| syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=krpqjpdcqavj&cd_fexp=72717108&aqid=euD-Z5uCCsKuiM0PhMDU2AI&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C363%7C85%7C21&lle=0&ifv=1&hpt=0 |  216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=krpqjpdcqavj&cd_fexp=72717108&aqid=euD-Z5uCCsKuiM0PhMDU2AI&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C363%7C85%7C21&lle=0&ifv=1&hpt=0 IP216.58.207.238:443
CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint40:28:84:65:00:64:ED:A3:1A:C2:1B:45:AA:96:A6:16:CA:BD:37:41 ValidityThu, 20 Mar 2025 11:21:50 GMT - Thu, 12 Jun 2025 11:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=krpqjpdcqavj&cd_fexp=72717108&aqid=euD-Z5uCCsKuiM0PhMDU2AI&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C363%7C85%7C21&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-QEVkDNct9QUPW-u6F9Z9SQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Tue, 15 Apr 2025 22:40:59 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/dyn-css/authorization.css?targetBlogID=3607850709690226091&zx=93411078-a2c2-459f-ba39-9bd9fcdbb7f6 | 142.250.74.73 | 200 OK | 1 B |
URL GET www.blogger.com/dyn-css/authorization.css?targetBlogID=3607850709690226091&zx=93411078-a2c2-459f-ba39-9bd9fcdbb7f6 IP142.250.74.73:443
Requested byhttps://stinerslowat1981.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint75:81:08:06:F2:E8:44:58:B6:62:59:16:53:40:E8:D8:6E:3C:DB:EB ValidityThu, 20 Mar 2025 11:18:25 GMT - Thu, 12 Jun 2025 11:18:24 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=3607850709690226091&zx=93411078-a2c2-459f-ba39-9bd9fcdbb7f6 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://stinerslowat1981.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 15 Apr 2025 22:40:51 GMT
last-modified: Tue, 15 Apr 2025 22:40:51 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ww1.forkinz.com/_fd | 199.59.243.228 | 200 OK | 5.4 kB |
IP199.59.243.228:80
File typeASCII text, with very long lines (5389), with no line terminators Hash195e623a9577d90b23d4430e8b6d6fa8 e8c6f5228c237569bbb62253782f827e744af009 b39bf164abfcef8e2aa885f03326a203bf273d2315b083757e780b79ef0345cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /_fd HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.forkinz.com/
Content-Type: application/json
Origin: http://ww1.forkinz.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=0829d8ae-909d-4b66-9261-1ad679eaaa70
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200 OK
date: Tue, 15 Apr 2025 22:40:57 GMT
content-type: application/json; charset=utf-8
content-length: 5389
x-request-id: 4b9219e8-e288-48a7-a95a-3753a18a5f32
set-cookie: parking_session=0829d8ae-909d-4b66-9261-1ad679eaaa70; expires=Tue, 15 Apr 2025 22:55:57 GMT
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol490%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3&nocache=4301744756857992&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744756857994&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F&referer=http%3A%2F%2Fforkinz.com%2F | 216.58.207.238 | 200 OK | 14 kB |
URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol490%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3&nocache=4301744756857992&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744756857994&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F&referer=http%3A%2F%2Fforkinz.com%2F IP216.58.207.238:443
CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint40:28:84:65:00:64:ED:A3:1A:C2:1B:45:AA:96:A6:16:CA:BD:37:41 ValidityThu, 20 Mar 2025 11:21:50 GMT - Thu, 12 Jun 2025 11:21:49 GMT
File typeHTML document, ASCII text, with very long lines (13037) Hash6aa7a9396b8681028cfcf6aec2e1197f baff108e6e6614790800ce8dce699a7293ebc78e 368bf11e1130bcaa5bb4eb17782366f2803af01771b5116d36de860456f3404b
GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol490%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3&nocache=4301744756857992&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744756857994&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F&referer=http%3A%2F%2Fforkinz.com%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Tue, 15 Apr 2025 22:40:58 GMT
expires: Tue, 15 Apr 2025 22:40:58 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Kgflnh4YUy3cFbFj6uoTEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2685
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 216.58.207.238 | 200 OK | 144 kB |
URL GET syndicatedsearch.goog/adsense/domains/caf.js IP216.58.207.238:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol490%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3&nocache=4301744756857992&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744756857994&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F&referer=http%3A%2F%2Fforkinz.com%2F CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint40:28:84:65:00:64:ED:A3:1A:C2:1B:45:AA:96:A6:16:CA:BD:37:41 ValidityThu, 20 Mar 2025 11:21:50 GMT - Thu, 12 Jun 2025 11:21:49 GMT
File typeJavaScript source, ASCII text, with very long lines (1831) Size144 kB (144079 bytes) Hashf267cc78e0c1cc8d90841eda54c2e5de 8d704a7f3d8ce8f9fa04477fc29d917111a081c4 34b1ae29f010cbe8b62ef562af04f6b86924f4747ddaedc3ea2ce4a8dc948f6c
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 15 Apr 2025 22:40:58 GMT
expires: Tue, 15 Apr 2025 22:40:58 GMT
cache-control: private, max-age=3600
etag: "16637348433415361788"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ww1.forkinz.com/_tr | 199.59.243.228 | 200 OK | 2 B |
IP199.59.243.228:80
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /_tr HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.forkinz.com/
Content-Type: application/json
Content-Length: 1933
Origin: http://ww1.forkinz.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=0829d8ae-909d-4b66-9261-1ad679eaaa70
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 15 Apr 2025 22:40:58 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-request-id: 11a59fb6-7d38-415f-b556-3db5831cb072
set-cookie: parking_session=0829d8ae-909d-4b66-9261-1ad679eaaa70; expires=Tue, 15 Apr 2025 22:55:58 GMT
|
|
| stinerslowat1981.blogspot.jp/ | 142.250.74.161 | 302 Found | 11 kB |
URL User Request GET stinerslowat1981.blogspot.jp/ IP142.250.74.161:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE7:98:65:28:50:8C:40:BC:4E:3C:F6:5D:DE:13:DB:2E:CC:B3:33:E1 ValidityThu, 20 Mar 2025 11:19:23 GMT - Thu, 12 Jun 2025 11:19:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: stinerslowat1981.blogspot.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://stinerslowat1981.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Tue, 15 Apr 2025 22:40:50 GMT
expires: Tue, 15 Apr 2025 22:40:50 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 204
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stinerslowat1981.blogspot.com/ | 142.250.74.161 | 200 OK | 11 kB |
URL User Request GET stinerslowat1981.blogspot.com/ IP142.250.74.161:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE7:98:65:28:50:8C:40:BC:4E:3C:F6:5D:DE:13:DB:2E:CC:B3:33:E1 ValidityThu, 20 Mar 2025 11:19:23 GMT - Thu, 12 Jun 2025 11:19:22 GMT
File typeHTML document, ASCII text, with very long lines (5270) Hash9059aa027194200b4d799f0efeaa84f5 ffc9e7d1b53e627a9bc124f36975b1f0607d03b4 fcff0eaa3f354af0722cdbd7ee5ba76c01a8b05e21acd29d9506c02d53bd60a9
GET / HTTP/1.1
Host: stinerslowat1981.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Tue, 15 Apr 2025 22:40:51 GMT
date: Tue, 15 Apr 2025 22:40:51 GMT
cache-control: private, max-age=0
last-modified: Wed, 04 Sep 2024 20:17:52 GMT
etag: W/"a98889d97ce44031faafd437aca43b52d18abd1f33afa4d0ff90bbbb491b552c"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 3410
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stinerslowat1981.blogspot.com/js/cookienotice.js | 142.250.74.161 | 200 OK | 6.5 kB |
URL GET stinerslowat1981.blogspot.com/js/cookienotice.js IP142.250.74.161:443
Requested byhttps://stinerslowat1981.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE7:98:65:28:50:8C:40:BC:4E:3C:F6:5D:DE:13:DB:2E:CC:B3:33:E1 ValidityThu, 20 Mar 2025 11:19:23 GMT - Thu, 12 Jun 2025 11:19:22 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: stinerslowat1981.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://stinerslowat1981.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Tue, 15 Apr 2025 22:40:51 GMT
expires: Tue, 22 Apr 2025 22:40:51 GMT
cache-control: public, max-age=604800
