Report - involvedrotatingservice.sharp007.repl.co/

Report Overview

Submitted URL
involvedrotatingservice.sharp007.repl.co/
IP
34.149.204.188
ASN
#15169 GOOGLE
Submitted
2023-06-01 19:19:10
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
involvedrotatingservice.sharp007.repl.co	unknown	2013-05-11	2023-04-13	2023-05-02	1.3 kB	51 kB	34.149.204.188
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2023-05-31	462 B	2.6 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2023-06-01	562 B	20 kB	142.250.74.35
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-31	1.3 kB	2.8 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator
2023-05-02	medium	involvedrotatingservice.sharp007.repl.co/
2023-05-02	medium	involvedrotatingservice.sharp007.repl.co/
2023-05-02	medium	involvedrotatingservice.sharp007.repl.co/

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	involvedrotatingservice.sharp007.repl.co/	108 B	2023-03-07	2024-03-03
Pretty URL involvedrotatingservice.sharp007.repl.co/ IP 34.149.204.188 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:51 Last Seen2024-03-03 10:37:14 Times Seen325 Hash 6bbef7cf27f71b33a25bf76aeecda80a 40dae59cf86a6a1e513272e7994e4d657ee06844 a2c8aa4e24a9ea3a042b08c7bf487198724ba8b16a584793cff46f16f493ff48 Loading...

HTTP Transactions (9)

URL IP Response Size

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
582908ff8bc13bc9b5422491129d8b0e
8deb8d1987e09761ca90108160cc262f1ee8dffa
daa1cabdc684ac8d98c86cd6aa983b52bb982052a8a7b6632f565a606c85a8b2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 19:18:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
02593b51cd737e1085e5837a9a47c755
aab410449655b9fddf070f3e25a1a8e5aee59530
0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 19:18:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 19:18:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

involvedrotatingservice.sharp007.repl.co/

34.149.204.188

429 Too Many Requests

26 kB

URL User Request GET HTTP/2
involvedrotatingservice.sharp007.repl.co/
IP
34.149.204.188:443
ASN
#15169 GOOGLE

Certificate
IssuerLet's Encrypt
Subjectsharp007.repl.co
Fingerprint77:60:54:3A:FC:D2:F5:D5:47:25:A7:A7:FB:35:1A:1C:FA:06:00:57
ValidityWed, 12 Apr 2023 19:58:49 GMT - Tue, 11 Jul 2023 19:58:48 GMT

File type
data
Size
26 kB (25927 bytes)
Hash
5d79a0c234f3ed28ccce3194a1b3fc43
8138cefd01c27bc43086924cb6673110d515d75a
4d0420046045115819ff96a14a72c761ed4c3483173bc0eb59af647e0e536947

Detections

Analyzer	Verdict	Alert
openphish	Generic/Spear Phishing

HTTP Headers

GET / HTTP/1.1
Host: involvedrotatingservice.sharp007.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=3458394; includeSubDomains
content-type: text/html; charset=utf-8
date: Thu, 01 Jun 2023 19:18:58 GMT
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
fd0c5fcd552e140b1496b4697b18a3a4
264e38a9d130f40f54539a52cba317d16aea03ef
a7ed4a9f0a8b37cf7bcf3a12317f70c607fa56aac6a980a6fda121b2c30d5151

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 19:18:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

involvedrotatingservice.sharp007.repl.co/

34.149.204.188

429 Too Many Requests

6.8 kB

URL User Request GET HTTP/2
involvedrotatingservice.sharp007.repl.co/
IP
34.149.204.188:443
ASN
#15169 GOOGLE

Certificate
IssuerLet's Encrypt
Subjectsharp007.repl.co
Fingerprint77:60:54:3A:FC:D2:F5:D5:47:25:A7:A7:FB:35:1A:1C:FA:06:00:57
ValidityWed, 12 Apr 2023 19:58:49 GMT - Tue, 11 Jul 2023 19:58:48 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (869)
Size
6.8 kB (6771 bytes)
Hash
99b2c6d38306b5e5e986fc1243e477e4
b7e54f6e6f28c2a3cec854463ad9fd6a7c1706c2
f2d7708f98a8ea2376614f405f536a965820f2c696f73c913a0a413290a5cd4b

Detections

Analyzer	Verdict	Alert
openphish	Generic/Spear Phishing

HTTP Headers

GET / HTTP/1.1
Host: involvedrotatingservice.sharp007.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Replit-Cluster: global
Date: Thu, 01 Jun 2023 19:19:00 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Via: 1.1 google

fonts.googleapis.com/css?family=IBM+Plex+Sans

142.250.74.106

200 OK

2.0 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=IBM+Plex+Sans
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://involvedrotatingservice.sharp007.repl.co/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT

File type
ASCII text, with very long lines (2051), with no line terminators
Size
2.0 kB (2003 bytes)
Hash
c2b74c827e97ad79abe7423b8b9c13ce
94bb92a2e9b055b3109337effd5ecb57da207e55
dcf753147dc7afe7ebffb082e7c205081791942819f4b8bfa0732fd70ddbd5df

HTTP Headers

GET /css?family=IBM+Plex+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://involvedrotatingservice.sharp007.repl.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 01 Jun 2023 19:18:59 GMT
date: Thu, 01 Jun 2023 19:18:59 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdHeFQ.woff2

142.250.74.35

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdHeFQ.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://involvedrotatingservice.sharp007.repl.co/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19156, version 1.0\012- data
Size
19 kB (19156 bytes)
Hash
0ceb759015a6df090ad355231fdb39f1
b947749baab5bfa0bee35d31e5a5050d4beefe9b
db71f8a28ad8501544fb4e7668e3c6d0b731760b6f20de3525ebaeba597f1922

HTTP Headers

GET /s/ibmplexsans/v19/zYXgKVElMYYaJe8bpLHnCwDKhdHeFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://involvedrotatingservice.sharp007.repl.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19156
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 May 2023 01:49:59 GMT
expires: Thu, 30 May 2024 01:49:59 GMT
cache-control: public, max-age=31536000
age: 149340
last-modified: Tue, 02 May 2023 16:04:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

involvedrotatingservice.sharp007.repl.co/favicon.ico

34.149.204.188

429 Too Many Requests

18 kB

URL GET HTTP/2
involvedrotatingservice.sharp007.repl.co/favicon.ico
IP
34.149.204.188:443
ASN
#15169 GOOGLE

Requested by
https://involvedrotatingservice.sharp007.repl.co/
Certificate
IssuerLet's Encrypt
Subjectsharp007.repl.co
Fingerprint77:60:54:3A:FC:D2:F5:D5:47:25:A7:A7:FB:35:1A:1C:FA:06:00:57
ValidityWed, 12 Apr 2023 19:58:49 GMT - Tue, 11 Jul 2023 19:58:48 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (871)
Size
18 kB (17480 bytes)
Hash
c8d99fbfa057d092fdac5ee40e76777b
5f44aa618db46acb6910bfdd56f42595dba3473c
4b38c5790b96ecaeb627fa8cb22bcc1ee597b11c423c56f785915be540616197

Detections

Analyzer	Verdict	Alert
openphish	Generic/Spear Phishing

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: involvedrotatingservice.sharp007.repl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://involvedrotatingservice.sharp007.repl.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 429 Too Many Requests
expect-ct: max-age=2592000, report-uri="https://sentry.repl.it/api/10/security/?sentry_key=615192fd532445bfbbbe966cd7131791"
replit-cluster: global
strict-transport-security: max-age=3458388; includeSubDomains
content-type: text/html; charset=utf-8
date: Thu, 01 Jun 2023 19:18:59 GMT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers