Report - luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/

Report Overview

Visited public
2025-03-13 06:17:17
Tags
Submit Tags
URL
luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Finishing URL
ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
IP / ASN
103.224.182.242
#133618 Trellian Pty. Limited
Title
luminosclap.com - Dette nettstedet er til salgs! - luminosclap Ressurser og informasjon

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ww16.luminosclap.com	unknown	2023-06-27	2025-03-05	2025-03-12	2.0 kB	26 kB	91.195.240.112
www.google.com	7	1997-09-15	2015-05-10	2025-03-12	474 B	146 kB	216.58.207.228
syndicatedsearch.goog	unknown	2023-04-14	2023-09-25	2025-03-12	5.8 kB	166 kB	142.250.74.174
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2025-03-12	1.0 kB	2.2 kB	142.250.74.161
img.sedoparking.com	54200	2001-09-18	2013-04-22	2025-03-12	463 B	16 kB	205.234.175.175
luminosclap.com	unknown	2023-06-27	2023-07-01	2025-03-11	4.5 kB	88 kB	103.224.182.242

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed
2025-03-12	medium	luminosclap.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/	ScriptElement	864 B	2025-03-13	2025-03-13
Pretty URL luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ IP 103.224.182.242 ASN #133618 Trellian Pty. Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-13 06:17 Last Seen2025-03-13 06:17 Times Seen1 Hash d4ae7bea8baaa982b11365b4f5b85a32 4faa58aa332a1bda07b6e7d3a1e1ad866981867c 9d4109bbd2202049771fd784f6a44460c7cb9a961d4efce042a984c94c45b3b4 Loading...

	ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed	ScriptElement	4.1 kB	2025-03-13	2025-03-13
Pretty URL ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed IP 91.195.240.112 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-13 06:17 Last Seen2025-03-13 06:17 Times Seen1 Hash b67305e5d78f177a2b9a04725e170761 889020bad0057e2db262fcaada6059be60551b20 53e2862b0a852cbe4aac5dc7460cf6bf88af57ada64f3941da8edc78ab61dfb0 Loading...

	www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true	ScriptElement	145 kB	2025-03-05	2025-03-13
Pretty URL www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true IP 216.58.207.228 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-05 21:15 Last Seen2025-03-13 17:06 Times Seen3164 Hash 5465a14ed46b8e9cdbf13f73762ad185 cbdf6401ba9dd318ad0a586db2900ba7416bd339 01d70c8f8f82a21d22410067607b0e94f6d44072e78b99a4e96531be259b0ef6 Loading...

	ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed	ScriptElement	622 B	2023-07-20	2025-07-01
Pretty URL ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed IP 91.195.240.112 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-07-20 08:11 Last Seen2025-07-01 12:29 Times Seen40944 Hash 1f580ea0afd6182fa3b02c249d8a3771 e939caf069f09b6c73940c0c354ddfff817be7c8 3c641384ad68d3b7ae4bf1887185c4a400830c9eeccb1e8d2f99075404bc7820 Loading...

	ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed	ScriptElement	5.9 kB	2024-05-23	2025-07-01
Pretty URL ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed IP 91.195.240.112 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-23 11:11 Last Seen2025-07-01 12:29 Times Seen103326 Hash 978e89b89f929ebbd0a746295eafbcbe 6b92ab60432c1e5a8aebc60ebc94f1f24c28cea6 848eaac812a5c6ef9f75fc33f2bfbb7169bfea60bc4d4a28a7e77d1737ca42ac Loading...

	syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MjAmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODVjY2M1YjcyLjE1OTA3NTIzJnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=1471741846621618&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846621627&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F0718442bfe43b0559a807902c9c1bd31%2FOmGsN06SbAp04AotDr8%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5902-80b5-71f2c825faed	ScriptElement	823 B	2025-03-13	2025-03-13
Pretty URL syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MjAmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODVjY2M1YjcyLjE1OTA3NTIzJnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=1471741846621618&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846621627&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F0718442bfe43b0559a807902c9c1bd31%2FOmGsN06SbAp04AotDr8%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5902-80b5-71f2c825faed IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-13 06:17 Last Seen2025-03-13 06:17 Times Seen1 Hash a08533f35c4f16c9a99d61dbfbdf9099 cd863d8297d4a7a35473286cbcc385892137edbd 58e0bca54d4f43285be00d60972d595a685f39055b1539be2556f68a74b298d0 Loading...

	luminosclap.com/js/fingerprint/iife.min.js	ScriptElement	34 kB	2023-05-01	2025-07-01
Pretty URL luminosclap.com/js/fingerprint/iife.min.js IP 103.224.182.242 ASN #133618 Trellian Pty. Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-01 16:20 Last Seen2025-07-01 12:19 Times Seen5251 Hash 63f9fd621d1fbd53b7c5856e58c11ccd a46973c2fbdbfeb159e0d717a90f88307e274012 c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089 Loading...

	syndicatedsearch.goog/afs/ads/i/iframe.html	ScriptElement	1.3 kB	2025-03-02	2025-07-01
Pretty URL syndicatedsearch.goog/afs/ads/i/iframe.html IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-02 07:28 Last Seen2025-07-01 12:29 Times Seen46868 Hash 53a557946308585635eb80aec5326b9e 544b125203bfbb516566a63c9ef3dc57e9c06df9 eff95f5e15f8aa8c8b8c0f3aaeedba0091c1ec9732d78b6594c9ceb26c8eff28 Loading...

	syndicatedsearch.goog/adsense/domains/caf.js	ScriptElement	145 kB	2025-03-05	2025-03-13
Pretty URL syndicatedsearch.goog/adsense/domains/caf.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-03-05 21:15 Last Seen2025-03-13 16:20 Times Seen1671 Hash b00f06415fc11ab63f8e33011efa11f9 437b2b46c8968f9cd6d09d1f0bf1cb356993bdbe c0d61beba631704a0b2028413f3e8ceecec41be7f53532c9b51d798cc0ac4c99 Loading...

HTTP Transactions (19)

URL IP Response Size

GET luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde

103.224.182.242

302 Found

25 kB

URL User Request GET
luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde
IP
103.224.182.242:443
ASN
#133618 Trellian Pty. Limited

Certificate
IssuerLet's Encrypt
Subjectfsbdqn.com
Fingerprint32:2B:38:42:0F:A7:A6:58:AE:80:2D:41:50:02:48:D7:D7:31:15:9E
ValiditySun, 19 Jan 2025 17:23:00 GMT - Sat, 19 Apr 2025 17:22:59 GMT

File type

Size
25 kB (24981 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846616.5415379
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Thu, 13 Mar 2025 06:16:59 GMT
server: Apache
location: http://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
content-length: 2
content-type: text/html; charset=UTF-8
connection: close

GET ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed

91.195.240.112

200 OK

25 kB

URL User Request GET
ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
IP
91.195.240.112:443
ASN
#47846 SEDO GmbH

Certificate
IssuerDigiCert Inc
Subjectww16.luminosclap.com
FingerprintFB:BF:78:96:7A:75:05:CD:1D:72:DA:72:EE:C9:AE:A6:72:4E:D9:AD
ValidityThu, 06 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT

File type

Size
25 kB (24981 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed HTTP/1.1
Host: ww16.luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:17:00 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Thu, 13 Mar 2025 06:17:00 GMT
pragma: no-cache
server: Parking/1.0
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_KdFKBzqtsdxWZYM5CPs8j2NWNYjyw4nLA7cBQ13poE40MWhSTxmO6njOnESRgfZr3Xc7GL2LTyszLg4MH7gZqw==
x-cache-miss-from: parking-77f77f4ddf-jpp5n
X-Firefox-Spdy: h2

GET www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true

216.58.207.228

200 OK

145 kB

URL GET
www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true
IP
216.58.207.228:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2
ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT

File type
JavaScript source, ASCII text, with very long lines (1967)
Size
145 kB (144879 bytes)
Hash
5465a14ed46b8e9cdbf13f73762ad185
cbdf6401ba9dd318ad0a586db2900ba7416bd339
01d70c8f8f82a21d22410067607b0e94f6d44072e78b99a4e96531be259b0ef6

HTTP Headers

GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 13 Mar 2025 06:17:01 GMT
expires: Thu, 13 Mar 2025 06:17:01 GMT
cache-control: private, max-age=3600
etag: "14074155713289348174"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=g4ajwn5u0gmn&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bv&adbx=290&adby=90.23333740234375&adbh=544&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=20%7C0%7C546%7C192%7C29&lle=0&ifv=1&hpt=0

142.250.74.174

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=g4ajwn5u0gmn&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bv&adbx=290&adby=90.23333740234375&adbh=544&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=20%7C0%7C546%7C192%7C29&lle=0&ifv=1&hpt=0
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=g4ajwn5u0gmn&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bv&adbx=290&adby=90.23333740234375&adbh=544&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=20%7C0%7C546%7C192%7C29&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-security-policy-report-only: default-src https: data:; options eval-script inline-script; report-uri /csp_report; referrer origin
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-ePSZaetAXBNWvgETiX3LgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:17:03 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

103.224.182.242

200 OK

1.9 kB

URL User Request GET
luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
IP
103.224.182.242:443
ASN
#133618 Trellian Pty. Limited

Certificate
IssuerLet's Encrypt
Subjectfsbdqn.com
Fingerprint32:2B:38:42:0F:A7:A6:58:AE:80:2D:41:50:02:48:D7:D7:31:15:9E
ValiditySun, 19 Jan 2025 17:23:00 GMT - Sat, 19 Apr 2025 17:22:59 GMT

File type
HTML document, ASCII text, with very long lines (1965), with no line terminators
Size
1.9 kB (1891 bytes)
Hash
f0dcec74fa12c703bdb2d5ffd77ac824
520bec02df4e9c0ac8ba422b4b9324ede5c44928
66b25eb4555f0b4e3bae219286a72749aa773be30710ffd64473474b51109f42

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 13 Mar 2025 06:16:56 GMT
server: Apache
set-cookie: __tad=1741846616.5415379; expires=Sun, 11-Mar-2035 06:16:56 GMT; Max-Age=315360000
vary: Accept-Encoding
content-encoding: gzip
content-length: 640
content-type: text/html; charset=UTF-8
connection: close

GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000

142.250.74.161

200 OK

200 B

URL GET
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MjAmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODVjY2M1YjcyLjE1OTA3NTIzJnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=1471741846621618&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846621627&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F0718442bfe43b0559a807902c9c1bd31%2FOmGsN06SbAp04AotDr8%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:E7:0B:8F:93:C0:9E:F3:15:26:E3:94:7C:D8:3F:00:DE:01:8F:46
ValidityWed, 26 Feb 2025 15:33:54 GMT - Wed, 21 May 2025 15:33:53 GMT

File type
SVG Scalable Vector Graphics image
Size
200 B (200 bytes)
Hash
562d66e49bcc46837a4b4c5b1f81ca4c
da9a9358a6cb428a5d86de5fd9252379ea1ab42b
4df0e0a340e46fb564d7be86da2e4fe919b285b4950cc2d0e7c4ec339431be10

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 173
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Mar 2025 05:29:08 GMT
expires: Fri, 14 Mar 2025 04:29:08 GMT
cache-control: public, max-age=82800
age: 2874
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff

142.250.74.161

200 OK

391 B

URL GET
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP
142.250.74.161:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MjAmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODVjY2M1YjcyLjE1OTA3NTIzJnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=1471741846621618&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846621627&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F0718442bfe43b0559a807902c9c1bd31%2FOmGsN06SbAp04AotDr8%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:E7:0B:8F:93:C0:9E:F3:15:26:E3:94:7C:D8:3F:00:DE:01:8F:46
ValidityWed, 26 Feb 2025 15:33:54 GMT - Wed, 21 May 2025 15:33:53 GMT

File type
SVG Scalable Vector Graphics image
Size
391 B (391 bytes)
Hash
249bb4c6a37dfa60d6ecf838cada5020
4e56099d13b015804f79d1182f66982bc6e4662b
a2cebc2af2fd29cbee1ed7860ef5b12088b85259918d8bf2f2aaa99b915fa3f4

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Mar 2025 06:13:28 GMT
expires: Fri, 14 Mar 2025 05:13:28 GMT
cache-control: public, max-age=82800
age: 214
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/ads/i/iframe.html

142.250.74.174

200 OK

1.6 kB

URL GET
syndicatedsearch.goog/afs/ads/i/iframe.html
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type
HTML document, ASCII text, with very long lines (1586), with no line terminators
Size
1.6 kB (1560 bytes)
Hash
4287f8a70c1c40ac23a1b03b6e8c54d3
4ae7c05567378fb9010bcdd94e08c9b8070fda52
94cf4618bfa8cf185f83a7365d8dae6441d5ad5a090a2a10b5b9f04b985253ea

HTTP Headers

GET /afs/ads/i/iframe.html HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
content-security-policy: script-src 'nonce-9FGdjZSKXxhvUE2EpyBHLg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 727
date: Thu, 13 Mar 2025 06:17:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Tue, 17 Sep 2024 06:00:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

103.224.182.242

302 Found

25 kB

URL User Request GET
luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde
IP
103.224.182.242:80
ASN
#133618 Trellian Pty. Limited

File type

Size
25 kB (24981 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846616.5415379
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Thu, 13 Mar 2025 06:16:58 GMT
server: Apache
location: https://luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde
content-length: 0
content-type: text/html; charset=UTF-8
connection: close

GET syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MjAmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODVjY2M1YjcyLjE1OTA3NTIzJnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=1471741846621618&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846621627&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F0718442bfe43b0559a807902c9c1bd31%2FOmGsN06SbAp04AotDr8%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5902-80b5-71f2c825faed

142.250.74.174

200 OK

14 kB

URL GET
syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MjAmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODVjY2M1YjcyLjE1OTA3NTIzJnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=1471741846621618&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846621627&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F0718442bfe43b0559a807902c9c1bd31%2FOmGsN06SbAp04AotDr8%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5902-80b5-71f2c825faed
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
14 kB (14482 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MjAmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODVjY2M1YjcyLjE1OTA3NTIzJnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=1471741846621618&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846621627&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F0718442bfe43b0559a807902c9c1bd31%2FOmGsN06SbAp04AotDr8%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5902-80b5-71f2c825faed HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Thu, 13 Mar 2025 06:17:02 GMT
expires: Thu, 13 Mar 2025 06:17:02 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-HRLqhhXrlTSvWowpyGhwxw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3027
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET ww16.luminosclap.com/search/tsc.php?ses=ogccfGSZPij7f0WE4mgNhP2BSzh97gJ-Aic3I20ranp6mTD2vFDFnqZzsE6SkEoYcdJx2LuASfziVYszIEQpL-XbD1o5uoymJOVQEfFCViPK-cOxn4YM3FaGWGkbHVy5jI4Jz-W3GDv74Idrom21hgNe7g-CMur5QniQHBojSUnLiZGAJLXwYj5Vf1ZnfsTFZ3UcWk7looQiPKOj9tMyWqg9rh2-ofIQjCvEkCEv-4bBe-knTSyQMImnTdYDhFCXXx2kt4H_wZgOGpRilvI4LoNCXoy0AaONufdBuOf4GdR1vDLoRlELV_YsTi9f5A3J6GCOKHCbw1n7xCxTVWIdnFJAXbAf14_ElrtkngSwDkUgaXeNTM70sty0dgGlEq-_A&cv=2

91.195.240.112

200 OK

0 B

URL GET
ww16.luminosclap.com/search/tsc.php?ses=ogccfGSZPij7f0WE4mgNhP2BSzh97gJ-Aic3I20ranp6mTD2vFDFnqZzsE6SkEoYcdJx2LuASfziVYszIEQpL-XbD1o5uoymJOVQEfFCViPK-cOxn4YM3FaGWGkbHVy5jI4Jz-W3GDv74Idrom21hgNe7g-CMur5QniQHBojSUnLiZGAJLXwYj5Vf1ZnfsTFZ3UcWk7looQiPKOj9tMyWqg9rh2-ofIQjCvEkCEv-4bBe-knTSyQMImnTdYDhFCXXx2kt4H_wZgOGpRilvI4LoNCXoy0AaONufdBuOf4GdR1vDLoRlELV_YsTi9f5A3J6GCOKHCbw1n7xCxTVWIdnFJAXbAf14_ElrtkngSwDkUgaXeNTM70sty0dgGlEq-_A&cv=2
IP
91.195.240.112:443
ASN
#47846 SEDO GmbH

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerDigiCert Inc
Subjectww16.luminosclap.com
FingerprintFB:BF:78:96:7A:75:05:CD:1D:72:DA:72:EE:C9:AE:A6:72:4E:D9:AD
ValidityThu, 06 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /search/tsc.php?ses=ogccfGSZPij7f0WE4mgNhP2BSzh97gJ-Aic3I20ranp6mTD2vFDFnqZzsE6SkEoYcdJx2LuASfziVYszIEQpL-XbD1o5uoymJOVQEfFCViPK-cOxn4YM3FaGWGkbHVy5jI4Jz-W3GDv74Idrom21hgNe7g-CMur5QniQHBojSUnLiZGAJLXwYj5Vf1ZnfsTFZ3UcWk7looQiPKOj9tMyWqg9rh2-ofIQjCvEkCEv-4bBe-knTSyQMImnTdYDhFCXXx2kt4H_wZgOGpRilvI4LoNCXoy0AaONufdBuOf4GdR1vDLoRlELV_YsTi9f5A3J6GCOKHCbw1n7xCxTVWIdnFJAXbAf14_ElrtkngSwDkUgaXeNTM70sty0dgGlEq-_A&cv=2 HTTP/1.1
Host: ww16.luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:17:01 GMT
server: Parking/1.0
x-cache-miss-from: parking-77f77f4ddf-jpp5n
content-length: 0
X-Firefox-Spdy: h2

GET img.sedoparking.com/templates/logos/sedo_logo.png

205.234.175.175

200 OK

15 kB

URL GET
img.sedoparking.com/templates/logos/sedo_logo.png
IP
205.234.175.175:443
ASN
#30081 CACHENETWORKS

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGlobalSign nv-sa
Subject*.cachefly.net
FingerprintE3:21:BF:A0:AC:70:6E:19:F1:83:A3:CB:83:F9:6F:0F:E0:46:F1:3C
ValidityTue, 12 Nov 2024 20:01:06 GMT - Sun, 14 Dec 2025 20:01:05 GMT

File type
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15086 bytes)
Hash
def00c11b1596db4efee6a9fbe64fc27
bd298981e6d8d7e4ffa18abcf687041f4246672d
95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4

HTTP Headers

GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 13 Mar 2025 06:17:02 GMT
content-type: image/png
content-length: 15086
access-control-allow-origin: *
cache-control: max-age=604800
expires: Thu, 20 Mar 2025 06:17:02 GMT
x-cfhash: "def00c11b1596db4efee6a9fbe64fc27"
x-cff: B
last-modified: Mon, 11 Jan 2021 07:44:34 GMT
x-cf3: H
cf4age: 0
x-cf-tsc: 1729867994
cf4ttl: 31536000.000
x-cf2: H
server: CFS 1124
x-cf-reqid: 9db7cdad2919fe62264e139f4429bea6
x-cf1: 11696:fD.arn1:cf:nom:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2

0.0.0.0

0 B

URL User Request GET
luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-7
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-7 HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846616.5415379
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

GET luminosclap.com/favicon.ico

0.0.0.0

0 B

URL GET
luminosclap.com/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

GET syndicatedsearch.goog/adsense/domains/caf.js

142.250.74.174

200 OK

145 kB

URL GET
syndicatedsearch.goog/adsense/domains/caf.js
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7446205343&channel=exp-0051%2Cauxa-control-1%2C4540865&client=dp-sedo85_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww16.luminosclap.com%2Fcaf%2F%3Fses%3DY3JlPTE3NDE4NDY2MjAmdGNpZD13dzE2Lmx1bWlub3NjbGFwLmNvbTY3ZDI3ODVjY2M1YjcyLjE1OTA3NTIzJnRhc2s9c2VhcmNoJmRvbWFpbj1sdW1pbm9zY2xhcC5jb20mYV9pZD0zJnNlc3Npb249ejBuaV9pLXRnTFhHNnJqZFhyTEo%3D&type=3&uiopt=false&swp=as-drid-2111278680623244&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=1471741846621618&num=0&output=afd_ads&domain_name=ww16.luminosclap.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846621627&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1194&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww16.luminosclap.com%2F0%2F0%2F0%2F0718442bfe43b0559a807902c9c1bd31%2FOmGsN06SbAp04AotDr8%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26sub1%3D20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type
JavaScript source, ASCII text, with very long lines (1967)
Size
145 kB (144895 bytes)
Hash
b00f06415fc11ab63f8e33011efa11f9
437b2b46c8968f9cd6d09d1f0bf1cb356993bdbe
c0d61beba631704a0b2028413f3e8ceecec41be7f53532c9b51d798cc0ac4c99

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 13 Mar 2025 06:17:02 GMT
expires: Thu, 13 Mar 2025 06:17:02 GMT
cache-control: private, max-age=3600
etag: "4582219627566637913"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=yaexx5shjc4f&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bs&adbx=290&adby=90.23333740234375&adbh=544&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=20%7C0%7C546%7C192%7C29&lle=0&ifv=1&hpt=0

142.250.74.174

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=yaexx5shjc4f&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bs&adbx=290&adby=90.23333740234375&adbh=544&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=20%7C0%7C546%7C192%7C29&lle=0&ifv=1&hpt=0
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=yaexx5shjc4f&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bs&adbx=290&adby=90.23333740234375&adbh=544&adbw=700&adbah=171%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=20%7C0%7C546%7C192%7C29&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-StvDuDZ1lwFQ0c5uyQ5dtA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:17:03 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=dfpe5zcfl2t3&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bs&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=8%7C0%7C558%7C192%7C29&lle=0&ifv=1&hpt=0

142.250.74.174

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=dfpe5zcfl2t3&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bs&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=8%7C0%7C558%7C192%7C29&lle=0&ifv=1&hpt=0
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=dfpe5zcfl2t3&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bs&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=8%7C0%7C558%7C192%7C29&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-3Vk_MzHR9ibPYwBb111Ilg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:17:03 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=zc8vc112c52a&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bv&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=8%7C0%7C558%7C192%7C29&lle=0&ifv=1&hpt=0

142.250.74.174

204 No Content

0 B

URL GET
syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=zc8vc112c52a&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bv&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=8%7C0%7C558%7C192%7C29&lle=0&ifv=1&hpt=0
IP
142.250.74.174:443
ASN
#15169 GOOGLE

Requested by
https://ww16.luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&sub1=20250313-1716-5902-80b5-71f2c825faed
Certificate
IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32
ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=zc8vc112c52a&cd_fexp=72717107&aqid=XnjSZ9GRBNigiM0Pt5yGsAk&psid=7446205343&pbt=bv&adbx=490&adby=1010.2333374023438&adbh=17&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo85_3ph&errv=732930958&csala=8%7C0%7C558%7C192%7C29&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.luminosclap.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-JT8UD-8Dpq6WlHzn5TfmDQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:17:03 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET luminosclap.com/js/fingerprint/iife.min.js

103.224.182.242

200 OK

34 kB

URL GET
luminosclap.com/js/fingerprint/iife.min.js
IP
103.224.182.242:443
ASN
#133618 Trellian Pty. Limited

Requested by
https://luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Certificate
IssuerLet's Encrypt
Subjectfsbdqn.com
Fingerprint32:2B:38:42:0F:A7:A6:58:AE:80:2D:41:50:02:48:D7:D7:31:15:9E
ValiditySun, 19 Jan 2025 17:23:00 GMT - Sat, 19 Apr 2025 17:22:59 GMT

File type

Size
34 kB (34240 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/fingerprint/iife.min.js HTTP/1.1
Host: luminosclap.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luminosclap.com/0/0/0/0718442bfe43b0559a807902c9c1bd31/OmGsN06SbAp04AotDr8?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Thu, 13 Mar 2025 06:16:57 GMT
server: Apache
last-modified: Tue, 22 Oct 2024 03:25:40 GMT
etag: "85c0-6250852d63500-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14345
content-type: application/javascript
connection: close

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL User Request GET

IP

ASN

Certificate