Report - www-findmy-loaction.sa.com/?i=bwten/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/

Report Overview

Submitted URL
www-findmy-loaction.sa.com/?i=bwten/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/
IP
69.49.244.133
ASN
#19871 NETWORK-SOLUTIONS-HOSTING
Submitted
2024-05-07 04:51:34
Access
public
Website Title
No Internet
Final URL
www-findmy-loaction.sa.com/expire/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www-findmy-loaction.sa.com	unknown	unknown	No data	No data	1.9 kB	122 kB	69.49.244.133
apis.google.com	105	1997-09-15	2013-05-06	2024-05-06	415 B	22 kB	142.250.74.110

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-06	medium	www-findmy-loaction.sa.com	Sinkholed
2024-05-06	medium	www-findmy-loaction.sa.com	Sinkholed
2024-05-06	medium	www-findmy-loaction.sa.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	www-findmy-loaction.sa.com/expire/	57 kB	2023-06-13	2024-05-14
Pretty URL www-findmy-loaction.sa.com/expire/ IP 69.49.244.133 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-13 22:44:19 Last Seen2024-05-14 06:05:02 Times Seen272 Hash 2fdb77e17a6d25fc81a1bd6952e87d2b a3df88f72bf777586b74e8ed83cfb5d2306c6ad4 60ec22abea736d0f3b628453866531e3ee834fee227b058cd5dfdd434f5ea69c Loading...

	moz-extension://374908d2-0475-4f5d-b9f6-d1abf756a6ed/lib/shim_messaging_helper.js	1.7 kB	2023-05-05	2024-05-19
Pretty URL moz-extension://374908d2-0475-4f5d-b9f6-d1abf756a6ed/lib/shim_messaging_helper.js IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-05-05 22:33:37 Last Seen2024-05-19 11:25:27 Times Seen46258 Hash 865f01cbb34eb505834e826380d7dc2e c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e 30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17 Loading...

	connect.facebook.net/en_US/sdk.js	17 kB	2023-05-05	2024-05-19
Pretty URL connect.facebook.net/en_US/sdk.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-05 22:33:37 Last Seen2024-05-19 11:25:27 Times Seen45708 Hash b938e0b835c600209bdaae9d8ccda6d7 d5ee79d277057e05f002a18381722b5eb75d3883 d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b Loading...

	www-findmy-loaction.sa.com/expire/	450 B	2023-06-13	2024-05-14
Pretty URL www-findmy-loaction.sa.com/expire/ IP 69.49.244.133 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-13 22:44:19 Last Seen2024-05-14 06:05:02 Times Seen250 Hash 94b8b767e99dc089eab0d0504009362f fd1fbd6a9d42fad304a7de758234041853f639cf 809edc201aff0ef2f4941f948014c4eee057db5ef0c308d14408a0dd3daf584b Loading...

	www-findmy-loaction.sa.com/expire/	202 B	2023-06-13	2024-05-14
Pretty URL www-findmy-loaction.sa.com/expire/ IP 69.49.244.133 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-13 22:44:19 Last Seen2024-05-14 06:05:02 Times Seen250 Hash 210b012d0befc52b930ca801be676234 03d196235dcd11f3b1bc50ac469e679440b0fb8c 8ff34ffc4d70453e7693b700c63108a009005c2ef5cca35b4cd33e7791c7bad7 Loading...

	www-findmy-loaction.sa.com/expire/	278 B	2023-03-07	2024-05-15
Pretty URL www-findmy-loaction.sa.com/expire/ IP 69.49.244.133 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:18:30 Last Seen2024-05-15 19:14:24 Times Seen1290 Hash 5230b597ea743d78597a261af056c288 e3368ae4e12b3d936db53453a34b295a1b0e5b9b 2c938e35d74db4830f55f70bb050135f22f83f6ddfdf39f15f3e05c587a69312 Loading...

	apis.google.com/js/platform.js	56 kB	2024-04-23	2024-05-19
Pretty URL apis.google.com/js/platform.js IP 142.250.74.110 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-23 06:22:45 Last Seen2024-05-19 11:20:40 Times Seen1927 Hash e66acfdb2f1dfcff8c6dba736dd4ab6d 36026360b6c8d750488ef2c739e04969f8c5bcd7 742841b3cf614dd55ce486a7335018bd1992c4d05ef74b45a0781318075a99f3 Loading...

	www-findmy-loaction.sa.com/expire/	107 B	2023-06-13	2024-05-14
Pretty URL www-findmy-loaction.sa.com/expire/ IP 69.49.244.133 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-13 22:44:19 Last Seen2024-05-14 06:05:02 Times Seen250 Hash 2923720eb0bebfe5833d378b0e3338ee 3d52c8a1da689731731921d3dd57fef8647c1797 633a6d09c3be28ae2181c385acab7b2057fc01d9276115ab2d96735c2ad956a6 Loading...

HTTP Transactions (4)

URL IP Response Size

www-findmy-loaction.sa.com/?i=bwten/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/

69.49.244.133

302 Found

0 B

URL User Request GET HTTP/1.1
www-findmy-loaction.sa.com/?i=bwten/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/
IP
69.49.244.133:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Certificate
IssuerLet's Encrypt
Subject*.www-findmy-loaction.sa.com
FingerprintEC:F2:56:DF:2A:60:B5:60:E3:7E:05:FC:9A:16:13:F5:E5:9A:ED:21
ValiditySun, 05 May 2024 02:31:50 GMT - Sat, 03 Aug 2024 02:31:49 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?i=bwten/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/./expire/ HTTP/1.1
Host: www-findmy-loaction.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Tue, 07 May 2024 04:51:09 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=892d29be52530e558f459cebadcb9ebb; path=/
Content-Security-Policy: upgrade-insecure-requests;
location: ./expire/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www-findmy-loaction.sa.com/expire/

69.49.244.133

200 OK

121 kB

URL User Request GET HTTP/1.1
www-findmy-loaction.sa.com/expire/
IP
69.49.244.133:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Certificate
IssuerLet's Encrypt
Subject*.www-findmy-loaction.sa.com
FingerprintEC:F2:56:DF:2A:60:B5:60:E3:7E:05:FC:9A:16:13:F5:E5:9A:ED:21
ValiditySun, 05 May 2024 02:31:50 GMT - Sat, 03 Aug 2024 02:31:49 GMT

File type
HTML document, ASCII text, with very long lines (1485), with CRLF line terminators
Size
121 kB (121170 bytes)
Hash
b3c4614e70ef2fbb3809db2739778c9c
3ec8950f345dde5ac3a18124be75c918dc91a1ee
b52ee44d423aa1558cdaf4555ab58f1ed90c17823451a5e8f11e3b82affa2604

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /expire/ HTTP/1.1
Host: www-findmy-loaction.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=892d29be52530e558f459cebadcb9ebb
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 04:51:09 GMT
Server: Apache
Content-Security-Policy: upgrade-insecure-requests;
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

www-findmy-loaction.sa.com/favicon.ico

69.49.244.133

404 Not Found

315 B

URL GET HTTP/1.1
www-findmy-loaction.sa.com/favicon.ico
IP
69.49.244.133:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Requested by
https://www-findmy-loaction.sa.com/expire/
Certificate
IssuerLet's Encrypt
Subject*.www-findmy-loaction.sa.com
FingerprintEC:F2:56:DF:2A:60:B5:60:E3:7E:05:FC:9A:16:13:F5:E5:9A:ED:21
ValiditySun, 05 May 2024 02:31:50 GMT - Sat, 03 Aug 2024 02:31:49 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www-findmy-loaction.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-findmy-loaction.sa.com/expire/
Cookie: PHPSESSID=892d29be52530e558f459cebadcb9ebb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 07 May 2024 04:51:10 GMT
Server: Apache
Content-Security-Policy: upgrade-insecure-requests;
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

apis.google.com/js/platform.js

142.250.74.110

200 OK

21 kB

URL GET HTTP/2
apis.google.com/js/platform.js
IP
142.250.74.110:443
ASN
#15169 GOOGLE

Requested by
https://www-findmy-loaction.sa.com/expire/
Certificate
IssuerGoogle Trust Services LLC
Subject*.apis.google.com
FingerprintA7:D6:BC:77:0E:91:14:D7:D6:8D:A4:E5:4C:00:57:E1:44:DB:F2:8B
ValidityTue, 16 Apr 2024 04:20:57 GMT - Tue, 09 Jul 2024 04:20:56 GMT

File type
JavaScript source, ASCII text, with very long lines (2050)
Size
21 kB (21303 bytes)
Hash
e66acfdb2f1dfcff8c6dba736dd4ab6d
36026360b6c8d750488ef2c739e04969f8c5bcd7
742841b3cf614dd55ce486a7335018bd1992c4d05ef74b45a0781318075a99f3

HTTP Headers

GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www-findmy-loaction.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21303
date: Tue, 07 May 2024 04:51:10 GMT
expires: Tue, 07 May 2024 04:51:10 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "d8cc7aca923e8ade"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML