Report - bosszik.com/

Report Overview

Submitted URL
bosszik.com/
IP
209.151.154.43
ASN
#25697 UPCLOUDUSA
Submitted
2024-04-18 06:57:04
Access
public
Website Title
bosszik.com is a custom short domain
Final URL
bosszik.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bosszik.com	unknown	2020-04-15	2020-04-15	2023-10-12	1.0 kB	467 kB	209.151.154.43
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-18	446 B	1.6 kB	142.250.74.74
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	1.0 kB	35 kB	142.250.74.163

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	bosszik.com	Sinkholed
2024-04-18	medium	bosszik.com	Sinkholed
2024-04-18	medium	bosszik.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

bosszik.com/

209.151.154.43

200 OK

1.5 kB

URL User Request GET HTTP/1.1
bosszik.com/
IP
209.151.154.43:80
ASN
#25697 UPCLOUDUSA

File type
HTML document, ASCII text, with very long lines (785), with CRLF line terminators
Size
1.5 kB (1543 bytes)
Hash
3d2fb393e1cf18fa153701c44476ec0e
71464c04a3420e72f0acc953960b5ee80f71ebac
86bb279a9ce74136003b490022c6791a6b1733763c0ceb4e908332fb21613ca5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: bosszik.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:56:39 GMT
Server: Apache/2.4.52 (Ubuntu)
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1543
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

fonts.googleapis.com/css2?family=Hind:wght@400;500&display=swap

142.250.74.74

200 OK

940 B

URL GET HTTP/2
fonts.googleapis.com/css2?family=Hind:wght@400;500&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
http://bosszik.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
gzip compressed data, max compression
Size
940 B (940 bytes)
Hash
a14caa510186d73ba072bcaa472b6286
a9dc887471339ca1ff72c3fe47275eb3a26e60a9
f6d46fbe044fe45c43962f16cdb0125a4b41f60aeaee1b16441375e7ebad4930

HTTP Headers

GET /css2?family=Hind:wght@400;500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bosszik.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 06:56:39 GMT
date: Thu, 18 Apr 2024 06:56:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbERySjQ.woff2

142.250.74.163

200 OK

17 kB

URL GET HTTP/2
fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbERySjQ.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
http://bosszik.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 16788, version 1.0
Size
17 kB (16788 bytes)
Hash
fd24af413cb9cfdc66d2ff712bdfd614
978c3d524cc6a8114d11f78b6292b58c69cb8632
16ab274f0ede84be01a0361263faeb3ff18d2d95d155d6b9d654ef37f87db1f5

HTTP Headers

GET /s/hind/v16/5aU19_a8oxmIfJpbERySjQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://bosszik.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16788
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:54:59 GMT
expires: Fri, 11 Apr 2025 17:54:59 GMT
cache-control: public, max-age=31536000
age: 565301
last-modified: Tue, 26 Apr 2022 16:08:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2

142.250.74.163

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
http://bosszik.com/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 16216, version 1.0
Size
16 kB (16216 bytes)
Hash
4c5bc71b3cf6f2584725c0bb3e25d391
f051f482061dc48d09c328c45459dd04db5b5547
aca5dec430a7470ff1d8a16f9e7bb3ca30f2ff58f3bd60432cf1dddfa30c9d71

HTTP Headers

GET /s/hind/v16/5aU69_a8oxmIdGl4BA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://bosszik.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16216
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:47:14 GMT
expires: Fri, 18 Apr 2025 02:47:14 GMT
cache-control: public, max-age=31536000
age: 14966
last-modified: Tue, 26 Apr 2022 15:45:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

bosszik.com/loading.gif

209.151.154.43

200 OK

463 kB

URL GET HTTP/1.1
bosszik.com/loading.gif
IP
209.151.154.43:80
ASN
#25697 UPCLOUDUSA

Requested by
http://bosszik.com/

File type
GIF image data, version 89a, 800 x 600
Size
463 kB (463063 bytes)
Hash
fded1765432df670e8dce05020ad58a1
59cd7337767a7c9ebadc1549e6ebbb2d700b0959
834be772b1b7d5d945bb93264b0609174930fb97180b340e9187b5d125e54c63

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /loading.gif HTTP/1.1
Host: bosszik.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bosszik.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:56:39 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Sat, 19 Aug 2023 00:24:14 GMT
ETag: "710d7-6033baa37c780"
Accept-Ranges: bytes
Content-Length: 463063
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif

bosszik.com/favicon.ico

209.151.154.43

200 OK

1.5 kB

URL GET HTTP/1.1
bosszik.com/favicon.ico
IP
209.151.154.43:80
ASN
#25697 UPCLOUDUSA

Requested by
http://bosszik.com/

File type
HTML document, ASCII text, with very long lines (785), with CRLF line terminators
Size
1.5 kB (1543 bytes)
Hash
3d2fb393e1cf18fa153701c44476ec0e
71464c04a3420e72f0acc953960b5ee80f71ebac
86bb279a9ce74136003b490022c6791a6b1733763c0ceb4e908332fb21613ca5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bosszik.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bosszik.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 06:56:40 GMT
Server: Apache/2.4.52 (Ubuntu)
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1543
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (6)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers