Report - goatramz.com/get7/update/

Report Overview

Visitedpublic

2025-07-21 06:12:22

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
goatramz.com	unknown	2025-07-05	2025-07-07	2025-07-16	1.0 kB	1.5 kB	15.197.240.20
img1.wsimg.com	9893	2008-03-17	2012-06-20	2025-07-16	1.9 kB	924 kB	23.36.77.185
www.google.com	7	1997-09-15	2015-05-10	2025-07-16	448 B	157 kB	142.250.74.68

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-21	medium	goatramz.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	goatramz.com/get7/update/	ScriptElement	56 B	2025-03-02	2025-08-02
URL goatramz.com/get7/update/ IP / ASN 15.197.240.20 #16509 AMAZON-02 Introduced by ScriptElement Embedded true Resource Info First Seen 2025-03-02 Last Seen 2025-08-02 Times Seen 12351 Size 56 B (56 bytes) MD5 3effca764b1325dc476a4f275bb79d63 SHA1 83e96d57b2196e7dc7422e373d844941644d29ba SHA256 6525c7cbcf52f274ffc5cbe01fd43c03fd77e9463d0757999a596776f0d4184b Format Code Loading...

	goatramz.com/lander	ScriptElement	25 B	2023-03-07	2025-08-02
URL goatramz.com/lander IP / ASN 15.197.240.20 #16509 AMAZON-02 Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 1281 Size 25 B (25 bytes) MD5 396983b43a97ac40197e7d22399b707b SHA1 9c54ff4c30658fd6a7e94eaaae5072b3ed2ec1dc SHA256 de4e0ef840a4a74223bb4637d128d0fd8894ac9f95bf604576e8c5280c768442 Format Code Loading...

	www.google.com/adsense/domains/caf.js?abp=1&gdabp=true	ScriptElement	157 kB	2025-07-17	2025-07-23
URL www.google.com/adsense/domains/caf.js?abp=1&gdabp=true IP / ASN 142.250.74.68 #15169 GOOGLE Introduced by ScriptElement Embedded false Resource Info First Seen 2025-07-17 Last Seen 2025-07-23 Times Seen 984 Size 157 kB (156658 bytes) MD5 2b4ee9d18876d0eb64dc0c41058441ad SHA1 67f36a086a5081a8b9c53dbae0446551499addcc SHA256 2e394d3c6eea22f3cd41e73656b5b67829d9ca6a2e1c64de2787006d645357e1 Format Code Loading...

	img1.wsimg.com/parking-lander/static/js/main.009d18cf.js	ScriptElement	858 kB	2025-07-11	2025-07-23
URL img1.wsimg.com/parking-lander/static/js/main.009d18cf.js IP / ASN 23.36.77.185 #20940 Akamai International B.V. Introduced by ScriptElement Embedded false Resource Info First Seen 2025-07-11 Last Seen 2025-07-23 Times Seen 210 Size 858 kB (857691 bytes) MD5 b2ca3a73a90a7a00fe516cbe33fda404 SHA1 d528f14ee74b62f80b495ddb65a49f021ccd30a9 SHA256 289bf26db7421bf09c2953d31379eccbfa3420bb693138c521124a60e372f2d3 Format Code Loading...

HTTP Transactions (7)

URL IP Response Size

GET goatramz.com/get7/update/

15.197.240.20

200 OK

114 B

URL

goatramz.com/get7/update/

IP / ASN

15.197.240.20

#16509 AMAZON-02

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with no line terminators

First Seen2024-03-15

Last Seen2025-08-02

Times Seen24060

Size114 B (114 bytes)

MD5e89f75f918dbdcee28604d4e09dd71d7

SHA1f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

SHA2566dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

Certificate Info

IssuerGoDaddy.com, Inc.

Subjectgoatramz.com

FingerprintD7:EA:54:36:8B:6B:E4:53:6E:F0:B2:24:F1:1A:5E:83:57:C4:78:48

ValidityMon, 21 Jul 2025 03:51:23 GMT - Tue, 21 Jul 2026 03:51:23 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /get7/update/ HTTP/1.1
Host: goatramz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Date: Mon, 21 Jul 2025 06:11:46 GMT
Content-Length: 114

GET img1.wsimg.com/parking-lander/static/js/main.009d18cf.js

23.36.77.185

200 OK

858 kB

URL

img1.wsimg.com/parking-lander/static/js/main.009d18cf.js

IP / ASN

23.36.77.185

#20940 Akamai International B.V.

Requested byhttps://goatramz.com/lander

Resource Info

File typeJavaScript source, ASCII text, with very long lines (65465)

First Seen2025-07-11

Last Seen2025-07-23

Times Seen210

Size858 kB (857691 bytes)

MD5b2ca3a73a90a7a00fe516cbe33fda404

SHA1d528f14ee74b62f80b495ddb65a49f021ccd30a9

SHA256289bf26db7421bf09c2953d31379eccbfa3420bb693138c521124a60e372f2d3

Certificate Info

IssuerStarfield Technologies, Inc.

