Report - bitcoinsmining.top/

Report Overview

URL

bitcoinsmining.top/
IP

185.53.177.31

ASN

#61969 Team Internet AG
Submitted

2023-06-01T11:50:11Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

2
Threat Detection Systems

0

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
bitcoinsmining.top (6)	unknown	2018-01-11 16:13:01	2023-02-28 00:03:23	2420	15533	185.53.177.31
www.google.com (5)	7	2015-05-10 13:11:19	2023-05-29 09:36:40	3771	115281	142.250.74.164
c.parkingcrew.net (1)	70582	2017-01-29 20:17:16	2023-05-31 05:12:09	335	1003	185.53.178.30
d38psrni17bvxu.cloudfront.net (1)	unknown	2022-09-22 18:48:38	2023-05-31 21:39:56	400	11815	54.230.245.130
afs.googleusercontent.com (2)	12123	2013-05-06 21:11:00	2023-05-31 19:12:35	969	2209	142.250.74.97

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-01T11:49:53Z	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile
2023-06-01T11:49:56Z	medium	Client IP	185.53.177.31	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (15)

URL IP Response Size

bitcoinsmining.top/

185.53.177.31

200 OK

6052

URL User Request GET HTTP/1.1

bitcoinsmining.top/
IP

185.53.177.31:80
ASN

#61969 Team Internet AG

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1344)

Size

6052
Hash

010c1aae98defc989eb132d824615f6f

41bacfa4503a16b7e31495788a4e8287029d50b2

de53d85139cb4fe317d21a7d6a24d641dc3d885aa96376d116cf335098882861

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

                                        GET / HTTP/1.1
Host: bitcoinsmining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 11:49:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_DAeQS8V8DXfQl5BeKDMT52EZcuvEK/kvR5icMnlQr9K0+ZZOWSmoxMjNRIZmFocdvxqCjUqLvxToeYZi3jzkxg==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: bitcoinsmining.top
X-Subdomain: 
Content-Encoding: gzip

bitcoinsmining.top/

185.53.177.31

200 OK

6054

URL User Request GET HTTP/1.1

bitcoinsmining.top/
IP

185.53.177.31:80
ASN

#61969 Team Internet AG

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1344)

Size

6054
Hash

e36494efda80b028d56e81efc79d8da8

b87ff9279fb24d96b2d6046b14649654b44ab8b4

dd13e06fdd342cd335190d76a659e4759f79141bea41d66b30cf119a8f230efb

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

                                        GET / HTTP/1.1
Host: bitcoinsmining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 11:49:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_DAeQS8V8DXfQl5BeKDMT52EZcuvEK/kvR5icMnlQr9K0+ZZOWSmoxMjNRIZmFocdvxqCjUqLvxToeYZi3jzkxg==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: bitcoinsmining.top
X-Subdomain: 
Content-Encoding: gzip

www.google.com/adsense/domains/caf.js?abp=1

142.250.74.164

200 OK

54004

URL GET HTTP/1.1

www.google.com/adsense/domains/caf.js?abp=1
IP

142.250.74.164:80
ASN

#15169 GOOGLE

Requested by

http://bitcoinsmining.top/

Magic

ASCII text, with very long lines (2125)

Size

54004
Hash

f7ca581fbdf1c186c5e25b114d29f8b6

704c12aaa2586f8073c4e12ece1be66f389d8b0f

400e82ecc54d6f9660fddb2d202ccbf21bccf403828899784e6a53281a877e7c

HTTP Headers

                                        GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Thu, 01 Jun 2023 11:49:57 GMT
Expires: Thu, 01 Jun 2023 11:49:57 GMT
Cache-Control: private, max-age=3600
ETag: "13313595685322795361"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0

c.parkingcrew.net/scripts/sale_form.js

185.53.178.30

200 OK

761

URL GET HTTP/1.1

c.parkingcrew.net/scripts/sale_form.js
IP

185.53.178.30:80
ASN

#19905 NEUSTAR-AS6

Requested by

http://bitcoinsmining.top/

Magic

ASCII text

Size

761
Hash

64f809e06446647e192fce8d1ec34e09

5b7ced07da42e205067afa88615317a277a4a82c

f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3

HTTP Headers

                                        GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 11:49:57 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes

bitcoinsmining.top/track.php?domain=bitcoinsmining.top&toggle=browserjs&uid=MTY4NTYyMDE5Ni45MDIxOmVjNWZmNjE0NDU2MTlkMTc5Nzc4NzYyM2M3ZDc4NjFlNGY1MmQ4ZTk0ZDk0OTZjNDI1YWFkYzgzZmU1NDJmODE6NjQ3ODg1ZTRkYzNlNA%3D%3D

185.53.177.31

200 OK

URL GET HTTP/1.1

bitcoinsmining.top/track.php?domain=bitcoinsmining.top&toggle=browserjs&uid=MTY4NTYyMDE5Ni45MDIxOmVjNWZmNjE0NDU2MTlkMTc5Nzc4NzYyM2M3ZDc4NjFlNGY1MmQ4ZTk0ZDk0OTZjNDI1YWFkYzgzZmU1NDJmODE6NjQ3ODg1ZTRkYzNlNA%3D%3D
IP

185.53.177.31:80
ASN

#61969 Team Internet AG

Requested by

http://bitcoinsmining.top/

Magic

gzip compressed data, max speed, from Unix\012- data

Size

20
Hash

a4745abc5e7fdb89cc6df3069f3c6e69

74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed

d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

HTTP Headers

                                        GET /track.php?domain=bitcoinsmining.top&toggle=browserjs&uid=MTY4NTYyMDE5Ni45MDIxOmVjNWZmNjE0NDU2MTlkMTc5Nzc4NzYyM2M3ZDc4NjFlNGY1MmQ4ZTk0ZDk0OTZjNDI1YWFkYzgzZmU1NDJmODE6NjQ3ODg1ZTRkYzNlNA%3D%3D HTTP/1.1
Host: bitcoinsmining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 11:49:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

bitcoinsmining.top/ls.php?t=647885e4&token=687c58412f3918f5cecc2cc7feeb0bbb5669b3cd

185.53.177.31

201 Created

URL GET HTTP/1.1

bitcoinsmining.top/ls.php?t=647885e4&token=687c58412f3918f5cecc2cc7feeb0bbb5669b3cd
IP

185.53.177.31:80
ASN

#61969 Team Internet AG

Requested by

http://bitcoinsmining.top/

Magic

JSON data\012- , ASCII text, with no line terminators

Size

16
Hash

7363e85fe9edee6f053a4b319588c086

a15e2127145548437173fc17f3e980e3f3dee2d0

c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97

HTTP Headers

                                        GET /ls.php?t=647885e4&token=687c58412f3918f5cecc2cc7feeb0bbb5669b3cd HTTP/1.1
Host: bitcoinsmining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 201 Created
Server: nginx
Date: Thu, 01 Jun 2023 11:49:57 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 647885e5c6d83c296962cc6d
Charset: utf-8
Access-Control-Allow-Origin: 
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_BTm/DN63DTlaEa1CZnNhxHnGWj6H196/9SMw7Lp2YNqwfiwiq0+RLJlAY9+KRDUHjD1+J78HsVCbOhXpdHRmiA==

d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png

54.230.245.130

200 OK

11375

URL GET HTTP/1.1

d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP

54.230.245.130:80
ASN

#16509 AMAZON-02

Requested by

http://bitcoinsmining.top/

Magic

PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data

Size

11375
Hash

0cb2e5165dc9324eb462199f04e1ffa9

9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8

67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865

HTTP Headers

                                        GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Thu, 01 Jun 2023 01:25:02 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cYJ5-BWw03d2zy6sk9uJeO_ApA4cKYp1Bz7fwJ8oOHKp2y5c5j2xoA==
Age: 37495

bitcoinsmining.top/favicon.ico

185.53.177.31

200 OK

URL GET HTTP/1.1

bitcoinsmining.top/favicon.ico
IP

185.53.177.31:80
ASN

#61969 Team Internet AG

Requested by

http://bitcoinsmining.top/

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /favicon.ico HTTP/1.1
Host: bitcoinsmining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 11:49:57 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes

www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fbitcoinsmining.top%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDc4ODVlNGRjM2M0fHx8MTY4NTYyMDE5Ni45MDc2fGRmNzVlMmMyZGMzOTQ2NmIzM2E0OTM0NjJjZTU1ZjE2MWRkODU2Mjl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDY4N2M1ODQxMmYzOTE4ZjVjZWNjMmNjN2ZlZWIwYmJiNTY2OWIzY2R8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2271262091554768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301100%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=341685620196821&num=0&output=afd_ads&domain_name=bitcoinsmining.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1685620196822&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fbitcoinsmining.top%2F&adbw=master-1%3A530

142.250.74.164

200 OK

2545

URL GET HTTP/2

www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fbitcoinsmining.top%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDc4ODVlNGRjM2M0fHx8MTY4NTYyMDE5Ni45MDc2fGRmNzVlMmMyZGMzOTQ2NmIzM2E0OTM0NjJjZTU1ZjE2MWRkODU2Mjl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDY4N2M1ODQxMmYzOTE4ZjVjZWNjMmNjN2ZlZWIwYmJiNTY2OWIzY2R8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2271262091554768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301100%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=341685620196821&num=0&output=afd_ads&domain_name=bitcoinsmining.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1685620196822&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fbitcoinsmining.top%2F&adbw=master-1%3A530
IP

142.250.74.164:443
ASN

#15169 GOOGLE

Requested by

http://bitcoinsmining.top/
Certificate

IssuerGoogle Trust Services LLC

Subjectwww.google.com

Fingerprint48:E3:15:66:FC:EA:15:BF:D2:34:C1:DD:60:D4:23:A3:63:57:89:8D

ValidityMon, 08 May 2023 08:25:18 GMT - Mon, 31 Jul 2023 08:25:17 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6326)

Size

2545
Hash

1f21d6e82126a8c4d10304b790395694

558999044fd4e12382efa5dff9061cfa82da72e2

a37a039089b20a1cf93deb9dedae84d9837ed4428ce54d3195c302d361ebc7bf

HTTP Headers

                                        GET /afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fbitcoinsmining.top%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDc4ODVlNGRjM2M0fHx8MTY4NTYyMDE5Ni45MDc2fGRmNzVlMmMyZGMzOTQ2NmIzM2E0OTM0NjJjZTU1ZjE2MWRkODU2Mjl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDY4N2M1ODQxMmYzOTE4ZjVjZWNjMmNjN2ZlZWIwYmJiNTY2OWIzY2R8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2271262091554768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301100%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=341685620196821&num=0&output=afd_ads&domain_name=bitcoinsmining.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1685620196822&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fbitcoinsmining.top%2F&adbw=master-1%3A530 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Thu, 01 Jun 2023 11:49:57 GMT
expires: Thu, 01 Jun 2023 11:49:57 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-GH30QNhlHKgnF9zQru9i0g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2545
x-xss-protection: 0
set-cookie: CONSENT=PENDING+459; expires=Sat, 31-May-2025 11:49:57 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/adsense/domains/caf.js

142.250.74.164

200 OK

54041

URL GET HTTP/3

www.google.com/adsense/domains/caf.js
IP

142.250.74.164:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fbitcoinsmining.top%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDc4ODVlNGRjM2M0fHx8MTY4NTYyMDE5Ni45MDc2fGRmNzVlMmMyZGMzOTQ2NmIzM2E0OTM0NjJjZTU1ZjE2MWRkODU2Mjl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDY4N2M1ODQxMmYzOTE4ZjVjZWNjMmNjN2ZlZWIwYmJiNTY2OWIzY2R8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2271262091554768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301100%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=341685620196821&num=0&output=afd_ads&domain_name=bitcoinsmining.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1685620196822&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fbitcoinsmining.top%2F&adbw=master-1%3A530
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

ASCII text, with very long lines (2125)

Size

54041
Hash

d29b4c2786b94d9dafe9e88974728ce0

c8dbbe5410c5cc2be01a37aa06786970929bb95c

34a9465d90b09a387f79aee55cfbce5ec6d62d09761f276a88401aa68c4e2cec

HTTP Headers

                                        GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 01 Jun 2023 11:49:57 GMT
expires: Thu, 01 Jun 2023 11:49:57 GMT
cache-control: private, max-age=3600
etag: "2413686849968073197"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

142.250.74.97

200 OK

174

URL GET HTTP/2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP

142.250.74.97:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fbitcoinsmining.top%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDc4ODVlNGRjM2M0fHx8MTY4NTYyMDE5Ni45MDc2fGRmNzVlMmMyZGMzOTQ2NmIzM2E0OTM0NjJjZTU1ZjE2MWRkODU2Mjl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDY4N2M1ODQxMmYzOTE4ZjVjZWNjMmNjN2ZlZWIwYmJiNTY2OWIzY2R8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2271262091554768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301100%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=341685620196821&num=0&output=afd_ads&domain_name=bitcoinsmining.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1685620196822&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fbitcoinsmining.top%2F&adbw=master-1%3A530
Certificate

IssuerGoogle Trust Services LLC

Subject*.googleusercontent.com

FingerprintE9:43:A2:2D:EB:A2:E1:09:B0:36:19:CF:E3:9C:F0:37:52:4F:DB:7A

ValidityMon, 08 May 2023 08:24:36 GMT - Mon, 31 Jul 2023 08:24:35 GMT

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators

Size

174
Hash

11b3089d616633ca6b73b57aa877eeb4

07632f63e06b30d9b63c97177d3a8122629bda9b

809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1

HTTP Headers

                                        GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Wed, 31 May 2023 14:43:07 GMT
expires: Thu, 01 Jun 2023 13:43:07 GMT
cache-control: public, max-age=82800
age: 76010
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

bitcoinsmining.top/track.php?domain=bitcoinsmining.top&caf=1&toggle=answercheck&answer=yes&uid=MTY4NTYyMDE5Ni45MDIxOmVjNWZmNjE0NDU2MTlkMTc5Nzc4NzYyM2M3ZDc4NjFlNGY1MmQ4ZTk0ZDk0OTZjNDI1YWFkYzgzZmU1NDJmODE6NjQ3ODg1ZTRkYzNlNA%3D%3D

185.53.177.31

200 OK

URL GET HTTP/1.1

bitcoinsmining.top/track.php?domain=bitcoinsmining.top&caf=1&toggle=answercheck&answer=yes&uid=MTY4NTYyMDE5Ni45MDIxOmVjNWZmNjE0NDU2MTlkMTc5Nzc4NzYyM2M3ZDc4NjFlNGY1MmQ4ZTk0ZDk0OTZjNDI1YWFkYzgzZmU1NDJmODE6NjQ3ODg1ZTRkYzNlNA%3D%3D
IP

185.53.177.31:80
ASN

#61969 Team Internet AG

Requested by

http://bitcoinsmining.top/

Magic

gzip compressed data, max speed, from Unix\012- data

Size

20
Hash

a4745abc5e7fdb89cc6df3069f3c6e69

74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed

d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

HTTP Headers

                                        GET /track.php?domain=bitcoinsmining.top&caf=1&toggle=answercheck&answer=yes&uid=MTY4NTYyMDE5Ni45MDIxOmVjNWZmNjE0NDU2MTlkMTc5Nzc4NzYyM2M3ZDc4NjFlNGY1MmQ4ZTk0ZDk0OTZjNDI1YWFkYzgzZmU1NDJmODE6NjQ3ODg1ZTRkYzNlNA%3D%3D HTTP/1.1
Host: bitcoinsmining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 11:49:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: answercheck
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

www.google.com/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=t0k2gdqk4zf5&aqid=5YV4ZOnhE-CLiM0P7OaF2A4&psid=8676772880&pbt=bs&adbx=375&adby=131&adbh=500&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=536423577&csala=15%7C0%7C252%7C157%7C276&lle=0&ifv=1&usr=1

142.250.74.164

204 No Content

URL GET HTTP/3

www.google.com/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=t0k2gdqk4zf5&aqid=5YV4ZOnhE-CLiM0P7OaF2A4&psid=8676772880&pbt=bs&adbx=375&adby=131&adbh=500&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=536423577&csala=15%7C0%7C252%7C157%7C276&lle=0&ifv=1&usr=1
IP

142.250.74.164:443
ASN

#15169 GOOGLE

Requested by

http://bitcoinsmining.top/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=t0k2gdqk4zf5&aqid=5YV4ZOnhE-CLiM0P7OaF2A4&psid=8676772880&pbt=bs&adbx=375&adby=131&adbh=500&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=536423577&csala=15%7C0%7C252%7C157%7C276&lle=0&ifv=1&usr=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-hngYKxCZs2vkzSm7sUN2_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Thu, 01 Jun 2023 11:49:59 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=RDQWbCUfGi9Da6eBk_tYPBX3YBvvLEVM4mI0agFu6L2pQ99wjE2pFKeBPLETy7XUt3VqhsGx4DRPSeDYs8jMyfP2ln0QaWpAwsMApZSNLdi4_uJ16YWDGenjCMCvuLLjoSCOC8KIc52ugZ_HCpaambB3igOmADb8fZ4uxu1Gboc; expires=Fri, 01-Dec-2023 11:49:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+166; expires=Sat, 31-May-2025 11:49:59 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=7d1w20dhafjr&aqid=5YV4ZOnhE-CLiM0P7OaF2A4&psid=8676772880&pbt=bv&adbx=375&adby=131&adbh=500&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=536423577&csala=15%7C0%7C252%7C157%7C276&lle=0&ifv=1&usr=1

142.250.74.164

204 No Content

URL GET HTTP/3

www.google.com/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=7d1w20dhafjr&aqid=5YV4ZOnhE-CLiM0P7OaF2A4&psid=8676772880&pbt=bv&adbx=375&adby=131&adbh=500&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=536423577&csala=15%7C0%7C252%7C157%7C276&lle=0&ifv=1&usr=1
IP

142.250.74.164:443
ASN

#15169 GOOGLE

Requested by

http://bitcoinsmining.top/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=7d1w20dhafjr&aqid=5YV4ZOnhE-CLiM0P7OaF2A4&psid=8676772880&pbt=bv&adbx=375&adby=131&adbh=500&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=536423577&csala=15%7C0%7C252%7C157%7C276&lle=0&ifv=1&usr=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bitcoinsmining.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-E_3YIMkJf0WinTPwg_Q1tA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Thu, 01 Jun 2023 11:49:59 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=p_ITxmTGzkWmMbHxyM7X36wfFNGjfc_AC_jNMBSy-GZcO98iE3a_dQPEkRNwwdEV8WRvzvW1XUt1JAHGE5ofIDfI936ttaOcZQDnLx5kT0X_hEWsCusCNlx2BM23GknAeZ8zoU2oJwrnKW6UGKhtXXuGST1Hs14u03H5Qlzelso; expires=Fri, 01-Dec-2023 11:49:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+498; expires=Sat, 31-May-2025 11:49:59 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff

142.250.74.97

200 OK

391

URL GET HTTP/2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP

142.250.74.97:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/afs/ads?adtest=off&psid=8676772880&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fbitcoinsmining.top%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NDc4ODVlNGRjM2M0fHx8MTY4NTYyMDE5Ni45MDc2fGRmNzVlMmMyZGMzOTQ2NmIzM2E0OTM0NjJjZTU1ZjE2MWRkODU2Mjl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDY4N2M1ODQxMmYzOTE4ZjVjZWNjMmNjN2ZlZWIwYmJiNTY2OWIzY2R8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2271262091554768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301100%2C17301157%2C17301160%2C17301182%2C17301185&format=r3%7Cs&nocache=341685620196821&num=0&output=afd_ads&domain_name=bitcoinsmining.top&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1685620196822&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&cl=536423577&uio=--&cont=tc&jsid=caf&jsv=536423577&rurl=http%3A%2F%2Fbitcoinsmining.top%2F&adbw=master-1%3A530
Certificate

IssuerGoogle Trust Services LLC

Subject*.googleusercontent.com

FingerprintE9:43:A2:2D:EB:A2:E1:09:B0:36:19:CF:E3:9C:F0:37:52:4F:DB:7A

ValidityMon, 08 May 2023 08:24:36 GMT - Mon, 31 Jul 2023 08:24:35 GMT

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (406), with no line terminators

Size

391
Hash

249bb4c6a37dfa60d6ecf838cada5020

4e56099d13b015804f79d1182f66982bc6e4662b

a2cebc2af2fd29cbee1ed7860ef5b12088b85259918d8bf2f2aaa99b915fa3f4

HTTP Headers

                                        GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 03:48:34 GMT
expires: Fri, 02 Jun 2023 02:48:34 GMT
cache-control: public, max-age=82800
age: 28883
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

#1 JS:Script (size: 148436)

#2 JS:Script (size: 761)

#3 JS:Script (size: 968)

#4 JS:Script (size: 147888)

#5 JS:Script (size: 742)

#6 JS:Script (size: 246)

#7 JS:Script (size: 7195)

#8 JS:Script (size: 7008)

#9 JS:Script (size: 1295)

#10 JS:Script (size: 20)

#11 JS:Script (size: 65)

#12 JS:Script (size: 472)

#13 JS:Script (size: 669)

#14 JS:Script (size: 40)

#15 JS:Script (size: 71)

HTTP Transactions (15)

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Magic

Size

Hash

HTTP Headers