Report - 83.168.105.94/

Report Overview

Submitted URL
83.168.105.94/
IP
83.168.105.94
ASN
#202520 SkyPass Solutions Sp. z.o.o.
Submitted
2024-05-04 03:18:14
Access
public
Website Title
SpontanRP - Serwer FiveM
Final URL
83.168.105.94/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-02	426 B	1.4 kB	142.250.74.74
83.168.105.94	unknown	unknown	No data	No data	1.3 kB	241 kB	83.168.105.94
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-03	518 B	8.7 kB	142.250.74.99

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	83.168.105.94	Sinkholed
2024-05-04	medium	83.168.105.94	Sinkholed
2024-05-04	medium	83.168.105.94	Sinkholed
2024-05-04	medium	83.168.105.94	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

83.168.105.94/

83.168.105.94

200 OK

1.6 kB

URL User Request GET HTTP/1.1
83.168.105.94/
IP
83.168.105.94:80
ASN
#202520 SkyPass Solutions Sp. z.o.o.

File type
HTML document, ASCII text, with CRLF line terminators
Size
1.6 kB (1556 bytes)
Hash
48e0889eeca1b0c16e1572d05e8d1740
86f18356d30bbdff755c637fe812c0d4daaff263
2c4bbae8463c24104a3961999944608e24ab327c94e57bf87103401b81971137

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 83.168.105.94
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 03:17:51 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Fri, 12 Jan 2024 18:00:23 GMT
ETag: "614-60ec370273405"
Accept-Ranges: bytes
Content-Length: 1556
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

83.168.105.94/

83.168.105.94

200 OK

1.6 kB

URL User Request GET HTTP/1.1
83.168.105.94/
IP
83.168.105.94:80
ASN
#202520 SkyPass Solutions Sp. z.o.o.

File type
HTML document, ASCII text, with CRLF line terminators
Size
1.6 kB (1556 bytes)
Hash
48e0889eeca1b0c16e1572d05e8d1740
86f18356d30bbdff755c637fe812c0d4daaff263
2c4bbae8463c24104a3961999944608e24ab327c94e57bf87103401b81971137

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 83.168.105.94
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 03:17:52 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Fri, 12 Jan 2024 18:00:23 GMT
ETag: "614-60ec370273405"
Accept-Ranges: bytes
Content-Length: 1556
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

83.168.105.94/logo.png

83.168.105.94

200 OK

118 kB

URL GET HTTP/1.1
83.168.105.94/logo.png
IP
83.168.105.94:80
ASN
#202520 SkyPass Solutions Sp. z.o.o.

Requested by
http://83.168.105.94/

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
118 kB (118279 bytes)
Hash
958f702d71a7137be90d9c9beb1c5121
88bfe8f2aad36fb36a8d66b16ba8c85c40c18e55
afd16f15ca69953d8879fae61a43742cfd08bfe1804b21d2f2931bb93dd2828d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /logo.png HTTP/1.1
Host: 83.168.105.94
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.168.105.94/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 03:17:52 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Wed, 27 Dec 2023 15:41:23 GMT
ETag: "1ce07-60d7fa19aad5e"
Accept-Ranges: bytes
Content-Length: 118279
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2

142.250.74.99

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://83.168.105.94/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Size
7.9 kB (7884 bytes)
Hash
9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f

HTTP Headers

GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://83.168.105.94
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:01:02 GMT
expires: Fri, 02 May 2025 02:01:02 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 177410
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

83.168.105.94/logo.png

83.168.105.94

200 OK

118 kB

URL GET HTTP/1.1
83.168.105.94/logo.png
IP
83.168.105.94:80
ASN
#202520 SkyPass Solutions Sp. z.o.o.

Requested by
http://83.168.105.94/

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
118 kB (118279 bytes)
Hash
958f702d71a7137be90d9c9beb1c5121
88bfe8f2aad36fb36a8d66b16ba8c85c40c18e55
afd16f15ca69953d8879fae61a43742cfd08bfe1804b21d2f2931bb93dd2828d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /logo.png HTTP/1.1
Host: 83.168.105.94
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://83.168.105.94/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 03:17:52 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Wed, 27 Dec 2023 15:41:23 GMT
ETag: "1ce07-60d7fa19aad5e"
Accept-Ranges: bytes
Content-Length: 118279
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

fonts.googleapis.com/css?family=Poppins

142.250.74.74

200 OK

737 B

URL GET HTTP/2
fonts.googleapis.com/css?family=Poppins
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
http://83.168.105.94/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (753), with no line terminators
Size
737 B (737 bytes)
Hash
05e8f39d4ae65d7f3a3e93b81d06ba0a
12642aa4b159dc5c82aad02e89ee5d55ec156b46
664d260c2c708b0875188631dfccf8636ffb2f0fd78b0c0b9867383ea9ce7206

HTTP Headers

GET /css?family=Poppins HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://83.168.105.94/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 03:17:52 GMT
date: Sat, 04 May 2024 03:17:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (6)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers