URL User Request GET HTTP/1.1 IP
ASN #133618 Trellian Pty. Limited
Certificate IssuerLet's Encrypt
Subjectspotfunding.in
FingerprintF5:5A:0A:66:1A:CE:4A:C0:2A:0E:B8:74:F6:AF:B4:92:A1:4C:77:DB
ValidityWed, 04 Oct 2023 22:32:07 GMT - Tue, 02 Jan 2024 22:32:06 GMT
Hash e1c06d85ae7b8b032bef47e42e4c08f9
71853c6197a6a7f222db0f1978c7cb232b87c5ee
75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070
GET / HTTP/1.1
Host: kekma.ga
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Tue, 28 Nov 2023 22:11:41 GMT
server: Apache
set-cookie: __tad=1701209501.7170702; expires=Fri, 25-Nov-2033 22:11:41 GMT; Max-Age=315360000
location: http://ww38.kekma.ga/
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash b7b5439dd8876539351e834e705e693a
bafca6dfab98b04d1f8ca5a3d057f3f7a1347058
9967372de62e3ccc356f9f7c41f7490930744eb14057de94995135fabbb23468
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.ga domain
GET / HTTP/1.1
Host: ww38.kekma.ga
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 22:11:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: skenzo
X-Buckets: bucket011
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_dFRF/patZxXWZz6rDUO+etTDYw2QHcOhm+4n/Hd7tMvZ5YjfNIM4CYinhTTdG+xhy+oOCNM/3MSl4mkKX0EVcw==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: kekma.ga
X-Subdomain: ww38
Content-Encoding: gzip
ww38.kekma.ga/favicon.ico
200 OK 0 B URL GET HTTP/1.1 ww38.kekma.ga/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.ga domain
GET /favicon.ico HTTP/1.1
Host: ww38.kekma.ga
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww38.kekma.ga/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 22:11:42 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
ifdnzact.com/?dn=kekma.ga&pid=9PO755G95
403 Forbidden 300 B URL GET HTTP/1.1 ifdnzact.com/?dn=kekma.ga&pid=9PO755G95
IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 79c85214e4de76610ce38f2d0789235c
e4866a448eb9f9dee02a55548b117d217c5e17f3
f64158dcba8f0841539e6327f37fec4ccee64fe88c23260fd09a445a7c3b94ec
GET /?dn=kekma.ga&pid=9PO755G95 HTTP/1.1
Host: ifdnzact.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww38.kekma.ga/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Tue, 28 Nov 2023 22:11:42 GMT
Server: Apache
Content-Length: 300
Keep-Alive: timeout=5, max=128
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
103.224.182.253
76.223.26.96
208.91.196.46