Report - rookmgir.pw/

Report Overview

Submitted URL
rookmgir.pw/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 21:53:50
Access
public
Website Title
BunnyCDN Node NO1-830
Final URL
rookmgir.pw/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bunny.net	8482	1999-11-22	2016-07-08	2024-04-17	441 B	8.6 kB	194.242.11.186
bunnycdn.b-cdn.net	unknown	2016-04-25	2016-04-30	2024-03-19	886 B	4.3 kB	194.242.11.186
bunnycdn.com	387654	2015-11-04	2016-04-30	2024-04-17	460 B	7.9 kB	195.181.166.158
rookmgir.pw	unknown	unknown	No data	No data	799 B	2.6 kB	188.114.96.1
fonts.bunny.net	unknown	1999-11-22	2022-03-21	2024-04-18	2.7 kB	78 kB	194.242.11.186

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-19 21:53:25	low	Client IP	188.114.96.1	ET INFO HTTP Request to a *.pw domain
2024-04-19 21:53:25	low	Client IP	188.114.96.1	ET INFO HTTP Request to a *.pw domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (12)

URL IP Response Size

rookmgir.pw/

188.114.96.1

403 Forbidden

829 B

URL User Request GET HTTP/1.1
rookmgir.pw/
IP
188.114.96.1:80
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (712)
Size
829 B (829 bytes)
Hash
8514e60c0a1a02cd234bf71ad1f6f845
bfe433ea07a8626f3598a40d31e2930810941a73
a333d91a7147e6bd103b6bcaad83afef87123458ba1938bf8d00bd9a7ca2eb2a

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.pw domain

HTTP Headers

GET / HTTP/1.1
Host: rookmgir.pw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: text/html
vary: Accept-Encoding
cdn-requestid: 124c19d7ce11ba1babd3dd0e03038bc6
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iY4eMFrm5XKbqd8ddaiGCNpkXZjuBgxciBb79tOXobEVMqLBFBqse5katuCavRfb5sdMIastjn%2F0JBMg4XNNVnbhfWJ5xBU4QPrOKyORx96gjJIcHfkwRiFzEjo8vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 877020936bc5569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.bunny.net/css?family=Rubik:300,400,500,700,900

194.242.11.186

301 Moved Permanently

162 B

URL GET HTTP/1.1
fonts.bunny.net/css?family=Rubik:300,400,500,700,900
IP
194.242.11.186:80
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

HTTP Headers

GET /css?family=Rubik:300,400,500,700,900 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rookmgir.pw/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Fri, 19 Apr 2024 21:53:25 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Server: BunnyCDN-NO1-830
CDN-PullZone: 781720
CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
CDN-RequestCountryCode: NO
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
Location: https://fonts.bunny.net/css?family=Rubik:300,400,500,700,900
CDN-RequestId: c41397f70aeeace92ba5fc30cb80102b

fonts.bunny.net/css?family=Rubik:300,400,500,700,900

194.242.11.186

301 Moved Permanently

162 B

URL GET HTTP/1.1
fonts.bunny.net/css?family=Rubik:300,400,500,700,900
IP
194.242.11.186:80
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

HTTP Headers

GET /css?family=Rubik:300,400,500,700,900 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rookmgir.pw/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Fri, 19 Apr 2024 21:53:25 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Server: BunnyCDN-NO1-830
CDN-PullZone: 781720
CDN-Uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
CDN-RequestCountryCode: NO
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
Location: https://fonts.bunny.net/css?family=Rubik:300,400,500,700,900
CDN-RequestId: 54b7fc449fb48e4e64cbb31057cd882a

fonts.bunny.net/css?family=Rubik:300,400,500,700,900

194.242.11.186

301 Moved Permanently

19 kB

URL GET HTTP/1.1
fonts.bunny.net/css?family=Rubik:300,400,500,700,900
IP
194.242.11.186:80
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/

File type
ASCII text
Size
19 kB (18827 bytes)
Hash
53fbc7378af79f3f34a08fe2692bd32a
82dd7714e3cb8edc24ef4331b587e946e6713ecc
085c8ec49ef7b812d1d70f99afabca6a1f0769a89647d14045bd31c1de1e2030

HTTP Headers

GET /css?family=Rubik:300,400,500,700,900 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rookmgir.pw/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 781720
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
last-modified: Sun, 24 Mar 2024 20:23:38 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 03/24/2024 20:23:38
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 5e0ae78851947bfaedec496ac9eb0a33
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

fonts.bunny.net/rubik/files/rubik-latin-700-normal.woff2

194.242.11.186

200 OK

18 kB

URL GET HTTP/2
fonts.bunny.net/rubik/files/rubik-latin-700-normal.woff2
IP
194.242.11.186:443
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/
Certificate
IssuerLet's Encrypt
Subjectfonts.bunny.net
FingerprintCB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F
ValidityTue, 09 Apr 2024 10:09:28 GMT - Mon, 08 Jul 2024 10:09:27 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18324, version 1.0
Size
18 kB (18324 bytes)
Hash
286d2a8ef294d191f39b9c8cfaa1d2fd
5ce722761250fbccd6f3dedbdee4f7556cefc576
68b1a58930568f827748c48162e8c1a9d3305f6e3567286604151820f21dd010

HTTP Headers

GET /rubik/files/rubik-latin-700-normal.woff2 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rookmgir.pw
DNT: 1
Connection: keep-alive
Referer: https://fonts.bunny.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: font/woff2
content-length: 18324
server: BunnyCDN-NO1-830
cdn-pullzone: 781720
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: "64a64286-4794"
last-modified: Thu, 06 Jul 2023 04:26:46 GMT
cdn-storageserver: SE-318
cdn-fileserver: 344
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 03/24/2024 18:47:34
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 1adc5c8a7d7d2968802c70143c53c794
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.bunny.net/rubik/files/rubik-latin-300-normal.woff2

194.242.11.186

200 OK

17 kB

URL GET HTTP/2
fonts.bunny.net/rubik/files/rubik-latin-300-normal.woff2
IP
194.242.11.186:443
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/
Certificate
IssuerLet's Encrypt
Subjectfonts.bunny.net
FingerprintCB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F
ValidityTue, 09 Apr 2024 10:09:28 GMT - Mon, 08 Jul 2024 10:09:27 GMT

File type
Web Open Font Format (Version 2), TrueType, length 16776, version 1.0
Size
17 kB (16776 bytes)
Hash
124e7d5267c52c3e0d4b5a85e36d1366
23e420ec9c615c9b11bf62b1b5c99fbabd7cb303
a4e992e6715474e327d497767bacee741f032407c9c5bceebcc8efb6a357aa34

HTTP Headers

GET /rubik/files/rubik-latin-300-normal.woff2 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rookmgir.pw
DNT: 1
Connection: keep-alive
Referer: https://fonts.bunny.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: font/woff2
content-length: 16776
server: BunnyCDN-NO1-830
cdn-pullzone: 781720
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: "64a64283-4188"
last-modified: Thu, 06 Jul 2023 04:26:43 GMT
cdn-storageserver: SE-318
cdn-fileserver: 344
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/24/2024 09:53:48
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b1b2e9945749b042df24c431eb7c282f
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

rookmgir.pw/favicon.ico

188.114.96.1

403 Forbidden

444 B

URL GET HTTP/1.1
rookmgir.pw/favicon.ico
IP
188.114.96.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://rookmgir.pw/

File type
HTML document, ASCII text, with very long lines (711)
Size
444 B (444 bytes)
Hash
68ed7772490ed6b745243833d9c28a6c
aa933ee599720512ee0bde1af272092499ffd60a
0e2c694699ac25f9304bb0b077bec074d3d06af861ecd5229798848f3326f96e

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.pw domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rookmgir.pw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rookmgir.pw/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Fri, 19 Apr 2024 21:53:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CDN-RequestId: e37a11e06ed3e38ff397bb0c10b15ab5
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WnukdMNFhbXBfozxTSS6OjRqfDb77I8gBEUbfIQS0E0AaQ7C9kLSH0heM5pvzntDL9jmYMENuy%2Br5maQhPkPzlJfcazPpfCCjZsV2a9eFZxN4ThfX%2BjPF6XYpwMbvg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 877020961bcc56b7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

bunny.net/v2/images/bunnynet-logo.svg

194.242.11.186

200 OK

8.0 kB

URL GET HTTP/2
bunny.net/v2/images/bunnynet-logo.svg
IP
194.242.11.186:443
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/
Certificate
IssuerLet's Encrypt
Subjectbunny.net
Fingerprint4F:D1:A6:1A:77:F9:FB:EE:44:FC:71:3C:EA:D9:0B:2A:C8:8B:0A:CA
ValidityWed, 10 Apr 2024 08:08:52 GMT - Tue, 09 Jul 2024 08:08:51 GMT

File type
SVG Scalable Vector Graphics image
Size
8.0 kB (8046 bytes)
Hash
bd18e9dcef0847eaaa9b9a98a08af583
5009ef1a482e44842093b782ed3d4427c4d1cf0f
6970285035c9d16155ef6335d68ec6ca187acb12a2dbaf72183c72d79868a990

HTTP Headers

GET /v2/images/bunnynet-logo.svg HTTP/1.1
Host: bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rookmgir.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-NO1-830
cdn-pullzone: 876725
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
cache-control: public, max-age=31536000
etag: W/"1d8176d56a5be63"
last-modified: Tue, 01 Feb 2022 13:12:18 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 04/19/2024 06:08:05
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6ea2410d2355ae76072620c342fd8701
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

bunnycdn.b-cdn.net/assets/landingpage/css/unconfigured.css

194.242.11.186

200 OK

1.2 kB

URL GET HTTP/2
bunnycdn.b-cdn.net/assets/landingpage/css/unconfigured.css
IP
194.242.11.186:443
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1330), with no line terminators
Size
1.2 kB (1199 bytes)
Hash
cda817adfc2b33574e2d9b3317d1707f
bb5d89ab5fb95891be243d562b22c445f3941527
db11f12b569dc316861a1a3d3e8b136b0407bb8fb0d79f44271eca8ea45fab57

HTTP Headers

GET /assets/landingpage/css/unconfigured.css HTTP/1.1
Host: bunnycdn.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rookmgir.pw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: text/css
server: BunnyCDN-NO1-830
cdn-pullzone: 390
cdn-uid: 51eb4203-ff94-48c6-99a5-954f277b91de
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: W/"fe7cd42280d91:0"
last-modified: Sat, 06 May 2023 13:58:25 GMT
backend: 2
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/05/2024 15:46:56
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: d7bf301400ff4923be773a2f16726942
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

fonts.bunny.net/rubik/files/rubik-latin-400-normal.woff2

194.242.11.186

200 OK

18 kB

URL GET HTTP/2
fonts.bunny.net/rubik/files/rubik-latin-400-normal.woff2
IP
194.242.11.186:443
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/
Certificate
IssuerLet's Encrypt
Subjectfonts.bunny.net
FingerprintCB:89:86:8E:6D:0A:E5:60:AF:D4:50:FD:A4:62:99:B4:6C:13:A7:1F
ValidityTue, 09 Apr 2024 10:09:28 GMT - Mon, 08 Jul 2024 10:09:27 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18128, version 1.0
Size
18 kB (18128 bytes)
Hash
717055430c80fee2dadb646e2b9800fe
9118698612991a83bfda0dfafdd1b9aba2c9adcb
67a6e7a3b413d838d3c53b06f53a567671f9477bd703ecdebbc5dcffb587b963

