| telkomnetwim.blogspot.ch/ |  216.58.207.193 | | 199 B |
URL telkomnetwim.blogspot.ch/ IP216.58.207.193:0
File typeHTML document, ASCII text Hash0e51309054507a9c0f117d139ed738b9 a2bca5485aeac9bb6a532ee2011d980a0888ab03 5a576aec52a84e5518e9850b48ff94df49145fe0ceee0940017f5546b01524c7
GET / HTTP/1.1
Host: telkomnetwim.blogspot.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://telkomnetwim.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Thu, 18 Apr 2024 05:58:55 GMT
expires: Thu, 18 Apr 2024 05:58:55 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 199
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| telkomnetwim.blogspot.com/ | 216.58.207.193 | | 15 kB |
URL telkomnetwim.blogspot.com/ IP216.58.207.193:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (7139) Hashab7810676719f4a814bb7924d20d7f53 f82bc78de46555044e917c213d9bc046bca90f76 aa28eeca7af80a393a51ac43af021042f6a4d1e23188295f3c01d6e88b6053b8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Telekom | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: telkomnetwim.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 18 Apr 2024 05:58:55 GMT
date: Thu, 18 Apr 2024 05:58:55 GMT
cache-control: private, max-age=0
last-modified: Sun, 17 Mar 2024 00:48:43 GMT
etag: W/"1742b3a3f38c9208a04746ee472f4940326a39de850e3aa79f182c9bca6c858b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15232
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.67 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.67:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://telkomnetwim.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://telkomnetwim.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:27:38 GMT
expires: Wed, 16 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 135078
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| t.co//jV614tSyTX | 104.244.42.133 | | 193 B |
IP104.244.42.133:0
File typeHTML document, ASCII text, with very long lines (323), with no line terminators Hashe521629bfff81eb3317c6fa8e8c90484 62ecb83034fc3f60b78642274bef3131d29f63b9 04376dd2c6e3bda9a1738bd92bf2f9e93543bada51941527f6e88b30ba01e170
GET //jV614tSyTX HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telkomnetwim.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:58:56 GMT
perf: 7402827104
vary: Origin
server: tsa_o
expires: Thu, 18 Apr 2024 06:03:56 GMT
set-cookie: muc=eb444643-053d-4ee1-9108-7db13d572b65; Max-Age=34214400; Expires=Mon, 19 May 2025 05:58:56 GMT; Domain=t.co; Secure; SameSite=None
content-type: text/html; charset=utf-8
cache-control: private,max-age=300
content-length: 193
content-encoding: gzip
x-transaction-id: bc05a9921a7b7d61
x-xss-protection: 0
strict-transport-security: max-age=0
x-response-time: 110
x-connection-hash: d793339202af3696329c60e87e3281818cba44d40ba347e8bf60b4020cc1e97d
X-Firefox-Spdy: h2
|
|
| tonlinewebmailportal008.z6.web.core.windows.net/ |  0.0.0.0 | | 0 B |
URL User Request GET tonlinewebmailportal008.z6.web.core.windows.net/ IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Deutsche Telekom | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: tonlinewebmailportal008.z6.web.core.windows.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
0.0.0.0