Report - datest.xyz/4Lx/7.html

Report Overview

URL

datest.xyz/4Lx/7.html
IP

147.182.255.121

ASN

#14061 DIGITALOCEAN-ASN
Submitted

2023-05-15T12:08:41Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

6

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com (1)	12905	2013-08-16 11:51:31	2023-05-15 11:07:12	427	32005	216.58.207.234
datest.xyz (20)	unknown	2019-04-05 00:29:07	2023-05-15 14:08:19	9142	583290	147.182.255.121
www.gstatic.com (3)	unknown	2016-07-26 11:37:06	2023-05-15 08:08:25	1573	9092	142.250.74.35
translate.googleapis.com (3)	1005	2012-05-31 09:21:21	2023-05-15 10:51:43	1705	78618	142.250.74.138
translate-pa.googleapis.com (1)	1620	2021-11-04 07:37:42	2023-05-15 10:51:43	526	2285	142.250.74.138
threatdetect.org (1)	unknown	2022-01-28 15:40:10	2023-05-11 18:53:06	466	627	188.114.96.1
translate.google.com (1)	1156	2012-05-30 03:30:32	2023-05-15 05:12:55	446	80416	216.58.211.14
ocsp.pki.goog (5)	175	2018-07-01 08:43:07	2023-05-15 05:09:43	1665	3497	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-15	medium	datest.xyz/4Lx/files/images/country.svg
2023-05-15	medium	datest.xyz/4Lx/files/images/logo.svg
2023-05-15	medium	datest.xyz/4Lx/files/script/smart.js
2023-05-15	medium	datest.xyz/4Lx/files/script/lang.js
2023-05-15	medium	datest.xyz/4Lx/7.html
2023-05-15	medium	datest.xyz/4Lx/files/script/myjs.js

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

HTTP Transactions (35)

URL IP Response Size

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

da0bb922939fdb61a841c9c196c4df0f

9aab2b0ce4581d86e82988cab48ded50978c10f8

ff21dc0286eedf85f3887a830a287cb1598e19763714f157f848cf6c5b932923

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 15 May 2023 12:08:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js

216.58.207.234

200 OK

31021

URL GET HTTP/2

ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP

216.58.207.234:443
ASN

#15169 GOOGLE

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subjectupload.video.google.com

Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A

ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

Magic

ASCII text, with very long lines (65451)

Size

31021
Hash

dc5e7f18c8d36ac1d3d4753a87c98d0a

c8e1c8b386dc5b7a9184c763c88d19a346eb3342

f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

                                        GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 May 2023 18:13:50 GMT
expires: Thu, 09 May 2024 18:13:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 410074
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

da0bb922939fdb61a841c9c196c4df0f

9aab2b0ce4581d86e82988cab48ded50978c10f8

ff21dc0286eedf85f3887a830a287cb1598e19763714f157f848cf6c5b932923

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 15 May 2023 12:08:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

datest.xyz/4Lx/files/images/country.svg

147.182.255.121

200 OK

895

URL GET HTTP/2

datest.xyz/4Lx/files/images/country.svg
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (895), with no line terminators

Size

895
Hash

650a2017cd8e569cb2602df163e09ef6

18a36c8081f497718f5cabe0042b33553e8fca5a

0b0e98a07ec6615cc194e63755a5aa63f23061f9032f9c997adfcaeb6a88aa40

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /4Lx/files/images/country.svg HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/svg+xml
content-length: 895
last-modified: Thu, 04 May 2023 10:24:27 GMT
etag: "645387db-37f"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/bg-line.jpg

147.182.255.121

200 OK

94863

URL GET HTTP/2

datest.xyz/4Lx/files/images/bg-line.jpg
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", baseline, precision 8, 1500x1000, components 1\012- data

Size

94863
Hash

51f45a24457f1196d1877254d9291464

534402c75dbdba74393e694b0b8296091dccf7a0

c01cac55c690434e62ec2ac318071cae43c0b72ca9d5320dc15107cc4ed4bad8

HTTP Headers

                                        GET /4Lx/files/images/bg-line.jpg HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/files/styles/default.css
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/jpeg
content-length: 94863
last-modified: Mon, 08 May 2023 10:54:24 GMT
etag: "6458d4e0-1728f"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/favicon.png

