Report - agpelicionpagm.blogspot.hk/

Report Overview

Submitted URL
agpelicionpagm.blogspot.hk/
IP
216.58.207.193
ASN
#15169 GOOGLE
Submitted
2024-04-25 04:02:28
Access
public
Website Title
Agraliafr.com
Final URL
ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
agpelicionpagm.blogspot.hk	unknown	unknown	No data	No data	481 B	698 B	216.58.207.193
agpelicionpagm.blogspot.com	unknown	unknown	No data	No data	482 B	16 kB	216.58.207.193
agraliafr.com	unknown	2023-12-21	2024-02-05	2024-02-05	521 B	337 B	103.224.212.213
ww25.agraliafr.com	unknown	unknown	No data	No data	2.0 kB	40 kB	199.59.243.225
www.adsensecustomsearchads.com	unknown	2011-01-28	2015-09-02	2024-04-24	3.2 kB	196 kB	216.58.211.14
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2024-04-24	1.0 kB	2.1 kB	142.250.74.97
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	432 B	191 kB	142.250.74.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	agpelicionpagm.blogspot.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec	435 B	2024-04-25	2024-04-25
Pretty URL ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec IP 199.59.243.225 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 06:02:35 Last Seen2024-04-25 06:02:35 Times Seen1 Hash d37abc4df295f612bb0b882807739d5a 7ccfffe74791d176fb2ef18a3851d703da42aed8 d1e07de7d13abfff430220b5067c6ea65e6b878351a1970c9c0d3bf91520fc61 Loading...

	ww25.agraliafr.com/bGyDqPghj.js	34 kB	2024-04-22	2024-05-04
Pretty URL ww25.agraliafr.com/bGyDqPghj.js IP 199.59.243.225 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-22 21:49:17 Last Seen2024-05-04 18:52:03 Times Seen3700 Hash f48baec69cc4dc0852d118259eff2d56 e64c6e4423421da5b35700154810cb67160bc32b 463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c Loading...

	www.google.com/adsense/domains/caf.js?abp=1&bodis=true	190 kB	2024-04-24	2024-04-30
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&bodis=true IP 142.250.74.164 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:28:04 Last Seen2024-04-30 17:42:34 Times Seen596 Hash 897277c2483f5e2098436b44787fbd62 903f66035a40f652f160272214c7ddf40ae12b2a 75c094124cda3ce0beba1b35bd4bea5a85495d53a871c66f55fbb8b027a63996 Loading...

	www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol416&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.agraliafr.com%2F%3Fcaf%3D1%26subid1%3D20240425-1402-043f-bacb-5d88237ccaec&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=5721714017725930&num=0&output=afd_ads&domain_name=ww25.agraliafr.com&v=3&bsl=8&pac=2&u_his=3&u_tz=0&dt=1714017725931&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww25.agraliafr.com%2Fatras%2F%3Fsubid1%3D20240425-1402-043f-bacb-5d88237ccaec	658 B	2024-04-25	2024-04-25
Pretty URL www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol416&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.agraliafr.com%2F%3Fcaf%3D1%26subid1%3D20240425-1402-043f-bacb-5d88237ccaec&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=5721714017725930&num=0&output=afd_ads&domain_name=ww25.agraliafr.com&v=3&bsl=8&pac=2&u_his=3&u_tz=0&dt=1714017725931&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww25.agraliafr.com%2Fatras%2F%3Fsubid1%3D20240425-1402-043f-bacb-5d88237ccaec IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 06:02:35 Last Seen2024-04-25 06:02:35 Times Seen1 Hash e4760a8ae814bc9912b7e348906161e4 1e7ed63b612b2f971bf66511bf90b5fad96c487d 0c1b9d7fbd2ba7c466833b4b3516e45dfef128a430e1d919cdfe432222b033b1 Loading...

	www.adsensecustomsearchads.com/adsense/domains/caf.js	191 kB	2024-04-18	2024-04-25
Pretty URL www.adsensecustomsearchads.com/adsense/domains/caf.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 21:06:32 Last Seen2024-04-25 20:39:01 Times Seen438 Hash 27feefb680b9a7bdef044b165d4e07b8 1b433ab1fb500cf4286007bca8c0760c76e22cae 8785b3b45f95fb6aad52f0cd8b480c912d560fa198fdcf8f3b939f5fb44d1d2f Loading...

HTTP Transactions (14)

URL IP Response Size

agpelicionpagm.blogspot.hk/

216.58.207.193

201 B

URL
agpelicionpagm.blogspot.hk/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text
Size
201 B (201 bytes)
Hash
1eb93dbe54251a7586e0935970a9edd7
dbd215f385fec390df63068cd4bbc48f0ce70a32
47f69bb94e3069a3aab3b5aa38a1ec7e4753a7ff14e8a240729ae5c48d744564

HTTP Headers

GET / HTTP/1.1
Host: agpelicionpagm.blogspot.hk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://agpelicionpagm.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 25 Apr 2024 04:02:03 GMT
expires: Thu, 25 Apr 2024 04:02:03 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 201
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

agpelicionpagm.blogspot.com/

216.58.207.193

15 kB

URL
agpelicionpagm.blogspot.com/
IP
216.58.207.193:0
ASN
#15169 GOOGLE

File type
HTML document, ASCII text, with very long lines (7139)
Size
15 kB (14963 bytes)
Hash
464eeeebdbff3487d5fb3d841ba3ed36
674f3036e46c00bd90770f8a6c9b3a982f30fddc
08b5b1e8c1f66c0aadeb2438d1b6220e54abd0822d9ffaaa7778d8c0fe0461a4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: agpelicionpagm.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests
content-security-policy-report-only: default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://www.blogger.com/cspreport
report-to: {"group":"blogspot","max_age":2592000,"endpoints":[{"url":"https://www.blogger.com/cspreport"}]}
content-type: text/html; charset=UTF-8
expires: Thu, 25 Apr 2024 04:02:03 GMT
date: Thu, 25 Apr 2024 04:02:03 GMT
cache-control: private, max-age=0
last-modified: Wed, 13 Mar 2024 22:16:30 GMT
etag: W/"0f60deefdd99743ed391ef3d0f95c42b023fb27434def955b7e5aa65d65fa3c4"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 14963
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

agraliafr.com/atras/

103.224.212.213

302 Found

2 B

URL User Request GET HTTP/1.1
agraliafr.com/atras/
IP
103.224.212.213:443
ASN
#133618 Trellian Pty. Limited

Certificate
IssuerLet's Encrypt
Subjectagraliafr.com
FingerprintF2:B5:74:93:B2:B7:C0:59:1C:D8:B7:E3:89:D3:7F:B1:83:70:A4:B6
ValidityWed, 27 Mar 2024 07:16:42 GMT - Tue, 25 Jun 2024 07:16:41 GMT

File type
ASCII text
Size
2 B (2 bytes)
Hash
e1c06d85ae7b8b032bef47e42e4c08f9
71853c6197a6a7f222db0f1978c7cb232b87c5ee
75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070

HTTP Headers

GET /atras/ HTTP/1.1
Host: agraliafr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://agpelicionpagm.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Thu, 25 Apr 2024 04:02:04 GMT
server: Apache
set-cookie: __tad=1714017724.1562782; expires=Sun, 23-Apr-2034 04:02:04 GMT; Max-Age=315360000
location: http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
content-length: 2
content-type: text/html; charset=UTF-8
connection: close

ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec

199.59.243.225

1.2 kB

URL User Request GET
ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
IP
199.59.243.225:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (450)
Size
1.2 kB (1182 bytes)
Hash
f74aaa0ace4c4fbb6388038f462bf27a
c80549d163cc7c7e9e54dcdcda3692a8cd0117fa
2d2c1d76a864d2727686cd665dc7736632c5a2b463aa07f72cd7a20cd3965b54

HTTP Headers

GET /atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec HTTP/1.1
Host: ww25.agraliafr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 04:02:05 GMT
content-type: text/html; charset=utf-8
content-length: 1182
x-request-id: bdda6745-74df-4108-a38f-b606eba9e0df
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Gd1JnZV1AhxQc9Ovph6Uc0voDSxjlazkW+fwx5Ip1KuWK9bMIi8hTEgR2L/eWf6WF6tmc4C2uWzK8fomF6WQIQ==
set-cookie: parking_session=bdda6745-74df-4108-a38f-b606eba9e0df; expires=Thu, 25 Apr 2024 04:17:05 GMT; path=/

ww25.agraliafr.com/bGyDqPghj.js

199.59.243.225

200 OK

34 kB

URL GET HTTP/1.1
ww25.agraliafr.com/bGyDqPghj.js
IP
199.59.243.225:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33788)
Size
34 kB (33791 bytes)
Hash
f48baec69cc4dc0852d118259eff2d56
e64c6e4423421da5b35700154810cb67160bc32b
463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c

HTTP Headers

GET /bGyDqPghj.js HTTP/1.1
Host: ww25.agraliafr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
Cookie: parking_session=bdda6745-74df-4108-a38f-b606eba9e0df
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 04:02:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 33791
x-request-id: eb518285-4575-4b5d-bad1-8280e928a59d
set-cookie: parking_session=bdda6745-74df-4108-a38f-b606eba9e0df; expires=Thu, 25 Apr 2024 04:17:05 GMT

ww25.agraliafr.com/_fd?subid1=20240425-1402-043f-bacb-5d88237ccaec

199.59.243.225

200 OK

2.6 kB

URL POST HTTP/1.1
ww25.agraliafr.com/_fd?subid1=20240425-1402-043f-bacb-5d88237ccaec
IP
199.59.243.225:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec

File type
ASCII text, with very long lines (4925), with no line terminators
Size
2.6 kB (2627 bytes)
Hash
f81fd69299c72b45dba3e05bc4eed60d
cffedc954b969a8819dbad977691df7f368d7477
330e709aaa355ce6985f772309aa461a3d3338317c5f5cdf09975f0e26c8655b

HTTP Headers

POST /_fd?subid1=20240425-1402-043f-bacb-5d88237ccaec HTTP/1.1
Host: ww25.agraliafr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
Content-Type: application/json
Origin: http://ww25.agraliafr.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=bdda6745-74df-4108-a38f-b606eba9e0df
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
server: openresty
date: Thu, 25 Apr 2024 04:02:05 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
content-length: 2627
x-version: 2.118.0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: parking_session=bdda6745-74df-4108-a38f-b606eba9e0df; expires=Thu, 25 Apr 2024 04:17:05 GMT; Max-Age=900; path=/; httponly

www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol416&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.agraliafr.com%2F%3Fcaf%3D1%26subid1%3D20240425-1402-043f-bacb-5d88237ccaec&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=5721714017725930&num=0&output=afd_ads&domain_name=ww25.agraliafr.com&v=3&bsl=8&pac=2&u_his=3&u_tz=0&dt=1714017725931&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww25.agraliafr.com%2Fatras%2F%3Fsubid1%3D20240425-1402-043f-bacb-5d88237ccaec

216.58.211.14

200 OK

2.6 kB

URL GET HTTP/2
www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol416&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.agraliafr.com%2F%3Fcaf%3D1%26subid1%3D20240425-1402-043f-bacb-5d88237ccaec&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=5721714017725930&num=0&output=afd_ads&domain_name=ww25.agraliafr.com&v=3&bsl=8&pac=2&u_his=3&u_tz=0&dt=1714017725931&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww25.agraliafr.com%2Fatras%2F%3Fsubid1%3D20240425-1402-043f-bacb-5d88237ccaec
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
HTML document, ASCII text, with very long lines (13196)
Size
2.6 kB (2617 bytes)
Hash
75507e85f19bf3a6da86d700829354d7
b55904b6f44db51edb447a9726932f9d1a324efb
fa791d7c4322fcc1c68ccf3a1bf47ae9135cdb6fb212342803742b88d996f319

HTTP Headers

GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol416&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.agraliafr.com%2F%3Fcaf%3D1%26subid1%3D20240425-1402-043f-bacb-5d88237ccaec&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=5721714017725930&num=0&output=afd_ads&domain_name=ww25.agraliafr.com&v=3&bsl=8&pac=2&u_his=3&u_tz=0&dt=1714017725931&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww25.agraliafr.com%2Fatras%2F%3Fsubid1%3D20240425-1402-043f-bacb-5d88237ccaec HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.agraliafr.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Thu, 25 Apr 2024 04:02:05 GMT
expires: Thu, 25 Apr 2024 04:02:05 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-AMMRKKMBcHOoa1XUCeOwyw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2617
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ww25.agraliafr.com/_tr

199.59.243.225

200 OK

22 B

URL POST HTTP/1.1
ww25.agraliafr.com/_tr
IP
199.59.243.225:80
ASN
#16509 AMAZON-02

Requested by
http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec

File type
ASCII text, with no line terminators
Size
22 B (22 bytes)
Hash
444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

HTTP Headers

POST /_tr HTTP/1.1
Host: ww25.agraliafr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
Content-Type: application/json
Content-Length: 1821
Origin: http://ww25.agraliafr.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=bdda6745-74df-4108-a38f-b606eba9e0df
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: openresty
date: Thu, 25 Apr 2024 04:02:06 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
content-length: 22
x-version: 2.118.0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: parking_session=bdda6745-74df-4108-a38f-b606eba9e0df; expires=Thu, 25 Apr 2024 04:17:06 GMT; Max-Age=900; path=/; httponly

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff

142.250.74.97

200 OK

278 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol416&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.agraliafr.com%2F%3Fcaf%3D1%26subid1%3D20240425-1402-043f-bacb-5d88237ccaec&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=5721714017725930&num=0&output=afd_ads&domain_name=ww25.agraliafr.com&v=3&bsl=8&pac=2&u_his=3&u_tz=0&dt=1714017725931&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww25.agraliafr.com%2Fatras%2F%3Fsubid1%3D20240425-1402-043f-bacb-5d88237ccaec
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47
ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT

File type
SVG Scalable Vector Graphics image
Size
278 B (278 bytes)
Hash
fe7dd8c3c629cc6e9cd6d3e4d3cbe905
59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18
5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 278
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 13:08:55 GMT
expires: Thu, 25 Apr 2024 12:08:55 GMT
cache-control: public, max-age=82800
age: 53591
last-modified: Tue, 27 Jun 2023 17:28:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b

142.250.74.97

200 OK

174 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol416&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.agraliafr.com%2F%3Fcaf%3D1%26subid1%3D20240425-1402-043f-bacb-5d88237ccaec&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=5721714017725930&num=0&output=afd_ads&domain_name=ww25.agraliafr.com&v=3&bsl=8&pac=2&u_his=3&u_tz=0&dt=1714017725931&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww25.agraliafr.com%2Fatras%2F%3Fsubid1%3D20240425-1402-043f-bacb-5d88237ccaec
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47
ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT

File type
SVG Scalable Vector Graphics image
Size
174 B (174 bytes)
Hash
d47125b2ba92be53dcff07ba322ce1de
e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28
5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:52:40 GMT
expires: Fri, 26 Apr 2024 01:52:40 GMT
cache-control: public, max-age=82800
age: 4166
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=xwfj1d437q3&aqid=vtUpZuSlAaSxiM0PzNWzsA8&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=7%7C0%7C377%7C63%7C9&lle=0&ifv=1&hpt=0

216.58.211.14

204 No Content

0 B

URL GET HTTP/3
www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=xwfj1d437q3&aqid=vtUpZuSlAaSxiM0PzNWzsA8&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=7%7C0%7C377%7C63%7C9&lle=0&ifv=1&hpt=0
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=xwfj1d437q3&aqid=vtUpZuSlAaSxiM0PzNWzsA8&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=7%7C0%7C377%7C63%7C9&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.agraliafr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-coG5QSgT_J7ncrtwNQSuyg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 25 Apr 2024 04:02:07 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=2qr9z53u40te&aqid=vtUpZuSlAaSxiM0PzNWzsA8&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=7%7C0%7C377%7C63%7C9&lle=0&ifv=1&hpt=0

216.58.211.14

204 No Content

0 B

URL GET HTTP/3
www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=2qr9z53u40te&aqid=vtUpZuSlAaSxiM0PzNWzsA8&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=7%7C0%7C377%7C63%7C9&lle=0&ifv=1&hpt=0
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=2qr9z53u40te&aqid=vtUpZuSlAaSxiM0PzNWzsA8&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=7%7C0%7C377%7C63%7C9&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.agraliafr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-fhEPsnQ-Wc9zf4cmvm1xzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 25 Apr 2024 04:02:08 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/adsense/domains/caf.js?abp=1&bodis=true

142.250.74.164

200 OK

190 kB

URL GET HTTP/2
www.google.com/adsense/domains/caf.js?abp=1&bodis=true
IP
142.250.74.164:443
ASN
#15169 GOOGLE

Requested by
http://ww25.agraliafr.com/atras/?subid1=20240425-1402-043f-bacb-5d88237ccaec
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73
ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT

File type
JavaScript source, ASCII text, with very long lines (2247)
Size
190 kB (190510 bytes)
Hash
897277c2483f5e2098436b44787fbd62
903f66035a40f652f160272214c7ddf40ae12b2a
75c094124cda3ce0beba1b35bd4bea5a85495d53a871c66f55fbb8b027a63996

HTTP Headers

GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.agraliafr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 25 Apr 2024 04:02:05 GMT
expires: Thu, 25 Apr 2024 04:02:05 GMT
cache-control: private, max-age=3600
etag: "7572795066147886669"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.adsensecustomsearchads.com/adsense/domains/caf.js

216.58.211.14

200 OK

191 kB

URL GET HTTP/3
www.adsensecustomsearchads.com/adsense/domains/caf.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol416&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww25.agraliafr.com%2F%3Fcaf%3D1%26subid1%3D20240425-1402-043f-bacb-5d88237ccaec&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=5721714017725930&num=0&output=afd_ads&domain_name=ww25.agraliafr.com&v=3&bsl=8&pac=2&u_his=3&u_tz=0&dt=1714017725931&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww25.agraliafr.com%2Fatras%2F%3Fsubid1%3D20240425-1402-043f-bacb-5d88237ccaec
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (2247)
Size
191 kB (190576 bytes)
Hash
27feefb680b9a7bdef044b165d4e07b8
1b433ab1fb500cf4286007bca8c0760c76e22cae
8785b3b45f95fb6aad52f0cd8b480c912d560fa198fdcf8f3b939f5fb44d1d2f

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 25 Apr 2024 04:02:06 GMT
expires: Thu, 25 Apr 2024 04:02:06 GMT
cache-control: private, max-age=3600
etag: "8799042092476481309"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN