Report - fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar

Report Overview

Visited public
2025-05-12 12:06:05
Tags
URL
fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Finishing URL
fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
IP / ASN
104.26.9.220
#13335 CLOUDFLARENET
Title
Fikper

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-05-07	554 B	20 kB	142.250.74.35
www.googletagmanager.com	75	2011-11-11	2012-10-04	2025-05-07	431 B	379 kB	142.250.74.168
zz.medinaossal.com	unknown	2024-11-14	2025-01-07	2025-05-02	421 B	1.6 kB	23.109.170.89
fikper.com	unknown	2022-01-28	2022-01-28	2025-05-08	7.6 kB	1.0 MB	172.67.73.154
sapi.fikper.com	unknown	2022-01-28	2022-11-16	2025-05-08	2.1 kB	5.0 kB	172.67.73.154
ansuksar.com	unknown	2024-10-28	2025-01-07	2025-05-10	417 B	1.5 kB	23.109.170.113
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-05-07	889 B	5.3 kB	142.250.178.42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-05-12	medium	ansuksar.com	Sinkholed
2025-05-12	medium	medinaossal.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	fikper.com/static/js/688.832e25b8.chunk.js	ScriptElement	19 kB	2025-01-04	2025-05-14
Pretty URL fikper.com/static/js/688.832e25b8.chunk.js IP 172.67.73.154 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-01-04 18:48 Last Seen2025-05-14 06:12 Times Seen116 Hash 3172b98b30709e9e496df4c59582afbd 85159aacb24172c633078f05f320423d8effd6de 0f6d16d0154a11d1dddf9c6d82c9f86122752db31952f1bce823863117809048 Loading...

	www.googletagmanager.com/gtag/js?id=G-0FTK342ZZ1	ScriptElement	378 kB	2025-05-12	2025-05-12
Pretty URL www.googletagmanager.com/gtag/js?id=G-0FTK342ZZ1 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-12 12:06 Last Seen2025-05-12 12:06 Times Seen1 Hash baf5af0de8d0f550f3879a08bd34c365 401961ae0e3e89f5e87cdec86b2620ce2059bb13 45449621a834404e421ee846df093d64ab1d66f84f3a6b84a4d1f2e95e540ed7 Loading...

	zz.medinaossal.com/fa2Y0gFuftYt/114415	ScriptElement	6 B	2023-03-07	2025-06-09
Pretty URL zz.medinaossal.com/fa2Y0gFuftYt/114415 IP 23.109.170.89 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31 Last Seen2025-06-09 02:23 Times Seen8483 Hash 4fc71bf68a1d477bd1523733e34d1e90 15119105cffbe108b6cf290146ab02c9aa8517ba 74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce Loading...

	fikper.com/static/js/main.c292a65a.js	ScriptElement	752 kB	2025-04-13	2025-05-14
Pretty URL fikper.com/static/js/main.c292a65a.js IP 172.67.73.154 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-13 02:34 Last Seen2025-05-14 06:12 Times Seen27 Hash a7d00ab9239b997f141adc1fc2b06e0c 562bd648dac64375f7775011d73966b59b7c67f5 bc4030bcb562f40d8e85c3fc666da6ac563292443efeb6b87af8e1db539a800a Loading...

	fikper.com/static/js/449.ba886c61.chunk.js	ScriptElement	26 kB	2025-01-20	2025-05-14
Pretty URL fikper.com/static/js/449.ba886c61.chunk.js IP 172.67.73.154 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-01-20 21:09 Last Seen2025-05-14 06:12 Times Seen99 Hash 9a211aa9f371d249aab8dc10b2c0b877 ecdd84ccbf5d6706a282e1e8395f28ba372dee59 7e5523f7d9a2753967b98f4ed19d39181a51a3ed9eb7218a9c3c419503237b90 Loading...

	fikper.com/static/js/401.45bba9e5.chunk.js	ScriptElement	123 kB	2025-01-04	2025-05-14
Pretty URL fikper.com/static/js/401.45bba9e5.chunk.js IP 172.67.73.154 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-01-04 18:48 Last Seen2025-05-14 06:12 Times Seen116 Hash 8a1a336ee249f58f74c90f81a9611aa2 99933134a5376aefc6c45e936beb1e8f6d5b04eb 70ab31ce950dc33560b3014f78d29acf3ff9e6e1dd54c2ab1e840b8c115d0036 Loading...

	fikper.com/static/js/226.0d21b458.chunk.js	ScriptElement	25 kB	2025-04-13	2025-05-14
Pretty URL fikper.com/static/js/226.0d21b458.chunk.js IP 172.67.73.154 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-04-13 02:34 Last Seen2025-05-14 06:12 Times Seen26 Hash d8ec75f9a8919f3b983a8e9e595d3f6b a1ef8c7ba7974eb8303bc26b1d684b87d565ef5f a3d90aa40296f364e6aee293a10065d41c08ad19402fbafc657fd484bd52d8b4 Loading...

	fikper.com/static/js/121.2588d6c5.chunk.js	ScriptElement	55 kB	2025-01-04	2025-05-14
Pretty URL fikper.com/static/js/121.2588d6c5.chunk.js IP 172.67.73.154 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-01-04 18:48 Last Seen2025-05-14 06:12 Times Seen116 Hash c098b60a23007c68886ca2db63f0a114 e6ed8a20096a35194d81ebbf0ef869a9aadaa415 8114b5a6a65c9c565091eb373da2ede899a7ad01ef57040c5a2da4c1aa898ab9 Loading...

	ansuksar.com/gcMNbLmIOYguTo/114416	ScriptElement	6 B	2023-03-07	2025-06-09
Pretty URL ansuksar.com/gcMNbLmIOYguTo/114416 IP 23.109.170.113 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31 Last Seen2025-06-09 02:23 Times Seen8483 Hash 4fc71bf68a1d477bd1523733e34d1e90 15119105cffbe108b6cf290146ab02c9aa8517ba 74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce Loading...

HTTP Transactions (26)

URL IP Response Size

fikper.com/static/css/main.66597b7d.css

172.67.73.154

200 OK

246 B

URL GET
fikper.com/static/css/main.66597b7d.css
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
ASCII text, with no line terminators
Size
246 B (246 bytes)
Hash
394d1d9d5959623f7588a8ead02b8615
d8975104f94c57db964bb1b5c58114d87ec916dd
e545c41f748832fe4e72b0b59070121fedd30e68e5dc4c21c5c7672056943d17

HTTP Headers

GET /static/css/main.66597b7d.css HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: text/css
last-modified: Wed, 09 Apr 2025 14:07:05 GMT
etag: W/"67f67f09-f6"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mCSh%2FZY6C0%2BvUpi9nz1OgPPvPIegQgkFhHWUR%2FR3HZ8bphoV9R3z%2FxRlFpeAS0qZ4N1v47NmvD9d4TrhGVuJckSAy5Ihp19pHL6QtO0Fxlbieluy19ATsqEqFXU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8eb1a7756be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=911&min_rtt=441&rtt_var=691&sent=37&recv=34&lost=0&retrans=0&sent_bytes=36864&recv_bytes=1413&delivery_rate=20308555&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=517&x=0"
X-Firefox-Spdy: h2

fikper.com/apple-touch-icon.png

172.67.73.154

200 OK

7.8 kB

URL GET
fikper.com/apple-touch-icon.png
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
7.8 kB (7798 bytes)
Hash
0bb5f302b954e889c75a9c395123fae1
c72f1fe513932a037a2e7e60dece66f672659187
597f8914f8989eebfd320580309903e66fd5fa92699ca76cd5cbe1527dddd611

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Cookie: hash=2yLS8g7zCE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: image/png
content-length: 7798
last-modified: Sun, 26 Jan 2025 11:15:20 GMT
etag: "67961948-1e76"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FSzct1Ll7H%2FnyWnD49E97WPZLdhfiQ5xXW3HyOyWE7VARA0x%2BRPm%2FGA4ngIw5lq4J%2F7qVhxc10Uu7CHJmSfWOODgzAz9K%2FKALlH2kB7Bkp3lE00tn6580r6cdMc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8f0ebce56be-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1322&min_rtt=414&rtt_var=1015&sent=285&recv=225&lost=0&retrans=0&sent_bytes=327545&recv_bytes=2834&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1356&x=0"
X-Firefox-Spdy: h2

fikper.com/static/css/226.cc3f0f88.chunk.css

172.67.73.154

200 OK

138 B

URL GET
fikper.com/static/css/226.cc3f0f88.chunk.css
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
ASCII text, with no line terminators
Size
138 B (138 bytes)
Hash
823c1c0e2d6eb07c9654586bc644920f
e96a4c0f8b7427797204f52cd8a4ccf2a95a639e
c696ba9be771da31d54ee9482c016c1e0da98c0b63bc69af15d68d82f0611175

HTTP Headers

GET /static/css/226.cc3f0f88.chunk.css HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: text/css
last-modified: Wed, 09 Apr 2025 14:07:05 GMT
etag: W/"67f67f09-8a"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WP5a6RbNCKweuuD46Gsvk9Mu57w6QvJlt8GTxGebYIYjp0jT%2B9cDyoJjEaJeMlW%2BO0ghAUowNAkpBVeiHpY9aLIq%2Bwiba3ehLZ0vTclZjqqZ6%2FQuTOYj%2FKTSwAg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef191856be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1211&min_rtt=441&rtt_var=1063&sent=204&recv=181&lost=0&retrans=0&sent_bytes=245762&recv_bytes=2051&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1063&x=0"
X-Firefox-Spdy: h2

fikper.com/locales/en/messages.json

172.67.73.154

200 OK

4 B

URL GET
fikper.com/locales/en/messages.json
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JSON text data
Size
4 B (4 bytes)
Hash
73792b9af3fc811b105441cc773526b1
3dbd0a28528cc971d576c7a6dd2bda7edda4042f
bac6a76645c48064f198e711301492ace386110831d381f33ba68a3db6847bd4

HTTP Headers

GET /locales/en/messages.json HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/json
content-length: 4
last-modified: Monday, 12-May-2025 12:05:32 GMT
cache-control: no-store, no-cache
x-cnt: NO
access-control-expose-headers: X-Cnt
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bZjrvNi4EO%2F2W0Zr6ZRom05KomV1SBAsCE4Q2krlsM%2BnAKAGtTixcDcDwpfx3UJ2SqUIYvafyIwmAcy4d3jQ5UAh5Nu2W4M5UEZpY4RYJ2fZkea%2BhPSGb1dpvQE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef798e56be-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=901&min_rtt=414&rtt_var=548&sent=279&recv=219&lost=0&retrans=0&sent_bytes=326086&recv_bytes=2341&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1127&x=0"
X-Firefox-Spdy: h2

sapi.fikper.com/

172.67.73.154

201 Created

360 B

URL POST
sapi.fikper.com/
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JSON text data
Size
360 B (360 bytes)
Hash
665df3a2f73ff539a5833b1311c86b21
ad52a25a913288d9745ee079d192039a6c1823c0
7217d8c2b9221273a0b0e7c09e97ed41fa339e3754a970a34e3fcb1b74607b19

HTTP Headers

POST / HTTP/1.1
Host: sapi.fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 29
Origin: https://fikper.com
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 201 Created
date: Mon, 12 May 2025 12:05:33 GMT
content-type: application/json; charset=utf-8
content-length: 360
access-control-allow-origin: https://fikper.com
vary: Origin
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
etag: W/"168-rVKiWpEyiNl0XuB50ZIDmmwYI8A"
x-cnt: NO
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NNIgrERlHVLRaA2OkmuFI4L%2FTZdoxS30vz5lxQUo%2FKxMIvBMi2BwAenZfiRcjyA74R532UhifY9S1LSUuNKMtBY%2BaPP4pbm6VsRQAfYVLokZ6PE6WxDEmxMalx5yCmOYBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8f1ed9956be-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1551&min_rtt=414&rtt_var=1265&sent=297&recv=232&lost=0&retrans=0&sent_bytes=337520&recv_bytes=2979&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1532&x=0"
X-Firefox-Spdy: h2

fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar

172.67.73.154

200 OK

843 B

URL User Request GET
fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
HTML document, ASCII text, with very long lines (843), with no line terminators
Size
843 B (843 bytes)
Hash
e4f92df43a3f8de4a1147cf21104e1c3
9cbea93bfd87d3220cbe5282ef3aeed20866782e
420623b3ddd5251cfa351c160e5074dcef25e1ff81f9f4d16e00449f9bc6ee2d

HTTP Headers

GET /2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:31 GMT
content-type: text/html
last-modified: Monday, 12-May-2025 12:05:31 GMT
cache-control: no-store, no-cache
x-cnt: NO
access-control-expose-headers: X-Cnt
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rdU7wayrPjIl0J8PztqFpH6U9w%2F7hnYC8ionXxppFT19m1TwjbOpgZ2S6tNhDhS09Y3xeivxHeEaq5%2BXbqug5Yl2%2B4sr0IuiCm0jErpZLJqS0U%2BiFwIsO8Pr6g4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8e8dee956be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=6381&min_rtt=455&rtt_var=11860&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3193&recv_bytes=1150&delivery_rate=7337837&cwnd=254&unsent_bytes=0&cid=d678c80b04d146c0&ts=169&x=0"
X-Firefox-Spdy: h2

fikper.com/static/js/main.c292a65a.js

172.67.73.154

200 OK

752 kB

URL GET
fikper.com/static/js/main.c292a65a.js
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JavaScript source, ASCII text, with very long lines (65465)
Size
752 kB (752421 bytes)
Hash
a7d00ab9239b997f141adc1fc2b06e0c
562bd648dac64375f7775011d73966b59b7c67f5
bc4030bcb562f40d8e85c3fc666da6ac563292443efeb6b87af8e1db539a800a

HTTP Headers

GET /static/js/main.c292a65a.js HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/javascript
last-modified: Wed, 09 Apr 2025 14:07:05 GMT
etag: W/"67f67f09-b7b25"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hzLb4NZ9YNUhTzhOcDd5nanN9r66pzF4dvD3YKBWp9iBgnmqyBhHsa%2FQbDkjeKxk7BsEHX0i8xzyJLcXC%2FcT5GOt%2FYlsjcEftLNsLJFJCLv9b36Ce%2FIjao4QKIs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8eb1a6b56be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=5035&min_rtt=455&rtt_var=9006&sent=12&recv=15&lost=0&retrans=0&sent_bytes=4282&recv_bytes=1413&delivery_rate=7337837&cwnd=256&unsent_bytes=0&cid=d678c80b04d146c0&ts=454&x=0"
X-Firefox-Spdy: h2

fikper.com/static/js/688.832e25b8.chunk.js

172.67.73.154

200 OK

19 kB

URL GET
fikper.com/static/js/688.832e25b8.chunk.js
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JavaScript source, ASCII text, with very long lines (19254), with no line terminators
Size
19 kB (19254 bytes)
Hash
3172b98b30709e9e496df4c59582afbd
85159aacb24172c633078f05f320423d8effd6de
0f6d16d0154a11d1dddf9c6d82c9f86122752db31952f1bce823863117809048

HTTP Headers

GET /static/js/688.832e25b8.chunk.js HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/javascript
last-modified: Wed, 09 Apr 2025 14:07:05 GMT
etag: W/"67f67f09-4b36"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9H3fpZ7GtIZanMeby8TA0D%2BUr%2BrwzLjj48PJ97dSsaGTxZwSDOkMJqNxb2k5g10ZyR2Zh5ThhyM8a3%2BBugde7nBi1DdVX61VVzL3yza5duURv%2BsU5Vg4h8VdPS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef191156be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1211&min_rtt=441&rtt_var=1063&sent=202&recv=181&lost=0&retrans=0&sent_bytes=245291&recv_bytes=2051&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1063&x=0"
X-Firefox-Spdy: h2

sapi.fikper.com/user/get-blog/2yLS8g7zCE

172.67.73.154

401 Unauthorized

37 B

URL GET
sapi.fikper.com/user/get-blog/2yLS8g7zCE
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JSON text data
Size
37 B (37 bytes)
Hash
fa1df00da0ca1949694153fb5a81408d
63ff4384d93e7e483a864be2cc35465fb7015782
ac3c46eeb781b95872d344623860f0f75c2f3c37bb1abd9ba5294decfe1d279b

HTTP Headers

GET /user/get-blog/2yLS8g7zCE HTTP/1.1
Host: sapi.fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fikper.com
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 401 Unauthorized
date: Mon, 12 May 2025 12:05:33 GMT
content-type: application/json; charset=utf-8
content-length: 37
access-control-allow-origin: https://fikper.com
vary: Origin
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
etag: W/"25-Y/9DhNk+fkg6hkvizDVGX7cBV4I"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ls9d4dXPgPXvX%2FqVpiwV8Ko3yW8ZAnE6%2FheAWJuRlNdQty%2FP2pc4vtVafktiX1pgRJDZE8M1NPSxOJjlmjju7DsuS4v1QZ%2F0Gfkj6gTcKjJskIa5DufwryDw%2FETVpjPWbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8f0fbeb56be-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1055&min_rtt=414&rtt_var=624&sent=294&recv=229&lost=0&retrans=0&sent_bytes=336509&recv_bytes=2834&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1467&x=0"
X-Firefox-Spdy: h2

fikper.com/static/js/121.2588d6c5.chunk.js

172.67.73.154

200 OK

55 kB

URL GET
fikper.com/static/js/121.2588d6c5.chunk.js
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JavaScript source, ASCII text, with very long lines (54573), with no line terminators
Size
55 kB (54573 bytes)
Hash
c098b60a23007c68886ca2db63f0a114
e6ed8a20096a35194d81ebbf0ef869a9aadaa415
8114b5a6a65c9c565091eb373da2ede899a7ad01ef57040c5a2da4c1aa898ab9

HTTP Headers

GET /static/js/121.2588d6c5.chunk.js HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/javascript
last-modified: Wed, 09 Apr 2025 14:07:05 GMT
etag: W/"67f67f09-d52d"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qq4OFUbBbOEGeLXGOTnKecjUUmJNQIo3nhAZqscyOyZSI78N4768P50FWGpdOmBNpaqilIy1M%2BDB7IjGF6ESMBrqIBZXLXuf8yXBNEZ5M5W1IePi%2BqpF3rOhZpM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef190356be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=747&min_rtt=414&rtt_var=212&sent=242&recv=199&lost=0&retrans=0&sent_bytes=290988&recv_bytes=2051&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1068&x=0"
X-Firefox-Spdy: h2

fikper.com/static/js/449.ba886c61.chunk.js

172.67.73.154

200 OK

26 kB

URL GET
fikper.com/static/js/449.ba886c61.chunk.js
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JavaScript source, ASCII text, with very long lines (26322), with no line terminators
Size
26 kB (26322 bytes)
Hash
9a211aa9f371d249aab8dc10b2c0b877
ecdd84ccbf5d6706a282e1e8395f28ba372dee59
7e5523f7d9a2753967b98f4ed19d39181a51a3ed9eb7218a9c3c419503237b90

HTTP Headers

GET /static/js/449.ba886c61.chunk.js HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/javascript
last-modified: Wed, 09 Apr 2025 14:07:05 GMT
etag: W/"67f67f09-66d2"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2mESsd9u7%2FaVi%2B1y4IltGijRbxGljtnTHQsElEVQyhpJqWCxUf8lrwBms0K3MmT4jVZ5U6AbFBucCOfllFdnk1hzvK7ktliWfdXpy3s3DFRC1Qb0Jn%2BZkYNd%2Byc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef190956be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=676&min_rtt=414&rtt_var=144&sent=256&recv=206&lost=0&retrans=0&sent_bytes=307512&recv_bytes=2051&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1074&x=0"
X-Firefox-Spdy: h2

fikper.com/favicon16.png

172.67.73.154

200 OK

378 B

URL GET
fikper.com/favicon16.png
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
378 B (378 bytes)
Hash
fcf0a125657fd8da32cc646a808f122a
1afd9a43e0ef9fcecfa104b2404500218da0cbe3
be26d5350b6aec1f08ac017663f0224b11029bb0d86a609bee8dfbbebd6e4a1b

HTTP Headers

GET /favicon16.png HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Cookie: hash=2yLS8g7zCE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: image/png
content-length: 378
last-modified: Sun, 26 Jan 2025 11:15:20 GMT
etag: "67961948-17a"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V4VLMtyfdT3q7zKwOD2ErBrFxuqXtvYykctFn7T8pFGDyhcn%2BjgaNho35ZKADVmjLsC6XYXzfH51S8Tnv9FiBsr%2FgjQ6L74W%2FasoZPSv4Kwc%2FJ8ZiO4umjGsj3c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8f0ebd256be-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1344&min_rtt=414&rtt_var=1296&sent=283&recv=224&lost=0&retrans=0&sent_bytes=326578&recv_bytes=2834&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1353&x=0"
X-Firefox-Spdy: h2

ansuksar.com/gcMNbLmIOYguTo/114416

23.109.170.113

200 OK

6 B

URL GET
ansuksar.com/gcMNbLmIOYguTo/114416
IP
23.109.170.113:443
ASN
#7979 SERVERS-COM

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerLet's Encrypt
Subjectansuksar.com
Fingerprint29:A2:1C:4D:2A:C7:B3:D6:97:8E:DF:73:F7:09:7D:07:75:74:F9:50
ValiditySun, 09 Mar 2025 11:35:32 GMT - Sat, 07 Jun 2025 11:35:31 GMT

File type
ASCII text, with no line terminators
Size
6 B (6 bytes)
Hash
4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /gcMNbLmIOYguTo/114416 HTTP/1.1
Host: ansuksar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 May 2025 12:05:33 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://fikper.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Tue, 13-May-2025 12:05:33 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Tue, 13-May-2025 12:05:33 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

fonts.googleapis.com/css2?family=Lalezar&display=swap

142.250.178.42

200 OK

2.1 kB

URL GET
fonts.googleapis.com/css2?family=Lalezar&display=swap
IP
142.250.178.42:443
ASN
#15169 GOOGLE

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT

File type
ASCII text, with very long lines (649)
Size
2.1 kB (2099 bytes)
Hash
c2967ee9ce692826c524b3293d40889a
a02fbd166580a846cfb2f5f580ac0cc86f614393
2ffe9e6d496c303bcda993addd091903269a820563a3978311d42b7434606e17

HTTP Headers

GET /css2?family=Lalezar&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 May 2025 12:05:32 GMT
date: Mon, 12 May 2025 12:05:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Montserrat

142.250.178.42

200 OK

1.9 kB

URL GET
fonts.googleapis.com/css?family=Montserrat
IP
142.250.178.42:443
ASN
#15169 GOOGLE

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT

File type
ASCII text
Size
1.9 kB (1866 bytes)
Hash
14747b7ccb4842d4e00fc83ac1d84c36
a6b508cbe4e15066de1f6608dcd2640d9d90d377
d2985f60e922d8796396c202ffcb9f6f6c2a57f510cb49f9babf16d025c6b058

HTTP Headers

GET /css?family=Montserrat HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 May 2025 12:05:32 GMT
date: Mon, 12 May 2025 12:05:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fikper.com/img/logo.png

172.67.73.154

200 OK

2.5 kB

URL GET
fikper.com/img/logo.png
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
PNG image data, 200 x 63, 8-bit/color RGBA, non-interlaced
Size
2.5 kB (2482 bytes)
Hash
bf3b669d93fb9dfa32f3d86552cd401c
7afe40868591f65fc3234b60854c8f83843bdf3b
7b0cad873ffdff0c673a9fd95ce98c20d6c7758d5f0710ff901b1eae451bbe53

HTTP Headers

GET /img/logo.png HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: image/png
content-length: 2482
last-modified: Mon, 14 Aug 2023 16:10:19 GMT
etag: "64da51eb-9b2"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xlqU949bydEAw7oh%2FhbQMLqOkDiD27pHj%2BF%2Fs77ocOerZxtebb6dlkmgxSlSCRytbdlmVJuIEHhks428%2F8fHkTIUs29sQp4V1DyWZSwGhsd4BNSHPqO1ekBtc0U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8eed8a956be-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1385&min_rtt=441&rtt_var=1667&sent=196&recv=174&lost=0&retrans=0&sent_bytes=242272&recv_bytes=1605&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1020&x=0"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2

142.250.74.35

200 OK

19 kB

URL GET
fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18792, version 1.0
Size
19 kB (18792 bytes)
Hash
74795056a2358804684c7e9d0479f484
7030f4f33183b8de843e82eedb9cb6a6cdd107c3
1c9c85d0b73b7321eb8ed22e0b6bcd577478dd5f99d1379a5d4cea10884033ac

HTTP Headers

GET /s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fikper.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18792
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 09:23:29 GMT
expires: Fri, 08 May 2026 09:23:29 GMT
cache-control: public, max-age=31536000
age: 355323
last-modified: Wed, 06 Nov 2024 17:30:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

wss://sapi.fikper.com/socket.io/?token=null&EIO=4&transport=websocket

172.67.73.154

101 Switching Protocols

0 B

URL GET
wss://sapi.fikper.com/socket.io/?token=null&EIO=4&transport=websocket
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /socket.io/?token=null&EIO=4&transport=websocket HTTP/1.1
Host: sapi.fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://fikper.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vm8hMQj5I46GB6GAYUXTPA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Date: Mon, 12 May 2025 12:05:32 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NiT8Yy42sEvL+c5dOKVLNsuCZxM=
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bk4NB37DWimRiOSHAjH97tk2%2B%2FJ90dvbemFZUg86wb5mESyu371%2B52Twyw%2BOlZ49iH1hRvPFU4AOAc%2FXZ0NY8tHeqTYzARe2LzFLDedScT0MBjnsFTayznCO99IUpAe3Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 93e9c8eedd28b4fd-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=530&min_rtt=497&rtt_var=158&sent=5&recv=8&lost=0&retrans=0&sent_bytes=3180&recv_bytes=1323&delivery_rate=7051948&cwnd=252&unsent_bytes=0&cid=fbcd5f49319f1c32&ts=168&x=0"

fikper.com/static/js/226.0d21b458.chunk.js

172.67.73.154

200 OK

25 kB

URL GET
fikper.com/static/js/226.0d21b458.chunk.js
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JavaScript source, ASCII text, with very long lines (25340), with no line terminators
Size
25 kB (25340 bytes)
Hash
d8ec75f9a8919f3b983a8e9e595d3f6b
a1ef8c7ba7974eb8303bc26b1d684b87d565ef5f
a3d90aa40296f364e6aee293a10065d41c08ad19402fbafc657fd484bd52d8b4

HTTP Headers

GET /static/js/226.0d21b458.chunk.js HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/javascript
last-modified: Wed, 09 Apr 2025 14:07:05 GMT
etag: W/"67f67f09-62fc"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VhBVTdsJtdMpi%2F2xEzhRNhpVVGIJetsI%2F1g1%2FLQpTA%2FDDLYrC%2F%2BobEtKYejMJJyTDh3lpqH2euPX0%2FORcfU7NTmV98rFpDo6gBWMUia6UMFpR8LtbxD1olf%2Br54%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef292356be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=676&min_rtt=414&rtt_var=144&sent=265&recv=207&lost=0&retrans=0&sent_bytes=317525&recv_bytes=2174&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1075&x=0"
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-0FTK342ZZ1

142.250.74.168

200 OK

378 kB

URL GET
www.googletagmanager.com/gtag/js?id=G-0FTK342ZZ1
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT

File type
JavaScript source, ASCII text, with very long lines (5432)
Size
378 kB (377984 bytes)
Hash
baf5af0de8d0f550f3879a08bd34c365
401961ae0e3e89f5e87cdec86b2620ce2059bb13
45449621a834404e421ee846df093d64ab1d66f84f3a6b84a4d1f2e95e540ed7

HTTP Headers

GET /gtag/js?id=G-0FTK342ZZ1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 12 May 2025 12:05:32 GMT
expires: Mon, 12 May 2025 12:05:32 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 127071
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fikper.com/locales/en/site.json

172.67.73.154

200 OK

66 B

URL GET
fikper.com/locales/en/site.json
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JSON text data
Size
66 B (66 bytes)
Hash
c54984cded485059d3e28213fb7da0bc
a336cc86ec8106709d01f212a61fdcbeb606e859
5b480440fb83ffac072e733067a482ad717222b4aa10d198a4e792d8ffed5003

HTTP Headers

GET /locales/en/site.json HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/json
last-modified: Monday, 12-May-2025 12:05:32 GMT
cache-control: no-store, no-cache
x-cnt: NO
access-control-expose-headers: X-Cnt
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oAD7FwkujdvfrVhedGUR1bokBZGWok3%2BeRmN01GtLNoDhEMagiAZC1FkmL2pt1tBUWVV1G%2FoZkHDXB0Oy48HDwGHkCU7QT6zJQqTmZ%2FOS2tYMBAmYFZn9vFAAps%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef798356be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=717&min_rtt=414&rtt_var=239&sent=276&recv=218&lost=0&retrans=0&sent_bytes=325519&recv_bytes=2341&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1118&x=0"
X-Firefox-Spdy: h2

zz.medinaossal.com/fa2Y0gFuftYt/114415

23.109.170.89

200 OK

6 B

URL GET
zz.medinaossal.com/fa2Y0gFuftYt/114415
IP
23.109.170.89:443
ASN
#7979 SERVERS-COM

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerLet's Encrypt
Subjectzz.medinaossal.com
FingerprintE0:DF:89:D9:1E:0B:62:58:85:B0:F6:68:89:A1:6D:1A:0C:5E:E7:A1
ValidityWed, 26 Mar 2025 04:05:33 GMT - Tue, 24 Jun 2025 04:05:32 GMT

File type
ASCII text, with no line terminators
Size
6 B (6 bytes)
Hash
4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fa2Y0gFuftYt/114415 HTTP/1.1
Host: zz.medinaossal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 May 2025 12:05:33 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 6
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Origin
Access-Control-Expose-Headers: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Megageocheckolololo, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, OPTIONS
Set-Cookie: GGI10=G/IAAASeD7dNK/dmKv8IjKne3vVF23LHD4p/239bRbcCCoMg63NMJOcmHtdgLENcdVb9C/8fcU22F4TMszPXDn3bi0JM1sszQtMiPRle3iuF+nW+PadvTJQWghuEE2erh7OxP8CGug0ouFXNMz9sX8bofOhPVVBMTsv72LAiF5aGU46qKWF8uZ1fb+RKCE0MoKV13JEH4pvoZXocf6ywyRddqbWmm1R6/v8=; max-age=3600000; path=/; secure; SameSite=None
GUI4=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; max-age=3600000; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

fikper.com/img/download.png

172.67.73.154

200 OK

15 kB

URL GET
fikper.com/img/download.png
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
PNG image data, 492 x 98, 8-bit/color RGB, non-interlaced
Size
15 kB (15395 bytes)
Hash
1bb87f9e1622b210960a0835a8219b93
fdbccdf893b29f9d5432046a7c46ce1f78f202b6
517c77feeef425ed138ce5f2219f46ebb9aa0825f06db0bd0db40e40e3c6a018

HTTP Headers

GET /img/download.png HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Cookie: hash=2yLS8g7zCE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:33 GMT
content-type: image/png
content-length: 15395
last-modified: Sun, 26 Jan 2025 11:15:20 GMT
etag: "67961948-3c23"
expires: Wed, 11 Jun 2025 12:05:33 GMT
cache-control: max-age=2592000, public
pragma: public
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ox6mWOTCs9oFrG7mRLH9YiKXibROGzy%2FswV7xZ1WJkkGq1M4xJ8ZzjurQ%2BjaEhzRbPa%2BuOs4YpcVxUaE%2BWOUYJ31SF%2BkMzGJa4lnLtziuI1c%2B7DjlmYfo8NLxM4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8f3f8e656be-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1488&min_rtt=414&rtt_var=1074&sent=301&recv=234&lost=0&retrans=0&sent_bytes=338418&recv_bytes=3073&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1843&x=0"
X-Firefox-Spdy: h2

fikper.com/static/js/401.45bba9e5.chunk.js

172.67.73.154

200 OK

123 kB

URL GET
fikper.com/static/js/401.45bba9e5.chunk.js
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
123 kB (123359 bytes)
Hash
8a1a336ee249f58f74c90f81a9611aa2
99933134a5376aefc6c45e936beb1e8f6d5b04eb
70ab31ce950dc33560b3014f78d29acf3ff9e6e1dd54c2ab1e840b8c115d0036

HTTP Headers

GET /static/js/401.45bba9e5.chunk.js HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/javascript
last-modified: Wed, 09 Apr 2025 14:07:05 GMT
etag: W/"67f67f09-1e1df"
expires: Wed, 11 Jun 2025 12:05:32 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BoYcEsbtCi99nOGIr1etiTKIAL5iQ1ByaLFKhF3FmynOnCWzOtAmK23vu8oTI%2BVsIBkoUnrLWQezmhyAl%2BR0CDrl67MakiO1WbpBj5uIdqNP8TJgMwxSXf7Bx%2BU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef190c56be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1211&min_rtt=441&rtt_var=1063&sent=206&recv=181&lost=0&retrans=0&sent_bytes=246430&recv_bytes=2051&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1064&x=0"
X-Firefox-Spdy: h2

fikper.com/locales/en/translation.json

172.67.73.154

200 OK

747 B

URL GET
fikper.com/locales/en/translation.json
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type
JSON text data
Size
747 B (747 bytes)
Hash
955f6f4428817cca6a0998a79b699940
2cb14eb19b91fa1f24df92473fb320f1690b6035
1df16bf7b3f3ca7360b41950ca23ea0a949f5a57d6df5b57ab605414f6effd49

HTTP Headers

GET /locales/en/translation.json HTTP/1.1
Host: fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 12 May 2025 12:05:32 GMT
content-type: application/json
last-modified: Monday, 12-May-2025 12:05:32 GMT
cache-control: no-store, no-cache
x-cnt: NO
access-control-expose-headers: X-Cnt
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PCQzmuGLCc0equHoZy4yUuaQa8TfWzOMn6y%2FqLM0AB7CIPfDLatR63nZ0ngjnZHa04n%2BO8jHvKHX5muM9PNm4KwsgznNITrw0vw0yBr7jvA0%2FiQoU2sDRsVf0cs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8ef697956be-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=644&min_rtt=414&rtt_var=124&sent=274&recv=217&lost=0&retrans=0&sent_bytes=324578&recv_bytes=2341&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1114&x=0"
X-Firefox-Spdy: h2

sapi.fikper.com/

172.67.73.154

204 No Content

0 B

URL OPTIONS
sapi.fikper.com/
IP
172.67.73.154:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fikper.com/2yLS8g7zCE/APP.v24.6.1.WiN.part2.rar
Certificate
IssuerGoogle Trust Services
Subjectfikper.com
Fingerprint48:FF:F1:40:EA:E6:86:2E:C4:70:5A:21:C3:4C:59:07:F1:89:55:65
ValidityTue, 25 Mar 2025 18:30:57 GMT - Mon, 23 Jun 2025 19:30:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS / HTTP/1.1
Host: sapi.fikper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://fikper.com/
Origin: https://fikper.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
date: Mon, 12 May 2025 12:05:33 GMT
access-control-allow-origin: https://fikper.com
vary: Origin, Access-Control-Request-Headers
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
x-cnt: NO
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3h%2FHnIUnJe%2FySF2kCGkfT1vArbBVEq1tk49xGAujno19nZQlvNS6Vg2kDOuIsVOCfStMDNM6UPtcTUJBfs5N5qYKf3bgQPCk8yD61gIK2HbLcN6BVyYkaqCriT0ErrVQUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 93e9c8f10c0856be-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1055&min_rtt=414&rtt_var=624&sent=293&recv=229&lost=0&retrans=0&sent_bytes=335849&recv_bytes=2834&delivery_rate=28426993&cwnd=257&unsent_bytes=0&cid=d678c80b04d146c0&ts=1465&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (26)

URL GET

IP

ASN

Requested by