HTTP Headers

GET /rubik/files/rubik-latin-400-normal.woff2 HTTP/1.1
Host: fonts.bunny.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rookmgir.pw
DNT: 1
Connection: keep-alive
Referer: https://fonts.bunny.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: font/woff2
content-length: 18128
server: BunnyCDN-NO1-830
cdn-pullzone: 781720
cdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: "64a6428a-46d0"
last-modified: Thu, 06 Jul 2023 04:26:50 GMT
cdn-storageserver: SE-344
cdn-fileserver: 318
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 03/24/2024 18:47:34
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 5aa629059a7e5aee73a4bcc0054ba9ed
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

bunnycdn.com/assets/v2/images/general/il-bg-black-flower.svg

195.181.166.158

200 OK

7.3 kB

URL GET HTTP/2
bunnycdn.com/assets/v2/images/general/il-bg-black-flower.svg
IP
195.181.166.158:443
ASN
#60068 Datacamp Limited

Requested by
http://rookmgir.pw/
Certificate
IssuerLet's Encrypt
Subjectbunnycdn.com
FingerprintE7:FA:68:06:3B:51:D0:90:7A:9D:EB:DE:02:57:E5:70:D1:57:0C:E6
ValiditySun, 07 Apr 2024 19:08:33 GMT - Sat, 06 Jul 2024 19:08:32 GMT

File type
SVG Scalable Vector Graphics image
Size
7.3 kB (7267 bytes)
Hash
4033a037800ca17be9ec0669bddfa8b1
26624ff3f4fd4bbc2afac155abb41742ddd09037
bc0cb2e298da9e4faa9f118f9c1737f1d7af9f3cd986a9cfa3d6cdd3b6c84b83

HTTP Headers

GET /assets/v2/images/general/il-bg-black-flower.svg HTTP/1.1
Host: bunnycdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bunnycdn.b-cdn.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-SE1-725
cdn-pullzone: 390
cdn-uid: 51eb4203-ff94-48c6-99a5-954f277b91de
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
etag: W/"fceaacd62280d91:0"
last-modified: Sat, 06 May 2023 13:58:30 GMT
backend: 2
load-balancer: LB-1
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 05/11/2023 13:21:04
cdn-edgestorageid: 725
cdn-status: 200
cdn-requestid: 4a97024aa1749af914f543d28cd3ed88
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

bunnycdn.b-cdn.net/assets/landingpage/css/unconfigured.css

194.242.11.186

200 OK

1.2 kB

URL GET HTTP/2
bunnycdn.b-cdn.net/assets/landingpage/css/unconfigured.css
IP
194.242.11.186:443
ASN
#34989 ServeTheWorld AS

Requested by
http://rookmgir.pw/
Certificate
IssuerSectigo Limited
Subject*.b-cdn.net
FingerprintFC:D9:3E:09:69:F5:9D:8A:AA:45:73:03:05:F1:8D:E4:5B:80:10:E4
ValiditySun, 05 Nov 2023 00:00:00 GMT - Mon, 11 Nov 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1330), with no line terminators
Size
1.2 kB (1199 bytes)
Hash
cda817adfc2b33574e2d9b3317d1707f
bb5d89ab5fb95891be243d562b22c445f3941527
db11f12b569dc316861a1a3d3e8b136b0407bb8fb0d79f44271eca8ea45fab57

HTTP Headers

GET /assets/landingpage/css/unconfigured.css HTTP/1.1
Host: bunnycdn.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://rookmgir.pw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 21:53:25 GMT
content-type: text/css
server: BunnyCDN-NO1-830
cdn-pullzone: 390
cdn-uid: 51eb4203-ff94-48c6-99a5-954f277b91de
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: W/"fe7cd42280d91:0"
last-modified: Sat, 06 May 2023 13:58:25 GMT
backend: 2
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/05/2024 15:46:56
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 1a04a779d01ad7ea1e5d975db6b7e6a1
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (12)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN