc840e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /f5dkvdSbC/Login.php?usid=24&utid=9314036808 HTTP/1.1
Host: ww12.tipinfolist.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 07 Dec 2024 11:59:35 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_V3vMepHoUW3JRsvpYqsKPQxt5rTCJthSJuQ8d+5QQvjDHW/OA50prkxkN97pIX9910k0N5DaL55RNvmRI1AtJw==
x-buckets: bucket003,bucket077
x-domain: tipinfolist.xyz
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: ww12
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
|
|
| www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true | 142.250.74.164 | 200 OK | 147 kB |
URL GET HTTP/2www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true IP142.250.74.164:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerGoogle Trust Services Subjectwww.google.com FingerprintC1:5D:47:A6:B2:09:5F:1C:78:06:A8:63:D5:80:5A:A2:73:83:A3:B3 ValidityMon, 21 Oct 2024 08:38:45 GMT - Mon, 13 Jan 2025 08:38:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1932) Size147 kB (146892 bytes) Hashf309b4414170170093cb1e70bd364db5 2b1e61f2264b645b3eb719631aab67cdf8d81a15 34b2881eebcd6129fb9389354a666b5b5895fe4b8f641c033e68ff44b4d9d14e
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 07 Dec 2024 11:59:36 GMT
expires: Sat, 07 Dec 2024 11:59:36 GMT
cache-control: private, max-age=3600
etag: "1279439417387034748"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ww12.tipinfolist.xyz/track.php?domain=tipinfolist.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMzU3Mjc3NS41NzIxOjVhN2ZiYzhhNmNkOTY2ZDBjZTk3OGE4M2RmMWZhNWE1NmNmMjg1YzBmMzllMTdjODIwN2M0NDVhODRlZDZhYzE6Njc1NDM4YTc4YmE5Yw%3D%3D | 76.223.26.96 | 200 OK | 0 B |
URL GET HTTP/2ww12.tipinfolist.xyz/track.php?domain=tipinfolist.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMzU3Mjc3NS41NzIxOjVhN2ZiYzhhNmNkOTY2ZDBjZTk3OGE4M2RmMWZhNWE1NmNmMjg1YzBmMzllMTdjODIwN2M0NDVhODRlZDZhYzE6Njc1NDM4YTc4YmE5Yw%3D%3D IP76.223.26.96:443
Requested byhttps://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808 CertificateIssuerLet's Encrypt Subjectww12.tipinfolist.xyz FingerprintAB:23:5A:A3:16:96:48:06:FC:36:84:0C:A6:C7:2D:D0:F9:AA:35:DA ValidityThu, 05 Dec 2024 22:16:34 GMT - Wed, 05 Mar 2025 22:16:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /track.php?domain=tipinfolist.xyz&caf=1&toggle=answercheck&answer=yes&uid=MTczMzU3Mjc3NS41NzIxOjVhN2ZiYzhhNmNkOTY2ZDBjZTk3OGE4M2RmMWZhNWE1NmNmMjg1YzBmMzllMTdjODIwN2M0NDVhODRlZDZhYzE6Njc1NDM4YTc4YmE5Yw%3D%3D HTTP/1.1
Host: ww12.tipinfolist.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww12.tipinfolist.xyz/f5dkvdSbC/Login.php?usid=24&utid=9314036808
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 07 Dec 2024 11:59:37 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-custom-track: answercheck
X-Firefox-Spdy: h2
|
|