Report - deauthc42-currntlyhc.surge.sh

Report Overview

Submitted URL
deauthc42-currntlyhc.surge.sh
IP
138.68.112.220
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-04-17 22:03:54
Access
public
Website Title
Startpage - Private Search Engine. No Tracking. No Search History.
Final URL
www.startpage.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
deauthc42-currntlyhc.surge.sh	unknown	2014-07-25	2023-08-01	2024-03-24	2.3 kB	155 kB	138.68.112.220
www.startpage.com	42896	1997-10-11	2012-05-26	2024-04-02	12 kB	698 kB	37.0.81.241

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2024-02-07	medium	deauthc42-currntlyhc.surge.sh/	Other
2024-02-07	medium	deauthc42-currntlyhc.surge.sh/index.css	Other
2024-02-07	medium	deauthc42-currntlyhc.surge.sh/index.bundle.js	Other
2024-02-07	medium	deauthc42-currntlyhc.surge.sh/assets/favicon-16x16.png	Other
2024-02-07	medium	deauthc42-currntlyhc.surge.sh/assets/apple-touch-icon-1024x1024.png	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	www.startpage.com/	1.2 kB	2024-04-03	2024-04-18
Pretty URL www.startpage.com/ IP 37.0.81.241 ASN #28685 Routit BV Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-03 09:48:05 Last Seen2024-04-18 00:03:55 Times Seen4 Hash 9035b0178e186a83b6b2ec28903d0651 d6ade78eed85fb053a373fb3e370cfceddcff2f5 eecce26e42b6a07e7d0bb2adae915e928b51ed1b48e7cbc52835bb35c5ecf9a3 Loading...

	www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/deps.js	130 kB	2024-02-02	2024-04-18
Pretty URL www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/deps.js IP 37.0.81.241 ASN #28685 Routit BV Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-02 04:50:53 Last Seen2024-04-18 00:03:55 Times Seen26 Hash 1fe073d3e2516d58c32ce504e3ac04b5 b88d2fd8d170f09726d9a326c8594e0bd4530d0b 8d52086f8e1dbf0dbc7a302b5f4724b108acccd11e0dea4f716c446f45f36baa Loading...

	www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/runtime.js	1.3 kB	2023-04-30	2024-04-18
Pretty URL www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/runtime.js IP 37.0.81.241 ASN #28685 Routit BV Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-30 17:16:30 Last Seen2024-04-18 00:03:55 Times Seen29 Hash 9fb8fc721e7ba76c45e39f386f7b696c 454921e49a020915d7a969b42f92013f567cccde 828cc34b6e2c247acffae1ca5187abbf2c22990ea596e9538e748ceea61b7359 Loading...

	www.startpage.com/	6.3 kB	2024-04-18	2024-04-18
Pretty URL www.startpage.com/ IP 37.0.81.241 ASN #28685 Routit BV Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 00:03:55 Last Seen2024-04-18 00:03:55 Times Seen1 Hash 2f7813e495279c389b316e05513e7bb0 b3071467403468a10170d53fa39525473b3e1aaf b9dbb55e018f19c3b8715a2dc81a0229c1a2b806be08c8e7eda3cabe2add49e0 Loading...

	www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/lib/AppHome.js	879 kB	2024-04-17	2024-04-18
Pretty URL www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/lib/AppHome.js IP 37.0.81.241 ASN #28685 Routit BV Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 06:19:00 Last Seen2024-04-18 00:03:55 Times Seen3 Hash b19e17c00685cb41c867a791c5bea8c7 d6f6afc8c5ab612390bf7d3ad7264443e4b84273 36403e4435df5d96f5fa2e8e1f67f7b1676d66cbd6f92627b722085bc2149b2a Loading...

HTTP Transactions (29)

URL IP Response Size

deauthc42-currntlyhc.surge.sh/

138.68.112.220

200 OK

1.1 kB

URL User Request GET HTTP/1.1
deauthc42-currntlyhc.surge.sh/
IP
138.68.112.220:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerSectigo Limited
Subject*.surge.sh
Fingerprint94:A8:88:4D:CE:F7:21:78:C0:1F:3A:A3:E5:B3:40:18:17:AD:A2:E6
ValiditySun, 23 Apr 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (7057), with no line terminators
Size
1.1 kB (1059 bytes)
Hash
a323f92ee7b065e9951a9bd4499079c5
0c70fd64ed495f8a89f5f6f526aa3ebbd6761e85
2e03cebedebc0a42694daa404b5face4d55246ac8bc8ee6b42c4b1bdba9a05da

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: deauthc42-currntlyhc.surge.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Surge
Surge-Cache: HIT
Surge-Stamp: 7472::1689183285219-a323f92ee7b065e9951a9bd4499079c5
Age: 6482363
Date: Wed, 17 Apr 2024 22:03:28 GMT
Cache-Control: public, max-age=0, must-revalidate
ETag: "2e03cebedebc0a42694daa404b5face4d55246ac8bc8ee6b42c4b1bdba9a05da"
Content-Type: text/html; charset=UTF-8
Accept-Ranges: bytes
Response-Time: 2ms
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: close
Transfer-Encoding: chunked

deauthc42-currntlyhc.surge.sh/index.css

138.68.112.220

200 OK

30 kB

URL GET HTTP/1.1
deauthc42-currntlyhc.surge.sh/index.css
IP
138.68.112.220:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://deauthc42-currntlyhc.surge.sh/
Certificate
IssuerSectigo Limited
Subject*.surge.sh
Fingerprint94:A8:88:4D:CE:F7:21:78:C0:1F:3A:A3:E5:B3:40:18:17:AD:A2:E6
ValiditySun, 23 Apr 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65326)
Size
30 kB (30102 bytes)
Hash
fcdd5b28a54f61577dfc5ce995e7cc48
c922fabfd3ba9a17803d672be5bea26f3f66b556
4c790aca47dce1d558848422a93bf1b7763a22d52d7f7b48c146dc61755f9c14

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /index.css HTTP/1.1
Host: deauthc42-currntlyhc.surge.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deauthc42-currntlyhc.surge.sh/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Surge
Surge-Cache: HIT
Surge-Stamp: 8073::1689183285219-fcdd5b28a54f61577dfc5ce995e7cc48
Age: 6482362
Date: Wed, 17 Apr 2024 22:03:28 GMT
Cache-Control: public, max-age=0, must-revalidate
ETag: "4c790aca47dce1d558848422a93bf1b7763a22d52d7f7b48c146dc61755f9c14"
Content-Type: text/css; charset=UTF-8
Accept-Ranges: bytes
Response-Time: 1ms
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: close
Transfer-Encoding: chunked

deauthc42-currntlyhc.surge.sh/index.bundle.js

138.68.112.220

200 OK

123 kB

URL GET HTTP/1.1
deauthc42-currntlyhc.surge.sh/index.bundle.js
IP
138.68.112.220:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://deauthc42-currntlyhc.surge.sh/
Certificate
IssuerSectigo Limited
Subject*.surge.sh
Fingerprint94:A8:88:4D:CE:F7:21:78:C0:1F:3A:A3:E5:B3:40:18:17:AD:A2:E6
ValiditySun, 23 Apr 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)
Size
123 kB (122732 bytes)
Hash
92740afa6bca30a45d58181673a53dbf
914d3b8133b7ee1c31483b4c683c8647a31b8b11
c46f29010bb586fe2fde458aecbb2b33143deff9668505a846db227e273d2583

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /index.bundle.js HTTP/1.1
Host: deauthc42-currntlyhc.surge.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deauthc42-currntlyhc.surge.sh/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Surge
Surge-Cache: HIT
Surge-Stamp: 5923::1689183285219-92740afa6bca30a45d58181673a53dbf
Age: 6482362
Date: Wed, 17 Apr 2024 22:03:28 GMT
Cache-Control: public, max-age=0, must-revalidate
ETag: "c46f29010bb586fe2fde458aecbb2b33143deff9668505a846db227e273d2583"
Content-Type: application/javascript; charset=UTF-8
Accept-Ranges: bytes
Response-Time: 5ms
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: close
Transfer-Encoding: chunked

www.startpage.com/

37.0.81.241

200 OK

26 kB

URL User Request GET HTTP/2
www.startpage.com/
IP
37.0.81.241:443
ASN
#28685 Routit BV

Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (29868)
Size
26 kB (26367 bytes)
Hash
99ed56fc43fbc71a2d378234a79f507e
4b72e9e19afe4c5bf1bfb6b656e04cd0e82db5f1
6c3ea41ad8912f824cceba687d7d7e17a4ba911839a31ed3fd44226d03254729

HTTP Headers

GET / HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deauthc42-currntlyhc.surge.sh/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: text/html; charset=utf-8
content-length: 26367
content-encoding: gzip
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/magnifying-glass-grey.svg

37.0.81.241

200 OK

382 B

URL GET HTTP/2
www.startpage.com/sp/cdn/images/magnifying-glass-grey.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
382 B (382 bytes)
Hash
a746df4f034ca2bcd8c8a929f37cf331
6ba5a70497698219ae9d25771168506d403cb39a
ea43cf9e0b052f1b7611a7acd89f4dd1a1fe4a3b91606dca5e2eb463f8a2a4e9

HTTP Headers

GET /sp/cdn/images/magnifying-glass-grey.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
content-length: 382
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:28:49 GMT
etag: "a746df4f034ca2bcd8c8a929f37cf331"
age: 649954
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/filter-chevron.svg

37.0.81.241

200 OK

329 B

URL GET HTTP/2
www.startpage.com/sp/cdn/images/filter-chevron.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
329 B (329 bytes)
Hash
748a10d4a2d19e1a5de5a935f443d936
f7d34290aa1a41c86107a1aa2636a43dcbc57787
c7735859344d1fce280a1f63f0a93db8fd7800faa1e762b254a6a728b408ecc3

HTTP Headers

GET /sp/cdn/images/filter-chevron.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
content-length: 329
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:29:19 GMT
etag: "748a10d4a2d19e1a5de5a935f443d936"
age: 649954
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2

37.0.81.241

200 OK

38 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 37780, version 1.0
Size
38 kB (37780 bytes)
Hash
1014114a6803c83bc5a766c5551fd84f
9bd943ddd5caf7d0543230dc37088f3d74d468a2
799c2b76f617ebe6cf5c90e376212faa5fd523abb39325cf4fbd848c3c9c930b

HTTP Headers

GET /sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: font/woff2
content-length: 37780
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:30:39 GMT
etag: "1014114a6803c83bc5a766c5551fd84f"
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2

37.0.81.241

200 OK

38 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 37780, version 1.0
Size
38 kB (37780 bytes)
Hash
1014114a6803c83bc5a766c5551fd84f
9bd943ddd5caf7d0543230dc37088f3d74d468a2
799c2b76f617ebe6cf5c90e376212faa5fd523abb39325cf4fbd848c3c9c930b

HTTP Headers

GET /sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: font/woff2
content-length: 37780
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:30:39 GMT
etag: "1014114a6803c83bc5a766c5551fd84f"
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2

37.0.81.241

200 OK

38 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 37780, version 1.0
Size
38 kB (37780 bytes)
Hash
1014114a6803c83bc5a766c5551fd84f
9bd943ddd5caf7d0543230dc37088f3d74d468a2
799c2b76f617ebe6cf5c90e376212faa5fd523abb39325cf4fbd848c3c9c930b

HTTP Headers

GET /sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: font/woff2
content-length: 37780
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:30:39 GMT
etag: "1014114a6803c83bc5a766c5551fd84f"
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2

37.0.81.241

200 OK

38 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 37780, version 1.0
Size
38 kB (37780 bytes)
Hash
1014114a6803c83bc5a766c5551fd84f
9bd943ddd5caf7d0543230dc37088f3d74d468a2
799c2b76f617ebe6cf5c90e376212faa5fd523abb39325cf4fbd848c3c9c930b

HTTP Headers

GET /sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: font/woff2
content-length: 37780
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:30:39 GMT
etag: "1014114a6803c83bc5a766c5551fd84f"
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/home/default/down-arrow.svg

37.0.81.241

200 OK

845 B

URL GET HTTP/2
www.startpage.com/sp/cdn/images/home/default/down-arrow.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
845 B (845 bytes)
Hash
52b9ae5d1556702260712e6122a2bbcb
eff382d7af63c3c9af248294ede6acebe89ba421
a96032da67cdef80909a78c3569ea666d779b366158ab935d8c6f2364726e492

HTTP Headers

GET /sp/cdn/images/home/default/down-arrow.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
vary: Accept-Encoding
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:29:56 GMT
etag: W/"b7754e2ad0030308ad98977b05259426"
age: 649954
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/runtime.js

37.0.81.241

200 OK

9.3 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/runtime.js
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
9.3 kB (9273 bytes)
Hash
e91f8387e9831747cbb6f8a024601814
b59524266439f0c18a2017e9a7471e23356596e0
f21dbf5b4a08b291b0ff2c4e10fd695c49d45832a975e95a8a2a8c9c4dcbd721

HTTP Headers

GET /sp/cdn/bundles/0.4.11/3190fed12/runtime.js HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: application/javascript
cache-control: max-age=31536000
last-modified: Wed, 17 Apr 2024 17:17:12 GMT
etag: W/"9fb8fc721e7ba76c45e39f386f7b696c"
vary: Accept-Encoding, Accept-Encoding
age: 11510
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2

37.0.81.241

200 OK

38 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 37780, version 1.0
Size
38 kB (37780 bytes)
Hash
1014114a6803c83bc5a766c5551fd84f
9bd943ddd5caf7d0543230dc37088f3d74d468a2
799c2b76f617ebe6cf5c90e376212faa5fd523abb39325cf4fbd848c3c9c930b

HTTP Headers

GET /sp/cdn/font/Inter/v11/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7W0Q5nw.woff2 HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: font/woff2
content-length: 37780
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:30:39 GMT
etag: "1014114a6803c83bc5a766c5551fd84f"
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/swoosh/desktop-top-swoosh.svg

37.0.81.241

200 OK

6.5 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/images/swoosh/desktop-top-swoosh.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
6.5 kB (6512 bytes)
Hash
98778a9c4cb4d908ad96b4bd2a1c3f66
eb71b725a13a9cbddffe5515c9c794950dbbe2a1
154bfe3243a90c95b8ccbe39577798b4a62f0601e01f10f6576ff3e066224aee

HTTP Headers

GET /sp/cdn/images/swoosh/desktop-top-swoosh.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Sep 2021 22:12:39 GMT
etag: W/"db7d637fe24f6f136290d3a268d7454a"
vary: Accept-Encoding, Accept-Encoding
age: 70772
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/cog-hover.svg

37.0.81.241

200 OK

11 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/images/cog-hover.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
11 kB (10919 bytes)
Hash
07e200eb20a257deccfb4750b9c301b7
deb9bb59aa912ada69fddfb34a241dc1f0cf36ee
f9246b639706cff3120e4cf284782612647795b3cba006d824287bf8a1017d5f

HTTP Headers

GET /sp/cdn/images/cog-hover.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:29:23 GMT
etag: W/"8d5b2d6882c086306d00e96fe6cbdcfa"
vary: Accept-Encoding, Accept-Encoding
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/swoosh/desktop-bottom-swoosh.svg

37.0.81.241

200 OK

913 B

URL GET HTTP/2
www.startpage.com/sp/cdn/images/swoosh/desktop-bottom-swoosh.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
913 B (913 bytes)
Hash
ded246a9f1ca742a2d75d549d8b3035b
046d37b677aae945aa3cb4561868060fccc7d1d5
e310232bd96bb2ae8734b2a0667340f2c4c3365a4e271ba51c2aa2a60ad7f9a2

HTTP Headers

GET /sp/cdn/images/swoosh/desktop-bottom-swoosh.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
last-modified: Thu, 02 Sep 2021 23:41:39 GMT
etag: W/"f29a060457997e942c499b3e58c67dda"
vary: Accept-Encoding, Accept-Encoding
age: 71133
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/favicons/android-icon-192x192.png

37.0.81.241

200 OK

8.2 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/favicons/android-icon-192x192.png
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
8.2 kB (8187 bytes)
Hash
3db8a05e539cfd35a5b31b0bfc8f2bbd
8780f486378cba484d261b6708a1d2de6e90728f
c4f2982c40f92878ff43e7bc6ac55b24b08a7286d47eab3e8acc5eb68bcfa70a

HTTP Headers

GET /sp/cdn/favicons/android-icon-192x192.png HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/png
content-length: 8187
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:28:26 GMT
etag: "3db8a05e539cfd35a5b31b0bfc8f2bbd"
age: 649954
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/dplpxs

37.0.81.241

204 No Content

0 B

URL POST HTTP/2
www.startpage.com/sp/dplpxs
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /sp/dplpxs HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
Content-Type: text/plain
Content-Length: 151
Origin: https://www.startpage.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: text/html; charset=utf-8
expires: Wed, 17 Apr 2024 22:03:28 GMT
cache-control: no-cache
access-control-allow-origin: https://www.startpage.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/lib/AppHome.js

37.0.81.241

200 OK

269 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/lib/AppHome.js
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
269 kB (268945 bytes)
Hash
c328964ef6f165cde0d699930677f0eb
6fc5a047798815f16e332fa3247146e332de714c
0c7f824b74467b013026223f84079420bccb2eec9af5769b36decf449dea2a12

HTTP Headers

GET /sp/cdn/bundles/0.4.11/3190fed12/lib/AppHome.js HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: application/javascript
cache-control: max-age=31536000
last-modified: Wed, 17 Apr 2024 17:17:12 GMT
etag: W/"b19e17c00685cb41c867a791c5bea8c7"
vary: Accept-Encoding, Accept-Encoding
age: 11509
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/grey-x.svg

37.0.81.241

200 OK

383 B

URL GET HTTP/2
www.startpage.com/sp/cdn/images/grey-x.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
383 B (383 bytes)
Hash
e75ab02bc1c9b5a4358e2dd41a2a7fab
5ed4c52c9b05d0a3b5cfe1317d7326ab37a2129d
aaf8647947a1a7cbcc0507d4442652f6656c8f10ab89fa4e17f39d92ef13572c

HTTP Headers

GET /sp/cdn/images/grey-x.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
content-length: 383
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:29:17 GMT
etag: "e75ab02bc1c9b5a4358e2dd41a2a7fab"
age: 649954
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/circle-check.svg

37.0.81.241

200 OK

6.4 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/images/circle-check.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
gzip compressed data, max speed, from Unix
Size
6.4 kB (6356 bytes)
Hash
2e6b5e588ffecf08e1aa1f6b60903434
161371cc9f5d1d713d918743dada55851c024402
fffc14d586e489ecd6d0162419d7a2afc050bb1e820f1a24739bf6e37a022aa8

HTTP Headers

GET /sp/cdn/images/circle-check.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
vary: Accept-Encoding
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:29:04 GMT
etag: W/"468e1d77adf002510a96dc58f7cb6ce4"
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/favicons/favicon-16x16-gradient.png

37.0.81.241

200 OK

550 B

URL GET HTTP/2
www.startpage.com/sp/cdn/favicons/favicon-16x16-gradient.png
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
550 B (550 bytes)
Hash
5761583e6937e5b3fe82b722bcd3e4ea
ef21389fdb2602f3ec2aff82193d93cbf39272d6
5a2aac7513119f8a510c6aced8ba595ba2939833f5825807ebff55c4da1f0b05

HTTP Headers

GET /sp/cdn/favicons/favicon-16x16-gradient.png HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/png
content-length: 550
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:28:37 GMT
etag: "5761583e6937e5b3fe82b722bcd3e4ea"
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

deauthc42-currntlyhc.surge.sh/assets/favicon-16x16.png

0.0.0.0

0 B

URL GET
deauthc42-currntlyhc.surge.sh/assets/favicon-16x16.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://deauthc42-currntlyhc.surge.sh/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /assets/favicon-16x16.png HTTP/1.1
Host: deauthc42-currntlyhc.surge.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deauthc42-currntlyhc.surge.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

www.startpage.com/sp/cdn/images/privacy-please-av-icon.svg

37.0.81.241

200 OK

1.9 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/images/privacy-please-av-icon.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
1.9 kB (1922 bytes)
Hash
ab8bb32aeedc75d5af2ed11aa090e50a
e107a2a31c78cae368f91a8eff8d391b4323143f
52d136135ea154b3cbaf97ab951777177a68f482c4f0eee46f4967fc588866f7

HTTP Headers

GET /sp/cdn/images/privacy-please-av-icon.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:29:32 GMT
etag: W/"fcdcca56c8afe5cb4489a263d9ef2fa6"
vary: Accept-Encoding, Accept-Encoding
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/startpage-hamburger-button.svg

37.0.81.241

200 OK

276 B

URL GET HTTP/2
www.startpage.com/sp/cdn/images/startpage-hamburger-button.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
276 B (276 bytes)
Hash
f3e174369792ab9b2116e6aa0bfaf12d
4436fc913d4c6a5ac658546270052b86183fafdb
66f9affa127c59538613010f672a36ebc54add6bcb55852dad5ba8f86000d3e0

HTTP Headers

GET /sp/cdn/images/startpage-hamburger-button.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
content-length: 276
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:28:49 GMT
etag: "fb186c61e27a01b17c952b758645387a"
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/images/privacy-please-lock-icon.svg

37.0.81.241

200 OK

1.5 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/images/privacy-please-lock-icon.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
1.5 kB (1496 bytes)
Hash
120ad0cd2b9ecad5b10c03e84141ee8d
c3b181f832e0ba91997196eff5e457f694b445fe
31a1bf4e41467c1ad95a045e67e69c17b74324c80f68c2dde7b945f99eb07348

HTTP Headers

GET /sp/cdn/images/privacy-please-lock-icon.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:28:57 GMT
etag: W/"4018fc760bb1132fe8a5ac60bafef188"
vary: Accept-Encoding, Accept-Encoding
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

deauthc42-currntlyhc.surge.sh/assets/apple-touch-icon-1024x1024.png

0.0.0.0

0 B

URL GET
deauthc42-currntlyhc.surge.sh/assets/apple-touch-icon-1024x1024.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://deauthc42-currntlyhc.surge.sh/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other

HTTP Headers

GET /assets/apple-touch-icon-1024x1024.png HTTP/1.1
Host: deauthc42-currntlyhc.surge.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deauthc42-currntlyhc.surge.sh/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

www.startpage.com/sp/cdn/images/privacy-please-sign-en--light.svg

37.0.81.241

200 OK

14 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/images/privacy-please-sign-en--light.svg
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
14 kB (13945 bytes)
Hash
597d1ef69bf0bf4ab072f7e1619300be
d9e0dca7307718d38c38770819e7dd78e438b6a7
24551ce6c53fc87ea6d6fc0258f2f41f3068e45306d80c44d19fa1b3f10b6c2e

HTTP Headers

GET /sp/cdn/images/privacy-please-sign-en--light.svg HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: image/svg+xml
cache-control: max-age=31536000
last-modified: Wed, 10 Apr 2024 09:28:51 GMT
etag: W/"597d1ef69bf0bf4ab072f7e1619300be"
vary: Accept-Encoding, Accept-Encoding
age: 649953
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/deps.js

37.0.81.241

200 OK

130 kB

URL GET HTTP/2
www.startpage.com/sp/cdn/bundles/0.4.11/3190fed12/deps.js
IP
37.0.81.241:443
ASN
#28685 Routit BV

Requested by
https://www.startpage.com/
Certificate
IssuerDigiCert Inc
Subjectwww.startpage.com
Fingerprint8B:8B:6D:80:E4:74:3A:E2:46:3E:54:19:45:C0:BB:1A:27:D6:CE:D9
ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
130 kB (129851 bytes)
Hash
1fe073d3e2516d58c32ce504e3ac04b5
b88d2fd8d170f09726d9a326c8594e0bd4530d0b
8d52086f8e1dbf0dbc7a302b5f4724b108acccd11e0dea4f716c446f45f36baa

HTTP Headers

GET /sp/cdn/bundles/0.4.11/3190fed12/deps.js HTTP/1.1
Host: www.startpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.startpage.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 22:03:29 GMT
content-type: application/javascript
cache-control: max-age=31536000
last-modified: Wed, 17 Apr 2024 17:17:12 GMT
etag: W/"1fe073d3e2516d58c32ce504e3ac04b5"
vary: Accept-Encoding, Accept-Encoding
age: 11510
content-security-policy: script-src 'self' *.startpage.com *.verify.startingpage.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.startpage.com 'unsafe-inline'; img-src 'self' blob: data: *.startpage.com *.verify.startingpage.com; frame-src 'self' *.startpage.com; frame-ancestors 'self'; connect-src 'self' *.startpage.com *.verify.startingpage.com; worker-src blob:; report-uri https://www.startpage.com/do/cspvr
referrer-policy: origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (29)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections