Report - rtrt.me/

Report Overview

Submitted URL
rtrt.me/
IP
34.216.58.70
ASN
#16509 AMAZON-02
Submitted
2024-04-25 17:45:34
Access
public
Website Title
RTRT.me
Final URL
rtrt.me/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
static.rtrt.me	unknown	2010-06-06	2016-02-03	2023-10-22	882 B	50 kB	54.230.111.51
rtrt.me	928918	2010-06-06	2012-11-14	2024-01-19	5.1 kB	379 kB	34.216.58.70
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-25	1.6 kB	46 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	446 B	6.8 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-25 17:45:07	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-04-25 17:45:20	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-04-25 17:45:24	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2024-04-25 17:45:25	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	static.rtrt.me/_js/ccb-site-head-dddcdfaf4b0a319acbf1c7b7db13818b.js	118 kB	2024-04-25	2024-04-25
Pretty URL static.rtrt.me/_js/ccb-site-head-dddcdfaf4b0a319acbf1c7b7db13818b.js IP 54.230.111.51 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 19:45:35 Last Seen2024-04-25 19:45:35 Times Seen2 Hash 1848aecd6a47fff97e323cee7f52fbd9 0fb770bbc9d20e23d043da91c665567cca5dd0c2 49cb80b19dc7511f3b1635574d0d3a337816cbb21fe6fa2429cb1c3b8958a14e Loading...

HTTP Transactions (18)

	URL	IP	Response	Size
	static.rtrt.me/_css/ccb-site-head-e16ac56fd1dfcea7657137a324749bc4.css	54.230.111.51	200 OK	8.4 kB
URL GET HTTP/2 static.rtrt.me/_css/ccb-site-head-e16ac56fd1dfcea7657137a324749bc4.css IP 54.230.111.51:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type ASCII text, with very long lines (50886), with no line terminators Size 8.4 kB (8360 bytes) Hash 281c31fd03a1764bb1c5c8a6e9ec9575 457e2bcc93baf3ed4775393a0e50482e0a49f312 7f87be92230c6ac9d441a2a7ae7043848ab3fcfac8b8b89be9fcf45fd1b5806c HTTP Headers `GET /_css/ccb-site-head-e16ac56fd1dfcea7657137a324749bc4.css HTTP/1.1 Host: static.rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://rtrt.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css content-length: 8360 last-modified: Thu, 03 Feb 2022 17:59:10 GMT x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 content-encoding: gzip accept-ranges: bytes server: AmazonS3 date: Thu, 25 Apr 2024 03:24:00 GMT etag: "13fa2382fb2f35d7a4b4896e6615f9a8" x-cache: Hit from cloudfront via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: RS6hlYc2JxYQhYDTIxJdFL7rjatzYR7zMpCK_jovCtfUTdv3yRwmfQ== age: 51669 content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: wss: rtrt.me .rtrt.me .youtube.com .googleapis.com .google.com .youtube-nocookie.com .gstatic.com .ytimg.com .vimeo.com livestream.com .livestream.com .twitter.com .twimg.com .facebook.com .facebook.net .api.here.com .mapbox.com .stripe.com https://localhost: https://127.0.0.1:* x-content-type-options: nosniff strict-transport-security: max-age=15552000; includeSubDomains; preload vary: Accept-Encoding, Origin X-Firefox-Spdy: h2

	static.rtrt.me/_js/ccb-site-head-dddcdfaf4b0a319acbf1c7b7db13818b.js	54.230.111.51	200 OK	40 kB
URL GET HTTP/2 static.rtrt.me/_js/ccb-site-head-dddcdfaf4b0a319acbf1c7b7db13818b.js IP 54.230.111.51:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (65469) Size 40 kB (39663 bytes) Hash 1848aecd6a47fff97e323cee7f52fbd9 0fb770bbc9d20e23d043da91c665567cca5dd0c2 49cb80b19dc7511f3b1635574d0d3a337816cbb21fe6fa2429cb1c3b8958a14e HTTP Headers `GET /_js/ccb-site-head-dddcdfaf4b0a319acbf1c7b7db13818b.js HTTP/1.1 Host: static.rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://rtrt.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: application/javascript content-length: 39663 last-modified: Thu, 03 Feb 2022 17:59:13 GMT x-amz-storage-class: STANDARD_IA x-amz-server-side-encryption: AES256 content-encoding: gzip accept-ranges: bytes server: AmazonS3 date: Thu, 25 Apr 2024 17:15:39 GMT etag: "410cb91199e641da63b3e18c098b083d" x-cache: Hit from cloudfront via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: PPeHW8dXf4xVXq4LMF0tZoG1Ln0sQlZiQtT2wrsgTxuX9fgm4Q7yIg== age: 40968 content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: wss: rtrt.me .rtrt.me .youtube.com .googleapis.com .google.com .youtube-nocookie.com .gstatic.com .ytimg.com .vimeo.com livestream.com .livestream.com .twitter.com .twimg.com .facebook.com .facebook.net .api.here.com .mapbox.com .stripe.com https://localhost:* https://127.0.0.1:* x-content-type-options: nosniff strict-transport-security: max-age=15552000; includeSubDomains; preload vary: Accept-Encoding, Origin X-Firefox-Spdy: h2

	rtrt.me/_img/site/radar-shoe.png	34.216.58.70	200 OK	16 kB
URL GET HTTP/2 rtrt.me/_img/site/radar-shoe.png IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type PNG image data, 640 x 680, 8-bit colormap, non-interlaced Size 16 kB (16088 bytes) Hash 57d1ec740637765dc3f07d9bbf678d5e 41b691c561e6053b6337bb5565f5ea313f9cf8a5 118c1038d92e9773619c937b411ec7e69008b52bbf4e2040b050a09200bb305d HTTP Headers `GET /_img/site/radar-shoe.png HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://rtrt.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/png content-length: 16088 last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: "65ebea98-3ed8" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public accept-ranges: bytes X-Firefox-Spdy: h2`

	fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2	216.58.207.227	200 OK	16 kB
URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by https://rtrt.me/ Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0 Size 16 kB (15740 bytes) Hash b9c29351c46f3e8c8631c4002457f48a e57e59c5780995ff2937ab2b511a769212974a87 f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef HTTP Headers `GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://rtrt.me DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 15740 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 25 Apr 2024 02:32:46 GMT expires: Fri, 25 Apr 2025 02:32:46 GMT cache-control: public, max-age=31536000 age: 54742 last-modified: Wed, 11 May 2022 19:24:56 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2	216.58.207.227	200 OK	12 kB
URL GET HTTP/2 fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by https://rtrt.me/ Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT File type Web Open Font Format (Version 2), TrueType, length 12276, version 1.0 Size 12 kB (12276 bytes) Hash 964d69dfad99321462c6e739d5f71072 ab289c874c8a211c17b539f1161aec43e853c4a5 24df88e7e15c4b0b11eccc139235e04384513c803b5221485375b7acee755bac HTTP Headers GET /s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://rtrt.me DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 12276 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 25 Apr 2024 17:31:57 GMT expires: Fri, 25 Apr 2025 17:31:57 GMT cache-control: public, max-age=31536000 age: 791 last-modified: Tue, 15 Aug 2023 18:49:41 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2	216.58.207.227	200 OK	16 kB
URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by https://rtrt.me/ Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0 Size 16 kB (15920 bytes) Hash 3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e HTTP Headers `GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://rtrt.me DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 15920 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 25 Apr 2024 13:20:56 GMT expires: Fri, 25 Apr 2025 13:20:56 GMT cache-control: public, max-age=31536000 age: 15852 last-modified: Wed, 11 May 2022 19:24:45 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	rtrt.me/	34.216.58.70	200 OK	51 kB
URL User Request GET HTTP/2 rtrt.me/ IP 34.216.58.70:443 ASN #16509 AMAZON-02 Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (560) Size 51 kB (50760 bytes) Hash 033c471cf6b2660545a034f331a5fb7a aeb7cd5c9cc1bdc409cc8d592677afd1f7e269d9 4d21887f9ed4ae8fc14dd38d763ba13cd912a020233d2a838fa62a295ad9e977 HTTP Headers `GET / HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding strict-transport-security: max-age=15552000; includeSubDomains; preload; always; x-frame-options: SAMEORIGIN cache-control: private, no-cache, no-store, must-revalidate pragma: no-cache access-control-allow-origin: expires: Sat, 26 Jul 1997 05:00:00 GMT content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: js-frame: blob: wss: rtrt.me .rtrt.me .youtube.com .googleapis.com .google.com .youtube-nocookie.com .gstatic.com .ytimg.com .vimeo.com livestream.com .livestream.com .twitter.com .twimg.com .facebook.com .facebook.net .api.here.com .hereapi.com .mapbox.com .stripe.com https://localhost: https://127.0.0.1:* x-content-type-options: nosniff referrer-policy: strict-origin permissions-policy: interest-cohort=() content-encoding: br X-Firefox-Spdy: h2

	rtrt.me/_img/site/breakaway-512x544.jpg	34.216.58.70	200 OK	53 kB
URL GET HTTP/2 rtrt.me/_img/site/breakaway-512x544.jpg IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 512x544, components 3 Size 53 kB (53357 bytes) Hash 2da22c8c49bbbac70d079d211c1f6883 0ebb6373b4630f4f3eb38f4114a757a2f029843b bd4971351121eeba7d18cae3cef06dfbc978649df01b79ab0acda82bc26c45cf HTTP Headers `GET /_img/site/breakaway-512x544.jpg HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://rtrt.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/jpeg content-length: 53357 last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: "65ebea98-d06d" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public accept-ranges: bytes X-Firefox-Spdy: h2`

	rtrt.me/_img/site/banner.jpg	34.216.58.70	200 OK	167 kB
URL GET HTTP/2 rtrt.me/_img/site/banner.jpg IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2048x1399, components 3 Size 167 kB (167356 bytes) Hash 18886f32b54cdf5b74e23a319aa7659e 2431800189e6df752d2c06462abf5601f048ea36 cf047447e769468071efa2d3a6f45168200ec142a8947b3f17927c47da5f234b HTTP Headers `GET /_img/site/banner.jpg HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://static.rtrt.me/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/jpeg content-length: 167356 last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: "65ebea98-28dbc" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public accept-ranges: bytes X-Firefox-Spdy: h2`

	rtrt.me/favicon.ico	34.216.58.70	200 OK	11 kB
URL GET HTTP/2 rtrt.me/favicon.ico IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel Size 11 kB (10668 bytes) Hash f982e9069e3df095dbfca5987fb9e596 a838dc3a14498ba1a6563c587bd55d1e5a144413 1b4da61dc35191b446ad5042c062b233e598c0e5d4a94dfe580f1584e35b78b4 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://rtrt.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:09 GMT content-type: image/x-icon last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: W/"65ebea98-209c" expires: Sat, 25 May 2024 17:45:09 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public content-encoding: br X-Firefox-Spdy: h2`

	fonts.googleapis.com/css?family=Roboto:300,500\|Oswald:400	142.250.74.106	200 OK	6.1 kB
URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,500\|Oswald:400 IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by https://rtrt.me/ Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT File type ASCII text, with very long lines (6272), with no line terminators Size 6.1 kB (6120 bytes) Hash 27fb2759d7c548cf374611d1290dd904 7dacb1b115097c2d0691ff7e912745a265b94523 7fc4d98b71d65ea389a623c305007f43f6ec2781a5eba55218708dc9430577ae HTTP Headers `GET /css?family=Roboto:300,500\|Oswald:400 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://static.rtrt.me/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 25 Apr 2024 17:45:08 GMT date: Thu, 25 Apr 2024 17:45:08 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	rtrt.me/_img/site/menu-alt.svg	34.216.58.70	200 OK	412 B
URL GET HTTP/2 rtrt.me/_img/site/menu-alt.svg IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image Size 412 B (412 bytes) Hash f851cb2585f7019312b61538043373e8 efcc8c512d512c9c131e19ca28b6b17fa677a507 97878c6df24357f74f095a1ebfeb3dc98101050f43adf3962134853c3aa9ebec HTTP Headers `GET /_img/site/menu-alt.svg HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://static.rtrt.me/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/svg+xml last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: W/"65ebea98-19c" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public content-encoding: br X-Firefox-Spdy: h2`

	rtrt.me/_css/fontello.css	34.216.58.70	200 OK	21 kB
URL GET HTTP/2 rtrt.me/_css/fontello.css IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type Size 21 kB (21061 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /_css/fontello.css HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://rtrt.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: text/css last-modified: Mon, 22 Apr 2024 13:24:42 GMT vary: Accept-Encoding etag: W/"6626651a-5245" content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: js-frame: blob: wss: rtrt.me .rtrt.me .youtube.com .googleapis.com .google.com .youtube-nocookie.com .gstatic.com .ytimg.com .vimeo.com livestream.com .livestream.com .twitter.com .twimg.com .facebook.com .facebook.net .api.here.com .hereapi.com .mapbox.com .stripe.com https://localhost:* https://127.0.0.1:* x-content-type-options: nosniff referrer-policy: strict-origin permissions-policy: interest-cohort=() content-encoding: br X-Firefox-Spdy: h2

	rtrt.me/_img/site/mobile-app.jpg	34.216.58.70	200 OK	48 kB
URL GET HTTP/2 rtrt.me/_img/site/mobile-app.jpg IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 512x544, components 3 Size 48 kB (47810 bytes) Hash 1240b3697914e4daccd9925f2a521a8e 1554f16d09bedbd8d086d84b86bbf3bc08f50499 dc8a60b38f340020c17f262d289cbc008e123db163ba09dce68e2213da549fcb HTTP Headers `GET /_img/site/mobile-app.jpg HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://rtrt.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/jpeg content-length: 47810 last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: "65ebea98-bac2" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public accept-ranges: bytes X-Firefox-Spdy: h2`

	rtrt.me/_img/site/close.svg	34.216.58.70	200 OK	372 B
URL GET HTTP/2 rtrt.me/_img/site/close.svg IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image Size 372 B (372 bytes) Hash b0f68edc89a123baae58fd3d3cf9007f 6b707e9d37f6df7429a29c79b80ac7515aa383ec 8d5fe51540d67a9197ac9cdccfe9275ee2c223cde9c848b5bc5f47f95e8ca59a HTTP Headers `GET /_img/site/close.svg HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://static.rtrt.me/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/svg+xml last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: W/"65ebea98-174" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public content-encoding: br X-Firefox-Spdy: h2`

	rtrt.me/_img/site/arrow.svg	34.216.58.70	200 OK	406 B
URL GET HTTP/2 rtrt.me/_img/site/arrow.svg IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image Size 406 B (406 bytes) Hash 7f70ab37a6fad0704b407c8cd813f8be 1bf55f49b3edb9525ff4f5fa749f89a4c6c6e92a fa71897cad73c64c3180a8a917e20b23dae4abeccae10936e909c5a5f285df21 HTTP Headers `GET /_img/site/arrow.svg HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://static.rtrt.me/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/svg+xml last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: W/"65ebea98-196" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public content-encoding: br X-Firefox-Spdy: h2`

	rtrt.me/_img/site/rtrt.me_logo_white.svg	34.216.58.70	200 OK	5.0 kB
URL GET HTTP/2 rtrt.me/_img/site/rtrt.me_logo_white.svg IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image Size 5.0 kB (4976 bytes) Hash ee7f58085e2ce38de140f5ab813462f8 882c1652ac83dd312adb8127077de694cb2c3909 369ccbbec905335fc8edff1e2b2c2be2050e084e5a16eaba17be0cb432a7294d HTTP Headers `GET /_img/site/rtrt.me_logo_white.svg HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://rtrt.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/svg+xml last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: W/"65ebea98-1370" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public content-encoding: br X-Firefox-Spdy: h2`

	rtrt.me/_img/site/menu.svg	34.216.58.70	200 OK	412 B
URL GET HTTP/2 rtrt.me/_img/site/menu.svg IP 34.216.58.70:443 ASN #16509 AMAZON-02 Requested by https://rtrt.me/ Certificate IssuerSectigo Limited Subject.rtrt.me Fingerprint56:82:30:D4:4A:A4:AF:B1:21:C3:08:BD:28:0A:CE:1C:B1:4A:02:F0 ValidityTue, 24 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT File type SVG Scalable Vector Graphics image Size 412 B (412 bytes) Hash c65172875ff5b146cb5170482178c208 bc877dfdee7d5aa1411ec1b348421351ed29f1cc 7cbd744987512a16f22cfb95c7ebb1f55bc1c38c6586c9367ec0e2851bc856e1 HTTP Headers `GET /_img/site/menu.svg HTTP/1.1 Host: rtrt.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://static.rtrt.me/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Thu, 25 Apr 2024 17:45:08 GMT content-type: image/svg+xml last-modified: Sat, 09 Mar 2024 04:50:32 GMT vary: Accept-Encoding etag: W/"65ebea98-19c" expires: Sat, 25 May 2024 17:45:08 GMT pragma: public access-control-allow-origin: * cache-control: max-age=2592000, public content-encoding: br X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2