last-modified: Tue, 15 Apr 2025 18:56:15 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/adsense/domains/caf.js?abp=1&bodis=true | 142.250.178.68 | 200 OK | 144 kB |
URL GET www.google.com/adsense/domains/caf.js?abp=1&bodis=true IP142.250.178.68:443
CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint40:5C:81:99:DA:01:36:FE:E4:60:2B:67:51:3D:C2:62:8D:9A:38:47 ValidityThu, 20 Mar 2025 11:20:31 GMT - Thu, 12 Jun 2025 11:20:30 GMT
File typeJavaScript source, ASCII text, with very long lines (1831) Size144 kB (144072 bytes) Hash3217f86795a1f75efe9633c55221ea43 a332ed7ea1d7229334b040fac7bde7601ec87173 d30c3213bf965078d0a03ea0086c4719ba102f9b3dbd3aaa0be0de7a1d96b48f
GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 15 Apr 2025 22:40:57 GMT
expires: Tue, 15 Apr 2025 22:40:57 GMT
cache-control: private, max-age=3600
etag: "2741063178452320320"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b | 142.250.74.33 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol490%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3&nocache=4301744756857992&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744756857994&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F&referer=http%3A%2F%2Fforkinz.com%2F CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint85:BF:6A:5F:09:9C:AA:F5:8D:3B:2E:65:D1:16:4F:7F:03:2D:A8:DD ValidityThu, 20 Mar 2025 11:19:41 GMT - Thu, 12 Jun 2025 11:19:40 GMT
File typeSVG Scalable Vector Graphics image Hashd47125b2ba92be53dcff07ba322ce1de e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28 5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Apr 2025 12:44:31 GMT
expires: Wed, 16 Apr 2025 11:44:31 GMT
cache-control: public, max-age=82800
age: 35787
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=a5llwio2ykb0&cd_fexp=72717108&aqid=euD-Z5uCCsKuiM0PhMDU2AI&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C363%7C85%7C21&lle=0&ifv=1&hpt=0 | 216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=a5llwio2ykb0&cd_fexp=72717108&aqid=euD-Z5uCCsKuiM0PhMDU2AI&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C363%7C85%7C21&lle=0&ifv=1&hpt=0 IP216.58.207.238:443
CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint40:28:84:65:00:64:ED:A3:1A:C2:1B:45:AA:96:A6:16:CA:BD:37:41 ValidityThu, 20 Mar 2025 11:21:50 GMT - Thu, 12 Jun 2025 11:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=a5llwio2ykb0&cd_fexp=72717108&aqid=euD-Z5uCCsKuiM0PhMDU2AI&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C363%7C85%7C21&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-VnvfJNDRaHNuOH-EIaIanw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Tue, 15 Apr 2025 22:40:59 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css | 142.250.74.73 | 200 OK | 31 kB |
URL GET www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css IP142.250.74.73:443
Requested byhttps://stinerslowat1981.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint75:81:08:06:F2:E8:44:58:B6:62:59:16:53:40:E8:D8:6E:3C:DB:EB ValidityThu, 20 Mar 2025 11:18:25 GMT - Thu, 12 Jun 2025 11:18:24 GMT
File typeASCII text, with very long lines (30596) Hashe3f09df1bc175f411d1ec3dfb5afb17b 3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9 1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://stinerslowat1981.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Apr 2025 09:35:00 GMT
expires: Fri, 10 Apr 2026 09:35:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 09 Apr 2025 18:06:37 GMT
content-type: text/css
vary: Accept-Encoding
age: 479151
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stinerslowat1981.blogspot.com/favicon.ico |  0.0.0.0 | | 0 B |
URL GET stinerslowat1981.blogspot.com/favicon.ico IP0.0.0.0:0
Requested byhttps://stinerslowat1981.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE7:98:65:28:50:8C:40:BC:4E:3C:F6:5D:DE:13:DB:2E:CC:B3:33:E1 ValidityThu, 20 Mar 2025 11:19:23 GMT - Thu, 12 Jun 2025 11:19:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: stinerslowat1981.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://stinerslowat1981.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| |  212.32.237.90 | 200 OK | 479 B |
IP212.32.237.90:80 ASN#60781 LeaseWeb Netherlands B.V.
File typeHTML document, ASCII text, with very long lines (479), with no line terminators Hasha57697f7df22cbffbf073f1ee0fbfef7 9b09fe30299d9367c5674ac6c77e5debc542f5f7 817d54af1b1f8234776b64b1d66bfb480f3dd79e7967cdb6282ce1b913087d37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /de.html HTTP/1.1
Host: forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 479
content-type: text/html; charset=utf-8
date: Tue, 15 Apr 2025 22:40:55 GMT
server: nginx
set-cookie: sid=b1274330-1a4a-11f0-bbcd-d929661de685; path=/; domain=.forkinz.com; expires=Mon, 04 May 2093 01:55:03 GMT; max-age=2147483647; HttpOnly
|
|
| forkinz.com/favicon.ico | 212.32.237.90 | 404 Not Found | 9 B |
IP212.32.237.90:80 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttp://forkinz.com/de.html
File typeASCII text, with no line terminators Hashd8f4a1993546cc4b850cde3599e27aec 094b763b4cfcc0b05e5d040581cd513c3ca08067 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://forkinz.com/de.html
Cookie: sid=b1274330-1a4a-11f0-bbcd-d929661de685
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Tue, 15 Apr 2025 22:40:56 GMT
server: nginx
|
|
| ww1.forkinz.com/bJBYdKUGW.js | 199.59.243.228 | 200 OK | 36 kB |
URL GET ww1.forkinz.com/bJBYdKUGW.js IP199.59.243.228:80
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (35690) Hashb31a2ef88b7707fdd5e9dacade05a504 349fc0a18b1b31d2fe8f81a28034dd600caf4ae1 1a05b5cf9f72b9af409d10301e29196c4435fd094310bd0da4c2d7856b80d0af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bJBYdKUGW.js HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Cookie: parking_session=0829d8ae-909d-4b66-9261-1ad679eaaa70
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 15 Apr 2025 22:40:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 35693
x-request-id: d99868bd-c0e2-42e7-a541-498f182b46fd
set-cookie: parking_session=0829d8ae-909d-4b66-9261-1ad679eaaa70; expires=Tue, 15 Apr 2025 22:55:57 GMT
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol490%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3&nocache=4301744756857992&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744756857994&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F&referer=http%3A%2F%2Fforkinz.com%2F CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint85:BF:6A:5F:09:9C:AA:F5:8D:3B:2E:65:D1:16:4F:7F:03:2D:A8:DD ValidityThu, 20 Mar 2025 11:19:41 GMT - Thu, 12 Jun 2025 11:19:40 GMT
File typeSVG Scalable Vector Graphics image Hash11b3089d616633ca6b73b57aa877eeb4 07632f63e06b30d9b63c97177d3a8122629bda9b 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Apr 2025 10:08:44 GMT
expires: Wed, 16 Apr 2025 09:08:44 GMT
cache-control: public, max-age=82800
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
age: 45134
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/1799749036-widgets.js | 142.250.74.73 | 200 OK | 146 kB |
URL GET www.blogger.com/static/v1/widgets/1799749036-widgets.js IP142.250.74.73:443
Requested byhttps://stinerslowat1981.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint75:81:08:06:F2:E8:44:58:B6:62:59:16:53:40:E8:D8:6E:3C:DB:EB ValidityThu, 20 Mar 2025 11:18:25 GMT - Thu, 12 Jun 2025 11:18:24 GMT
File typeJavaScript source, ASCII text, with very long lines (4070) Size146 kB (146148 bytes) Hash5ed793ca6de65f810e8b4304b369933e c6fe9272ea98b238b8ea0c4c093715657139eb10 4eb5ec25ff4ae6cc0897e71ddc0bc52dfc8509305033c531bb54b60fb79d2674
GET /static/v1/widgets/1799749036-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://stinerslowat1981.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51656
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Apr 2025 02:14:45 GMT
expires: Sat, 11 Apr 2026 02:14:45 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 11 Apr 2025 01:35:18 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 419166
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /de.html HTTP/1.1
Host: forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| forkinz.com/de.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0NDc2NDA1NSwiaWF0IjoxNzQ0NzU2ODU1LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMHI5dTdja3NwcjJ2ZDJldnMwYmllczEiLCJuYmYiOjE3NDQ3NTY4NTUsInRzIjoxNzQ0NzU2ODU1MDUzNTgwfQ.68eDFsfZmzAOeAr8HDobFQ8pw99mU8-K4VnnC8F2VTY&sid=b1274330-1a4a-11f0-bbcd-d929661de685 | 212.32.237.90 | 302 Found | 1.1 kB |
URL User Request GET forkinz.com/de.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0NDc2NDA1NSwiaWF0IjoxNzQ0NzU2ODU1LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMHI5dTdja3NwcjJ2ZDJldnMwYmllczEiLCJuYmYiOjE3NDQ3NTY4NTUsInRzIjoxNzQ0NzU2ODU1MDUzNTgwfQ.68eDFsfZmzAOeAr8HDobFQ8pw99mU8-K4VnnC8F2VTY&sid=b1274330-1a4a-11f0-bbcd-d929661de685 IP212.32.237.90:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectforkinz.com FingerprintBE:A4:00:64:2B:B8:BF:A3:23:FE:44:26:1D:E7:1D:00:7E:43:A0:92 ValidityThu, 20 Feb 2025 03:52:59 GMT - Wed, 21 May 2025 03:52:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /de.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0NDc2NDA1NSwiaWF0IjoxNzQ0NzU2ODU1LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMHI5dTdja3NwcjJ2ZDJldnMwYmllczEiLCJuYmYiOjE3NDQ3NTY4NTUsInRzIjoxNzQ0NzU2ODU1MDUzNTgwfQ.68eDFsfZmzAOeAr8HDobFQ8pw99mU8-K4VnnC8F2VTY&sid=b1274330-1a4a-11f0-bbcd-d929661de685 HTTP/1.1
Host: forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://forkinz.com/de.html
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: sid=b1274330-1a4a-11f0-bbcd-d929661de685
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Tue, 15 Apr 2025 22:40:56 GMT
location: http://ww1.forkinz.com
server: Cowboy
set-cookie: sid=b1274330-1a4a-11f0-bbcd-d929661de685; path=/; domain=.forkinz.com; expires=Mon, 04 May 2093 01:55:04 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| | 199.59.243.228 | 200 OK | 1.1 kB |
IP199.59.243.228:80
File typeHTML document, ASCII text, with very long lines (358) Hash7b7bd80fa4bc4e945446b63503206ad3 d7ae13a5e92e896dbc5494daeb8eab178e8ad1e7 7585d1ad7ebfa0cd67cda3b74ee92fc389752284abeb50d9b98ce44fc86e58c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://forkinz.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 15 Apr 2025 22:40:56 GMT
content-type: text/html; charset=utf-8
content-length: 1090
x-request-id: 0829d8ae-909d-4b66-9261-1ad679eaaa70
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_L+fG0F6zaAiOdkJapPT2YBVjPFJeolVzr6aOJf//BQlaoZDPCyBP0RHVLoMB34k7RyplYj49Ad7kBS2aAsk1kw==
set-cookie: parking_session=0829d8ae-909d-4b66-9261-1ad679eaaa70; expires=Tue, 15 Apr 2025 22:55:57 GMT; path=/
|
|