Report - jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t

Report Overview

Submitted URL
jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t
IP
54.157.24.8
ASN
#14618 AMAZON-AES
Submitted
2024-04-26 03:58:58
Access
public
Website Title
Jawalarabi.com
Final URL
ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jawalarabi.com	unknown	2022-11-30	2020-02-23	2023-11-30	1.7 kB	8.8 kB	54.157.24.8
ww99.jawalarabi.com	unknown	unknown	No data	No data	446 B	407 B	72.52.179.174
ww7.jawalarabi.com	unknown	unknown	No data	No data	2.1 kB	39 kB	199.59.243.225
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	430 B	75 kB	216.58.211.4
www.adsensecustomsearchads.com	unknown	2011-01-28	2015-09-02	2024-04-25	3.2 kB	196 kB	216.58.211.14
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2024-04-25	1.0 kB	2.3 kB	142.250.74.97
parking3.parklogic.com	unknown	2007-02-28	2023-05-10	2024-04-17	1.5 kB	51 kB	45.79.244.209

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	jawalarabi.com	Sinkholed
2024-04-26	medium	jawalarabi.com	Sinkholed
2024-04-26	medium	jawalarabi.com	Sinkholed
2024-04-26	medium	jawalarabi.com	Sinkholed
2024-04-26	medium	jawalarabi.com	Sinkholed
2024-04-26	medium	jawalarabi.com	Sinkholed
2024-04-26	medium	jawalarabi.com	Sinkholed
2024-04-26	medium	jawalarabi.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol303%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol415&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.jawalarabi.com%2F%3Fcaf%3D1%26usid%3D15%26utid%3D28173645010&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2442788251544177&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=1191714103914914&num=0&output=afd_ads&domain_name=ww7.jawalarabi.com&v=3&bsl=8&pac=2&u_his=4&u_tz=0&dt=1714103914915&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww7.jawalarabi.com%2Fsharedfile%2FonGod%2Fqsuvcq%2FcnByaWNlQHBlcnNvbmlmeWNvcnAuY29t%3Fusid%3D15%26utid%3D28173645010	656 B	2024-04-26	2024-04-26
Pretty URL www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol303%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol415&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.jawalarabi.com%2F%3Fcaf%3D1%26usid%3D15%26utid%3D28173645010&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2442788251544177&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=1191714103914914&num=0&output=afd_ads&domain_name=ww7.jawalarabi.com&v=3&bsl=8&pac=2&u_his=4&u_tz=0&dt=1714103914915&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww7.jawalarabi.com%2Fsharedfile%2FonGod%2Fqsuvcq%2FcnByaWNlQHBlcnNvbmlmeWNvcnAuY29t%3Fusid%3D15%26utid%3D28173645010 IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 05:59:04 Last Seen2024-04-26 05:59:04 Times Seen1 Hash 6785d43acb90bea57a5e5e69b1fbccfe 1cccd80d91b75f69daf12d7e35b9d84a12f65d4a fc7b55717e3618b264fc6f4b91400932b0eb136023c76cb6baa4306ad50cfb53 Loading...

	www.adsensecustomsearchads.com/adsense/domains/caf.js	190 kB	2024-04-24	2024-04-30
Pretty URL www.adsensecustomsearchads.com/adsense/domains/caf.js IP 216.58.211.14 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:28:05 Last Seen2024-04-30 17:43:47 Times Seen482 Hash 80230d38d793427016e814ad7a57b184 16fbf3f072ffb505d38c6465f2d5a3ccda112470 45f2208e47ec10b70256f796819d1f5a97f55c3700daa6b34eb7e85c2efcd625 Loading...

	parking3.parklogic.com/page/enhance.js?pcId=7&pId=1129&domain=Jawalarabi.com	2.1 kB	2024-04-26	2024-04-26
Pretty URL parking3.parklogic.com/page/enhance.js?pcId=7&pId=1129&domain=Jawalarabi.com IP 45.79.244.209 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 03:23:41 Last Seen2024-04-26 10:32:18 Times Seen8 Hash 21728264ad4aad686a3146a0b2d22efa e6adda9fda8b1e96846aa6d2a416ebd051494741 a3c09d8b97a6192d7ea392734c2af5564c3e8ae0cfe2aa96cd0f7bc2dfe75d7d Loading...

	ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010	463 B	2024-04-26	2024-04-26
Pretty URL ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010 IP 199.59.243.225 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 05:59:04 Last Seen2024-04-26 05:59:04 Times Seen1 Hash 998a23d015fb7c8ff6f3f4f9f5e8a822 9ac60e1dbb48e3fe2b5dd839b07e3d4711f0dca5 a9c3d69b2a35c245fb722d84e30706a676896c4e03f648fa42e79c0353018fd2 Loading...

	ww7.jawalarabi.com/bnemWxZyo.js	34 kB	2024-04-22	2024-05-06
Pretty URL ww7.jawalarabi.com/bnemWxZyo.js IP 199.59.243.225 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-22 21:49:17 Last Seen2024-05-06 18:19:33 Times Seen4284 Hash f48baec69cc4dc0852d118259eff2d56 e64c6e4423421da5b35700154810cb67160bc32b 463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c Loading...

	www.google.com/adsense/domains/caf.js?abp=1&bodis=true	190 kB	2024-04-24	2024-04-30
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&bodis=true IP 216.58.211.4 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:28:04 Last Seen2024-04-30 17:42:34 Times Seen596 Hash 897277c2483f5e2098436b44787fbd62 903f66035a40f652f160272214c7ddf40ae12b2a 75c094124cda3ce0beba1b35bd4bea5a85495d53a871c66f55fbb8b027a63996 Loading...

		Size	First Seen	Last Seen
	#1 Eval - bbf517b90f7993fd9d4ce748eb4bbaa3	402 B	2024-03-30	2024-05-02
Pretty Observations First Seen2024-03-30 22:46:39 Last Seen2024-05-02 15:05:08 Times Seen50 Hash bbf517b90f7993fd9d4ce748eb4bbaa3 e76c0e3fd4e6e4c38c825d7729e073b0ef737ac5 9c0a0576cfdec6b13ed2b662d2c18c4e9c4fe4a456c61931b8905399e895340e Loading...

		Size	First Seen	Last Seen
	#1 Write - 1ef434ff49a2a113eebeabb6a0889a92	87 B	2024-04-11	2024-04-29
Pretty Observations First Seen2024-04-11 22:26:25 Last Seen2024-04-29 02:50:00 Times Seen167 Hash 1ef434ff49a2a113eebeabb6a0889a92 8678f6a518524b8f4f90e6932039afa26913e426 985b2b5a2197b552250fc734ecc6ed3dcc030c93645b79b1a156441a6565e49f Loading...

	#2 Write - 623c25d9558391e159b88ed5a003bfe2	184 B	2024-04-26	2024-04-26
Pretty Observations First Seen2024-04-26 03:23:41 Last Seen2024-04-26 10:32:18 Times Seen4 Hash 623c25d9558391e159b88ed5a003bfe2 7af07b51ca0487545cc6cf598ce1c0ebf53869a1 01d98bb0788a779cf9fc52cf47c84d4e6b76cf7c80bf6286788a49ec5616f3c9 Loading...

HTTP Transactions (18)

URL IP Response Size

jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t

54.157.24.8

302 Found

142 B

URL User Request GET HTTP/2
jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t
IP
54.157.24.8:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectjawalarabi.com
FingerprintCA:C3:1A:ED:CB:56:F2:B3:0A:09:B1:75:2A:19:41:56:FE:F6:8E:EE
ValiditySat, 20 Apr 2024 06:24:49 GMT - Fri, 19 Jul 2024 06:24:48 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
142 B (142 bytes)
Hash
82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t HTTP/1.1
Host: jawalarabi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: m6RW96QaECHb2mXiRi7YQBqlkYuoZc7A=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
server: openresty
date: Fri, 26 Apr 2024 03:58:33 GMT
content-type: text/html
content-length: 142
location: http://ww99.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: no-store, max-age=0
X-Firefox-Spdy: h2

ww99.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t

72.52.179.174

302 Moved Temporarily

0 B

URL User Request GET HTTP/1.1
ww99.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t
IP
72.52.179.174:80
ASN
#32244 LIQUIDWEB

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t HTTP/1.1
Host: ww99.jawalarabi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9
Cache-Control: no-cache
Content-Type: text/html; charset=UTF-8
Date: Fri, 26 Apr 2024 03:58:34 GMT
Location: http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Pragma: no-cache
Connection: Keep-Alive
X-Powered-By: PHP/5.4.16
Content-Length: 0

ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010

199.59.243.225

1.2 kB

URL User Request GET
ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
IP
199.59.243.225:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (478)
Size
1.2 kB (1210 bytes)
Hash
7e1212f4905b0cd798cbfce94594908e
85c0e45c1ee6ff5da2bc93b340302236b52c2b4e
4771b165a15fc361deeddb07ba53b8f06ff695bd7d239b9f9c61eb142f0dfc55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010 HTTP/1.1
Host: ww7.jawalarabi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Fri, 26 Apr 2024 03:58:34 GMT
content-type: text/html; charset=utf-8
content-length: 1210
x-request-id: 5ce02bf6-d9a5-486e-b441-f5406aebc07e
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pMweS14yQG/AuMs/BOyqSVb91vAYwsZhHAg0tZ7J+at0NVj735+jTKxFORnWBupnweYHpliiPduf4IImNRtPUg==
set-cookie: parking_session=5ce02bf6-d9a5-486e-b441-f5406aebc07e; expires=Fri, 26 Apr 2024 04:13:34 GMT; path=/

ww7.jawalarabi.com/bnemWxZyo.js

199.59.243.225

200 OK

34 kB

URL GET HTTP/1.1
ww7.jawalarabi.com/bnemWxZyo.js
IP
199.59.243.225:80
ASN
#16509 AMAZON-02

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33788)
Size
34 kB (33791 bytes)
Hash
f48baec69cc4dc0852d118259eff2d56
e64c6e4423421da5b35700154810cb67160bc32b
463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bnemWxZyo.js HTTP/1.1
Host: ww7.jawalarabi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Cookie: parking_session=5ce02bf6-d9a5-486e-b441-f5406aebc07e
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Fri, 26 Apr 2024 03:58:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 33791
x-request-id: 91185cc5-bc03-4d43-a9d3-a6b9b9746b8f
set-cookie: parking_session=5ce02bf6-d9a5-486e-b441-f5406aebc07e; expires=Fri, 26 Apr 2024 04:13:34 GMT

ww7.jawalarabi.com/_fd?usid=15&utid=28173645010

199.59.243.225

200 OK

2.4 kB

URL POST HTTP/1.1
ww7.jawalarabi.com/_fd?usid=15&utid=28173645010
IP
199.59.243.225:80
ASN
#16509 AMAZON-02

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010

File type
ASCII text, with very long lines (4809), with no line terminators
Size
2.4 kB (2437 bytes)
Hash
37c2f13e3c98940a1f0b4b14d55dc235
266e3238ba9a5e24c9f2b2a887b488bf846c5451
13038c7732578778bfdec810995152fef45f864c5b6babd38671ac08c4510b4c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /_fd?usid=15&utid=28173645010 HTTP/1.1
Host: ww7.jawalarabi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Content-Type: application/json
Origin: http://ww7.jawalarabi.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=5ce02bf6-d9a5-486e-b441-f5406aebc07e
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
server: openresty
date: Fri, 26 Apr 2024 03:58:34 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
content-length: 2437
x-version: 2.118.0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: parking_session=5ce02bf6-d9a5-486e-b441-f5406aebc07e; expires=Fri, 26 Apr 2024 04:13:34 GMT; Max-Age=900; path=/; httponly

www.google.com/adsense/domains/caf.js?abp=1&bodis=true

216.58.211.4

200 OK

75 kB

URL GET HTTP/2
www.google.com/adsense/domains/caf.js?abp=1&bodis=true
IP
216.58.211.4:443
ASN
#15169 GOOGLE

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73
ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT

File type
gzip compressed data, max compression
Size
75 kB (74582 bytes)
Hash
790e2d70390053266608baf1d8bf893d
4d02d47f126647ba9f6d035297666219a0b2371f
ade2fdf9679e3a664a16558830e1cb7af4b2a347fecf8483107c7c873b46c4e0

HTTP Headers

GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.jawalarabi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 26 Apr 2024 03:58:34 GMT
expires: Fri, 26 Apr 2024 03:58:34 GMT
cache-control: private, max-age=3600
etag: "7572795066147886669"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol303%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol415&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.jawalarabi.com%2F%3Fcaf%3D1%26usid%3D15%26utid%3D28173645010&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2442788251544177&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=1191714103914914&num=0&output=afd_ads&domain_name=ww7.jawalarabi.com&v=3&bsl=8&pac=2&u_his=4&u_tz=0&dt=1714103914915&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww7.jawalarabi.com%2Fsharedfile%2FonGod%2Fqsuvcq%2FcnByaWNlQHBlcnNvbmlmeWNvcnAuY29t%3Fusid%3D15%26utid%3D28173645010

216.58.211.14

200 OK

2.6 kB

URL GET HTTP/2
www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol303%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol415&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.jawalarabi.com%2F%3Fcaf%3D1%26usid%3D15%26utid%3D28173645010&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2442788251544177&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=1191714103914914&num=0&output=afd_ads&domain_name=ww7.jawalarabi.com&v=3&bsl=8&pac=2&u_his=4&u_tz=0&dt=1714103914915&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww7.jawalarabi.com%2Fsharedfile%2FonGod%2Fqsuvcq%2FcnByaWNlQHBlcnNvbmlmeWNvcnAuY29t%3Fusid%3D15%26utid%3D28173645010
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
HTML document, ASCII text, with very long lines (13121)
Size
2.6 kB (2584 bytes)
Hash
ef1076474cba860005c714a2f69068b5
f3b70d7dfe3ad8624db08796421d8dcbc964942c
8d8acc248452c4636375690327c63146fa8e7823e4dddb9584c427692b30b640

HTTP Headers

GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol303%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol415&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.jawalarabi.com%2F%3Fcaf%3D1%26usid%3D15%26utid%3D28173645010&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2442788251544177&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=1191714103914914&num=0&output=afd_ads&domain_name=ww7.jawalarabi.com&v=3&bsl=8&pac=2&u_his=4&u_tz=0&dt=1714103914915&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww7.jawalarabi.com%2Fsharedfile%2FonGod%2Fqsuvcq%2FcnByaWNlQHBlcnNvbmlmeWNvcnAuY29t%3Fusid%3D15%26utid%3D28173645010 HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.jawalarabi.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Fri, 26 Apr 2024 03:58:34 GMT
expires: Fri, 26 Apr 2024 03:58:34 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-N_35iTrWQgBxYiFWvkSjWA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2584
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ww7.jawalarabi.com/_tr

199.59.243.225

200 OK

22 B

URL POST HTTP/1.1
ww7.jawalarabi.com/_tr
IP
199.59.243.225:80
ASN
#16509 AMAZON-02

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010

File type
ASCII text, with no line terminators
Size
22 B (22 bytes)
Hash
444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /_tr HTTP/1.1
Host: ww7.jawalarabi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Content-Type: application/json
Content-Length: 1841
Origin: http://ww7.jawalarabi.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=5ce02bf6-d9a5-486e-b441-f5406aebc07e
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: openresty
date: Fri, 26 Apr 2024 03:58:35 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
content-length: 22
x-version: 2.118.0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: parking_session=5ce02bf6-d9a5-486e-b441-f5406aebc07e; expires=Fri, 26 Apr 2024 04:13:35 GMT; Max-Age=900; path=/; httponly

jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t

54.157.24.8

302 Found

1.7 kB

URL User Request GET HTTP/2
jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t
IP
54.157.24.8:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectjawalarabi.com
FingerprintCA:C3:1A:ED:CB:56:F2:B3:0A:09:B1:75:2A:19:41:56:FE:F6:8E:EE
ValiditySat, 20 Apr 2024 06:24:49 GMT - Fri, 19 Jul 2024 06:24:48 GMT

File type
JavaScript source, ASCII text, with very long lines (3090)
Size
1.7 kB (1705 bytes)
Hash
a6079ef63de89535646893806215e1e6
2a8dd1eab9706c025ef860c9880ef2a140b37051
dd48f4de5ee1dc054be5afa0c8ec5ad8814f24339fdccce54b0481f2aa0669a4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t HTTP/1.1
Host: jawalarabi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Fri, 26 Apr 2024 03:58:32 GMT
content-type: text/html
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: no-store, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b

142.250.74.97

200 OK

174 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol303%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol415&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.jawalarabi.com%2F%3Fcaf%3D1%26usid%3D15%26utid%3D28173645010&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2442788251544177&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=1191714103914914&num=0&output=afd_ads&domain_name=ww7.jawalarabi.com&v=3&bsl=8&pac=2&u_his=4&u_tz=0&dt=1714103914915&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww7.jawalarabi.com%2Fsharedfile%2FonGod%2Fqsuvcq%2FcnByaWNlQHBlcnNvbmlmeWNvcnAuY29t%3Fusid%3D15%26utid%3D28173645010
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47
ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT

File type
SVG Scalable Vector Graphics image
Size
174 B (174 bytes)
Hash
d47125b2ba92be53dcff07ba322ce1de
e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28
5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 01:52:44 GMT
expires: Sat, 27 Apr 2024 00:52:44 GMT
cache-control: public, max-age=82800
age: 7551
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

parking3.parklogic.com/page/enhance.js?pcId=7&pId=1129&domain=Jawalarabi.com

45.79.244.209

200 OK

2.1 kB

URL GET HTTP/1.1
parking3.parklogic.com/page/enhance.js?pcId=7&pId=1129&domain=Jawalarabi.com
IP
45.79.244.209:443
ASN
#63949 Akamai Connected Cloud

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Certificate
IssuerSectigo Limited
Subject*.parklogic.com
FingerprintA5:25:E3:1A:B4:C8:32:BD:0D:BA:C8:B4:19:22:F9:75:D4:D3:88:3F
ValiditySat, 20 Jan 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (728)
Size
2.1 kB (2064 bytes)
Hash
21728264ad4aad686a3146a0b2d22efa
e6adda9fda8b1e96846aa6d2a416ebd051494741
a3c09d8b97a6192d7ea392734c2af5564c3e8ae0cfe2aa96cd0f7bc2dfe75d7d

HTTP Headers

GET /page/enhance.js?pcId=7&pId=1129&domain=Jawalarabi.com HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.jawalarabi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Fri, 26 Apr 2024 03:58:35 GMT
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.5.38
x-powered-by: PHP/5.5.38
transfer-encoding: chunked
content-type: text/javascript;charset=UTF-8
connection: close

parking3.parklogic.com/page/scribe.php?pcId=7&domain=jawalarabi.com&pId=1129&usid=15&utid=28173645010&query=null&domainJs=ww7.jawalarabi.com&path=/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t&ss=true&lp=1

45.79.244.209

200 OK

46 B

URL GET HTTP/1.1
parking3.parklogic.com/page/scribe.php?pcId=7&domain=jawalarabi.com&pId=1129&usid=15&utid=28173645010&query=null&domainJs=ww7.jawalarabi.com&path=/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t&ss=true&lp=1
IP
45.79.244.209:443
ASN
#63949 Akamai Connected Cloud

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Certificate
IssuerSectigo Limited
Subject*.parklogic.com
FingerprintA5:25:E3:1A:B4:C8:32:BD:0D:BA:C8:B4:19:22:F9:75:D4:D3:88:3F
ValiditySat, 20 Jan 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT

File type
ASCII text
Size
46 B (46 bytes)
Hash
c0fc9a1b28380f063a17615f14be00f3
b7ecca5ab4774ccc34683ad2b9f43fd19a4ae864
e9b5a209bb45f7d6f760111c08135c18ff5ad6ace1bfbfe8d77f796d00d18f41

HTTP Headers

GET /page/scribe.php?pcId=7&domain=jawalarabi.com&pId=1129&usid=15&utid=28173645010&query=null&domainJs=ww7.jawalarabi.com&path=/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t&ss=true&lp=1 HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww7.jawalarabi.com/
Origin: http://ww7.jawalarabi.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Fri, 26 Apr 2024 03:58:35 GMT
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.5.38
x-powered-by: PHP/5.5.38
access-control-allow-origin: *
transfer-encoding: chunked
content-type: text/html;charset=UTF-8
connection: close

parking3.parklogic.com/page/images/pe262/hero_nc.svg

45.79.244.209

200 OK

48 kB

URL GET HTTP/1.1
parking3.parklogic.com/page/images/pe262/hero_nc.svg
IP
45.79.244.209:443
ASN
#63949 Akamai Connected Cloud

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Certificate
IssuerSectigo Limited
Subject*.parklogic.com
FingerprintA5:25:E3:1A:B4:C8:32:BD:0D:BA:C8:B4:19:22:F9:75:D4:D3:88:3F
ValiditySat, 20 Jan 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
48 kB (48097 bytes)
Hash
5a2c392e7acdf6e9de6e00129500503c
c8d0f80381e4ce180b5eb3c4c98539907292a7bb
878da09a057ec8f1775cdc522e5f7ec44966df547a87a9c29826ba114833c24b

HTTP Headers

GET /page/images/pe262/hero_nc.svg HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.jawalarabi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Fri, 26 Apr 2024 03:58:36 GMT
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.5.38
last-modified: Mon, 08 Mar 2021 23:04:00 GMT
etag: "bbe1-5bd0e72fe1800"
accept-ranges: bytes
content-length: 48097
content-type: image/svg+xml
connection: close

www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=1bu46r8lkcl7&aqid=ayYrZqgSn4uIzQ_lpajQDA&psid=3113057640&pbt=bs&adbx=290&adby=313&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=6%7C0%7C373%7C70%7C11&lle=0&ifv=1&hpt=0

216.58.211.14

204 No Content

0 B

URL GET HTTP/3
www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=1bu46r8lkcl7&aqid=ayYrZqgSn4uIzQ_lpajQDA&psid=3113057640&pbt=bs&adbx=290&adby=313&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=6%7C0%7C373%7C70%7C11&lle=0&ifv=1&hpt=0
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=1bu46r8lkcl7&aqid=ayYrZqgSn4uIzQ_lpajQDA&psid=3113057640&pbt=bs&adbx=290&adby=313&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=6%7C0%7C373%7C70%7C11&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.jawalarabi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Ll0IzwnKgJx9pNuu3mOELA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 Apr 2024 03:58:36 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=pn24b1i0luol&aqid=ayYrZqgSn4uIzQ_lpajQDA&psid=3113057640&pbt=bv&adbx=290&adby=313&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=6%7C0%7C373%7C70%7C11&lle=0&ifv=1&hpt=0

216.58.211.14

204 No Content

0 B

URL GET HTTP/3
www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=pn24b1i0luol&aqid=ayYrZqgSn4uIzQ_lpajQDA&psid=3113057640&pbt=bv&adbx=290&adby=313&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=6%7C0%7C373%7C70%7C11&lle=0&ifv=1&hpt=0
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
http://ww7.jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t?usid=15&utid=28173645010
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=pn24b1i0luol&aqid=ayYrZqgSn4uIzQ_lpajQDA&psid=3113057640&pbt=bv&adbx=290&adby=313&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=627058929&csala=6%7C0%7C373%7C70%7C11&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww7.jawalarabi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-suTRTJ71UvKljiYyPsvqXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 Apr 2024 03:58:37 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

jawalarabi.com/.IGV0hOcNusVJOgqoD1HuWTk0PssdueKB

54.157.24.8

6.1 kB

URL
jawalarabi.com/.IGV0hOcNusVJOgqoD1HuWTk0PssdueKB
IP
54.157.24.8:0
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectjawalarabi.com
FingerprintCA:C3:1A:ED:CB:56:F2:B3:0A:09:B1:75:2A:19:41:56:FE:F6:8E:EE
ValiditySat, 20 Apr 2024 06:24:49 GMT - Fri, 19 Jul 2024 06:24:48 GMT

File type
gzip compressed data, max speed, from Unix
Size
6.1 kB (6070 bytes)
Hash
7c02e695dded6e5e38a36ea150e25ac5
1ed1e7b76d8c3fd4d42020b7612733a1027d8297
106c9e8ff133620df60e27ae2fc39f79421dcb573f371985231ec316ba3a6d20

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /.IGV0hOcNusVJOgqoD1HuWTk0PssdueKB HTTP/1.1
Host: jawalarabi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jawalarabi.com/sharedfile/onGod/qsuvcq/cnByaWNlQHBlcnNvbmlmeWNvcnAuY29t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Fri, 26 Apr 2024 03:58:33 GMT
content-type: text/html
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: no-store, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2

www.adsensecustomsearchads.com/adsense/domains/caf.js

216.58.211.14

200 OK

190 kB

URL GET HTTP/3
www.adsensecustomsearchads.com/adsense/domains/caf.js
IP
216.58.211.14:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol303%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol415&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.jawalarabi.com%2F%3Fcaf%3D1%26usid%3D15%26utid%3D28173645010&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2442788251544177&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=1191714103914914&num=0&output=afd_ads&domain_name=ww7.jawalarabi.com&v=3&bsl=8&pac=2&u_his=4&u_tz=0&dt=1714103914915&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww7.jawalarabi.com%2Fsharedfile%2FonGod%2Fqsuvcq%2FcnByaWNlQHBlcnNvbmlmeWNvcnAuY29t%3Fusid%3D15%26utid%3D28173645010
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (2247)
Size
190 kB (190526 bytes)
Hash
80230d38d793427016e814ad7a57b184
16fbf3f072ffb505d38c6465f2d5a3ccda112470
45f2208e47ec10b70256f796819d1f5a97f55c3700daa6b34eb7e85c2efcd625

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: www.adsensecustomsearchads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 26 Apr 2024 03:58:35 GMT
expires: Fri, 26 Apr 2024 03:58:35 GMT
cache-control: private, max-age=3600
etag: "8717956789094193115"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff

142.250.74.97

200 OK

444 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://www.adsensecustomsearchads.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol303%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol415&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww7.jawalarabi.com%2F%3Fcaf%3D1%26usid%3D15%26utid%3D28173645010&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2442788251544177&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442&client_gdprApplies=1&format=r3&nocache=1191714103914914&num=0&output=afd_ads&domain_name=ww7.jawalarabi.com&v=3&bsl=8&pac=2&u_his=4&u_tz=0&dt=1714103914915&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=627058929&rurl=http%3A%2F%2Fww7.jawalarabi.com%2Fsharedfile%2FonGod%2Fqsuvcq%2FcnByaWNlQHBlcnNvbmlmeWNvcnAuY29t%3Fusid%3D15%26utid%3D28173645010
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint6E:66:E1:45:85:5C:3A:EB:60:4A:8E:EF:62:B8:7C:E3:C7:1B:FA:47
ValidityMon, 18 Mar 2024 20:34:07 GMT - Mon, 10 Jun 2024 20:34:06 GMT

File type
SVG Scalable Vector Graphics image
Size
444 B (444 bytes)
Hash
e832f02dbacdfbc53f55ac03fd411536
42faffc03967c9dddf015f2356b1ada381e85987
bf7a2e0e38d5195c796b391534c7667bc936fc5a30ccfc410b45c53812efe264

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.adsensecustomsearchads.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 278
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 12:08:55 GMT
expires: Fri, 26 Apr 2024 11:08:55 GMT
cache-control: public, max-age=82800
age: 56980
last-modified: Tue, 27 Jun 2023 17:28:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (18)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type