applabzzeydoo.com/track-impression-applab?z=5332574&b=14556889&ymid=qoBeareGsqpqjMqrdwAkiO&var=&var_3=14556889_&redirect=true&redirectUrl=https://play.google.com/store/apps/details?id=com.samoukale.jaxvpn&referrer=subid=${SUBID}&utm_source=5332574&request_var=&os={os}&osversion={osversion}&browser={browser}&campaignid={campaignid}&utm_campaign={campaignid}&geo={geo}&utm_medium=zeydoo&land_state=before_render&land_id=Ik3Z1hRmgbrHuHy&land_generation_time=2023-11-30_03:47:01&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=781ee0e7dd2412b6bf396f94496ee79f&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=google
139.45.197.151302 Found 0 B URL User Request GET HTTP/2 applabzzeydoo.com/track-impression-applab?z=5332574&b=14556889&ymid=qoBeareGsqpqjMqrdwAkiO&var=&var_3=14556889_&redirect=true&redirectUrl=https://play.google.com/store/apps/details?id=com.samoukale.jaxvpn&referrer=subid=${SUBID}&utm_source=5332574&request_var=&os={os}&osversion={osversion}&browser={browser}&campaignid={campaignid}&utm_campaign={campaignid}&geo={geo}&utm_medium=zeydoo&land_state=before_render&land_id=Ik3Z1hRmgbrHuHy&land_generation_time=2023-11-30_03:47:01&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=781ee0e7dd2412b6bf396f94496ee79f&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=google
IP 139.45.197.151:443
Certificate IssuerLet's Encrypt
Subjectapplabzzeydoo.com
FingerprintE6:7F:27:D0:A2:AF:AA:09:E8:6B:95:38:9B:26:B7:C6:69:35:47:D6
ValidityTue, 12 Sep 2023 05:08:05 GMT - Mon, 11 Dec 2023 05:08:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /track-impression-applab?z=5332574&b=14556889&ymid=qoBeareGsqpqjMqrdwAkiO&var=&var_3=14556889_&redirect=true&redirectUrl=https://play.google.com/store/apps/details?id=com.samoukale.jaxvpn&referrer=subid=${SUBID}&utm_source=5332574&request_var=&os={os}&osversion={osversion}&browser={browser}&campaignid={campaignid}&utm_campaign={campaignid}&geo={geo}&utm_medium=zeydoo&land_state=before_render&land_id=Ik3Z1hRmgbrHuHy&land_generation_time=2023-11-30_03:47:01&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=781ee0e7dd2412b6bf396f94496ee79f&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=google HTTP/1.1
Host: applabzzeydoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 30 Nov 2023 08:48:53 GMT
content-length: 0
location: https://play.google.com/store/apps/details?id=com.samoukale.jaxvpn
x-trace-id: 42305e1eeb7ff90eefce859882e8aed9
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.gstatic.com/android/market_images/web/play_prism_hlock_v2_1x.png
142.250.74.35200 OK 1.4 kB URL GET HTTP/2 www.gstatic.com/android/market_images/web/play_prism_hlock_v2_1x.png
IP 142.250.74.35:443
Requested by https://play.google.com/store/apps/details?id=com.samoukale.jaxvpn
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 183 x 39, 8-bit colormap, non-interlaced\012- data
Hash ffcd6a05bbe560e20fa5230c0c55b555
9a601f802af80c6e8598b7782d648cddae8bd615
f7d4666e180ded3f046440a22d60222477cb5d3a535b5d57e97f85b7d7bb90d3
GET /android/market_images/web/play_prism_hlock_v2_1x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://play.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1430
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 03:24:46 GMT
expires: Fri, 29 Nov 2024 03:24:46 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/png
age: 19448
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/android/market_images/web/favicon_v3.ico
142.250.74.35 841 B URL GET www.gstatic.com/android/market_images/web/favicon_v3.ico
IP 142.250.74.35:0
Requested by https://play.google.com/store/apps/details?id=com.samoukale.jaxvpn
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash a217f758efdfff14053678dbe58fa4d0
6e0eb512c2f386d645712d7ecbe339ea85cfca68
f343b3015d0545a7d5b719a434135bcae2ac766ed459aeea671e3688b79d1875
GET /android/market_images/web/favicon_v3.ico HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://play.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 841
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:26 GMT
expires: Fri, 29 Nov 2024 04:46:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 23 Jun 2022 19:28:00 GMT
content-type: image/x-icon
vary: Accept-Encoding
age: 14548
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
play.google.com/store/apps/details?id=com.samoukale.jaxvpn
142.250.74.46404 Not Found 1.7 kB URL User Request GET HTTP/2 play.google.com/store/apps/details?id=com.samoukale.jaxvpn
IP 142.250.74.46:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1777), with no line terminators
Hash 4865ae531b67832329133890225e0c4f
2363d0162c4c1c8a6e47b857890b0d5bf31e515a
7b2353f7f0f589c55a25ba8e1e3ebd3fbb073e699aafcd60f9e789fb996f1bdc
GET /store/apps/details?id=com.samoukale.jaxvpn HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 08:48:53 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin-allow-popups
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport, script-src 'nonce-dpO64bFXRglb7DDFL5CcEw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=M23_yibqu5Kv6lxOEwEx7VSBiN0j2bhgUrVh3sMQD0zyFubdOawrijWIxFveU01kik-3_3FcbPD0PiDOiDumsYLY2OR9_R482b6nlhh5CW81yd9lJnVLx4-LDBnAWOT7AFEYrL9W_OKWgUuQX16wKCSwfs-RQKvY76nlrlEdXUg; expires=Fri, 31-May-2024 08:48:53 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
play.google.com/store/apps/details?id=com.samoukale.jaxvpn
142.250.74.46404 Not Found 1.7 kB URL User Request GET HTTP/3 play.google.com/store/apps/details?id=com.samoukale.jaxvpn
IP 142.250.74.46:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1777), with no line terminators
Hash d9a5f65202b85b75e74b8dca6c0ad420
e4f0cb9193bff59601c81b15a1f125ed7468a523
56f568cfdef45e4225783d73fe2787994fc4973ddf52a6f49e34cd176c51fa3d
GET /store/apps/details?id=com.samoukale.jaxvpn HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=511=M23_yibqu5Kv6lxOEwEx7VSBiN0j2bhgUrVh3sMQD0zyFubdOawrijWIxFveU01kik-3_3FcbPD0PiDOiDumsYLY2OR9_R482b6nlhh5CW81yd9lJnVLx4-LDBnAWOT7AFEYrL9W_OKWgUuQX16wKCSwfs-RQKvY76nlrlEdXUg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 30 Nov 2023 08:48:54 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport, script-src 'nonce-DpsA7jMDhOBJusT9oU1ApQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000