Report - 128.199.83.57/

Report Overview

Submitted URL
128.199.83.57/
IP
128.199.83.57
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-04-24 18:44:20
Access
public
Website Title
ALEXISTOGEL: Bandar Togel Diskon Terbesar di Indonesia
Final URL
128.199.83.57/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
128.199.83.57	unknown	unknown	No data	No data	1.1 kB	8.4 kB	128.199.83.57
kilat.digital	unknown	2023-12-03	2023-12-17	2024-04-18	3.8 kB	1.5 MB	188.114.96.1
cdn.ampproject.org	329	2015-08-31	2015-10-09	2024-04-24	1.3 kB	85 kB	216.58.207.193
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.1 kB	80 kB	142.250.74.67
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	456 B	6.7 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	128.199.83.57	Sinkholed
2024-04-24	medium	128.199.83.57	Sinkholed
2024-04-24	medium	128.199.83.57	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	cdn.ampproject.org/v0.js	285 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/v0.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen50 Hash 93b22676750227c6081037abf8baa351 d3c33bea647267cd0fef7c24d1431c40409b74b5 53da1339a0555a71431c0bbfb2bf946f300ee9d5fc2e5b9e0b424c93a2506a82 Loading...

	cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js	13 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen39 Hash c62cd4c81f0172d7ac84d15281d3fa09 8a966261eaadac311a2d6ae4f32942883911ec01 1f5211c3d83be6fa51f5b9face5beda901221f2a6cf261acb3bbf47d89594126 Loading...

	cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js	7.8 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen41 Hash bd778223dafaed0894e021593ad5dcbf ef1a45e18a85060334571cdc9eaf1e9435b5ffe9 2b753b9c13fe907246062aa577f7837fbd2ffebe71dec501c4cd6de494016ac8 Loading...

HTTP Transactions (17)

URL IP Response Size

128.199.83.57/

128.199.83.57

200 OK

3.6 kB

URL User Request GET HTTP/1.1
128.199.83.57/
IP
128.199.83.57:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerZeroSSL
Subject128.199.83.57
FingerprintED:6A:02:E9:BB:F5:06:19:43:CF:B9:16:33:CC:08:55:F3:33:FB:FF
ValiditySun, 10 Mar 2024 00:00:00 GMT - Sat, 08 Jun 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.6 kB (3557 bytes)
Hash
70acea2ec8043134c8b7d9955adb3987
0f02b5bfe390c454fc80de2f3bac5bedfd101db4
fb86a181bdae1a80db0cbf7fd1b49aa08cc3bfe82993b81c33cd55a09ccd2167

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 128.199.83.57
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 18:43:55 GMT
Server: Apache/2.4.57 (Ubuntu)
Last-Modified: Sun, 10 Mar 2024 09:56:47 GMT
ETag: "3e21-6134b71735649-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3557
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

128.199.83.57/

128.199.83.57

200 OK

309 B

URL User Request GET HTTP/1.1
128.199.83.57/
IP
128.199.83.57:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerZeroSSL
Subject128.199.83.57
FingerprintED:6A:02:E9:BB:F5:06:19:43:CF:B9:16:33:CC:08:55:F3:33:FB:FF
ValiditySun, 10 Mar 2024 00:00:00 GMT - Sat, 08 Jun 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
309 B (309 bytes)
Hash
a67adc941228544f312a9cffe8475412
90de3b18bc36aff8a0028ea2ae549aa7109380c3
19ef7b0a6a95009e39f006b299f848e5f2def0e5510c1429dd88358a61ecdc64

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 128.199.83.57
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Wed, 24 Apr 2024 18:43:56 GMT
Server: Apache/2.4.57 (Ubuntu)
Location: https://128.199.83.57/
Content-Length: 309
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

kilat.digital/images/2023/12/20/48a21fd032df88e31b412091b7975d8c.png

188.114.96.1

200 OK

8.2 kB

URL GET HTTP/2
kilat.digital/images/2023/12/20/48a21fd032df88e31b412091b7975d8c.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://128.199.83.57/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Size
8.2 kB (8165 bytes)
Hash
b6485de95f37a7c804aa18b653ab3849
ec2acde612ee6350efc9e3f23d550bc07667c25f
f3482e3e3a37655b4b577c1d211ccf210a53633432e7506fcd3c2f39c1108588

HTTP Headers

GET /images/2023/12/20/48a21fd032df88e31b412091b7975d8c.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:43:56 GMT
content-type: image/png
content-length: 8165
last-modified: Wed, 20 Dec 2023 11:38:06 GMT
etag: "1fe5-60cef6aa6ec0b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6143
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4NEz6naiXZOl9MOningltL7L48KT57Y7HHDfI%2FY%2FUvJeELXLnOGA8qR%2FMfNFZ2Li0mtK0RuebQwEkiy%2B%2FpJboRtzMLQRtJfAkhCVHsdhybbOvFmqSTEzGX17yzvfoTc4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87983de6ebfcb524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kilat.digital/images/2023/12/20/ed94593b02796a81fe558659411b7562.png

188.114.96.1

200 OK

5.3 kB

URL GET HTTP/2
kilat.digital/images/2023/12/20/ed94593b02796a81fe558659411b7562.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://128.199.83.57/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Size
5.3 kB (5278 bytes)
Hash
f8adc6b2e88287e0a1b81ba25b816894
9abf1c80cbe7ea3ba7484fd83a94698b47c616a6
a191ebfab47c1982b4ab1a41ac6e3636939395b6677a176a317a44d7dab5805e

HTTP Headers

GET /images/2023/12/20/ed94593b02796a81fe558659411b7562.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:43:56 GMT
content-type: image/png
content-length: 5278
last-modified: Wed, 20 Dec 2023 11:38:06 GMT
etag: "149e-60cef6aa41d4b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6143
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sLenVCb8r%2Bo6oIPf5XDFEyPM3IPYHOTyqZjioLUpsV51645LwDQHt37cSuMWUAwPX7ECsoesYi1rm4ZX3vaRxYaoIXItyHZWRGn5nyYZtpY9ORUBaEQhhA4wAYr%2BL2iu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87983de6ebfeb524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kilat.digital/images/2023/12/20/6b2ffffc4e97bb30e6d922ced607f802.png

188.114.96.1

200 OK

4.9 kB

URL GET HTTP/2
kilat.digital/images/2023/12/20/6b2ffffc4e97bb30e6d922ced607f802.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://128.199.83.57/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 50 x 51, 8-bit/color RGBA, non-interlaced
Size
4.9 kB (4869 bytes)
Hash
5030a0470aaacc9efd7a5446ed4628a7
c5c53596b62139874adfeb39984d8151638c300c
eda0b47e64bebe25ecdc7a33ca1fef3560c2478c4cc4baf776a6a17fc962b6ad

HTTP Headers

GET /images/2023/12/20/6b2ffffc4e97bb30e6d922ced607f802.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:43:56 GMT
content-type: image/png
content-length: 4869
last-modified: Wed, 20 Dec 2023 11:38:06 GMT
etag: "1305-60cef6aa8054c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6143
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BlU9hpZgfiWO1y1b4oz1j7CnmCL5cE6Y5p8fDbekLAo5EDDwBfh6IjPZHwUDQ4xHvEWA4ze1B0%2FFeqDWrlpH%2FDrGQrom2R4JWVVLXrE0qS6yJuCO6K3d0QA4cS5tnhdB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87983de6ebfab524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kilat.digital/images/2023/12/20/bd350c38cdf02a19edcb5022f4d46f19.png

188.114.96.1

200 OK

4.4 kB

URL GET HTTP/2
kilat.digital/images/2023/12/20/bd350c38cdf02a19edcb5022f4d46f19.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://128.199.83.57/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
Size
4.4 kB (4441 bytes)
Hash
b0117639b16db6e53203b3bfe4efebd5
b23aeefac6efd0a9ca19831f94830ab771ea92e4
94bfec52c757c42fbffa1d4b8fbcef0f63a148605871d8d9ffe1636009ed2f0e

HTTP Headers

GET /images/2023/12/20/bd350c38cdf02a19edcb5022f4d46f19.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:43:56 GMT
content-type: image/png
content-length: 4441
last-modified: Wed, 20 Dec 2023 11:38:06 GMT
etag: "1159-60cef6aa2c58a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6143
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zifi7iZoKnaph4YLYWfmyhhbKYhzqKeYfsp%2Btzr7NNAcL5fcyMDbDTMoEN7Iis56rP4DzQJ4k6uXRNgk52ID210hsS%2BoVsHSOvoNzY0uornLooSx78PBU40P6GV2bdhu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87983de6ebfdb524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.ampproject.org/v0.js

216.58.207.193

200 OK

73 kB

URL GET HTTP/2
cdn.ampproject.org/v0.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://128.199.83.57/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64654)
Size
73 kB (73093 bytes)
Hash
93b22676750227c6081037abf8baa351
d3c33bea647267cd0fef7c24d1431c40409b74b5
53da1339a0555a71431c0bbfb2bf946f300ee9d5fc2e5b9e0b424c93a2506a82

HTTP Headers

GET /v0.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 73093
date: Wed, 24 Apr 2024 18:43:56 GMT
expires: Wed, 24 Apr 2024 18:43:56 GMT
cache-control: private, max-age=3000, stale-while-revalidate=1206600
etag: "224c86d2f329f14e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2

142.250.74.67

200 OK

39 kB

URL GET HTTP/2
fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://128.199.83.57/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 39412, version 1.0
Size
39 kB (39412 bytes)
Hash
f00895393a31c17c1d38b3ca7a0c803f
fa19070e138b46a2d4234af45cce46f0aa769ad9
91c01ec0de315f973f4c00041b7ae25e1a790cedff79a6fbb56c571bba379142

HTTP Headers

GET /s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://128.199.83.57
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:22 GMT
expires: Fri, 18 Apr 2025 02:43:22 GMT
cache-control: public, max-age=31536000
age: 576035
last-modified: Wed, 14 Feb 2024 22:43:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2

142.250.74.67

200 OK

39 kB

URL GET HTTP/2
fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://128.199.83.57/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 39412, version 1.0
Size
39 kB (39412 bytes)
Hash
f00895393a31c17c1d38b3ca7a0c803f
fa19070e138b46a2d4234af45cce46f0aa769ad9
91c01ec0de315f973f4c00041b7ae25e1a790cedff79a6fbb56c571bba379142

HTTP Headers

GET /s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://128.199.83.57
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:22 GMT
expires: Fri, 18 Apr 2025 02:43:22 GMT
cache-control: public, max-age=31536000
age: 576035
last-modified: Wed, 14 Feb 2024 22:43:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js

216.58.207.193

200 OK

3.9 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://128.199.83.57/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (12614)
Size
3.9 kB (3935 bytes)
Hash
c62cd4c81f0172d7ac84d15281d3fa09
8a966261eaadac311a2d6ae4f32942883911ec01
1f5211c3d83be6fa51f5b9face5beda901221f2a6cf261acb3bbf47d89594126

HTTP Headers

GET /rtv/012404091947000/v0/amp-loader-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://128.199.83.57
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 3935
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 18:03:29 GMT
expires: Thu, 24 Apr 2025 18:03:29 GMT
cache-control: public, max-age=31536000
etag: "14ee94e1b9693284"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 2428
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js

216.58.207.193

200 OK

3.0 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://128.199.83.57/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (7690)
Size
3.0 kB (2974 bytes)
Hash
bd778223dafaed0894e021593ad5dcbf
ef1a45e18a85060334571cdc9eaf1e9435b5ffe9
2b753b9c13fe907246062aa577f7837fbd2ffebe71dec501c4cd6de494016ac8

HTTP Headers

GET /rtv/012404091947000/v0/amp-auto-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://128.199.83.57
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 2974
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 18:03:29 GMT
expires: Thu, 24 Apr 2025 18:03:29 GMT
cache-control: public, max-age=31536000
etag: "dfcaaf971da6dba2"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 2428
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

kilat.digital/images/2023/12/16/35db572749162b57a4d2e710096d13a3.png

188.114.96.1

200 OK

11 kB

URL GET HTTP/3
kilat.digital/images/2023/12/16/35db572749162b57a4d2e710096d13a3.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://128.199.83.57/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 200 x 46, 8-bit/color RGBA, non-interlaced
Size
11 kB (10671 bytes)
Hash
05f5d976ff45178d269b2221e4566b4d
68e5e20c045885602de35cfbc996a48f49846434
ef5619da1e3b27761d10e53b3e73e82e9dbd72e7022e4d2c0e9b264cd570db74

HTTP Headers

GET /images/2023/12/16/35db572749162b57a4d2e710096d13a3.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:43:57 GMT
content-type: image/png
content-length: 10671
last-modified: Sat, 16 Dec 2023 07:41:32 GMT
etag: "29af-60c9ba542ce47"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b%2FQOb2%2BI31bzzOgC0JfNBKguMN8Khp66oYaXzFnWcwAc0zwf56DQhfH54fN0e5FjBHqb6Q7XkVYPwNDiL9%2BEIgWuQJZGsJ8E1EFwmh%2FAcALpRxagY2c%2B8jkR36lEMfHt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87983dea2dbc5690-OSL
alt-svc: h3=":443"; ma=86400

kilat.digital/images/2023/12/13/067a6dbaedf867ecca980a732729ed54.png

188.114.96.1

200 OK

27 kB

URL GET HTTP/3
kilat.digital/images/2023/12/13/067a6dbaedf867ecca980a732729ed54.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://128.199.83.57/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 257 x 257, 8-bit/color RGBA, non-interlaced
Size
27 kB (27102 bytes)
Hash
dbd674ce5c7943a0251a1fe8b6109862
c405c92b16202f9dd515a6630ac6ce8b14921110
4ab0b1dd0deba659091fc147d6d1364f8ad1e4a94d53029a02b1c3151d207df8

HTTP Headers

GET /images/2023/12/13/067a6dbaedf867ecca980a732729ed54.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:43:57 GMT
content-type: image/png
content-length: 27102
last-modified: Wed, 13 Dec 2023 11:37:21 GMT
etag: "69de-60c62971beccd"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xa9gYVW3E5JU91f1m%2BJffBhPO9ZLRZmeYeShPBbjuTqURjUOHakZFd7eqFPfs1%2BZN24D3%2B2IUDdkiZw%2BhZZYrPhu3LLGDu3abB63gF1R2cs3M9Z5MXP7G9vIstlvGQ15"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87983dec088d5690-OSL
alt-svc: h3=":443"; ma=86400

kilat.digital/images/2024/03/10/99caa73c0805c7706ac1b4ba04ea93fd.jpg

188.114.96.1

200 OK

629 kB

URL GET HTTP/3
kilat.digital/images/2024/03/10/99caa73c0805c7706ac1b4ba04ea93fd.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://128.199.83.57/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 1920x1080, components 3
Size
629 kB (628904 bytes)
Hash
69e7f5292a556a523d8db55e5a1ca445
b76b5677856510163560c3521fb8a62eff476f2f
240b3bca389a0300a46783e904a8ed9b626a7b034dd53f48d69deea1830ec4b4

HTTP Headers

GET /images/2024/03/10/99caa73c0805c7706ac1b4ba04ea93fd.jpg HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:43:57 GMT
content-type: image/jpeg
content-length: 628904
last-modified: Sun, 10 Mar 2024 05:13:24 GMT
etag: "998a8-613477c062f60"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EUoze78ains6%2FcC7Ic2c1rO5V%2FcATJIOUjOOLcdLs8%2BjApZWiA0seAsj5GgKCwCTmRFrnVLMaGaa9%2BGojD5dGn73GGbPFbcToQhR%2FBGtQObRyicwktS7a%2BpuQ7K3G%2B%2F0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87983de8ebff5690-OSL
alt-svc: h3=":443"; ma=86400

kilat.digital/images/2024/03/09/f0e455e2f96483ee399c9d2a19249c3b.jpg

188.114.96.1

200 OK

764 kB

URL GET HTTP/3
kilat.digital/images/2024/03/09/f0e455e2f96483ee399c9d2a19249c3b.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://128.199.83.57/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 1080x1080, components 3
Size
764 kB (763950 bytes)
Hash
ce8aac979312d14197ecf39ae2a7a85b
7e40de6ef6bd9a28ee63aced67fd8776db529b90
9ffe4bb2bcabba123644939bff97974733c707e44fd706751016e5c209357aa9

HTTP Headers

GET /images/2024/03/09/f0e455e2f96483ee399c9d2a19249c3b.jpg HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 18:43:58 GMT
content-type: image/jpeg
content-length: 763950
last-modified: Sat, 09 Mar 2024 08:24:00 GMT
etag: "ba82e-6133607ca8452"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wZh3GL1KCehrLhzDI7ZTnE2vWMttWK3z6MaKFn9yDVM%2BRuydYB4Nu0jBVG%2Fm%2BtDCP5SnFHwf1wvO4kNp6vQjwMOtIu1iak6O7h0vfYqxJrmXkV63LTkTfEZR5j3N27kI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87983dea3dca5690-OSL
alt-svc: h3=":443"; ma=86400

128.199.83.57/

128.199.83.57

200 OK

3.6 kB

URL User Request GET HTTP/1.1
128.199.83.57/
IP
128.199.83.57:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerZeroSSL
Subject128.199.83.57
FingerprintED:6A:02:E9:BB:F5:06:19:43:CF:B9:16:33:CC:08:55:F3:33:FB:FF
ValiditySun, 10 Mar 2024 00:00:00 GMT - Sat, 08 Jun 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.6 kB (3557 bytes)
Hash
70acea2ec8043134c8b7d9955adb3987
0f02b5bfe390c454fc80de2f3bac5bedfd101db4
fb86a181bdae1a80db0cbf7fd1b49aa08cc3bfe82993b81c33cd55a09ccd2167

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 128.199.83.57
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 18:43:59 GMT
Server: Apache/2.4.57 (Ubuntu)
Last-Modified: Sun, 10 Mar 2024 09:56:47 GMT
ETag: "3e21-6134b71735649-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3557
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap

142.250.74.106

200 OK

6.1 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://128.199.83.57/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (6258), with no line terminators
Size
6.1 kB (6098 bytes)
Hash
2b411540627fa4b257bb1fed8643c888
29a10509d9f151b56907ba92464e60828e0d14ab
b39f9e1f74ff1b1dbedee99caea06b1832c0a39a4743070ed15fe9eb993128eb

HTTP Headers

GET /css2?family=Noto+Sans:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://128.199.83.57/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 18:43:56 GMT
date: Wed, 24 Apr 2024 18:43:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate