Report - petir.io/tUcThD

Report Overview

Submitted URL
petir.io/tUcThD
IP
104.21.31.139
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 22:13:13
Access
public
Website Title
ALEXISTOGEL: Bandar Togel Online Terpercaya 2024
Final URL
165.22.62.234/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	483 B	30 kB	142.250.74.106
cdn.ampproject.org	329	2015-08-31	2015-10-09	2024-04-24	3.8 kB	175 kB	216.58.207.193
use.fontawesome.com	942	2012-10-18	2017-01-30	2024-04-23	956 B	131 kB	172.67.142.245
kilat.digital	unknown	2023-12-03	2023-12-17	2024-04-18	1.8 kB	1.1 MB	188.114.97.1
sgp1.digitaloceanspaces.com	227353	2017-02-23	2018-02-14	2024-04-18	1.4 kB	405 kB	103.253.144.208
petir.io	unknown	2023-11-26	2023-11-27	2024-04-14	471 B	42 kB	104.21.31.139
165.22.62.234	unknown	unknown	No data	No data	468 B	7.3 kB	165.22.62.234
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	1.6 kB	147 kB	216.58.207.227
cdn.rbtasset.com	unknown	2022-04-26	2022-07-02	2024-04-12	879 B	48 kB	172.67.207.180

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	165.22.62.234	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js	13 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen39 Hash c62cd4c81f0172d7ac84d15281d3fa09 8a966261eaadac311a2d6ae4f32942883911ec01 1f5211c3d83be6fa51f5b9face5beda901221f2a6cf261acb3bbf47d89594126 Loading...

	cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js	7.8 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen41 Hash bd778223dafaed0894e021593ad5dcbf ef1a45e18a85060334571cdc9eaf1e9435b5ffe9 2b753b9c13fe907246062aa577f7837fbd2ffebe71dec501c4cd6de494016ac8 Loading...

	cdn.ampproject.org/v0/amp-carousel-0.2.js	34 kB	2024-04-25	2024-04-29
Pretty URL cdn.ampproject.org/v0/amp-carousel-0.2.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 00:13:19 Last Seen2024-04-29 04:34:53 Times Seen6 Hash e26ce08aff2c3638b113c4582c194c24 9ae98c2c929b0138a10ce824da1cd1744c3a625e a47cacc431d3cd791d493ee327bb80086ceb8674c35b0acd2491695dc844e0ca Loading...

	cdn.ampproject.org/v0.js	285 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/v0.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 20:44:27 Last Seen2024-04-30 21:05:30 Times Seen50 Hash 93b22676750227c6081037abf8baa351 d3c33bea647267cd0fef7c24d1431c40409b74b5 53da1339a0555a71431c0bbfb2bf946f300ee9d5fc2e5b9e0b424c93a2506a82 Loading...

	cdn.ampproject.org/v0/amp-lightbox-0.1.js	27 kB	2024-04-25	2024-04-29
Pretty URL cdn.ampproject.org/v0/amp-lightbox-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 00:13:19 Last Seen2024-04-29 04:34:53 Times Seen8 Hash d156272ec438cc4f6b395e84d2ed5ab6 88d9cc75f304601bbe0048e616c669ba0fd4757e be1685cbf62af0bc6f3673c7dd9ad16cbbf4b7b70686925408c6cecc0522b09f Loading...

	cdn.ampproject.org/v0/amp-form-0.1.js	51 kB	2024-04-25	2024-04-30
Pretty URL cdn.ampproject.org/v0/amp-form-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 00:13:20 Last Seen2024-04-30 21:05:30 Times Seen10 Hash 4b97053d29f0a226b10630d96976cda9 e50d99f428f319cd74256360290f126035c9e6ec 6c7640e8e81f3cce965b863d94f3da33e3cb0540cde7f06d52bfddad301cbbf2 Loading...

	cdn.ampproject.org/v0/amp-accordion-0.1.js	18 kB	2024-04-25	2024-04-30
Pretty URL cdn.ampproject.org/v0/amp-accordion-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 00:13:20 Last Seen2024-04-30 15:54:21 Times Seen8 Hash 46eb5e4c96acbb0086a9e865b5282c60 63fe3193a179364894ae7358bcd67096019d8370 6e4d9eceddbc80561051c2241c9da2657ce512fb1fe1ca35c4c698465b98a7ba Loading...

	cdn.ampproject.org/v0/amp-analytics-0.1.js	113 kB	2024-04-24	2024-04-30
Pretty URL cdn.ampproject.org/v0/amp-analytics-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 22:27:22 Last Seen2024-04-30 19:28:41 Times Seen43 Hash 04e1880db4cdd3cbfcbe2b04dd19392e 5546ad89fd2046519affc06959fde666380cee6c 7ae1368f53ed9125d6b81ea2a456c5240e5494ec26124e9d2448bc53443e8f27 Loading...

	cdn.ampproject.org/v0/amp-sidebar-0.1.js	31 kB	2024-04-25	2024-04-30
Pretty URL cdn.ampproject.org/v0/amp-sidebar-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 00:13:20 Last Seen2024-04-30 21:05:30 Times Seen23 Hash faa6d28df6d92df3e3a283cb48ad06f8 d156ad9927ed90c0a4e10d24201b1d221495f848 a8aa12f4db04964e0ebcc49a4fc965e0002d7a214fe2745c5c7ea88e5f4e7148 Loading...

HTTP Transactions (26)

URL IP Response Size

165.22.62.234/

165.22.62.234

200 OK

6.9 kB

URL User Request GET HTTP/1.1
165.22.62.234/
IP
165.22.62.234:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerZeroSSL
Subject165.22.62.234
FingerprintA2:6A:3F:7B:59:D8:79:8F:6C:AA:60:AE:EA:03:90:D2:FE:A4:05:16
ValiditySat, 09 Mar 2024 00:00:00 GMT - Fri, 07 Jun 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
6.9 kB (6915 bytes)
Hash
c14195ac6664f08b8034d4ef04790a42
2c0762060238549ee336a23265bf977b23fb3832
abf1dfa06db91990813a8d65126e7df217c0eb4c633619915fc533ce3cfa28ca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 165.22.62.234
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 22:12:46 GMT
Server: Apache/2.4.57 (Ubuntu)
Last-Modified: Mon, 18 Mar 2024 14:29:43 GMT
ETag: "a15a-613f03044fa26-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6915
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

cdn.ampproject.org/v0/amp-accordion-0.1.js

216.58.207.193

200 OK

5.8 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-accordion-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (17480)
Size
5.8 kB (5828 bytes)
Hash
46eb5e4c96acbb0086a9e865b5282c60
63fe3193a179364894ae7358bcd67096019d8370
6e4d9eceddbc80561051c2241c9da2657ce512fb1fe1ca35c4c698465b98a7ba

HTTP Headers

GET /v0/amp-accordion-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5828
date: Wed, 24 Apr 2024 22:12:47 GMT
expires: Wed, 24 Apr 2024 22:12:47 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "5fb918f53ec9a187"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-analytics-0.1.js

216.58.207.193

200 OK

32 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-analytics-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (65534)
Size
32 kB (32181 bytes)
Hash
04e1880db4cdd3cbfcbe2b04dd19392e
5546ad89fd2046519affc06959fde666380cee6c
7ae1368f53ed9125d6b81ea2a456c5240e5494ec26124e9d2448bc53443e8f27

HTTP Headers

GET /v0/amp-analytics-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 32181
date: Wed, 24 Apr 2024 22:12:47 GMT
expires: Wed, 24 Apr 2024 22:12:47 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "8abac515a1dc14dc"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-sidebar-0.1.js

216.58.207.193

200 OK

9.6 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-sidebar-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (31247)
Size
9.6 kB (9646 bytes)
Hash
faa6d28df6d92df3e3a283cb48ad06f8
d156ad9927ed90c0a4e10d24201b1d221495f848
a8aa12f4db04964e0ebcc49a4fc965e0002d7a214fe2745c5c7ea88e5f4e7148

HTTP Headers

GET /v0/amp-sidebar-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 9646
date: Wed, 24 Apr 2024 22:12:47 GMT
expires: Wed, 24 Apr 2024 22:12:47 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "0e86908e1c35cf48"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-carousel-0.2.js

216.58.207.193

200 OK

9.6 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-carousel-0.2.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (33698)
Size
9.6 kB (9572 bytes)
Hash
e26ce08aff2c3638b113c4582c194c24
9ae98c2c929b0138a10ce824da1cd1744c3a625e
a47cacc431d3cd791d493ee327bb80086ceb8674c35b0acd2491695dc844e0ca

HTTP Headers

GET /v0/amp-carousel-0.2.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 9572
date: Wed, 24 Apr 2024 22:12:47 GMT
expires: Wed, 24 Apr 2024 22:12:47 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "db8299fcd20eb269"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-lightbox-0.1.js

216.58.207.193

200 OK

8.5 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-lightbox-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (26547)
Size
8.5 kB (8509 bytes)
Hash
d156272ec438cc4f6b395e84d2ed5ab6
88d9cc75f304601bbe0048e616c669ba0fd4757e
be1685cbf62af0bc6f3673c7dd9ad16cbbf4b7b70686925408c6cecc0522b09f

HTTP Headers

GET /v0/amp-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 8509
date: Wed, 24 Apr 2024 22:12:47 GMT
expires: Wed, 24 Apr 2024 22:12:47 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "dbcc8c1ea6142dc7"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0.js

216.58.207.193

200 OK

73 kB

URL GET HTTP/2
cdn.ampproject.org/v0.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64654)
Size
73 kB (73093 bytes)
Hash
93b22676750227c6081037abf8baa351
d3c33bea647267cd0fef7c24d1431c40409b74b5
53da1339a0555a71431c0bbfb2bf946f300ee9d5fc2e5b9e0b424c93a2506a82

HTTP Headers

GET /v0.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 73093
date: Wed, 24 Apr 2024 22:12:47 GMT
expires: Wed, 24 Apr 2024 22:12:47 GMT
cache-control: private, max-age=3000, stale-while-revalidate=1206600
etag: "224c86d2f329f14e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-form-0.1.js

216.58.207.193

200 OK

15 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-form-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (50824)
Size
15 kB (14995 bytes)
Hash
4b97053d29f0a226b10630d96976cda9
e50d99f428f319cd74256360290f126035c9e6ec
6c7640e8e81f3cce965b863d94f3da33e3cb0540cde7f06d52bfddad301cbbf2

HTTP Headers

GET /v0/amp-form-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 14995
date: Wed, 24 Apr 2024 22:12:47 GMT
expires: Wed, 24 Apr 2024 22:12:47 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "0879e152b38110cf"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js

216.58.207.193

200 OK

3.9 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404091947000/v0/amp-loader-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (12614)
Size
3.9 kB (3935 bytes)
Hash
c62cd4c81f0172d7ac84d15281d3fa09
8a966261eaadac311a2d6ae4f32942883911ec01
1f5211c3d83be6fa51f5b9face5beda901221f2a6cf261acb3bbf47d89594126

HTTP Headers

GET /rtv/012404091947000/v0/amp-loader-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://165.22.62.234
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 3935
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 18:03:29 GMT
expires: Thu, 24 Apr 2025 18:03:29 GMT
cache-control: public, max-age=31536000
etag: "14ee94e1b9693284"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 14959
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js

216.58.207.193

200 OK

3.0 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404091947000/v0/amp-auto-lightbox-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
Fingerprint49:07:4A:21:AA:02:3C:78:A7:B4:D3:71:AA:98:EE:0F:2D:3F:5C:99
ValidityMon, 18 Mar 2024 19:42:57 GMT - Mon, 10 Jun 2024 19:42:56 GMT

File type
JavaScript source, ASCII text, with very long lines (7690)
Size
3.0 kB (2974 bytes)
Hash
bd778223dafaed0894e021593ad5dcbf
ef1a45e18a85060334571cdc9eaf1e9435b5ffe9
2b753b9c13fe907246062aa577f7837fbd2ffebe71dec501c4cd6de494016ac8

HTTP Headers

GET /rtv/012404091947000/v0/amp-auto-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://165.22.62.234
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 2974
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 18:03:29 GMT
expires: Thu, 24 Apr 2025 18:03:29 GMT
cache-control: public, max-age=31536000
etag: "dfcaaf971da6dba2"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 14959
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://165.22.62.234
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 589068
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://165.22.62.234
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 589068
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://165.22.62.234
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:00 GMT
expires: Fri, 18 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 589068
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.8.1/webfonts/fa-solid-900.woff2

172.67.142.245

200 OK

74 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.8.1/webfonts/fa-solid-900.woff2
IP
172.67.142.245:443
ASN
#13335 CLOUDFLARENET

Requested by
https://165.22.62.234/
Certificate
IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 74256, version 329.-17761
Size
74 kB (74256 bytes)
Hash
418dad87601f9c8abd0e5798c0dc1feb
a6b003ef506e92d05cde73adf67487d7fd7ec6df
f18c486a80175cf02fee0e05c2b4acd86c04cdbaecec61c1ef91f920509b5efe

HTTP Headers

GET /releases/v5.8.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://165.22.62.234
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:12:48 GMT
content-type: font/woff2
content-length: 74256
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "418dad87601f9c8abd0e5798c0dc1feb"
last-modified: Fri, 22 Sep 2023 01:45:57 GMT
vary: Origin, Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=enToF7UtU3ylbU1BTrinvp%2BPI4tSHm5Ha2%2BWHBKBvVYIrmJBfFOv9jMhFzKLKNKogEugWwvo%2FEiZNNdNH7EJduPeC7lDCtMAOCDW894qFZnEuvjk%2BrQSQSNhT4XA%2BhH76Y7KNzn%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87996fdc9d921c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.rbtasset.com/assets/tpl/5e7174b7ea/images/background.jpg

172.67.207.180

200 OK

46 kB

URL GET HTTP/2
cdn.rbtasset.com/assets/tpl/5e7174b7ea/images/background.jpg
IP
172.67.207.180:443
ASN
#13335 CLOUDFLARENET

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectrbtasset.com
Fingerprint05:C1:E4:FB:F2:88:F0:97:A4:E3:B2:2B:C0:3C:D3:B3:76:98:9B:92
ValiditySat, 13 Apr 2024 05:58:09 GMT - Fri, 12 Jul 2024 05:58:08 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1902x1578, components 3
Size
46 kB (46402 bytes)
Hash
45d6fa03d78176c50cd575d6a2c361bf
cd0ff6770a7043e1bf5cbaac587328c5d8a64bfb
8a7d99751bc15bd44476b596bd35a3e137ea79a9a9a055a1c9ee7db51e7914f2

HTTP Headers

GET /assets/tpl/5e7174b7ea/images/background.jpg HTTP/1.1
Host: cdn.rbtasset.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:12:49 GMT
content-type: image/jpeg
content-length: 46402
x-amz-id-2: 4VJcGyC6EMnZV112Lqa17TfllOl6FMMsTUB5vzfXvnU42AJvEO9AlIVhFuD3GqYWC5dXj3Io/yU=
x-amz-request-id: AH7CXDJ3XNEJ5FTA
last-modified: Mon, 23 May 2022 23:46:17 GMT
x-amz-version-id: null
etag: "45d6fa03d78176c50cd575d6a2c361bf"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXjZT1mcVBIIs33g%2F7YMu7SM77TvJom3F48lcdVcFls0Lm0%2FWSxYEU1aLgdMgiVJzUK0jKfxCTouNTo3CjoC%2FJaqh59vzPdOapGqo%2BcHWFJfNnW8cHCx4NAFZXV2aFcSS5I2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87996fdd3ac7b52d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kilat.digital/images/2024/01/20/58117fab8ba7ebfe8f6bfb1e5f47a56c.png

188.114.97.1

200 OK

12 kB

URL GET HTTP/2
kilat.digital/images/2024/01/20/58117fab8ba7ebfe8f6bfb1e5f47a56c.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://165.22.62.234/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 200 x 80, 8-bit/color RGBA, non-interlaced
Size
12 kB (12061 bytes)
Hash
98f0e9e680956d51b7f12ab38dbe93d8
44bb80d73fa01e551b9dda01b655404fa03805a5
25ebe9f493fb784638699a2f607add3b0c7588cd915ecd77714ecb8ddc451906

HTTP Headers

GET /images/2024/01/20/58117fab8ba7ebfe8f6bfb1e5f47a56c.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:12:49 GMT
content-type: image/png
content-length: 12061
last-modified: Sat, 20 Jan 2024 11:14:40 GMT
etag: "2f1d-60f5eb3f69f92"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B0kcYwllBjxwviFG%2FYcKLe%2Byedl6I4wXepOHB96hEftU371IKaPZwmwRBNBvKkfR86%2BPJT9ItNZuO2sHp2%2Be%2Fu9BWzYMzEszCQjXVqUKgd5aEYOua7g7wuLs5h2QA5gG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87996fdd6f7856c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kilat.digital/images/2024/02/03/308bd0b5f40ee79ce3f20581f307dcf9.png

188.114.97.1

200 OK

182 kB

URL GET HTTP/2
kilat.digital/images/2024/02/03/308bd0b5f40ee79ce3f20581f307dcf9.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://165.22.62.234/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 1200 x 114, 8-bit/color RGBA, non-interlaced
Size
182 kB (182502 bytes)
Hash
311289e198a05e1445efab7d9f05c025
d288c7f715891f565b9f66aa7b724ca2d0025d84
036a60aebc702a1597e2e7624cdb7aa193e7f330d0dd7400b8a84d641f032c4c

HTTP Headers

GET /images/2024/02/03/308bd0b5f40ee79ce3f20581f307dcf9.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:12:49 GMT
content-type: image/png
content-length: 182502
last-modified: Sat, 03 Feb 2024 08:29:08 GMT
etag: "2c8e6-6107605bf7f79"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DZlJYBNQZyKroNbGvXRX1NQv020sBLw%2FuZL3dZowSlVQTHP7jAJKMWq2SX8OTmLk4p5EUTZTy%2BHkhQVFElCN6i9AawuHv34iObMy9NUZvqbuVi1wIcJ7aeBb4pP7RYn8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87996fdd7f7b56c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kilat.digital/images/2024/02/05/b6509e3c128a8da1fb0b952aa9822903.png

188.114.97.1

200 OK

427 kB

URL GET HTTP/2
kilat.digital/images/2024/02/05/b6509e3c128a8da1fb0b952aa9822903.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://165.22.62.234/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
PNG image data, 1570 x 732, 8-bit/color RGBA, non-interlaced
Size
427 kB (427360 bytes)
Hash
c090c1c865346af00deeb6c86a823fc9
a4f1fb1c8094fb49b12c897046869cb27de52f37
b22433dd470cb1a225972de7e9fd3df50f5452ea04578029ca6bf2a3f0899753

HTTP Headers

GET /images/2024/02/05/b6509e3c128a8da1fb0b952aa9822903.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:12:49 GMT
content-type: image/png
content-length: 427360
last-modified: Mon, 05 Feb 2024 14:31:20 GMT
etag: "68560-610a350beb2ee"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8nZhAMkK9wPo4seX5llxvNK1nnOBibkruV6gbUMYCSTV%2Brn3z8vjWwXehfMhx%2FdOz722rpl2RkD1%2BAf1EGqr09nVLoHxarVM4%2BsyCEUh6Epj8CIem39tOlD8KEwoqTJo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87996fdd8f8d56c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kilat.digital/images/2024/03/18/8b8fad15967888d7b55059c346d0126d.jpg

188.114.97.1

200 OK

454 kB

URL GET HTTP/2
kilat.digital/images/2024/03/18/8b8fad15967888d7b55059c346d0126d.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://165.22.62.234/
Certificate
IssuerLet's Encrypt
Subjectkilat.digital
Fingerprint71:56:AC:43:F6:D9:0E:08:A9:5E:B1:75:DB:31:20:3F:64:9E:B4:62
ValiditySat, 30 Mar 2024 15:47:11 GMT - Fri, 28 Jun 2024 15:47:10 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 1200x500, components 3
Size
454 kB (453594 bytes)
Hash
9cfd29c25a9af4bb63256dd82413329d
bb76729f432f0d51173ec83360371c30b89a9c34
45dfdf50de2f2ff1473a58bd909ec1fb0ef9a49696992b565171f035da7c773d

HTTP Headers

GET /images/2024/03/18/8b8fad15967888d7b55059c346d0126d.jpg HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:12:49 GMT
content-type: image/jpeg
content-length: 453594
last-modified: Mon, 18 Mar 2024 14:19:31 GMT
etag: "6ebda-613f00bd45d94"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V0EeaNK%2BlDXWv1eJMAe2anSgaWhzIH%2FYUEvA1Qbn4MjGL1%2F5x8VFu%2BYopXRTF49vK6xcjUFXHHWku0g83nDU%2FvloS7m5uQ1KbwdgKa2Asj%2Fic2PJAj626srY7eWeAEQB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87996fdd5f6556c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

sgp1.digitaloceanspaces.com/alexisimage/front/apk/LOGO%20APK%20ALX.png

103.253.144.208

200 OK

135 kB

URL GET HTTP/2
sgp1.digitaloceanspaces.com/alexisimage/front/apk/LOGO%20APK%20ALX.png
IP
103.253.144.208:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://165.22.62.234/
Certificate
IssuerDigiCert Inc
Subject*.sgp1.digitaloceanspaces.com
FingerprintA8:92:F3:D1:4B:84:DB:36:4C:05:F4:43:5A:A4:13:0B:34:0E:47:00
ValidityFri, 01 Dec 2023 00:00:00 GMT - Tue, 17 Dec 2024 23:59:59 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
135 kB (134609 bytes)
Hash
0a7119ea12fad4a8264374fea18821c2
edc5665064bbe999c1ceec661e554f0cc8574727
5248bf4bd64af1137d8055b1a2002c15edcdfe3329c8ed6d417637aef320d368

HTTP Headers

GET /alexisimage/front/apk/LOGO%20APK%20ALX.png HTTP/1.1
Host: sgp1.digitaloceanspaces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-length: 134609
accept-ranges: bytes
last-modified: Wed, 13 Dec 2023 00:45:27 GMT
x-rgw-object-type: Normal
etag: "0a7119ea12fad4a8264374fea18821c2"
x-amz-request-id: tx000000212e88746748fcc-00662983e1-3b763ced-sgp1b
content-type: image/png
date: Wed, 24 Apr 2024 22:12:49 GMT
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster: 
X-Firefox-Spdy: h2

sgp1.digitaloceanspaces.com/alexisimage/front/apk/LOGO%20APK%20ALX.png

103.253.144.208

200 OK

135 kB

URL GET HTTP/2
sgp1.digitaloceanspaces.com/alexisimage/front/apk/LOGO%20APK%20ALX.png
IP
103.253.144.208:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://165.22.62.234/
Certificate
IssuerDigiCert Inc
Subject*.sgp1.digitaloceanspaces.com
FingerprintA8:92:F3:D1:4B:84:DB:36:4C:05:F4:43:5A:A4:13:0B:34:0E:47:00
ValidityFri, 01 Dec 2023 00:00:00 GMT - Tue, 17 Dec 2024 23:59:59 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
135 kB (134609 bytes)
Hash
0a7119ea12fad4a8264374fea18821c2
edc5665064bbe999c1ceec661e554f0cc8574727
5248bf4bd64af1137d8055b1a2002c15edcdfe3329c8ed6d417637aef320d368

HTTP Headers

GET /alexisimage/front/apk/LOGO%20APK%20ALX.png HTTP/1.1
Host: sgp1.digitaloceanspaces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 134609
accept-ranges: bytes
last-modified: Wed, 13 Dec 2023 00:45:27 GMT
x-rgw-object-type: Normal
etag: "0a7119ea12fad4a8264374fea18821c2"
x-amz-request-id: tx000009e78065039ef72dc-00662983e1-3b76793b-sgp1b
content-type: image/png
date: Wed, 24 Apr 2024 22:12:49 GMT
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster: 
X-Firefox-Spdy: h2

sgp1.digitaloceanspaces.com/alexisimage/front/apk/LOGO%20APK%20ALX.png

103.253.144.208

200 OK

135 kB

URL GET HTTP/2
sgp1.digitaloceanspaces.com/alexisimage/front/apk/LOGO%20APK%20ALX.png
IP
103.253.144.208:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://165.22.62.234/
Certificate
IssuerDigiCert Inc
Subject*.sgp1.digitaloceanspaces.com
FingerprintA8:92:F3:D1:4B:84:DB:36:4C:05:F4:43:5A:A4:13:0B:34:0E:47:00
ValidityFri, 01 Dec 2023 00:00:00 GMT - Tue, 17 Dec 2024 23:59:59 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
135 kB (134609 bytes)
Hash
0a7119ea12fad4a8264374fea18821c2
edc5665064bbe999c1ceec661e554f0cc8574727
5248bf4bd64af1137d8055b1a2002c15edcdfe3329c8ed6d417637aef320d368

HTTP Headers

GET /alexisimage/front/apk/LOGO%20APK%20ALX.png HTTP/1.1
Host: sgp1.digitaloceanspaces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 134609
accept-ranges: bytes
last-modified: Wed, 13 Dec 2023 00:45:27 GMT
x-rgw-object-type: Normal
etag: "0a7119ea12fad4a8264374fea18821c2"
x-amz-request-id: tx000009ab5b2cdb30783c8-00662983e1-3b763ced-sgp1b
content-type: image/png
date: Wed, 24 Apr 2024 22:12:49 GMT
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster: 
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,500;0,600;0,700;1,400&display=swap

142.250.74.106

200 OK

29 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,500;0,600;0,700;1,400&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (1572)
Size
29 kB (29285 bytes)
Hash
03d5f1b656f89fb0b8e7079d07130be7
e0117e79d7eda5f05caf8e9f4fcb3842e9040d1e
fada8e96d9a29f5849102e21a2380d7af968758831fccad0449cb04bfc43e4f5

HTTP Headers

GET /css2?family=Open+Sans:ital,wght@0,300;0,500;0,600;0,700;1,400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 22:12:47 GMT
date: Wed, 24 Apr 2024 22:12:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.8.1/css/all.css

172.67.142.245

200 OK

55 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.8.1/css/all.css
IP
172.67.142.245:443
ASN
#13335 CLOUDFLARENET

Requested by
https://165.22.62.234/
Certificate
IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (54926)
Size
55 kB (55111 bytes)
Hash
e4c542a7f6bf6f74fdd8cdf6e8096396
3a0571a695a35f238026b9398386dc99d9a0c56d
eeb17a45a48aca1d7adbcf04de155dcd0b47cb36ad036310446bb471fea9aaa3

HTTP Headers

GET /releases/v5.8.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:12:47 GMT
content-type: text/css
cache-control: max-age=31556926
etag: W/"e4c542a7f6bf6f74fdd8cdf6e8096396"
last-modified: Fri, 22 Sep 2023 01:45:55 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 2473841
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bJyvHQqMl2ND0tdDZnLp0h%2F%2B6xKGB7NrAG1Cw44uhT%2BF4yV0O7YP8uVu1T1%2B%2F5RRDwmEmnJFGHMYU%2FYI8MjIYzEerJ0dnDvjcJdnYCbYpR2pVnMoB8jSNWYbdKUaozOFai3aMvvP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87996fd25a13712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

petir.io/tUcThD

104.21.31.139

302 Found

41 kB

URL User Request GET HTTP/2
petir.io/tUcThD
IP
104.21.31.139:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectpetir.io
Fingerprint52:85:F0:D3:BB:7E:90:9B:14:E3:23:41:4D:22:BA:B8:4D:A7:C5:42
ValiditySun, 24 Mar 2024 14:12:09 GMT - Sat, 22 Jun 2024 14:12:08 GMT

File type

Size
41 kB (41306 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /tUcThD HTTP/1.1
Host: petir.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 24 Apr 2024 22:12:45 GMT
content-type: text/html; charset=utf-8
location: https://165.22.62.234/
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
vary: Accept
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nbSbj05%2BffJjKsjpjyiWsR1yZ%2Bt%2BNMA9w39Cgum%2FBFrNIsVE6LqSYUPsL0nKH230kTlLD3kZ9wOiYfoHYV2C73%2Bn9ifqvC4%2BJyCP8To1sZZkZiG25fwmAlOEEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87996fc92be0569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.rbtasset.com/assets/tpl/5e7

172.67.207.180

404 Not Found

0 B

URL GET HTTP/2
cdn.rbtasset.com/assets/tpl/5e7
IP
172.67.207.180:443
ASN
#13335 CLOUDFLARENET

Requested by
https://165.22.62.234/
Certificate
IssuerGoogle Trust Services LLC
Subjectrbtasset.com
Fingerprint05:C1:E4:FB:F2:88:F0:97:A4:E3:B2:2B:C0:3C:D3:B3:76:98:9B:92
ValiditySat, 13 Apr 2024 05:58:09 GMT - Fri, 12 Jul 2024 05:58:08 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/tpl/5e7 HTTP/1.1
Host: cdn.rbtasset.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://165.22.62.234/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 22:12:49 GMT
content-type: text/html
last-modified: Mon, 23 May 2022 23:44:00 GMT
x-amz-version-id: null
x-amz-error-code: NoSuchKey
x-amz-error-message: The specified key does not exist.
x-amz-error-detail-key: assets/tpl/5e7
x-amz-request-id: N7RWH1SKBX4PA1BK
x-amz-id-2: ynQE3euIZmkzOSgm4Y0NHLl+uowOgRXJamOLpzCa/jgjtdsJAUH0Bfbb41+V57veTPaf1/Xu0jc=
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ig1vBtRl5oADTkI2yk6x07U5l07imOcZP3fLSd8myKwBgQEIxcCm95c7icF5BemqAU5LVTGCUgUNlXsDYh1qrgCreKVypDgOjf5YMWOMUkAijF0ACY6N4V0kyzISLVhBog0E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87996fdd4ad0b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML