Report - luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/

Report Overview

Visited public
2025-03-13 06:17:11
Tags
URL
luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Finishing URL
ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
IP / ASN
103.224.182.242
#133618 Trellian Pty. Limited
Title
luminosclap.com - Dette nettstedet er til salgs! - luminosclap Ressurser og informasjon

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ww16.luminosclap.com	unknown	2023-06-27	2025-03-05	2025-03-12	1.9 kB	26 kB	91.195.240.112
syndicatedsearch.goog	unknown	2023-04-14	2023-09-25	2025-03-12	5.8 kB	166 kB	142.250.74.174
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2025-03-12	1.0 kB	2.2 kB	142.250.74.161
luminosclap.com	unknown	2023-06-27	2023-07-01	2025-03-11	4.4 kB	88 kB	103.224.182.242
img.sedoparking.com	54200	2001-09-18	2013-04-22	2025-03-12	463 B	16 kB	205.234.175.175
www.google.com	7	1997-09-15	2015-05-10	2025-03-12	474 B	145 kB	216.58.207.228

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MTQmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODU2NTgyMTE4Ljg4NjYwNjg3JnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=9821741846615160&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1741846615169&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=735462593&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F8c93f8258a9a149fe348f4fb10942fb5%2FOmGsN06SbAp03AotDr10%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5307-a1bc-76eb656db1ce	ScriptElement	823 B	2025-03-13	2025-03-13
Pretty URL syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MTQmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODU2NTgyMTE4Ljg4NjYwNjg3JnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=9821741846615160&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1741846615169&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=735462593&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F8c93f8258a9a149fe348f4fb10942fb5%2FOmGsN06SbAp03AotDr10%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5307-a1bc-76eb656db1ce IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-13 06:17 Last Seen2025-03-13 06:17 Times Seen1 Hash 731a675b2b6fc0c32705c4b1fd289e71 2189b74cfe724b32cd69f5c754008115d1cb5c3b e260260e65d477737c4ff9e3bbb0a1268f2eac42f91acdd2dca478eb138fe732 Loading...

	luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/	ScriptElement	838 B	2025-03-13	2025-03-13
Pretty URL luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ IP 103.224.182.242 ASN #133618 Trellian Pty. Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-13 06:17 Last Seen2025-03-13 06:17 Times Seen1 Hash 6ac08d530e2d1678cebb7898f26be2cf 6a232f636166dfefb3dd21e36afc2ddc20a89d3e 6316aadfb61eaa243924ac0c82ae58f297b51dbf25e35ca0f6fbf27cd0c428cd Loading...

	www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true	ScriptElement	144 kB	2025-03-11	2025-03-19
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true IP 216.58.207.228 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-11 18:13 Last Seen2025-03-19 12:23 Times Seen1306 Hash fa053ccecbeb73ae8ebfe8179fa053a8 5d3685619ff5ca1107602ab5de842e2b0bd1b19c ab628349345fef3323e0454e2aa1691de3f1236ad84b19caa694a193463a662a Loading...

	ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce	ScriptElement	4.1 kB	2025-03-13	2025-03-13
Pretty URL ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce IP 91.195.240.112 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-13 06:17 Last Seen2025-03-13 06:17 Times Seen1 Hash ecd64f60e523263ea41e370225022fa8 6f76a3373d875b61ed57550df9348bdc3e04c3a6 a9d1a6bc48556548d109af3763af17906b31f53b1831a365dfb332395e09ada4 Loading...

	ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce	ScriptElement	622 B	2023-07-20	2025-06-21
Pretty URL ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce IP 91.195.240.112 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-07-20 08:11 Last Seen2025-06-21 01:36 Times Seen39372 Hash 1f580ea0afd6182fa3b02c249d8a3771 e939caf069f09b6c73940c0c354ddfff817be7c8 3c641384ad68d3b7ae4bf1887185c4a400830c9eeccb1e8d2f99075404bc7820 Loading...

	luminosclap.com/js/fingerprint/iife.min.js	ScriptElement	34 kB	2023-05-01	2025-06-20
Pretty URL luminosclap.com/js/fingerprint/iife.min.js IP 103.224.182.242 ASN #133618 Trellian Pty. Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-01 16:20 Last Seen2025-06-20 21:27 Times Seen5102 Hash 63f9fd621d1fbd53b7c5856e58c11ccd a46973c2fbdbfeb159e0d717a90f88307e274012 c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089 Loading...

	ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce	ScriptElement	5.9 kB	2024-05-23	2025-06-21
Pretty URL ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce IP 91.195.240.112 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-23 11:11 Last Seen2025-06-21 01:40 Times Seen99382 Hash 978e89b89f929ebbd0a746295eafbcbe 6b92ab60432c1e5a8aebc60ebc94f1f24c28cea6 848eaac812a5c6ef9f75fc33f2bfbb7169bfea60bc4d4a28a7e77d1737ca42ac Loading...

	syndicatedsearch.goog/afs/ads/i/iframe.html	ScriptElement	1.3 kB	2025-03-02	2025-06-21
Pretty URL syndicatedsearch.goog/afs/ads/i/iframe.html IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-02 07:28 Last Seen2025-06-21 01:40 Times Seen43187 Hash 53a557946308585635eb80aec5326b9e 544b125203bfbb516566a63c9ef3dc57e9c06df9 eff95f5e15f8aa8c8b8c0f3aaeedba0091c1ec9732d78b6594c9ceb26c8eff28 Loading...

	syndicatedsearch.goog/adsense/domains/caf.js	ScriptElement	145 kB	2025-03-05	2025-03-13
Pretty URL syndicatedsearch.goog/adsense/domains/caf.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-05 21:09 Last Seen2025-03-13 17:08 Times Seen3168 Hash b1b4e87893fc25133cbbea713084c466 b2dcf7dcb9e6a72135d2016aabe5aa48f6c3e1db cea34d6ccfec5a5c1deaa81fd5c06b0bc81800b5ea12d842395b18a96e6a0038 Loading...

HTTP Transactions (19)

URL IP Response Size

GET syndicatedsearch.goog/adsense/domains/caf.js

142.250.74.174

200 OK

145 kB

URL GET
syndicatedsearch.goog/adsense/domains/caf.js
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MTQmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODU2NTgyMTE4Ljg4NjYwNjg3JnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=9821741846615160&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1741846615169&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=735462593&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F8c93f8258a9a149fe348f4fb10942fb5%2FOmGsN06SbAp03AotDr10%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type
JavaScript source, ASCII text, with very long lines (1967)
Size
145 kB (144886 bytes)
Hash
b1b4e87893fc25133cbbea713084c466
b2dcf7dcb9e6a72135d2016aabe5aa48f6c3e1db
cea34d6ccfec5a5c1deaa81fd5c06b0bc81800b5ea12d842395b18a96e6a0038

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 13 Mar 2025 06:16:55 GMT
expires: Thu, 13 Mar 2025 06:16:55 GMT
cache-control: private, max-age=3600
etag: "10889517268433763295"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000

142.250.74.161

200 OK

200 B

URL GET
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MTQmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODU2NTgyMTE4Ljg4NjYwNjg3JnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=9821741846615160&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1741846615169&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=735462593&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F8c93f8258a9a149fe348f4fb10942fb5%2FOmGsN06SbAp03AotDr10%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:E7:0B:8F:93:C0:9E:F3:15:26:E3:94:7C:D8:3F:00:DE:01:8F:46
ValidityWed, 26 Feb 2025 15:33:54 GMT - Wed, 21 May 2025 15:33:53 GMT

File type
SVG Scalable Vector Graphics image
Size
200 B (200 bytes)
Hash
562d66e49bcc46837a4b4c5b1f81ca4c
da9a9358a6cb428a5d86de5fd9252379ea1ab42b
4df0e0a340e46fb564d7be86da2e4fe919b285b4950cc2d0e7c4ec339431be10

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 173
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Mar 2025 05:29:08 GMT
expires: Fri, 14 Mar 2025 04:29:08 GMT
cache-control: public, max-age=82800
age: 2868
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=9qycy7csgo82&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bs&adbx=290&adby=90.23333740234375&adbh=535&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=19%7C0%7C530%7C198%7C33&lle=0&ifv=1&hpt=0

142.250.74.174

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=9qycy7csgo82&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bs&adbx=290&adby=90.23333740234375&adbh=535&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=19%7C0%7C530%7C198%7C33&lle=0&ifv=1&hpt=0
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=9qycy7csgo82&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bs&adbx=290&adby=90.23333740234375&adbh=535&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=19%7C0%7C530%7C198%7C33&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-KoUmo0vh0XFQ8lgMuPM7HA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:16:57 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET luminosclap.com/js/fingerprint/iife.min.js

103.224.182.242

200 OK

34 kB

URL GET
luminosclap.com/js/fingerprint/iife.min.js
IP
103.224.182.242:443
ASN
#133618 Trellian Pty. Limited

Requested by
https://luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Certificate
IssuerLet's Encrypt
Subjectfsbdqn.com
Fingerprint32:2B:38:42:0F:A7:A6:58:AE:80:2D:41:50:02:48:D7:D7:31:15:9E
ValiditySun, 19 Jan 2025 17:23:00 GMT - Sat, 19 Apr 2025 17:22:59 GMT

File type

Size
34 kB (34240 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/fingerprint/iife.min.js HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 13 Mar 2025 06:16:51 GMT
server: Apache
last-modified: Tue, 22 Oct 2024 03:25:40 GMT
etag: "85c0-6250852d63500-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14345
content-type: application/javascript
connection: close

GET luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde

103.224.182.242

302 Found

25 kB

URL User Request GET
luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde
IP
103.224.182.242:80
ASN
#133618 Trellian Pty. Limited

File type

Size
25 kB (24981 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846610.3787936
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Thu, 13 Mar 2025 06:16:52 GMT
server: Apache
location: https://luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde
content-length: 0
content-type: text/html; charset=UTF-8
connection: close

GET syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MTQmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODU2NTgyMTE4Ljg4NjYwNjg3JnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=9821741846615160&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1741846615169&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=735462593&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F8c93f8258a9a149fe348f4fb10942fb5%2FOmGsN06SbAp03AotDr10%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5307-a1bc-76eb656db1ce

142.250.74.174

200 OK

14 kB

URL GET
syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MTQmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODU2NTgyMTE4Ljg4NjYwNjg3JnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=9821741846615160&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1741846615169&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=735462593&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F8c93f8258a9a149fe348f4fb10942fb5%2FOmGsN06SbAp03AotDr10%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5307-a1bc-76eb656db1ce
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
14 kB (14448 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MTQmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODU2NTgyMTE4Ljg4NjYwNjg3JnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=9821741846615160&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1741846615169&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=735462593&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F8c93f8258a9a149fe348f4fb10942fb5%2FOmGsN06SbAp03AotDr10%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5307-a1bc-76eb656db1ce HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Thu, 13 Mar 2025 06:16:55 GMT
expires: Thu, 13 Mar 2025 06:16:55 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-0DxwGLXer2dysMbRCHhxFw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3023
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET img.sedoparking.com/templates/logos/sedo_logo.png

205.234.175.175

200 OK

15 kB

URL GET
img.sedoparking.com/templates/logos/sedo_logo.png
IP
205.234.175.175:443
ASN
#30081 CACHENETWORKS

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGlobalSign nv-sa
Subject*.cachefly.net
FingerprintE3:21:BF:A0:AC:70:6E:19:F1:83:A3:CB:83:F9:6F:0F:E0:46:F1:3C
ValidityTue, 12 Nov 2024 20:01:06 GMT - Sun, 14 Dec 2025 20:01:05 GMT

File type
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15086 bytes)
Hash
def00c11b1596db4efee6a9fbe64fc27
bd298981e6d8d7e4ffa18abcf687041f4246672d
95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4

HTTP Headers

GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 13 Mar 2025 06:16:55 GMT
content-type: image/png
content-length: 15086
access-control-allow-origin: *
cache-control: max-age=604800
expires: Thu, 20 Mar 2025 06:16:55 GMT
x-cfhash: "def00c11b1596db4efee6a9fbe64fc27"
x-cff: B
last-modified: Mon, 11 Jan 2021 07:44:34 GMT
x-cf3: H
cf4age: 0
x-cf-tsc: 1729867994
cf4ttl: 31536000.000
x-cf2: H
server: CFS 1124
x-cf-reqid: 783a2adb8379db76d1cda2cb79104a2c
x-cf1: 11696:fD.arn1:cf:nom:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=5f1f9zz1ne5m&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bv&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=7%7C0%7C542%7C198%7C34&lle=0&ifv=1&hpt=0

142.250.74.174

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=5f1f9zz1ne5m&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bv&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=7%7C0%7C542%7C198%7C34&lle=0&ifv=1&hpt=0
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=5f1f9zz1ne5m&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bv&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=7%7C0%7C542%7C198%7C34&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Uo-IGCxceS7jCxqEQVzbyg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:16:57 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

0.0.0.0

0 B

URL User Request GET
luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-7
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-7 HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846610.3787936
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

GET www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true

216.58.207.228

200 OK

144 kB

URL GET
www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true
IP
216.58.207.228:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2
ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT

File type
JavaScript source, ASCII text, with very long lines (1831)
Size
144 kB (144182 bytes)
Hash
fa053ccecbeb73ae8ebfe8179fa053a8
5d3685619ff5ca1107602ab5de842e2b0bd1b19c
ab628349345fef3323e0454e2aa1691de3f1236ad84b19caa694a193463a662a

HTTP Headers

GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 13 Mar 2025 06:16:54 GMT
expires: Thu, 13 Mar 2025 06:16:54 GMT
cache-control: private, max-age=3600
etag: "14061899943934218922"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/ads/i/iframe.html

142.250.74.174

200 OK

1.6 kB

URL GET
syndicatedsearch.goog/afs/ads/i/iframe.html
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type
HTML document, ASCII text, with very long lines (1586), with no line terminators
Size
1.6 kB (1560 bytes)
Hash
7dab3c547b0f5c4249e8d0263ad5476d
ec3a623c200533b6949e0d7a7e431c6c7d4b18c8
fb0b756f590d3e4d968ee629f76af31ba49b336d4b07ce31bafdb6810e66dc15

HTTP Headers

GET /afs/ads/i/iframe.html HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
content-security-policy: script-src 'nonce-RTXzCyPkO9CyAktmNwluiA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 725
date: Thu, 13 Mar 2025 06:16:55 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Tue, 17 Sep 2024 06:00:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff

142.250.74.161

200 OK

391 B

URL GET
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MTQmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODU2NTgyMTE4Ljg4NjYwNjg3JnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=9821741846615160&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1741846615169&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=735462593&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F8c93f8258a9a149fe348f4fb10942fb5%2FOmGsN06SbAp03AotDr10%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:E7:0B:8F:93:C0:9E:F3:15:26:E3:94:7C:D8:3F:00:DE:01:8F:46
ValidityWed, 26 Feb 2025 15:33:54 GMT - Wed, 21 May 2025 15:33:53 GMT

File type
SVG Scalable Vector Graphics image
Size
391 B (391 bytes)
Hash
249bb4c6a37dfa60d6ecf838cada5020
4e56099d13b015804f79d1182f66982bc6e4662b
a2cebc2af2fd29cbee1ed7860ef5b12088b85259918d8bf2f2aaa99b915fa3f4

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Mar 2025 06:13:28 GMT
expires: Fri, 14 Mar 2025 05:13:28 GMT
cache-control: public, max-age=82800
age: 208
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

103.224.182.242

302 Found

25 kB

URL User Request GET
luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde
IP
103.224.182.242:443
ASN
#133618 Trellian Pty. Limited

Certificate
IssuerLet's Encrypt
Subjectfsbdqn.com
Fingerprint32:2B:38:42:0F:A7:A6:58:AE:80:2D:41:50:02:48:D7:D7:31:15:9E
ValiditySun, 19 Jan 2025 17:23:00 GMT - Sat, 19 Apr 2025 17:22:59 GMT

File type

Size
25 kB (24981 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846610.3787936
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Thu, 13 Mar 2025 06:16:53 GMT
server: Apache
location: http://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
content-length: 2
content-type: text/html; charset=UTF-8
connection: close

GET ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce

91.195.240.112

200 OK

25 kB

URL User Request GET
ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
IP
91.195.240.112:443
ASN
#47846 SEDO GmbH

Certificate
IssuerDigiCert Inc
Subjectww16.luminosclap.com
FingerprintFB:BF:78:96:7A:75:05:CD:1D:72:DA:72:EE:C9:AE:A6:72:4E:D9:AD
ValidityThu, 06 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT

File type

Size
25 kB (24981 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce HTTP/1.1
Host: ww16.luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:16:54 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 13 Mar 2025 06:16:54 GMT
pragma: no-cache
server: Parking/1.0
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_XCEB8F8Co3QPBib0PjQAj+3WECIclfhEh0BuQzW3LK/io8UOPpUI5omYbSa8j7ySx3FTWD3bAS17wVtv1r1fxw==
x-cache-miss-from: parking-77f77f4ddf-wt2wb
X-Firefox-Spdy: h2

GET ww16.luminosclap.com/search/tsc.php?ses=ogcKt1Ob8suiKBTWcs6Uyjs9q7UBbsVTvix-uuXDqMQNbEmcRAEDUAAlvxidiV9J6TkxIuRunGA0-g6AqjVqsEHavgN0Z586R1eSJpgLIbWRcJ6ilMv_J8VeWT6IBEMUOwL2y5vNcjvnX82joYNiT63-RyiF08fRZGO7nhlS-SAevbtO3oGMc3pFrj0C4qSOsJe-Z3cB5EekHcvgHnsLd10XeogEYZFXcb54VRT_2POkny3lc0X3u2Dri-HfRHCiUX_P3-4G0OP8BP1a9hVpTS6cuafguFmQ9tsIeqv4uaN3xp0iEpaXz2COy4UEmSK1MWerz9yYGPI05a2GjZ6IV9bcpTWwOFU7NgWUuMBoQloVsuRbOGe-SxhKHHCb3C8mQ&cv=2

91.195.240.112

200 OK

0 B

URL GET
ww16.luminosclap.com/search/tsc.php?ses=ogcKt1Ob8suiKBTWcs6Uyjs9q7UBbsVTvix-uuXDqMQNbEmcRAEDUAAlvxidiV9J6TkxIuRunGA0-g6AqjVqsEHavgN0Z586R1eSJpgLIbWRcJ6ilMv_J8VeWT6IBEMUOwL2y5vNcjvnX82joYNiT63-RyiF08fRZGO7nhlS-SAevbtO3oGMc3pFrj0C4qSOsJe-Z3cB5EekHcvgHnsLd10XeogEYZFXcb54VRT_2POkny3lc0X3u2Dri-HfRHCiUX_P3-4G0OP8BP1a9hVpTS6cuafguFmQ9tsIeqv4uaN3xp0iEpaXz2COy4UEmSK1MWerz9yYGPI05a2GjZ6IV9bcpTWwOFU7NgWUuMBoQloVsuRbOGe-SxhKHHCb3C8mQ&cv=2
IP
91.195.240.112:443
ASN
#47846 SEDO GmbH

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerDigiCert Inc
Subjectww16.luminosclap.com
FingerprintFB:BF:78:96:7A:75:05:CD:1D:72:DA:72:EE:C9:AE:A6:72:4E:D9:AD
ValidityThu, 06 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /search/tsc.php?ses=ogcKt1Ob8suiKBTWcs6Uyjs9q7UBbsVTvix-uuXDqMQNbEmcRAEDUAAlvxidiV9J6TkxIuRunGA0-g6AqjVqsEHavgN0Z586R1eSJpgLIbWRcJ6ilMv_J8VeWT6IBEMUOwL2y5vNcjvnX82joYNiT63-RyiF08fRZGO7nhlS-SAevbtO3oGMc3pFrj0C4qSOsJe-Z3cB5EekHcvgHnsLd10XeogEYZFXcb54VRT_2POkny3lc0X3u2Dri-HfRHCiUX_P3-4G0OP8BP1a9hVpTS6cuafguFmQ9tsIeqv4uaN3xp0iEpaXz2COy4UEmSK1MWerz9yYGPI05a2GjZ6IV9bcpTWwOFU7NgWUuMBoQloVsuRbOGe-SxhKHHCb3C8mQ&cv=2 HTTP/1.1
Host: ww16.luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:16:55 GMT
server: Parking/1.0
x-cache-miss-from: parking-77f77f4ddf-wt2wb
content-length: 0
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=elis1zbgxd6r&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bs&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=7%7C0%7C542%7C198%7C34&lle=0&ifv=1&hpt=0

142.250.74.174

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=elis1zbgxd6r&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bs&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=7%7C0%7C542%7C198%7C34&lle=0&ifv=1&hpt=0
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=elis1zbgxd6r&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bs&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=7%7C0%7C542%7C198%7C34&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-xbFSog1ulw6QV8FTVEpPtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:16:57 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=qsft7pjl3bjc&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bv&adbx=290&adby=90.23333740234375&adbh=535&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=19%7C0%7C530%7C198%7C33&lle=0&ifv=1&hpt=0

142.250.74.174

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=qsft7pjl3bjc&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bv&adbx=290&adby=90.23333740234375&adbh=535&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=19%7C0%7C530%7C198%7C33&lle=0&ifv=1&hpt=0
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5307-a1bc-76eb656db1ce
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=qsft7pjl3bjc&cd_fexp=72717107&aqid=V3jSZ_mWJfrUxdwPyofoqQo&psid=7446205343&pbt=bv&adbx=290&adby=90.23333740234375&adbh=535&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=735462593&csala=19%7C0%7C530%7C198%7C33&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-USMNjzj8ey5jOUOEHVXoYA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:16:57 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

103.224.182.242

200 OK

1.8 kB

URL User Request GET
luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
IP
103.224.182.242:443
ASN
#133618 Trellian Pty. Limited

Certificate
IssuerLet's Encrypt
Subjectfsbdqn.com
Fingerprint32:2B:38:42:0F:A7:A6:58:AE:80:2D:41:50:02:48:D7:D7:31:15:9E
ValiditySun, 19 Jan 2025 17:23:00 GMT - Sat, 19 Apr 2025 17:22:59 GMT

File type
HTML document, ASCII text, with very long lines (1887), with no line terminators
Size
1.8 kB (1813 bytes)
Hash
366b0d089a652bb976aca92f73543295
ba7ba99ad3c077c5d6cf0608eee7e50203852ecd
78216ca81aee9f3e6a25c07e2c8cf5998e2f800d5a5d8161bdf9202f368e3807

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 13 Mar 2025 06:16:50 GMT
server: Apache
set-cookie: __tad=1741846610.3787936; expires=Sun, 11-Mar-2035 06:16:50 GMT; Max-Age=315360000
vary: Accept-Encoding
content-encoding: gzip
content-length: 642
content-type: text/html; charset=UTF-8
connection: close

GET luminosclap.com/favicon.ico

0.0.0.0

0 B

URL GET
luminosclap.com/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luminosclap.com/0/0/0/8c93f8258a9a149fe348f4fb10942fb5/OmGsN06SbAp03AotDr10/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL GET

IP

ASN

Requested by