Report - cszf.short.gy/Rewardz.point/

Report Overview

Visited public
2024-09-02 17:14:08
Tags
URL
cszf.short.gy/Rewardz.point/
Finishing URL
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
IP / ASN
207.174.61.1
#16509 AMAZON-02
Title
State Bank of India | PAN Update

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2024-09-02 01:05:09	2.4 kB	196 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-09-01 18:45:09	523 B	30 kB	142.250.74.106
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-01 18:13:21	981 B	2.7 kB	23.36.77.32
cszf.short.gy	unknown	2021-01-21	2023-12-31 09:24:34	2024-03-26 18:17:17	482 B	183 B	207.174.61.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev	unknown	unknown	No data	No data	5.8 kB	192 kB	35.247.106.28
o.pki.goog	unknown	2016-06-13	2024-04-24 13:44:57	2024-09-01 18:12:27	650 B	1.4 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-09-01	medium	cszf.short.gy/Rewardz.point/	State Bank of India

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	unknown	Function	54 B	2023-05-17	2025-04-30
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-17 03:14 Last Seen2025-04-30 18:14 Times Seen87 Hash 4619f5264ce3f175df8a833aa0adc5b4 d0d462c955da620d07d070a8644b5636efade20d 1ca1059cb88fb8dd56dab9ec57a136e58e7fb1f70710c0aca5326711ef6f9a17 Loading...

	599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/	ScriptElement	615 B	2023-12-14	2025-01-09
Pretty URL 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/ IP 35.247.106.28 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-14 08:52 Last Seen2025-01-09 12:44 Times Seen51 Hash 60072f0508a11314c2ca4ab8688d0409 82954e4b4c0e920081ffb559eb146257ae00bad3 a78a3e65b299a2711c03614cb73a21aa93f17dff5dad4fc29b94d35f6855f3ae Loading...

	unknown	EventHandler	49 B	2023-07-02	2025-04-30
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-07-02 22:20 Last Seen2025-04-30 18:14 Times Seen61 Hash 564476b1ac459e026390660c16c04225 f770c82f52656875bc88cdfc8d78a1058542ffca 234faefbf17791076b5a34832255ad02315975d1137a8aaeef16e011d4eabdd7 Loading...

	599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/	ScriptElement	0 B	0001-01-01	2025-06-04
Pretty URL 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/ IP 35.247.106.28 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-04 19:59 Times Seen4848058 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (22)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
404e3e4520c09fcce1358b1a21f6b171
040aa03460f3d7ec6f75cae0bf5a462a4bb9798d
f6fc34acb6b2d60bb37dd5caf92b0988cdd52927d80d1f5e7bc23b7db9e8209a

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F6FC34ACB6B2D60BB37DD5CAF92B0988CDD52927D80D1F5E7BC23B7DB9E8209A"
Last-Modified: Sat, 31 Aug 2024 00:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2511
Expires: Mon, 02 Sep 2024 17:55:33 GMT
Date: Mon, 02 Sep 2024 17:13:42 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
231aa156f55dd8497dca6a2066312be3
741432c8275492eb38bba5d0841685dc4f864fee
f348affacf8e814c579ff56d592287275dcf79e2f55f1d041921833d730d2349

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F348AFFACF8E814C579FF56D592287275DCF79E2F55F1D041921833D730D2349"
Last-Modified: Sat, 31 Aug 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4280
Expires: Mon, 02 Sep 2024 18:25:03 GMT
Date: Mon, 02 Sep 2024 17:13:43 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
9d2c063731a46a7e1548540195080de0
dd1924ebf7697509a10f3f07604f28f96b4fc498
0d414ed4850119c53fae9ddd19ee1dd95783fd08f7389c3e8ec95215023e298e

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0D414ED4850119C53FAE9DDD19EE1DD95783FD08F7389C3E8EC95215023E298E"
Last-Modified: Sat, 31 Aug 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3481
Expires: Mon, 02 Sep 2024 18:11:44 GMT
Date: Mon, 02 Sep 2024 17:13:43 GMT
Connection: keep-alive

cszf.short.gy/Rewardz.point/

207.174.61.1

302 Found

0 B

URL User Request GET HTTP/2
cszf.short.gy/Rewardz.point/
IP
207.174.61.1:443
ASN
#16509 AMAZON-02

Certificate
IssuerZeroSSL
Subject*.short.gy
Fingerprint91:E0:56:1F:1C:6D:9F:93:E4:26:6A:93:28:49:A4:8F:C7:20:3D:58
ValidityMon, 08 Jul 2024 00:00:00 GMT - Sun, 06 Oct 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	State Bank of India

HTTP Headers

GET /Rewardz.point/ HTTP/1.1
Host: cszf.short.gy
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
content-length: 0
date: Mon, 02 Sep 2024 17:13:43 GMT
X-Firefox-Spdy: h2

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/

35.247.106.28

200 OK

8.2 kB

URL User Request GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
HTML document, ASCII text, with very long lines (674)
Size
8.2 kB (8241 bytes)
Hash
605287bf949c0a1b9fc5a1f3ec264d4b
b23da9748f418dcb205a48da45fc7091e3a2f2cd
12b142ce683d9037310cae5479426df6eeaa26bb7231ddcd4f63e1195d39652e

HTTP Headers

GET / HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 8241
Content-Type: text/html; charset=UTF-8
Date: Mon, 02 Sep 2024 17:13:43 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
13a0b3087b2cdad637a1530765944caf
1fe7d53d5307b28b9ba805e7098345075d5172c6
2bca0d22640349c90aed454e1baead9cbc2e597f6279cd29c5d88571b77183e4

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Sep 2024 17:13:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Style_Main.css

35.247.106.28

200 OK

3.4 kB

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Style_Main.css
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
ASCII text
Size
3.4 kB (3396 bytes)
Hash
276b0c6ecbeeb87dec230312bafcc3d2
89767be8fbc8cffa79ac1fe307040975980548db
9154ef68d6703be71a2448c5ed08151627cfa502c2f976a450b727231ea2e37d

HTTP Headers

GET /Style_Main.css HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 3396
Content-Type: text/css; charset=UTF-8
Date: Mon, 02 Sep 2024 17:13:44 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
13a0b3087b2cdad637a1530765944caf
1fe7d53d5307b28b9ba805e7098345075d5172c6
2bca0d22640349c90aed454e1baead9cbc2e597f6279cd29c5d88571b77183e4

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Sep 2024 17:13:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint83:B4:3A:CF:52:DA:10:B6:EA:48:49:6C:BD:57:5C:44:4E:10:A8:97
ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 31 Aug 2024 03:05:37 GMT
expires: Sun, 31 Aug 2025 03:05:37 GMT
cache-control: public, max-age=31536000
age: 223687
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint83:B4:3A:CF:52:DA:10:B6:EA:48:49:6C:BD:57:5C:44:4E:10:A8:97
ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 31 Aug 2024 03:05:37 GMT
expires: Sun, 31 Aug 2025 03:05:37 GMT
cache-control: public, max-age=31536000
age: 223687
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint83:B4:3A:CF:52:DA:10:B6:EA:48:49:6C:BD:57:5C:44:4E:10:A8:97
ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 31 Aug 2024 03:05:37 GMT
expires: Sun, 31 Aug 2025 03:05:37 GMT
cache-control: public, max-age=31536000
age: 223687
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint83:B4:3A:CF:52:DA:10:B6:EA:48:49:6C:BD:57:5C:44:4E:10:A8:97
ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 31 Aug 2024 03:05:37 GMT
expires: Sun, 31 Aug 2025 03:05:37 GMT
cache-control: public, max-age=31536000
age: 223687
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/ipl.svg

35.247.106.28

404 Not Found

540 B

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/ipl.svg
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
HTML document, ASCII text
Size
540 B (540 bytes)
Hash
ef1e4b4da9ff4977e9abef134c79f9b4
7171ec75138cd367f0a76f7c24c4cd1d7b535339
b476c76c5c56b2e50fd83f2a3b3b9c068b45af275cf071975336ba269a31f207

HTTP Headers

GET /ipl.svg HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Style_Main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Length: 540
Content-Type: text/html; charset=UTF-8
Date: Mon, 02 Sep 2024 17:13:44 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Menu.png

35.247.106.28

200 OK

6.1 kB

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Menu.png
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
PNG image data, 768 x 768, 8-bit/color RGBA, non-interlaced
Size
6.1 kB (6095 bytes)
Hash
205e4d0fb8f17b9eb3ffc70bd775c355
72c3da009f16f2cf2359672c285ecfa7e932359b
c70622ae897db583c1854311b48a99ed7666f4506870bdf736bb053dd013d846

HTTP Headers

GET /Menu.png HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 6095
Content-Type: image/png
Date: Mon, 02 Sep 2024 17:13:44 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/YONO_Logo.png

35.247.106.28

200 OK

6.6 kB

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/YONO_Logo.png
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
PNG image data, 509 x 99, 8-bit colormap, non-interlaced
Size
6.6 kB (6619 bytes)
Hash
79fc8803dd897e1b2928a5c4e23a0354
203754ded541848cfdf979a1b9770dc22faaea15
8c58ba744e72432b14a82846756d3de5bedca9e88403eea10e1fa38fdc4d44fc

HTTP Headers

GET /YONO_Logo.png HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 6619
Content-Type: image/png
Date: Mon, 02 Sep 2024 17:13:44 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/SecurityA.jpg

35.247.106.28

200 OK

72 kB

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/SecurityA.jpg
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=upper-left, datetime=2023:12:02 07:20:44, width=0], baseline, precision 8, 1080x769, components 3
Size
72 kB (72538 bytes)
Hash
99f3b6cec44a748ad8608b0f4183f5fe
743a5e9ba5f8f72cc09b2436ef687f9ee14f4dd1
233b1f73b381f6fd0cd061a45ff5b8f454c7039b0e32a8c4bcc72614caae5a18

HTTP Headers

GET /SecurityA.jpg HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 72538
Content-Type: image/jpeg
Date: Mon, 02 Sep 2024 17:13:44 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Header.png

35.247.106.28

200 OK

29 kB

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Header.png
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 720x86, components 3
Size
29 kB (28856 bytes)
Hash
2b4081c852bc041b299e5a8e8f42f0ca
57f90101cee0b74f65d35fc654cba276bec3628f
83c892de120304d45f34d5338687edb7166c5721e6aeb852583e7bb8bbb40c88

HTTP Headers

GET /Header.png HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 28856
Content-Type: image/png
Date: Mon, 02 Sep 2024 17:13:44 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Captcha.jpg

35.247.106.28

200 OK

30 kB

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Captcha.jpg
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=upper-left, datetime=2023:11:26 16:23:25, width=0], baseline, precision 8, 650x144, components 3
Size
30 kB (30123 bytes)
Hash
40b6aa3e03e759606bfb6ac2b17ea2b8
8001566f610412b2cbbc030f361845240f6b14f3
b2dabedca78701a111daf52b2195b5c8819479d1e6f20480c48d67381741802d

HTTP Headers

GET /Captcha.jpg HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 30123
Content-Type: image/jpeg
Date: Mon, 02 Sep 2024 17:13:44 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Footer.png

35.247.106.28

200 OK

28 kB

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/Footer.png
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, orientation=upper-left, datetime=2022:02:17 17:58:23, GPS-Data, width=0], baseline, precision 8, 1080x189, components 3
Size
28 kB (28365 bytes)
Hash
c010adba6b5cf38e5209371b872a1409
57472ed8326951113187e014a9a03eb682520ba6
127724b9264e03352b4321b468361f3b0ed3cfe06da96f7c189c4feaecb4f325

HTTP Headers

GET /Footer.png HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 28365
Content-Type: image/png
Date: Mon, 02 Sep 2024 17:13:44 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/favicon-16x16.png

35.247.106.28

200 OK

562 B

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/favicon-16x16.png
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
562 B (562 bytes)
Hash
93c6cae9b3f22bf1ad4e2ab1dd56ddd8
3c81be4c42d1f5a4e2fc3a65e279e307b88d0c2d
3103656f78c86814b058ded9230fd40e94b717d366dc0098a3932daf589ed703

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 562
Content-Type: image/png
Date: Mon, 02 Sep 2024 17:13:45 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/apple-touch-icon.png

35.247.106.28

200 OK

2.2 kB

URL GET HTTP/1.1
599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/apple-touch-icon.png
IP
35.247.106.28:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerLet's Encrypt
Subject*.kirk.replit.dev
Fingerprint71:10:14:09:1B:8F:DF:DD:E6:E9:33:66:FE:31:E2:23:EF:8C:C4:A6
ValidityFri, 26 Jul 2024 15:32:14 GMT - Thu, 24 Oct 2024 15:32:13 GMT

File type
PNG image data, 180 x 180, 8-bit colormap, non-interlaced
Size
2.2 kB (2240 bytes)
Hash
7a2ba1b2a69e4f0ab89fa476137f6e0b
7bf210257fcaa73d3511fb6d0d7006d7705b9d49
95d50be0bd98d97c86460af7601b99902326b159106a1c5ee2822cf8f3fed8f1

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 2240
Content-Type: image/png
Date: Mon, 02 Sep 2024 17:13:45 GMT
Host: 599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev
Replit-Cluster: kirk
X-Robots-Tag: none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex, none, noindex, noarchive, nofollow, nositelinkssearchbox, noimageindex

fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700&display=swap

142.250.74.106

200 OK

29 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint67:2C:47:03:FC:2F:6C:04:CD:B8:61:4D:97:F1:C4:EA:71:E9:9E:11
ValidityMon, 05 Aug 2024 07:18:20 GMT - Mon, 28 Oct 2024 07:18:19 GMT

File type
ASCII text, with very long lines (1572)
Size
29 kB (29085 bytes)
Hash
3b3a4c3f168d62a6ed57d0128ed376ed
3f48ac47817c6c52bd975297be3c03ffe38513a8
90787ca0e77942034765d1f69eff786ed8fbb616ed49ba6fbc8e9f56207c579e

HTTP Headers

GET /css2?family=Open+Sans:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://599167e1-ded1-435e-9de7-509a21bbf3b5-00-mrabvlv96gld.kirk.replit.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 02 Sep 2024 17:13:44 GMT
date: Mon, 02 Sep 2024 17:13:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (22)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash