Report - 117.223.139.115:8080/fingerprint/auth

Report Overview

Submitted URL
117.223.139.115:8080/fingerprint/auth
IP
117.223.139.115
ASN
#9829 National Internet Backbone
Submitted
2024-05-07 12:38:25
Access
public
Website Title
Fingerprint- Login
Final URL
117.223.139.115:8080/fingerprint/auth
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
18

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
117.223.139.115:8080	unknown	unknown	No data	No data	3.9 kB	567 kB	117.223.139.115
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-07	522 B	40 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	495 B	24 kB	142.250.74.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	117.223.139.115	Sinkholed
2024-05-07	medium	117.223.139.115	Sinkholed
2024-05-07	medium	117.223.139.115	Sinkholed
2024-05-07	medium	117.223.139.115	Sinkholed
2024-05-07	medium	117.223.139.115	Sinkholed
2024-05-07	medium	117.223.139.115	Sinkholed
2024-05-07	medium	117.223.139.115	Sinkholed
2024-05-07	medium	117.223.139.115	Sinkholed
2024-05-07	medium	117.223.139.115	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	117.223.139.115:8080/fingerprint/vendor/jquery/jquery.min.js	88 kB	2023-03-07	2024-05-28
Pretty URL 117.223.139.115:8080/fingerprint/vendor/jquery/jquery.min.js IP 117.223.139.115 ASN #9829 National Internet Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-28 19:27:04 Times Seen100905 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	117.223.139.115:8080/fingerprint/vendor/bootstrap/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-05-28
Pretty URL 117.223.139.115:8080/fingerprint/vendor/bootstrap/js/bootstrap.bundle.min.js IP 117.223.139.115 ASN #9829 National Internet Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-05-28 14:40:59 Times Seen15840 Hash a454220fc07088bf1fdd19313b6bfd50 265a733cb7fbc481fd2510a659a85ad55c93c895 7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c Loading...

	117.223.139.115:8080/fingerprint/vendor/jquery-easing/jquery.easing.min.js	2.5 kB	2023-03-07	2024-05-28
Pretty URL 117.223.139.115:8080/fingerprint/vendor/jquery-easing/jquery.easing.min.js IP 117.223.139.115 ASN #9829 National Internet Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-28 18:37:42 Times Seen4583 Hash e2d41e5c8fed838d9014fea53d45ce75 bde98133f735398b27339c423a817e755329f7d1 1f7723b6b9bfced0deba108df48e3287888dd986f1ff2d5133bacc9807ac0349 Loading...

	117.223.139.115:8080/fingerprint/js/sb-admin-2.min.js	1.1 kB	2023-03-07	2024-05-25
Pretty URL 117.223.139.115:8080/fingerprint/js/sb-admin-2.min.js IP 117.223.139.115 ASN #9829 National Internet Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:42:24 Last Seen2024-05-25 14:44:14 Times Seen81 Hash 35981960a6594dbe56f6c8731a1b94b4 bf9a234b7c841ff4855fce0c0b3887ce74901f51 b427d8f35f62c5248275f275507fcff1f57dfcf743d9a95d12083a4ded0768e5 Loading...

HTTP Transactions (11)

URL IP Response Size

117.223.139.115:8080/fingerprint/auth

117.223.139.115

200 OK

3.4 kB

URL User Request GET HTTP/1.1
117.223.139.115:8080/fingerprint/auth
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

File type
HTML document, ASCII text
Size
3.4 kB (3396 bytes)
Hash
f1fc0c608efabcca3e50c1c442b88bc8
889d5d7ef8e44f79dc3050fb7a09daac40f6bdfa
3e99fc51c9a7f266974b97a5e79701dd8f381aa6ec07fc768504afb3dba9dcb3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fingerprint/auth HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:09 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Set-Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca; path=/; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 3396
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

117.223.139.115:8080/fingerprint/js/sb-admin-2.min.js

117.223.139.115

200 OK

1.1 kB

URL GET HTTP/1.1
117.223.139.115:8080/fingerprint/js/sb-admin-2.min.js
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

Requested by
http://117.223.139.115:8080/fingerprint/auth

File type
JavaScript source, ASCII text, with very long lines (854)
Size
1.1 kB (1106 bytes)
Hash
35981960a6594dbe56f6c8731a1b94b4
bf9a234b7c841ff4855fce0c0b3887ce74901f51
b427d8f35f62c5248275f275507fcff1f57dfcf743d9a95d12083a4ded0768e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fingerprint/js/sb-admin-2.min.js HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/fingerprint/auth
Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:10 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Last-Modified: Thu, 10 Mar 2022 07:32:04 GMT
ETag: "452-5d9d835e64500"
Accept-Ranges: bytes
Content-Length: 1106
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

117.223.139.115:8080/fingerprint/vendor/jquery-easing/jquery.easing.min.js

117.223.139.115

200 OK

2.5 kB

URL GET HTTP/1.1
117.223.139.115:8080/fingerprint/vendor/jquery-easing/jquery.easing.min.js
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

Requested by
http://117.223.139.115:8080/fingerprint/auth

File type
JavaScript source, ASCII text, with very long lines (2532), with no line terminators
Size
2.5 kB (2532 bytes)
Hash
e2d41e5c8fed838d9014fea53d45ce75
bde98133f735398b27339c423a817e755329f7d1
1f7723b6b9bfced0deba108df48e3287888dd986f1ff2d5133bacc9807ac0349

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fingerprint/vendor/jquery-easing/jquery.easing.min.js HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/fingerprint/auth
Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:10 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Last-Modified: Thu, 10 Mar 2022 07:46:46 GMT
ETag: "9e4-5d9d86a788580"
Accept-Ranges: bytes
Content-Length: 2532
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

117.223.139.115:8080/fingerprint/vendor/fontawesome-free/css/all.min.css

117.223.139.115

200 OK

56 kB

URL GET HTTP/1.1
117.223.139.115:8080/fingerprint/vendor/fontawesome-free/css/all.min.css
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

Requested by
http://117.223.139.115:8080/fingerprint/auth

File type
ASCII text, with very long lines (56331)
Size
56 kB (56517 bytes)
Hash
164a58dcca37a5b00c22e06ee8e2fc68
72fee61a5a92cdc35b77313f3637a117310119f5
ce67cd6665e835604c7a650ea355d41857dcd2284618b61d82d252dca0abfe5d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fingerprint/vendor/fontawesome-free/css/all.min.css HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/fingerprint/auth
Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:10 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Last-Modified: Thu, 10 Mar 2022 07:41:52 GMT
ETag: "dcc5-5d9d858f27000"
Accept-Ranges: bytes
Content-Length: 56517
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

117.223.139.115:8080/fingerprint/vendor/bootstrap/js/bootstrap.bundle.min.js

117.223.139.115

200 OK

79 kB

URL GET HTTP/1.1
117.223.139.115:8080/fingerprint/vendor/bootstrap/js/bootstrap.bundle.min.js
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

Requested by
http://117.223.139.115:8080/fingerprint/auth

File type
JavaScript source, ASCII text, with very long lines (65297)
Size
79 kB (78635 bytes)
Hash
a454220fc07088bf1fdd19313b6bfd50
265a733cb7fbc481fd2510a659a85ad55c93c895
7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fingerprint/vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/fingerprint/auth
Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:10 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Last-Modified: Thu, 10 Mar 2022 07:41:38 GMT
ETag: "1332b-5d9d8581cd080"
Accept-Ranges: bytes
Content-Length: 78635
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

117.223.139.115:8080/fingerprint/vendor/jquery/jquery.min.js

117.223.139.115

200 OK

88 kB

URL GET HTTP/1.1
117.223.139.115:8080/fingerprint/vendor/jquery/jquery.min.js
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

Requested by
http://117.223.139.115:8080/fingerprint/auth

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fingerprint/vendor/jquery/jquery.min.js HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/fingerprint/auth
Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:10 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Last-Modified: Thu, 10 Mar 2022 07:46:46 GMT
ETag: "15851-5d9d86a788580"
Accept-Ranges: bytes
Content-Length: 88145
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

117.223.139.115:8080/fingerprint/css/sb-admin-2.min.css

117.223.139.115

200 OK

226 kB

URL GET HTTP/1.1
117.223.139.115:8080/fingerprint/css/sb-admin-2.min.css
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

Requested by
http://117.223.139.115:8080/fingerprint/auth

File type
ASCII text, with very long lines (748), with CRLF line terminators
Size
226 kB (225726 bytes)
Hash
39f5e23f968aa092442d5b2dd33a9495
31ed8c45b1ed2a720e0c90190cea60faf0017ec4
cae6fc9b22259033e72461deb2cf6670836a9be807a6ba6f2147933998d9ba52

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fingerprint/css/sb-admin-2.min.css HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/fingerprint/auth
Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:10 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Last-Modified: Fri, 03 Feb 2023 09:57:19 GMT
ETag: "371be-5f3c8b506d9fa"
Accept-Ranges: bytes
Content-Length: 225726
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2

216.58.207.227

200 OK

39 kB

URL GET HTTP/2
fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
http://117.223.139.115:8080/fingerprint/auth
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 39124, version 1.0
Size
39 kB (39124 bytes)
Hash
86b73ab5f530be7984b704414f2a711d
8e297794ed7b6f5ea476d14b5270df12e8f3e42a
1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f

HTTP Headers

GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://117.223.139.115:8080
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:54:18 GMT
expires: Fri, 02 May 2025 02:54:18 GMT
cache-control: public, max-age=31536000
age: 467023
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

117.223.139.115:8080/fingerprint/img/fp_1.jpg

117.223.139.115

200 OK

77 kB

URL GET HTTP/1.1
117.223.139.115:8080/fingerprint/img/fp_1.jpg
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

Requested by
http://117.223.139.115:8080/fingerprint/auth

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x340, components 3
Size
77 kB (76774 bytes)
Hash
5ea46870e36605cb63499e984b188751
96ee0ae91b2c82098f256409c0c9edfbb4708c12
fca15b734c0a1cb45bf34afe4e6c7f1329d4416a97b3995cb3ae9fae324fefc8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fingerprint/img/fp_1.jpg HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/fingerprint/css/sb-admin-2.min.css
Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:11 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Last-Modified: Thu, 10 Mar 2022 07:32:04 GMT
ETag: "12be6-5d9d835e64500"
Accept-Ranges: bytes
Content-Length: 76774
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

117.223.139.115:8080/favicon.ico

117.223.139.115

200 OK

31 kB

URL GET HTTP/1.1
117.223.139.115:8080/favicon.ico
IP
117.223.139.115:8080
ASN
#9829 National Internet Backbone

Requested by
http://117.223.139.115:8080/fingerprint/auth

File type
MS Windows icon resource - 3 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel
Size
31 kB (30894 bytes)
Hash
6eb4a43cb64c97f76562af703893c8fd
c50c4273b9d2433c6069454f971ed6653e07c126
1d7c95c5eea00a8083a95810f902682f9e26e7fbb7876b022a403642d776d0c9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 117.223.139.115:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/fingerprint/auth
Cookie: ci_session=hsnv1gp039np967dloa12uq13n2cm8ca
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 07 May 2024 12:38:12 GMT
Server: Apache/2.4.37 (Win32) OpenSSL/1.1.1a
Last-Modified: Thu, 16 Jul 2015 15:32:32 GMT
ETag: "78ae-51affc7a4c400"
Accept-Ranges: bytes
Content-Length: 30894
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/x-icon

fonts.googleapis.com/css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i

142.250.74.170

200 OK

23 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
http://117.223.139.115:8080/fingerprint/auth
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text
Size
23 kB (23261 bytes)
Hash
95b389d10c20efa5a21b2b1cefa457fa
9a67e38232703ee2fbedcc629204f7843f6826a0
15e43a1366b7c320c12ace3497892fd0eff14b08d3db0d833874c7a65712fa18

HTTP Headers

GET /css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://117.223.139.115:8080/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 12:38:00 GMT
date: Tue, 07 May 2024 12:38:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections