| mail.airupsaudiarabia.top/ |  196.247.231.13 | 200 OK | 44 kB |
URL User Request GET HTTP/1.1mail.airupsaudiarabia.top/ IP196.247.231.13:443 ASN#48950 Global Colocation Limited
CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (4947), with CRLF, LF line terminators Hash6678ccddb7f9e92ed5125bfef0e5df39 92fbfbea8243e3194cc5a47e3896344bd8c8d40d 887846579ac59335edc39a0db3116f2e48d770ac8ec396ca8421c9bbfdca2b27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: mail.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:03 GMT
Server: Apache
Set-Cookie: cookie_test=please_accept_for_session; expires=Sat, 08-Jun-2024 01:59:03 GMT; Max-Age=2592000; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_categories_menu.css | 196.247.231.13 | 200 OK | 2.3 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_categories_menu.css IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hash77ac4aa1fc1b80426aa7ad8033dcb40c fa30830acbbe5458aa445be97ecd00be2e1d60fa 93a60cfc2924d4c2d193bd12bd2ccd8d54b433b975bf842d9c2547a95efabdf0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/stylesheet_categories_menu.css HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 2341
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_header_menu.css | 196.247.231.13 | 200 OK | 3.3 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_header_menu.css IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash7758e0b01b55ac8f2c96d678f7e46704 aad45a5743fae525e0eeed00cc686914d4a0fe5d 8c9a3b1ec10ac6840b74cd1661ca85c05c109ea02f805a1f9616fa88faa9946a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/stylesheet_header_menu.css HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 3327
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/style.css | 196.247.231.13 | 200 OK | 25 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/style.css IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (1470) Hash0269f25a408028ad7d1fa88f3fc07c32 bdf70b66b3a9a09ed1b009ccd694b89574646d9c 4225c3ed92bfc238dee21c99754cc70c6be9605fd4613f706c9ea927b00606d8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/style.css HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 24572
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet1.css | 196.247.231.13 | 200 OK | 18 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet1.css IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (876) Hashf7f4265824ec4f2efa9a3a0bfebf570e 516401490ae768d197b7d5cea45f01becb984ca1 318d50438056a317ca2cc1fc2a56da45f77eaeff450b857681103d5d2f15fbbc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/stylesheet1.css HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 17947
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_jquery.mmenu.all.css | 196.247.231.13 | 200 OK | 11 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_jquery.mmenu.all.css IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hash71677734b09ae3c532865f174cb97b91 6570de5d3125b9b6c16eab8e3361f14c1dc777b9 fd94336ca97120bcdacf1906a59e8aacdc8654f45e01a1edfe82a0b57e31ddb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/stylesheet_jquery.mmenu.all.css HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 11016
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_lightbox.css | 196.247.231.13 | 200 OK | 2.4 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_lightbox.css IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash4156c4f3b3e8eb75b3f0ffc31b9b3c48 d2e2362789756890af0cd16178e7dc00b66a2032 9b1778227a7dc12daa8be9254e2f90de342d38c9c26140ffd85c82de5a1f70cd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/stylesheet_lightbox.css HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 2370
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_slick.css | 196.247.231.13 | 200 OK | 4.3 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_slick.css IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash4e60c71ca8be3e6e11e156a419d5f142 8a2eda0f635d89e5840e46b911bf8e0875958b98 999320fc793ef1e76e1616934615bfcbd54b2476fb560d3b0d03ab58422d1691
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/stylesheet_slick.css HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 4252
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_jquery_kinSlideshow.js | 196.247.231.13 | 200 OK | 9.7 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_jquery_kinSlideshow.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ISO-8859 text, with very long lines (8513), with CRLF line terminators Hash08a763acea723e1d88cbce2f1c9b3317 ea20687e4f773bf67907b0edb029ebafbc110fc1 c17caeebb94b90d9aae3dc3142cda848f67e8b9425a6d25e434af74d2978aba4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/jscript/jscript_jquery_kinSlideshow.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 9674
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_1.11.1.min.js | 196.247.231.13 | 200 OK | 86 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_1.11.1.min.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32069) Hash93c4b563622d278b1065690a3d93709e f00d128cf399f17322b1d4ee02fa8cd892e081bd 601c06474a16936670a0477da2a777ccfca3301e3857204ec9b55dfa2c45287e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/jscript/jscript_1.11.1.min.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 85588
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_all.css | 196.247.231.13 | 200 OK | 116 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_all.css IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Size116 kB (116319 bytes) Hash6231558c44c717951d48df5387cb969e 1e6bd4ac504b4c8e3b5f4ba79a0fdb7db1606fba 58dd0796c00be39bb757830de49edb767902d12c902b93cbadbbf1733ad2f1a1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/stylesheet_all.css HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 116319
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_lightbox.js | 196.247.231.13 | 200 OK | 20 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_lightbox.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ISO-8859 text, with very long lines (797), with CRLF line terminators Hash3d79a6c53803295ef00c052546d76500 f1481ce4f6f2aaefd7a5b6af19be42c7b1606dcc 93acbf26510bd264764a43d220a984b78270cd37536e0aa6bf8deb1fb28338f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/jscript/jscript_lightbox.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 20417
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_jquery.js | 196.247.231.13 | 200 OK | 86 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_jquery.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65168) Hashe85aed5c30d734f1e30646e030d7a817 b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad 8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/jscript/jscript_jquery.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 85925
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/js/jquery-1.7.2.min.js | 196.247.231.13 | 200 OK | 158 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/jquery-1.7.2.min.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (749) Size158 kB (157648 bytes) Hash6f3d61313966fcd43b0334aa5fad66b9 22b2b120da5b405a348e4abdd865c496625d87ab f2374ffefd903e49bfa1772a042c1b593e52cd862e6553f538128ab4a58fe5b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery-1.7.2.min.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 157648
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_2.2.0.min.js | 196.247.231.13 | 200 OK | 143 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_2.2.0.min.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (522) Size143 kB (142713 bytes) Hash674b896ffae27a70571b1fc5bd65919d 63c8c73c7e5ba15aa940aba8f1c43b6150a9f941 a7c32e459eae73c136b6eb07711a69b2cc7b557c085fc232dd42db7fb50e9374
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/jscript/jscript_2.2.0.min.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 142713
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/js/jquery.mmenu.min.all.js | 196.247.231.13 | 200 OK | 39 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/jquery.mmenu.min.all.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (401) Hash5b2edbe2f95659b625a0b919ebf98286 1c5722696e849953fccdf41e0f0a01e3f37a80da a83065a45e7248c11ae228cab8da5d6bfcfa4791be255e2a78e81dbc456a4637
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.mmenu.min.all.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 38800
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_slick.js | 196.247.231.13 | 200 OK | 89 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/jscript/jscript_slick.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash5f8f4aed010e1afe499184d8197309f9 097f6a1b4f115e9b6ebefa70d76d830733bcc9ba 0aaa4cf927b0e3631cffbe62f6786810aa65348483cd950e49f634a0881b16b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/jscript/jscript_slick.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 88955
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/js/modernizr.custom.js | 196.247.231.13 | 200 OK | 7.7 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/modernizr.custom.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7558) Hash02009db489ef4805210aafa21a6b8276 d3c333feb80a2e4045a6a353838171aaee6b878d 0cdb507e0527a90fb5b98b238843f6d2be8ded6d71f40458ff8e75b731405cad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/modernizr.custom.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 7671
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/js/uisearch.js | 196.247.231.13 | 200 OK | 6.0 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/uisearch.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2051), with CRLF line terminators Hash028b2e146eff5f378e21e7fe48131468 af6b54a64da88204e2d2c527c1a941dc17e790e3 86f2854513305e334b86057c752cf3821b72156d1f6aa0fd8132c57bec74d285
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/uisearch.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 6033
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/js/classie.js | 196.247.231.13 | 200 OK | 1.8 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/classie.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hasha9df1cfb76ce492afd9d13f3320272fd 782b9564f015a2ec7bdf9c89e238fab9b44bd587 717ad22aa426d024f6c9942949b49d9a20f4239b94dfee34f94c96d8778f2144
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/classie.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 1835
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/js/layer.js | 196.247.231.13 | 200 OK | 38 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/js/layer.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (984) Hashf679a433cba7ebde1bbe121fffd8c60c 4d2159e06a5e80328e0ba9554e02fb2422ed0b36 60c2f96124f2970788057614a90229fe470b13f5420e5794d90d73c9e08ce2f0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/js/layer.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 37747
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/js/re_login.js | 196.247.231.13 | 200 OK | 11 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/js/re_login.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hash7bd679d5c675a092b612e5b4b7a56dbd 6e62d5cf6e15493d5d34173348f255dfe6e9dac5 ca6d5aa9dc260b677698d2eebce1167f1beee6d848768c476b7d7ba25fbadb28
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/js/re_login.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 10927
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/js/slick_new.js | 196.247.231.13 | 200 OK | 1.9 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/slick_new.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash37192079541f105b380c4d17cb5b1a45 4cf67b7d006b630a2e063acb52740d1b8cfa08c4 faffeb52bd73185450a0e8bad135ac6209a599c01d2247636e29fe4d640557cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/slick_new.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 1859
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/js/slick.js | 196.247.231.13 | 200 OK | 87 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/slick.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashb56bbf351b271132a8fdab2ed21c82ab 8274eb6924ead2f5d8616fd162ef24bebd3c0b21 c37611fa51880e07f6a12795e03e5cd3eb4699b82f69be67036f735ffb5ecb60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/slick.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 87046
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/js/jquery.jxa.js | 196.247.231.13 | 200 OK | 2.7 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/jquery.jxa.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashca643ec9e974f881e4c904db35bc40c7 759df5ef14b4e2c0c46770b5e408f600972294ca a1e3d7d98e8e9886c1181e7d53ddd4a6ff424a0fff640d1dc4b06757f096e0e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.jxa.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 2658
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/images/hoverimg/20240328923048609.png | 196.247.231.13 | 200 OK | 2.4 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/hoverimg/20240328923048609.png IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typePNG image data, 204 x 192, 8-bit colormap, non-interlaced Hashe79ebe96e06435c819c6a5789beea480 fd8fab5ffe9655987959119bbbefc462ffa24d58 e131c5cc656ba75f33418d9e73ce160afa6e7f31fb29c602e7de2f1142a34f74
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hoverimg/20240328923048609.png HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 2377
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/images/flag/SAU.png | 196.247.231.13 | 200 OK | 610 B |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/images/flag/SAU.png IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typePNG image data, 27 x 17, 8-bit/color RGB, non-interlaced Hashe6b8ebd3459f176743cf958369dd1474 95f7eb90115cc85a720c4b5adaa90fd9fac1e322 41913fd7790c96b12ea076bd009a204f87a9a93a4b3ab4685d0fae5c9146bde5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/images/flag/SAU.png HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 610
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| www.airupsaudiarabia.top/images/hoverimg/202404011546142140.jpg | 196.247.231.13 | 200 OK | 146 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/hoverimg/202404011546142140.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1440x450, components 3 Size146 kB (146507 bytes) Hash48ce357639cafe5b2bdf7fe8724e20b7 23c50adecb4a37088cb039740d90ec909e407384 502ea253f779aa3c84e4a1bcb9297d04aa2d03061184fdf7e028b44d8e9c7b20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hoverimg/202404011546142140.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 146507
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/js/jquery.jxb.js | 196.247.231.13 | 200 OK | 158 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/jquery.jxb.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (749) Size158 kB (157648 bytes) Hash6f3d61313966fcd43b0334aa5fad66b9 22b2b120da5b405a348e4abdd865c496625d87ab f2374ffefd903e49bfa1772a042c1b593e52cd862e6553f538128ab4a58fe5b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.jxb.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 157648
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/images/60721203336309/Air_Up_Watermelon_Flavoured_Pods__t2TA2Z_15.jpg | 196.247.231.13 | 200 OK | 15 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Air_Up_Watermelon_Flavoured_Pods__t2TA2Z_15.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x224, components 3 Hashf598881da045b496a31c497a06fc9a85 b33aab56705dc4b116c98e7be7b6a3460d377d34 8d167d60f30d1dbf8fe63dccff1c01511e05edd01b1efe4e7d8fcf9e52ea27e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Air_Up_Watermelon_Flavoured_Pods__t2TA2Z_15.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 14759
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/js/jquery-1.7.2.min.js | 196.247.231.13 | 200 OK | 158 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/js/jquery-1.7.2.min.js IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (749) Size158 kB (157648 bytes) Hash6f3d61313966fcd43b0334aa5fad66b9 22b2b120da5b405a348e4abdd865c496625d87ab f2374ffefd903e49bfa1772a042c1b593e52cd862e6553f538128ab4a58fe5b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery-1.7.2.min.js HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 157648
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/javascript
|
|
| www.airupsaudiarabia.top/images/hoverimg/202403281440371647.jpg | 196.247.231.13 | 200 OK | 128 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/hoverimg/202403281440371647.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, height=1931, bps=170, PhotometricInterpretation=RGB, orientation=upper-left, width=2583], progressive, precision 8, 2583x1931, components 3 Size128 kB (128390 bytes) Hash8759a922393f1dcdf032b214eee8403d d01190e1e2029cf554530d32131eb350e31e7380 727abcd9bea61dbfb25a21e24f3c759e57c57639ec80119e918d505e7371c618
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hoverimg/202403281440371647.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 128390
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/hoverimg/202404011546344354.jpg | 196.247.231.13 | 200 OK | 146 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/hoverimg/202404011546344354.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1440x450, components 3 Size146 kB (146507 bytes) Hash48ce357639cafe5b2bdf7fe8724e20b7 23c50adecb4a37088cb039740d90ec909e407384 502ea253f779aa3c84e4a1bcb9297d04aa2d03061184fdf7e028b44d8e9c7b20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hoverimg/202404011546344354.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 146507
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/hoverimg/202403281436541387.jpg | 196.247.231.13 | 200 OK | 87 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/hoverimg/202403281436541387.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, height=1931, bps=170, PhotometricInterpretation=RGB, orientation=upper-left, width=2583], progressive, precision 8, 2583x1931, components 3 Hash99374ced9e463993a85db337305c4e1e e75940ce2d5d646aa6835cd9396f8d3cd92cd724 5cb684279d58694c692cbcf96a34cf90c01f3f2863689e76368a46c0dcd60ca3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hoverimg/202403281436541387.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 86996
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Deep_Blue_Air_Up_600_ml__3_Pods_Gen_2_Bo_5.jpg | 196.247.231.13 | 200 OK | 16 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Deep_Blue_Air_Up_600_ml__3_Pods_Gen_2_Bo_5.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hash4f69cc27613e4c196ec2847354486880 9c52e47784a3e7f576668beed702df6c2c260a2d 41704fc0f984260cf92783611f8eda96b2ee9526d7531c09b4d77e9d69e362e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Deep_Blue_Air_Up_600_ml__3_Pods_Gen_2_Bo_5.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 15540
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Blue_Air_Up_650_ml__3_Pods_Classic_Bottl_11.jpg | 196.247.231.13 | 200 OK | 9.8 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Blue_Air_Up_650_ml__3_Pods_Classic_Bottl_11.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hashd351b8abfcafba781be162d5e28f4240 8c8127a6e45fdec1290fe03d200a0fbe774b3aba 6a580e1f7e1befaa4a9087e5d58747f260eeb3de01600a60dcd0fc17ad741099
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Blue_Air_Up_650_ml__3_Pods_Classic_Bottl_11.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 9847
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Brush_Air_Up_Customise_Cleaning_Brush__Q_39.jpg | 196.247.231.13 | 200 OK | 3.1 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Brush_Air_Up_Customise_Cleaning_Brush__Q_39.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x224, components 3 Hashb02c8b73f7846dd5b946a6bd3c49c177 b32454de05f81e786cb4f2785e9fcb9120ece491 a3142595448e28c21a73d4ea3a5e6c13ad77bed61e7a5d972619175ffce4d2b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Brush_Air_Up_Customise_Cleaning_Brush__Q_39.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 3098
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Silver_Air_Up_850_ml__3_Pods_Steel_Bottl_1.jpg | 196.247.231.13 | 200 OK | 9.9 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Silver_Air_Up_850_ml__3_Pods_Steel_Bottl_1.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hash7a667ce4d63d6025c13346cb3da93963 79b027859964a6e7316d450415953a7fad751369 371be5ca18a9c67efb5e42059519d4b03c35c61b139f0757823d247822a638cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Silver_Air_Up_850_ml__3_Pods_Steel_Bottl_1.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 9925
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Green_Air_Up_Classic_Bottles_Spare_Parts_52.jpg | 196.247.231.13 | 200 OK | 5.4 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Green_Air_Up_Classic_Bottles_Spare_Parts_52.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x224, components 3 Hashe13f3a57c1587b1a8b22bad64ccdbb75 5067d78df8436d72bae42189cf4c084c3c1c073f f07b30e698ece1f91ba5ed4aaf7703c8c0473236b2d26fe7671f1cd171e0d7d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Green_Air_Up_Classic_Bottles_Spare_Parts_52.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 5413
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/js/theme/default/layer.css?v=3.5.0 | 196.247.231.13 | 200 OK | 17 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/js/theme/default/layer.css?v=3.5.0 IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash94ae7c3e6834f7e25a85ff97c2d9cd88 953ea6a358fdbd59f99eef88c93f467a749d27e4 38d12ae4119d3c7ae42cf9ffb240d53b351716c8f44ae4b1acb0f4c15b003eb9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/js/theme/default/layer.css?v=3.5.0 HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:23 GMT
Accept-Ranges: bytes
Content-Length: 17360
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
|
|
| www.airupsaudiarabia.top/images/60721203336309/Purple_Lavender_Air_Up_1L__3_Pods_Gen_2__8.jpg | 196.247.231.13 | 200 OK | 24 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Purple_Lavender_Air_Up_1L__3_Pods_Gen_2__8.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hash03649417d517dc7a111b6087fd8319a0 fbb0f5edb98a7291f3f6061344da32d5b9a5b2bf 2683ad9bb2442b3a8b6aaed63df3f8cf40738460a6dae337414e0a8c8d644c72
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Purple_Lavender_Air_Up_1L__3_Pods_Gen_2__8.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 24466
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Deep_Blue_Air_Up_1L__3_Pods_Gen_2_Bottle_10.jpg | 196.247.231.13 | 200 OK | 16 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Deep_Blue_Air_Up_1L__3_Pods_Gen_2_Bottle_10.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hashb9d6720e66b05e9821c044ae5b60e5dc 30931929d83983ee98305280e9242a0b7784c072 1da7b03ae08cbf637d9e619a5c49b894daf46f23cc1d3cbf7d8d1d2916e89451
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Deep_Blue_Air_Up_1L__3_Pods_Gen_2_Bottle_10.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 15741
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Pink_Air_Up_Cherry_Kola_Flavoured_Pods___36.jpg | 196.247.231.13 | 200 OK | 18 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Pink_Air_Up_Cherry_Kola_Flavoured_Pods___36.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x224, components 3 Hash66d085bea0ea18524b7f2aaf303d5ee7 633947924324d83e3740a6a47094cb8a2c31f6f1 98049246aa3135a0768ef646599cc56863e2969d032fce26d17fdb7e194163d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Pink_Air_Up_Cherry_Kola_Flavoured_Pods___36.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 17517
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Royal_Blue_Air_Up_Classic_Bottles_Spare__49.jpg | 196.247.231.13 | 200 OK | 5.3 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Royal_Blue_Air_Up_Classic_Bottles_Spare__49.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x224, components 3 Hashcf0e559df45c389dceb2e7896b5efbea 9f8fd5d9297ae6a30cd64bf17c3669da5413ab31 e5268c0445fb750c4c32319d6a0d305103feb67dd7f6d60959c2af88985a70d3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Royal_Blue_Air_Up_Classic_Bottles_Spare__49.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 5339
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Air_Up_Kola_Flavoured_Pods__G05ZlVH1MPq_30.jpg | 196.247.231.13 | 200 OK | 16 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Air_Up_Kola_Flavoured_Pods__G05ZlVH1MPq_30.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x224, components 3 Hashed75b39fbdb4e086f6088ccce7827c7e 6509e8fce6a2cfbc11bd23f81c1843c1dfd17a9a 422b877184edf3ec63b9cb450afc813437a625dbcb31df7faf7166c3fbf8d012
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Air_Up_Kola_Flavoured_Pods__G05ZlVH1MPq_30.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 16105
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Green_Air_Up_Customise_Mouthpiece__7xKi6_42.jpg | 196.247.231.13 | 200 OK | 4.6 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Green_Air_Up_Customise_Mouthpiece__7xKi6_42.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x224, components 3 Hashfb96e96e757d22983cdf1f57a97c6280 2fa02324c5990aeedc0adb4fb56b3bc9896b857c 86baed1755acf23baf981f57be5a4aa2f71e77863e243519560eddb70fdfd619
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Green_Air_Up_Customise_Mouthpiece__7xKi6_42.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 4611
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/hoverimg/20240328942227664.jpg | 196.247.231.13 | 200 OK | 91 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/hoverimg/20240328942227664.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, height=1931, bps=170, PhotometricInterpretation=RGB, orientation=upper-left, width=2583], progressive, precision 8, 2583x1931, components 3 Hash5ed13ff007d4848ab8ee76d436721091 7747c74d0dab1abf8e4e82b27c2425598f5aa00a 654f79e20e1aca4582c08128d649ba8ad946263c2dad273c056d11b80da4696a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hoverimg/20240328942227664.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 91241
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Air_Up_Wild_Berry_Flavoured_Pods__UjYXbs_17.jpg | 196.247.231.13 | 200 OK | 16 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Air_Up_Wild_Berry_Flavoured_Pods__UjYXbs_17.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x224, components 3 Hash6025928980f4b11849e925d072dd839a 982a77c75d2d736b7331a9573c08cc35b6d1a9ca 7ec75b93c3b79c881bcbaeb4c198bda4366174c37399b12d623697eda8cfeee5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Air_Up_Wild_Berry_Flavoured_Pods__UjYXbs_17.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 16537
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/hoverimg/20240328942225623.jpg | 196.247.231.13 | 200 OK | 139 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/hoverimg/20240328942225623.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=13, height=1931, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2583], baseline, precision 8, 2583x1931, components 3 Size139 kB (139002 bytes) Hashe5baed77d7878b3fccfebd157f084165 d68f6382ed319f60331f1b5acc6854142228cdd5 b7e70219be7a6efbb0a02cb8a3d2ea93fe13dea15893f9fd9430b67e8aeef402
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hoverimg/20240328942225623.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 139002
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Purple_Lavender_Air_Up_600_ml__3_Pods_Ge_9.jpg | 196.247.231.13 | 200 OK | 16 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Purple_Lavender_Air_Up_600_ml__3_Pods_Ge_9.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hash9dfe4efd362c52d422437e767946b885 018c8e7d70a887a4d15336f4631037490f92b6ae a32b58dcbf6e49de81e5c9225b3a6b2da077942ea1181b9a09c70dfc1b5a21f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Purple_Lavender_Air_Up_600_ml__3_Pods_Ge_9.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 15516
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Air_Up_Virgin_Mojito_Flavoured_Pods__MPt_16.jpg | 196.247.231.13 | 200 OK | 13 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Air_Up_Virgin_Mojito_Flavoured_Pods__MPt_16.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hash00b774990f6e3380ffbf2a7a71f3aa01 4f34e77c9d427f82ec0b6296ae9fd23f3a0a86ee 92b0588d1148e0fa256b32a1fd37b1145a76a807335c6a724f280128e5b14b5f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Air_Up_Virgin_Mojito_Flavoured_Pods__MPt_16.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 13339
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Orange_Air_Up_650_ml__3_Pods_Classic_Bot_14.jpg | 196.247.231.13 | 200 OK | 8.8 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Orange_Air_Up_650_ml__3_Pods_Classic_Bot_14.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hash8d5a30e9cdb0618f256e77ebc9d34778 f95e30bcd50c8ee30c9fbb21a6a9118c3d926b77 47beeeef583481d20a16f998f4bb50cfd30e33db9f5908fe42271dce30738435
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Orange_Air_Up_650_ml__3_Pods_Classic_Bot_14.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 8800
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.airupsaudiarabia.top/images/60721203336309/Chocolate__Orange_Air_Up_ChocolateOrange_34.jpg | 196.247.231.13 | 200 OK | 16 kB |
URL GET HTTP/1.1www.airupsaudiarabia.top/images/60721203336309/Chocolate__Orange_Air_Up_ChocolateOrange_34.jpg IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x225, components 3 Hashf99ff4123da61a56e73c36568df8c43f 7ea494265dc69cfe173abc1b3093bf8afd694cd8 d1894a1d52c0f06a6443b73001b0aa8e3080f58fccf0bab30ebc49fd7d183bfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/60721203336309/Chocolate__Orange_Air_Up_ChocolateOrange_34.jpg HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:20 GMT
Accept-Ranges: bytes
Content-Length: 15629
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 |  216.58.207.195 | 200 OK | 128 kB |
URL GET HTTP/2fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 IP216.58.207.195:443
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 128352, version 1.0 Size128 kB (128352 bytes) Hash53436aca8627a49f4deaaa44dc9e3c05 0bc0c675480d94ec7e8609dda6227f88c5d08d2c 8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mail.airupsaudiarabia.top
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:55:24 GMT
expires: Fri, 09 May 2025 01:55:24 GMT
cache-control: public, max-age=31536000
age: 220
last-modified: Mon, 08 Apr 2024 19:04:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| mail.airupsaudiarabia.top/favicon.ico | 196.247.231.13 | 200 OK | 4.3 kB |
URL GET HTTP/1.1mail.airupsaudiarabia.top/favicon.ico IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hashd0e79c5542d177f57cdb15190bcd6f76 3d99acc4d2a5bd31ec471fdbc0e2e9b4fe4322db f85a725d41e4db3ade7782aada8ab64812024152bc25a2e8a8dc7e73e6904184
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: mail.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Cookie: cookie_test=please_accept_for_session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Last-Modified: Fri, 26 Apr 2024 06:46:21 GMT
Accept-Ranges: bytes
Content-Length: 4286
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/x-icon
|
|
| www.airupsaudiarabia.top/api/country | 196.247.231.13 | 200 OK | 0 B |
URL OPTIONS HTTP/1.1www.airupsaudiarabia.top/api/country IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /api/country HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-requested-with
Referer: https://mail.airupsaudiarabia.top/
Origin: https://mail.airupsaudiarabia.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Set-Cookie: cookie_test=please_accept_for_session; expires=Sat, 08-Jun-2024 01:59:04 GMT; Max-Age=2592000; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json
|
|
| www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/ajax-loader.gif | 196.247.231.13 | 404 Not Found | 0 B |
URL GET HTTP/1.1www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/ajax-loader.gif IP196.247.231.13:443 ASN#48950 Global Colocation Limited
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuercPanel, Inc. Subjectairupsaudiarabia.top Fingerprint00:E8:4C:32:0A:64:76:31:6D:DB:3F:FB:75:BF:97:65:05:AD:01:0F ValidityFri, 26 Apr 2024 00:00:00 GMT - Thu, 25 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/airupsaudiarabia/css/ajax-loader.gif HTTP/1.1
Host: www.airupsaudiarabia.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.airupsaudiarabia.top/includes/templates/airupsaudiarabia/css/stylesheet_slick.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 09 May 2024 01:59:04 GMT
Server: Apache
Set-Cookie: cookie_test=please_accept_for_session; expires=Sat, 08-Jun-2024 01:59:04 GMT; Max-Age=2592000; path=/
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.106 | 200 OK | 565 B |
URL GET HTTP/2fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.106:443
Requested byhttps://mail.airupsaudiarabia.top/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (588), with no line terminators Hash959a533a3dc02649e0cc3f8f67d942af 34db49ff64aed8b51beaba5b9928ad504a4df335 24864ed3ee6fab66640980d4c24640e579e5583764a8ee8c4f09decf27977247
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mail.airupsaudiarabia.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 May 2024 01:59:03 GMT
date: Thu, 09 May 2024 01:59:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|