Report - 90tf.xyz/

Report Overview

Submitted URL
90tf.xyz/
IP
16.163.129.61
ASN
#16509 AMAZON-02
Submitted
2024-10-18 01:40:50
Access
public
Website Title
90tf.xyz/
Final URL
90tf.xyz/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
90tf.xyz	unknown	2024-08-19	2024-10-18T01:40:50.364451Z	2024-10-18T01:40:50.364451Z	2.9 kB	416 kB	16.163.129.61
ipinfo.io	8136	2013-04-23	2013-12-16T08:25:53Z	2024-10-16T02:41:36.475435Z	403 B	574 B	34.117.59.81

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-10-18 01:40:25	medium	Client IP	34.117.59.81	ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	90tf.xyz/static/js/jquery.min.js	83 kB	2023-09-30T23:39:11Z	2024-10-18T01:40:53.195514Z
Pretty URL 90tf.xyz/static/js/jquery.min.js IP 16.163.129.61 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-30T23:39:11Z Last Seen2024-10-18T01:40:53.195514Z Times Seen5 Hash eed362c42a3c206dc1288abf7f223ca6 8d5f10acc8bf5aab090cd676e4d824b4b959e8da 26e5b24c380e35ef89749d4d5a6d8760403d9d0b0d80f898041ddd46ba888504 Loading...

	90tf.xyz/static/js/md5.js	48 kB	2024-10-18T01:40:53.19982Z	2024-10-18T01:40:53.19982Z
Pretty URL 90tf.xyz/static/js/md5.js IP 16.163.129.61 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-10-18T01:40:53.19982Z Last Seen2024-10-18T01:40:53.19982Z Times Seen1 Hash 13391ba40291ef51b480c382c77d590e dd6ad983c463ab1296cfd555056bea840e0fd7fa d55fadb084666ad5013f0abb072f44ac0762644bb95fc306da6cc82dfd1438d4 Loading...

	90tf.xyz/static/js/tac.min.js	233 kB	2024-10-18T01:40:53.204724Z	2024-10-18T01:40:53.204724Z
Pretty URL 90tf.xyz/static/js/tac.min.js IP 16.163.129.61 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-10-18T01:40:53.204724Z Last Seen2024-10-18T01:40:53.204724Z Times Seen1 Hash 7f56338494e062051998b2eef2c369e8 dc72849b0aefd3a42e7166e655569d99c9d0a2df ec0a8e9dd9c386b5d21f4be4c42d49816d0cd44e82855d3ac842f294c78ad4d2 Loading...

	90tf.xyz/	13 kB	2024-10-18T01:40:53.209234Z	2024-10-18T01:40:53.209234Z
Pretty URL 90tf.xyz/ IP 16.163.129.61 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-10-18T01:40:53.209234Z Last Seen2024-10-18T01:40:53.209234Z Times Seen1 Hash 6ae2b997b48ec2523e3fbb9c3cb8b9b5 50bec2a8b711a5fc39d2136fc0ecdbdae457c751 a572378c714912ff9548c6c4ab11083efc4e1f945b9a1e88a83886e61da831f5 Loading...

HTTP Transactions (8)

	URL	IP	Response	Size
	90tf.xyz/	16.163.129.61	200 OK	39 kB
URL User Request GET HTTP/2 90tf.xyz/ IP 16.163.129.61:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subjectwww.90tf.app FingerprintA3:5A:F0:49:A2:10:03:BB:C1:75:63:46:0E:8D:48:D3:E2:66:E1:90 ValidityTue, 24 Sep 2024 08:00:42 GMT - Mon, 23 Dec 2024 08:00:41 GMT File type gzip compressed data, from Unix Size 39 kB (39190 bytes) Hash a0be1bf5a326a92882ea11b0ca00a43e cfee203826bfc31d6e97dcde3c6d99e59cc3a4a2 59011fe99c2f011fd8087acf689606d09107ba82761ff956984971a00837b694 HTTP Headers `GET / HTTP/1.1 Host: 90tf.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 18 Oct 2024 01:40:24 GMT content-type: text/html last-modified: Tue, 24 Sep 2024 15:53:57 GMT vary: Accept-Encoding etag: W/"66f2e095-dced" strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2`

	ipinfo.io/json	34.117.59.81	200 OK	187 B
URL GET HTTP/2 ipinfo.io/json IP 34.117.59.81:443 ASN #396982 GOOGLE-CLOUD-PLATFORM Requested by https://90tf.xyz/ Certificate IssuerLet's Encrypt Subjectipinfo.io FingerprintC4:B8:BB:D0:3F:06:AF:F8:B8:39:6B:83:95:48:8D:96:AE:01:FB:14 ValidityTue, 01 Oct 2024 14:07:07 GMT - Mon, 30 Dec 2024 14:07:06 GMT File type JSON text data Size 187 B (187 bytes) Hash adf22d9a8ca3a97a9ff78909b8702358 f5046826566a7e98d6b5e5c7b0a65677c3bde708 756edd1454b049c1370e83c864bc93dfdd82f44d8f9752b3068e5a11867a5de3 HTTP Headers `GET /json HTTP/1.1 Host: ipinfo.io User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://90tf.xyz DNT: 1 Connection: keep-alive Referer: https://90tf.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK access-control-allow-origin: * content-encoding: br content-type: application/json; charset=utf-8 date: Fri, 18 Oct 2024 01:40:25 GMT vary: Accept-Encoding x-content-type-options: nosniff content-length: 187 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2`

	90tf.xyz/favicon.ico	16.163.129.61	404 Not Found	146 B
URL GET HTTP/2 90tf.xyz/favicon.ico IP 16.163.129.61:443 ASN #16509 AMAZON-02 Requested by https://90tf.xyz/ Certificate IssuerLet's Encrypt Subjectwww.90tf.app FingerprintA3:5A:F0:49:A2:10:03:BB:C1:75:63:46:0E:8D:48:D3:E2:66:E1:90 ValidityTue, 24 Sep 2024 08:00:42 GMT - Mon, 23 Dec 2024 08:00:41 GMT File type HTML document, ASCII text, with CRLF line terminators Size 146 B (146 bytes) Hash 8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: 90tf.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://90tf.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found server: nginx date: Fri, 18 Oct 2024 01:40:25 GMT content-type: text/html content-length: 146 X-Firefox-Spdy: h2`

	90tf.xyz/tf-boot/apn/appstore/getAppInfo/false	16.163.129.61	200 OK	141 B
URL GET HTTP/2 90tf.xyz/tf-boot/apn/appstore/getAppInfo/false IP 16.163.129.61:443 ASN #16509 AMAZON-02 Requested by https://90tf.xyz/ Certificate IssuerLet's Encrypt Subjectwww.90tf.app FingerprintA3:5A:F0:49:A2:10:03:BB:C1:75:63:46:0E:8D:48:D3:E2:66:E1:90 ValidityTue, 24 Sep 2024 08:00:42 GMT - Mon, 23 Dec 2024 08:00:41 GMT File type troff or preprocessor input, Unicode text, UTF-8 text, with no line terminators Size 141 B (141 bytes) Hash a59dbca76ebccf53419ec6dc4d546b1b 20d14dba8db18270dbf981012529756b6f5b1450 e56fbc24b79098dfbac7ce02fe3adc9ae252b2f91e588af15d126ccea98ec721 HTTP Headers `GET /tf-boot/apn/appstore/getAppInfo/false HTTP/1.1 Host: 90tf.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://90tf.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 18 Oct 2024 01:40:26 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding content-encoding: gzip strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	90tf.xyz/static/css/tac.css	16.163.129.61	200 OK	10 kB
URL GET HTTP/2 90tf.xyz/static/css/tac.css IP 16.163.129.61:443 ASN #16509 AMAZON-02 Requested by https://90tf.xyz/ Certificate IssuerLet's Encrypt Subjectwww.90tf.app FingerprintA3:5A:F0:49:A2:10:03:BB:C1:75:63:46:0E:8D:48:D3:E2:66:E1:90 ValidityTue, 24 Sep 2024 08:00:42 GMT - Mon, 23 Dec 2024 08:00:41 GMT File type ASCII text, with very long lines (3657) Size 10 kB (10377 bytes) Hash d6fb85cc1302c6383068dc2a894d5582 fafc96d3788cbff79c35c901e78629790bdecc8d aaf6eb6396c4e20d9a106edbd832c8a53081e1136b252b2b98296b771358dbf4 HTTP Headers `GET /static/css/tac.css HTTP/1.1 Host: 90tf.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://90tf.xyz/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 18 Oct 2024 01:40:25 GMT content-type: text/css last-modified: Tue, 12 Dec 2023 03:52:25 GMT vary: Accept-Encoding etag: W/"6577d8f9-2889" strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2`

	90tf.xyz/static/js/jquery.min.js	16.163.129.61	200 OK	83 kB
URL GET HTTP/2 90tf.xyz/static/js/jquery.min.js IP 16.163.129.61:443 ASN #16509 AMAZON-02 Requested by https://90tf.xyz/ Certificate IssuerLet's Encrypt Subjectwww.90tf.app FingerprintA3:5A:F0:49:A2:10:03:BB:C1:75:63:46:0E:8D:48:D3:E2:66:E1:90 ValidityTue, 24 Sep 2024 08:00:42 GMT - Mon, 23 Dec 2024 08:00:41 GMT File type JavaScript source, ASCII text, with very long lines (32110) Size 83 kB (83107 bytes) Hash eed362c42a3c206dc1288abf7f223ca6 8d5f10acc8bf5aab090cd676e4d824b4b959e8da 26e5b24c380e35ef89749d4d5a6d8760403d9d0b0d80f898041ddd46ba888504 HTTP Headers `GET /static/js/jquery.min.js HTTP/1.1 Host: 90tf.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://90tf.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 18 Oct 2024 01:40:25 GMT content-type: application/javascript last-modified: Fri, 19 Jan 2024 07:59:20 GMT vary: Accept-Encoding etag: W/"65aa2bd8-144a3" strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2`

	90tf.xyz/static/js/md5.js	16.163.129.61	200 OK	48 kB
URL GET HTTP/2 90tf.xyz/static/js/md5.js IP 16.163.129.61:443 ASN #16509 AMAZON-02 Requested by https://90tf.xyz/ Certificate IssuerLet's Encrypt Subjectwww.90tf.app FingerprintA3:5A:F0:49:A2:10:03:BB:C1:75:63:46:0E:8D:48:D3:E2:66:E1:90 ValidityTue, 24 Sep 2024 08:00:42 GMT - Mon, 23 Dec 2024 08:00:41 GMT File type JavaScript source, ASCII text, with very long lines (48317), with no line terminators Size 48 kB (48317 bytes) Hash 13391ba40291ef51b480c382c77d590e dd6ad983c463ab1296cfd555056bea840e0fd7fa d55fadb084666ad5013f0abb072f44ac0762644bb95fc306da6cc82dfd1438d4 HTTP Headers `GET /static/js/md5.js HTTP/1.1 Host: 90tf.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://90tf.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 18 Oct 2024 01:40:25 GMT content-type: application/javascript last-modified: Fri, 21 Jun 2024 09:15:21 GMT vary: Accept-Encoding etag: W/"667544a9-bcbd" strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2`

	90tf.xyz/static/js/tac.min.js	16.163.129.61	200 OK	233 kB
URL GET HTTP/2 90tf.xyz/static/js/tac.min.js IP 16.163.129.61:443 ASN #16509 AMAZON-02 Requested by https://90tf.xyz/ Certificate IssuerLet's Encrypt Subjectwww.90tf.app FingerprintA3:5A:F0:49:A2:10:03:BB:C1:75:63:46:0E:8D:48:D3:E2:66:E1:90 ValidityTue, 24 Sep 2024 08:00:42 GMT - Mon, 23 Dec 2024 08:00:41 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 233 kB (233029 bytes) Hash 7f56338494e062051998b2eef2c369e8 dc72849b0aefd3a42e7166e655569d99c9d0a2df ec0a8e9dd9c386b5d21f4be4c42d49816d0cd44e82855d3ac842f294c78ad4d2 HTTP Headers `GET /static/js/tac.min.js HTTP/1.1 Host: 90tf.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://90tf.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 18 Oct 2024 01:40:25 GMT content-type: application/javascript last-modified: Tue, 12 Dec 2023 03:52:25 GMT vary: Accept-Encoding etag: W/"6577d8f9-38e45" strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash