Report - barberhagen.dk/16bbc/p2p.html

Report Overview

Submitted URL
barberhagen.dk/16bbc/p2p.html
IP
188.132.223.252
ASN
#215911 Mywifi Telekomunikasyon Sanayi Ticaret Limited Sirketi
Submitted
2024-04-16 17:40:08
Access
public
Website Title
Client
Final URL
www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-16	467 B	7.5 kB	104.17.25.14
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-16	850 B	58 kB	151.101.194.137
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-16	464 B	26 kB	104.18.11.207
www.arabccc.com	unknown	2004-04-24	2015-06-01	2024-03-27	5.6 kB	49 kB	192.185.140.108
barberhagen.dk	unknown	2020-01-14	2020-02-18	2024-03-28	483 B	1.1 kB	188.132.223.252

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	barberhagen.dk/16bbc/p2p.html	PayPal Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	barberhagen.dk	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined	0 B	2023-03-07	2024-04-29
Pretty URL www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined IP 192.185.140.108 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-29 21:50:07 Times Seen37190482 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	62 B	2023-05-02	2024-04-16
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-05-02 06:56:08 Last Seen2024-04-16 19:40:11 Times Seen563 Hash c42e9e84aa78b7e76c66ce7c2a0671ae 82d0d6524a1cd466f04faa19dd653de57b793c13 5f5d964b95e5360fba8eb745c6335cddd256ddc33513db703b806810b934c5a8 Loading...

HTTP Transactions (18)

URL IP Response Size

barberhagen.dk/16bbc/p2p.html

188.132.223.252

664 B

URL
barberhagen.dk/16bbc/p2p.html
IP
188.132.223.252:0
ASN
#215911 Mywifi Telekomunikasyon Sanayi Ticaret Limited Sirketi

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
664 B (664 bytes)
Hash
fdaea3e75f420f75c27bb95e198d497c
e20f5a2d56a5865e33e295a69d5a8d76eba1006a
45b22d3f94033027e8debb63783b90701effbf3d738af48eda7e42a3b8ce9fb2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	PayPal Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /16bbc/p2p.html HTTP/1.1
Host: barberhagen.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 16 Apr 2024 02:58:25 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 664
date: Tue, 16 Apr 2024 17:39:43 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js

104.17.25.14

6.5 kB

URL
cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (20322)
Size
6.5 kB (6458 bytes)
Hash
6b08ddc901000d51fa1f06a35518f302
bafe987c18cbe0587de3e6360e7da40a2885614b
02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5

HTTP Headers

GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://barberhagen.dk
DNT: 1
Connection: keep-alive
Referer: https://barberhagen.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 17:39:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 328199
expires: Sun, 06 Apr 2025 17:39:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3idyi2T%2BgyAiOsK2IOwUrv1vRrrHz5PgYi8WKKFvOo6xyJiB3Qhnq%2BmFOQc99isj6EkNYNWbkj3GNjcvJk0g4XbBGeEY6vr%2BBoTs%2FjLv2WUJFMcXxHNKH7%2BQzkHsAnwnV7zHQebk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8755f4d81b24569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.3.1.slim.min.js

151.101.194.137

24 kB

URL
code.jquery.com/jquery-3.3.1.slim.min.js
IP
151.101.194.137:0
ASN
#54113 FASTLY

File type
JavaScript source, ASCII text, with very long lines (65247)
Size
24 kB (24038 bytes)
Hash
99b0a83cf1b0b1e2cb16041520e87641
bc5836992c0b260496ba520fe1336d499bf06eb7
dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1

HTTP Headers

GET /jquery-3.3.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://barberhagen.dk
DNT: 1
Connection: keep-alive
Referer: https://barberhagen.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1111d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 16 Apr 2024 17:39:44 GMT
age: 18488583
x-served-by: cache-lga21982-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 97, 130971
x-timer: S1713289184.088351,VS0,VE0
vary: Accept-Encoding
content-length: 24038
X-Firefox-Spdy: h2

code.jquery.com/jquery-1.9.1.min.js

151.101.194.137

33 kB

URL
code.jquery.com/jquery-1.9.1.min.js
IP
151.101.194.137:0
ASN
#54113 FASTLY

File type
JavaScript source, ASCII text, with very long lines (32089)
Size
33 kB (32772 bytes)
Hash
397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4

HTTP Headers

GET /jquery-1.9.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://barberhagen.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-169d5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 16 Apr 2024 17:39:44 GMT
age: 14680522
x-served-by: cache-lga13625-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 24, 2838023
x-timer: S1713289184.087390,VS0,VE0
vary: Accept-Encoding
content-length: 32772
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js

104.18.11.207

25 kB

URL
stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js
IP
104.18.11.207:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (50395)
Size
25 kB (25263 bytes)
Hash
ce6e785579ae4cb555c9de311d1b9271
5ef2c15b47d7290698c737676ba9c3056b45f2e8
0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339

HTTP Headers

GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://barberhagen.dk
DNT: 1
Connection: keep-alive
Referer: https://barberhagen.dk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 17:39:44 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 03/18/2024 13:32:40
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 0d6e094c98dc97b723dc6d2d2972da2b
cdn-cache: HIT
cf-cache-status: HIT
age: 1298639
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8755f4d81a7bb529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.arabccc.com/16bbc/index.php?userid=undefined

192.185.140.108

302 Moved Temporarily

0 B

URL User Request GET HTTP/1.1
www.arabccc.com/16bbc/index.php?userid=undefined
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /16bbc/index.php?userid=undefined HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Date: Tue, 16 Apr 2024 17:39:44 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

192.185.140.108

3.2 kB

URL User Request GET
www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
IP
192.185.140.108:0
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

File type
JavaScript source, ASCII text, with very long lines (623), with CRLF line terminators
Size
3.2 kB (3150 bytes)
Hash
ae45944d250c472a38e29611a7bc401c
6b600736b124cc5e77f4bd45df2ab36ed4a3018a
525cba38bbb619a3867a272e86f962fab8c92a117472e87c6d668197a928455e

HTTP Headers

GET /16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3150
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.arabccc.com/16bbc/cgn-in/login_files/loginAdvanced.css

192.185.140.108

200 OK

736 B

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/loginAdvanced.css
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
ASCII text, with CRLF line terminators
Size
736 B (736 bytes)
Hash
6f65ff42179a6b726d73fd73148e52c1
16f9599aaae13fca4c1855de9030798c79e92517
468daa1d727a90a0e1dd9f1d2e0298f22d5d973866ccc802cb7f5c7c95684b56

HTTP Headers

GET /16bbc/cgn-in/login_files/loginAdvanced.css HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 27 Nov 2018 05:41:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 736
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.arabccc.com/16bbc/cgn-in/login_files/loginBasic.css

192.185.140.108

200 OK

132 B

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/loginBasic.css
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
ASCII text, with CRLF line terminators
Size
132 B (132 bytes)
Hash
42ff1688ca10c5d6509e02817e49621b
717ef684b44bc8aef33e8df943e337da901bc7fe
36093ef889f1a3f3487a33752d585fcffc2a2a4fbbd32e3922ed285bfe154a27

HTTP Headers

GET /16bbc/cgn-in/login_files/loginBasic.css HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 27 Nov 2018 05:40:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 132
Keep-Alive: timeout=5, max=75
Content-Type: text/css

www.arabccc.com/16bbc/cgn-in/login_files/logo.png

192.185.140.108

200 OK

930 B

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/logo.png
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced
Size
930 B (930 bytes)
Hash
4070e765f512a9ce6be12d141237daca
ec0135f00de4ac2600360e052609fbfd3f6cabb0
74f16276d05ebc79ee7fbf56462451307491c08c6d4c1a2093b73afe40c95617

HTTP Headers

GET /16bbc/cgn-in/login_files/logo.png HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Last-Modified: Tue, 27 Nov 2018 05:38:48 GMT
Accept-Ranges: bytes
Content-Length: 930
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png

www.arabccc.com/16bbc/cgn-in/login_files/top.png

192.185.140.108

200 OK

1.7 kB

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/top.png
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
PNG image data, 304 x 15, 8-bit/color RGBA, non-interlaced
Size
1.7 kB (1705 bytes)
Hash
3a518d602a65354ccbc27083cbfe959b
a2e0a751fa2cb17e5e525f5dc96e252d6244a691
21dacae4f28e0ccd1e08fb874451ef70fa9181389a3a082e1a07245315feb73f

HTTP Headers

GET /16bbc/cgn-in/login_files/top.png HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 27 Nov 2018 05:39:08 GMT
Accept-Ranges: bytes
Content-Length: 1705
Keep-Alive: timeout=5, max=75
Content-Type: image/png

www.arabccc.com/16bbc/cgn-in/login_files/bottom.png

192.185.140.108

200 OK

1.8 kB

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/bottom.png
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
PNG image data, 304 x 15, 8-bit/color RGBA, non-interlaced
Size
1.8 kB (1824 bytes)
Hash
a5f27369df1da9c58fab9d80e20a42fb
58a861a73e529d7532b509f7767ba34002c15313
7023708bfefd96e82a33ab788957f51abe998acc0193100e96db16cce9209583

HTTP Headers

GET /16bbc/cgn-in/login_files/bottom.png HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Last-Modified: Tue, 27 Nov 2018 05:39:14 GMT
Accept-Ranges: bytes
Content-Length: 1824
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png

www.arabccc.com/16bbc/cgn-in/login_files/loginDialog.js

192.185.140.108

404 Not Found

12 kB

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/loginDialog.js
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1746), with CRLF, LF line terminators
Size
12 kB (11605 bytes)
Hash
70ebac0fe9cf96fcca3d96310b1562b8
716d5816660b7e1063479eaff7334db36bc88638
3cddf03a83749b6461bcc23b260285fecec418182006c30c2a5059cec4982755

HTTP Headers

GET /16bbc/cgn-in/login_files/loginDialog.js HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://www.arabccc.com/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11605
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.arabccc.com/16bbc/cgn-in/login_files/generatedDefaults.js

192.185.140.108

404 Not Found

12 kB

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/generatedDefaults.js
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1746), with CRLF, LF line terminators
Size
12 kB (11605 bytes)
Hash
70ebac0fe9cf96fcca3d96310b1562b8
716d5816660b7e1063479eaff7334db36bc88638
3cddf03a83749b6461bcc23b260285fecec418182006c30c2a5059cec4982755

HTTP Headers

GET /16bbc/cgn-in/login_files/generatedDefaults.js HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://www.arabccc.com/wp-json/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11605
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

www.arabccc.com/16bbc/cgn-in/login_files/is

192.185.140.108

404 Not Found

12 kB

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/is
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1746), with CRLF, LF line terminators
Size
12 kB (11605 bytes)
Hash
70ebac0fe9cf96fcca3d96310b1562b8
716d5816660b7e1063479eaff7334db36bc88638
3cddf03a83749b6461bcc23b260285fecec418182006c30c2a5059cec4982755

HTTP Headers

GET /16bbc/cgn-in/login_files/is HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 17:39:45 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://www.arabccc.com/wp-json/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11605
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8

www.arabccc.com/16bbc/cgn-in/login_files/img/background.png

192.185.140.108

200 OK

393 B

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/img/background.png
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
HTML document, ASCII text
Size
393 B (393 bytes)
Hash
36de1d9a04c84897aaee74b45ecc05fa
ab42e5e3bef742f10d7cfa36c7b0c13003a695a3
2e2a9b63438f66c2c112562946db160ed30eab6587e924b3e8db77ff91672139

HTTP Headers

GET /16bbc/cgn-in/login_files/img/background.png HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login_files/loginAdvanced.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:46 GMT
Server: Apache
Last-Modified: Tue, 27 Nov 2018 05:38:54 GMT
Accept-Ranges: bytes
Content-Length: 393
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png

www.arabccc.com/16bbc/cgn-in/login_files/img/middle.png

192.185.140.108

200 OK

389 B

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/img/middle.png
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
HTML document, ASCII text
Size
389 B (389 bytes)
Hash
a488348f72f211a0ea043a1498407234
1f878f73e1e038c733751819916450b6d905735b
7b24b0079c5c4f4998bf6201f7b23622921ade224beb44e7937aa0b6508bbecf

HTTP Headers

GET /16bbc/cgn-in/login_files/img/middle.png HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login_files/loginAdvanced.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:46 GMT
Server: Apache
Last-Modified: Tue, 27 Nov 2018 05:39:10 GMT
Accept-Ranges: bytes
Content-Length: 389
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png

www.arabccc.com/16bbc/cgn-in/login_files/logo.png

192.185.140.108

200 OK

930 B

URL GET HTTP/1.1
www.arabccc.com/16bbc/cgn-in/login_files/logo.png
IP
192.185.140.108:80
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined

File type
PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced
Size
930 B (930 bytes)
Hash
4070e765f512a9ce6be12d141237daca
ec0135f00de4ac2600360e052609fbfd3f6cabb0
74f16276d05ebc79ee7fbf56462451307491c08c6d4c1a2093b73afe40c95617

HTTP Headers

GET /16bbc/cgn-in/login_files/logo.png HTTP/1.1
Host: www.arabccc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.arabccc.com/16bbc/cgn-in/login.php?l=_JeHFUq_VJOXK0QWHtoGYDw_Product-UserID&userid=undefined
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 17:39:46 GMT
Server: Apache
Last-Modified: Tue, 27 Nov 2018 05:38:48 GMT
Accept-Ranges: bytes
Content-Length: 930
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/png

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash