| www.rmvjdyapqszg.com/ |  13.248.213.45 | | 114 B |
IP13.248.213.45:0
File typeHTML document, ASCII text, with no line terminators Hashe89f75f918dbdcee28604d4e09dd71d7 f9d9055e9878723a12063b47d4a1a5f58c3eb1e9 6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.rmvjdyapqszg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 114
date: Thu, 18 Apr 2024 08:57:05 GMT
X-Firefox-Spdy: h2
|
|
| www.rmvjdyapqszg.com/lander | 13.248.213.45 | 200 OK | 620 B |
URL User Request GET HTTP/2www.rmvjdyapqszg.com/lander IP13.248.213.45:443
CertificateIssuerGoDaddy.com, Inc. Subjectwww.rmvjdyapqszg.com FingerprintE9:58:7C:89:51:B1:62:26:E8:D3:02:61:B3:6B:5C:37:0D:93:36:31 ValidityTue, 02 Apr 2024 00:38:19 GMT - Wed, 02 Apr 2025 00:38:19 GMT
File typeHTML document, ASCII text, with very long lines (619) Hash259417e1f9ee538515e103e06552310a 2fc35cfaf0cea7f5121114df7e9d41a21a434ee3 6ce85c22dde60fc6c6781f1495bc88de7b906f2a2036caf811739fdafde686e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lander HTTP/1.1
Host: www.rmvjdyapqszg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rmvjdyapqszg.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=86400
content-type: text/html
date: Thu, 18 Apr 2024 08:57:06 GMT
server: openresty
set-cookie: traffic_target=reseller; Path=/; Max-Age=86400
caf_ipaddr=91.90.42.154; Path=/; Max-Age=86400
country=NO; Path=/; Max-Age=86400
city=Oslo; Path=/; Max-Age=86400
lander_type=parkweb-reseller; Path=/; Max-Age=86400
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_GO4hqgJ+i8NoLMX9AZNaZuFoKP8wWZH0zAbGD2OO5VQhJd4X2b63hPNmArgG+AlJh6p/nkKhwDfPHIrgfrzerQ
x-content-type-options: nosniff
content-length: 620
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css |  23.36.79.43 | 200 OK | 766 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css IP23.36.79.43:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typeASCII text, with very long lines (2736) Hashe2009d689266387017b6648142516bd9 15535120c37eab27b129c344a9dac737d45844bb 0fe514c7010c6d8b9e44f011eea7497f7e482a60e1498ce324f99729948d048d
GET /parking-lander/static/css/main.8a1d19af.css HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rmvjdyapqszg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: OAc6ikl6awqNj3alJ1UdxgarrD3puhzFtVj/IqU8JHBTNlbr7kt8nGWF9haj8BGNSQIntyPM8rc=
x-amz-request-id: ZB6F3ZHGAVT2CFB4
last-modified: Tue, 16 Apr 2024 23:23:15 GMT
etag: "e2009d689266387017b6648142516bd9"
x-amz-server-side-encryption: AES256
x-amz-version-id: dbYT_U5ylYTQfZ_.ghC3qrKyI1wA3XVB
accept-ranges: bytes
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Fri, 18 Apr 2025 08:57:06 GMT
date: Thu, 18 Apr 2024 08:57:06 GMT
content-length: 766
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/static/js/main.93aa74bd.js | 23.36.79.43 | 200 OK | 176 kB |
URL GET HTTP/2img1.wsimg.com/parking-lander/static/js/main.93aa74bd.js IP23.36.79.43:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typeJavaScript source, ASCII text, with very long lines (65465) Size176 kB (175874 bytes) Hash9e0c2acc6884700def88042217ce0e2d 21176e4ae7b69baf2939b14ffbdc04352281a432 9b5d7cf50fa1b5d3f15913ad67116cad2e0760e9efa514ce0ff6a89af51346cb
GET /parking-lander/static/js/main.93aa74bd.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rmvjdyapqszg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: LP3NPNwVsXsDk/vzR67TZjbsEAzEzafnPCsyC4OOqT5Mg7zpAnp32/lzntbpU11L1zbfpNuYvvA=
x-amz-request-id: GADG5XTYW5W1K343
last-modified: Tue, 16 Apr 2024 23:23:07 GMT
etag: "9e0c2acc6884700def88042217ce0e2d"
x-amz-server-side-encryption: AES256
x-amz-version-id: cwykqxQNjvcr0Tuhl6rdBmjWI3qHsLuT
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 175874
cache-control: max-age=31536000
expires: Fri, 18 Apr 2025 08:57:06 GMT
date: Thu, 18 Apr 2024 08:57:06 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/px.js?ch=1&abp=1&gdabp=true | 23.36.79.43 | 200 OK | 20 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/px.js?ch=1&abp=1&gdabp=true IP23.36.79.43:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash3970e82605c7d109bb348fc94e9eecc0 e03849ea786b9f7b28a35c17949e85a93eb1cff1 f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /parking-lander/px.js?ch=1&abp=1&gdabp=true HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rmvjdyapqszg.com/
Origin: https://www.rmvjdyapqszg.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QxdO35i7qFeNWIs+OZook02OP3xvYcROxd0fPBPWh3ffsCgXu+tr5uLNkjYDZ8wfBNSy0aQ3SlqZuk/l7OaMrg==
x-amz-request-id: DZJJG79Q4EXPE16H
last-modified: Tue, 16 Apr 2024 23:23:16 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-server-side-encryption: AES256
x-amz-version-id: 2w7pNyQftO_hbKj.byhMbyWgNjXlIrbc
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 20
cache-control: max-age=31536000
expires: Fri, 18 Apr 2025 08:57:06 GMT
date: Thu, 18 Apr 2024 08:57:06 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/px.js?ch=2&abp=2&gdabp=true | 23.36.79.43 | 200 OK | 20 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/px.js?ch=2&abp=2&gdabp=true IP23.36.79.43:443 ASN#20940 Akamai International B.V.
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash3970e82605c7d109bb348fc94e9eecc0 e03849ea786b9f7b28a35c17949e85a93eb1cff1 f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /parking-lander/px.js?ch=2&abp=2&gdabp=true HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rmvjdyapqszg.com/
Origin: https://www.rmvjdyapqszg.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 5TedeOjHvti0cz38g4/1eXnveunfpxXOcs7WbK4xG0OBulDjrdxYvCeAblPEhH5Zbp9QGF74KtefkYoDrJXlFQ==
x-amz-request-id: M4NC1MPBADY22K62
last-modified: Thu, 11 Apr 2024 17:16:11 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-server-side-encryption: AES256
x-amz-version-id: 4Cb3qWh6bQDe7uJN2oBtFGYS8razHRk.
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 20
cache-control: max-age=31536000
expires: Fri, 18 Apr 2025 08:57:06 GMT
date: Thu, 18 Apr 2024 08:57:06 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ad-delivery.net/px.gif?ch=2 |  104.26.3.70 | 200 OK | 43 B |
URL GET HTTP/2ad-delivery.net/px.gif?ch=2 IP104.26.3.70:443
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerGoogle Trust Services LLC Subjectad-delivery.net Fingerprint03:56:A5:CD:68:65:E1:00:BD:87:3E:45:0C:B1:3B:C2:2C:8C:4E:18 ValidityTue, 19 Mar 2024 04:48:01 GMT - Mon, 17 Jun 2024 04:48:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rmvjdyapqszg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:57:06 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPoR4JXLqkfpf-u09lS0JRH4wHiZk5pp3DpGwPYXSZHMyeJV_4xQVHswRg5LBcY1bjGFi2uKubkW3g
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sat, 13 Apr 2024 07:11:32 GMT
cache-control: public, max-age=86400
age: 441934
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tiLdczSoMErnejDRxQ5uRGPgNuPI7Vt1wpNTPh%2F8LZJ61XhXUli0FqwQ7qBScp42EOuDfvqgkyYzEBI4z%2BU6Qbis9HBPOfNlSz8ym3Mgx9YlBUB41WKk1g1Mhh5%2BZkuibQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87637208df7156aa-OSL
X-Firefox-Spdy: h2
|
|
| ad-delivery.net/px.gif?ch=1&e=0.15319413377561641 | 104.26.3.70 | 200 OK | 43 B |
URL GET HTTP/2ad-delivery.net/px.gif?ch=1&e=0.15319413377561641 IP104.26.3.70:443
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerGoogle Trust Services LLC Subjectad-delivery.net Fingerprint03:56:A5:CD:68:65:E1:00:BD:87:3E:45:0C:B1:3B:C2:2C:8C:4E:18 ValidityTue, 19 Mar 2024 04:48:01 GMT - Mon, 17 Jun 2024 04:48:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.15319413377561641 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rmvjdyapqszg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:57:06 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPoR4JXLqkfpf-u09lS0JRH4wHiZk5pp3DpGwPYXSZHMyeJV_4xQVHswRg5LBcY1bjGFi2uKubkW3g
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sat, 13 Apr 2024 07:11:32 GMT
cache-control: public, max-age=86400
age: 441934
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y00vPkCxVBEgc907DUqUX%2B3KxM1wAKJJwJI8%2F%2FC3B6bZOOs%2BHimNaDGp4ViQ4dRyCDFnXoNj6yX8BD5ay5mZipoOSwz4C6nQkJiRriIoOqYwhT4KCLtg2b9Qdh18nT5Rvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87637208ef7956aa-OSL
X-Firefox-Spdy: h2
|
|
| api.btloader.com/mw/state?bt_env=prod | 130.211.23.194 | 204 No Content | 0 B |
URL GET HTTP/2api.btloader.com/mw/state?bt_env=prod IP130.211.23.194:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerGoogle Trust Services LLC Subjectapi.btloader.com Fingerprint91:D7:31:40:CA:23:84:1D:EC:B3:E5:18:FA:A1:67:B2:7E:BF:4D:3F ValidityFri, 05 Apr 2024 16:07:23 GMT - Thu, 04 Jul 2024 17:00:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mw/state?bt_env=prod HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rmvjdyapqszg.com/
Origin: https://www.rmvjdyapqszg.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
vary: Origin
date: Thu, 18 Apr 2024 08:57:06 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| btloader.com/tag?o=5097926782615552&upapi=true | 104.22.75.216 | 200 OK | 56 kB |
URL GET HTTP/2btloader.com/tag?o=5097926782615552&upapi=true IP104.22.75.216:443
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerGoogle Trust Services LLC Subjectbtloader.com Fingerprint70:F7:F9:F7:42:5B:08:2E:94:58:BB:71:DF:F9:4D:8C:F5:09:57:DA ValiditySun, 14 Apr 2024 06:05:01 GMT - Sat, 13 Jul 2024 06:05:00 GMT
File typeJavaScript source, ASCII text, with very long lines (56156) Hashe803f390bdba4ee53e7c1a9c47b77f47 cd18118392f711fe80d0de8a3a783f4f065b793a 16bfe01f39954ffd77669320993b6219dee90ec2b9d407caa4da21425955e509
GET /tag?o=5097926782615552&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rmvjdyapqszg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:57:06 GMT
content-type: application/javascript
content-length: 18708
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
content-encoding: gzip
etag: "de24038dfd66aa2a4286651c710a79eb"
last-modified: Thu, 18 Apr 2024 08:30:11 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 1593
accept-ranges: bytes
server: cloudflare
cf-ray: 87637206ecff10b1-CPH
X-Firefox-Spdy: h2
|
|
| www.google.com/adsense/domains/caf.js?abp=1&gdabp=true | 142.250.74.164 | 200 OK | 191 kB |
URL GET HTTP/2www.google.com/adsense/domains/caf.js?abp=1&gdabp=true IP142.250.74.164:443
Requested byhttps://www.rmvjdyapqszg.com/lander CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeJavaScript source, ASCII text, with very long lines (2247) Size191 kB (191006 bytes) Hashde882809a9701f33f7e93b3b9b50ac3a 283ea15cff0b9f61d6c3b266ed7aeac717281be5 437cd8ad6e522ab2314977637ceae03f76839f61b521c735d7696641b568bc38
GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rmvjdyapqszg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 18 Apr 2024 08:57:06 GMT
expires: Thu, 18 Apr 2024 08:57:06 GMT
cache-control: private, max-age=3600
etag: "5456736120062209280"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|