Report - tjrdt.info/

Report Overview

Submitted URL
tjrdt.info/
IP
107.179.33.11
ASN
#46573 LAYER-HOST
Submitted
2023-05-27 21:02:40
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
tjrdt.info	unknown	2023-05-22	2023-05-24	2023-05-27	2.0 kB	185 kB	107.179.33.11
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-27	666 B	1.4 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2023-05-27	433 B	2.9 kB	142.250.74.74
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2023-05-27	447 B	118 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-27	medium	tjrdt.info/
2023-05-27	medium	tjrdt.info/opt/out
2023-05-27	medium	tjrdt.info/build/opt_out.js

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	tjrdt.info/opt/out	0 B	2023-03-07	2024-04-19
Pretty URL tjrdt.info/opt/out IP 107.179.33.11 ASN #46573 LAYER-HOST Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-19 02:36:58 Times Seen36951656 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	tjrdt.info/build/opt_out.js	393 kB	2023-03-07	2024-04-18
Pretty URL tjrdt.info/build/opt_out.js IP 107.179.33.21 ASN #46573 LAYER-HOST Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:27 Last Seen2024-04-18 09:57:30 Times Seen1166 Hash 3db398d82bcf5cfa1835f7f4c5331c3f ba1f8c6aad32dd56e020ec69fadc83eba61c0ae1 623388f11311de0fd5347d31bd906b6891e23a49d096202a44ffbe4379b94eee Loading...

HTTP Transactions (9)

URL IP Response Size

tjrdt.info/

107.179.33.11

302 Found

346 B

URL User Request GET HTTP/1.1
tjrdt.info/
IP
107.179.33.11:80
ASN
#46573 LAYER-HOST

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
346 B (346 bytes)
Hash
e5666c378e6b7ca194fe983c0389a3c6
81698d0952b1f051b1918083a3e037958d5f0720
fa6c96c5f2dc9eaa3e0a4575e054db583a7599139043cae45152c6b77b3bbf68

Detections

Analyzer	Verdict	Alert
fortinet	Spam

HTTP Headers

GET / HTTP/1.1
Host: tjrdt.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.1
Date: Sat, 27 May 2023 21:02:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Location: http://tjrdt.info/opt/out

tjrdt.info/opt/out

107.179.33.11

200 OK

3.6 kB

URL User Request GET HTTP/1.1
tjrdt.info/opt/out
IP
107.179.33.11:80
ASN
#46573 LAYER-HOST

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4014)
Size
3.6 kB (3649 bytes)
Hash
4ee14a91a45951d2c910b866c44cf098
fe2a2769c5264fec959a28a159b1920a32f41545
5b832b7597af643573f2914a6f8c444a8c73619b1cbed156e065d236836bbcc4

Detections

Analyzer	Verdict	Alert
fortinet	Spam

HTTP Headers

GET /opt/out HTTP/1.1
Host: tjrdt.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 27 May 2023 21:02:25 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 3649
Connection: keep-alive
Cache-Control: max-age=0, must-revalidate, private
pragma: no-cache
Expires: Sat, 27 May 2023 21:02:25 GMT
Set-Cookie: PHPSESSID=c7c7ki9h3qg5ejsscbtc9ajcoj; path=/; HttpOnly
Vary: Accept-Encoding
Content-Encoding: gzip

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 May 2023 21:02:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5eb2d0db01496946784367a1c6a22c28
2d0a58aa819ca13f208af62e0c21996bd123de9f
8c16e79ed32ccf5baf793a07ad6128fa85ea0f0877da7da7145ae6a33e811a1a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 27 May 2023 21:02:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

tjrdt.info/build/css/opt_out.css

107.179.33.11

200 OK

3.6 kB

URL GET HTTP/1.1
tjrdt.info/build/css/opt_out.css
IP
107.179.33.11:80
ASN
#46573 LAYER-HOST

Requested by
http://tjrdt.info/opt/out

File type
ASCII text, with very long lines (22576), with no line terminators
Size
3.6 kB (3603 bytes)
Hash
e774cb21a5abc60cffdc97ba64b6240b
e24a8cb0be93d4740928c7d07570ebf4a127c036
bcf8a483a3050fb28a0a3fd4a78a2b6f905f3b0f0165b199f1ef6caa52ef9207

HTTP Headers

GET /build/css/opt_out.css HTTP/1.1
Host: tjrdt.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://tjrdt.info/opt/out
Cookie: PHPSESSID=c7c7ki9h3qg5ejsscbtc9ajcoj
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 27 May 2023 21:02:25 GMT
Content-Type: text/css
Content-Length: 3603
Connection: keep-alive
Last-Modified: Thu, 25 May 2023 08:41:37 GMT
ETag: "5830-5fc8096ac01b9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

tjrdt.info/build/opt_out.js

107.179.33.21

200 OK

105 kB

URL GET HTTP/1.1
tjrdt.info/build/opt_out.js
IP
107.179.33.21:80
ASN
#46573 LAYER-HOST

Requested by
http://tjrdt.info/opt/out

File type
Unicode text, UTF-8 text, with very long lines (59378)
Size
105 kB (104951 bytes)
Hash
3db398d82bcf5cfa1835f7f4c5331c3f
ba1f8c6aad32dd56e020ec69fadc83eba61c0ae1
623388f11311de0fd5347d31bd906b6891e23a49d096202a44ffbe4379b94eee

Detections

Analyzer	Verdict	Alert
fortinet	Spam

HTTP Headers

GET /build/opt_out.js HTTP/1.1
Host: tjrdt.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://tjrdt.info/opt/out
Cookie: PHPSESSID=c7c7ki9h3qg5ejsscbtc9ajcoj
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 27 May 2023 21:02:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 25 May 2023 08:41:37 GMT
ETag: "5fe51-5fc8096ac01b9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

tjrdt.info/build/images/flags.007b2705.png

107.179.33.21

200 OK

71 kB

URL GET HTTP/1.1
tjrdt.info/build/images/flags.007b2705.png
IP
107.179.33.21:80
ASN
#46573 LAYER-HOST

Requested by
http://tjrdt.info/opt/out

File type
PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced\012- data
Size
71 kB (70857 bytes)
Hash
416250f60d785a2e02f17e054d2e4e44
21572c9751e5a3dc20395befa0fcb349c32c4811
0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55

HTTP Headers

GET /build/images/flags.007b2705.png HTTP/1.1
Host: tjrdt.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://tjrdt.info/build/css/opt_out.css
Cookie: PHPSESSID=c7c7ki9h3qg5ejsscbtc9ajcoj
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Sat, 27 May 2023 21:02:27 GMT
Content-Type: image/png
Content-Length: 70857
Connection: keep-alive
Last-Modified: Thu, 25 May 2023 08:41:37 GMT
ETag: "114c9-5fc8096ac01b9"
Accept-Ranges: bytes

fonts.googleapis.com/css?family=Source+Sans+Pro

142.250.74.74

200 OK

2.3 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Source+Sans+Pro
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
http://tjrdt.info/opt/out
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
ASCII text, with very long lines (2354), with no line terminators
Size
2.3 kB (2298 bytes)
Hash
9c692cb7ff41bb959418848bdd9fc869
1347426c66c1b16e79ac2e1c16fbf39336b49fa8
26143513776652735040c8215ded0e7185a6d5ad1264807fc9729c2a8a037580

HTTP Headers

GET /css?family=Source+Sans+Pro HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://tjrdt.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 May 2023 21:02:25 GMT
date: Sat, 27 May 2023 21:02:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css

104.18.11.207

200 OK

117 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/3.3.4/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
http://tjrdt.info/opt/out
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65371)
Size
117 kB (117305 bytes)
Hash
eedf9ee80c2faa4e1b9ab9017cdfcb88
ed29315e0ffb3f14382431f2724235bf67f44eb3
f04b517ba5d6a0510485689a3e42dac000f51640fd71b986804cba178eae42a5

HTTP Headers

GET /bootstrap/3.3.4/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://tjrdt.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 May 2023 21:02:25 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
cdn-edgestorageid: 617, 617
last-modified: Mon, 25 Jan 2021 22:03:58 GMT
cdn-cachedat: 2021-06-08 14:01:04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 33fc7f6c64f18e27ebb95ab9e21d92ab
cdn-cache: HIT
cf-cache-status: HIT
age: 30662865
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7ce132e09f6eb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1