Report - kekma.net

Report Overview

Visited public
2023-12-04 19:26:50
Tags
URL
kekma.net
Finishing URL
kekma.net/
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
kekma.net/

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kekma.net	unknown	2020-07-30	2020-07-30 16:31:51	2023-12-03 22:21:44	5.5 kB	5.6 MB	188.114.96.1
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2023-12-04 08:46:32	415 B	30 kB	151.101.194.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed
2023-12-04	medium	kekma.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	code.jquery.com/jquery-2.1.4.min.js	ScriptElement	84 kB	2023-03-07	2025-05-13
Pretty URL code.jquery.com/jquery-2.1.4.min.js IP 151.101.194.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06 Last Seen2025-05-13 12:19 Times Seen5249 Hash f9c7afd05729f10f55b689f36bb20172 43dc554608df885a59ddeece1598c6ace434d747 f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c Loading...

	kekma.net/	ScriptElement	0 B	0001-01-01	2025-05-14
Pretty URL kekma.net/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-14 05:16 Times Seen4677398 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (13)

URL IP Response Size

kekma.net/8mggbk.jpg

188.114.96.1

200 OK

4.1 kB

URL GET HTTP/3
kekma.net/8mggbk.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 200x200, components 3\012- data
Size
4.1 kB (4112 bytes)
Hash
cd328785b86c404283882d05b3d075a3
61c6fbfcffd39e7532b45ca3c6861ddd9dbed5a5
9446d3a3146025865c5e54490f31a4ea990979e22cb27e0a66f7872e0966c180

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /8mggbk.jpg HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: image/jpeg
content-length: 4112
last-modified: Tue, 29 Aug 2023 16:20:38 GMT
etag: "64ee1ad6-1010"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4115
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1OfHk4aNe5mt6iUhDdBC5TKP7RWSmpbEzQGqia7g5O8DS%2B0VYticZQfo3EmqtlpuG8cSQshnDtaFgHC5vIfhLda1zLMVcQPXsGEXzonyFqm4OG71cPmBL8%2Fi%2B6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710a2f435690-OSL
alt-svc: h3=":443"; ma=86400

kekma.net/button.jpg

188.114.96.1

200 OK

32 kB

URL GET HTTP/3
kekma.net/button.jpg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:04:23 20:31:34], baseline, precision 8, 400x200, components 3\012- data
Size
32 kB (32235 bytes)
Hash
33d1160c9d12762bac038ed9030dc859
59ff6709b4b4ffea53103d07b56b321e791d4d3a
f27c214860d60790d6067b6712cb2152f76dff3cfd5d9f79f48d43eea04e0eea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /button.jpg HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: image/jpeg
content-length: 32235
last-modified: Sat, 20 Feb 2021 19:21:38 GMT
etag: "60316142-7deb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4115
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mCdFTWA4U9Lg9BRyh%2BzF5ozHXp4zk24p40NmryeqhudS9aFwg5pPIp0wBrDc0lj%2FJub4aau4PAevGOwVPX7t9knqfRpt%2FMb0IM5bAe6poOHfYAiGuaGheEFSOmk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710a2f425690-OSL
alt-svc: h3=":443"; ma=86400

kekma.net/naggars.gif

188.114.96.1

200 OK

342 kB

URL GET HTTP/3
kekma.net/naggars.gif
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
GIF image data, version 89a, 360 x 600\012- data
Size
342 kB (342166 bytes)
Hash
9042eb498b67159155b1b026b24631fe
02c89fb7ae1fdbf5d2090af980dd7822a629e072
141aadcdd8b854ceefab4ef15fb4fff8a797e1dd0f25a69973276b705abd73a8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /naggars.gif HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: image/gif
content-length: 342166
last-modified: Tue, 11 Oct 2022 11:47:18 GMT
etag: "634557c6-53896"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4115
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O91WiWYDZsDP5Cbg9OsEKrP7gPQ1G1ipXp3UwFjYhXL5d4zkRk9F9CHsgfqaK1HsnMBLMe%2F0OvpzRLCxou7SY7F6nqPvk%2BHyWlslfyDWAA4wkeWhyGTirmKprgA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710a3f555690-OSL
alt-svc: h3=":443"; ma=86400

code.jquery.com/jquery-2.1.4.min.js

151.101.194.137

200 OK

30 kB

URL GET HTTP/2
code.jquery.com/jquery-2.1.4.min.js
IP
151.101.194.137:443
ASN
#54113 FASTLY

Requested by
https://kekma.net/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (32025)
Size
30 kB (29519 bytes)
Hash
f9c7afd05729f10f55b689f36bb20172
43dc554608df885a59ddeece1598c6ace434d747
f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c

HTTP Headers

GET /jquery-2.1.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-14979"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 04 Dec 2023 19:26:32 GMT
age: 6917339
x-served-by: cache-lga21971-LGA, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 67, 48789
x-timer: S1701717992.071509,VS0,VE0
vary: Accept-Encoding
content-length: 29519
X-Firefox-Spdy: h2

kekma.net/scream.mp3

188.114.96.1

206 Partial Content

662 kB

URL GET HTTP/3
kekma.net/scream.mp3
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 48 kHz, Monaural\012- data
Size
662 kB (662016 bytes)
Hash
cfc09a9a46f1910b13200df435483c6f
cdd3cb2b197728d7445d478378e6140185cbaefc
4168c7692e7c8c02fe9df4752422d217f1a92247fcd90114ac419a58bbdf784f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /scream.mp3 HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 206 Partial Content
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: audio/mpeg
content-length: 662016
last-modified: Sat, 20 Feb 2021 19:21:38 GMT
etag: "60316142-a1a00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5316
content-range: bytes 0-662015/662016
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IKBiC002ckfeqlnRWAgpHx5Laef0bVViMMpjCzQQCWUDX5WmR9y2%2FpaHkGVbeeX2QfLQfcRLy7xXOEjCHBwne2xReJWSUKZEwNHwQ6fCybIZDGBI87z8mIEjubw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710c0a6f5690-OSL
alt-svc: h3=":443"; ma=86400

kekma.net/scream.mp3

188.114.96.1

206 Partial Content

662 kB

URL GET HTTP/3
kekma.net/scream.mp3
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 48 kHz, Monaural\012- data
Size
662 kB (662016 bytes)
Hash
cfc09a9a46f1910b13200df435483c6f
cdd3cb2b197728d7445d478378e6140185cbaefc
4168c7692e7c8c02fe9df4752422d217f1a92247fcd90114ac419a58bbdf784f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /scream.mp3 HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 206 Partial Content
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: audio/mpeg
content-length: 662016
last-modified: Sat, 20 Feb 2021 19:21:38 GMT
etag: "60316142-a1a00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5316
content-range: bytes 0-662015/662016
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XnoPISC5zL8zqHok1B0SXIP%2BLc8NxZXLQCGXaqxX8dbPvEBkmwJiF%2BzA9%2BAdyQBT7zHBlEPN1EogNYSD0hRz2PjmjP5iS53M4CZ2oeAg7aoetp2cRUrkzM535cY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710c0a715690-OSL
alt-svc: h3=":443"; ma=86400

kekma.net/rape.mp3

188.114.96.1

206 Partial Content

292 kB

URL GET HTTP/3
kekma.net/rape.mp3
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data
Size
292 kB (291504 bytes)
Hash
df8cf932f06ba755c197d06871df6f2b
83e5c58c498776540b55c3e77dc07a0cf7b61b33
5cff1d3f0a7e9ea6984d209fbf78a2875e43f8212ecd20359567bbd644478422

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rape.mp3 HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 206 Partial Content
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: audio/mpeg
content-length: 291504
last-modified: Sat, 20 Feb 2021 19:21:38 GMT
etag: "60316142-472b0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5316
content-range: bytes 0-291503/291504
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RZsiYVU4rjAqvDaAyLVszDGOnX4x94R7Qzknaq3PemPDg1th6%2F7GTrSOTl6vMEIZEs5inH1w0UIH0HDxQvOwy8%2FioKSTC03fZ3DRKMPnbSadIkj7gWW7wUT3Lxk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710c0a735690-OSL
alt-svc: h3=":443"; ma=86400

kekma.net/zzart.mp4

188.114.96.1

206 Partial Content

3.5 MB

URL GET HTTP/3
kekma.net/zzart.mp4
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size
3.5 MB (3546298 bytes)
Hash
b08be5649bd7747fad6068eedd2f009d
95c4ece4f196f5b5fbae8bcf3ac5e3a4bf06479e
0f4eb917a6f9b82a5293dd8abc1a7fe1f364fdee1ae289f3ea08091b7b95470f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /zzart.mp4 HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 206 Partial Content
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: video/mp4
content-length: 3546298
last-modified: Sat, 20 Feb 2021 19:21:38 GMT
etag: "60316142-361cba"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5316
content-range: bytes 0-3546297/3546298
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BxFI95AAsn4FDd3fFb5A6AFbifjJxbxls0EVhzbm94sffNESCb6l2wWaGkpQOzp5VlP%2F6%2BSizvbJTqKky%2Fe1EmsynW1VAW24cTeSMtZLfibx0ZyYgG%2B%2FPrJS3Hk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710c0a755690-OSL
alt-svc: h3=":443"; ma=86400

kekma.net/

188.114.96.1

200 OK

2.5 kB

URL User Request GET HTTP/2
kekma.net/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2712), with no line terminators
Size
2.5 kB (2505 bytes)
Hash
e416738f057c165c1428afbea7397882
7177d0f834320544e1706c302ccdc01e0fe19d15
a6887b06a7c6e8e2cc4add59feda121b872150c6760fa76d33cba11c8fa69d1c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 19:26:31 GMT
content-type: text/html
last-modified: Tue, 29 Aug 2023 16:22:14 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4486
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZZft7emXXdrDSmgYeH2NDHREbLkJzuFNixGI3LgWlzSZdUh6PzJ%2FtnYQyyM07fksoqHjMyqztVIPUYpnK0NkedXGz1OZxPPhJaaJGPCfk7WLw6hfEWmiy0oz55A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830671078d97b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kekma.net/styles.css

188.114.96.1

200 OK

1.3 kB

URL GET HTTP/3
kekma.net/styles.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
ASCII text, with very long lines (1528), with no line terminators
Size
1.3 kB (1345 bytes)
Hash
c2c912408b6c950c51113ca6bd6202b7
a79f0329a596829528001fdf4fbe2b022a4a98f3
167fece871f508dd745dbc42597ffce182cfc55dd0119f3fc345bb9591fb2a09

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /styles.css HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2023 16:21:20 GMT
etag: W/"64ee1b00-541"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4115
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a3dAgTpY3PQ%2FoLXylXuQoUJ9mre6qMx6LOXWxXfyUTWjxAht%2FHGbTnoI%2FRyBXh3f1ktgb7mxWnvwClYqRnZqNNKKLdsisoqU9l2uZbk5An3EWt4PeW6kaZn6aY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710a2f405690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kekma.net/favicon.ico

188.114.96.1

404 Not Found

564 B

URL GET HTTP/3
kekma.net/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (590), with no line terminators
Size
564 B (564 bytes)
Hash
c34bd477b540aad7475a7154c092e3c0
23169b7c1476247e2e71c057f08a24113ba85410
fcbfbe5282d4842395d26af9cfeb7bac0ac667baa13fc6e3208542e183b91d77

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: HIT
age: 160
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OyFCqWTf2pXhsLUxeGyYyQkrsUFuiEIclHB3yk2Y2NfXRCMOIzwGzOgcw1BySJlusRE32FTuIya%2F3AkcAkAko23ZaiiAsCHjaJHoth2S7QE%2BVQ3vs0qeS0pp4k0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306711029e85690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kekma.net/styles.css

188.114.96.1

200 OK

1.3 kB

URL GET HTTP/3
kekma.net/styles.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
ASCII text, with very long lines (1528), with no line terminators
Size
1.3 kB (1345 bytes)
Hash
c2c912408b6c950c51113ca6bd6202b7
a79f0329a596829528001fdf4fbe2b022a4a98f3
167fece871f508dd745dbc42597ffce182cfc55dd0119f3fc345bb9591fb2a09

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /styles.css HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2023 16:21:20 GMT
etag: W/"64ee1b00-541"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4115
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IU9eIdqnxwQ2LNbKwOxdViS6nx8hvokrBwaNtaEuN3tfPrCf0xHBxJWY2zD6XdFTU2o8TYIF8YGtnzRwGFiUShoWyCqB%2Bb%2BfFxCD7rkrBOcKi5ctI7llzoHSX6Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710a4f665690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kekma.net/swasticock2.png

188.114.96.1

404 Not Found

162 B

URL GET HTTP/3
kekma.net/swasticock2.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kekma.net/
Certificate
IssuerGoogle Trust Services LLC
Subjectkekma.net
FingerprintAD:6E:52:C4:7A:FE:90:3B:6C:CB:F5:7E:99:01:EA:AC:39:81:58:2E
ValidityMon, 06 Nov 2023 14:23:47 GMT - Sun, 04 Feb 2024 14:23:46 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Size
162 B (162 bytes)
Hash
2b838659c6ea3bbc1241837a1b44840b
296c38b80b7304bd14e5b6c934fca1c32d687917
a9ac287e62f49a385bf05052b658eea54ad6811b368db66f58b581a61435c9ff

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /swasticock2.png HTTP/1.1
Host: kekma.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kekma.net/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 19:26:32 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nhGx7II63NzBAtF3qkTPUhMttNj0IemxIkPDmDSwnKJMQ%2B8TFDHpem1sZgkPJDWAl4ZxqLfjvxLuj8%2BNouappeb%2BQFx0KxrcFNPfVK%2BH%2FRsOiyhMbn68JA%2B7ymo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8306710bb9fe5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN