Report - ikido-kenshukai.co.cc/

Report Overview

Submitted URL
ikido-kenshukai.co.cc/
IP
175.126.123.219
ASN
#9318 SK Broadband Co Ltd
Submitted
2023-06-06 05:45:20
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
14
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.sectigo.com	487	2018-08-16	2019-11-29	2023-06-06	660 B	1.9 kB	104.18.15.101
cc.cc	439604	1997-10-13	2012-06-21	2023-06-06	1.4 kB	218 kB	54.212.114.233
appleid.cdn-apple.com	3288	2010-11-04	2013-09-15	2023-06-06	442 B	18 kB	23.60.29.145
ocsp.globalsign.com	2075	1999-04-19	2012-07-20	2023-06-06	358 B	1.9 kB	104.18.21.226
apis.google.com	105	1997-09-15	2013-05-06	2023-06-06	398 B	8.0 kB	142.250.74.46
ikido-kenshukai.co.cc	unknown	1997-10-13	2023-06-05	2023-06-05	752 B	850 B	175.126.123.219
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2023-06-06	923 B	51 kB	151.101.129.229
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-06	1.3 kB	2.8 kB	142.250.74.131
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2023-06-06	423 B	35 kB	142.250.74.42
use.fontawesome.com	942	2012-10-18	2017-01-30	2023-06-06	449 B	56 kB	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-06 05:45:01	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .co.cc Domain
2023-06-06 05:45:01	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 05:45:01	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .co.cc Domain
2023-06-06 05:45:01	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 05:45:04	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .co.cc Domain
2023-06-06 05:45:04	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 05:45:11	medium	Client IP	175.126.123.219	ET POLICY HTTP Request to a *.co.cc domain
2023-06-06 05:45:11	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .co.cc Domain
2023-06-06 05:45:11	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 05:45:15	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 05:45:15	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 05:45:16	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 05:45:16	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 05:45:16	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (18)

URL IP Response Size

ikido-kenshukai.co.cc/

175.126.123.219

238 B

URL
ikido-kenshukai.co.cc/
IP
175.126.123.219:0
ASN
#9318 SK Broadband Co Ltd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
238 B (238 bytes)
Hash
e45af84aeb32bef3c79bfe008ecf3bfb
0f86e8f2eb1a09011c6357d38a95042c1c32e0bd
ef6ddba1534b098f9427c07faefa2c50c775c327b51e4ebffd545f4594a171e1

Detections

NIDS	Severity	Alert
suricata	medium	ET POLICY HTTP Request to a *.co.cc domain

HTTP Headers

GET / HTTP/1.1
Host: ikido-kenshukai.co.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Jun 2023 05:45:10 GMT
Server: Apache
Location: https://ikido-kenshukai.co.cc/
Content-Length: 238
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

ocsp.sectigo.com/

104.18.15.101

471 B

URL
ocsp.sectigo.com/
IP
104.18.15.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
7719dbe1a90d9ecf560890e8ebd02a67
6e92c842412799b8a19080c49ae7a3541f66f433
456c4bb967f1aba60b73afc25802a8ed974ffd85f266010f8a7c847a3de7e5c6

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:45:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Jun 2023 20:33:52 GMT
Expires: Fri, 09 Jun 2023 20:33:51 GMT
Etag: "6e92c842412799b8a19080c49ae7a3541f66f433"
Cache-Control: max-age=311915,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d2e591eee31b51b-OSL

ikido-kenshukai.co.cc/

175.126.123.219

165 B

URL
ikido-kenshukai.co.cc/
IP
175.126.123.219:0
ASN
#9318 SK Broadband Co Ltd

File type
HTML document, ASCII text
Size
165 B (165 bytes)
Hash
5b0edfd81b70f2c52274b5b4f5dc9111
3e3ea11ed3197ed44b63c5f37a38783b32a12405
ddf33d6d6f3f3f8210c78b7f9d89e6711ec0ad415369340b977146718eef978a

Detections

NIDS	Severity	Alert
suricata	medium	ET POLICY HTTP Request to a *.co.cc domain

HTTP Headers

GET / HTTP/1.1
Host: ikido-kenshukai.co.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:45:15 GMT
Server: Apache
X-Powered-By: PHP/5.3.29
Content-Length: 165
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

ocsp.sectigo.com/

104.18.15.101

472 B

URL
ocsp.sectigo.com/
IP
104.18.15.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
494a37491d3cc31e7dc4893f21b9f6d4
d16cb8bf55288f4481e8b9a642240ec46117981d
3238a696c242490965cab0cdc03977676d8e7e123cab8e9e4e63d7006da3c9ad

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:45:16 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Jun 2023 22:11:01 GMT
Expires: Fri, 09 Jun 2023 22:11:00 GMT
Etag: "d16cb8bf55288f4481e8b9a642240ec46117981d"
Cache-Control: max-age=317743,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d2e5925bd54b51b-OSL

cc.cc/

54.212.114.233

200 OK

7.5 kB

URL User Request GET HTTP/1.1
cc.cc/
IP
54.212.114.233:443
ASN
#16509 AMAZON-02

Certificate
IssuerSectigo Limited
Subject*.cc.cc
FingerprintA2:9E:FC:A9:06:81:33:DE:4A:1A:28:1E:1D:4F:C1:3C:32:4C:DD:57
ValidityWed, 19 Oct 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
7.5 kB (7459 bytes)
Hash
43ad1d59dc22d23281c5d917f2b55721
673b3a831d6b55efceea9ba0d6554fb558b2ba80
6edebe884f039ca28578b63af5a267a8e2cd97f511c708086c390b8e591cfe5a

HTTP Headers

GET / HTTP/1.1
Host: cc.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ikido-kenshukai.co.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:45:16 GMT
Server: Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.2k-fips DAV/2 PHP/5.5.38
X-Powered-By: PHP/5.5.38
Cache-Control: no-cache, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Set-Cookie: _cl=2YpS2r; path=/; domain=.cc.cc; httponly
Content-Length: 7459
Keep-Alive: timeout=1
Connection: Keep-Alive
Content-Type: text/html

cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta3/dist/css/bootstrap.min.css

151.101.129.229

25 kB

URL
cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta3/dist/css/bootstrap.min.css
IP
151.101.129.229:0
ASN
#54113 FASTLY

File type
Unicode text, UTF-8 text, with very long lines (65300)
Size
25 kB (25310 bytes)
Hash
bb84936d7c7700b31719a49340a42bd8
51c552a6ad57d57bd134949c3d5312881f51a893
0d4f6240127cf5d1cfda2caeb0283efb4c9c879e43031f102fa3fc09853ae1b2

HTTP Headers

GET /npm/bootstrap@5.0.0-beta3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cc.cc
DNT: 1
Connection: keep-alive
Referer: https://cc.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.0-beta3
x-jsd-version-type: version
etag: W/"25cfb-UcVSpq1X1XvRNJScPVMSiB9RqJM"
content-encoding: br
accept-ranges: bytes
date: Tue, 06 Jun 2023 05:45:17 GMT
age: 7145129
x-served-by: cache-fra-eddf8230038-FRA, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25310
X-Firefox-Spdy: h2

appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js

23.60.29.145

17 kB

URL GET
appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
IP
23.60.29.145:0
ASN
#16625 AKAMAI-AS

Requested by
https://cc.cc/
Certificate
IssuerApple Inc.
Subjectappleid.cdn-apple.com
Fingerprint34:DE:D2:E4:F3:12:0D:5C:4B:CC:05:1D:24:9E:CC:78:49:54:83:CF
ValidityWed, 03 May 2023 18:50:30 GMT - Sun, 29 Oct 2023 19:00:29 GMT

File type
Unicode text, UTF-8 text, with very long lines (39267)
Size
17 kB (17247 bytes)
Hash
1544dc13da1b6238b1fad3cd36be40b3
82d72eb046d2acc5ae0aaf4ecffa2aa723994bdf
60e60bf2583cf7444b00a4b0b8d46de5fd5816f768fc72fd71c643357132df69

HTTP Headers

GET /appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js HTTP/1.1
Host: appleid.cdn-apple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cc.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apple
Content-Type: application/javascript;charset=UTF-8
Cache-Control: public, max-age=86400,stale-while-revalidate=86400
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Accept-Ranges: bytes
ETag: W/"42671-1684477341510"
Last-Modified: Fri, 19 May 2023 06:22:21 GMT
Vary: accept-encoding
Content-Encoding: gzip
Content-Length: 17247
Date: Tue, 06 Jun 2023 05:45:17 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
e658f45faae0edd26f5908c922167f73
33e4e65ccf9cb9b15a7a9f5fd0083f1cebfa7064
5cc8bb25c78320b6cafdc4a6a017081a2c953cb86e1a1dc45c8f8811798adbc5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 05:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cdn.jsdelivr.net/npm/bootstrap@5.1.1/dist/js/bootstrap.bundle.min.js

151.101.129.229

24 kB

URL
cdn.jsdelivr.net/npm/bootstrap@5.1.1/dist/js/bootstrap.bundle.min.js
IP
151.101.129.229:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (65299)
Size
24 kB (24059 bytes)
Hash
9ba32250da070fa7ff78f67f67e35552
085eccfd036da1edf601388a68cfe5cb316b1e2c
e5a12b84f9543d5ba3231837c2f2467563405aa66a582b6fc400985f85df49ad

HTTP Headers

GET /npm/bootstrap@5.1.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cc.cc
DNT: 1
Connection: keep-alive
Referer: https://cc.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.1.1
x-jsd-version-type: version
etag: W/"13417-CF7M/QNtoe32ATiKaM/lyzFrHiw"
content-encoding: br
accept-ranges: bytes
date: Tue, 06 Jun 2023 05:45:17 GMT
age: 3567949
x-served-by: cache-fra-eddf8230074-FRA, cache-bma1627-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24059
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fec356a93b1b2ae51a084ccc79c3d54b
01d4ba4e57e922ebc6176870d6528a1559705d68
fa7ad11e4f7ac84f789eef0e37124852f3ffe6cab733de95e1db0ed1c14c53ab

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 05:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js

142.250.74.42

34 kB

URL GET
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
142.250.74.42:0
ASN
#15169 GOOGLE

Requested by
https://cc.cc/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

File type
ASCII text, with very long lines (32077)
Size
34 kB (33951 bytes)
Hash
4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

HTTP Headers

GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cc.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Jun 2023 19:37:16 GMT
expires: Sat, 01 Jun 2024 19:37:16 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 295681
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4

104.18.21.226

1.5 kB

URL
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
44e8b5959542cd6f4f1b9d7a899d3014
6d4e591a48f63a02f7f18ed103ae3f193b6bc775
d7cf70a740138c1b140d02512126fc462a0ed670e9d72d67f876816887296481

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:45:17 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "DA16AE9F0ECF5324A6230B6FB13CBBC5F4B07C2A"
Expires: Tue, 06 Jun 2023 16:00:00 GMT
Last-Modified: Tue, 06 Jun 2023 04:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1740
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d2e592a39d71bfe-OSL

apis.google.com/js/api:client.js

142.250.74.46

200 OK

7.1 kB

URL GET HTTP/2
apis.google.com/js/api:client.js
IP
142.250.74.46:443
ASN
#15169 GOOGLE

Requested by
https://cc.cc/
Certificate
IssuerGoogle Trust Services LLC
Subject*.apis.google.com
FingerprintDE:E4:50:C7:14:04:EC:D0:70:AC:04:CC:B1:7B:9A:04:98:C0:3C:9A
ValidityFri, 19 May 2023 12:58:17 GMT - Fri, 11 Aug 2023 12:58:16 GMT

File type
ASCII text, with very long lines (2056)
Size
7.1 kB (7116 bytes)
Hash
1199360cb6fd982eeaf11178dcf54310
4bde1714b14ee37a9a462acee16aaff408a078be
1cdbda445b7f9520e820a98d82acd508a8d676032af7e39f6d91ca466acc8972

HTTP Headers

GET /js/api:client.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cc.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 7116
date: Tue, 06 Jun 2023 05:45:17 GMT
expires: Tue, 06 Jun 2023 05:45:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "facf82f18015ed84"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
e658f45faae0edd26f5908c922167f73
33e4e65ccf9cb9b15a7a9f5fd0083f1cebfa7064
5cc8bb25c78320b6cafdc4a6a017081a2c953cb86e1a1dc45c8f8811798adbc5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 05:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
228335310e064064e595f506f85bce16
be51dc4247d0c1f4930bcb48acf84b684ab39c63
11e3db6caae7ff90f20e7edf253909003afc8243a8524190c1a7fa8f7d5e944a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Jun 2023 05:45:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cc.cc/css/pagespeed.css?1686030316

54.212.114.233

196 kB

URL
cc.cc/css/pagespeed.css?1686030316
IP
54.212.114.233:0
ASN
#16509 AMAZON-02

Certificate
IssuerSectigo Limited
Subject*.cc.cc
FingerprintA2:9E:FC:A9:06:81:33:DE:4A:1A:28:1E:1D:4F:C1:3C:32:4C:DD:57
ValidityWed, 19 Oct 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (572)
Size
196 kB (195602 bytes)
Hash
3bbe891c1e481ba4f74ffde8dd3b0180
d47d338af88dd72164b31159badaf2b26d333c0c
45addcd7d3e06d8d4b7cfa03f596d1ae13fd6ebba2fec2d5a0288ab1008aecad

HTTP Headers

GET /css/pagespeed.css?1686030316 HTTP/1.1
Host: cc.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cc.cc/
Cookie: _cl=2YpS2r
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:45:16 GMT
Server: Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.2k-fips DAV/2 PHP/5.5.38
Last-Modified: Wed, 29 Sep 2021 06:07:13 GMT
Accept-Ranges: bytes
Content-Length: 195602
Cache-Control: max-age=604800, public
Keep-Alive: timeout=1
Connection: Keep-Alive
Content-Type: text/css

cc.cc/img/app_store.png

54.212.114.233

14 kB

URL
cc.cc/img/app_store.png
IP
54.212.114.233:0
ASN
#16509 AMAZON-02

Certificate
IssuerSectigo Limited
Subject*.cc.cc
FingerprintA2:9E:FC:A9:06:81:33:DE:4A:1A:28:1E:1D:4F:C1:3C:32:4C:DD:57
ValidityWed, 19 Oct 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT

File type
PNG image data, 311 x 92, 8-bit/color RGBA, non-interlaced\012- data
Size
14 kB (14060 bytes)
Hash
96926a60bb2c8db9cc7e430792dbb8c4
0e0dfe714c3c7eaf1c1a41ca050fd63f439ae697
02e96d0a022eaf23cf4993772514a5795878c17cf8d457045b952e7a48b055b6

HTTP Headers

GET /img/app_store.png HTTP/1.1
Host: cc.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cc.cc/
Cookie: _cl=2YpS2r
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 05:45:17 GMT
Server: Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.2k-fips DAV/2 PHP/5.5.38
Last-Modified: Mon, 06 Sep 2021 07:15:42 GMT
Accept-Ranges: bytes
Content-Length: 14060
Keep-Alive: timeout=1
Connection: Keep-Alive
Content-Type: image/png

use.fontawesome.com/releases/v5.8.1/css/all.css

0.0.0.0

55 kB

URL GET
use.fontawesome.com/releases/v5.8.1/css/all.css
IP
0.0.0.0:0
ASN
#0

Requested by
https://cc.cc/
Certificate
IssuerGoogle Trust Services LLC
Subjectuse.fontawesome.com
FingerprintC8:38:F5:E2:7C:CE:53:71:EB:92:1D:71:F5:78:FE:7C:C4:4D:65:BC
ValiditySat, 06 May 2023 03:15:52 GMT - Fri, 04 Aug 2023 03:15:51 GMT

File type
ASCII text, with very long lines (54926)
Size
55 kB (55111 bytes)
Hash
e4c542a7f6bf6f74fdd8cdf6e8096396
3a0571a695a35f238026b9398386dc99d9a0c56d
eeb17a45a48aca1d7adbcf04de155dcd0b47cb36ad036310446bb471fea9aaa3

HTTP Headers

GET /releases/v5.8.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cc.cc
DNT: 1
Connection: keep-alive
Referer: https://cc.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 Jun 2023 05:45:17 GMT
content-type: text/css
x-amz-id-2: K4naLr0txRnbwg8KXf8Q76k7LglsxAgipOol3/BfzZc6pcXwO2IfcGfVp6JQBfCtCvnp/+vPICQ=
x-amz-request-id: MZ1VBT60QF4D3F3W
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:46:39 GMT
etag: W/"e4c542a7f6bf6f74fdd8cdf6e8096396"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 95914
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tCBimy74lnT4epHAONgloKJSr6Smz9J7foGt%2FaJ5rseMteF3tykmx6jMAvEtNm5wy5f2EHVXbHnN1zJqlHi%2BnoF36Hci522Rx21Tw0Bk20n%2Fddwj1MxiW4OrNuOPHOXNh9sldHwf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2e5929a9c57798-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (18)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash