Report - revanced.to

Report Overview

Submitted URL
revanced.to
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-28 11:11:23
Access
public
Website Title
ReVanced v19.09.37 - Download YouTube ReVanced APK (2024)
Final URL
revanced.to/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
revanced.to	unknown	unknown	2023-10-11	2024-02-19	2.4 kB	95 kB	188.114.96.1
iglooprin.com	unknown	2023-09-20	2023-09-20	2024-02-20	404 B	1.5 kB	23.109.170.125

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	iglooprin.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	revanced.to/wp-content/plugins/flying-analytics/js/gtagv4.js	93 kB	2023-05-08	2024-04-16
Pretty URL revanced.to/wp-content/plugins/flying-analytics/js/gtagv4.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-08 12:10:40 Last Seen2024-04-16 13:48:28 Times Seen75 Hash 5a2789cc1ee0950a6b78750ebbc264c9 2e973d3d2b85b31c7698b43aaaab1f3efc0fdbba 0f48532ed0175b589d37f3325a8fc8974b8f7207a5414ac4ea548c1dc9b6d94e Loading...

	iglooprin.com/tkoKizwfMNvTBQ/76422	5 B	2023-03-07	2024-04-27
Pretty URL iglooprin.com/tkoKizwfMNvTBQ/76422 IP 23.109.170.125 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:39 Last Seen2024-04-27 09:24:50 Times Seen6366 Hash f7a2939527fd9e68723da600e96d76bd a9e717b6364d2895ee0a716050db32ca0ef1bb42 d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a Loading...

	revanced.to/	54 B	2023-03-07	2024-04-21
Pretty URL revanced.to/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:27:43 Last Seen2024-04-21 22:32:32 Times Seen542 Hash 8f840711c54e8cbc5a9b4f6539613c54 10eaf25300ecce834162978086b99a634cf0f2ce 7029bfecdca58aef04f0434d446b3f325922e6ca4c1c6f26e829e63bb34da895 Loading...

	revanced.to/	260 B	2023-03-07	2024-04-27
Pretty URL revanced.to/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:19 Last Seen2024-04-27 01:29:52 Times Seen2526 Hash 9b78b28b396646badfc6017235ee4be9 18103240bf0cb760cdf7febc628b56b8fca44319 215f517010a20f2f4c55d34dd3c574568bd0fb83662f0b915ddb6561f97c3904 Loading...

	revanced.to/	127 B	2023-03-07	2024-04-26
Pretty URL revanced.to/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:19 Last Seen2024-04-26 17:47:25 Times Seen1585 Hash e891393f0be3a6ffaa3923b307180e7e bc0a7332b9846a5762a71b9b9811c1a8b19df194 2d1778345d3607ceb641cc5f21b0a2c045fa70052361ac91a17c39b2c9d96f71 Loading...

	revanced.to/wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10	0 B	2023-03-07	2024-04-27
Pretty URL revanced.to/wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-27 11:37:04 Times Seen37118880 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	revanced.to/wp-content/plugins/quick-adsense-reloaded/assets/js/ads.js?ver=2.0.81	1.4 kB	2024-03-26	2024-04-15
Pretty URL revanced.to/wp-content/plugins/quick-adsense-reloaded/assets/js/ads.js?ver=2.0.81 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-26 23:15:29 Last Seen2024-04-15 07:04:00 Times Seen11 Hash f4c0e5d883b22cceae0e8fbf05d26b3c e575f5615f5fdf43d013e7b53b2c269cdcb393c0 cd7edafd6b59e14cb45567b88f1a7106bfa23b42b69d53203364e4b7d5804a01 Loading...

	revanced.to/	27 B	2024-02-20	2024-03-28
Pretty URL revanced.to/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-20 00:55:34 Last Seen2024-03-28 12:11:24 Times Seen2 Hash 13f14c8e850bb6b48caaed8e4d2716aa f80860a9cf9b15f6cf40fbf16a664b48761fb244 720ca6369caf1b4192fb1af918c256c77e66b9e7ff1eb972f8b56e436619495b Loading...

	revanced.to/	139 B	2024-02-20	2024-03-28
Pretty URL revanced.to/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-20 00:55:34 Last Seen2024-03-28 12:11:24 Times Seen2 Hash 7a4a4d6423f0703e0bd06e9383461146 a234a407f6698df3bfa4aa34418a083a2a365967 b078d0b16e45b884326ab42ce58a3acef7229aeb40db0533e0426097f2aa6d49 Loading...

	revanced.to/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.3.0	7.0 kB	2023-03-29	2024-04-27
Pretty URL revanced.to/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.3.0 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 21:09:45 Last Seen2024-04-27 01:29:53 Times Seen2177 Hash 7f79dafc27c57108eb5c4cef9c9b5e7b c51c81cb212089ebb7bf4675083f0ddca8016386 174066535cb768d1715ae34808cd4e83f16f23715524bfff79db8860e8c03296 Loading...

HTTP Transactions (6)

URL IP Response Size

revanced.to/wp-content/uploads/2023/10/revanced-icon.webp

188.114.96.1

8.3 kB

URL
revanced.to/wp-content/uploads/2023/10/revanced-icon.webp
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image
Size
8.3 kB (8268 bytes)
Hash
ebc6b8000b5eee4412cd3eafc272da4e
e5c4f03fdaeeb40e7927206011f5fccf4a5acdd5
503ba344fee11d91f9917975b0c55891854f75b41667064cf49ac3dc0e664562

HTTP Headers

GET /wp-content/uploads/2023/10/revanced-icon.webp HTTP/1.1
Host: revanced.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revanced.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 11:10:58 GMT
content-type: image/webp
content-length: 8268
last-modified: Fri, 13 Oct 2023 09:49:08 GMT
etag: "65291294-204c"
cache-control: public, max-age=31536000, immutable
cf-cache-status: HIT
age: 486665
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KxeJ1icdhSQVAeaHUtI02WHMmfb5tSdE9FQWUDBJuu9PCQsL3aaipGEzu%2BZz4kx2yhHgl%2FXEhM9yvZ9nwZFBnBVCEmYYwspDV%2BgXbhGUkxqcTVCsUXuTGVxtl4oLgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b72d3d4d7f5688-OSL
alt-svc: h3=":443"; ma=86400

revanced.to/

188.114.96.1

44 kB

URL
revanced.to/
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (13448)
Size
44 kB (43526 bytes)
Hash
0049e8ddf3cec7fd1dc828dd16aba6ca
91f9f279cc9816ec194fd80162a5afbc26e3a40d
b435dda4f7b7f39a1cde9dc7769d38623cf7e514e28b37d2835384f7d138076d

HTTP Headers

GET / HTTP/1.1
Host: revanced.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 11:10:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-ua-compatible: IE=edge
link: <https://revanced.to/wp-json/>; rel="https://api.w.org/", <https://revanced.to/wp-json/wp/v2/pages/1993>; rel="alternate"; type="application/json", <https://revanced.to/>; rel=shortlink
x-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xiK%2BK5GW7fdlPNJ9%2BoFpQ4cdmILrDyeb1aqV7XOCkpDsZS8P%2FbNSp0zVPYWQbUYtKF%2BKKWrP2%2B8tV7LC3j3SeyVW0Bjn9hhYMA24ZcnVA2pYn0%2FrzaUhfdxcDjoWiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86b72d3bdf9c5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

revanced.to/wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10

188.114.96.1

0 B

URL
revanced.to/wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/plugins/wp-rocket/assets/js/heartbeat.js?ver=3.15.10 HTTP/1.1
Host: revanced.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revanced.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 11:10:58 GMT
content-type: application/javascript
content-length: 0
last-modified: Thu, 28 Mar 2024 05:39:34 GMT
etag: "66050296-0"
cache-control: public, max-age=31536000, immutable
cf-cache-status: HIT
age: 17384
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LgaeU7qNfe3BzEx1Mcd6%2FXcFpXppK3gtf6Q%2BscZtKiXRzjhCnfkhjPMvlWFDlJcm6kcp0vjMJ4lv3MlyUIrAXoIEahTjp9MSHQuSxLvrUlttNrBkvVltWI7hXS7sFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b72d3d5d875688-OSL
alt-svc: h3=":443"; ma=86400

iglooprin.com/tkoKizwfMNvTBQ/76422

23.109.170.125

25 B

URL
iglooprin.com/tkoKizwfMNvTBQ/76422
IP
23.109.170.125:0
ASN
#7979 SERVERS-COM

File type
ASCII text, with no line terminators
Size
25 B (25 bytes)
Hash
f7a2939527fd9e68723da600e96d76bd
a9e717b6364d2895ee0a716050db32ca0ef1bb42
d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /tkoKizwfMNvTBQ/76422 HTTP/1.1
Host: iglooprin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revanced.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 28 Mar 2024 11:10:58 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://revanced.to
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Fri, 29-Mar-2024 11:10:58 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Fri, 29-Mar-2024 11:10:58 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

revanced.to/wp-content/uploads/2023/10/cropped-revanced-icon-192x192.webp

188.114.96.1

3.8 kB

URL
revanced.to/wp-content/uploads/2023/10/cropped-revanced-icon-192x192.webp
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image
Size
3.8 kB (3774 bytes)
Hash
26b379257d86f68205980f0ea526148e
eab5ee39913831bf1f9317ba457bf9a55880da16
4849d855f7da089367559c018a9f95a4cb571c5adfbb26021c44862fb361c932

HTTP Headers

GET /wp-content/uploads/2023/10/cropped-revanced-icon-192x192.webp HTTP/1.1
Host: revanced.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revanced.to/
Cookie: quads_browser_width=1280; _ga_3CWDM66K45=GS1.1.1711624258.1.0.1711624258.0; _ga=GA1.1.292927504.1711624258
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 11:10:58 GMT
content-type: image/webp
content-length: 3774
last-modified: Sat, 14 Oct 2023 10:55:17 GMT
etag: "652a7395-ebe"
cache-control: public, max-age=31536000, immutable
cf-cache-status: HIT
age: 7264613
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OajQ4DNZSZzgh8XX%2Fohlp%2BUQCgvsYztB4bMbIE0oB6apwrHyr1c7%2F%2F5gonZDqD8FfcAGF7rtGhxFpYkip9RrcCWRa8iZPvCWE%2FypmvrOOfzPInpugFMLoztmVSXUyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b72d3f0eef5688-OSL
alt-svc: h3=":443"; ma=86400

revanced.to/wp-content/plugins/flying-analytics/js/gtagv4.js

188.114.96.1

36 kB

URL
revanced.to/wp-content/plugins/flying-analytics/js/gtagv4.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
36 kB (36068 bytes)
Hash
5a2789cc1ee0950a6b78750ebbc264c9
2e973d3d2b85b31c7698b43aaaab1f3efc0fdbba
0f48532ed0175b589d37f3325a8fc8974b8f7207a5414ac4ea548c1dc9b6d94e

HTTP Headers

GET /wp-content/plugins/flying-analytics/js/gtagv4.js HTTP/1.1
Host: revanced.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://revanced.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 28 Mar 2024 11:10:58 GMT
content-type: application/javascript
last-modified: Sat, 04 Nov 2023 10:01:50 GMT
vary: Accept-Encoding
etag: W/"6546168e-16ada"
cache-control: public, max-age=31536000, immutable
cf-cache-status: HIT
age: 7264613
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p%2FvKfn40nMi2%2B8%2B2JGHaNuACCZTPoCpO7PsW8XOr%2F9a7Ae%2BQ8VULn6ZuS1ygcJPFkHejAv0fGzjrf%2BE8XbDAlFC592Mo8W8XlbCttB6eWpsahUN0xtUzZ2xI2DtaCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86b72d3d5d8c5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML