Report - push.pixipl.xyz/

Report Overview

Submitted URL
push.pixipl.xyz/
IP
23.95.186.190
ASN
#36352 AS-COLOCROSSING
Submitted
2024-04-25 15:51:35
Access
public
Website Title
Meta
Final URL
push.pixipl.xyz/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
68

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-24	2.3 kB	360 kB	104.17.24.14
push.pixipl.xyz	unknown	unknown	No data	No data	6.9 kB	338 kB	23.95.186.190
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-25	2.1 kB	59 kB	216.58.207.227
getyourapi.site	unknown	2021-03-05	2021-03-05	2024-04-12	477 B	700 B	3.122.218.248
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	455 B	5.3 kB	142.250.74.74

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.
2024-04-25	medium	push.pixipl.xyz/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	getyourapi.site	Sinkholed

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	getyourapi.site	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed
2024-04-25	medium	pixipl.xyz	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	push.pixipl.xyz/js/ModalPhoneError.js	1.6 kB	2024-04-03	2024-05-02
Pretty URL push.pixipl.xyz/js/ModalPhoneError.js IP 23.95.186.190 ASN #36352 AS-COLOCROSSING Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-03 18:30:16 Last Seen2024-05-02 04:22:32 Times Seen10 Hash 55decb69d0eb0a50502f9c3810de77e9 67e51b431fe841e28574f8f659479d0087849de9 fb695c90ebbd4c8fbc7b7cbed95d9736cf6de0df7229371e1922ebc9e231b047 Loading...

	cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/js/utils.min.js	249 kB	2024-03-04	2024-05-04
Pretty URL cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/js/utils.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-04 04:06:08 Last Seen2024-05-04 20:55:00 Times Seen42 Hash b34007e0189bdb6d937004b2d35dc0d8 4836255d80bf984e066263a2bffaa1467cfc4cb5 b35c83e4dc3713230edfbda43508fb2fb92d8e07c4189f19d201ba199ef810a2 Loading...

	push.pixipl.xyz/	774 B	2024-04-10	2024-04-25
Pretty URL push.pixipl.xyz/ IP 23.95.186.190 ASN #36352 AS-COLOCROSSING Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-10 19:55:56 Last Seen2024-04-25 17:51:43 Times Seen2 Hash fff8427e7ffec9d3323bf1f4afb0b702 132530aecfc808ba37046a446a520b6d3c80d310 13f969e1ee263c65574bade5629e5c33be37d283bacd489c56869913bda8602b Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	90 kB	2023-03-07	2024-05-05
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-05 00:26:39 Times Seen265845 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	push.pixipl.xyz/js/main.js	25 kB	2024-04-03	2024-04-25
Pretty URL push.pixipl.xyz/js/main.js IP 23.95.186.190 ASN #36352 AS-COLOCROSSING Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-03 18:30:15 Last Seen2024-04-25 17:51:43 Times Seen9 Hash f5fa22bde84e76634e5009d9ccc19b28 625068f6cb1677661b20d7ac5c709b5e3434d0d6 38480e03dd245031e19a7162bc918811f772ff86946602ab01e78d690e675807 Loading...

	cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/js/intlTelInput.min.js	31 kB	2024-03-04	2024-05-04
Pretty URL cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/js/intlTelInput.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-04 04:06:08 Last Seen2024-05-04 20:55:00 Times Seen48 Hash ddc9d20a5dc24ff745358bba80eea1f3 c569c6d9f50923de1753da1f2c090132fa455f55 54bc983ea406933001939caacb25ec98a9f633b8f2d54aa5ca3180948d6fe389 Loading...

	push.pixipl.xyz/	10 kB	2024-04-03	2024-04-25
Pretty URL push.pixipl.xyz/ IP 23.95.186.190 ASN #36352 AS-COLOCROSSING Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-03 18:30:16 Last Seen2024-04-25 17:51:43 Times Seen9 Hash ec7b63417803944527ed6e98944d953f 5c54d0d12283d66f5adda62ca23e22f40b6c71ac 87b6b5afd5c844c278191f385f8b4effd5275c604887c6b3fc978cd0255b5fe6 Loading...

HTTP Transactions (27)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

104.17.24.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://push.pixipl.xyz/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
28 kB (27938 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 15:51:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 67968
expires: Tue, 15 Apr 2025 15:51:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A2OFr5FfTCGCA83eAVaSJb48Y8lTtDJZVc3Fs8zSgvwbdlpvD%2BO3Fc1bIq1Frv%2B%2BIsrJFhKJGidK4wRJ8Mgt9Co22T4TxVJb%2B0RVDW5eqEnni14QAa1fzYsmLEUMANqNkp0qHFBt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879f7e358bde5691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/js/intlTelInput.min.js

104.17.24.14

200 OK

8.8 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/js/intlTelInput.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://push.pixipl.xyz/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (27324)
Size
8.8 kB (8765 bytes)
Hash
ddc9d20a5dc24ff745358bba80eea1f3
c569c6d9f50923de1753da1f2c090132fa455f55
54bc983ea406933001939caacb25ec98a9f633b8f2d54aa5ca3180948d6fe389

HTTP Headers

GET /ajax/libs/intl-tel-input/18.5.0/js/intlTelInput.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 15:51:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 8765
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65a3eb4d-223d"
last-modified: Sun, 14 Jan 2024 14:10:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1522080
expires: Tue, 15 Apr 2025 15:51:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Az979rZEdZAZIB7HA3GUKEBeHp7cgqsx8IBhC4ilPLOiqnTWbIE%2FY6TMUF0Q89m9lhqe%2B4nsHlv9PDORigmyWvJJ6q5S2kHlQ2hXsySo6rtIe2scDp0FhaUEL7sJ6RhZrP3PxYnT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879f7e358bdf5691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/css/intlTelInput.css

104.17.24.14

200 OK

2.1 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/css/intlTelInput.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://push.pixipl.xyz/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text
Size
2.1 kB (2139 bytes)
Hash
582a1f76889553869a19d492c7728242
7d0ac85f92401984088d1c79d2a8d91b00e16a8a
c9ae063d7bf400c91d4056a69889903b54205f2efd6cb224d6041eca58b92cca

HTTP Headers

GET /ajax/libs/intl-tel-input/18.5.0/css/intlTelInput.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 15:51:10 GMT
content-type: text/css; charset=utf-8
content-length: 2139
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65a3eb4d-85b"
last-modified: Sun, 14 Jan 2024 14:10:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 754194
expires: Tue, 15 Apr 2025 15:51:10 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bKkQW5X6BZTS4iqsQMnxhXoV7cFsFGUcAmCjoZQW6H77Uft75iue6HuDOkBbgSPHhvb0GrtaB%2FmCGf8HraB0fsvkHkr3xWg41E40vtBGY11pqOa7fxr2VrsrLGssgqjspYAbTmsC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879f7e358be25691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

push.pixipl.xyz/js/ModalPhoneError.js

23.95.186.190

200 OK

11 kB

URL GET HTTP/2
push.pixipl.xyz/js/ModalPhoneError.js
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
gzip compressed data, from Unix
Size
11 kB (10578 bytes)
Hash
c22e6b691c8c45b3aaeef595722eb362
9e5e9f63f5dfc3e0f2a91f5d4202eeee01b9fab7
f42558c81197c012367c68b9d7d9305060fe6aa9f920549db27dc3639e55a82f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/ModalPhoneError.js HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

push.pixipl.xyz/img/1.png

23.95.186.190

200 OK

4.7 kB

URL GET HTTP/2
push.pixipl.xyz/img/1.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
4.7 kB (4682 bytes)
Hash
01d4ef0e78d2f5defccf6789b3619e10
710945504e00fb10f456f803710d012f8fef5680
35badd9d4051004cc48854759cdb2a6d418892c1f1959cb8f4dddcceeda5e9ba

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/1.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://push.pixipl.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://push.pixipl.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 170613
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2

216.58.207.227

200 OK

12 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://push.pixipl.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11824, version 1.0
Size
12 kB (11824 bytes)
Hash
deb26e9b1a25438118e5d39d741ae6b6
a2801defb4c8bed8e4083dfde0b2a5a9c0537020
fc66f942651a9fe1a598770d3d896529dcd7a03d02f40655451513093103e61b

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://push.pixipl.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:06 GMT
expires: Fri, 25 Apr 2025 02:35:06 GMT
cache-control: public, max-age=31536000
age: 47765
last-modified: Wed, 11 May 2022 19:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://push.pixipl.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://push.pixipl.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 223000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2

216.58.207.227

200 OK

12 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://push.pixipl.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11872, version 1.0
Size
12 kB (11872 bytes)
Hash
87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://push.pixipl.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 20:51:00 GMT
expires: Thu, 24 Apr 2025 20:51:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
age: 68411
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

getyourapi.site/api/geolocation

3.122.218.248

200 OK

102 B

URL GET HTTP/2
getyourapi.site/api/geolocation
IP
3.122.218.248:443
ASN
#16509 AMAZON-02

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectgetyourapi.site
Fingerprint5E:24:43:8B:8E:E3:57:4A:19:01:E0:C3:8C:45:B8:23:F5:E0:AD:F6
ValidityFri, 08 Mar 2024 09:11:52 GMT - Thu, 06 Jun 2024 09:11:51 GMT

File type
JSON text data
Size
102 B (102 bytes)
Hash
4eb451b8ec35076295bb4852bf942ce5
413cca64310dc9069ece1c7827bb2ba1c637fa32
4ea16c2bc67e85a837c5d60547aa63cc05d52b8c7603313d26b2c33ad3d24cfd

Detections

Analyzer	Verdict	Alert
mnemonic secure dns	malicious	Sinkholed
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/geolocation HTTP/1.1
Host: getyourapi.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://push.pixipl.xyz
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: application/json; charset=utf-8
content-length: 102
x-powered-by: Express
access-control-allow-origin: https://push.pixipl.xyz
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 600
access-control-allow-credentials: true
access-control-allow-headers: origin, content-type, accept, authorization
access-control-expose-headers: content-type, authorization, x-request-id
x-request-id: 9d82be43-6dbd-46c1-b3ff-f81b2b78115d
etag: W/"66-QTzKZDENyQaezhx4J7srocY3+jI"
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/img/flags.png?1

104.17.24.14

67 kB

URL GET
cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/img/flags.png?1
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

Requested by
https://push.pixipl.xyz/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced
Size
67 kB (67119 bytes)
Hash
8ec9f8e2915d6bf684abf7629a1b3df0
00e80b4f1321a71de50ade6eaea01eb1713c5ce3
3af394920236bdcab19b5514b8f67e06b194e29017368d6a9d83d598947f203b

HTTP Headers

GET /ajax/libs/intl-tel-input/18.5.0/img/flags.png?1 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/css/intlTelInput.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png; charset=utf-8
content-length: 67119
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65a3eb4d-1062f"
last-modified: Sun, 14 Jan 2024 14:10:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1781066
expires: Tue, 15 Apr 2025 15:51:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IojcFGVIHz3Nvx%2BdgYOEp4E%2Blb3Ec3PyZwZ%2BhikuWc1Ms0F3DupvBfmhOL%2F%2FGsdVgR52aCn64F7Rg8hV0zAK63fJqoIK30k871nKcelZ2YpvIZsN81WgOKXeDn8Kx%2FeyLNEn8i2u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879f7e3b1aa656be-OSL
alt-svc: h3=":443"; ma=86400

push.pixipl.xyz/img/3.png

23.95.186.190

200 OK

51 kB

URL GET HTTP/2
push.pixipl.xyz/img/3.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
51 kB (50894 bytes)
Hash
61bcce14d8165324a14ed1d02996a5bd
050097573c615fe40dc9ad7f7c04a3742e819533
0660b4cc80f6d527ddb18dda175477fe94b48a1d206ed984a1467e47942604cf

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/3.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

push.pixipl.xyz/js/main.js

23.95.186.190

200 OK

25 kB

URL GET HTTP/2
push.pixipl.xyz/js/main.js
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type

Size
25 kB (24978 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/main.js HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

push.pixipl.xyz/img/like.svg

23.95.186.190

200 OK

4.4 kB

URL GET HTTP/2
push.pixipl.xyz/img/like.svg
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
SVG Scalable Vector Graphics image
Size
4.4 kB (4405 bytes)
Hash
0314de5f3e29f652501f6de22f296fae
166cc6cb3ab0c65aa902e1c14482c8b28cc2d7d3
81cf5463d057e4aa365b5a24e860cc6888838e8b99ec7cf8368d7375dadb6568

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/like.svg HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

push.pixipl.xyz/img/7.png

23.95.186.190

200 OK

4.4 kB

URL GET HTTP/2
push.pixipl.xyz/img/7.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
4.4 kB (4366 bytes)
Hash
c305670c983d69958827310228f7c2ab
5ae1ad3815b82f5636a9eca4282c624cc8065a1c
9358e240581ce8f58f936b9416d46ee00f19dfd78e94ac8046a376a6aa5209f9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/7.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

push.pixipl.xyz/

23.95.186.190

200 OK

56 kB

URL User Request GET HTTP/2
push.pixipl.xyz/
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type

Size
56 kB (55744 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:10 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

push.pixipl.xyz/img/specialist-icon.svg

23.95.186.190

200 OK

835 B

URL GET HTTP/2
push.pixipl.xyz/img/specialist-icon.svg
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
SVG Scalable Vector Graphics image
Size
835 B (835 bytes)
Hash
eab5da0dab828e472ea0be12060ffc3c
7d179de52778fc6934f1e2eaadedfbb63cc99c3f
c6196811346db26a161c261ed5f3d4cccd3726cbe92de69626e02f5d58d14584

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/specialist-icon.svg HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/js/utils.min.js

104.17.24.14

200 OK

249 kB

URL GET HTTP/3
cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.5.0/js/utils.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://push.pixipl.xyz/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type

Size
249 kB (249366 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ajax/libs/intl-tel-input/18.5.0/js/utils.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 46045
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65a3eb4d-b3dd"
last-modified: Sun, 14 Jan 2024 14:10:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5806640
expires: Tue, 15 Apr 2025 15:51:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VDQeIVC%2B3GyhqDLzFoLUUCdk4s9KubckrBIOVlZ0WQJ%2FTFk739e7LL81wnfr3TOHZMbEmZJrIm%2FVsD7rPebg8vm7YuH%2FUJvnYxyCybULpo3mAXRxglTYh1sv4eLZByZ9iEhYx5fL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879f7e3c8c1d56be-OSL
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap

142.250.74.74

200 OK

4.7 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://push.pixipl.xyz/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (4786), with no line terminators
Size
4.7 kB (4660 bytes)
Hash
c8ea484de9f8d29d52b3297bf12ebcd4
d80d042dffa0aa28c84d983490de88307a3f6b94
d22823463f2014e907a4ac0cd6f42f369fab071947f3becb21873dabd8671d6e

HTTP Headers

GET /css2?family=Roboto:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 15:51:11 GMT
date: Thu, 25 Apr 2024 15:51:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

push.pixipl.xyz/img/logo-bg.png

23.95.186.190

200 OK

66 kB

URL GET HTTP/2
push.pixipl.xyz/img/logo-bg.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 842 x 111, 8-bit/color RGBA, non-interlaced
Size
66 kB (66207 bytes)
Hash
368e758c87b8b2492163217a78f9e60e
a4fe0ce1f543c2a81b7525030c50aba760c20daa
86f8b57fc01f4a2abadac8c97be1cbe59aa291942f415efb633801187d08474f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/logo-bg.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

push.pixipl.xyz/img/5.png

23.95.186.190

200 OK

3.8 kB

URL GET HTTP/2
push.pixipl.xyz/img/5.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
3.8 kB (3767 bytes)
Hash
0c4e9376f74547426e411029c6290d14
23a7ca73a217f0be86d2dc8d21ffbc55c0917ed5
17f1fd276f8dd35191932a344ac57b97f7a7160d72b7a3a2a57be1cf831c8489

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/5.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

push.pixipl.xyz/css/style.css

23.95.186.190

200 OK

32 kB

URL GET HTTP/2
push.pixipl.xyz/css/style.css
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type

Size
32 kB (31532 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/style.css HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

push.pixipl.xyz/img/2.png

23.95.186.190

200 OK

3.0 kB

URL GET HTTP/2
push.pixipl.xyz/img/2.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
3.0 kB (3049 bytes)
Hash
faa5975d19f47fea91ab577e1bf7d823
173dbf540b51ee444251b2b404435b08e2e9f4dc
7e7da78f477b485849cb75e9af991efcc3f368c3a3cf720ea73846c75bcdb79b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/2.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

push.pixipl.xyz/img/4.png

23.95.186.190

200 OK

2.8 kB

URL GET HTTP/2
push.pixipl.xyz/img/4.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
2.8 kB (2801 bytes)
Hash
521e1e9b815ef9b47fc2cf83b047a5a5
4b63ff6779400bd705415a77e0141451073f010f
18e28850fc1361fd32e6cdfa4fc37528960b0c4688eaea0d998a48afe7559c87

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/4.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

push.pixipl.xyz/img/6.png

23.95.186.190

200 OK

2.8 kB

URL GET HTTP/2
push.pixipl.xyz/img/6.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
2.8 kB (2798 bytes)
Hash
fa54b4bb423e9f42a594991832cc502b
dc4c232ba6b4fce4b09448d2acf73ce97c0f98bf
c74157a6b02436daa939a4969d49cbb48b9bf388f4b83766fdf23f488dff0c32

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/6.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

push.pixipl.xyz/favicon.ico

23.95.186.190

200 OK

62 kB

URL GET HTTP/2
push.pixipl.xyz/favicon.ico
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
MS Windows icon resource - 1 icon, 123x123, 32 bits/pixel
Size
62 kB (62546 bytes)
Hash
1c2585cb414812b07f42257f63bb02f9
283fd84dff4220fd7612de606322cbdb18736798
fd2edcd46cc80ef42492216067dfd1e7481e8f9ffd965e9492449ca557f66e9a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:12 GMT
content-type: image/x-icon
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

push.pixipl.xyz/img/8.png

23.95.186.190

200 OK

6.0 kB

URL GET HTTP/2
push.pixipl.xyz/img/8.png
IP
23.95.186.190:443
ASN
#36352 AS-COLOCROSSING

Requested by
https://push.pixipl.xyz/
Certificate
IssuerLet's Encrypt
Subjectpush.pixipl.xyz
Fingerprint0C:94:3D:82:62:A8:8F:7D:D4:15:8F:C8:86:E4:E1:94:BE:40:8C:BD
ValidityThu, 04 Apr 2024 18:06:56 GMT - Wed, 03 Jul 2024 18:06:55 GMT

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Size
6.0 kB (5988 bytes)
Hash
6b4e0847ce040f86bc8eb861ae0de497
492ad55aa2bc8ec117de337287eae8cb0e80584b
3816d98bb22ae86e602579aafca27e829c5d1b1327e9beb2eee32e0a9f1f9903

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/8.png HTTP/1.1
Host: push.pixipl.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://push.pixipl.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Thu, 25 Apr 2024 15:51:11 GMT
content-type: image/png
vary: Accept-Encoding
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (27)

URL GET HTTP/2

IP

ASN

Requested by