Report - thejovialjourney.com/?ads_click=1&data=1747-1744-1014-1086-1&nonce=29305198f9&redir=http:npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=

Report Overview

Submitted URL
thejovialjourney.com/?ads_click=1&data=1747-1744-1014-1086-1&nonce=29305198f9&redir=http:npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=
IP
160.153.0.191
ASN
#209242 Cloudflare London, LLC
Submitted
2024-04-26 12:56:59
Access
public
Website Title
404 Not Found
Final URL
npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
thejovialjourney.com	unknown	2015-09-17	2015-09-21	2024-02-08	879 B	1.8 kB	160.153.0.191
npajans.com	unknown	2023-05-08	2021-01-21	2024-04-17	821 B	1.8 kB	172.67.213.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	thejovialjourney.com	Sinkholed
2024-04-26	medium	thejovialjourney.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

URL IP Response Size

thejovialjourney.com/?ads_click=1&data=1747-1744-1014-1086-1&nonce=29305198f9&redir=http:npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=

160.153.0.191

302 Found

503 B

URL User Request GET HTTP/2
thejovialjourney.com/?ads_click=1&data=1747-1744-1014-1086-1&nonce=29305198f9&redir=http:npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=
IP
160.153.0.191:443
ASN
#209242 Cloudflare London, LLC

Certificate
IssuerLet's Encrypt
Subjectthejovialjourney.com
Fingerprint93:75:45:35:7F:7B:4E:14:DF:20:01:B1:36:2B:C8:C4:0B:C5:2D:30
ValidityThu, 11 Apr 2024 02:09:41 GMT - Wed, 10 Jul 2024 02:09:40 GMT

File type
data
Size
503 B (503 bytes)
Hash
dbc194a19abd315f864f483534dd0d9e
d9679cc5212ea45f53b6f0ab44d2fd871b55ff47
77972cd3223c4baa4ef7e9a7417fe55bd1c7987a68e6b260c675ba21bb937d85

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?ads_click=1&data=1747-1744-1014-1086-1&nonce=29305198f9&redir=http:npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc= HTTP/1.1
Host: thejovialjourney.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 26 Apr 2024 12:56:35 GMT
content-type: text/html; charset=UTF-8
location: http:npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=
content-security-policy: upgrade-insecure-requests
strict-transport-security: max-age=300
vary: User-Agent, Accept-Encoding
x-cache: uncached
x-cache-hit: MISS
x-cacheable: NO:HTTPS Redirect
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-fawn-proc-count: 1,3,24
x-php-version: 7.4
x-redirect-by: WordPress
x-xss-protection: 1; mode=block
x-backend: varnish_ssl
cf-cache-status: MISS
expires: Mon, 27 May 2024 12:56:35 GMT
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 87a6bbd53d2e56bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

thejovialjourney.com/

160.153.0.191

65 B

URL
thejovialjourney.com/
IP
160.153.0.191:0
ASN
#209242 Cloudflare London, LLC

Certificate
IssuerLet's Encrypt
Subjectthejovialjourney.com
Fingerprint93:75:45:35:7F:7B:4E:14:DF:20:01:B1:36:2B:C8:C4:0B:C5:2D:30
ValidityThu, 11 Apr 2024 02:09:41 GMT - Wed, 10 Jul 2024 02:09:40 GMT

File type
HTML document, ASCII text
Size
65 B (65 bytes)
Hash
d569332eba3f5b0d11024c2a01843cc1
e7f5bccc46efa4a40694b132346e21f778e3d0c4
4a44e7c58f692ea9f912c2090c62b639c7c74ae53cca7c0f50d665f210a7f141

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: thejovialjourney.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 308 Permanent Redirect
Date: Fri, 26 Apr 2024 12:56:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
location: https://thejovialjourney.com/
x-backend: varnish_ssl
Strict-Transport-Security: max-age=31536000; includeSubDomains
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87a6bbe7ab93b52d-OSL
alt-svc: h3=":443"; ma=86400

npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=

172.67.213.170

404 Not Found

245 B

URL User Request GET HTTP/1.1
npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=
IP
172.67.213.170:80
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text
Size
245 B (245 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc= HTTP/1.1
Host: npajans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 12:56:43 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XnbRQkvy3EWWC6xVB3%2FGtF4uTHiJtIJD6omIVJQPUec3hNAFRwn7w7jYQjKF08Pqc72fCLsvQPfx%2F73EKJdjj4MmeSlrhbxo2DkPHIrlSkiYB0D7b7DRx2ugMdhjZg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87a6bbd809c5b4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

npajans.com/favicon.ico

172.67.213.170

404 Not Found

238 B

URL GET HTTP/1.1
npajans.com/favicon.ico
IP
172.67.213.170:80
ASN
#13335 CLOUDFLARENET

Requested by
http://npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=

File type
HTML document, ASCII text
Size
238 B (238 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: npajans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://npajans.com/polass/91449///fuiqW/bWNhbWFyYUB1cmJhbmxlYWd1ZS5vcmc=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 12:56:45 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gZicGpoVofkmMrcW3ADPZi4n01wRZRSCxnF2b7YvPjI0bVc%2Be7l3M2G6qm9yIvPoFrlKJgJ9kiaYGlf6bhLbf3dUEZqO%2Fwo2qy%2F%2FD69uZrFDzbz49I4cAS8rzhKLUg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87a6bc0b8939b4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (4)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers