Report - www.pea.xa-th.com

Report Overview

Visited public
2024-01-25 03:18:54
Tags
Submit Tags
URL
www.pea.xa-th.com
Finishing URL
line.me/ti/p/bjqYoClZ7x
IP / ASN
18.140.121.63
#16509 AMAZON-02
Title
LINE Add Friend

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.pea.xa-th.com	unknown	unknown	No data	No data	472 B	480 B	18.140.121.63
line.me	3205	2008-04-29	2015-09-10 04:48:32	2024-01-23 08:53:26	905 B	6.1 kB	147.92.243.206
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2024-01-25 00:59:01	510 B	17 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-01-25 00:19:00	440 B	11 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	GET www.pea.xa-th.com/	18.140.121.63	302 Found	0 B
URL User Request GET HTTP/2 www.pea.xa-th.com/ IP 18.140.121.63:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subjectwww.pea.xe-th.com Fingerprint51:85:E6:CC:38:BB:67:2A:D9:FC:9B:DE:87:4D:00:36:D5:8A:2A:33 ValidityWed, 27 Dec 2023 07:04:19 GMT - Tue, 26 Mar 2024 07:04:18 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: www.pea.xa-th.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx date: Thu, 25 Jan 2024 03:18:34 GMT content-length: 0 access-control-allow-methods: POST,GET,OPTIONS,DELETE,token access-control-allow-origin: * content-encoding: gzip location: https://line.me/ti/p/bjqYoClZ7x vary: Accept-Encoding x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-request-id: dA3EL5oj9LhWAHYllGyLPb5JCz5TBWAv x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2`

	GET line.me/ti/p/bjqYoClZ7x	147.92.243.206	200	4.5 kB
URL User Request GET HTTP/1.1 line.me/ti/p/bjqYoClZ7x IP 147.92.243.206:443 ASN #38631 LINE Corporation Certificate IssuerGlobalSign nv-sa Subject.line.me FingerprintF8:54:23:3A:D6:56:3D:E1:B0:A0:39:E7:DC:9A:04:53:F5:C1:E1:F8 ValidityThu, 10 Aug 2023 02:36:02 GMT - Tue, 10 Sep 2024 02:36:01 GMT File type HTML document, ASCII text, with very long lines (5754) Size 4.5 kB (4460 bytes) Hash 1e440bec35690d4f4d822140c7dfd87c e2c945edc405c9ea1205c0442262d83a58f1bea1 f5d719d5bac8dd51dfa00c973491f1436df517f1f4fd22ca5a3e9c65318455fd HTTP Headers `GET /ti/p/bjqYoClZ7x HTTP/1.1 Host: line.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 Server: openresty Date: Thu, 25 Jan 2024 03:18:35 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Content-Language: en-US Strict-Transport-Security: max-age=43200 Content-Encoding: gzip`

	GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2	216.58.207.227	200 OK	16 kB
URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by https://line.me/ti/p/bjqYoClZ7x Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com Fingerprint6F:8C:8C:6F:06:BF:0D:24:7E:8D:3D:09:0D:07:26:DF:C3:6E:47:C0 ValidityMon, 11 Dec 2023 08:09:11 GMT - Mon, 04 Mar 2024 08:09:10 GMT File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0 Size 16 kB (15744 bytes) Hash 15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615 HTTP Headers `GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://line.me DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 15744 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Wed, 24 Jan 2024 19:02:01 GMT expires: Thu, 23 Jan 2025 19:02:01 GMT cache-control: public, max-age=31536000 last-modified: Wed, 11 May 2022 19:24:48 GMT content-type: font/woff2 age: 29795 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	GET line.me/favicon-16x16.png	147.92.243.206	200 OK	632 B
URL GET HTTP/1.1 line.me/favicon-16x16.png IP 147.92.243.206:443 ASN #38631 LINE Corporation Requested by https://line.me/ti/p/bjqYoClZ7x Certificate IssuerGlobalSign nv-sa Subject.line.me FingerprintF8:54:23:3A:D6:56:3D:E1:B0:A0:39:E7:DC:9A:04:53:F5:C1:E1:F8 ValidityThu, 10 Aug 2023 02:36:02 GMT - Tue, 10 Sep 2024 02:36:01 GMT File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Size 632 B (632 bytes) Hash dd1367d140185c15c8dc3e79d94d1a2e 88ea24dd791f7185304cbd66d14a0dff8a05b19e 93e75cb632f692368f70368b20ec75e9c4aa2dbd4b1883c5612868a2c365762c HTTP Headers `GET /favicon-16x16.png HTTP/1.1 Host: line.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://line.me/ti/p/bjqYoClZ7x Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: openresty Date: Thu, 25 Jan 2024 03:18:36 GMT Content-Type: image/png Content-Length: 632 Connection: keep-alive Accept-Ranges: bytes Last-Modified: Tue, 16 Jan 2024 00:04:21 GMT x-rgw-object-type: Normal x-amz-meta-s3cmd-attrs: md5:dd1367d140185c15c8dc3e79d94d1a2e x-amz-storage-class: STANDARD Cache-Control: public,max-age=300 ETag: "dd1367d140185c15c8dc3e79d94d1a2e" Vary: Origin X-Cache: Hit from cloudfront Via: 1.1 8db6e780114a9278703d6f539bb3bf14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: NRT20-P2 X-Amz-Cf-Id: IEDmj1xBgjngV4QjGQfSxaMZHmYdgn2jIeF0z8E4Jkgqt3Iby1UKUQ== Age: 286 Set-Cookie: ldsuid=4e3a2e0250f103748e77f43000d59d18; path=/; expires=Wed, 24-Apr-24 03:18:36 GMT Strict-Transport-Security: max-age=43200

	GET fonts.googleapis.com/css?family=Roboto:700,300,400,100,500	142.250.74.106	200 OK	11 kB
URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:700,300,400,100,500 IP 142.250.74.106:443 ASN #15169 GOOGLE Requested by https://line.me/ti/p/bjqYoClZ7x Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint59:56:55:62:78:0C:21:25:FB:11:29:98:6E:A8:21:EF:64:2B:33:C0 ValidityMon, 11 Dec 2023 08:09:11 GMT - Mon, 04 Mar 2024 08:09:10 GMT File type ASCII text Size 11 kB (10615 bytes) Hash dbdc7ee435c6a7f4277bfc7fedf28368 8194a5d7e0108bed7abb001d8bf2b8985a5aa2ca 91b113cbf5aedc9b93ceebe313863344b1ead775a618a7e9f31f9e98dbbdf227 HTTP Headers `GET /css?family=Roboto:700,300,400,100,500 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://line.me/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 25 Jan 2024 03:18:35 GMT date: Thu, 25 Jan 2024 03:18:35 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2