147.182.255.121

200 OK

2848

URL GET HTTP/2

datest.xyz/4Lx/files/images/favicon.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 50 x 58, 8-bit/color RGBA, non-interlaced\012- data

Size

2848
Hash

cae02ab1f905c5e7f46295e78895c132

0ad7b4107ce7b997bf709dc1ff252d1b537ec674

159d846c9bdea2230f04d4f2f04c10fefff91d023539e761f4e91da0c0ca9829

HTTP Headers

                                        GET /4Lx/files/images/favicon.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/png
content-length: 2848
last-modified: Thu, 04 May 2023 13:15:57 GMT
etag: "6453b00d-b20"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/icon_1.png

147.182.255.121

200 OK

1137

URL GET HTTP/2

datest.xyz/4Lx/files/images/icon_1.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data

Size

1137
Hash

d4d69630de198f952456bd95946cff99

63666fc0c400af0789069bcf8fb5ec3092e3c7b5

3bc79b2b43c6496e7be7ea2cc22838c9e14bd7d4ab27d049d8a01a6423607e87

HTTP Headers

                                        GET /4Lx/files/images/icon_1.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/png
content-length: 1137
last-modified: Thu, 04 May 2023 13:03:56 GMT
etag: "6453ad3c-471"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/icon_2.png

147.182.255.121

200 OK

2431

URL GET HTTP/2

datest.xyz/4Lx/files/images/icon_2.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data

Size

2431
Hash

fd22397dfe5d6d7349164ce82847fd53

dcc678c0c3c6d91d88b021081f280377fa65ee01

3c6902c5acb08e21fef1afb46bcf770245b6b942f0613d8063a5032065c4d317

HTTP Headers

                                        GET /4Lx/files/images/icon_2.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/png
content-length: 2431
last-modified: Thu, 04 May 2023 13:04:52 GMT
etag: "6453ad74-97f"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/together.png

147.182.255.121

200 OK

7907

URL GET HTTP/2

datest.xyz/4Lx/files/images/together.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 122 x 34, 8-bit/color RGBA, non-interlaced\012- data

Size

7907
Hash

54586abdf290194d7ae038a0455ea8ab

72d36e7a2d9c8b0522313c00eaf49f8385d260ab

021f210aa8754996bd01111c47a2c9e8bca5c491b74485193243801e17d6ba36

HTTP Headers

                                        GET /4Lx/files/images/together.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/png
content-length: 7907
last-modified: Thu, 04 May 2023 14:55:09 GMT
etag: "6453c74d-1ee3"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/atten.png

147.182.255.121

200 OK

2453

URL GET HTTP/2

datest.xyz/4Lx/files/images/atten.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 100 x 89, 8-bit/color RGBA, non-interlaced\012- data

Size

2453
Hash

73ee5f5a65419cdae683e3ce557667c5

c63479fd67f9bcf0ff867e518ed12dbb223929fb

beaf85377ddd403e8beb6772e27ef87608e0da79d09e3080798c339d9b822135

HTTP Headers

                                        GET /4Lx/files/images/atten.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/png
content-length: 2453
last-modified: Thu, 04 May 2023 15:54:11 GMT
etag: "6453d523-995"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/icon_3.png

147.182.255.121

200 OK

1010

URL GET HTTP/2

datest.xyz/4Lx/files/images/icon_3.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data

Size

1010
Hash

118f0c5583f13e7f2e42ac3c34d54a4a

aca14f746b4889df053494c8fa043f8a4b22a511

746872277e95c813f0720fb138d445af664d09b0e9968bb2dfc453a4f30f75da

HTTP Headers

                                        GET /4Lx/files/images/icon_3.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/png
content-length: 1010
last-modified: Thu, 04 May 2023 15:43:50 GMT
etag: "6453d2b6-3f2"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/icon_4.png

147.182.255.121

200 OK

1288

URL GET HTTP/2

datest.xyz/4Lx/files/images/icon_4.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data

Size

1288
Hash

d4ce6e3f44d5ddcc50f3f1e88107b886

1b1969cff7e88bce4b1196551d6a44bef0ef6dcf

2d21436c30be8369abd4dcbf6b26d1c5d9db2f039c398d5c8aeba3db93d7d7a5

HTTP Headers

                                        GET /4Lx/files/images/icon_4.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/png
content-length: 1288
last-modified: Thu, 04 May 2023 15:43:33 GMT
etag: "6453d2a5-508"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/action_1.gif

147.182.255.121

200 OK

URL GET HTTP/2

datest.xyz/4Lx/files/images/action_1.gif
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

GIF image data, version 89a, 16 x 16\012- data

Size

69
Hash

3ae573d079dcd1d2da4086f2c0c72c45

e7c9dabec81379373476ed23168dcecb9b8c56aa

9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107

HTTP Headers

                                        GET /4Lx/files/images/action_1.gif HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/gif
content-length: 69
last-modified: Thu, 04 May 2023 15:59:08 GMT
etag: "6453d64c-45"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/action_2.gif

147.182.255.121

200 OK

377

URL GET HTTP/2

datest.xyz/4Lx/files/images/action_2.gif
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

GIF image data, version 89a, 16 x 16\012- data

Size

377
Hash

c10bdec858cb0cf9e6cc5865d5925746

697c095ed5509e5a5af0c5ebf2380662aeffc531

b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9

HTTP Headers

                                        GET /4Lx/files/images/action_2.gif HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/gif
content-length: 377
last-modified: Thu, 04 May 2023 15:59:20 GMT
etag: "6453d658-179"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/action_3.gif

147.182.255.121

200 OK

234

URL GET HTTP/2

datest.xyz/4Lx/files/images/action_3.gif
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

GIF image data, version 89a, 16 x 16\012- data

Size

234
Hash

9ce99ec458daf212f9812a90f3fadd13

9e3041bc91b79a17b52e0fbb6c2d0e2f905d98a1

b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753

HTTP Headers

                                        GET /4Lx/files/images/action_3.gif HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/gif
content-length: 234
last-modified: Thu, 04 May 2023 15:59:32 GMT
etag: "6453d664-ea"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/tlis.png

147.182.255.121

200 OK

392756

URL GET HTTP/2

datest.xyz/4Lx/files/images/tlis.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 636 x 806, 8-bit/color RGBA, non-interlaced\012- data

Size

392756
Hash

2d3c3ae48a9aa175a82dc3b740821e2c

4d9f22884ff2c6ada4bfa4fcafc59a9ad846e9c2

cf9393bc05cc99efa2b979cf3ca7785db8b0067d6e6e0a85a3dcfd8d262f468a

HTTP Headers

                                        GET /4Lx/files/images/tlis.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/png
content-length: 392756
last-modified: Thu, 04 May 2023 16:26:48 GMT
etag: "6453dcc8-5fe34"
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

bf6732940d6e2f5ae2341098b840edde

534624525689aee38328dbf425f11404b434397e

93f38010996252b502983331af9e04ef9afc478deab8bfec32df1fcb43893749

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 15 May 2023 12:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

datest.xyz/4Lx/files/images/favicon.png

147.182.255.121

200 OK

2848

URL GET HTTP/2

datest.xyz/4Lx/files/images/favicon.png
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

PNG image data, 50 x 58, 8-bit/color RGBA, non-interlaced\012- data

Size

2848
Hash

cae02ab1f905c5e7f46295e78895c132

0ad7b4107ce7b997bf709dc1ff252d1b537ec674

159d846c9bdea2230f04d4f2f04c10fefff91d023539e761f4e91da0c0ca9829

HTTP Headers

                                        GET /4Lx/files/images/favicon.png HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:25 GMT
content-type: image/png
content-length: 2848
last-modified: Thu, 04 May 2023 13:15:57 GMT
etag: "6453b00d-b20"
accept-ranges: bytes
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/images/logo.svg

147.182.255.121

200 OK

29600

URL GET HTTP/2

datest.xyz/4Lx/files/images/logo.svg
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

gzip compressed data, from Unix\012- data

Size

29600
Hash

effdd4dd157207bb2404c1a10edb6aa0

a83329f83f9d563db83330ad2d647f78c1647d4f

2294db4da21eadbd46ed57cf89bc21344d344fa1a2674b1f06c25352da789e9a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /4Lx/files/images/logo.svg HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: image/svg+xml
last-modified: Thu, 04 May 2023 11:02:54 GMT
vary: Accept-Encoding
etag: W/"645390de-b88"
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

f4fea5cf544471669f24229f47d96622

e21aa81232c02d605863b3193c4ce0d27eba07ec

216eb082f9386c239a730dfe8d0414192c3af67ccba8db2865a250d2e13ed7d4

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 15 May 2023 12:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css

142.250.74.35

200 OK

4205

URL GET HTTP/2

www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
IP

142.250.74.35:443
ASN

#15169 GOOGLE

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4

ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

Magic

ASCII text, with very long lines (23228), with no line terminators

Size

4205
Hash

edf649e1b11a33833272345187bd4eec

73427e2ab282e5f89021e1c7d20f83eaf9830283

553d768412bca504a0c8771705f681dad359370bdcea637298ca5aa486017a06

HTTP Headers

                                        GET /_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 May 2023 00:16:38 GMT
expires: Thu, 09 May 2024 00:16:38 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 474707
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

f4fea5cf544471669f24229f47d96622

e21aa81232c02d605863b3193c4ce0d27eba07ec

216eb082f9386c239a730dfe8d0414192c3af67ccba8db2865a250d2e13ed7d4

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 15 May 2023 12:08:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Q6C7JDODQ_U.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqetTnnfHrhXZ82n5nqJ2AxgFIXtw/m=el_main

142.250.74.138

200 OK

76181

URL GET HTTP/2

translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.Q6C7JDODQ_U.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqetTnnfHrhXZ82n5nqJ2AxgFIXtw/m=el_main
IP

142.250.74.138:443
ASN

#15169 GOOGLE

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subjectupload.video.google.com

Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A

ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

Magic

ASCII text, with very long lines (1573)

Size

76181
Hash

89af2a4f63a21bece623f32a2a129e50

b1b6e9d7ee3a1fd4256f92cdd9347173014dc34c

ebde9f239364de4d5178cf65e57cafd8a33acf780df5cb60ecf38a1e6769380b

HTTP Headers

                                        GET /_/translate_http/_/js/k=translate_http.tr.no.Q6C7JDODQ_U.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqetTnnfHrhXZ82n5nqJ2AxgFIXtw/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 76181
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 May 2023 11:20:08 GMT
expires: Tue, 14 May 2024 11:20:08 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 10 May 2023 21:13:57 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 2897
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/images/branding/product/1x/translate_24dp.png

142.250.74.35

200 OK

846

URL GET HTTP/3

www.gstatic.com/images/branding/product/1x/translate_24dp.png
IP

142.250.74.35:443
ASN

#15169 GOOGLE

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4

ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

Magic

PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data

Size

846
Hash

e9cd262114358f26b7608b56905185dc

6dbde0a96deaab2b529723ce26c62043cf9180ab

5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99

HTTP Headers

                                        GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 May 2023 07:43:02 GMT
expires: Thu, 09 May 2024 07:43:02 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 447923
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.gstatic.com/images/branding/product/2x/translate_24dp.png

142.250.74.35

200 OK

1842

URL GET HTTP/3

www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP

142.250.74.35:443
ASN

#15169 GOOGLE

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4

ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

Magic

PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data

Size

1842
Hash

c69c796362406f9e11c7f4bf5bb628da

e489ce95ab56208090868882113d7416abf46775

4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82

HTTP Headers

                                        GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 09 May 2023 05:58:08 GMT
expires: Wed, 08 May 2024 05:58:08 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 540617
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback

142.250.74.138

1392

URL

translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP

142.250.74.138:0
ASN

#15169 GOOGLE

Magic

Unicode text, UTF-8 text

Size

1392
Hash

a3eefe14b1b4698460d992bd1673a26b

a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4

87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067

HTTP Headers

                                        GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 15 May 2023 12:08:25 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=511=BOiGfyCEL0UWRUqbzC08lA_CFNUuaprzjfm4g4Kjy9r-xyFN76uPUvFxRZLHHXFBd4LBEiY7Fy7TSou8xXoTjGWhpsVvQZa4mH3dXfhXw_gCHHayqJ9F6bExtxfq9myN9rynPoWxWM38lJeABPJP9evSaNQX2f5X4wRsy_u6XoM; expires=Tue, 14-Nov-2023 12:08:25 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+699; expires=Wed, 14-May-2025 12:08:25 GMT; path=/; domain=.googleapis.com; Secure
expires: Mon, 15 May 2023 12:08:25 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0

142.250.74.138

200 OK

URL POST HTTP/3

translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP

142.250.74.138:443
ASN

#15169 GOOGLE

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subjectupload.video.google.com

Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A

ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        OPTIONS /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser
Referer: https://datest.xyz/
Origin: https://datest.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
access-control-allow-origin: https://datest.xyz
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin
content-type: text/plain; charset=UTF-8
date: Mon, 15 May 2023 12:08:35 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+109; expires=Wed, 14-May-2025 12:08:35 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 15 May 2023 12:08:35 GMT
cache-control: private

translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0

142.250.74.138

200 OK

131

URL POST HTTP/3

translate.googleapis.com/element/log?format=json&hasfast=true&authuser=0
IP

142.250.74.138:443
ASN

#15169 GOOGLE

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subjectupload.video.google.com

Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A

ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

Magic

JSON data\012- , ASCII text, with no line terminators

Size

131
Hash

ca0b7e866005f6774d284b9f438ebfd2

53644f5ee3640189bdb223473ba6a2d46606c556

502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358

HTTP Headers

                                        POST /element/log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Encoding: gzip
Content-Type: application/binary
Content-Length: 194
Origin: https://datest.xyz
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
access-control-allow-origin: https://datest.xyz
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 15 May 2023 12:08:35 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+216; expires=Wed, 14-May-2025 12:08:35 GMT; path=/; domain=.googleapis.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Mon, 15 May 2023 12:08:35 GMT

datest.xyz/4Lx/files/styles/default.css

147.182.255.121

200 OK

7491

URL GET HTTP/2

datest.xyz/4Lx/files/styles/default.css
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

ASCII text, with very long lines (8529), with no line terminators

Size

7491
Hash

56ce740d90e15ed929d2e24860cbcae2

eb243aa3d19dce5ebd2009d027ff4a03ab719de2

7c72723289f97a3b6f44bf5e45f62b47edfee1fe24267379406f88b080f85775

HTTP Headers

                                        GET /4Lx/files/styles/default.css HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: text/css
last-modified: Tue, 09 May 2023 08:41:17 GMT
vary: Accept-Encoding
etag: W/"645a072d-1d43"
content-encoding: gzip
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/script/smart.js

147.182.255.121

200 OK

2198

URL GET HTTP/2

datest.xyz/4Lx/files/script/smart.js
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

ASCII text, with very long lines (2304), with no line terminators

Size

2198
Hash

79218c8e4d6b9589da61b4daddd1d721

c8bdf2b44db9327ac24f0d02e2aa0bfc69097ab5

db4e31aaf6f2022d9cd8c052537ee237b0b69cd49ab27d6d29913bf401b1ea5a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /4Lx/files/script/smart.js HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: application/javascript
last-modified: Wed, 19 Jan 2022 14:55:08 GMT
vary: Accept-Encoding
etag: W/"61e8264c-896"
content-encoding: gzip
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/script/lang.js

147.182.255.121

200 OK

1157

URL GET HTTP/2

datest.xyz/4Lx/files/script/lang.js
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

ASCII text, with very long lines (1223), with no line terminators

Size

1157
Hash

00d68d5fcbe959205761ae2eb92bda5a

e70670eba70fd9428d8ee7d8acacea623bd72d4f

994454fb2f960994c4f0721e63734138eb06498b18f1236e39d4c66de579b054

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /4Lx/files/script/lang.js HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: application/javascript
last-modified: Wed, 19 Jan 2022 14:55:08 GMT
vary: Accept-Encoding
etag: W/"61e8264c-485"
content-encoding: gzip
X-Firefox-Spdy: h2

threatdetect.org/fonts/?font=aHR0cHM6Ly9kYXRlc3QueHl6LzRMeC83Lmh0bWw=

188.114.96.1

200 OK

URL GET HTTP/2

threatdetect.org/fonts/?font=aHR0cHM6Ly9kYXRlc3QueHl6LzRMeC83Lmh0bWw=
IP

188.114.96.1:443
ASN

#13335 CLOUDFLARENET

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subjectthreatdetect.org

Fingerprint08:72:8A:12:C7:33:28:B9:20:4E:E5:C2:3C:9A:8A:4A:04:83:60:10

ValiditySun, 30 Apr 2023 02:23:48 GMT - Sat, 29 Jul 2023 02:23:47 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /fonts/?font=aHR0cHM6Ly9kYXRlc3QueHl6LzRMeC83Lmh0bWw= HTTP/1.1
Host: threatdetect.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://datest.xyz
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Mon, 15 May 2023 12:08:24 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hJNnMoT5wsBSXJ2uzTlN8Hrvs%2FnvGFeRbKiNFH%2F8osMhmF%2Fs%2FQfXuLIOlYqVaGl0CsqHKKq%2F9Jc3zxFCxV%2BRwPRA6lFA5cIy0xX4GncQnfd52Yi6DQaYJuzddV5JbBqRDVZq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c7b44217bb8b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

datest.xyz/4Lx/7.html

147.182.255.121

200 OK

7141

URL User Request GET HTTP/2

datest.xyz/4Lx/7.html
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8579), with no line terminators

Size

7141
Hash

abdf959b4a591f4ef58703656ed27fc0

6b65743d3fb29431fe7b53f5c8139944eb06c2fc

4383b2d0d1e63bca104e9fd49ee01f21ca624e389cc0d53220f7da5a8361fe75

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /4Lx/7.html HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: text/html
last-modified: Tue, 09 May 2023 09:08:03 GMT
vary: Accept-Encoding
etag: W/"645a0d73-1be5"
content-encoding: gzip
X-Firefox-Spdy: h2

translate.google.com/translate_a/element.js?cb=googleTranslateElementInit

216.58.211.14

200 OK

79723

URL GET HTTP/2

translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP

216.58.211.14:443
ASN

#15169 GOOGLE

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33

ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

Magic

ASCII text, with very long lines (2450)

Size

79723
Hash

d12f529250355a65abe146db7767b8e6

3d53afc1b9910dcf2d8644c8d76724325301d4e1

e3079d3b840603ca047ca5a53e4aa95bd1b0b2f2ffd36efcdbd5079e27678253

HTTP Headers

                                        GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 15 May 2023 12:08:25 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+418; expires=Wed, 14-May-2025 12:08:25 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

datest.xyz/4Lx/files/script/myjs.js

147.182.255.121

200 OK

20016

URL GET HTTP/2

datest.xyz/4Lx/files/script/myjs.js
IP

147.182.255.121:443
ASN

#14061 DIGITALOCEAN-ASN

Requested by

https://datest.xyz/4Lx/7.html
Certificate

IssuerLet's Encrypt

Subjectdatest.xyz

Fingerprint7E:BB:5E:A7:56:F7:B7:66:C5:95:96:5E:68:7F:44:B5:83:23:BF:0D

ValidityThu, 27 Apr 2023 10:43:07 GMT - Wed, 26 Jul 2023 10:43:06 GMT

Magic

ASCII text, with very long lines (20016), with no line terminators

Size

20016
Hash

dfa4463b7db8e7c81e97db5103c1aeac

825993d179d68330ed98037f3db23fad846e845c

49e650e89909c4dc947caa53cf1a065aa90392493789297fefc48b5dfa94a46f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /4Lx/files/script/myjs.js HTTP/1.1
Host: datest.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://datest.xyz/4Lx/7.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
server: nginx
date: Mon, 15 May 2023 12:08:24 GMT
content-type: application/javascript
last-modified: Fri, 05 May 2023 08:37:25 GMT
vary: Accept-Encoding
etag: W/"6454c045-4e30"
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

#1 JS:Script (size: 89476)

#2 JS:Script (size: 1157)

#3 JS:Script (size: 79723)

#4 JS:Script (size: 2198)

#5 JS:Script (size: 20016)

#6 JS:Script (size: 0)

#7 JS:Script (size: 217398)

HTTP Transactions (35)

URL

IP

ASN

Magic

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

HTTP Headers

URL

IP

ASN

Magic

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

Magic