Report - wxgzshna.biz

Report Overview

Visited public
2025-02-08 01:59:16
Tags
URL
wxgzshna.biz
Finishing URL
ww7.wxgzshna.biz/?usid=20&utid=14559823782
IP / ASN
72.52.178.23
#32244 LIQUIDWEB
Title
wxgzshna.biz

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
wxgzshna.biz	unknown	2023-06-25	2023-06-25	2025-01-28	479 B	255 B	72.52.178.23
ww7.wxgzshna.biz	unknown	2023-06-25	2024-07-26	2025-02-02	1.9 kB	44 kB	199.59.243.228
syndicatedsearch.goog	unknown	2023-04-14	2023-09-25	2025-02-05	3.2 kB	153 kB	216.58.207.238
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2025-02-05	1.0 kB	2.0 kB	142.250.74.33
parking3.parklogic.com	unknown	2007-02-28	2023-05-10	2025-02-05	1.1 kB	8.6 kB	170.187.143.93
www.google.com	7	1997-09-15	2015-05-10	2025-02-05	442 B	148 kB	142.250.74.68

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-02-08	medium	wxgzshna.biz	Sinkholed
2025-02-08	medium	wxgzshna.biz	Sinkholed
2025-02-08	medium	wxgzshna.biz	Sinkholed
2025-02-08	medium	wxgzshna.biz	Sinkholed
2025-02-08	medium	wxgzshna.biz	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	ww7.wxgzshna.biz/?usid=20&utid=14559823782	ScriptElement	383 B	2025-02-08	2025-02-08
Pretty URL ww7.wxgzshna.biz/?usid=20&utid=14559823782 IP 199.59.243.228 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-02-08 01:59 Last Seen2025-02-08 01:59 Times Seen1 Hash b8d834c896f8495080a06aba9a394058 7920c1b305dfc45fd57a7e42e135bdb4efc786f1 9ca2c1dae0d0712e8f6ee3c1bee6399b0a2e255d726a36ea65a99a73785af181 Loading...

	ww7.wxgzshna.biz/bkxKjTscf.js	ScriptElement	35 kB	2025-01-23	2025-02-18
Pretty URL ww7.wxgzshna.biz/bkxKjTscf.js IP 199.59.243.228 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-01-23 20:42 Last Seen2025-02-18 18:36 Times Seen720 Hash 9fbdc29d846cd2a0a8faade175b0cea7 9659006260c8fb9cf25502088480157eddc57510 27254ba5b1f3a0b1b9496a245166fc3a9301228f5c5c78ba1b5e35a1356c4182 Loading...

	www.google.com/adsense/domains/caf.js?abp=1&bodis=true	ScriptElement	148 kB	2025-02-06	2025-02-10
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&bodis=true IP 142.250.74.68 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-06 21:20 Last Seen2025-02-10 15:13 Times Seen105 Hash 53a827b1fa757168eb6597ea96cab867 25b7244cd597ccd994557cbfa243d831b92df976 9f61781daf5fe17a7f7aca37c66cf061cbf1f3098b6457690fe5927f30a1bd2c Loading...

	syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol101%2Cpid-bodis-gcontrol407%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fcaf%3D1%26bpt%3D345%26usid%3D20%26utid%3D14559823782&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2348603269777440&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301551%2C17301266%2C72717107&format=r3&nocache=4741738979928432&num=0&output=afd_ads&domain_name=ww7.wxgzshna.biz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738979928435&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=723063605&rurl=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fusid%3D20%26utid%3D14559823782	ScriptElement	596 B	2025-02-08	2025-02-08
Pretty URL syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol101%2Cpid-bodis-gcontrol407%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fcaf%3D1%26bpt%3D345%26usid%3D20%26utid%3D14559823782&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2348603269777440&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301551%2C17301266%2C72717107&format=r3&nocache=4741738979928432&num=0&output=afd_ads&domain_name=ww7.wxgzshna.biz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738979928435&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=723063605&rurl=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fusid%3D20%26utid%3D14559823782 IP 216.58.207.238 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-02-08 01:59 Last Seen2025-02-08 01:59 Times Seen1 Hash 28c892795cab6fadafe409b050fa4656 1a10dc46f699e0c7cf846ba42295bb75b6388262 b6473be44c3614c295c3a96187dd82f6b5bb31f0c8151fcbe4618e099f3ab8be Loading...

	syndicatedsearch.goog/adsense/domains/caf.js	ScriptElement	148 kB	2025-02-05	2025-02-10
Pretty URL syndicatedsearch.goog/adsense/domains/caf.js IP 216.58.207.238 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-05 19:40 Last Seen2025-02-10 11:55 Times Seen126 Hash 4126d3d79ba9938f7bff24d1364cd2cd 7718870b9c308c2348f2436ab7f6e3e199923de7 51177409f0787e28417c5f2d32eda8f202e8c5c2c8dd74c29fdfc5f713475eb8 Loading...

	parking3.parklogic.com/page/enhance.js?pcId=7&&domain=wxgzshna.biz	ScriptElement	2.3 kB	2025-01-04	2025-03-30
Pretty URL parking3.parklogic.com/page/enhance.js?pcId=7&&domain=wxgzshna.biz IP 170.187.143.93 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2025-01-04 05:29 Last Seen2025-03-30 10:51 Times Seen29 Hash b6480e52db4a49890c3f5017007dae4c f58f961f2b5d701b1513ea21e81df063083727b5 4ed42ada12f30664dfbf307395e9c82cdc2cae5eb8f72ad981a09a0bdb709c65 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 6a4435c5df6c8a44e8f871be2d8db6df	411 B	2024-05-02 21:46	2025-05-01 11:43
Pretty Observations First Seen2024-05-02 21:46 Last Seen2025-05-01 11:43 Times Seen3193 Hash 6a4435c5df6c8a44e8f871be2d8db6df dd30da12047c2ea2b12e124b6cd43540e358aa79 f79e97fee9b4881f8fa95aa2033819020eca0e597a94dce1976fcae392397b0a Loading...

		Size	First Seen	Last Seen
	#1 Write - c5fbf77fe687be9ea3d00757f261afb7	178 B	2025-01-04 05:29	2025-04-26 09:32
Pretty Observations First Seen2025-01-04 05:29 Last Seen2025-04-26 09:32 Times Seen65 Hash c5fbf77fe687be9ea3d00757f261afb7 da4969c5bc48928111c14b00f15df8ebaddb7ab3 2e1cd7194a30a2f98e9ba9e6f524d8197c237d16056f80c7e765325b94b2c4e7 Loading...

HTTP Transactions (14)

URL IP Response Size

wxgzshna.biz/

72.52.178.23

302 Found

0 B

URL User Request GET HTTP/2
wxgzshna.biz/
IP
72.52.178.23:443
ASN
#32244 LIQUIDWEB

Certificate
IssuerLet's Encrypt
Subjectwww.wxgzshna.biz
FingerprintB8:DE:D2:EB:5C:E6:BF:50:67:62:99:1C:4B:67:36:0B:F7:EB:FD:0E
ValiditySat, 16 Nov 2024 03:48:15 GMT - Fri, 14 Feb 2025 03:48:14 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: wxgzshna.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sat, 08 Feb 2025 01:58:47 GMT
content-type: text/html
content-length: 0
location: http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
cache-control: no-cache
pragma: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2

ww7.wxgzshna.biz/?usid=20&utid=14559823782

199.59.243.228

200 OK

1.1 kB

URL User Request GET HTTP/1.1
ww7.wxgzshna.biz/?usid=20&utid=14559823782
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (398)
Size
1.1 kB (1130 bytes)
Hash
b6204afae61c928571ce2ac0977ce338
fa55e961e52806cff2fc7836cb18ad596751de24
9e19aa488b0d5ce62f574e387d474c094f1d09aac1d583cbe8c4fa3acfc78964

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?usid=20&utid=14559823782 HTTP/1.1
Host: ww7.wxgzshna.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sat, 08 Feb 2025 01:58:47 GMT
content-type: text/html; charset=utf-8
content-length: 1130
x-request-id: 8d5e2053-54fd-496f-920e-8b917008d174
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ZYUAKCofhFPYUwXe2kC/OaDsZVNEXonTDjNhXiEHRseCOE9PHuVRF30VwO2vn0Bkk2EuPdTT4EeSNIVEbyiMFA==
set-cookie: parking_session=8d5e2053-54fd-496f-920e-8b917008d174; expires=Sat, 08 Feb 2025 02:13:47 GMT; path=/

ww7.wxgzshna.biz/bkxKjTscf.js

199.59.243.228

200 OK

35 kB

URL GET HTTP/1.1
ww7.wxgzshna.biz/bkxKjTscf.js
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (35078)
Size
35 kB (35081 bytes)
Hash
9fbdc29d846cd2a0a8faade175b0cea7
9659006260c8fb9cf25502088480157eddc57510
27254ba5b1f3a0b1b9496a245166fc3a9301228f5c5c78ba1b5e35a1356c4182

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bkxKjTscf.js HTTP/1.1
Host: ww7.wxgzshna.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Cookie: parking_session=8d5e2053-54fd-496f-920e-8b917008d174
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sat, 08 Feb 2025 01:58:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 35081
x-request-id: 8e4f5206-b4c0-45c5-9d72-ae89f1e6e1f2
set-cookie: parking_session=8d5e2053-54fd-496f-920e-8b917008d174; expires=Sat, 08 Feb 2025 02:13:48 GMT

ww7.wxgzshna.biz/_fd?usid=20&utid=14559823782

199.59.243.228

200 OK

6.4 kB

URL POST HTTP/1.1
ww7.wxgzshna.biz/_fd?usid=20&utid=14559823782
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782

File type
ASCII text, with very long lines (6357), with no line terminators
Size
6.4 kB (6357 bytes)
Hash
de37ef60a54098f327bff18bcae3874f
51dbcae719833e46fdf37176bfcc7e75c8770b1e
a443a9d2b0ec73a6b2a8a4cc7a81516c8413cc09b444ba7a6a78abe9fd76856d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /_fd?usid=20&utid=14559823782 HTTP/1.1
Host: ww7.wxgzshna.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Content-Type: application/json
Origin: http://ww7.wxgzshna.biz
DNT: 1
Connection: keep-alive
Cookie: parking_session=8d5e2053-54fd-496f-920e-8b917008d174
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
date: Sat, 08 Feb 2025 01:58:47 GMT
content-type: application/json; charset=utf-8
content-length: 6357
x-request-id: 1bf40236-79e1-48af-b334-9e9e1ffe5f6f
set-cookie: parking_session=8d5e2053-54fd-496f-920e-8b917008d174; expires=Sat, 08 Feb 2025 02:13:48 GMT

syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol101%2Cpid-bodis-gcontrol407%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fcaf%3D1%26bpt%3D345%26usid%3D20%26utid%3D14559823782&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2348603269777440&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301551%2C17301266%2C72717107&format=r3&nocache=4741738979928432&num=0&output=afd_ads&domain_name=ww7.wxgzshna.biz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738979928435&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=723063605&rurl=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fusid%3D20%26utid%3D14559823782

216.58.207.238

200 OK

2.7 kB

URL GET HTTP/2
syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol101%2Cpid-bodis-gcontrol407%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fcaf%3D1%26bpt%3D345%26usid%3D20%26utid%3D14559823782&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2348603269777440&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301551%2C17301266%2C72717107&format=r3&nocache=4741738979928432&num=0&output=afd_ads&domain_name=ww7.wxgzshna.biz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738979928435&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=723063605&rurl=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fusid%3D20%26utid%3D14559823782
IP
216.58.207.238:443
ASN
#15169 GOOGLE

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78
ValidityMon, 20 Jan 2025 08:39:11 GMT - Mon, 14 Apr 2025 08:39:10 GMT

File type
HTML document, ASCII text, with very long lines (13130)
Size
2.7 kB (2705 bytes)
Hash
eb19e80f5a02cf74017779945b4dd1de
bb03e0bc2e19d422a29ae584809c76c446511cd1
147966d110e4b1d9bf0d47318cd5a2c5fdb11684847b1c57061a1bb05f9739ff

HTTP Headers

GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol101%2Cpid-bodis-gcontrol407%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fcaf%3D1%26bpt%3D345%26usid%3D20%26utid%3D14559823782&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2348603269777440&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301551%2C17301266%2C72717107&format=r3&nocache=4741738979928432&num=0&output=afd_ads&domain_name=ww7.wxgzshna.biz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738979928435&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=723063605&rurl=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fusid%3D20%26utid%3D14559823782 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.wxgzshna.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sat, 08 Feb 2025 01:58:48 GMT
expires: Sat, 08 Feb 2025 01:58:48 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-oDRuKtKhk2Ia5dXmmtDBhA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2705
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ww7.wxgzshna.biz/_tr

199.59.243.228

200 OK

2 B

URL POST HTTP/1.1
ww7.wxgzshna.biz/_tr
IP
199.59.243.228:80
ASN
#16509 AMAZON-02

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782

File type
ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /_tr HTTP/1.1
Host: ww7.wxgzshna.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Content-Type: application/json
Content-Length: 1965
Origin: http://ww7.wxgzshna.biz
DNT: 1
Connection: keep-alive
Cookie: parking_session=8d5e2053-54fd-496f-920e-8b917008d174
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Sat, 08 Feb 2025 01:58:48 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-request-id: 551f4e50-9563-46bd-a91b-32314b445ad0
set-cookie: parking_session=8d5e2053-54fd-496f-920e-8b917008d174; expires=Sat, 08 Feb 2025 02:13:48 GMT

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff

142.250.74.33

200 OK

174 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
142.250.74.33:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol101%2Cpid-bodis-gcontrol407%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fcaf%3D1%26bpt%3D345%26usid%3D20%26utid%3D14559823782&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2348603269777440&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301551%2C17301266%2C72717107&format=r3&nocache=4741738979928432&num=0&output=afd_ads&domain_name=ww7.wxgzshna.biz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738979928435&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=723063605&rurl=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fusid%3D20%26utid%3D14559823782
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintC8:CC:73:3C:09:B6:EA:83:B3:FA:9E:8C:00:A3:C5:10:94:1A:0A:E7
ValidityMon, 20 Jan 2025 08:37:02 GMT - Mon, 14 Apr 2025 08:37:01 GMT

File type
SVG Scalable Vector Graphics image
Size
174 B (174 bytes)
Hash
11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Feb 2025 02:59:53 GMT
expires: Sat, 08 Feb 2025 01:59:53 GMT
cache-control: public, max-age=82800
age: 82735
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b

142.250.74.33

200 OK

174 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
IP
142.250.74.33:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol101%2Cpid-bodis-gcontrol407%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fcaf%3D1%26bpt%3D345%26usid%3D20%26utid%3D14559823782&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2348603269777440&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301551%2C17301266%2C72717107&format=r3&nocache=4741738979928432&num=0&output=afd_ads&domain_name=ww7.wxgzshna.biz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738979928435&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=723063605&rurl=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fusid%3D20%26utid%3D14559823782
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintC8:CC:73:3C:09:B6:EA:83:B3:FA:9E:8C:00:A3:C5:10:94:1A:0A:E7
ValidityMon, 20 Jan 2025 08:37:02 GMT - Mon, 14 Apr 2025 08:37:01 GMT

File type
SVG Scalable Vector Graphics image
Size
174 B (174 bytes)
Hash
d47125b2ba92be53dcff07ba322ce1de
e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28
5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Feb 2025 15:15:11 GMT
expires: Sat, 08 Feb 2025 14:15:11 GMT
cache-control: public, max-age=82800
age: 38617
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=9u1ak4pthxk&aqid=WLqmZ7jMIPaOxdwP9vfpoAY&psid=3113057640&pbt=bs&adbx=290&adby=193&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=723063605&csala=8%7C0%7C228%7C51%7C21&lle=0&ifv=1&hpt=0

216.58.207.238

204 No Content

0 B

URL GET HTTP/3
syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=9u1ak4pthxk&aqid=WLqmZ7jMIPaOxdwP9vfpoAY&psid=3113057640&pbt=bs&adbx=290&adby=193&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=723063605&csala=8%7C0%7C228%7C51%7C21&lle=0&ifv=1&hpt=0
IP
216.58.207.238:443
ASN
#15169 GOOGLE

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78
ValidityMon, 20 Jan 2025 08:39:11 GMT - Mon, 14 Apr 2025 08:39:10 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=9u1ak4pthxk&aqid=WLqmZ7jMIPaOxdwP9vfpoAY&psid=3113057640&pbt=bs&adbx=290&adby=193&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=723063605&csala=8%7C0%7C228%7C51%7C21&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.wxgzshna.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Kq0SMG_HE4j1wKs1T2kuZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 08 Feb 2025 01:58:50 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=3dshxr935n00&aqid=WLqmZ7jMIPaOxdwP9vfpoAY&psid=3113057640&pbt=bv&adbx=290&adby=193&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=723063605&csala=8%7C0%7C228%7C51%7C21&lle=0&ifv=1&hpt=0

216.58.207.238

204 No Content

0 B

URL GET HTTP/3
syndicatedsearch.goog/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=3dshxr935n00&aqid=WLqmZ7jMIPaOxdwP9vfpoAY&psid=3113057640&pbt=bv&adbx=290&adby=193&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=723063605&csala=8%7C0%7C228%7C51%7C21&lle=0&ifv=1&hpt=0
IP
216.58.207.238:443
ASN
#15169 GOOGLE

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78
ValidityMon, 20 Jan 2025 08:39:11 GMT - Mon, 14 Apr 2025 08:39:10 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=3dshxr935n00&aqid=WLqmZ7jMIPaOxdwP9vfpoAY&psid=3113057640&pbt=bv&adbx=290&adby=193&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=723063605&csala=8%7C0%7C228%7C51%7C21&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.wxgzshna.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-DifaQmeEhVhRY5q1s03Vtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 08 Feb 2025 01:58:50 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

parking3.parklogic.com/page/enhance.js?pcId=7&&domain=wxgzshna.biz

170.187.143.93

200 OK

8.3 kB

URL GET HTTP/2
parking3.parklogic.com/page/enhance.js?pcId=7&&domain=wxgzshna.biz
IP
170.187.143.93:443
ASN
#63949 Akamai Connected Cloud

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Certificate
IssuerSectigo Limited
Subject*.parklogic.com
Fingerprint66:56:89:C8:B6:1B:AF:6F:62:71:11:AC:0B:55:9C:C7:1C:45:EF:80
ValidityMon, 20 Jan 2025 00:00:00 GMT - Mon, 29 Dec 2025 23:59:59 GMT

File type
data
Size
8.3 kB (8257 bytes)
Hash
f43e2761b8fd3094941d52fc5986e4e9
6aafec59d42f1d351a8e777add2fe843cf498545
db3f4c29b970e527dda445019cdbc81e6bbc7003a796f682b3db5d53ac5579c5

HTTP Headers

GET /page/enhance.js?pcId=7&&domain=wxgzshna.biz HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.wxgzshna.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 08 Feb 2025 01:58:49 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
X-Firefox-Spdy: h2

parking3.parklogic.com/page/scribe.php?pcId=7&domain=wxgzshna.biz&pId=2447&usid=20&utid=14559823782&query=null&domainJs=ww7.wxgzshna.biz&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null

170.187.143.93

200 OK

0 B

URL GET HTTP/2
parking3.parklogic.com/page/scribe.php?pcId=7&domain=wxgzshna.biz&pId=2447&usid=20&utid=14559823782&query=null&domainJs=ww7.wxgzshna.biz&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null
IP
170.187.143.93:443
ASN
#63949 Akamai Connected Cloud

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Certificate
IssuerSectigo Limited
Subject*.parklogic.com
Fingerprint66:56:89:C8:B6:1B:AF:6F:62:71:11:AC:0B:55:9C:C7:1C:45:EF:80
ValidityMon, 20 Jan 2025 00:00:00 GMT - Mon, 29 Dec 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /page/scribe.php?pcId=7&domain=wxgzshna.biz&pId=2447&usid=20&utid=14559823782&query=null&domainJs=ww7.wxgzshna.biz&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww7.wxgzshna.biz/
Origin: http://ww7.wxgzshna.biz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 08 Feb 2025 01:58:49 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

syndicatedsearch.goog/adsense/domains/caf.js

216.58.207.238

200 OK

148 kB

URL GET HTTP/2
syndicatedsearch.goog/adsense/domains/caf.js
IP
216.58.207.238:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol101%2Cpid-bodis-gcontrol407%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis31_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fcaf%3D1%26bpt%3D345%26usid%3D20%26utid%3D14559823782&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2348603269777440&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301551%2C17301266%2C72717107&format=r3&nocache=4741738979928432&num=0&output=afd_ads&domain_name=ww7.wxgzshna.biz&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738979928435&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=723063605&rurl=http%3A%2F%2Fww7.wxgzshna.biz%2F%3Fusid%3D20%26utid%3D14559823782
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78
ValidityMon, 20 Jan 2025 08:39:11 GMT - Mon, 14 Apr 2025 08:39:10 GMT

File type
JavaScript source, ASCII text, with very long lines (1869)
Size
148 kB (147662 bytes)
Hash
4126d3d79ba9938f7bff24d1364cd2cd
7718870b9c308c2348f2436ab7f6e3e199923de7
51177409f0787e28417c5f2d32eda8f202e8c5c2c8dd74c29fdfc5f713475eb8

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 08 Feb 2025 01:58:48 GMT
expires: Sat, 08 Feb 2025 01:58:48 GMT
cache-control: private, max-age=3600
etag: "9975191244996632506"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/adsense/domains/caf.js?abp=1&bodis=true

142.250.74.68

200 OK

148 kB

URL GET HTTP/2
www.google.com/adsense/domains/caf.js?abp=1&bodis=true
IP
142.250.74.68:443
ASN
#15169 GOOGLE

Requested by
http://ww7.wxgzshna.biz/?usid=20&utid=14559823782
Certificate
IssuerGoogle Trust Services
Subjectwww.google.com
FingerprintA5:8A:8C:6D:C5:D6:86:EA:BD:43:96:00:02:99:B8:C6:97:0C:AF:E5
ValidityMon, 20 Jan 2025 08:37:54 GMT - Mon, 14 Apr 2025 08:37:53 GMT

File type
JavaScript source, ASCII text, with very long lines (1869)
Size
148 kB (147667 bytes)
Hash
53a827b1fa757168eb6597ea96cab867
25b7244cd597ccd994557cbfa243d831b92df976
9f61781daf5fe17a7f7aca37c66cf061cbf1f3098b6457690fe5927f30a1bd2c

HTTP Headers

GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.wxgzshna.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 08 Feb 2025 01:58:48 GMT
expires: Sat, 08 Feb 2025 01:58:48 GMT
cache-control: private, max-age=3600
etag: "15176682500446158468"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (14)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by