Subject*.wsimg.com

FingerprintEA:61:02:4F:B7:92:44:AD:09:4C:03:D9:59:C6:B7:3B:E5:1E:ED:F3

ValidityThu, 19 Sep 2024 21:02:42 GMT - Tue, 21 Oct 2025 21:02:42 GMT

HTTP Headers

GET /parking-lander/static/js/main.009d18cf.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goatramz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: jR9XBdKBP41tashcLHcALDtw+Uew8u1EGf7SnCpmRqFaifViE2yMSV83rF8y8iqslM+p/dZZbG8=
x-amz-request-id: QMJK2XGQQYK7HVZJ
last-modified: Fri, 11 Jul 2025 17:17:10 GMT
etag: "b2ca3a73a90a7a00fe516cbe33fda404"
x-amz-server-side-encryption: AES256
x-amz-version-id: YtAVhOL0tBryc7VFPenwOmPruFbNvBNz
accept-ranges: bytes
content-type: text/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 225857
cache-control: max-age=31536000
expires: Tue, 21 Jul 2026 06:11:47 GMT
date: Mon, 21 Jul 2025 06:11:47 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

GET img1.wsimg.com/parking-lander/px.js?ch=2&abp=2&gdabp=true

23.36.77.185

200 OK

0 B

URL

img1.wsimg.com/parking-lander/px.js?ch=2&abp=2&gdabp=true

IP / ASN

23.36.77.185

#20940 Akamai International B.V.

Requested byhttps://goatramz.com/lander

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607048

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerStarfield Technologies, Inc.

Subject*.wsimg.com

FingerprintEA:61:02:4F:B7:92:44:AD:09:4C:03:D9:59:C6:B7:3B:E5:1E:ED:F3

ValidityThu, 19 Sep 2024 21:02:42 GMT - Tue, 21 Oct 2025 21:02:42 GMT

HTTP Headers

GET /parking-lander/px.js?ch=2&abp=2&gdabp=true HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://goatramz.com/
Origin: https://goatramz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: jrNW8E9uKCSlu/+CYltJ/dBzFZ/WENfx8nofaBcfSKmkf6aBPkZskVZjX2ZUF+KuRuBgzMg63A0mfJhq2WKovg==
x-amz-request-id: 08AR0HQFFSSHG4FZ
last-modified: Fri, 27 Jun 2025 19:36:42 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-server-side-encryption: AES256
x-amz-version-id: YSyiCiB64RDI4fRN7KK4fnjQiN.lXi8x
accept-ranges: bytes
content-type: text/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 20
cache-control: max-age=31536000
expires: Tue, 21 Jul 2026 06:11:47 GMT
date: Mon, 21 Jul 2025 06:11:47 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

GET goatramz.com/lander

15.197.240.20

200 OK

536 B

URL

goatramz.com/lander

IP / ASN

15.197.240.20

#16509 AMAZON-02

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (535)

First Seen2025-07-11

Last Seen2025-07-23

Times Seen103

Size536 B (536 bytes)

MD576053e57202d7c169e0b2ac214547531

SHA128134066bef336eda13c50251defe05c78415b36

SHA2567d8721d91ce7b756092b2aed1b5536c4d3e707de5530e2983411e43c525bbc46

Certificate Info

IssuerGoDaddy.com, Inc.

Subjectgoatramz.com

FingerprintD7:EA:54:36:8B:6B:E4:53:6E:F0:B2:24:F1:1A:5E:83:57:C4:78:48

ValidityMon, 21 Jul 2025 03:51:23 GMT - Tue, 21 Jul 2026 03:51:23 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /lander HTTP/1.1
Host: goatramz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goatramz.com/get7/update/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private, max-age=86400
Connection: keep-alive
Content-Type: text/html
Date: Mon, 21 Jul 2025 06:11:46 GMT
Server: openresty
Set-Cookie: expiry_partner=newfold.EXPIRED.D6FD8B5F-DE1F-46CE-A960-95D34D9DA776; Path=/; Max-Age=86400
caf_ipaddr=91.90.42.154; Path=/; Max-Age=86400
country=NO; Path=/; Max-Age=86400
city=Oslo; Path=/; Max-Age=86400
lander_type=parking-newfold; Path=/; Max-Age=86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_FQoXJ3TGxgKr6I4LJr8xHOEBg392przZ4XESosa5W4KrKEwawVJcqrwt5Ct7u17+Zvl80CLhN4lpjvJOpiMPOw
X-Content-Type-Options: nosniff
Content-Length: 536

GET www.google.com/adsense/domains/caf.js?abp=1&gdabp=true

142.250.74.68

200 OK

157 kB

URL

www.google.com/adsense/domains/caf.js?abp=1&gdabp=true

IP / ASN

142.250.74.68

#15169 GOOGLE

Requested byhttps://goatramz.com/lander

Resource Info

File typeJavaScript source, ASCII text, with very long lines (2936)

First Seen2025-07-17

Last Seen2025-07-23

Times Seen984

Size157 kB (156658 bytes)

MD52b4ee9d18876d0eb64dc0c41058441ad

SHA167f36a086a5081a8b9c53dbae0446551499addcc

SHA2562e394d3c6eea22f3cd41e73656b5b67829d9ca6a2e1c64de2787006d645357e1

Certificate Info

IssuerGoogle Trust Services

Subjectwww.google.com

Fingerprint18:68:D7:A6:6E:58:DB:F0:4B:B6:53:AF:BA:2B:82:59:4F:36:D8:73

ValidityMon, 23 Jun 2025 08:42:14 GMT - Mon, 15 Sep 2025 08:42:13 GMT

HTTP Headers

GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goatramz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 21 Jul 2025 06:11:47 GMT
expires: Mon, 21 Jul 2025 06:11:47 GMT
cache-control: private, max-age=3600
etag: "14339505575507543292"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET img1.wsimg.com/parking-lander/static/css/main.1dd38e81.css

23.36.77.185

200 OK

64 kB

URL

img1.wsimg.com/parking-lander/static/css/main.1dd38e81.css

IP / ASN

23.36.77.185

#20940 Akamai International B.V.

Requested byhttps://goatramz.com/lander

Resource Info

File typeASCII text, with very long lines (63772)

First Seen2025-06-28

Last Seen2025-08-02

Times Seen718

Size64 kB (63817 bytes)

MD50b979ead5a1d563646e8fbcd46ed0b22

SHA15a3887556f6343e31a6da44bd2dee54768799bc1

SHA2562c580682f6cb8aba084f0322c83677f39cbcc6afba418d14a8e70577d0916172

Certificate Info

IssuerStarfield Technologies, Inc.

Subject*.wsimg.com

FingerprintEA:61:02:4F:B7:92:44:AD:09:4C:03:D9:59:C6:B7:3B:E5:1E:ED:F3

ValidityThu, 19 Sep 2024 21:02:42 GMT - Tue, 21 Oct 2025 21:02:42 GMT

HTTP Headers

GET /parking-lander/static/css/main.1dd38e81.css HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goatramz.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: 17BxOd+uhVur/XTPeOatl4dcRhkqRdK9q1ii95xJcc+85fRmtAuiEqzeuu5ckRMLHial+ON73D0=
x-amz-request-id: 1BTHFXFWZ194Q558
last-modified: Fri, 27 Jun 2025 19:36:40 GMT
etag: "0b979ead5a1d563646e8fbcd46ed0b22"
x-amz-server-side-encryption: AES256
x-amz-version-id: pjXypu31qDsa4l6y6SVvrLk66P4S6At4
accept-ranges: bytes
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Tue, 21 Jul 2026 06:11:47 GMT
date: Mon, 21 Jul 2025 06:11:47 GMT
content-length: 10072
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2

GET img1.wsimg.com/parking-lander/px.js?ch=1&abp=1&gdabp=true

23.36.77.185

200 OK

0 B

URL

img1.wsimg.com/parking-lander/px.js?ch=1&abp=1&gdabp=true

IP / ASN

23.36.77.185

#20940 Akamai International B.V.

Requested byhttps://goatramz.com/lander

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607048

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerStarfield Technologies, Inc.

Subject*.wsimg.com

FingerprintEA:61:02:4F:B7:92:44:AD:09:4C:03:D9:59:C6:B7:3B:E5:1E:ED:F3

ValidityThu, 19 Sep 2024 21:02:42 GMT - Tue, 21 Oct 2025 21:02:42 GMT

HTTP Headers

GET /parking-lander/px.js?ch=1&abp=1&gdabp=true HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://goatramz.com/
Origin: https://goatramz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: FydO/DsZyjSvxuylz70FHwbYbsb40IMNMsiRmrH8T5pml0kJvonhr7GzvAnxwrMEErRu9frrtu8=
x-amz-request-id: VYHJXP65FG6J15KX
last-modified: Fri, 11 Jul 2025 17:17:16 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-server-side-encryption: AES256
x-amz-version-id: _7pO.EZ7sj6C1nIDawQ5kEgWSPlqSs30
accept-ranges: bytes
content-type: text/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Tue, 21 Jul 2026 06:11:47 GMT
date: Mon, 21 Jul 2025 06:11:47 GMT
content-length: 20
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2