Report - www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1

Report Overview

Submitted URL
www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
IP
67.20.91.43
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2023-02-05 10:04:19
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
58

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
www.arabbattery.com	unknown	2019-07-13T11:41:27Z	2022-12-26T18:56:04Z	14 kB	116 kB	67.20.91.43
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	52.43.88.238
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	52 kB	34.120.237.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.0 kB	8.0 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-02-05 10:04:48	medium	Client IP	Internal IP	ETPRO INFO DYNAMIC_DNS Query to a *.dynamic-dns.net Domain
2023-02-05 10:04:48	medium	Client IP	Internal IP	ETPRO INFO DYNAMIC_DNS Query to a *.dynamic-dns.net Domain
2023-02-05 10:04:49	medium	Client IP	Internal IP	ETPRO INFO DYNAMIC_DNS Query to a *.dynamic-dns.net Domain
2023-02-05 10:04:49	medium	Client IP	Internal IP	ETPRO INFO DYNAMIC_DNS Query to a *.dynamic-dns.net Domain
2023-02-05 10:04:49	medium	Client IP	Internal IP	ETPRO INFO DYNAMIC_DNS Query to a *.dynamic-dns.net Domain
2023-02-05 10:04:49	medium	Client IP	Internal IP	ETPRO INFO DYNAMIC_DNS Query to a *.dynamic-dns.net Domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-05	medium	www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html	Malware
2023-02-05	medium	www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html	Malware
2023-02-05	medium	www.arabbattery.com/includes/templates/storeakkude/jscript/jscript_kancart_mobile.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed
2023-02-05	medium	arabbattery.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html	230 B	2023-03-07	2023-08-12
Pretty URL www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html IP 67.20.91.43 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:14:56 Last Seen2023-08-12 22:59:31 Times Seen2 Hash 9e1cd0eb927e4f272d3b63a949d50c25 049fd78486eb550a7d111826892abbd7057f86fe 17c6b93b4ddaa6731d39412601024148bb4f33f45828d9d2cfe81a7d7942a202 Loading...

	www.arabbattery.com/includes/templates/storeakkude/jscript/jscript_kancart_mobile.js	3.1 kB	2023-03-07	2023-03-13
Pretty URL www.arabbattery.com/includes/templates/storeakkude/jscript/jscript_kancart_mobile.js IP 67.20.91.43 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:14:56 Last Seen2023-03-13 17:31:41 Times Seen1 Hash 74debea2623cd015d7541f38db7b3ba7 e8c3e236e8eb2c0e68185f74217da8d2ff5a26d4 b0c9d155e37360c70e3b3e08ce6eac61359d4e9fa5ba16780cecc3f42ec6afe7 Loading...

HTTP Transactions (46)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9681
Expires: Sun, 05 Feb 2023 12:45:28 GMT
Date: Sun, 05 Feb 2023 10:04:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10672
Expires: Sun, 05 Feb 2023 13:01:59 GMT
Date: Sun, 05 Feb 2023 10:04:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5975
Expires: Sun, 05 Feb 2023 11:43:42 GMT
Date: Sun, 05 Feb 2023 10:04:07 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 09:36:17 GMT
content-type: application/json
age: 1670
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: eNCjtkRXRdwYa7myiRBO0/ysWm2bL0QHAdxc3ZvtP91ZTGrBADleTMSxiY8xTB7U0i/8jpp318Y=
x-amz-request-id: Z3YYNWNS452N164V
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 09:53:13 GMT
age: 654
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html

67.20.91.43

301 Moved Permanently

311 B

URL HTTP/1.1
www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
311 B (311 bytes)
Hash
4a332a74435d18e328ce3c6310a3ae61
6f3e844c6edbe17f4be2b4c148bfdb9666b4a4a5
11084e187f0543e87265da7a58e19df443731a6b49c81fa254c0323a32f35c32

Detections

Analyzer	Verdict	Alert
fortinet	Malware
quad9	Sinkholed

HTTP Headers

GET /http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 Feb 2023 10:04:07 GMT
Server: Apache
Location: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Content-Length: 311
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 10:04:07 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 09:49:07 GMT
age: 901
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c5eedaf6f81f3c05ac2f7d6937774e8b
c570f2ca2c78a397f7d27bc4c2bbd8633dc50df3
1c86b002af87320da4148452be1a4c6f1e7859946985e3b4127c058c1f796230

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C86B002AF87320DA4148452BE1A4C6F1E7859946985E3B4127C058C1F796230"
Last-Modified: Sat, 04 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21561
Expires: Sun, 05 Feb 2023 16:03:29 GMT
Date: Sun, 05 Feb 2023 10:04:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8441
Expires: Sun, 05 Feb 2023 12:24:49 GMT
Date: Sun, 05 Feb 2023 10:04:08 GMT
Connection: keep-alive

push.services.mozilla.com/

52.43.88.238

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.43.88.238:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HeUd/7R2KRw+qcUhAeoXmw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JcTGD7erku698Au46MUO54tfR8k=

www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html

67.20.91.43

200 OK

7.7 kB

URL HTTP/2
www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8572), with CRLF, LF line terminators
Size
7.7 kB (7658 bytes)
Hash
66da0e4294276748d277319f1c391798
6a31b49e5205b8fa9c953d77b231b839442de341
19f50e6127c289b2fc71bbea3e9a0d611e398bb88b8b96b52272366f81f30830

Detections

Analyzer	Verdict	Alert
fortinet	Malware
quad9	Sinkholed

HTTP Headers

GET /http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213; path=/; domain=.www.arabbattery.com; HttpOnly
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 7658
content-type: text/html; charset=utf-8
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/css/stylesheet_zen_lightbox.css

67.20.91.43

200 OK

559 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/css/stylesheet_zen_lightbox.css
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with CR line terminators
Size
559 B (559 bytes)
Hash
7c0de4767921100789de112970d97ef8
4b53a5148977840f805cbd2ca2708a500405c71f
7a517cc0f4a5dc44ad43b917c8a24dd9d8c13be63c0d4b371e0abf8b4d9b7fa7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/css/stylesheet_zen_lightbox.css HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 559
content-type: text/css
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/logobg-left.gif

67.20.91.43

200 OK

430 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/logobg-left.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 9 x 84\012- data
Size
430 B (430 bytes)
Hash
46ddf4b580292d5dd6d3d09b4eae47ee
481e3a92d77db88f64bc30cfac61c4e8ab7caf75
f0635b197532837212f0cad67a14d968a6113407d020cf6b6f5ccff70bc8a8dd

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/logobg-left.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 430
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css

67.20.91.43

200 OK

8.4 kB

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (789)
Size
8.4 kB (8418 bytes)
Hash
0ffcd24602dc147bc2d958e087af7559
36d05dd6323104c1a441fc721f8ebd635d2d0e79
dd69815a9da457e38272a5ddff495b8e083718c1081463cb1a816495aa644c36

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/css/stylesheet.css HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 27 Sep 2012 07:29:15 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 8418
content-type: text/css
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/languages/arabic/images/icon.gif

67.20.91.43

200 OK

721 B

URL HTTP/2
www.arabbattery.com/includes/languages/arabic/images/icon.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 26 x 16\012- data
Size
721 B (721 bytes)
Hash
0980a5cf2539bb3ef6ad6ea15cb17b1b
b84be342ba672e041478fe8264ac11e3b032b4ed
a3312d204cfee079237eadce0dd3f00bbaae6552ac88a64d7056859af7ef6155

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/languages/arabic/images/icon.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 05 Aug 2015 09:34:48 GMT
accept-ranges: bytes
content-length: 721
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/images/brand/twinhead_logo.jpg

67.20.91.43

200 OK

17 kB

URL HTTP/2
www.arabbattery.com/images/brand/twinhead_logo.jpg
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2012:01:04 17:32:33], baseline, precision 8, 120x40, components 3\012- data
Size
17 kB (17127 bytes)
Hash
225e9647162a425dfef881d74bdd8c6a
2dce9bd346ec53c572adf730449bf9414e4d79d5
c5cfd059fa76de2dc75ee08e6c62ef81f451d3192d58efb88cf3ca0ffc8561a7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /images/brand/twinhead_logo.jpg HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:04:53 GMT
accept-ranges: bytes
content-length: 17127
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/jpeg
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/images/banners/ProductBanner-free.jpg

67.20.91.43

200 OK

52 kB

URL HTTP/2
www.arabbattery.com/images/banners/ProductBanner-free.jpg
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2011:03:19 19:38:46], baseline, precision 8, 900x150, components 3\012- data
Size
52 kB (52438 bytes)
Hash
8691e8821eeff50c7500dc3fe337830b
7abbd248b034af688c29b91704d0870b0ea910c7
fe1b94a430fb0794d90f2a28f4fa68f636d1f597a71b7c20158440e81a6c2902

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /images/banners/ProductBanner-free.jpg HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 01 Aug 2012 08:36:55 GMT
accept-ranges: bytes
content-length: 52438
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/jpeg
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/logobg-right.gif

67.20.91.43

200 OK

432 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/logobg-right.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 9 x 84\012- data
Size
432 B (432 bytes)
Hash
afbcc99a617dc4b8901ba4013620e367
fe74ffb7dc2a9467969674418629b0c1aec2e5b6
649d2ff105765279421c0128bd8af73cf4378af83e820622d945274e079a9190

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/logobg-right.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 432
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/jscript/jscript_kancart_mobile.js

67.20.91.43

200 OK

965 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/jscript/jscript_kancart_mobile.js
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
965 B (965 bytes)
Hash
2672d80e668fa977c4d03da835bc1ec1
3a352b141786d4f4b87218e93bd7e43d0b1f39c1
8a36e7e396f3a09f243202ffb8a658f4513735408b961f6a45ab06a6b4bbd9a1

Detections

Analyzer	Verdict	Alert
fortinet	Malware
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/jscript/jscript_kancart_mobile.js HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 965
content-type: application/javascript
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/mc-secure.png

67.20.91.43

200 OK

2.8 kB

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/mc-secure.png
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 88 x 38, 8-bit/color RGB, non-interlaced\012- data
Size
2.8 kB (2799 bytes)
Hash
7a6c76675c0d0c708dd6c58dfcdc115c
c3c469c3dc74997e651f025837bc528dbe8cc774
49b20d5bdca0bbc23055015b45a63a415088cce56de08d9206b32d24f58fb3fa

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/mc-secure.png HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 2799
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/png
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/logo.gif

67.20.91.43

200 OK

5.9 kB

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/logo.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 270 x 75\012- data
Size
5.9 kB (5930 bytes)
Hash
f29c7561e91a3422ef44b01c9d096001
d32c9510cfed74194f269546f9c679b6625375cc
5179e22de97c54abdaa051837d71014433a5d162e6420c717ff7d874b8d737c1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/logo.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Fri, 21 Aug 2015 09:48:48 GMT
accept-ranges: bytes
content-length: 5930
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:08 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/cor-right-bot.gif

67.20.91.43

200 OK

93 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/cor-right-bot.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 7 x 7\012- data
Size
93 B (93 bytes)
Hash
b40335ab5ec290ded04a61b501a9faed
a8f4a30fd45b902b894dbbe319e0d7ea65fe7ebe
9d52c1d198348395e2b9fe87577dc2822dd27a4d06e74758a240206e0ab872bf

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/cor-right-bot.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 93
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/payments.jpg

67.20.91.43

200 OK

4.8 kB

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/payments.jpg
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 342x38, components 3\012- data
Size
4.8 kB (4787 bytes)
Hash
9db67c9a8e7f6b02e364fbe231ebaeae
8073e09fb5e8ed9016228a46277d88cbfa25ebf4
71cd2999fd0723382fbdd97fbfd4c9329970ce9449d40e19a9e5964ca8dfb4a4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/payments.jpg HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 4787
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/jpeg
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/cor-left-bot.gif

67.20.91.43

200 OK

94 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/cor-left-bot.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 7 x 7\012- data
Size
94 B (94 bytes)
Hash
a3cde48a1dc184725b696a43cc99e9cd
858bfed4e8c3f241a4158c8c2d203bbb5bb80ea4
1b4dda86b804dcc69a9b600764620255593e4d03cca2813eb38f499e9c97362f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/cor-left-bot.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 94
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9069
Expires: Sun, 05 Feb 2023 12:35:18 GMT
Date: Sun, 05 Feb 2023 10:04:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9069
Expires: Sun, 05 Feb 2023 12:35:18 GMT
Date: Sun, 05 Feb 2023 10:04:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9069
Expires: Sun, 05 Feb 2023 12:35:18 GMT
Date: Sun, 05 Feb 2023 10:04:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9069
Expires: Sun, 05 Feb 2023 12:35:18 GMT
Date: Sun, 05 Feb 2023 10:04:09 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg

34.120.237.76

200 OK

3.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.5 kB (3474 bytes)
Hash
d7a466d89c75ff3459b7328591db52cf
c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb
e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:10:58 GMT
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
content-type: image/jpeg
age: 42791
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad342374-789b-497a-b212-29d0b2aaced0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.1 kB (7060 bytes)
Hash
75caf9549ac23c827c10d6baabb84884
e8391e4046acb91cd4a6113974fda1c44dcd3865
a01e3a9aaa0b0fa156303bcbf38c1c45ea6abe8d0a052734b05ea4da82f176c4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad342374-789b-497a-b212-29d0b2aaced0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7060
x-amzn-requestid: e3e457e7-b73a-4b5f-a7bb-9a643cde2760
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwAv_GI1oAMFbIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcae66-6793e5e054a709881bb2d191;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 06:49:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6LeXkwyELIc_XykRxsfDIBu7Kda_3OHFDiteX0rKwDt-315catmvKw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:10:43 GMT
age: 42806
etag: "e8391e4046acb91cd4a6113974fda1c44dcd3865"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3f52758-d976-47aa-a47d-f0d6026514dc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7665 bytes)
Hash
f28ffcf384ce958b6302d05b6690c088
e5d4cbfc7482d35ee2ca03a7178426f3e2e97010
725d42a020d496f596074794cc2abdaca8a9b821e1a3502eee26056d0f528506

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3f52758-d976-47aa-a47d-f0d6026514dc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7665
x-amzn-requestid: 001ba86d-ebc8-4819-89f7-1604bc059cd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGibFeqIAMFqMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8475-076d982b5fccf2b931a05976;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:10:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gnkjykHYcMthJkIb-A1P1rRw9FZieh3TmoTT3qVaceWw03TQNX8qfQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:32:24 GMT
age: 41505
etag: "e5d4cbfc7482d35ee2ca03a7178426f3e2e97010"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.6 kB (9579 bytes)
Hash
b3e7140400336984afc6093c1246f863
59e0b21cdf4cfdac3f1ea05badd007727939ac42
4d927e74922159db5d07b9947fa1021cff74bb7b55759960cb3941d05c1e8f11

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9579
x-amzn-requestid: c474008d-a6a9-409b-88e2-c55062044575
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzQtnFGhoAMF5Zw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ddfb23-54dd67257ba25ad24e977a9c;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 06:28:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0Of3BK3VqVMGQGDIODQthVmi7BC8Ney4zgGCpVuzYc1j6D8RRP-AxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 11:55:41 GMT
age: 79708
etag: "59e0b21cdf4cfdac3f1ea05badd007727939ac42"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12967 bytes)
Hash
8e0be7db14d930d6227443314bcd1747
4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d
baedfbdb08a67f9ff4c698f7e65b08d7e4c5078d0a4233e6bff529b44812735a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12967
x-amzn-requestid: 38c58626-f4ad-4e2b-ad71-a628519d2ea2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmEdHFwCoAMFhxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8b453-7da6d0c1093468d320caaa1e;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 06:25:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t8dZTwod1-pZr8ACfp-6gfEu0TA3kGpfJrQeF8VgLg2tlrt03sa6Bg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 03:40:08 GMT
age: 23041
etag: "4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.0 kB (5014 bytes)
Hash
5b6c30ad03669b66bf2f63b3edd69882
e630bd132b52b965a5ade646ea8a165d1abf6d7b
f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 14:53:45 GMT
age: 69024
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/sbutton.gif

67.20.91.43

200 OK

346 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/sbutton.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 50 x 21\012- data
Size
346 B (346 bytes)
Hash
6b3229474bf04ccddafcf94736c6b23c
bebdf73ad87408c68af423d7504eb95327500176
27c7113f9c3f47b18514b75ff6754ff1ae8ce48894e1a09fe8c6a83535aea409

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/sbutton.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 346
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/logobg.gif

67.20.91.43

200 OK

362 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/logobg.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 13 x 84\012- data
Size
362 B (362 bytes)
Hash
5b38cdedbec062f6f9b1a80ad67f641f
92ed050b254da41f7eee2ee3f2ce078656ed4386
59b65e1c2b5f66363c587fdba9b66b943a06dc01b71d9f93b0ae757c59c83490

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/logobg.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 362
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/cart_bg.gif

67.20.91.43

200 OK

734 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/cart_bg.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 30 x 33\012- data
Size
734 B (734 bytes)
Hash
0e89d5f95ed664ee6905944962d9b2ae
ecd8386908f42d1a95932482f56e25aa36db0185
62dd8a361279258ed1c2c63983975acd581896332e412817ec7259f53b7bd43b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/cart_bg.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 734
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/menubg.gif

67.20.91.43

200 OK

373 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/menubg.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 10 x 41\012- data
Size
373 B (373 bytes)
Hash
924233f3129f343c4f230ae1fc9044e0
45ee117eb202ba74952b07124451820c337b0a60
f2a4262f6082404aef3a5d8691a909bb0c82080394a70263c91c93f676080da5

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/menubg.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 373
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/menubg2.gif

67.20.91.43

200 OK

68 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/menubg2.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 13 x 34\012- data
Size
68 B (68 bytes)
Hash
de4f93a539538dab532f550c67300001
6b18e13097e9c066f20ce8bf314c7874d879eea9
b349580c570056163f90f6a8365d05d574f07fc5544f06d02cf687ceb08359e4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/menubg2.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 68
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/sinputbg.gif

67.20.91.43

200 OK

523 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/sinputbg.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 166 x 21\012- data
Size
523 B (523 bytes)
Hash
eb911056422c874ca33c9c75835347d8
3f82e523a209a8ae3114534efcc665e4f50057f8
ff9e06c41817fa03cdd8421362fdc497970c6f4bb2bdeab973624839678284a3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/sinputbg.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 523
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/li_underline.gif

67.20.91.43

200 OK

43 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/li_underline.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 3 x 1\012- data
Size
43 B (43 bytes)
Hash
bc2c0ef0613ab3f7bef90e758523dfc8
57cca85d911ced366a5ea6d9a0ef92df276489df
2fd62b3c921278be78aecca269584edeeac22207c889e030ce56cb0e71ba01ee

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/li_underline.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 43
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/heading-bg.gif

67.20.91.43

200 OK

931 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/heading-bg.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 327 x 33\012- data
Size
931 B (931 bytes)
Hash
6a9c27a89dda2b4ea6f3cb7b3b0a4e07
c4c1fa69a4d01a9269f8076eb00e30ef37bc5e30
4483cba1b4f345de38d7841094bedc317618f15e7cc0561ed1a296a80a15be4e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/heading-bg.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 931
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/footerborder.gif

67.20.91.43

200 OK

37 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/footerborder.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 6 x 2\012- data
Size
37 B (37 bytes)
Hash
fe41d60ef6f26b8840d4de6f652f3ba1
9ed393fcb98cdad47af9146395b07d3dbc29a029
6fa67a0d4763b864d1c7fc218c0447e7e8af99907e4ee4021f4d9d9af2c47991

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/footerborder.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 37
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/includes/templates/storeakkude/images/point.gif

67.20.91.43

200 OK

46 B

URL HTTP/2
www.arabbattery.com/includes/templates/storeakkude/images/point.gif
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
GIF image data, version 89a, 3 x 5\012- data
Size
46 B (46 bytes)
Hash
2c5985bf95b392cf90f96eec0f42aa94
f33fc71c61601171ac775c2c63a6e3d677b621d7
7148e45f8aae5cb3d0c01d3699256f7044797f10e8d7ee7f32b05dbd381e6fc5

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /includes/templates/storeakkude/images/point.gif HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/includes/templates/storeakkude/css/stylesheet.css
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:03 GMT
accept-ranges: bytes
content-length: 46
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/gif
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

www.arabbattery.com/favicon.ico

67.20.91.43

200 OK

2.9 kB

URL HTTP/2
www.arabbattery.com/favicon.ico
IP
67.20.91.43:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
MS Windows icon resource - 3 icons, 16x16, 16 colors, 4 bits/pixel, 16x16, 8 bits/pixel\012- data
Size
2.9 kB (2862 bytes)
Hash
428b23df874b41d904bbae29057bdba5
94e7ff5b30641f4fd423e4f65e6f961a110d8d6d
65a8ab7b08b87761401355680c06b999216670923cf1d9e4e6122f6a4db3b822

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.arabbattery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.arabbattery.com/http:/www.arabbattery.com/laptop-batteries-twinhead-batteries-c-1_4414.html
Cookie: zenid=uc9ju1h2vq7ilslco7u6rtq213
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Wed, 18 Jul 2012 09:05:07 GMT
accept-ranges: bytes
content-length: 2862
cache-control: max-age=604800
expires: Sun, 12 Feb 2023 10:04:09 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: image/x-icon
date: Sun, 05 Feb 2023 10:04:09 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (46)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type