Report - takeru-one.com/home/11-bo-resmi/

Report Overview

Submitted URL
takeru-one.com/home/11-bo-resmi/
IP
178.128.26.109
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-05-04 04:35:49
Access
public
Website Title
11 Link Daftar Situs BO TOGEL RESMI = BANDAR TOGEL ONLINE TERPERCAYA Bett 100 Perak Hadiah 10 Juta Terbesar Di Indonesia
Final URL
takeru-one.com/home/11-bo-resmi/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
178.128.17.197	unknown	unknown	2019-07-07	2022-12-31	904 B	298 kB	178.128.17.197
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-02	457 B	6.7 kB	142.250.74.74
takeru-one.com	unknown	unknown	No data	No data	486 B	3.9 kB	178.128.26.109
res.cloudinary.com	2520	2011-05-24	2012-10-03	2024-05-02	2.0 kB	22 kB	23.38.200.38
cdn.ampproject.org	329	2015-08-31	2015-10-09	2024-05-03	1.3 kB	85 kB	216.58.207.193
i0.wp.com	3021	1997-03-28	2013-09-17	2024-05-03	485 B	290 kB	192.0.77.2
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-03	1.1 kB	80 kB	142.250.74.99
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09	2024-05-03	336 B	1.2 kB	104.18.38.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	178.128.17.197	Sinkholed
2024-05-04	medium	178.128.17.197	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	cdn.ampproject.org/v0.js	285 kB	2024-05-01	2024-05-08
Pretty URL cdn.ampproject.org/v0.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 05:50:17 Last Seen2024-05-08 06:17:04 Times Seen64 Hash 86b80d7bd5cbbcb64d6352cebe49087a ddaa6d9bbbf6c21a6ebf5afd53321a53db3741d1 729cf39187bda4533a392944f2802d8f8b9e8a0048676ec6481bf35a98713a43 Loading...

	cdn.ampproject.org/rtv/012404181825000/v0/amp-auto-lightbox-0.1.js	7.8 kB	2024-05-01	2024-05-08
Pretty URL cdn.ampproject.org/rtv/012404181825000/v0/amp-auto-lightbox-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 05:50:17 Last Seen2024-05-08 06:17:04 Times Seen58 Hash 656bf7bf1304fab13624e0b2550c312e 25afd50fb250a09c7d5e89397173344db0530dc6 b765500a58cc93374829c9d2b1510d617fcc5aada2849d4efdd1f301a7253d8b Loading...

	cdn.ampproject.org/rtv/012404181825000/v0/amp-loader-0.1.js	13 kB	2024-05-01	2024-05-08
Pretty URL cdn.ampproject.org/rtv/012404181825000/v0/amp-loader-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 05:50:17 Last Seen2024-05-08 06:17:04 Times Seen54 Hash a6b8d507d4704d2eda7a1c98ca5f37b8 d8670fc36c37041eef2eff1f5426d9dad26b5dd3 cb6fcadd038e03de5104bf1711a8084c485490bb563206db0a673d271e274987 Loading...

HTTP Transactions (15)

URL IP Response Size

takeru-one.com/home/11-bo-resmi/

178.128.26.109

200 OK

3.6 kB

URL User Request GET HTTP/2
takeru-one.com/home/11-bo-resmi/
IP
178.128.26.109:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjecttakeru-one.com
FingerprintE2:EA:90:A7:D9:31:CC:5C:C2:6F:FA:08:39:AE:EC:67:80:35:89:CC
ValidityWed, 27 Mar 2024 04:31:49 GMT - Tue, 25 Jun 2024 04:31:48 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (514)
Size
3.6 kB (3560 bytes)
Hash
72512d792c8b4be58a45dbab21f4f725
2540a445bc693bbbf22c8dc6f6687f7e42a173ee
6c2da2440d39beb1282bb8222ecaeda003b0f696d13ea2ad7d794c6878485e43

HTTP Headers

GET /home/11-bo-resmi/ HTTP/1.1
Host: takeru-one.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
content-length: 3560
date: Sat, 04 May 2024 04:35:24 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

res.cloudinary.com/nomor-slot/image/upload/v1704392246/spacetogel/macallanwa_r1eg18.png

23.38.200.38

200 OK

5.7 kB

URL GET HTTP/2
res.cloudinary.com/nomor-slot/image/upload/v1704392246/spacetogel/macallanwa_r1eg18.png
IP
23.38.200.38:443
ASN
#16625 AKAMAI-AS

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.cloudinary.com
Fingerprint33:69:0E:47:5B:6E:8C:93:F5:86:06:8A:BF:8D:98:38:B3:5F:55:36
ValidityMon, 18 Dec 2023 09:10:54 GMT - Mon, 13 Jan 2025 15:35:01 GMT

File type
PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced
Size
5.7 kB (5734 bytes)
Hash
8ddbf7cbe238d0a602b25e538c70ddc3
54ee4b067b8158130857797db5aa7aef642226c0
9030f97cd3b0d21db00acd2f3a830fbd846cd5ff018b26dc980f933c09ebb12f

HTTP Headers

GET /nomor-slot/image/upload/v1704392246/spacetogel/macallanwa_r1eg18.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 5734
etag: "8ddbf7cbe238d0a602b25e538c70ddc3"
last-modified: Thu, 04 Jan 2024 18:17:27 GMT
date: Sat, 04 May 2024 04:35:24 GMT
cache-control: public, no-transform, immutable, max-age=2592000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
x-content-type-options: nosniff
server-timing: cld-akam;dur=31;start=2024-05-04T04:35:24.784Z;desc=miss,rtt;dur=6,content-info;desc="width=58,height=58,bytes=5734,o=1,ef=(17)",cloudinary;dur=92;start=2024-04-16T21:44:25.534Z
X-Firefox-Spdy: h2

res.cloudinary.com/nomor-slot/image/upload/v1704392256/spacetogel/macallanin_tvzow7.png

23.38.200.38

200 OK

3.7 kB

URL GET HTTP/2
res.cloudinary.com/nomor-slot/image/upload/v1704392256/spacetogel/macallanin_tvzow7.png
IP
23.38.200.38:443
ASN
#16625 AKAMAI-AS

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.cloudinary.com
Fingerprint33:69:0E:47:5B:6E:8C:93:F5:86:06:8A:BF:8D:98:38:B3:5F:55:36
ValidityMon, 18 Dec 2023 09:10:54 GMT - Mon, 13 Jan 2025 15:35:01 GMT

File type
PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced
Size
3.7 kB (3665 bytes)
Hash
c0e6cd7889011625debbdb2d7a696e30
39c0ab1297930a0a4def878e1c3c7e2078758c2f
bb36c2a0686cb76f21c0d6e01141c85e82f9e1e2cc4ded2a2cc01cd5c433e99b

HTTP Headers

GET /nomor-slot/image/upload/v1704392256/spacetogel/macallanin_tvzow7.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3665
etag: "c0e6cd7889011625debbdb2d7a696e30"
last-modified: Thu, 04 Jan 2024 18:17:37 GMT
date: Sat, 04 May 2024 04:35:24 GMT
cache-control: public, no-transform, immutable, max-age=2592000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
x-content-type-options: nosniff
server-timing: cld-akam;dur=31;start=2024-05-04T04:35:24.784Z;desc=miss,rtt;dur=6,content-info;desc="width=43,height=43,bytes=3665,o=1,ef=(17)",cloudinary;dur=77;start=2024-05-01T14:38:38.615Z
X-Firefox-Spdy: h2

res.cloudinary.com/nomor-slot/image/upload/v1704392267/spacetogel/macallanchat_sht8lv.png

23.38.200.38

200 OK

3.9 kB

URL GET HTTP/2
res.cloudinary.com/nomor-slot/image/upload/v1704392267/spacetogel/macallanchat_sht8lv.png
IP
23.38.200.38:443
ASN
#16625 AKAMAI-AS

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.cloudinary.com
Fingerprint33:69:0E:47:5B:6E:8C:93:F5:86:06:8A:BF:8D:98:38:B3:5F:55:36
ValidityMon, 18 Dec 2023 09:10:54 GMT - Mon, 13 Jan 2025 15:35:01 GMT

File type
PNG image data, 51 x 40, 8-bit/color RGBA, non-interlaced
Size
3.9 kB (3930 bytes)
Hash
a848309e4bce861b9010faba3b7a4dc8
7123134067716598635d34838c4846258058f60c
7d8383b91d4c05868ed0fb23c2dd5598218db9946cdb1562a1a4ba4051798466

HTTP Headers

GET /nomor-slot/image/upload/v1704392267/spacetogel/macallanchat_sht8lv.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3930
etag: "a848309e4bce861b9010faba3b7a4dc8"
last-modified: Thu, 04 Jan 2024 18:17:48 GMT
date: Sat, 04 May 2024 04:35:24 GMT
cache-control: public, no-transform, immutable, max-age=2592000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
x-content-type-options: nosniff
server-timing: cld-akam;dur=31;start=2024-05-04T04:35:24.784Z;desc=hit-near,rtt;dur=6,content-info;desc="width=51,height=40,bytes=3930,o=1,ef=(17)"
X-Firefox-Spdy: h2

res.cloudinary.com/nomor-slot/image/upload/v1704392241/spacetogel/macallanpromo_fswsph.png

23.38.200.38

200 OK

5.4 kB

URL GET HTTP/2
res.cloudinary.com/nomor-slot/image/upload/v1704392241/spacetogel/macallanpromo_fswsph.png
IP
23.38.200.38:443
ASN
#16625 AKAMAI-AS

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.cloudinary.com
Fingerprint33:69:0E:47:5B:6E:8C:93:F5:86:06:8A:BF:8D:98:38:B3:5F:55:36
ValidityMon, 18 Dec 2023 09:10:54 GMT - Mon, 13 Jan 2025 15:35:01 GMT

File type
PNG image data, 70 x 73, 8-bit/color RGBA, non-interlaced
Size
5.4 kB (5383 bytes)
Hash
e0b626196df5705a0765d47d7d8ee65a
daae031e23f8eb757f56cd2dce4f7d38eaa4e2d2
52ab983bca1d88d81648bde076f8e92b6c01fa832b07e4ccc7d549731626e080

HTTP Headers

GET /nomor-slot/image/upload/v1704392241/spacetogel/macallanpromo_fswsph.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 5383
etag: "e0b626196df5705a0765d47d7d8ee65a"
last-modified: Thu, 04 Jan 2024 18:17:22 GMT
date: Sat, 04 May 2024 04:35:24 GMT
cache-control: public, no-transform, immutable, max-age=2592000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
x-content-type-options: nosniff
server-timing: cld-akam;dur=30;start=2024-05-04T04:35:24.787Z;desc=miss,rtt;dur=6,content-info;desc="width=70,height=73,bytes=5383,o=1,ef=(17)",cloudinary;dur=77;start=2024-05-01T14:38:38.629Z
X-Firefox-Spdy: h2

cdn.ampproject.org/v0.js

216.58.207.193

200 OK

73 kB

URL GET HTTP/2
cdn.ampproject.org/v0.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint15:D1:F9:FD:F4:47:59:FF:66:C1:EB:18:18:71:8F:7D:9A:38:20:14
ValidityTue, 16 Apr 2024 03:24:35 GMT - Tue, 09 Jul 2024 03:24:34 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64654)
Size
73 kB (73092 bytes)
Hash
86b80d7bd5cbbcb64d6352cebe49087a
ddaa6d9bbbf6c21a6ebf5afd53321a53db3741d1
729cf39187bda4533a392944f2802d8f8b9e8a0048676ec6481bf35a98713a43

HTTP Headers

GET /v0.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 73092
date: Sat, 04 May 2024 04:35:24 GMT
expires: Sat, 04 May 2024 04:35:24 GMT
cache-control: private, max-age=3000, stale-while-revalidate=1206600
etag: "1e5bf2819ff421fa"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/rtv/012404181825000/v0/amp-auto-lightbox-0.1.js

216.58.207.193

200 OK

3.0 kB

URL GET HTTP/2
cdn.ampproject.org/rtv/012404181825000/v0/amp-auto-lightbox-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint15:D1:F9:FD:F4:47:59:FF:66:C1:EB:18:18:71:8F:7D:9A:38:20:14
ValidityTue, 16 Apr 2024 03:24:35 GMT - Tue, 09 Jul 2024 03:24:34 GMT

File type
JavaScript source, ASCII text, with very long lines (7690)
Size
3.0 kB (2974 bytes)
Hash
656bf7bf1304fab13624e0b2550c312e
25afd50fb250a09c7d5e89397173344db0530dc6
b765500a58cc93374829c9d2b1510d617fcc5aada2849d4efdd1f301a7253d8b

HTTP Headers

GET /rtv/012404181825000/v0/amp-auto-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://takeru-one.com
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 2974
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 18:28:12 GMT
expires: Fri, 02 May 2025 18:28:12 GMT
cache-control: public, max-age=31536000
etag: "663cf6dca8295d04"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 122833
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/rtv/012404181825000/v0/amp-loader-0.1.js

216.58.207.193

200 OK

3.9 kB

URL GET HTTP/2
cdn.ampproject.org/rtv/012404181825000/v0/amp-loader-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint15:D1:F9:FD:F4:47:59:FF:66:C1:EB:18:18:71:8F:7D:9A:38:20:14
ValidityTue, 16 Apr 2024 03:24:35 GMT - Tue, 09 Jul 2024 03:24:34 GMT

File type
JavaScript source, ASCII text, with very long lines (12614)
Size
3.9 kB (3942 bytes)
Hash
a6b8d507d4704d2eda7a1c98ca5f37b8
d8670fc36c37041eef2eff1f5426d9dad26b5dd3
cb6fcadd038e03de5104bf1711a8084c485490bb563206db0a673d271e274987

HTTP Headers

GET /rtv/012404181825000/v0/amp-loader-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://takeru-one.com
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 3942
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 23:17:14 GMT
expires: Fri, 02 May 2025 23:17:14 GMT
cache-control: public, max-age=31536000
etag: "5536cb3ac106fb0a"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 105491
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

i0.wp.com/mossandfog.com/wp-content/uploads/2019/10/halloween_radio.gif?fit=800%2C600&ssl=1

192.0.77.2

200 OK

290 kB

URL GET HTTP/2
i0.wp.com/mossandfog.com/wp-content/uploads/2019/10/halloween_radio.gif?fit=800%2C600&ssl=1
IP
192.0.77.2:443
ASN
#2635 AUTOMATTIC

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
290 kB (289586 bytes)
Hash
ce608272f3804c840a4700dfb495ab11
b4232199ee456d687a13e34c7b1b259e9d700bb6
18cab29d71fe62208611c720ba567ea8ccd77e06f903609b131da9cf020d08f6

HTTP Headers

GET /mossandfog.com/wp-content/uploads/2019/10/halloween_radio.gif?fit=800%2C600&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 04:35:25 GMT
content-type: image/webp
content-length: 289586
last-modified: Sat, 17 Feb 2024 18:00:03 GMT
expires: Tue, 17 Feb 2026 06:00:03 GMT
cache-control: public, max-age=63115200
link: <https://mossandfog.com/wp-content/uploads/2019/10/halloween_radio.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "f1ebda60b82adb34"
vary: Accept
x-nc: HIT arn 2
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2

fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2

142.250.74.99

200 OK

39 kB

URL GET HTTP/2
fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 39412, version 1.0
Size
39 kB (39412 bytes)
Hash
f00895393a31c17c1d38b3ca7a0c803f
fa19070e138b46a2d4234af45cce46f0aa769ad9
91c01ec0de315f973f4c00041b7ae25e1a790cedff79a6fbb56c571bba379142

HTTP Headers

GET /s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://takeru-one.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:59:50 GMT
expires: Sat, 03 May 2025 01:59:50 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Feb 2024 22:43:09 GMT
content-type: font/woff2
age: 95735
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2

142.250.74.99

200 OK

39 kB

URL GET HTTP/2
fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 39412, version 1.0
Size
39 kB (39412 bytes)
Hash
f00895393a31c17c1d38b3ca7a0c803f
fa19070e138b46a2d4234af45cce46f0aa769ad9
91c01ec0de315f973f4c00041b7ae25e1a790cedff79a6fbb56c571bba379142

HTTP Headers

GET /s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://takeru-one.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 01:59:50 GMT
expires: Sat, 03 May 2025 01:59:50 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Feb 2024 22:43:09 GMT
content-type: font/woff2
age: 95735
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

zerossl.ocsp.sectigo.com/

104.18.38.233

727 B

URL
zerossl.ocsp.sectigo.com/
IP
104.18.38.233:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
727 B (727 bytes)
Hash
9ae70c6f9dda58306cd591c13cdc91c7
a6c6af8b191bfd61a917a6ead396913cbf1771a3
86a246e5022f3a47e6121ec44db6c8cd4d36fb86e5ba1b513fa2436a91538f3b

HTTP Headers

POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 04:35:26 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Thu, 02 May 2024 10:30:32 GMT
Expires: Thu, 09 May 2024 10:30:31 GMT
Etag: "a6c6af8b191bfd61a917a6ead396913cbf1771a3"
Cache-Control: max-age=452704,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 87e5c8b70dd30b45-OSL

178.128.17.197/berlin77/upload/TAKERU-OFFICIAL-LOGO-II.png

178.128.17.197

200 OK

148 kB

URL GET HTTP/2
178.128.17.197/berlin77/upload/TAKERU-OFFICIAL-LOGO-II.png
IP
178.128.17.197:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerZeroSSL
Subject178.128.17.197
Fingerprint55:3B:05:A7:EE:8F:AE:9F:8D:C6:0A:9A:F3:05:82:7A:C2:A5:79:A7
ValidityThu, 14 Mar 2024 00:00:00 GMT - Wed, 12 Jun 2024 23:59:59 GMT

File type
PNG image data, 750 x 258, 8-bit/color RGBA, non-interlaced
Size
148 kB (148252 bytes)
Hash
5a00a76dd2a1c299fd9f73ecea7b5f91
50ebb79b47cb384975a7aa23fa8987b5bc65dda9
fe7428817d8e307eefb76f752eb539bde94cf374abe1f6618fd62902ee61e532

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /berlin77/upload/TAKERU-OFFICIAL-LOGO-II.png HTTP/1.1
Host: 178.128.17.197
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 11 May 2024 04:35:26 GMT
etag: "2431c-657c0ba2-4093;;;"
last-modified: Fri, 15 Dec 2023 08:17:38 GMT
content-type: image/png
content-length: 148252
accept-ranges: bytes
date: Sat, 04 May 2024 04:35:26 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

178.128.17.197/berlin77/upload/TAKERU-OFFICIAL-LOGO-II.png

178.128.17.197

200 OK

148 kB

URL GET HTTP/2
178.128.17.197/berlin77/upload/TAKERU-OFFICIAL-LOGO-II.png
IP
178.128.17.197:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerZeroSSL
Subject178.128.17.197
Fingerprint55:3B:05:A7:EE:8F:AE:9F:8D:C6:0A:9A:F3:05:82:7A:C2:A5:79:A7
ValidityThu, 14 Mar 2024 00:00:00 GMT - Wed, 12 Jun 2024 23:59:59 GMT

File type
PNG image data, 750 x 258, 8-bit/color RGBA, non-interlaced
Size
148 kB (148252 bytes)
Hash
5a00a76dd2a1c299fd9f73ecea7b5f91
50ebb79b47cb384975a7aa23fa8987b5bc65dda9
fe7428817d8e307eefb76f752eb539bde94cf374abe1f6618fd62902ee61e532

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /berlin77/upload/TAKERU-OFFICIAL-LOGO-II.png HTTP/1.1
Host: 178.128.17.197
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sat, 11 May 2024 04:35:26 GMT
etag: "2431c-657c0ba2-4093;;;"
last-modified: Fri, 15 Dec 2023 08:17:38 GMT
content-type: image/png
content-length: 148252
accept-ranges: bytes
date: Sat, 04 May 2024 04:35:26 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap

142.250.74.74

200 OK

6.1 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://takeru-one.com/home/11-bo-resmi/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (6258), with no line terminators
Size
6.1 kB (6098 bytes)
Hash
2b411540627fa4b257bb1fed8643c888
29a10509d9f151b56907ba92464e60828e0d14ab
b39f9e1f74ff1b1dbedee99caea06b1832c0a39a4743070ed15fe9eb993128eb

HTTP Headers

GET /css2?family=Noto+Sans:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://takeru-one.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 04:35:24 GMT
date: Sat, 04 May 2024 04:35:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type