Report - 45.88.90.29

Report Overview

Submitted URL
45.88.90.29
IP
45.88.90.29
ASN
#0
Submitted
2024-05-04 13:34:35
Access
public
Website Title
Universe 0.5
Final URL
45.88.90.29/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
45.88.90.29	unknown	unknown	2022-11-29	2022-11-29	2.0 kB	3.5 MB	45.88.90.29
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-04	482 B	1.8 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-04	516 B	49 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	45.88.90.29	Sinkholed
2024-05-04	medium	45.88.90.29	Sinkholed
2024-05-04	medium	45.88.90.29	Sinkholed
2024-05-04	medium	45.88.90.29	Sinkholed
2024-05-04	medium	45.88.90.29	Sinkholed
2024-05-04	medium	45.88.90.29	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	45.88.90.29/pathseg.js	60 kB	2023-03-11	2024-05-14
Pretty URL 45.88.90.29/pathseg.js IP 45.88.90.29 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 18:58:30 Last Seen2024-05-14 10:23:23 Times Seen63 Hash 3d879375a09eccdd15c52636d69377b5 248a973e42a5141c8fbea07a1bc94c7beddaa543 d619501ad9cff333c694c9aca3c29eaab5cd24272ebeab499d04ecb82e609640 Loading...

	45.88.90.29/static/js/main.b1bbe02b.js	2.8 MB	2024-05-04	2024-05-14
Pretty URL 45.88.90.29/static/js/main.b1bbe02b.js IP 45.88.90.29 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 15:34:42 Last Seen2024-05-14 10:23:23 Times Seen4 Hash 9628097be34eb0ac4f3f93717825bf19 6b623ed6a2759468c00d87f78cb9c22734c53eb1 f76160a8d6ac4a9851b7c8e1f6a38f0309f37f193552898ba367c297df970170 Loading...

HTTP Transactions (8)

URL IP Response Size

45.88.90.29/

45.88.90.29

538 B

URL User Request GET
45.88.90.29/
IP
45.88.90.29:0
ASN
#0

File type
HTML document, ASCII text, with very long lines (538), with no line terminators
Size
538 B (538 bytes)
Hash
901ce75e67998d418d2c3e5462a106a0
7cbfab8b00bf1c5b0556b4a05d4587216047a4a4
845bbcfca6a635cc52efc291daf5248aecd76fe775a8b7b584ac41a24da10ed3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 45.88.90.29
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sat, 04 May 2024 13:34:08 GMT
Content-Type: text/html
Content-Length: 538
Last-Modified: Sat, 20 Apr 2024 12:04:40 GMT
Connection: keep-alive
ETag: "6623af58-21a"
Accept-Ranges: bytes

45.88.90.29/icons/style.css

45.88.90.29

200 OK

3.2 kB

URL GET HTTP/1.1
45.88.90.29/icons/style.css
IP
45.88.90.29:80
ASN
#0

Requested by
http://45.88.90.29/

File type
ASCII text
Size
3.2 kB (3189 bytes)
Hash
0f930faf1666058962129fd40bffbf1c
bc21b9d1db3b376956dda32a56db0ffd442d02a7
d545b5a90a14d7df2ea701a7a4d5bd86ecaf50cb460010094ef43ff696f8359b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/style.css HTTP/1.1
Host: 45.88.90.29
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.88.90.29/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sat, 04 May 2024 13:34:08 GMT
Content-Type: text/css
Content-Length: 3189
Last-Modified: Sat, 20 Apr 2024 11:59:43 GMT
Connection: keep-alive
ETag: "6623ae2f-c75"
Accept-Ranges: bytes

45.88.90.29/pathseg.js

45.88.90.29

200 OK

60 kB

URL GET HTTP/1.1
45.88.90.29/pathseg.js
IP
45.88.90.29:80
ASN
#0

Requested by
http://45.88.90.29/

File type
JavaScript source, ASCII text, with very long lines (310)
Size
60 kB (60338 bytes)
Hash
3d879375a09eccdd15c52636d69377b5
248a973e42a5141c8fbea07a1bc94c7beddaa543
d619501ad9cff333c694c9aca3c29eaab5cd24272ebeab499d04ecb82e609640

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pathseg.js HTTP/1.1
Host: 45.88.90.29
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.88.90.29/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sat, 04 May 2024 13:34:08 GMT
Content-Type: application/javascript
Content-Length: 60338
Last-Modified: Sat, 20 Apr 2024 11:59:43 GMT
Connection: keep-alive
ETag: "6623ae2f-ebb2"
Accept-Ranges: bytes

45.88.90.29/static/css/main.149b8326.css

45.88.90.29

200 OK

597 kB

URL GET HTTP/1.1
45.88.90.29/static/css/main.149b8326.css
IP
45.88.90.29:80
ASN
#0

Requested by
http://45.88.90.29/

File type
ASCII text, with very long lines (52630)
Size
597 kB (597238 bytes)
Hash
a695d134a0549e0f50588f1e6f631a0e
1a652e0f8a26bdcd0f0893f308c32cd68a41cfd4
6daa80309957ac822d80b46055bcf9b3283248ae84ed5b0a862deb774e94384d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/main.149b8326.css HTTP/1.1
Host: 45.88.90.29
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.88.90.29/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sat, 04 May 2024 13:34:08 GMT
Content-Type: text/css
Content-Length: 597238
Last-Modified: Sat, 20 Apr 2024 12:04:40 GMT
Connection: keep-alive
ETag: "6623af58-91cf6"
Accept-Ranges: bytes

45.88.90.29/static/js/main.b1bbe02b.js

45.88.90.29

200 OK

2.8 MB

URL GET HTTP/1.1
45.88.90.29/static/js/main.b1bbe02b.js
IP
45.88.90.29:80
ASN
#0

Requested by
http://45.88.90.29/

File type
JavaScript source, ASCII text, with very long lines (65465)
Size
2.8 MB (2787621 bytes)
Hash
9628097be34eb0ac4f3f93717825bf19
6b623ed6a2759468c00d87f78cb9c22734c53eb1
f76160a8d6ac4a9851b7c8e1f6a38f0309f37f193552898ba367c297df970170

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/main.b1bbe02b.js HTTP/1.1
Host: 45.88.90.29
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.88.90.29/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sat, 04 May 2024 13:34:08 GMT
Content-Type: application/javascript
Content-Length: 2787621
Last-Modified: Sat, 20 Apr 2024 12:04:40 GMT
Connection: keep-alive
ETag: "6623af58-2a8925"
Accept-Ranges: bytes

fonts.googleapis.com/css2?family=Raleway:ital,wght@0,400;0,600;0,800;0,900;1,400;1,600&display=swap

142.250.74.106

200 OK

1.2 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Raleway:ital,wght@0,400;0,600;0,800;0,900;1,400;1,600&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://45.88.90.29/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
1.2 kB (1177 bytes)
Hash
e266a03350fc9e172352d38d1e3537c9
1511e0c07e130b8aaef733593c247f8f892d9c9c
5a3c42259c4b518e2592e81f09363712e5ae2ed9bc2e2da8d619e17e59f60b9c

HTTP Headers

GET /css2?family=Raleway:ital,wght@0,400;0,600;0,800;0,900;1,400;1,600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://45.88.90.29/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 13:34:08 GMT
date: Sat, 04 May 2024 13:34:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
http://45.88.90.29/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48336, version 1.0
Size
48 kB (48336 bytes)
Hash
bfe7ad4aa54cff8909b2d7632073cc30
7c2e625bea4d449ca78cde09ab59dc6c9cb4726f
47d477915fa5912616e2dc5df8c5780f9202671678cf275472bd39f3381c0098

HTTP Headers

GET /s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://45.88.90.29
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 16:38:17 GMT
expires: Fri, 02 May 2025 16:38:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 20:31:48 GMT
content-type: font/woff2
age: 161752
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

45.88.90.29/favicon.ico

45.88.90.29

200 OK

17 kB

URL GET HTTP/1.1
45.88.90.29/favicon.ico
IP
45.88.90.29:80
ASN
#0

Requested by
http://45.88.90.29/

File type
MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Size
17 kB (16958 bytes)
Hash
5f47bc2fdd2edf83997119c401e09b9a
18020ef918c94bebee5936581bd5996cc79d042f
3d0e04ec54e7387a4fad8cbb3c7fe9b68e1725461c9d3df4b68a275aa24f5606

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 45.88.90.29
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.88.90.29/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sat, 04 May 2024 13:34:09 GMT
Content-Type: image/x-icon
Content-Length: 16958
Last-Modified: Sat, 20 Apr 2024 11:59:43 GMT
Connection: keep-alive
ETag: "6623ae2f-423e"
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by