Report - skybytequest.link/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10623737

Report Overview

Visited public
2025-04-15 06:52:34
Tags
URL
skybytequest.link/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10623737
Finishing URL
skybytequest.link/
IP / ASN
172.67.213.249
#13335 CLOUDFLARENET
Title
Web Server's Default Page

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
assets.plesk.com	120376	1999-06-13	2016-07-25	2025-04-10	4.5 kB	318 kB	95.173.205.15
firehose.us-west-2.amazonaws.com	5730	2005-08-18	2017-01-30	2025-04-13	1.9 kB	1.3 kB	35.89.72.88
skybytequest.link	unknown	unknown	No data	No data	2.1 kB	2.9 kB	104.21.23.224

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-15 06:52:12	low	Client IP	104.21.23.224	ETPRO INFO HTTP Request to a *.link domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	assets.plesk.com/static/default-website-content/public/default-server-index.js	ScriptElement	26 kB	2025-02-28	2025-05-08
Pretty URL assets.plesk.com/static/default-website-content/public/default-server-index.js IP 95.173.205.15 ASN #60068 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-28 15:44 Last Seen2025-05-08 03:33 Times Seen412 Hash b82a725c0d380aaada5c4edc9be7a8b9 b6a0d909849d49efbe7e89440f0fdf7b55cd3e88 1ea2c4dd39c9013df6a77271ad85d7e7184a77e8a07704dab1c846d8f093efd4 Loading...

	assets.plesk.com/static/default-website-content/public/bundle.js	ScriptElement	129 kB	2025-02-28	2025-05-08
Pretty URL assets.plesk.com/static/default-website-content/public/bundle.js IP 95.173.205.15 ASN #60068 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-28 15:44 Last Seen2025-05-08 03:33 Times Seen443 Hash 9ffaef4408e704ce4a2b2e3e95b863f4 0814f348a9acbd4d9dc89cac792f177628c29c0c 1a2df5cd5528034057b522c3e3a7e8dc20cfdb67e93224bf56b0d119fc5b235b Loading...

		Size	First Seen	Last Seen
	#1 Write - e2a635aca4718016bb9089b1b0388a0d	16 kB	2025-04-15 06:52	2025-04-15 06:52
Pretty Observations First Seen2025-04-15 06:52 Last Seen2025-04-15 06:52 Times Seen1 Hash e2a635aca4718016bb9089b1b0388a0d 6fe48df27367b96936e5d2a5d80e83cb5e73ef84 6e3b2fac8698f17f4f288dd8da43cea1a4e4f1abcd7a83084da088df5f00eb6a Loading...

HTTP Transactions (15)

URL IP Response Size

skybytequest.link/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10623737

104.21.23.224

302 Found

432 B

URL User Request GET
skybytequest.link/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10623737
IP
104.21.23.224:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectskybytequest.link
Fingerprint8B:69:A5:71:39:57:EA:8B:E6:EE:93:35:21:D5:70:F8:F8:85:E1:C4
ValidityWed, 09 Apr 2025 10:03:57 GMT - Tue, 08 Jul 2025 11:02:28 GMT

File type

Size
432 B (432 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10623737 HTTP/1.1
Host: skybytequest.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 15 Apr 2025 06:52:12 GMT
content-length: 0
location: http://skybytequest.link/
server: cloudflare
cf-cache-status: DYNAMIC
set-cookie: wssplashchk=b27813ac7e6289a375be4fb6cefca3ff440621d5.1744703532.0; HttpOnly; SameSite=Lax; Path=/; Domain=skybytequest.link; Max-Age=3600
cf-ray: 930984ce98ef568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/default-server-index.js

95.173.205.15

200 OK

26 kB

URL GET
assets.plesk.com/static/default-website-content/public/default-server-index.js
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (17206)
Size
26 kB (26501 bytes)
Hash
b82a725c0d380aaada5c4edc9be7a8b9
b6a0d909849d49efbe7e89440f0fdf7b55cd3e88
1ea2c4dd39c9013df6a77271ad85d7e7184a77e8a07704dab1c846d8f093efd4

HTTP Headers

GET /static/default-website-content/public/default-server-index.js HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: W/"67c0804c-6785"
expires: Mon, 03 Mar 2025 05:37:13 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2302:111BA0:5600DB8:56BAE3E:67C53DB1
via: 1.1 varnish
age: 420
x-served-by: cache-fra-eddf8230175-FRA
x-cache-hits: 1
x-timer: S1741012512.572451,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: edec15ac12423eca326020f3612b0f23bf1cc539
x-77-nzt: EwwBX63NDQH3KQAAAAwBuUwKCQH3DAIAAAwBJRPCNAG3BgAAAA
x-77-nzt-ray: 2a494a15866a76ee4102fe67f405371c
x-77-cache: HIT
x-77-age: 41
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/logo-81ca7a.svg

95.173.205.15

200 OK

2.1 kB

URL GET
assets.plesk.com/static/default-website-content/public/img/logo-81ca7a.svg
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
SVG Scalable Vector Graphics image
Size
2.1 kB (2099 bytes)
Hash
50f16a34400340b368e0ac5a991997f4
acba5b50993b1ac89f8ecf9531dd2561fb9d8038
a459426d178bf696ac29aed37f5c2e73e24ee716d578678440b6513f54721b7e

HTTP Headers

GET /static/default-website-content/public/img/logo-81ca7a.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: W/"67c0804c-833"
expires: Mon, 03 Mar 2025 12:49:45 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2637:1D298:21173C6:215A3FF:67C5A310
via: 1.1 varnish
age: 55
x-served-by: cache-fra-eddf8230112-FRA
x-cache-hits: 1
x-timer: S1741012254.584825,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 84f4081906e3235b07f6d2b27239be4fcd24b191
x-77-nzt: EwwBX63NDQG2XAIAAAwBuUwKAQH3vQEAAAwBJRPCNAG3CQEAAA
x-77-nzt-ray: 2a494a15866a76ee4102fe6784595a25
x-77-cache: HIT
x-77-age: 604
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/bundle.js

95.173.205.15

200 OK

129 kB

URL GET
assets.plesk.com/static/default-website-content/public/bundle.js
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
129 kB (129076 bytes)
Hash
9ffaef4408e704ce4a2b2e3e95b863f4
0814f348a9acbd4d9dc89cac792f177628c29c0c
1a2df5cd5528034057b522c3e3a7e8dc20cfdb67e93224bf56b0d119fc5b235b

HTTP Headers

GET /static/default-website-content/public/bundle.js HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: W/"67c0804c-1f834"
expires: Mon, 03 Mar 2025 14:38:41 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 6C7C:1044F2:61861F7:6259BAC:67C5BC98
via: 1.1 varnish
age: 366
x-served-by: cache-fra-eddf8230176-FRA
x-cache-hits: 1
x-timer: S1741012487.377107,VS0,VE3
vary: Accept-Encoding
x-fastly-request-id: 300e5a03904729503f23a55004bf83d04ed99e6f
x-77-nzt: EwwBX63NDQH3DwIAAAwBuUwKCQH3MwEAAAwBw7WvAgG3HwAAAA
x-77-nzt-ray: 2a494a15866a76ee4102fe673515f025
x-77-cache: HIT
x-77-age: 527
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/wpg-b313a8.svg

95.173.205.15

200 OK

1.3 kB

URL GET
assets.plesk.com/static/default-website-content/public/img/wpg-b313a8.svg
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
SVG Scalable Vector Graphics image
Size
1.3 kB (1304 bytes)
Hash
67b7f0f50fe6837597cc7ea4ac4e3fa3
9aafb23c2c7b4466d0ab05e3e115c82757706762
a205e44bdfd4d85a52d1412f0923f5cbdaae73050ac51529fb70b7a80c4d0b93

HTTP Headers

GET /static/default-website-content/public/img/wpg-b313a8.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: W/"67c0804c-518"
expires: Mon, 03 Mar 2025 12:34:29 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 24EE:23DB89:37723B0:37EF6E3:67C59F7C
via: 1.1 varnish
age: 1
x-served-by: cache-fra-eddf8230034-FRA
x-cache-hits: 1
x-timer: S1741012485.319258,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: a9f483abc46bc4717a44dd3be392dd7bd44f7339
x-77-nzt: EwwBX63NDQG2XAIAAAwBuUwKCQH3SwAAAAwBw7WvBgG3AQAAAA
x-77-nzt-ray: 2a494a15866a76ee4102fe677cee8225
x-77-cache: HIT
x-77-age: 604
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

firehose.us-west-2.amazonaws.com/

35.89.72.88

200 OK

0 B

URL OPTIONS
firehose.us-west-2.amazonaws.com/
IP
35.89.72.88:443
ASN
#16509 AMAZON-02

Requested by
https://skybytequest.link/
Certificate
IssuerAmazon
Subjectfirehose.us-west-2.amazonaws.com
Fingerprint56:5A:F6:C1:A5:D7:9D:59:BC:81:67:3D:BE:9C:EE:BE:F9:11:62:4F
ValidityTue, 07 Jan 2025 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS / HTTP/1.1
Host: firehose.us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: amz-sdk-invocation-id,amz-sdk-request,authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Referer: https://skybytequest.link/
Origin: https://skybytequest.link
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amzn-RequestId: ea1f909f-31e1-6361-8a67-94c2019eedb7
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Access-Control-Allow-Headers: amz-sdk-invocation-id,amz-sdk-request,authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Access-Control-Allow-Methods: POST
Access-Control-Expose-Headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Access-Control-Max-Age: 172800
Content-Length: 20
Date: Tue, 15 Apr 2025 06:52:13 GMT

skybytequest.link/

104.21.23.224

200 OK

432 B

URL User Request GET
skybytequest.link/
IP
104.21.23.224:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectskybytequest.link
Fingerprint8B:69:A5:71:39:57:EA:8B:E6:EE:93:35:21:D5:70:F8:F8:85:E1:C4
ValidityWed, 09 Apr 2025 10:03:57 GMT - Tue, 08 Jul 2025 11:02:28 GMT

File type
HTML document, ASCII text
Size
432 B (432 bytes)
Hash
605758fc07fab09e8972bc577186edab
ac300aaedd4022723873447aadb3366ae04c3409
604cf633a6315780304dd556a498442c4ad25c8e73944fc59c51d0abad8a6b31

Detections

NIDS	Severity	Alert
suricata	low	ETPRO INFO HTTP Request to a *.link domain

HTTP Headers

GET / HTTP/1.1
Host: skybytequest.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: wssplashchk=b27813ac7e6289a375be4fb6cefca3ff440621d5.1744703532.0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: text/html
server: cloudflare
last-modified: Mon, 19 Jun 2023 12:01:39 GMT
cf-cache-status: DYNAMIC
vary: Accept-Encoding
content-encoding: br
cf-ray: 930984cf9a1d568b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/robot-4b152c.svg

95.173.205.15

200 OK

89 kB

URL GET
assets.plesk.com/static/default-website-content/public/img/robot-4b152c.svg
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
SVG Scalable Vector Graphics image
Size
89 kB (89014 bytes)
Hash
a11790af7b8e734f7391d2695e96bfc8
af73e0993f9a486721d75bc21d6eb6e17104ece9
01084e18312cb2af2d6b89b7348a7f1e5ae8faf10c0bd9ce478dd38adb2955a3

HTTP Headers

GET /static/default-website-content/public/img/robot-4b152c.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: W/"67c0804c-15bb6"
expires: Mon, 03 Mar 2025 13:35:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 586F:1D298:222F61A:227493C:67C5ADD1
age: 542
via: 1.1 varnish
x-served-by: cache-fra-eddf8230049-FRA
x-cache-hits: 0
x-timer: S1741012487.454565,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: ff3b0a6748a1e5360e971303106b950ec22f4b2e
x-77-nzt: EwwBX63NDQG2KwYAAAwBuUwKEwH3HwIAAAwB1GY4EQG3IQAAAA
x-77-nzt-ray: 2a494a15866a76ee4102fe67df5b5b27
x-77-cache: HIT
x-77-age: 1579
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

skybytequest.link/

104.21.23.224

301 Moved Permanently

432 B

URL User Request GET
skybytequest.link/
IP
104.21.23.224:80
ASN
#13335 CLOUDFLARENET

File type

Size
432 B (432 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	low	ETPRO INFO HTTP Request to a *.link domain

HTTP Headers

GET / HTTP/1.1
Host: skybytequest.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: wssplashchk=b27813ac7e6289a375be4fb6cefca3ff440621d5.1744703532.0
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Apr 2025 06:52:12 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 15 Apr 2025 07:52:12 GMT
Location: https://skybytequest.link/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g01YC8tYjAMo7hbk87YRroAakoUTFzy93bU08S9pLknXuifTC3CcGeETppmAxsqWV%2Bj%2FJB%2B0PvxGXlJIeXvW%2BPyZzM4736pkYW1ZNiIHuuoiPLHclrcwXf%2Bx8Z4UMqGlgGnO7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 930984cf5e3f0b51-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=453&min_rtt=453&rtt_var=226&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=477&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

assets.plesk.com/static/default-website-content/public/fonts/inter-v12-latin-regular-be7cb1.woff2

95.173.205.15

200 OK

17 kB

URL GET
assets.plesk.com/static/default-website-content/public/fonts/inter-v12-latin-regular-be7cb1.woff2
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
Web Open Font Format (Version 2), TrueType, length 16708, version 1.0
Size
17 kB (16708 bytes)
Hash
68c477c4c76baab3a8d1ef6a55aa986f
4af50379e13514558dd53d123db8ea101ec5e24c
0364d368abf457d4e70dbc7a7a360f3486eaea2837b194915b23d4398bee91ac

HTTP Headers

GET /static/default-website-content/public/fonts/inter-v12-latin-regular-be7cb1.woff2 HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skybytequest.link/
Origin: https://skybytequest.link
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: font/woff2
content-length: 16708
permissions-policy: interest-cohort=()
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: "67c0804c-4144"
expires: Mon, 03 Mar 2025 07:18:04 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: B64D:309F96:56C8C34:57875B9:67C55554
age: 353
via: 1.1 varnish
x-served-by: cache-fra-eddf8230036-FRA
x-cache-hits: 0
x-timer: S1741012487.320975,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: a70a3ff9d1dfc4cbdd7600d2599844fe422d2acb
x-77-nzt: EwwBX63NDQG2XAIAAAwBuUwKAQH30QAAAAwBw7WvBgG3HwAAAA
x-77-nzt-ray: 2a494a1578993fef4102fe67e7845228
x-77-cache: HIT
x-77-age: 604
server: CDN77-Turbo
x-77-pop: osloNO
accept-ranges: bytes
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/stars-fb15b6.svg

95.173.205.15

200 OK

24 kB

URL GET
assets.plesk.com/static/default-website-content/public/img/stars-fb15b6.svg
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
SVG Scalable Vector Graphics image
Size
24 kB (23587 bytes)
Hash
18aa9407cb97208391f24bcef249457f
c76eef71591d7d92fb30f51b49dadf16ae600a05
30628c4c5254e81ed7f953bd449c6976ce87210089c4b221f00c3a7a5d597736

HTTP Headers

GET /static/default-website-content/public/img/stars-fb15b6.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: W/"67c0804c-5c23"
expires: Mon, 03 Mar 2025 12:49:23 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2D1E:5C51B:3C04677:3C89374:67C5A2FA
via: 1.1 varnish
age: 79
x-served-by: cache-fra-eddf8230097-FRA
x-cache-hits: 1
x-timer: S1741012254.596226,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: b11e47ad22e8447d6c81b7517379450b4e258023
x-77-nzt: EwwBX63NDQG2XAIAAAwBuUwKAQH3wgEAAAwB1GY4EQG3CQEAAA
x-77-nzt-ray: 2a494a15866a76ee4102fe674b1f4a27
x-77-cache: HIT
x-77-age: 604
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: osloNO
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/favicon-fc0691.ico

95.173.205.15

200 OK

4.3 kB

URL GET
assets.plesk.com/static/default-website-content/public/favicon-fc0691.ico
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
650b28c6cf1b473aed15ba26bad1da92
63f99c1d32ab6387db0f981f242fcefcb875ac21
1f7437e15be65fcfd977e547e957da7950167f957deeac877086e9b66c11be87

HTTP Headers

GET /static/default-website-content/public/favicon-fc0691.ico HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: image/vnd.microsoft.icon
content-length: 4286
permissions-policy: interest-cohort=()
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: "67c0804c-10be"
expires: Sun, 02 Mar 2025 19:44:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: D9BF:2AFE21:4587328:46249AC:67C4B2CC
age: 423
via: 1.1 varnish
x-served-by: cache-fra-eddf8230097-FRA
x-cache-hits: 0
x-timer: S1741012488.521098,VS0,VE4
vary: Accept-Encoding
x-fastly-request-id: e2967217d40b20cb8312f36d04409d15255c8c51
x-77-nzt: EwwBX63NDQH3SwEAAAwBuUwKEwH3IAIAAAwB1GY4EQG3IQAAAA
x-77-nzt-ray: 2a494a15866a76ee4102fe671847c82d
x-77-cache: HIT
x-77-age: 331
server: CDN77-Turbo
x-77-pop: osloNO
accept-ranges: bytes
X-Firefox-Spdy: h2

skybytequest.link/favicon.ico

0.0.0.0

0 B

URL GET
skybytequest.link/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://skybytequest.link/
Certificate
IssuerGoogle Trust Services
Subjectskybytequest.link
Fingerprint8B:69:A5:71:39:57:EA:8B:E6:EE:93:35:21:D5:70:F8:F8:85:E1:C4
ValidityWed, 09 Apr 2025 10:03:57 GMT - Tue, 08 Jul 2025 11:02:28 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: skybytequest.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Cookie: wssplashchk=b27813ac7e6289a375be4fb6cefca3ff440621d5.1744703532.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

assets.plesk.com/static/default-website-content/public/fonts/inter-v12-latin-700-54321e.woff2

95.173.205.15

200 OK

18 kB

URL GET
assets.plesk.com/static/default-website-content/public/fonts/inter-v12-latin-700-54321e.woff2
IP
95.173.205.15:443
ASN
#60068 Datacamp Limited

Requested by
https://skybytequest.link/
Certificate
IssuerLet's Encrypt
Subject1226552209.rsc.cdn77.org
FingerprintDC:AA:07:5C:A4:E9:4E:75:79:5E:06:6A:F6:53:09:49:16:49:70:37
ValiditySat, 12 Apr 2025 22:52:12 GMT - Fri, 11 Jul 2025 22:52:11 GMT

File type
Web Open Font Format (Version 2), TrueType, length 17784, version 1.0
Size
18 kB (17784 bytes)
Hash
8d7a3f034881d1712b3325cc71425c10
9594f24367800a20297a96c2d4f957e62c63e207
ced2d8e02e2fbf08d2edec9b5f13648ed8348588a05f7181632f3c1dd6e1f5c3

HTTP Headers

GET /static/default-website-content/public/fonts/inter-v12-latin-700-54321e.woff2 HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://skybytequest.link
DNT: 1
Connection: keep-alive
Referer: https://skybytequest.link/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 06:52:12 GMT
content-type: font/woff2
content-length: 17784
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 27 Feb 2025 15:10:04 GMT
access-control-allow-origin: *
etag: "67c0804c-4578"
expires: Mon, 03 Mar 2025 06:04:34 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 3CEE:3D5065:2B55C6C:2BB9444:67C5441A
via: 1.1 varnish
age: 568
x-served-by: cache-fra-eddf8230160-FRA
x-cache-hits: 1
x-timer: S1741012497.949735,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 0f4c5373db03dfdfcbdf7720e5c4390b70eac29a
x-77-nzt: EwwBX63NDQG2tQ0AAAwBuUwKAQH3gQAAAAwBJRPCLgG3XAAAAA
x-77-nzt-ray: 2a494a1578993fef4102fe67c0d86b28
x-77-cache: HIT
x-77-age: 3509
server: CDN77-Turbo
x-77-pop: osloNO
accept-ranges: bytes
X-Firefox-Spdy: h2

firehose.us-west-2.amazonaws.com/

35.89.72.88

200 OK

257 B

URL POST
firehose.us-west-2.amazonaws.com/
IP
35.89.72.88:443
ASN
#16509 AMAZON-02

Requested by
https://skybytequest.link/
Certificate
IssuerAmazon
Subjectfirehose.us-west-2.amazonaws.com
Fingerprint56:5A:F6:C1:A5:D7:9D:59:BC:81:67:3D:BE:9C:EE:BE:F9:11:62:4F
ValidityTue, 07 Jan 2025 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT

File type
JSON text data
Size
257 B (257 bytes)
Hash
50610d2c619840900cbdfa60ad901cb9
32dbc0df1d06a8f3f32584821998dc77fc1430ff
ca0dc1089059a51579106a73c8eb2ceed4ab9a220ebc41f89f7469394245ff3d

HTTP Headers

POST / HTTP/1.1
Host: firehose.us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skybytequest.link/
amz-sdk-invocation-id: aafba220-e003-4bfb-85c9-f4bdef8689b3
amz-sdk-request: attempt=1; max=3
authorization: AWS4-HMAC-SHA256 Credential=AKIAR4YEYRJL6JKBNRGP/20250415/us-west-2/firehose/aws4_request, SignedHeaders=amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=9b4e82c592b38557997152e49e572cf2b370c4cfb0cd3c0ccca43e377c8c8695
content-type: application/x-amz-json-1.1
x-amz-content-sha256: bb93821a900922ae56bb57e6a65d84165375a0453244b5f1d39d05bc2dbd89cd
x-amz-date: 20250415T065212Z
x-amz-target: Firehose_20150804.PutRecord
x-amz-user-agent: aws-sdk-js/3.750.0 ua/2.1 os/Windows#NT-10.0 lang/js md/browser#Firefox_134.0 api/firehose#3.750.0 m/N,E,e
Content-Length: 108
Origin: https://skybytequest.link
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amzn-RequestId: e9b225bd-bad8-371b-89ca-21e08aa7b9cd
Access-Control-Allow-Origin: *
Content-Encoding: gzip
x-amz-id-2: UOABsIksA+GYDOAJqaDAGBW7mgO7TRFGiF0pLaXK/MApnlFJcf8UXyFHDOESOwhOqGD6wM9R5F4++mtMP4avkP2q30Pg1sDw
Access-Control-Expose-Headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date
Content-Type: application/x-amz-json-1.1
Content-Length: 245
Date: Tue, 15 Apr 2025 06:52:13 GMT

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (15)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL OPTIONS

IP

ASN

Requested by

Certificate

File type

Size