Report - reptakeover.net

Report Overview

Submitted URL
reptakeover.net
IP
162.255.119.11
ASN
#22612 NAMECHEAP-NET
Submitted
2023-05-10 02:47:35
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
reptakeover.net	unknown	2022-05-10	2023-03-13	2023-05-06	656 B	582 B	162.255.119.11
www.reptakeover.net	unknown	unknown	No data	No data	1.0 kB	4.5 kB	198.54.117.211
parkingcrew.net	54699	2011-01-24	2013-04-19	2019-03-28	385 B	3.9 kB	185.53.179.29
d38psrni17bvxu.cloudfront.net	unknown	2008-04-25	2022-09-22	2023-05-09	348 B	6.1 kB	54.230.245.8
afs.googleusercontent.com	12123	2008-11-17	2013-05-06	2023-05-09	967 B	2.1 kB	142.250.74.97
i.cdnpark.com	93792	2011-11-09	2014-04-23	2019-03-24	1.1 kB	8.4 kB	54.230.111.81
www.google.com	7	1997-09-15	2015-05-10	2023-05-08	2.4 kB	209 kB	142.250.74.132
js.parkingcrew.net	94546	2011-01-24	2017-01-29	2023-05-09	1.9 kB	5.0 kB	185.53.178.30
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-09	2.0 kB	4.2 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-10 02:47:31	low	162.255.119.11	Client IP	ET INFO Namecheap URL Forward

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	www.google.com/afs/ads/i/iframe.html	1.3 kB	2023-04-05	2024-04-23
Pretty URL www.google.com/afs/ads/i/iframe.html IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:36:39 Last Seen2024-04-23 23:57:49 Times Seen21600 Hash 33839cb72649c81ab58b763c95b4a163 0c9b62881e660fded013cee58439ae287690065a cdded269406c9b2b49a3066d12e75913abf338cdd7fa00e31fff299efef1cb76 Loading...

	www.google.com/adsense/domains/caf.js	148 kB	2023-05-03	2023-05-17
Pretty URL www.google.com/adsense/domains/caf.js IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-03 19:50:16 Last Seen2023-05-17 18:16:31 Times Seen1366 Hash 2b81572eb26b5b487266c51af2ec4cec 0c89d880d11700ea0efb853de51c6693f4e0e8df f5f58396b191db3de7b9981fc9e4f03d33a29697b7e8705449e064b4b8a2684d Loading...

	www.reptakeover.net/	0 B	2023-03-07	2024-04-24
Pretty URL www.reptakeover.net/ IP 198.54.117.211 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-24 00:14:06 Times Seen37027383 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	parkingcrew.net/jsparkcaf.php?regcn=243142&_v=2&_h=www.reptakeover.net&_t=1683686847605	3.6 kB	2023-05-10	2023-05-10
Pretty URL parkingcrew.net/jsparkcaf.php?regcn=243142&_v=2&_h=www.reptakeover.net&_t=1683686847605 IP 185.53.179.29 ASN #61969 Team Internet AG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-10 04:47:42 Last Seen2023-05-10 04:47:42 Times Seen2 Hash ecfc3673e58327d8cf7b2933083ec4b9 0f604ab37ddb2e7cf0eec6498f76a19576104828 00f28644e8201eb65d2cd6e7d58d77ecb2a0f9ebe08e8794457c4173311982b1 Loading...

	js.parkingcrew.net/assets/scripts/registrar-caf/243142.js	3.0 kB	2023-03-07	2023-09-26
Pretty URL js.parkingcrew.net/assets/scripts/registrar-caf/243142.js IP 185.53.178.30 ASN #19905 NEUSTAR-AS6 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:07 Last Seen2023-09-26 11:43:53 Times Seen8981 Hash 23316d6bbbe4b9d7c85945ce4c9428e5 f7c03d2a03416a697d658cf799620684f958664b 119710c0d9e01024bc9d65493a77b661196c02706ce008f5152f78b3c224a981 Loading...

	www.reptakeover.net/	0 B	2023-03-07	2024-04-24
Pretty URL www.reptakeover.net/ IP 198.54.117.211 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-24 00:14:06 Times Seen37027383 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.google.com/afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.reptakeover.net%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301100%2C17301187%2C17301190&format=r10%7Cs&nocache=1891683686848724&num=0&output=afd_ads&domain_name=www.reptakeover.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1683686848735&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=528505921&uio=--&cont=tc_holder1&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fwww.reptakeover.net%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720	8.5 kB	2023-05-10	2023-05-10
Pretty URL www.google.com/afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.reptakeover.net%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301100%2C17301187%2C17301190&format=r10%7Cs&nocache=1891683686848724&num=0&output=afd_ads&domain_name=www.reptakeover.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1683686848735&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=528505921&uio=--&cont=tc_holder1&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fwww.reptakeover.net%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720 IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-10 04:47:42 Last Seen2023-05-10 04:47:42 Times Seen1 Hash 3d26a579032fe1d21d587ab89b8e58ac 24b021382e183213af7f365d46aff714102269ab 61ef01e926a6227e9bacfc3202d01a86919d627f45e4e01b3bd0b41d06d289a2 Loading...

	www.google.com/adsense/domains/caf.js?abp=1	148 kB	2023-05-09	2023-05-16
Pretty URL www.google.com/adsense/domains/caf.js?abp=1 IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-09 06:14:44 Last Seen2023-05-16 07:48:28 Times Seen14 Hash 32a4b322507c7602472f3b033bc1ca20 9c3ee7b44d7bb0387737b8f45f394f5e9e04de99 c9163224ca9bf8ba5cce6a6affaf1c4168c0a792812d167f58b3474997abb20e Loading...

	d38psrni17bvxu.cloudfront.net/scripts/jsparkcaf.js	5.6 kB	2023-03-07	2023-09-26
Pretty URL d38psrni17bvxu.cloudfront.net/scripts/jsparkcaf.js IP 54.230.245.8 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:07 Last Seen2023-09-26 11:43:53 Times Seen10069 Hash 6f95d346f97b06c2d81a5cb147d35de0 c591eaa19ed0d227b4555f5e699b668b05aa40b0 35ca990c39f9194a5a17ff664a0fdcc7dfb6cb433ea6844e2960d9744bd9b9b6 Loading...

	www.reptakeover.net/	0 B	2023-03-07	2024-04-24
Pretty URL www.reptakeover.net/ IP 198.54.117.211 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-24 00:14:06 Times Seen37027383 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

		Size	First Seen	Last Seen
	#1 Write - 7cb7b8c2b066800d572cf11edc5beb4a	141 B	2023-05-10	2023-05-10
Pretty Observations First Seen2023-05-10 04:47:42 Last Seen2023-05-10 04:47:42 Times Seen1 Hash 7cb7b8c2b066800d572cf11edc5beb4a e84296664fb33a470977742bf46f91a779bb8e9c f377b71932af0b624292e6460e39f0a7ed386c2596f9c0947bd466b369beabab Loading...

	#2 Write - 58909f7a8f9d6f81fd53aabc82acd4f9	69 B	2023-03-13	2023-09-26
Pretty Observations First Seen2023-03-13 14:03:50 Last Seen2023-09-26 11:43:53 Times Seen5434 Hash 58909f7a8f9d6f81fd53aabc82acd4f9 5b0209eb64794c055142858fed1207d5398cb837 c321c2a6c6bf4db2cc23a72b8df7734b0da497fae55543b1606d1fdffbc70a68 Loading...

	#3 Write - 38cd9463cfd81c97218fd596f4a5ede1	76 B	2023-03-07	2023-09-26
Pretty Observations First Seen2023-03-07 18:52:18 Last Seen2023-09-26 11:43:53 Times Seen5434 Hash 38cd9463cfd81c97218fd596f4a5ede1 7e4a49ebcc195fc07468badbee81aea7d4c14c8f 6f9c01bfa9404b8a13f98b0befe67694ae9e479f6b1066c1779d1c737af78231 Loading...

	#4 Write - e81c63f6590e78d2bffd5648f34a89b4	88 B	2023-03-07	2023-09-26
Pretty Observations First Seen2023-03-07 01:07:07 Last Seen2023-09-26 11:43:53 Times Seen4817 Hash e81c63f6590e78d2bffd5648f34a89b4 06040b1ff40d4857c5f7ebced925af93e8074d13 9b3e5b0d0240e600f7ddf3c50decf1920acc8aa95234773b18a9dc0b9d4d9e22 Loading...

HTTP Transactions (26)

URL IP Response Size

reptakeover.net/

162.255.119.11

50 B

URL User Request GET
reptakeover.net/
IP
162.255.119.11:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text
Size
50 B (50 bytes)
Hash
077a4e271b705f5842b3fd772b43766d
2629b54aa8e09636b9bb811d3f1263dadeb3009f
a22c7ee425d48bee1b539e1be6a88f012e5428cd3379183c01089fa6844ca0bd

Detections

NIDS	Severity	Alert
suricata	low	ET INFO Namecheap URL Forward

HTTP Headers

GET / HTTP/1.1
Host: reptakeover.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 10 May 2023 02:47:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 50
Connection: keep-alive
Location: http://www.reptakeover.net/
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx

www.reptakeover.net/

198.54.117.211

1.9 kB

URL User Request GET
www.reptakeover.net/
IP
198.54.117.211:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (319), with CRLF line terminators
Size
1.9 kB (1931 bytes)
Hash
783b915d9bad892d11fa62eb7e8095b8
7fe2e52b392ba14cac1915ef8a00b9b0a922853f
2931d6701a39a97af4fd7bde7d9cb989a99026468318ef16f11a961ed55be620

HTTP Headers

GET / HTTP/1.1
Host: www.reptakeover.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 10 May 2023 02:47:26 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: namecheap-nginx
X-CST: MISS, MISS
Allow: GET, HEAD
Content-Encoding: gzip

reptakeover.net/

162.255.119.11

50 B

URL User Request GET
reptakeover.net/
IP
162.255.119.11:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text
Size
50 B (50 bytes)
Hash
077a4e271b705f5842b3fd772b43766d
2629b54aa8e09636b9bb811d3f1263dadeb3009f
a22c7ee425d48bee1b539e1be6a88f012e5428cd3379183c01089fa6844ca0bd

Detections

NIDS	Severity	Alert
suricata	low	ET INFO Namecheap URL Forward

HTTP Headers

GET / HTTP/1.1
Host: reptakeover.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 10 May 2023 02:47:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 50
Connection: keep-alive
Location: http://www.reptakeover.net/
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx

www.reptakeover.net/

198.54.117.215

1.9 kB

URL User Request GET
www.reptakeover.net/
IP
198.54.117.215:0
ASN
#22612 NAMECHEAP-NET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (319), with CRLF line terminators
Size
1.9 kB (1931 bytes)
Hash
783b915d9bad892d11fa62eb7e8095b8
7fe2e52b392ba14cac1915ef8a00b9b0a922853f
2931d6701a39a97af4fd7bde7d9cb989a99026468318ef16f11a961ed55be620

HTTP Headers

GET / HTTP/1.1
Host: www.reptakeover.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 10 May 2023 02:47:27 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: namecheap-nginx
X-CST: MISS, HIT
Allow: GET, HEAD
Content-Encoding: gzip

i.cdnpark.com/themes/assets/style.css

54.230.111.81

200 OK

359 B

URL GET HTTP/1.1
i.cdnpark.com/themes/assets/style.css
IP
54.230.111.81:80
ASN
#16509 AMAZON-02

Requested by
http://www.reptakeover.net/

File type
ASCII text
Size
359 B (359 bytes)
Hash
e42aacc9e34f351a935e6e83f2cb4a05
539587b5cb2e9383fbf115c0f7f99406079341f9
9cb157f272caecfbd484a0e3b6a8e2f7821e78c6422653ef83530ed9f73b607b

HTTP Headers

GET /themes/assets/style.css HTTP/1.1
Host: i.cdnpark.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Mon, 28 Nov 2022 10:41:35 GMT
Content-Encoding: gzip
Date: Wed, 10 May 2023 02:00:45 GMT
ETag: W/"6384905f-37c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UxbWOyrYR40L8-E1_W14ArhmOebRUpCkLVQcmN1EDmQke5Fs22GVmA==
Age: 3856

i.cdnpark.com/themes/registrar/style_namecheap.css

54.230.111.81

200 OK

1.8 kB

URL GET HTTP/1.1
i.cdnpark.com/themes/registrar/style_namecheap.css
IP
54.230.111.81:80
ASN
#16509 AMAZON-02

Requested by
http://www.reptakeover.net/

File type
ASCII text, with very long lines (1313)
Size
1.8 kB (1769 bytes)
Hash
fcfbf44db7a3eca961510e9df77868bf
c378750ca8a6119c78bffa548104947a42edb2df
8cf5887217a8a780e49a5c6ce3773c70e79b33429212ef3325d8f6e0094a0899

HTTP Headers

GET /themes/registrar/style_namecheap.css HTTP/1.1
Host: i.cdnpark.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Content-Encoding: gzip
Date: Tue, 09 May 2023 18:15:25 GMT
ETag: W/"5ebab1f0-fa0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yEMuXW_Jd1SWPz2RgQx3edHR9-6cDOV1y0LFVXuLvSlfU50S7ydyqQ==
Age: 30723

i.cdnpark.com/themes/registrar/images/logo_namecheap.png

54.230.111.81

200 OK

4.9 kB

URL GET HTTP/1.1
i.cdnpark.com/themes/registrar/images/logo_namecheap.png
IP
54.230.111.81:80
ASN
#16509 AMAZON-02

Requested by
http://www.reptakeover.net/

File type
PNG image data, 260 x 60, 8-bit colormap, non-interlaced\012- data
Size
4.9 kB (4917 bytes)
Hash
24cfc82dfacb3ecc2e1ba6600391576d
49eaca85596996a749c9d7407189fdb86845667e
903046ac1355826e49c089ca2dd88c720bff908adb1760ee6e1884755b6041f1

HTTP Headers

GET /themes/registrar/images/logo_namecheap.png HTTP/1.1
Host: i.cdnpark.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4917
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Accept-Ranges: bytes
Date: Wed, 10 May 2023 01:22:27 GMT
ETag: "5ebab1f0-1335"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3EnEVtCYKxQ3DQoI3-waPPD8Q20JHa0WZWE01fa4loxRrLes_oP7lw==
Age: 5101

parkingcrew.net/jsparkcaf.php?regcn=243142&_v=2&_h=www.reptakeover.net&_t=1683686847605

185.53.179.29

200 OK

3.6 kB

URL GET HTTP/1.1
parkingcrew.net/jsparkcaf.php?regcn=243142&_v=2&_h=www.reptakeover.net&_t=1683686847605
IP
185.53.179.29:80
ASN
#61969 Team Internet AG

Requested by
http://www.reptakeover.net/

File type
HTML document, ASCII text, with very long lines (2980)
Size
3.6 kB (3612 bytes)
Hash
ecfc3673e58327d8cf7b2933083ec4b9
0f604ab37ddb2e7cf0eec6498f76a19576104828
00f28644e8201eb65d2cd6e7d58d77ecb2a0f9ebe08e8794457c4173311982b1

HTTP Headers

GET /jsparkcaf.php?regcn=243142&_v=2&_h=www.reptakeover.net&_t=1683686847605 HTTP/1.1
Host: parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 10 May 2023 02:47:28 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Language: norwegian
X-Domain: reptakeover.net
X-Subdomain: www
X-Template: tpl_CleanPeppermintBlack_twoclick

www.google.com/adsense/domains/caf.js?abp=1

142.250.74.132

200 OK

54 kB

URL GET HTTP/1.1
www.google.com/adsense/domains/caf.js?abp=1
IP
142.250.74.132:80
ASN
#15169 GOOGLE

Requested by
http://www.reptakeover.net/

File type
ASCII text, with very long lines (2125)
Size
54 kB (53801 bytes)
Hash
32a4b322507c7602472f3b033bc1ca20
9c3ee7b44d7bb0387737b8f45f394f5e9e04de99
c9163224ca9bf8ba5cce6a6affaf1c4168c0a792812d167f58b3474997abb20e

HTTP Headers

GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Wed, 10 May 2023 02:47:28 GMT
Expires: Wed, 10 May 2023 02:47:28 GMT
Cache-Control: private, max-age=3600
ETag: "14578126135475220898"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0

d38psrni17bvxu.cloudfront.net/scripts/jsparkcaf.js

54.230.245.8

200 OK

5.6 kB

URL GET HTTP/1.1
d38psrni17bvxu.cloudfront.net/scripts/jsparkcaf.js
IP
54.230.245.8:80
ASN
#16509 AMAZON-02

Requested by
http://www.reptakeover.net/

File type
ASCII text
Size
5.6 kB (5638 bytes)
Hash
6f95d346f97b06c2d81a5cb147d35de0
c591eaa19ed0d227b4555f5e699b668b05aa40b0
35ca990c39f9194a5a17ff664a0fdcc7dfb6cb433ea6844e2960d9744bd9b9b6

HTTP Headers

GET /scripts/jsparkcaf.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 5638
Connection: keep-alive
Server: nginx
Date: Wed, 10 May 2023 00:53:09 GMT
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Accept-Ranges: bytes
ETag: "5ebab1f0-1606"
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0w9ULVEu4cjgWEsRL1fNvKWVzfgaHv2hIzF_j8eV3OPGvDC11MqdMA==
Age: 6859

js.parkingcrew.net/ls.php?t=645b05c0&token=800733e7f2d19d3f8e1588c9f703353823dd8db7

185.53.178.30

201 Created

16 B

URL GET HTTP/1.1
js.parkingcrew.net/ls.php?t=645b05c0&token=800733e7f2d19d3f8e1588c9f703353823dd8db7
IP
185.53.178.30:80
ASN
#19905 NEUSTAR-AS6

Requested by
http://www.reptakeover.net/

File type
JSON data\012- , ASCII text, with no line terminators
Size
16 B (16 bytes)
Hash
7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97

HTTP Headers

GET /ls.php?t=645b05c0&token=800733e7f2d19d3f8e1588c9f703353823dd8db7 HTTP/1.1
Host: js.parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.reptakeover.net
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 201 Created
Server: nginx
Date: Wed, 10 May 2023 02:47:28 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 645b05c0761d822e11705e8b
Charset: utf-8
Access-Control-Allow-Origin: http://www.reptakeover.net
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_PJtJhg+Elne8+X9gYn5AirBYchFyb6C9/vuKPxjhDWoxCHXuUSHEp6DI3Oco6GsQm9+CKWp69hLF6t56VabcWg==

js.parkingcrew.net/track.php?domain=reptakeover.net&toggle=browserjs&uid=MTY4MzY4Njg0OC4yMTU0OmI5ZGVlYzE3NTQzZDk0NDYyOTA4ZTQ0OTg5MTAxNTZmZjVlMzkzNjBiN2Q4MTllMjE3YWFjMmU2OTg1ZjgyMDI6NjQ1YjA1YzAzNDk2ZQ%3D%3D

185.53.178.30

200 OK

20 B

URL GET HTTP/1.1
js.parkingcrew.net/track.php?domain=reptakeover.net&toggle=browserjs&uid=MTY4MzY4Njg0OC4yMTU0OmI5ZGVlYzE3NTQzZDk0NDYyOTA4ZTQ0OTg5MTAxNTZmZjVlMzkzNjBiN2Q4MTllMjE3YWFjMmU2OTg1ZjgyMDI6NjQ1YjA1YzAzNDk2ZQ%3D%3D
IP
185.53.178.30:80
ASN
#19905 NEUSTAR-AS6

Requested by
http://www.reptakeover.net/

File type
gzip compressed data, max speed, from Unix\012- data
Size
20 B (20 bytes)
Hash
a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

HTTP Headers

GET /track.php?domain=reptakeover.net&toggle=browserjs&uid=MTY4MzY4Njg0OC4yMTU0OmI5ZGVlYzE3NTQzZDk0NDYyOTA4ZTQ0OTg5MTAxNTZmZjVlMzkzNjBiN2Q4MTllMjE3YWFjMmU2OTg1ZjgyMDI6NjQ1YjA1YzAzNDk2ZQ%3D%3D HTTP/1.1
Host: js.parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.reptakeover.net
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 10 May 2023 02:47:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

js.parkingcrew.net/assets/scripts/registrar-caf/243142.js

185.53.178.30

200 OK

3.0 kB

URL GET HTTP/1.1
js.parkingcrew.net/assets/scripts/registrar-caf/243142.js
IP
185.53.178.30:80
ASN
#19905 NEUSTAR-AS6

Requested by
http://www.reptakeover.net/

File type
ASCII text
Size
3.0 kB (2994 bytes)
Hash
23316d6bbbe4b9d7c85945ce4c9428e5
f7c03d2a03416a697d658cf799620684f958664b
119710c0d9e01024bc9d65493a77b661196c02706ce008f5152f78b3c224a981

HTTP Headers

GET /assets/scripts/registrar-caf/243142.js HTTP/1.1
Host: js.parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 10 May 2023 02:47:29 GMT
Content-Type: application/javascript
Content-Length: 2994
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-bb2"
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
54f6261ce091b62b3a0dbb403a29acd4
d5e2a7583ccdbf8619822cdec9d460d42b4aeabe
a932fb80085d49730fa5c000a7ea2b871a2446c53b763074188ca0e555ef38b8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 02:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
54f6261ce091b62b3a0dbb403a29acd4
d5e2a7583ccdbf8619822cdec9d460d42b4aeabe
a932fb80085d49730fa5c000a7ea2b871a2446c53b763074188ca0e555ef38b8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 02:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/afs/ads/i/iframe.html

142.250.74.132

200 OK

726 B

URL GET HTTP/2
www.google.com/afs/ads/i/iframe.html
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
http://www.reptakeover.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint22:2A:81:06:18:D1:68:C5:1A:F7:E4:D9:FB:DF:C4:9B:E3:FD:BF:6E
ValidityMon, 17 Apr 2023 08:26:19 GMT - Mon, 10 Jul 2023 08:26:18 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1559)
Size
726 B (726 bytes)
Hash
6823d283db17ea1139042687a69c2352
e9dfb70b967a6e1a067880626b516905e4ce6237
3b60b18630fb3e5744ff79cbf3854c1357df9460f8e28a2ba317923c1bd52629

HTTP Headers

GET /afs/ads/i/iframe.html HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/html
content-security-policy: script-src 'nonce-PmWlgplVx_QpVwstr2h3UQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
content-length: 726
date: Wed, 10 May 2023 02:47:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Mon, 18 Oct 2021 14:30:00 GMT
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.reptakeover.net%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301100%2C17301187%2C17301190&format=r10%7Cs&nocache=1891683686848724&num=0&output=afd_ads&domain_name=www.reptakeover.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1683686848735&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=528505921&uio=--&cont=tc_holder1&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fwww.reptakeover.net%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720

142.250.74.132

200 OK

3.1 kB

URL GET HTTP/2
www.google.com/afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.reptakeover.net%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301100%2C17301187%2C17301190&format=r10%7Cs&nocache=1891683686848724&num=0&output=afd_ads&domain_name=www.reptakeover.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1683686848735&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=528505921&uio=--&cont=tc_holder1&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fwww.reptakeover.net%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
http://www.reptakeover.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint22:2A:81:06:18:D1:68:C5:1A:F7:E4:D9:FB:DF:C4:9B:E3:FD:BF:6E
ValidityMon, 17 Apr 2023 08:26:19 GMT - Mon, 10 Jul 2023 08:26:18 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7506)
Size
3.1 kB (3063 bytes)
Hash
b9e3def569be6bee5bb53090710e5cc3
6ea11ab4521866bc670ddecf050d044f7f70feb2
af10a0947c1dfd3d04b6ce1f483cc819bd30cfcb72c1e7054efef76210c0580b

HTTP Headers

GET /afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.reptakeover.net%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301100%2C17301187%2C17301190&format=r10%7Cs&nocache=1891683686848724&num=0&output=afd_ads&domain_name=www.reptakeover.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1683686848735&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=528505921&uio=--&cont=tc_holder1&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fwww.reptakeover.net%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Wed, 10 May 2023 02:47:29 GMT
expires: Wed, 10 May 2023 02:47:29 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-RMRV5N_lfp4oWqD91rE28A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-encoding: br
server: gws
content-length: 3063
x-xss-protection: 0
set-cookie: NID=511=vqSOGB3gFj592rqAA0txwZoqJZFbJw1ZaIu_MaomrQNwbmmWlR8yB33DVOvqO76LD2U9WpsLIW2TnnJjMHrQGZq_kShrx_G5MwVomfgOJ9eAicF-L9vV1ZZMQEzbCOVFOYSEokem_3UEDwgwLwfam73zGFzfYBba0ofK7YgoiGk; expires=Thu, 09-Nov-2023 02:47:29 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+150; expires=Fri, 09-May-2025 02:47:29 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0a27336c61aaddf2250f77658e480335
10c6df40f6125895cad4352516c35e0e23941448
c163d2a0a1c9c63f9b28bce8a9c4226e1749de4ff49a2ab230f15305eb5ad21d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 02:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

js.parkingcrew.net/track.php?domain=reptakeover.net&caf=1&toggle=answercheck&answer=yes&uid=MTY4MzY4Njg0OC4yMTU0OmI5ZGVlYzE3NTQzZDk0NDYyOTA4ZTQ0OTg5MTAxNTZmZjVlMzkzNjBiN2Q4MTllMjE3YWFjMmU2OTg1ZjgyMDI6NjQ1YjA1YzAzNDk2ZQ%3D%3D

185.53.178.30

200 OK

20 B

URL GET HTTP/1.1
js.parkingcrew.net/track.php?domain=reptakeover.net&caf=1&toggle=answercheck&answer=yes&uid=MTY4MzY4Njg0OC4yMTU0OmI5ZGVlYzE3NTQzZDk0NDYyOTA4ZTQ0OTg5MTAxNTZmZjVlMzkzNjBiN2Q4MTllMjE3YWFjMmU2OTg1ZjgyMDI6NjQ1YjA1YzAzNDk2ZQ%3D%3D
IP
185.53.178.30:80
ASN
#19905 NEUSTAR-AS6

Requested by
http://www.reptakeover.net/

File type
gzip compressed data, max speed, from Unix\012- data
Size
20 B (20 bytes)
Hash
a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

HTTP Headers

GET /track.php?domain=reptakeover.net&caf=1&toggle=answercheck&answer=yes&uid=MTY4MzY4Njg0OC4yMTU0OmI5ZGVlYzE3NTQzZDk0NDYyOTA4ZTQ0OTg5MTAxNTZmZjVlMzkzNjBiN2Q4MTllMjE3YWFjMmU2OTg1ZjgyMDI6NjQ1YjA1YzAzNDk2ZQ%3D%3D HTTP/1.1
Host: js.parkingcrew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.reptakeover.net
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 10 May 2023 02:47:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: answercheck
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cc4ca839d00cbcbce0d26c561947e3d6
ead93f633fc1b31011fdafb16474e5268aa5165c
3411ede3866ba2743b34c9b0ceef3f1ec972e7007a7d7c94df6004426e1902a7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 02:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cc4ca839d00cbcbce0d26c561947e3d6
ead93f633fc1b31011fdafb16474e5268aa5165c
3411ede3866ba2743b34c9b0ceef3f1ec972e7007a7d7c94df6004426e1902a7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 02:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2

142.250.74.97

200 OK

273 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.reptakeover.net%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301100%2C17301187%2C17301190&format=r10%7Cs&nocache=1891683686848724&num=0&output=afd_ads&domain_name=www.reptakeover.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1683686848735&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=528505921&uio=--&cont=tc_holder1&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fwww.reptakeover.net%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5B:7C:CC:9B:35:65:AF:5C:4A:0A:CA:A9:D5:41:DA:66:86:43:19:CD
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size
273 B (273 bytes)
Hash
6751e07e0f93bd43ab90822f4b2eb62a
d1d0c6f0b4697b0a4e61ffbf171e8c60eac7c832
ff563f41765da081fe9fd40e8bb33a623df033b10050a8ae8c1b46e15107d8f1

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 273
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Tue, 09 May 2023 07:03:23 GMT
expires: Wed, 10 May 2023 06:03:23 GMT
cache-control: public, max-age=82800
age: 71046
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%231967D2

142.250.74.97

200 OK

174 B

URL GET HTTP/2
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%231967D2
IP
142.250.74.97:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.reptakeover.net%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301100%2C17301187%2C17301190&format=r10%7Cs&nocache=1891683686848724&num=0&output=afd_ads&domain_name=www.reptakeover.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1683686848735&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=528505921&uio=--&cont=tc_holder1&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fwww.reptakeover.net%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720
Certificate
IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5B:7C:CC:9B:35:65:AF:5C:4A:0A:CA:A9:D5:41:DA:66:86:43:19:CD
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size
174 B (174 bytes)
Hash
fc4487156e15233887a05c4c4e2744c9
2ad35bbfb0d2bb500a4f1fcd678477d7b01ce6a2
93fad9e8b746119c723b0f0f470ac4eeb2f336bad98295bec7fd28d185a10ddb

HTTP Headers

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%231967D2 HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Tue, 09 May 2023 17:33:17 GMT
expires: Wed, 10 May 2023 16:33:17 GMT
cache-control: public, max-age=82800
age: 33252
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cc4ca839d00cbcbce0d26c561947e3d6
ead93f633fc1b31011fdafb16474e5268aa5165c
3411ede3866ba2743b34c9b0ceef3f1ec972e7007a7d7c94df6004426e1902a7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 02:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/adsense/domains/caf.js

142.250.74.132

200 OK

148 kB

URL GET HTTP/3
www.google.com/adsense/domains/caf.js
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://www.google.com/afs/ads?pcsa=false&channel=000001&client=dp-teaminternet09_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fwww.reptakeover.net%2F%3Fcaf&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2744431292869648&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301100%2C17301187%2C17301190&format=r10%7Cs&nocache=1891683686848724&num=0&output=afd_ads&domain_name=www.reptakeover.net&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1683686848735&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=329&frm=0&cl=528505921&uio=--&cont=tc_holder1&jsid=caf&jsv=528505921&rurl=http%3A%2F%2Fwww.reptakeover.net%2F&adbw=slave-1-1%3A720%2Cmaster-1%3A720
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT

File type
ASCII text, with very long lines (2125)
Size
148 kB (147812 bytes)
Hash
2b81572eb26b5b487266c51af2ec4cec
0c89d880d11700ea0efb853de51c6693f4e0e8df
f5f58396b191db3de7b9981fc9e4f03d33a29697b7e8705449e064b4b8a2684d

HTTP Headers

GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Wed, 10 May 2023 02:47:29 GMT
expires: Wed, 10 May 2023 02:47:29 GMT
cache-control: private, max-age=3600
etag: "7274119577584337245"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.reptakeover.net/favicon.ico

0.0.0.0

0 B

URL GET
www.reptakeover.net/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
http://www.reptakeover.net/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.reptakeover.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.reptakeover.net/
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML