Report - 59.124.12.69/login

Report Overview

Submitted URL
59.124.12.69/login
IP
59.124.12.69
ASN
#3462 Data Communication Business Group
Submitted
2024-05-10 11:03:40
Access
public
Website Title
空氣品質監測系統
Final URL
59.124.12.69/login
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
20

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-10	1.1 kB	98 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-10	891 B	32 kB	142.250.74.106
59.124.12.69	unknown	unknown	No data	No data	3.3 kB	455 kB	59.124.12.69

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed
2024-05-10	medium	59.124.12.69	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	59.124.12.69/assets/js/jquery-2.1.4.min.js	84 kB	2023-03-07	2024-05-20
Pretty URL 59.124.12.69/assets/js/jquery-2.1.4.min.js IP 59.124.12.69 ASN #3462 Data Communication Business Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:48 Last Seen2024-05-20 20:38:34 Times Seen8054 Hash f9c7afd05729f10f55b689f36bb20172 43dc554608df885a59ddeece1598c6ace434d747 f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c Loading...

	59.124.12.69/assets/js/bootstrap.min.js	37 kB	2023-03-07	2024-05-20
Pretty URL 59.124.12.69/assets/js/bootstrap.min.js IP 59.124.12.69 ASN #3462 Data Communication Business Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:46 Last Seen2024-05-20 23:22:52 Times Seen14152 Hash 4becdc9104623e891fbb9d38bba01be4 6c264e0e0026ab5ece49350c6a8812398e696cbb 4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327 Loading...

	59.124.12.69/login	0 B	2023-03-07	2024-05-20
Pretty URL 59.124.12.69/login IP 59.124.12.69 ASN #3462 Data Communication Business Group Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 23:51:40 Times Seen37898675 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (14)

URL IP Response Size

59.124.12.69/

59.124.12.69

0 B

URL
59.124.12.69/
IP
59.124.12.69:0
ASN
#3462 Data Communication Business Group

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 303 See Other
Location: /login
Date: Fri, 10 May 2024 11:03:19 GMT
Content-Length: 0

59.124.12.69/login

59.124.12.69

5.0 kB

URL User Request GET
59.124.12.69/login
IP
59.124.12.69:0
ASN
#3462 Data Communication Business Group

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Size
5.0 kB (4973 bytes)
Hash
47189a2447e5f39a29a77914cab60171
9c1017dcb085f30fae6df0d76f1bd921cb0b72df
56369f64ac6c49748fe75b8bc3aac33d56b23be0d8888823ecaa123f781c9eb3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Fri, 10 May 2024 11:03:19 GMT
Content-Length: 4973

59.124.12.69/login

59.124.12.69

5.0 kB

URL User Request GET
59.124.12.69/login
IP
59.124.12.69:0
ASN
#3462 Data Communication Business Group

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Size
5.0 kB (4973 bytes)
Hash
47189a2447e5f39a29a77914cab60171
9c1017dcb085f30fae6df0d76f1bd921cb0b72df
56369f64ac6c49748fe75b8bc3aac33d56b23be0d8888823ecaa123f781c9eb3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Fri, 10 May 2024 11:03:20 GMT
Content-Length: 4973

59.124.12.69/assets/css/aqm.css

59.124.12.69

200 OK

2.6 kB

URL GET HTTP/1.1
59.124.12.69/assets/css/aqm.css
IP
59.124.12.69:80
ASN
#3462 Data Communication Business Group

Requested by
http://59.124.12.69/login

File type
ASCII text
Size
2.6 kB (2570 bytes)
Hash
f1c869bb95de9db05cc7aab634dbd139
49a0a49a8bec53e74d0bcbc1f0846a82a104502d
a473c3fa6a609fe849180aaa633a2e09e4cb8157850c84fa5aeceb7e3e83c292

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/aqm.css HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "42522542862116ee7b78f9659d1414d8d5fadae6"
Content-Type: text/css; charset=utf-8
Cache-Control: public, max-age=3600
Last-Modified: Thu, 24 Nov 2022 07:08:16 GMT
Content-Length: 2570
Date: Fri, 10 May 2024 11:03:20 GMT

59.124.12.69/assets/font-awesome/css/font-awesome.min.css

59.124.12.69

200 OK

24 kB

URL GET HTTP/1.1
59.124.12.69/assets/font-awesome/css/font-awesome.min.css
IP
59.124.12.69:80
ASN
#3462 Data Communication Business Group

Requested by
http://59.124.12.69/login

File type
ASCII text, with very long lines (23577)
Size
24 kB (23739 bytes)
Hash
04425bbdc6243fc6e54bf8984fe50330
8c15c6bd82c71e9ef1bb11cf24e502fe07518ac5
541ac58217a8ade1a5e292a65a0661dc9db7a49ae13654943817a4fbc6761afd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "07d7d1e94a9fd77f02887fc919fbc2de85c1de17"
Content-Type: text/css; charset=utf-8
Cache-Control: public, max-age=3600
Last-Modified: Thu, 24 Nov 2022 07:08:16 GMT
Content-Length: 23739
Date: Fri, 10 May 2024 11:03:20 GMT

59.124.12.69/assets/js/bootstrap.min.js

59.124.12.69

200 OK

37 kB

URL GET HTTP/1.1
59.124.12.69/assets/js/bootstrap.min.js
IP
59.124.12.69:80
ASN
#3462 Data Communication Business Group

Requested by
http://59.124.12.69/login

File type
JavaScript source, ASCII text, with very long lines (32034)
Size
37 kB (36816 bytes)
Hash
4becdc9104623e891fbb9d38bba01be4
6c264e0e0026ab5ece49350c6a8812398e696cbb
4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/bootstrap.min.js HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "883331661e87c45697b22958fa745171c18cae16"
Content-Type: application/javascript; charset=utf-8
Cache-Control: public, max-age=3600
Last-Modified: Thu, 24 Nov 2022 07:08:16 GMT
Content-Length: 36816
Date: Fri, 10 May 2024 11:03:20 GMT

59.124.12.69/assets/js/jquery-2.1.4.min.js

59.124.12.69

200 OK

84 kB

URL GET HTTP/1.1
59.124.12.69/assets/js/jquery-2.1.4.min.js
IP
59.124.12.69:80
ASN
#3462 Data Communication Business Group

Requested by
http://59.124.12.69/login

File type
JavaScript source, ASCII text, with very long lines (32025)
Size
84 kB (84345 bytes)
Hash
f9c7afd05729f10f55b689f36bb20172
43dc554608df885a59ddeece1598c6ace434d747
f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/jquery-2.1.4.min.js HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "bf61f4ee4908afe5ced6dea5c2ddd3815de16a4a"
Content-Type: application/javascript; charset=utf-8
Cache-Control: public, max-age=3600
Last-Modified: Thu, 24 Nov 2022 07:08:16 GMT
Content-Length: 84345
Date: Fri, 10 May 2024 11:03:20 GMT

59.124.12.69/assets/css/style.css

59.124.12.69

200 OK

171 kB

URL GET HTTP/1.1
59.124.12.69/assets/css/style.css
IP
59.124.12.69:80
ASN
#3462 Data Communication Business Group

Requested by
http://59.124.12.69/login

File type
ASCII text, with very long lines (2494)
Size
171 kB (170998 bytes)
Hash
bfc1eebeefa7e44bad627c560d662669
166318f389293aa36ce6dc7319899156d09e2969
244cc263093f20a58ea7e57085fd0d23ec3f223dc9a88d1a57baecbf8434425e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/style.css HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "ce041dc4b1781fb94f7e746f8121fa68db113e73"
Content-Type: text/css; charset=utf-8
Cache-Control: public, max-age=3600
Last-Modified: Thu, 24 Nov 2022 07:08:16 GMT
Content-Length: 170998
Date: Fri, 10 May 2024 11:03:20 GMT

59.124.12.69/assets/css/bootstrap.min.css

59.124.12.69

200 OK

122 kB

URL GET HTTP/1.1
59.124.12.69/assets/css/bootstrap.min.css
IP
59.124.12.69:80
ASN
#3462 Data Communication Business Group

Requested by
http://59.124.12.69/login

File type
ASCII text, with very long lines (65371)
Size
122 kB (122540 bytes)
Hash
5d5357cb3704e1f43a1f5bfed2aebf42
08df9a96752852f2cbd310c30facd934e348c2c5
31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/bootstrap.min.css HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "559117e301d233dae63cdeeff921db7fef45ff2d"
Content-Type: text/css; charset=utf-8
Cache-Control: public, max-age=3600
Last-Modified: Thu, 24 Nov 2022 07:08:16 GMT
Content-Length: 122540
Date: Fri, 10 May 2024 11:03:20 GMT

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
http://59.124.12.69/login
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://59.124.12.69
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:35:00 GMT
expires: Fri, 09 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 116901
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
http://59.124.12.69/login
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://59.124.12.69
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:35:00 GMT
expires: Fri, 09 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 116901
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

59.124.12.69/favicon.ico

59.124.12.69

404 Not Found

2.1 kB

URL GET HTTP/1.1
59.124.12.69/favicon.ico
IP
59.124.12.69:80
ASN
#3462 Data Communication Business Group

Requested by
http://59.124.12.69/login

File type
HTML document, ASCII text, with very long lines (980)
Size
2.1 kB (2130 bytes)
Hash
1e603ead06e6fd49a7c91f0d494557db
2650c434f8ee1d1dabf5a9dff8635371bed6b5a2
07b1622c75c5fbe9f2f899f924eb6dcdc8f3bb6f3dcd94dc7104338d63b08658

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 59.124.12.69
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Date: Fri, 10 May 2024 11:03:22 GMT
Content-Length: 2130

fonts.googleapis.com/css?family=Roboto:400,300,500,700

142.250.74.106

200 OK

8.7 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:400,300,500,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://59.124.12.69/login
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (8956), with no line terminators
Size
8.7 kB (8732 bytes)
Hash
91804c0df51e58b0bf469561e1ac2732
cc5a9023e310b49ef8f8ae32bb89ea774fe116ec
8a8aed46bfb9cdec8e34e76343b7e66796cf09926aef42efdfe5fa8a1fdda8aa

HTTP Headers

GET /css?family=Roboto:400,300,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 11:03:21 GMT
date: Fri, 10 May 2024 11:03:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:300,400,600,700&lang=en

142.250.74.106

200 OK

22 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans:300,400,600,700&lang=en
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://59.124.12.69/login
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (1572)
Size
22 kB (22388 bytes)
Hash
cb6afea6ee75d2fc22e4a22512425465
f91258c83a54d1d44df8637909885b300b5d305b
31fe46164ce2459191ca1f7727fd742ce01833ee4f705459e88d43f53fcc9f80

HTTP Headers

GET /css?family=Open+Sans:300,400,600,700&lang=en HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://59.124.12.69/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 11:03:21 GMT
date: Fri, 10 May 2024 11:03:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections