Report - exap.com.sa/

Report Overview

Submitted URL
exap.com.sa/
IP
212.76.85.18
ASN
#41176 Sahara Network
Submitted
2024-05-04 16:15:00
Access
public
Website Title
EXAP
Final URL
exap.com.sa/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
86

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
exap.com.sa	unknown	unknown	2019-05-22	2023-11-26	19 kB	1.1 MB	212.76.85.18
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-04	1.1 kB	33 kB	216.58.207.227
stats.wp.com	2711	1997-03-28	2017-01-30	2024-05-03	394 B	4.3 kB	192.0.76.3
pixel.wp.com	2545	1997-03-28	2017-01-30	2024-05-03	542 B	249 B	192.0.76.3
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-04	470 B	9.4 kB	142.250.74.74

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed
2024-05-04	medium	exap.com.sa	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	exap.com.sa/wp-includes/js/wp-emoji-release.min.js?ver=5.9.9	18 kB	2023-03-07	2024-05-18
Pretty URL exap.com.sa/wp-includes/js/wp-emoji-release.min.js?ver=5.9.9 IP 212.76.85.18 ASN #41176 Sahara Network Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-18 08:56:58 Times Seen12807 Hash 116c86c56f8db0bb63f15ceda50fdc98 75e308982ecf7cd43644b8b426e6aa1a0b0fbe26 def5de6254be138b8b35d680d1fdd8b07827d03b8626daebfeeb4157ec330ea7 Loading...

	unknown	21 B	2023-04-10	2024-05-18
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 22:51:51 Last Seen2024-05-18 06:14:43 Times Seen3429 Hash e56ddbb05a974a6bc5ea44661e509a21 448d4cb69f9441e10731b1ff4aa9dc81502589bd 1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913 Loading...

	exap.com.sa/wp-content/cache/jch-optimize/js/8dbf16761ebb619862dc5fa57bac3fa5.js	660 kB	2024-05-04	2024-05-04
Pretty URL exap.com.sa/wp-content/cache/jch-optimize/js/8dbf16761ebb619862dc5fa57bac3fa5.js IP 212.76.85.18 ASN #41176 Sahara Network Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 18:15:01 Last Seen2024-05-04 18:15:01 Times Seen2 Hash 9fbaed009b2342044f79d333d4a7ffed dc6bc07516fc6b87abb4a449611a81f42fcb020a b01d422bb2d2b843bcb12ccdac0c3b6b852236c4d34dcd6fba0c11f822bfafb9 Loading...

	stats.wp.com/e-202418.js	7.3 kB	2024-01-05	2024-05-18
Pretty URL stats.wp.com/e-202418.js IP 192.0.76.3 ASN #2635 AUTOMATTIC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-05 19:19:44 Last Seen2024-05-18 10:34:43 Times Seen2676 Hash bd2d67186594b0e32223b293fdfcca55 b797a9d012c850b53a7ccc12211adcfbcd9ae0be 4f9f4e2e225088f9cf3b6b54aa421e0f776d1802255505d2f752e1f83f441641 Loading...

HTTP Transactions (48)

URL IP Response Size

exap.com.sa/

212.76.85.18

200 OK

0 B

URL User Request GET HTTP/1.1
exap.com.sa/
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sat, 04 May 2024 16:17:25 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
X-Redirect-By: WordPress
Location: https://exap.com.sa/
Cache-Control: max-age=0, public
Expires: Sat, 04 May 2024 16:17:25 GMT
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

exap.com.sa/

212.76.85.18

200 OK

10 kB

URL User Request GET HTTP/1.1
exap.com.sa/
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (17109), with CRLF, LF line terminators
Size
10 kB (10292 bytes)
Hash
4510d3445fe49f3d8a1cb7495541e84d
11f656e8b059535f1ced1978db0ceb5325b641e5
0764bced7f3bc7eb98b29560de35e5c4e927b48bd6bb242ee03a2d1997e65a82

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:23 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Link: <https://exap.com.sa/wp-json/>; rel="https://api.w.org/", <https://exap.com.sa/wp-json/wp/v2/pages/52>; rel="alternate"; type="application/json", <https://exap.com.sa/>; rel=shortlink, </#wp-duotone-dark-grayscale>; rel=preload; as=image,</#wp-duotone-grayscale>; rel=preload; as=image,</#wp-duotone-purple-yellow>; rel=preload; as=image,</#wp-duotone-blue-red>; rel=preload; as=image,</#wp-duotone-midnight>; rel=preload; as=image,</#wp-duotone-magenta-yellow>; rel=preload; as=image,<https://exap.com.sa/wp-content/cache/jch-optimize/css/dd13b5443d2781a7e1dce9e876e9271f.css>; rel=preload; as=style,<https://exap.com.sa/wp-content/cache/jch-optimize/js/8dbf16761ebb619862dc5fa57bac3fa5.js>; rel=preload; as=script
Cache-Control: max-age=0, public
Expires: Sat, 04 May 2024 16:17:23 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 10292
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://exap.com.sa/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exap.com.sa
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:55:00 GMT
expires: Fri, 02 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 224392
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://exap.com.sa/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://exap.com.sa
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 24375
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

exap.com.sa/wp-content/cache/jch-optimize/css/dd13b5443d2781a7e1dce9e876e9271f.css

212.76.85.18

200 OK

50 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/cache/jch-optimize/css/dd13b5443d2781a7e1dce9e876e9271f.css
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65267)
Size
50 kB (50538 bytes)
Hash
cbd6a1823e4a58c177adf4410f4ef623
5563424777fe86fc797330c549eefc02d2fac5d1
8959a48fcb1bf4d09a1a591139ee9afce41fe957eee713921d4f17593875c771

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cache/jch-optimize/css/dd13b5443d2781a7e1dce9e876e9271f.css HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:41 GMT
Server: Apache
Last-Modified: Sat, 04 May 2024 16:17:36 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:41 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 50538
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

exap.com.sa/wp-content/uploads/2018/03/cropped-Ekssab.jpg

212.76.85.18

200 OK

6.6 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/uploads/2018/03/cropped-Ekssab.jpg
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 230x119, components 3
Size
6.6 kB (6569 bytes)
Hash
cebe4fc2f5f6a5c609a47b9232b8881c
953ab0ce2f10016f73001ee5338482bfc3548295
b55bb05da30c444dc1bd5542aa2096ac8610b0d3d8e053cbd2a40a0441812f33

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/03/cropped-Ekssab.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Wed, 18 Apr 2018 08:14:26 GMT
Accept-Ranges: bytes
Content-Length: 6569
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

exap.com.sa/wp-content/themes/twenty-minutes/images/20160424_Location-map-1.jpg

212.76.85.18

200 OK

10 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/20160424_Location-map-1.jpg
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 219x157, components 3
Size
10 kB (10480 bytes)
Hash
2c6bcfc74bebc2f10608bdb8ed9bb71e
88d21f09f182aaced52bcb99b0f3a36224807b02
10acc3c049fef05655b1fe772e85fb456c8f3c51f634ac8fbea0b33877d96b9c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/20160424_Location-map-1.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 10480
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

exap.com.sa/wp-content/cache/jch-optimize/js/8dbf16761ebb619862dc5fa57bac3fa5.js

212.76.85.18

200 OK

196 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/cache/jch-optimize/js/8dbf16761ebb619862dc5fa57bac3fa5.js
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (63350)
Size
196 kB (196226 bytes)
Hash
9fbaed009b2342044f79d333d4a7ffed
dc6bc07516fc6b87abb4a449611a81f42fcb020a
b01d422bb2d2b843bcb12ccdac0c3b6b852236c4d34dcd6fba0c11f822bfafb9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/cache/jch-optimize/js/8dbf16761ebb619862dc5fa57bac3fa5.js HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:41 GMT
Server: Apache
Last-Modified: Sat, 04 May 2024 16:17:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:41 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

exap.com.sa/wp-content/uploads/2018/03/20170222_Homepage-Careers-1.png

212.76.85.18

200 OK

39 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/uploads/2018/03/20170222_Homepage-Careers-1.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 333 x 117, 8-bit/color RGBA, non-interlaced
Size
39 kB (39272 bytes)
Hash
c580099e55a7b878ed2519d29cb66e84
9adf1ad3ac8239947a314d130ea764695a95e689
949dab39cb811887845cdcea211ad001d4024ef61e9d0b7805d5d9939fdfd523

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/03/20170222_Homepage-Careers-1.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Wed, 14 Mar 2018 13:06:05 GMT
Accept-Ranges: bytes
Content-Length: 39272
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/

212.76.85.18

200 OK

10 kB

URL User Request GET HTTP/1.1
exap.com.sa/
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (17109), with CRLF, LF line terminators
Size
10 kB (10292 bytes)
Hash
4510d3445fe49f3d8a1cb7495541e84d
11f656e8b059535f1ced1978db0ceb5325b641e5
0764bced7f3bc7eb98b29560de35e5c4e927b48bd6bb242ee03a2d1997e65a82

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:33 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Cache-Control: max-age=0, public
Expires: Sat, 04 May 2024 16:17:33 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 10292
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

exap.com.sa/wp-content/themes/twenty-minutes/images/btn-search.gif

212.76.85.18

200 OK

54 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/btn-search.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 6 x 10
Size
54 B (54 bytes)
Hash
831a1d3268c3b53b27a28dc71a01d7ba
6b285f6f8e29bd137b4d586b1d009fa7a3e2289b
ae80c8009fc631295aee79e81c4fe8fa0aefd59391918263ee9176f2f9e6205b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/btn-search.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:07 GMT
Accept-Ranges: bytes
Content-Length: 54
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/wp-content/uploads/2018/03/certififcationbanenr.jpg

212.76.85.18

200 OK

108 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/uploads/2018/03/certififcationbanenr.jpg
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x458, components 3
Size
108 kB (107739 bytes)
Hash
0038b495ebfd6409467658019ee277f3
376ff4c10f979968cb7b41075007539079371815
420361c3ea76089f126a98cd576f602401fad0b6006bf98ff66eca9d7284862c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/03/certififcationbanenr.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 09:46:01 GMT
Accept-Ranges: bytes
Content-Length: 107739
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

stats.wp.com/e-202418.js

192.0.76.3

200 OK

3.9 kB

URL GET HTTP/2
stats.wp.com/e-202418.js
IP
192.0.76.3:443
ASN
#2635 AUTOMATTIC

Requested by
https://exap.com.sa/
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (7329), with no line terminators
Size
3.9 kB (3868 bytes)
Hash
bd2d67186594b0e32223b293fdfcca55
b797a9d012c850b53a7ccc12211adcfbcd9ae0be
4f9f4e2e225088f9cf3b6b54aa421e0f776d1802255505d2f752e1f83f441641

HTTP Headers

GET /e-202418.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 16:14:51 GMT
content-type: application/javascript
vary: Accept-Encoding
x-minify: t
x-minify-cache: hit
etag: W/14377-1704402358485.9985
content-encoding: br
expires: Mon, 28 Apr 2025 16:23:38 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

exap.com.sa/wp-content/uploads/2018/03/commercial-building-construction.jpg

212.76.85.18

200 OK

32 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/uploads/2018/03/commercial-building-construction.jpg
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 160x120, components 3
Size
32 kB (32080 bytes)
Hash
2025271b543f7754f51b2695b5bfc47e
ce64368bc80d3b58b11bd876aeefa6755162b096
298f87a1b8eee773091d7ae9d416c3b5fe09a58aafa967e91d72469dd37dcf33

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/03/commercial-building-construction.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Mon, 07 Mar 2022 00:17:40 GMT
Accept-Ranges: bytes
Content-Length: 32080
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

pixel.wp.com/g.gif?v=ext&j=1%3A10.7.1&blog=196858578&post=52&tz=0&srv=exap.com.sa&host=exap.com.sa&ref=&fcp=18874&rand=0.9286856285477465

192.0.76.3

200 OK

50 B

URL GET HTTP/3
pixel.wp.com/g.gif?v=ext&j=1%3A10.7.1&blog=196858578&post=52&tz=0&srv=exap.com.sa&host=exap.com.sa&ref=&fcp=18874&rand=0.9286856285477465
IP
192.0.76.3:443
ASN
#2635 AUTOMATTIC

Requested by
https://exap.com.sa/
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT

File type
GIF image data, version 89a, 6 x 5
Size
50 B (50 bytes)
Hash
e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1

HTTP Headers

GET /g.gif?v=ext&j=1%3A10.7.1&blog=196858578&post=52&tz=0&srv=exap.com.sa&host=exap.com.sa&ref=&fcp=18874&rand=0.9286856285477465 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
server: nginx
date: Sat, 04 May 2024 16:14:52 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400

exap.com.sa/wp-content/themes/twenty-minutes/images/seperator.gif

212.76.85.18

200 OK

226 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/seperator.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 2 x 150
Size
226 B (226 bytes)
Hash
cdb042e889a4fce175a721a8cb7b3856
2abf12aaa060d644488f2268fdae31bccca0b3e8
d0a5556fc91bf55d4c9fc4f7c3bc750c99c06fc60151ee058914c68cb5577773

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/seperator.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 226
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/wp-content/themes/twenty-minutes/images/shadow-top.png

212.76.85.18

200 OK

139 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/shadow-top.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 7 x 9, 8-bit/color RGBA, non-interlaced
Size
139 B (139 bytes)
Hash
09932ec962e219b8ea8b6811823b4306
5a9068b5359eb37b286a3eb032447a95224a7336
1ba281b6e615fd74c8ee614b50c22dd3f03858d461fc9699df1a626062db5540

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/shadow-top.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 139
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/themes/twenty-minutes/images/bg-nav-main-ul.gif

212.76.85.18

200 OK

46 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/bg-nav-main-ul.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 44
Size
46 B (46 bytes)
Hash
f8c3d12132d13765d109a7715bc0c663
f8f82ef86668ea9ed5fd8e43479d41952abace7d
a6071c358fe179ff22e816a78ed95a5db83c578829d777f292a5e518a15f5ab5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/bg-nav-main-ul.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:07 GMT
Accept-Ranges: bytes
Content-Length: 46
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/wp-includes/js/wp-emoji-release.min.js?ver=5.9.9

212.76.85.18

200 OK

4.9 kB

URL GET HTTP/1.1
exap.com.sa/wp-includes/js/wp-emoji-release.min.js?ver=5.9.9
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (15224)
Size
4.9 kB (4930 bytes)
Hash
116c86c56f8db0bb63f15ceda50fdc98
75e308982ecf7cd43644b8b426e6aa1a0b0fbe26
def5de6254be138b8b35d680d1fdd8b07827d03b8626daebfeeb4157ec330ea7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.9 HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Mon, 23 Aug 2021 14:59:35 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4930
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

exap.com.sa/wp-content/themes/twenty-minutes/images/bg-seperator-home.png

212.76.85.18

200 OK

465 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/bg-seperator-home.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 7 x 311, 8-bit/color RGBA, non-interlaced
Size
465 B (465 bytes)
Hash
87afc40c6996d4e6959555ebc5f3f1da
46cf3000a315b6e64b0857a99de6baf496efb330
c5dacd5768764df6bb00f240fd655a44003feda5bad0c53a3d2d6a30a0b836e6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/bg-seperator-home.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 465
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/themes/twenty-minutes/images/arrow-l1.gif

212.76.85.18

200 OK

49 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/arrow-l1.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 4 x 6
Size
49 B (49 bytes)
Hash
6b4a4c568076c7ee6ce364ae37a2cb15
9a8b89f36ac260976a7f2762e151d710abc079c1
d768097f84412300b91ee83092ff1afc4da9dcd68dc2e61907461270d33b4a22

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/arrow-l1.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 49
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/wp-content/themes/twenty-minutes/images/bg-listitem.png

212.76.85.18

200 OK

153 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/bg-listitem.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 201 x 4, 8-bit/color RGBA, non-interlaced
Size
153 B (153 bytes)
Hash
64e92ae49652655c858d5507eea4667e
efe7dbe8c3f2bc2445e85750db3bd6cf3a39017d
1201332f6bbcb88b229cc08c328c6c66d1aa40d35da77e6a998ad2a0bdf43573

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/bg-listitem.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 153
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/plugins/languages/public/assets/fonts/revicons/revicons.woff?5510888

212.76.85.18

200 OK

7.5 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/plugins/languages/public/assets/fonts/revicons/revicons.woff?5510888
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 7536, version 1.0
Size
7.5 kB (7536 bytes)
Hash
04eb8fc57f27498e5ae37523e3bfb2c7
d942ae11706c3f7e511e3c49b0e4574d7ad199c4
f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/languages/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/wp-content/cache/jch-optimize/css/dd13b5443d2781a7e1dce9e876e9271f.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:07:26 GMT
Accept-Ranges: bytes
Content-Length: 7536
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Vary: Accept-Encoding,User-Agent
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/x-font-woff

exap.com.sa/wp-content/themes/twenty-minutes/images/bg-bottom-widget.png

212.76.85.18

200 OK

2.6 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/bg-bottom-widget.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 1257 x 24, 8-bit/color RGBA, non-interlaced
Size
2.6 kB (2617 bytes)
Hash
80f6ddae925cb50025f4efec37f04eba
4986adb9b033bec2cd127091d4de115d208d5292
2a6766327b3d98ab52630f33493e2a39f8f71584b2c0a7b72686e0b82c87119f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/bg-bottom-widget.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 2617
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/themes/twenty-minutes/images/bg-divide.gif

212.76.85.18

200 OK

309 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/bg-divide.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 103
Size
309 B (309 bytes)
Hash
5997e8a4ccb67ad1c7023f0a2315ac5b
96b1639d4dee74608269cd3954d3dfb45e2bbf6b
69fc5e9d04ccfb9f6a04892916819491890378dd534c0d7987f666d129e98983

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/bg-divide.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 309
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/wp-content/themes/twenty-minutes/images/arrows.gif

212.76.85.18

200 OK

379 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/arrows.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 6 x 500
Size
379 B (379 bytes)
Hash
1b6debc3f73a0e5946e537416760937b
98240f4d12cb0659346fda9611bb392788328884
68328c229e29528ef8c20d823fdc4ca8ca87b17b0f68e0dd7e48180df90a71dd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/arrows.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 379
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/wp-content/themes/twenty-minutes/images/cropped-Ekssab.png

212.76.85.18

200 OK

19 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/cropped-Ekssab.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 135 x 26, 8-bit/color RGBA, non-interlaced
Size
19 kB (18573 bytes)
Hash
1b1d9f58fdd1d295b58374cb629476fe
46d89da0aaac2afc3ad3f0267313c8b2e5f1857f
46db32559e23c6e94c32e304ccb033bf85817a9ab146c3e755b29efd6b5efbde

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/cropped-Ekssab.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 18573
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/themes/twenty-minutes/images/arrow-sitemap.gif

212.76.85.18

200 OK

66 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/arrow-sitemap.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 4 x 20
Size
66 B (66 bytes)
Hash
ba4fd02febebe19a5aa7db4d3f33f6e3
f4558677fbd87483f59ec90db1bd39dc355dc21b
5d049b3e5a6658f02443a93bddc1869dcb4730b5621806cdcf9fb06323a45e15

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/arrow-sitemap.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 66
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/wp-content/plugins/languages/public/assets/assets/loader.gif

212.76.85.18

200 OK

2.5 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/plugins/languages/public/assets/assets/loader.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 24 x 24
Size
2.5 kB (2545 bytes)
Hash
4b3afb84b2b71ef56df09997a350bd04
accdac8a7abeab0e21c49539aad0a973addb28ef
9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/languages/public/assets/assets/loader.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/wp-content/cache/jch-optimize/css/dd13b5443d2781a7e1dce9e876e9271f.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:07:24 GMT
Accept-Ranges: bytes
Content-Length: 2545
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/wp-content/themes/twenty-minutes/images/exapbanner4.jpg

212.76.85.18

200 OK

52 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/exapbanner4.jpg
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x481, components 3
Size
52 kB (52229 bytes)
Hash
9b6ee95c2015d2d8f053a2ff80ed11dc
293888c360bfcd132ebd33b6bc6028a67333f315
593e04e54e854c3c6c6ef9c7ab8605e243142438f3908a4efafff6467d0061b2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/exapbanner4.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 52229
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

exap.com.sa/wp-content/uploads/2018/03/20121028_Sustainability-Graphic-1-1.png

212.76.85.18

200 OK

28 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/uploads/2018/03/20121028_Sustainability-Graphic-1-1.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 119 x 134, 8-bit/color RGBA, non-interlaced
Size
28 kB (28132 bytes)
Hash
d8827f006c5141efd130007d564aa278
d3cc7640321ae12f5e005e66f3aece61c3437377
02951c2daea81858aa66849c410963af17e1bec9455106f952b469d7288eccf2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/03/20121028_Sustainability-Graphic-1-1.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Wed, 21 Mar 2018 12:08:19 GMT
Accept-Ranges: bytes
Content-Length: 28132
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/plugins/languages/public/assets/assets/dummy.png

212.76.85.18

200 OK

68 B

URL GET HTTP/1.1
exap.com.sa/wp-content/plugins/languages/public/assets/assets/dummy.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Size
68 B (68 bytes)
Hash
2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/languages/public/assets/assets/dummy.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:07:24 GMT
Accept-Ranges: bytes
Content-Length: 68
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/themes/twenty-minutes/images/exapbanner2.jpg

212.76.85.18

200 OK

73 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/exapbanner2.jpg
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1700x310, components 3
Size
73 kB (73015 bytes)
Hash
b1a3d366708698a4c0da6e97749f47e1
c1ab8db3f49f03293538d0d5544e2ea0910ad0b5
949ef24bbe0fc9bf8cd7b597d4760fba56a4d147e143c03a11ef05e330ad6968

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/exapbanner2.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 73015
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg

exap.com.sa/wp-content/themes/twenty-minutes/images/textbg.png

212.76.85.18

200 OK

118 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/textbg.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced
Size
118 B (118 bytes)
Hash
9e76d4fa37f4e054b67fe414008667d8
adae14d425e8268b5fa7be531035a5ced0c734a7
7b0a64965e16b061f1847841a12040d80d1c1dcd3f933403a9863b0fafc94df9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/textbg.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 118
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/themes/twenty-minutes/images/textbg-green.png

212.76.85.18

200 OK

118 B

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/textbg-green.png
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced
Size
118 B (118 bytes)
Hash
11c661cebe58ff9869057dccf4370253
783a5be68812593b45d916b349f059242ef96653
503b2c63ee42222b89fe4c4cb8605f7803de11d5d0c08c3fde72ec534088acad

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/textbg-green.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 118
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png

exap.com.sa/wp-content/uploads/2018/03/exap-01project3.jpg

212.76.85.18

200 OK

400 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/uploads/2018/03/exap-01project3.jpg
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1637x733, components 3
Size
400 kB (399936 bytes)
Hash
beec96113fa2b9945f3c8c3c8e0d537e
ac5e9455e0c4713fef6df96bd17b148661d85d85
ba445348ad5f8553425c421a687acc8aa42abc7e2028dfeaf7944107f1664b6f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/03/exap-01project3.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 08:32:58 GMT
Accept-Ranges: bytes
Content-Length: 399936
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg

exap.com.sa/

0.0.0.0

0 B

URL GET
exap.com.sa/
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

exap.com.sa/

0.0.0.0

0 B

URL GET
exap.com.sa/
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

exap.com.sa/

0.0.0.0

0 B

URL GET
exap.com.sa/
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

exap.com.sa/

0.0.0.0

0 B

URL GET
exap.com.sa/
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

exap.com.sa/wp-content/uploads/2018/03/exap-project-6.jpg

0.0.0.0

0 B

URL GET
exap.com.sa/wp-content/uploads/2018/03/exap-project-6.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/03/exap-project-6.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

exap.com.sa/

0.0.0.0

0 B

URL GET
exap.com.sa/
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

exap.com.sa/favicon.ico

0.0.0.0

0 B

URL GET
exap.com.sa/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

exap.com.sa/wp-content/uploads/2018/03/exapDSC00430.jpg

0.0.0.0

0 B

URL GET
exap.com.sa/wp-content/uploads/2018/03/exapDSC00430.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2018/03/exapDSC00430.jpg HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

exap.com.sa/wp-content/themes/twenty-minutes/images/sprite.gif

212.76.85.18

200 OK

1.2 kB

URL GET HTTP/1.1
exap.com.sa/wp-content/themes/twenty-minutes/images/sprite.gif
IP
212.76.85.18:443
ASN
#41176 Sahara Network

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
GIF image data, version 89a, 400 x 200
Size
1.2 kB (1204 bytes)
Hash
c686c1c6f03e8970dfb2d3070293de5f
2317cee6c974eb3545c0dd83fba2b9fdf7d656ca
fa71c461af8385c0868ded263d10ac36b7e67f97521558aeefcf4217c5d060bf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/sprite.gif HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 16:17:42 GMT
Server: Apache
Last-Modified: Sun, 06 Mar 2022 21:26:06 GMT
Accept-Ranges: bytes
Content-Length: 1204
Cache-Control: max-age=31536000, public
Expires: Sun, 04 May 2025 16:17:42 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif

exap.com.sa/

0.0.0.0

0 B

URL GET
exap.com.sa/
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C600%2C700%2C800%2C900&ver=5.9.9

142.250.74.74

200 OK

8.7 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C600%2C700%2C800%2C900&ver=5.9.9
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://exap.com.sa/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (8956), with no line terminators
Size
8.7 kB (8732 bytes)
Hash
90112b4343fecf953edc3c52aa166eb1
e1959b8d41d4066b9556c71ec47a84155c5f8097
321bb727646d2518ea221eaf5aa01c442e9c2b4384b4cc544ddbabea5942d570

HTTP Headers

GET /css?family=Roboto%3A300%2C400%2C600%2C700%2C800%2C900&ver=5.9.9 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 16:14:51 GMT
date: Sat, 04 May 2024 16:14:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

exap.com.sa/wp-content/themes/twenty-minutes/images/bg-nav-main.png

0.0.0.0

0 B

URL GET
exap.com.sa/wp-content/themes/twenty-minutes/images/bg-nav-main.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://exap.com.sa/
Certificate
IssuercPanel, Inc.
Subjectexap.com.sa
FingerprintE1:A9:C0:57:2D:63:BA:E0:C7:E9:54:51:DA:3A:D7:89:5E:DC:DD:87
ValiditySun, 18 Feb 2024 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/twenty-minutes/images/bg-nav-main.png HTTP/1.1
Host: exap.com.sa
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exap.com.sa/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (48)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2