Report - gravitas.zip

Report Overview

Visited public
2025-05-13 01:23:59
Tags
URL
gravitas.zip
Finishing URL
gravitas.zip/
IP / ASN
52.60.87.163
#16509 AMAZON-02
Title
Future home of gravitas.zip

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
park.101datacenter.net	392253	2008-05-13	2013-07-12	2025-05-09	5.5 kB	218 kB	172.67.7.15
gravitas.zip	unknown	unknown	No data	No data	878 B	18 kB	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-13 01:23:26	low	Client IP	52.60.87.163	ET INFO HTTP Request to a *.zip Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	gravitas.zip/	ScriptElement	76 B	2023-05-11	2025-05-22
Pretty URL gravitas.zip/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-11 08:49 Last Seen2025-05-22 09:58 Times Seen223 Hash 0c76c6539c04e0354a5fe7ff8589748e f558d5b50a08d366c89d97998e64201a70b0fa8d 46cc18d6fc0e732affd03e9eff63a2e3edba57e1eb9795b9df54b399fbd52373 Loading...

	gravitas.zip/	ScriptElement	951 B	2025-02-20	2025-05-22
Pretty URL gravitas.zip/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-02-20 15:36 Last Seen2025-05-22 09:58 Times Seen140 Hash c1157cb39a45cfc1a39bd05f7f463004 97287f8008c02d9a2e8fbd73a4b5ee26d12579f7 caacca90fcca8cbbc2e0862a3b7b7167828eaff9882a15ab6a2acd3dfd724d3e Loading...

	gravitas.zip/	EventHandler	16 B	2023-04-10	2025-05-27
Pretty URL gravitas.zip/ IP 0.0.0.0 ASN #0 Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 15:57 Last Seen2025-05-27 19:36 Times Seen58076 Hash 7c3c3ddeb80438dcbb3d081d2d00e152 5a4016732ee72ec77b4f6ab17047bcea6d2ea34d 321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187 Loading...

	park.101datacenter.net/js/modernizr-webp.js?20250129072709	ScriptElement	3.4 kB	2023-03-07	2025-05-27
Pretty URL park.101datacenter.net/js/modernizr-webp.js?20250129072709 IP 172.67.7.15 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-27 13:07 Times Seen457 Hash 925b1cfb3ff415d8a781c0a026a8f096 c7b3e086a5789ca2f8df8ea8b11148c23a5c785a 0db8807e1b34fff0005dfd2ee5e01e4467aa208a9e63f3291eeed6c2f1c47de9 Loading...

	park.101datacenter.net/js/jquery-3.6.0.min.js?20250129072709	ScriptElement	90 kB	2023-03-07	2025-05-27
Pretty URL park.101datacenter.net/js/jquery-3.6.0.min.js?20250129072709 IP 172.67.7.15 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-27 19:56 Times Seen208216 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	park.101datacenter.net/js/pricing.js?20250129072709	ScriptElement	606 B	2023-05-11	2025-05-22
Pretty URL park.101datacenter.net/js/pricing.js?20250129072709 IP 172.67.7.15 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-11 08:49 Last Seen2025-05-22 09:58 Times Seen221 Hash 204295cfd4d1502f3c1bc591ba36cca3 cdc48416758bfdaeb946dc45700f32baa794c5ab 60db63b470cc59eb8216e43f90d7d409fb756cd959f5ec9733a355cb9073e817 Loading...

HTTP Transactions (14)

URL IP Response Size

park.101datacenter.net/css/fonts/LatoRegular.woff2

172.67.7.15

200 OK

30 kB

URL GET
park.101datacenter.net/css/fonts/LatoRegular.woff2
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
Web Open Font Format (Version 2), TrueType, length 29972, version 1.6816
Size
30 kB (29972 bytes)
Hash
5ed8f1590f6b5d8bc6ad949de9431924
6fcc8495e05ef53fd194ad6367238027ef2fd978
0fa35932ff9db1dfaae8556dd614a089d19f6eecc4912ef640a79ed7d9161f4e

HTTP Headers

GET /css/fonts/LatoRegular.woff2 HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gravitas.zip/
Origin: http://gravitas.zip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: application/octet-stream
content-length: 29972
expires: Mon, 19 May 2025 16:38:55 GMT
cache-control: max-age=604800, public
access-control-allow-origin: *
pragma: public
x-cached: HIT
cf-cache-status: MISS
last-modified: Tue, 13 May 2025 01:23:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ee59b9c89056a3-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/images/vendor-1/park-back.webp

172.67.7.15

200 OK

49 kB

URL GET
park.101datacenter.net/images/vendor-1/park-back.webp
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 1880x1068, Scaling: [none]x[none], YUV color, decoders should clamp
Size
49 kB (48726 bytes)
Hash
ff057d51ff01d0f96d0c6d40465856ce
96fadbbd20f25aec54dd22e4c702b79bef40b919
912d6196356fd8f1e3f8f3127923ab30b0c8f5da3e438c54d9eb7c2853be29cb

HTTP Headers

GET /images/vendor-1/park-back.webp HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:27 GMT
content-type: image/webp
content-length: 48726
last-modified: Wed, 29 Jan 2025 19:27:09 GMT
x-cached: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ee59b9bdb3568b-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/js/pricing.js?20250129072709

172.67.7.15

200 OK

606 B

URL GET
park.101datacenter.net/js/pricing.js?20250129072709
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
JavaScript source, ASCII text
Size
606 B (606 bytes)
Hash
204295cfd4d1502f3c1bc591ba36cca3
cdc48416758bfdaeb946dc45700f32baa794c5ab
60db63b470cc59eb8216e43f90d7d409fb756cd959f5ec9733a355cb9073e817

HTTP Headers

GET /js/pricing.js?20250129072709 HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
expires: Mon, 12 May 2025 19:12:04 GMT
cache-control: max-age=604800, public
pragma: public
x-cached: HIT
content-encoding: gzip
cf-cache-status: HIT
age: 390701
last-modified: Thu, 08 May 2025 12:51:45 GMT
server: cloudflare
cf-ray: 93ee59bb3e53568b-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/images/vendor-1/google_workspace.png

172.67.7.15

200 OK

5.3 kB

URL GET
park.101datacenter.net/images/vendor-1/google_workspace.png
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
PNG image data, 501 x 65, 8-bit colormap, non-interlaced
Size
5.3 kB (5322 bytes)
Hash
1d2be97a63a6b6e2e4c39cc4ce184026
e4185a511002aca3b555f7d07b896387f132f789
39553aa0b9de92a5c788d9e8ee0d53898485b106898c1d5e9bfdf6a341e72058

HTTP Headers

GET /images/vendor-1/google_workspace.png HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: image/png
content-length: 5322
expires: Mon, 12 May 2025 19:12:05 GMT
cache-control: max-age=604800, public
pragma: public
x-cached: HIT
cf-cache-status: HIT
age: 467725
last-modified: Wed, 07 May 2025 15:28:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ee59b9cdc1568b-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/images/vendor-1/com.png

172.67.7.15

200 OK

1.5 kB

URL GET
park.101datacenter.net/images/vendor-1/com.png
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
PNG image data, 198 x 62, 8-bit colormap, non-interlaced
Size
1.5 kB (1546 bytes)
Hash
008711522a83f8d57758f228cc764641
1e5c498b07506675f7ac522b4940b6348ad69abc
cf74299ec44a8b72522ec4c2a2aa9aafc9af08a8e17b1d82becaeea32020fe5a

HTTP Headers

GET /images/vendor-1/com.png HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: image/png
content-length: 1546
expires: Mon, 12 May 2025 17:47:44 GMT
cache-control: max-age=604800, public
pragma: public
x-cached: HIT
cf-cache-status: HIT
age: 145810
last-modified: Sun, 11 May 2025 08:53:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 93ee59b9cdc2568b-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/pricing.json?e[]=.com&

172.67.7.15

200 OK

253 B

URL GET
park.101datacenter.net/pricing.json?e[]=.com&
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
JSON text data
Size
253 B (253 bytes)
Hash
e03c829619af6b729e04e8447cc4c520
c7c352d0db7beb96ccd271c98e6effb4aa9f794f
8d9e0ad4a1f2b4d427eddb6c29fed46e03efbf60391e41cf173de8b1eb4bbd5a

HTTP Headers

GET /pricing.json?e[]=.com& HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://gravitas.zip
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:27 GMT
content-type: application/json
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=86400
expires: Tue, 13 May 2025 16:41:55 +0000
content-security-policy: default-src 'self' 'unsafe-inline' https://park.101datacenter.net data:
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-cached: HIT
content-encoding: gzip
cf-cache-status: MISS
last-modified: Tue, 13 May 2025 01:23:27 GMT
server: cloudflare
cf-ray: 93ee59bbc95f56a3-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/images/vendor-1/101domain-logo.svg

172.67.7.15

200 OK

17 kB

URL GET
park.101datacenter.net/images/vendor-1/101domain-logo.svg
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
SVG Scalable Vector Graphics image
Size
17 kB (16752 bytes)
Hash
a8aeb09af06a4c30cf1c69e18f22ba0a
f28861c2876d11b0e17ea86d7daa616121138022
7f87647bab6f121d1ecd9936c42cf0c44619470561fde643ce4e222e57a73e29

HTTP Headers

GET /images/vendor-1/101domain-logo.svg HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 29 Jan 2025 19:27:09 GMT
x-cached: HIT
content-encoding: gzip
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 93ee59b9cdba568b-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/images/vendor-1/google-reviews.svg

172.67.7.15

200 OK

7.6 kB

URL GET
park.101datacenter.net/images/vendor-1/google-reviews.svg
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
SVG Scalable Vector Graphics image
Size
7.6 kB (7559 bytes)
Hash
449da14a3f910b064d6cc0cf39741e9b
84e1a91b126879f87d5c1aec823b41d71a7de6b4
390fae207c0bdcc2494252c8f5a27a78a77a5ed68b55c49cbb8f819dbcaf62e4

HTTP Headers

GET /images/vendor-1/google-reviews.svg HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 29 Jan 2025 19:27:09 GMT
x-cached: HIT
content-encoding: gzip
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 93ee59b9ddc6568b-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/js/modernizr-webp.js?20250129072709

172.67.7.15

200 OK

3.4 kB

URL GET
park.101datacenter.net/js/modernizr-webp.js?20250129072709
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
JavaScript source, ASCII text, with very long lines (3302)
Size
3.4 kB (3401 bytes)
Hash
925b1cfb3ff415d8a781c0a026a8f096
c7b3e086a5789ca2f8df8ea8b11148c23a5c785a
0db8807e1b34fff0005dfd2ee5e01e4467aa208a9e63f3291eeed6c2f1c47de9

HTTP Headers

GET /js/modernizr-webp.js?20250129072709 HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
expires: Mon, 12 May 2025 19:12:04 GMT
cache-control: max-age=604800, public
pragma: public
x-cached: HIT
content-encoding: gzip
cf-cache-status: HIT
age: 390701
last-modified: Thu, 08 May 2025 12:51:45 GMT
server: cloudflare
cf-ray: 93ee59b9bdb1568b-OSL
X-Firefox-Spdy: h2

gravitas.zip/

0.0.0.0

0 B

URL User Request GET
gravitas.zip/
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET / HTTP/1.1
Host: gravitas.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

gravitas.zip/

52.60.87.163

200 OK

18 kB

URL User Request GET
gravitas.zip/
IP
52.60.87.163:80
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (4215)
Size
18 kB (17667 bytes)
Hash
3d1dcfae263ec404f5fa28212c7250f8
9b09aa8fe8b4b6db2460561ccd7568dc88b78356
6ce80cf3d73de741f463e49afbec9e73ca336f2d703af025563239837676d957

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.zip Domain

HTTP Headers

GET / HTTP/1.1
Host: gravitas.zip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 13 May 2025 01:23:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Cache-Control: max-age=604800
Expires: Tue, 20 May 2025 01:23:12 +0000
Content-Security-Policy: default-src 'self' 'unsafe-inline' https://park.101datacenter.net  https://*.deviceatlascloud.com/ https://cs.deviceatlas-cdn.com data:
Access-Control-Allow-Origin: https://park.101datacenter.net
X-Frame-Options: SAMEORIGIN
X-Cached: HIT
Content-Encoding: gzip

park.101datacenter.net/images/vendor-1/trustpilot.svg

172.67.7.15

200 OK

6.0 kB

URL GET
park.101datacenter.net/images/vendor-1/trustpilot.svg
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
SVG Scalable Vector Graphics image
Size
6.0 kB (6016 bytes)
Hash
6cb8ddfdb17f6292148a48b00108ba15
a59b629093150cbbc3fd4777a485468d462df91a
f659e2bd3547af9bde8f2c19684629b18cfb4b39a40a814c0f9bed61c1033818

HTTP Headers

GET /images/vendor-1/trustpilot.svg HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 29 Jan 2025 19:27:09 GMT
x-cached: HIT
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 93ee59b9ddc5568b-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/css/vendor-1.css?20250129072709

172.67.7.15

200 OK

3.2 kB

URL GET
park.101datacenter.net/css/vendor-1.css?20250129072709
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
ASCII text, with CRLF line terminators
Size
3.2 kB (3204 bytes)
Hash
ae65b7a53e35eeaa20ef0cf95892b69b
381918b2bafa9ccfdb2ce0b04e42bb71004f3c31
0aea9661f24fc94ac544d79d478d91e02a50f8170657909aef1b302bbaeed00e

HTTP Headers

GET /css/vendor-1.css?20250129072709 HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
expires: Mon, 12 May 2025 19:12:04 GMT
cache-control: max-age=604800, public
pragma: public
x-cached: HIT
content-encoding: gzip
cf-cache-status: HIT
age: 499421
last-modified: Wed, 07 May 2025 06:39:45 GMT
server: cloudflare
cf-ray: 93ee59b9bdae568b-OSL
X-Firefox-Spdy: h2

park.101datacenter.net/js/jquery-3.6.0.min.js?20250129072709

172.67.7.15

200 OK

90 kB

URL GET
park.101datacenter.net/js/jquery-3.6.0.min.js?20250129072709
IP
172.67.7.15:443
ASN
#13335 CLOUDFLARENET

Requested by
http://gravitas.zip/
Certificate
IssuerLet's Encrypt
Subject101datacenter.net
FingerprintC8:CA:61:57:28:8D:FC:F3:1E:B7:F2:06:75:4E:75:E2:D1:00:1E:C6
ValiditySat, 26 Apr 2025 01:31:31 GMT - Fri, 25 Jul 2025 01:31:30 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
90 kB (89501 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /js/jquery-3.6.0.min.js?20250129072709 HTTP/1.1
Host: park.101datacenter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gravitas.zip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 13 May 2025 01:23:26 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
expires: Mon, 12 May 2025 19:33:59 GMT
cache-control: max-age=604800, public
pragma: public
x-cached: HIT
content-encoding: gzip
cf-cache-status: HIT
age: 499422
last-modified: Wed, 07 May 2025 06:39:44 GMT
server: cloudflare
cf-ray: 93ee59b9bdb2568b-OSL
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size