Report - 208.95.112.1

Report Overview

Visited public
2025-05-19 15:46:51
Tags
URL
208.95.112.1
Finishing URL
ip-api.com/
IP / ASN
208.95.112.1
#53334 TUT-AS
Title
IP-API.com - Geolocation API

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cache.ip-api.com	unknown	2012-04-24	2019-09-20	2025-02-26	438 B	84 kB	188.165.195.106
ip-api.com	31425	2012-04-24	2014-10-06	2025-05-05	8.2 kB	320 kB	208.95.112.1
208.95.112.1	unknown	unknown	2019-11-06	2024-01-17	878 B	12 kB	0.0.0.0
j459ajuyzbdzg4ebepj9pdzxxlwxk1uj.edns.ip-api.com	unknown	2012-04-24	2025-05-19	2025-05-19	467 B	277 B	85.10.196.124
demo.ip-api.com	973527	2012-04-24	2019-10-04	2025-02-26	451 B	600 B	208.95.112.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-19 15:46:30	medium	Client IP	208.95.112.1	ET INFO Observed External IP Lookup Domain (ip-api .com) in TLS SNI
2025-05-19 15:46:31	medium	Client IP	208.95.112.1	ET INFO Observed External IP Lookup Domain (ip-api .com) in TLS SNI
2025-05-19 15:46:31	medium	Client IP	208.95.112.1	ET INFO Observed External IP Lookup Domain (ip-api .com) in TLS SNI
2025-05-19 15:46:31	medium	Client IP	208.95.112.1	ET INFO Observed External IP Lookup Domain (ip-api .com) in TLS SNI
2025-05-19 15:46:31	medium	Client IP	208.95.112.1	ET INFO Observed External IP Lookup Domain (ip-api .com) in TLS SNI
2025-05-19 15:46:31	medium	Client IP	208.95.112.1	ET INFO Observed External IP Lookup Domain (ip-api .com) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-05-19	medium	208.95.112.1	Sinkholed
2025-05-19	medium	208.95.112.1	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	ip-api.com/	ScriptElement	3.1 kB	2023-03-11	2025-05-20
Pretty URL ip-api.com/ IP 208.95.112.1 ASN #53334 TUT-AS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-11 22:00 Last Seen2025-05-20 07:35 Times Seen43 Hash f9f3a9c66522c9f63ee835fb37409eb3 b8d2b65c68c210fbe3c61ecf71e0c8e607d0b220 2968133e6b9e9800c111a1a38f9d1c7a4b23fbe32d51bb35bf7985fcf3020dbd Loading...

HTTP Transactions (22)

URL IP Response Size

ip-api.com/favicon.ico

208.95.112.1

200 OK

1.4 kB

URL GET
ip-api.com/favicon.ico
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 16x16
Size
1.4 kB (1406 bytes)
Hash
0a1a5548d6a51947b36e91c847f67f6e
43606ae6abaaf891c4dedb1e119b8531f847b6e7
a1076c39db3c083ef2e72164546601a85c66e3e187e0c5a9aaef8a27d144ecbe

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 190
Cache-Control: max-age=86400
Content-Encoding: gzip
Accept-Ranges: bytes
Last-Modified: Mon, 26 Nov 2018 11:19:42 GMT

208.95.112.1/

0.0.0.0

0 B

URL User Request GET
208.95.112.1/
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 208.95.112.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ip-api.com/docs/static/dosis-v8-latin-200.woff2

208.95.112.1

200 OK

26 kB

URL GET
ip-api.com/docs/static/dosis-v8-latin-200.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 25452, version 1.0
Size
26 kB (25452 bytes)
Hash
776de852bb176ce6b6673a323e538291
595ef5f34731fbe50cf9d1a9a83d66cd2a8a1dd2
7c1d8cc32f9eab509d75de08cfd4d5c04204286ea2eef78f6c433c3c5a579393

HTTP Headers

GET /docs/static/dosis-v8-latin-200.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ip-api.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Type: font/woff
Content-Length: 25452
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:10:46 GMT

j459ajuyzbdzg4ebepj9pdzxxlwxk1uj.edns.ip-api.com/json?lang=en

85.10.196.124

200 OK

97 B

URL GET
j459ajuyzbdzg4ebepj9pdzxxlwxk1uj.edns.ip-api.com/json?lang=en
IP
85.10.196.124:443
ASN
#24940 Hetzner Online GmbH

Requested by
https://ip-api.com/
Certificate
IssuerDigiCert Inc
Subject*.edns.ip-api.com
Fingerprint0F:51:59:A3:93:CA:D5:9F:6C:58:CD:98:A2:80:51:1C:67:52:E8:52
ValidityTue, 13 Aug 2024 00:00:00 GMT - Tue, 15 Jul 2025 23:59:59 GMT

File type
JSON text data
Size
97 B (97 bytes)
Hash
a1af2575091386a28ff3ff7bf8b1d08f
279f18bcbdcab85ef258c9793ae3c4baa455a1fe
188ab5690a67d306ed4872805de7ecb120fa86014fd76b2d4ce70cebf043990f

HTTP Headers

GET /json?lang=en HTTP/1.1
Host: j459ajuyzbdzg4ebepj9pdzxxlwxk1uj.edns.ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ip-api.com
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-store
Content-Type: application/json; charset=utf-8
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Length: 97

ip-api.com/docs/static/open-sans-v16-latin-300.woff2

208.95.112.1

200 OK

15 kB

URL GET
ip-api.com/docs/static/open-sans-v16-latin-300.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14932, version 1.0
Size
15 kB (14932 bytes)
Hash
24f7b0944e9e03a905f9d7701573b2cd
c7a9a4c42d3d84f112940645abd416a59eb71c89
f677ee2d82dfb11f08175f673cf3f065b0d5e491b4485e01259a492715c746e2

HTTP Headers

GET /docs/static/open-sans-v16-latin-300.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/docs/static/page.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: font/woff
Content-Length: 14932
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:08:38 GMT

ip-api.com/docs/static/open-sans-v16-latin-regular.woff2

208.95.112.1

200 OK

14 kB

URL GET
ip-api.com/docs/static/open-sans-v16-latin-regular.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14380, version 1.0
Size
14 kB (14380 bytes)
Hash
33543c5cc5d88f5695dd08c87d280dfd
600db9374e47e4f73a59ccc0a99bcc42f4a3e02a
9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52

HTTP Headers

GET /docs/static/open-sans-v16-latin-regular.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/docs/static/page.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: font/woff
Content-Length: 14380
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:08:38 GMT

ip-api.com/

208.95.112.1

200 OK

12 kB

URL User Request GET
ip-api.com/
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (6567)
Size
12 kB (11848 bytes)
Hash
a6b121d8e6182c183343fe349655fa0a
8857e756c1148fc80880d53205b72b10dcc1eb36
a0e717801aad7c4d84760cca7228555b78228b8ce22b343af8cb3ac6c2414cf3

HTTP Headers

GET / HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4105
Cache-Control: max-age=86400
Content-Encoding: gzip
Accept-Ranges: bytes
Last-Modified: Thu, 03 Mar 2022 15:18:30 GMT

ip-api.com/docs/static/open-sans-v16-latin-regular.woff2

208.95.112.1

200 OK

14 kB

URL GET
ip-api.com/docs/static/open-sans-v16-latin-regular.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14380, version 1.0
Size
14 kB (14380 bytes)
Hash
33543c5cc5d88f5695dd08c87d280dfd
600db9374e47e4f73a59ccc0a99bcc42f4a3e02a
9c50a96c859b9beea47b71740bd14e7f69a4df586d015f47434037f8def53b52

HTTP Headers

GET /docs/static/open-sans-v16-latin-regular.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ip-api.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Type: font/woff
Content-Length: 14380
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:08:38 GMT

ip-api.com/docs/static/page.css

208.95.112.1

200 OK

21 kB

URL GET
ip-api.com/docs/static/page.css
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
ASCII text, with very long lines (21244), with no line terminators
Size
21 kB (21244 bytes)
Hash
9eb0012201fc43cd9e5b293644f6492d
06384630c1bcc07de7a02de8694433507ea10323
ab4bc068cdc66b6cacc6fa8911674d05cbb86fdb7d704b30fdaceef6bd50efa4

HTTP Headers

GET /docs/static/page.css HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 5744
Cache-Control: max-age=86400
Content-Encoding: gzip
Accept-Ranges: bytes
Last-Modified: Thu, 03 Mar 2022 15:18:30 GMT

demo.ip-api.com/json/?fields=66842623&lang=en

208.95.112.1

200 OK

423 B

URL GET
demo.ip-api.com/json/?fields=66842623&lang=en
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
JSON text data
Size
423 B (423 bytes)
Hash
f48e2e3a83a5110381b85c8438861dd9
64145c791220214e26633a59e583d5b63103f0ae
e2cecac1060b7b310a1fcbaa6d69acd9a6a99d72854a31d79e166bb60da330c5

HTTP Headers

GET /json/?fields=66842623&lang=en HTTP/1.1
Host: demo.ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ip-api.com
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 423
Access-Control-Allow-Origin: *
X-Ttl: 60
X-Rl: 44

ip-api.com/docs/static/open-sans-v16-latin-600.woff2

208.95.112.1

200 OK

15 kB

URL GET
ip-api.com/docs/static/open-sans-v16-latin-600.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14880, version 1.0
Size
15 kB (14880 bytes)
Hash
819af3d3abdc9f135d49b80a91e2ff4c
0fd9f29faa386a9c8de328f799d2698948ed3d25
1491de1b31182d38593bcf660c99bc6018af8e192d91663f67ec9d045a3b5ccc

HTTP Headers

GET /docs/static/open-sans-v16-latin-600.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/docs/static/page.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: font/woff
Content-Length: 14880
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:08:38 GMT

cache.ip-api.com/10.7389,59.9133,10

188.165.195.106

200 OK

84 kB

URL GET
cache.ip-api.com/10.7389,59.9133,10
IP
188.165.195.106:443
ASN
#16276 OVH SAS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
PNG image data, 540 x 578, 8-bit colormap, non-interlaced
Size
84 kB (83900 bytes)
Hash
4d81bf2f5c568308eefb501d165e91bd
ba0224619cf02735ab636c0d6f2edeb5aa919eec
54d61dfd8f2392a49bb3b4984d580231358d7d21eb9af3a4dd3b21f4a4e1a437

HTTP Headers

GET /10.7389,59.9133,10 HTTP/1.1
Host: cache.ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: mapcache/1.0
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: image/png
Content-Length: 83900
Cache-Control: max-age=648000,s-maxage=648000
Accept-Ranges: bytes
Last-Modified: Tue, 15 Apr 2025 09:22:57 GMT

208.95.112.1/

208.95.112.1

301 Moved Permanently

12 kB

URL User Request GET
208.95.112.1/
IP
208.95.112.1:80
ASN
#53334 TUT-AS

File type

Size
12 kB (11848 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 208.95.112.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Length: 0
Location: https://ip-api.com/

ip-api.com/docs/static/dosis-v8-latin-regular.woff2

208.95.112.1

200 OK

27 kB

URL GET
ip-api.com/docs/static/dosis-v8-latin-regular.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 26676, version 1.0
Size
27 kB (26676 bytes)
Hash
f07a0c8c50048830c39cbdc123f3a894
fda6dbef70aec121997fb3246e8ef598173878ee
1e484bc9aed695cd904a7922dceaeda54c64ea870fbbb2bc5baae143af19a7dd

HTTP Headers

GET /docs/static/dosis-v8-latin-regular.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ip-api.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: font/woff
Content-Length: 26676
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:10:46 GMT

ip-api.com/docs/static/bg.jpg

208.95.112.1

200 OK

34 kB

URL GET
ip-api.com/docs/static/bg.jpg
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 540x303, components 3
Size
34 kB (33821 bytes)
Hash
c00f4299b0d29389cb3a448c5d9661bd
d2523fc91f8bfe26816330ba019d7e2436faf573
57a7654be2b6672bf6b780a65b642231a74cbd15556825e4c1e77ffa1d861dc1

HTTP Headers

GET /docs/static/bg.jpg HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: image/jpeg
Content-Length: 33821
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Wed, 09 Jan 2019 09:25:55 GMT

ip-api.com/docs/static/dosis-v8-latin-500.woff2

208.95.112.1

200 OK

26 kB

URL GET
ip-api.com/docs/static/dosis-v8-latin-500.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 26508, version 1.0
Size
26 kB (26508 bytes)
Hash
b952822dfd254f2f8be858a7b4a7d7e6
a8567fbeb7063c64649838bc92ef5451ce746578
151858291959a15ba917c5c401d41ad151c9d9e095b28c2e97b0713ffff98050

HTTP Headers

GET /docs/static/dosis-v8-latin-500.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/docs/static/page.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: font/woff
Content-Length: 26508
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:10:46 GMT

ip-api.com/docs/static/dosis-v8-latin-200.woff2

208.95.112.1

200 OK

26 kB

URL GET
ip-api.com/docs/static/dosis-v8-latin-200.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 25452, version 1.0
Size
26 kB (25452 bytes)
Hash
776de852bb176ce6b6673a323e538291
595ef5f34731fbe50cf9d1a9a83d66cd2a8a1dd2
7c1d8cc32f9eab509d75de08cfd4d5c04204286ea2eef78f6c433c3c5a579393

HTTP Headers

GET /docs/static/dosis-v8-latin-200.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/docs/static/page.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: font/woff
Content-Length: 25452
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:10:46 GMT

ip-api.com/docs/static/dosis-v8-latin-500.woff2

208.95.112.1

200 OK

26 kB

URL GET
ip-api.com/docs/static/dosis-v8-latin-500.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 26508, version 1.0
Size
26 kB (26508 bytes)
Hash
b952822dfd254f2f8be858a7b4a7d7e6
a8567fbeb7063c64649838bc92ef5451ce746578
151858291959a15ba917c5c401d41ad151c9d9e095b28c2e97b0713ffff98050

HTTP Headers

GET /docs/static/dosis-v8-latin-500.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ip-api.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Type: font/woff
Content-Length: 26508
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:10:46 GMT

ip-api.com/docs/static/open-sans-v16-latin-300.woff2

208.95.112.1

200 OK

15 kB

URL GET
ip-api.com/docs/static/open-sans-v16-latin-300.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14932, version 1.0
Size
15 kB (14932 bytes)
Hash
24f7b0944e9e03a905f9d7701573b2cd
c7a9a4c42d3d84f112940645abd416a59eb71c89
f677ee2d82dfb11f08175f673cf3f065b0d5e491b4485e01259a492715c746e2

HTTP Headers

GET /docs/static/open-sans-v16-latin-300.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ip-api.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Type: font/woff
Content-Length: 14932
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:08:38 GMT

ip-api.com/docs/static/open-sans-v16-latin-600.woff2

208.95.112.1

200 OK

15 kB

URL GET
ip-api.com/docs/static/open-sans-v16-latin-600.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14880, version 1.0
Size
15 kB (14880 bytes)
Hash
819af3d3abdc9f135d49b80a91e2ff4c
0fd9f29faa386a9c8de328f799d2698948ed3d25
1491de1b31182d38593bcf660c99bc6018af8e192d91663f67ec9d045a3b5ccc

HTTP Headers

GET /docs/static/open-sans-v16-latin-600.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ip-api.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Type: font/woff
Content-Length: 14880
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:08:38 GMT

ip-api.com/docs/static/logo.png

208.95.112.1

200 OK

2.5 kB

URL GET
ip-api.com/docs/static/logo.png
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
PNG image data, 135 x 35, 8-bit gray+alpha, non-interlaced
Size
2.5 kB (2548 bytes)
Hash
450e1e9bfe21f65eb7bef916427fa949
e2f0802708bbc2220b0944ba6fba29f91f67bb79
ac4efaa93356cfd0c0de1b22cdef6e8408ffff99d1e65f0e64972edaea2b5540

HTTP Headers

GET /docs/static/logo.png HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:30 GMT
Content-Type: image/png
Content-Length: 2548
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sat, 24 Nov 2018 12:08:18 GMT

ip-api.com/docs/static/dosis-v8-latin-regular.woff2

208.95.112.1

200 OK

27 kB

URL GET
ip-api.com/docs/static/dosis-v8-latin-regular.woff2
IP
208.95.112.1:443
ASN
#53334 TUT-AS

Requested by
https://ip-api.com/
Certificate
IssuerSectigo Limited
Subject*.ip-api.com
Fingerprint0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB
ValidityThu, 09 Jan 2025 00:00:00 GMT - Mon, 09 Feb 2026 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 26676, version 1.0
Size
27 kB (26676 bytes)
Hash
f07a0c8c50048830c39cbdc123f3a894
fda6dbef70aec121997fb3246e8ef598173878ee
1e484bc9aed695cd904a7922dceaeda54c64ea870fbbb2bc5baae143af19a7dd

HTTP Headers

GET /docs/static/dosis-v8-latin-regular.woff2 HTTP/1.1
Host: ip-api.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ip-api.com/docs/static/page.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 19 May 2025 15:46:31 GMT
Content-Type: font/woff
Content-Length: 26676
Cache-Control: max-age=86400
Accept-Ranges: bytes
Last-Modified: Sun, 21 Jul 2019 20:10:46 GMT

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (22)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash