Report - b.gemfinder.top/

Report Overview

Visited public
2025-04-02 07:52:18
Tags
URL
b.gemfinder.top/
Finishing URL
ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
IP / ASN
103.224.182.252
#133618 Trellian Pty. Limited
Title
gemfinder.top

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
syndicatedsearch.goog	unknown	2023-04-14	2023-09-25	2025-04-02	3.3 kB	161 kB	216.58.207.238
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2025-04-02	1.0 kB	2.0 kB	142.250.74.33
b.gemfinder.top	unknown	2025-01-26	2025-04-02	2025-04-02	484 B	1.5 kB	103.224.182.252
ww25.b.gemfinder.top	unknown	2025-01-26	2025-04-02	2025-04-02	2.0 kB	44 kB	199.59.243.228
www.google.com	7	1997-09-15	2015-05-10	2025-04-02	446 B	145 kB	142.250.178.100

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-02 07:51:57	medium	Client IP	199.59.243.228	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	ww25.b.gemfinder.top/bydfxALOD.js	ScriptElement	36 kB	2025-03-31	2025-04-03
Pretty URL ww25.b.gemfinder.top/bydfxALOD.js IP 199.59.243.228 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-31 21:03 Last Seen2025-04-03 08:03 Times Seen104 Hash c73237590ba1bd7d6178c2258a2c8e0e 782cb2c578de88f0885ea6867fea82a2a7aa8a49 4a67b4887976069b10753dbb557f033a95a52a7d2b7724b8a376cb02468d7f6e Loading...

	www.google.com/adsense/domains/caf.js?abp=1&bodis=true	ScriptElement	144 kB	2025-04-01	2025-04-03
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&bodis=true IP 142.250.178.100 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-01 18:11 Last Seen2025-04-03 08:01 Times Seen120 Hash 0a29c12d79e4371dd9a46996ab10bad8 c3f2a22fba09189bb663e21fd6ab2470b2ea78eb 58f51806c1e3ace81eea72c28a41eaf0b021c5112203813b6e72e6360315575f Loading...

	syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol107%2Cpid-bodis-gcontrol431%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250402-1851-56ac-97c5-2ee0815ba774&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2199449563878898&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3&nocache=7321743580318798&num=0&output=afd_ads&domain_name=ww25.b.gemfinder.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1743580318800&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=742256427&rurl=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fsubid1%3D20250402-1851-56ac-97c5-2ee0815ba774	ScriptElement	584 B	2025-04-02	2025-04-02
Pretty URL syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol107%2Cpid-bodis-gcontrol431%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250402-1851-56ac-97c5-2ee0815ba774&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2199449563878898&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3&nocache=7321743580318798&num=0&output=afd_ads&domain_name=ww25.b.gemfinder.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1743580318800&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=742256427&rurl=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fsubid1%3D20250402-1851-56ac-97c5-2ee0815ba774 IP 216.58.207.238 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-02 07:52 Last Seen2025-04-02 07:52 Times Seen1 Hash 52be559e5d8b62e93b8f9ab9c274b5ab 6be3b9e8451cf8ac6303f947bcab6a725775b9f2 689e2a2867fc679439734b4b9cad584f4c1c01877e681322a2dc6b7018d797a6 Loading...

	syndicatedsearch.goog/adsense/domains/caf.js	ScriptElement	144 kB	2025-03-28	2025-04-03
Pretty URL syndicatedsearch.goog/adsense/domains/caf.js IP 216.58.207.238 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-28 13:52 Last Seen2025-04-03 08:07 Times Seen651 Hash c99a06019be77f3b4996990645673e93 ba09ff12e974736f495ba8a9d61f44aaf8583614 d2a0c7842ba127252130647c7e25dc73a139c689aa37abc705b4ce43fdf23e37 Loading...

	ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774	ScriptElement	433 B	2025-04-02	2025-04-02
Pretty URL ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774 IP 199.59.243.228 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-02 07:52 Last Seen2025-04-02 07:52 Times Seen1 Hash 51632797295b31b06d11bd70668fb19f 189e0c93039c434d61b09c37cac811e61de95d93 fac809117f9f83d0af5a4118672fe5a321225c106fe0a7de1e1e0f10bcfb4115 Loading...

HTTP Transactions (12)

URL IP Response Size

syndicatedsearch.goog/adsense/domains/caf.js

216.58.207.238

200 OK

144 kB

URL GET
syndicatedsearch.goog/adsense/domains/caf.js
IP
216.58.207.238:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol107%2Cpid-bodis-gcontrol431%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250402-1851-56ac-97c5-2ee0815ba774&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2199449563878898&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3&nocache=7321743580318798&num=0&output=afd_ads&domain_name=ww25.b.gemfinder.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1743580318800&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=742256427&rurl=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fsubid1%3D20250402-1851-56ac-97c5-2ee0815ba774
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint47:7F:1D:15:F5:CA:9E:50:B7:5D:F0:5E:E9:66:E5:02:F8:3D:AD:E6
ValidityMon, 10 Mar 2025 08:39:05 GMT - Mon, 02 Jun 2025 08:39:04 GMT

File type
JavaScript source, ASCII text, with very long lines (1831)
Size
144 kB (144135 bytes)
Hash
c99a06019be77f3b4996990645673e93
ba09ff12e974736f495ba8a9d61f44aaf8583614
d2a0c7842ba127252130647c7e25dc73a139c689aa37abc705b4ce43fdf23e37

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Wed, 02 Apr 2025 07:51:59 GMT
expires: Wed, 02 Apr 2025 07:51:59 GMT
cache-control: private, max-age=3600
etag: "2011843590657581098"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b

142.250.74.33

200 OK

200 B

URL GET
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
IP
142.250.74.33:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol107%2Cpid-bodis-gcontrol431%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250402-1851-56ac-97c5-2ee0815ba774&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2199449563878898&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3&nocache=7321743580318798&num=0&output=afd_ads&domain_name=ww25.b.gemfinder.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1743580318800&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=742256427&rurl=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fsubid1%3D20250402-1851-56ac-97c5-2ee0815ba774
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
Fingerprint76:FD:48:21:91:D7:93:F0:95:A3:DA:6B:29:ED:D2:2A:3F:D2:DD:38
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT

File type
SVG Scalable Vector Graphics image
Size
200 B (200 bytes)
Hash
e81eb30a6c5589e7f39436e40b400822
ca2513ede010b3db00099335b809ca693c2cd65c
055ae1fef3be182534069c718e2dc0ab07d7464bcc3ded19553da07d37333657

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Apr 2025 02:43:02 GMT
expires: Thu, 03 Apr 2025 01:43:02 GMT
cache-control: public, max-age=82800
age: 18538
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

b.gemfinder.top/

103.224.182.252

302 Found

1.2 kB

URL User Request GET
b.gemfinder.top/
IP
103.224.182.252:443
ASN
#133618 Trellian Pty. Limited

Certificate
IssuerLet's Encrypt
Subjectaepiutk.com
Fingerprint63:CD:C5:0D:B4:1A:E2:65:FD:1B:FD:14:3C:E7:92:3B:71:64:70:7E
ValidityWed, 19 Mar 2025 18:42:51 GMT - Tue, 17 Jun 2025 18:42:50 GMT

File type

Size
1.2 kB (1182 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: b.gemfinder.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Wed, 02 Apr 2025 07:51:56 GMT
server: Apache
set-cookie: __tad=1743580316.5605681; expires=Sat, 31-Mar-2035 07:51:56 GMT; Max-Age=315360000
location: http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
content-length: 2
content-type: text/html; charset=UTF-8
connection: close

ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774

199.59.243.228

200 OK

1.2 kB

URL User Request GET
ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (1224), with no line terminators
Size
1.2 kB (1182 bytes)
Hash
8232ded436dcd443e49d609d686879b2
e9bcaad2b315344e226d06965de33b2665560d3e
e55bdf56af84592f231ebb3b2cb0fcede7a1999c325099267039dde8aa0661df

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET /?subid1=20250402-1851-56ac-97c5-2ee0815ba774 HTTP/1.1
Host: ww25.b.gemfinder.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Wed, 02 Apr 2025 07:51:57 GMT
content-type: text/html; charset=utf-8
content-length: 1182
x-request-id: 527f7bd6-63bb-4d95-b4a9-2652f80e8fe4
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_OlbAJES7G57dudCakomWh86ET0ZhgYqH1btJ6YOE/y4vVnX/poxdvuU1iDrXHYiMVox/2+KIm0FOcAqruqvTYg==
set-cookie: parking_session=527f7bd6-63bb-4d95-b4a9-2652f80e8fe4; expires=Wed, 02 Apr 2025 08:06:57 GMT; path=/

ww25.b.gemfinder.top/bydfxALOD.js

199.59.243.228

200 OK

36 kB

URL GET
ww25.b.gemfinder.top/bydfxALOD.js
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774

File type

Size
36 kB (35693 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /bydfxALOD.js HTTP/1.1
Host: ww25.b.gemfinder.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
Cookie: parking_session=527f7bd6-63bb-4d95-b4a9-2652f80e8fe4
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Wed, 02 Apr 2025 07:51:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 35693
x-request-id: 04845ed8-e5fc-4503-a4b2-606f919ece64
set-cookie: parking_session=527f7bd6-63bb-4d95-b4a9-2652f80e8fe4; expires=Wed, 02 Apr 2025 08:06:58 GMT

ww25.b.gemfinder.top/_fd?subid1=20250402-1851-56ac-97c5-2ee0815ba774

199.59.243.228

200 OK

5.2 kB

URL POST
ww25.b.gemfinder.top/_fd?subid1=20250402-1851-56ac-97c5-2ee0815ba774
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774

File type
ASCII text, with very long lines (5193), with no line terminators
Size
5.2 kB (5193 bytes)
Hash
b34548c96d45c2b9c257e3859a7b405c
01c6fbaa0d475c07a96769aaa9d7241da3ae8c38
ac8ca4d8397c09de36d3b3199428f0bae03d3634e6fe4dc6e4c5900fd7be5c81

HTTP Headers

POST /_fd?subid1=20250402-1851-56ac-97c5-2ee0815ba774 HTTP/1.1
Host: ww25.b.gemfinder.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
Content-Type: application/json
Origin: http://ww25.b.gemfinder.top
DNT: 1
Connection: keep-alive
Cookie: parking_session=527f7bd6-63bb-4d95-b4a9-2652f80e8fe4
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
date: Wed, 02 Apr 2025 07:51:57 GMT
content-type: application/json; charset=utf-8
content-length: 5193
x-request-id: 02c3f0ab-604b-45d9-9740-cb39d6c7ef7d
set-cookie: parking_session=527f7bd6-63bb-4d95-b4a9-2652f80e8fe4; expires=Wed, 02 Apr 2025 08:06:58 GMT

syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=1j5ouxx7yfn0&cd_fexp=72717107&aqid=n-zsZ9SvA4PPxdwP2NqWwAs&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=742256427&csala=6%7C0%7C615%7C89%7C40&lle=0&ifv=1&hpt=0

216.58.207.238

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=1j5ouxx7yfn0&cd_fexp=72717107&aqid=n-zsZ9SvA4PPxdwP2NqWwAs&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=742256427&csala=6%7C0%7C615%7C89%7C40&lle=0&ifv=1&hpt=0
IP
216.58.207.238:443
ASN
#15169 GOOGLE

Requested by
http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint47:7F:1D:15:F5:CA:9E:50:B7:5D:F0:5E:E9:66:E5:02:F8:3D:AD:E6
ValidityMon, 10 Mar 2025 08:39:05 GMT - Mon, 02 Jun 2025 08:39:04 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=1j5ouxx7yfn0&cd_fexp=72717107&aqid=n-zsZ9SvA4PPxdwP2NqWwAs&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=742256427&csala=6%7C0%7C615%7C89%7C40&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.b.gemfinder.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-BFmmCLQ8DeN3yu3zrc7qcA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 02 Apr 2025 07:52:01 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/adsense/domains/caf.js?abp=1&bodis=true

142.250.178.100

200 OK

144 kB

URL GET
www.google.com/adsense/domains/caf.js?abp=1&bodis=true
IP
142.250.178.100:443
ASN
#15169 GOOGLE

Requested by
http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
Certificate
IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint2F:CC:05:C5:14:C4:CD:A4:26:05:31:F9:67:40:7C:D3:39:74:34:0C
ValidityMon, 10 Mar 2025 08:37:46 GMT - Mon, 02 Jun 2025 08:37:45 GMT

File type
JavaScript source, ASCII text, with very long lines (1831)
Size
144 kB (144073 bytes)
Hash
0a29c12d79e4371dd9a46996ab10bad8
c3f2a22fba09189bb663e21fd6ab2470b2ea78eb
58f51806c1e3ace81eea72c28a41eaf0b021c5112203813b6e72e6360315575f

HTTP Headers

GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.b.gemfinder.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Wed, 02 Apr 2025 07:51:58 GMT
expires: Wed, 02 Apr 2025 07:51:58 GMT
cache-control: private, max-age=3600
etag: "9109082582244147282"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol107%2Cpid-bodis-gcontrol431%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250402-1851-56ac-97c5-2ee0815ba774&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2199449563878898&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3&nocache=7321743580318798&num=0&output=afd_ads&domain_name=ww25.b.gemfinder.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1743580318800&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=742256427&rurl=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fsubid1%3D20250402-1851-56ac-97c5-2ee0815ba774

216.58.207.238

200 OK

14 kB

URL GET
syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol107%2Cpid-bodis-gcontrol431%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250402-1851-56ac-97c5-2ee0815ba774&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2199449563878898&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3&nocache=7321743580318798&num=0&output=afd_ads&domain_name=ww25.b.gemfinder.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1743580318800&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=742256427&rurl=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fsubid1%3D20250402-1851-56ac-97c5-2ee0815ba774
IP
216.58.207.238:443
ASN
#15169 GOOGLE

Requested by
http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint47:7F:1D:15:F5:CA:9E:50:B7:5D:F0:5E:E9:66:E5:02:F8:3D:AD:E6
ValidityMon, 10 Mar 2025 08:39:05 GMT - Mon, 02 Jun 2025 08:39:04 GMT

File type
HTML document, ASCII text, with very long lines (13208)
Size
14 kB (13737 bytes)
Hash
d7a0695e0a9e642b2372a91f98c42e8c
51540caab66a572946c6aef68d4d9d83ddb16bb5
1ae350e24a12a6bc12d7adce7c5b56da208dc6d9d5e3d4ae5164ae78052b4114

HTTP Headers

GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol107%2Cpid-bodis-gcontrol431%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250402-1851-56ac-97c5-2ee0815ba774&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2199449563878898&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3&nocache=7321743580318798&num=0&output=afd_ads&domain_name=ww25.b.gemfinder.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1743580318800&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=742256427&rurl=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fsubid1%3D20250402-1851-56ac-97c5-2ee0815ba774 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.b.gemfinder.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Wed, 02 Apr 2025 07:51:59 GMT
expires: Wed, 02 Apr 2025 07:51:59 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-tXTpybnTTU0Iur_haN-giw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2722
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

142.250.74.33

200 OK

200 B

URL GET
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
142.250.74.33:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol107%2Cpid-bodis-gcontrol431%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250402-1851-56ac-97c5-2ee0815ba774&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2199449563878898&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3&nocache=7321743580318798&num=0&output=afd_ads&domain_name=ww25.b.gemfinder.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1743580318800&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=742256427&rurl=http%3A%2F%2Fww25.b.gemfinder.top%2F%3Fsubid1%3D20250402-1851-56ac-97c5-2ee0815ba774
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
Fingerprint76:FD:48:21:91:D7:93:F0:95:A3:DA:6B:29:ED:D2:2A:3F:D2:DD:38
ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT

File type
SVG Scalable Vector Graphics image
Size
200 B (200 bytes)
Hash
592bbd56abac313ab322bc38f7027496
ecc40e55421cbfc9cc24e256c999a497b84d997f
fe3a1073d51df0f353dfa771acde9ea020e215a74edf7b24775e50282b6d6eda

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Apr 2025 13:14:43 GMT
expires: Wed, 02 Apr 2025 12:14:43 GMT
cache-control: public, max-age=82800
age: 67036
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ww25.b.gemfinder.top/_tr

199.59.243.228

200 OK

2 B

URL POST
ww25.b.gemfinder.top/_tr
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774

File type
ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

HTTP Headers

POST /_tr HTTP/1.1
Host: ww25.b.gemfinder.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
Content-Type: application/json
Content-Length: 2021
Origin: http://ww25.b.gemfinder.top
DNT: 1
Connection: keep-alive
Cookie: parking_session=527f7bd6-63bb-4d95-b4a9-2652f80e8fe4
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Wed, 02 Apr 2025 07:51:59 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-request-id: 8d2cf5b7-7d7f-4a52-9679-701d709341ad
set-cookie: parking_session=527f7bd6-63bb-4d95-b4a9-2652f80e8fe4; expires=Wed, 02 Apr 2025 08:06:59 GMT

syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=sb5l4r22k546&cd_fexp=72717107&aqid=n-zsZ9SvA4PPxdwP2NqWwAs&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=742256427&csala=6%7C0%7C615%7C89%7C40&lle=0&ifv=1&hpt=0

216.58.207.238

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=sb5l4r22k546&cd_fexp=72717107&aqid=n-zsZ9SvA4PPxdwP2NqWwAs&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=742256427&csala=6%7C0%7C615%7C89%7C40&lle=0&ifv=1&hpt=0
IP
216.58.207.238:443
ASN
#15169 GOOGLE

Requested by
http://ww25.b.gemfinder.top/?subid1=20250402-1851-56ac-97c5-2ee0815ba774
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint47:7F:1D:15:F5:CA:9E:50:B7:5D:F0:5E:E9:66:E5:02:F8:3D:AD:E6
ValidityMon, 10 Mar 2025 08:39:05 GMT - Mon, 02 Jun 2025 08:39:04 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=sb5l4r22k546&cd_fexp=72717107&aqid=n-zsZ9SvA4PPxdwP2NqWwAs&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=742256427&csala=6%7C0%7C615%7C89%7C40&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.b.gemfinder.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-OcsDn8CTL2hkTS3efrRY_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 02 Apr 2025 07:52:01 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash