| |  43.159.106.210 | 200 OK | 367 B |
URL User Request GET HTTP/1.1IP43.159.106.210:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeHTML document, ASCII text Hash697cb3c0aa23704ccb1604612e14c280 174cecbaa2b52952574c7e03115c89659470a862 55b584905ef3684d99b4ae5b2e1d6aa077d7497461e643043c139cf6a21a860b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "697cb3c0aa23704ccb1604612e14c280"
Content-Type: text/html
Server: tencent-cos
x-cos-hash-crc64ecma: 8141371190293126250
x-cos-meta-md5: 697cb3c0aa23704ccb1604612e14c280
x-cos-request-id: NjYyOWQ1YmRfZDc4YzdjMWVfZmZjMF81NzAyZTNl
Accept-Ranges: bytes
Last-Modified: Thu, 25 Apr 2024 02:48:52 GMT
Content-Encoding: gzip
Content-Length: 367
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:03 GMT
EO-LOG-UUID: 3411612346437451073
EO-Cache-Status: HIT
|
|
| layercraft.co/fonts/Poppins.css | 43.159.106.210 | 200 OK | 475 B |
URL GET HTTP/1.1layercraft.co/fonts/Poppins.css IP43.159.106.210:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
Hashb835cbdb4901c12255d1ac903c4018a5 6ec7a0620078fd98af267fb0d56c85f7bc234b46 d1b4877fed3cdcb5a34cbdd7b16299af5c5118689efa08858fa2228c088752ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/Poppins.css HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "b835cbdb4901c12255d1ac903c4018a5"
Content-Type: text/css
Server: tencent-cos
x-cos-hash-crc64ecma: 17498601093943815696
x-cos-meta-md5: b835cbdb4901c12255d1ac903c4018a5
x-cos-request-id: NjYyOWMxZjlfZjM3NWI3MDlfMTZhYmFfNTZhNDFjYg==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:09 GMT
Content-Encoding: br
Content-Length: 475
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:04 GMT
EO-LOG-UUID: 11668849805996990680
EO-Cache-Status: HIT
|
|
| layercraft.co/umi.3ab83230.css | 43.159.106.210 | 200 OK | 2.1 kB |
URL GET HTTP/1.1layercraft.co/umi.3ab83230.css IP43.159.106.210:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeASCII text, with very long lines (6875) Hash8389928352c23360d8617d8c26bef066 2fe8c8e725da85a3c3fbccb52304044f0d9bd6cc d032f59e4dcbbfaa21f05f6ad43d9a571c843e13709c7350226b68ae7796031f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /umi.3ab83230.css HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "8389928352c23360d8617d8c26bef066"
Content-Type: text/css
Server: tencent-cos
x-cos-hash-crc64ecma: 17568420884644679354
x-cos-meta-md5: 8389928352c23360d8617d8c26bef066
x-cos-request-id: NjYyOWJmZmJfZGY4YzdjMWVfOTE2NV81NmI0MTVk
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:04 GMT
Content-Encoding: br
Content-Length: 2055
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:04 GMT
EO-LOG-UUID: 1584968855728932803
EO-Cache-Status: HIT
|
|
| layercraft.co/framework.29d95dc6.js | 43.159.106.210 | 200 OK | 52 kB |
URL GET HTTP/1.1layercraft.co/framework.29d95dc6.js IP43.159.106.210:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (37508) Hash35c83955aa7a5f2443d1e293f966e7d1 ae0968c20b25a2f25181333e18940d6cb8ade255 c0638c5c9dfb84198c289b83d53fdf5e6ac9ac5308f72ce293902cf83b564081
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /framework.29d95dc6.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 24 Apr 2024 13:30:04 GMT
Content-Encoding: br
Etag: "35c83955aa7a5f2443d1e293f966e7d1"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 16716544662529753945
x-cos-meta-md5: 35c83955aa7a5f2443d1e293f966e7d1
x-cos-request-id: NjYyOWMwZTdfZDVhZTRkMGJfNTM3MV81NWU5MmUw
Content-Length: 52044
Accept-Ranges: bytes
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:04 GMT
EO-LOG-UUID: 11329124860921386437
EO-Cache-Status: HIT
|
|
| layercraft.co/umi.086bc4b1.js | 43.159.107.215 | 200 OK | 878 kB |
URL GET HTTP/1.1layercraft.co/umi.086bc4b1.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (25165) Size878 kB (878464 bytes) Hashb3dec5068ec58f8e5ccfde1ba2855a42 f0fb8737980460628d28fbb0db7b57c03b3f5272 9f4b77821d84b3974f379d0db497edbdb1eeaa004cd0ae94048b71dfdd147478
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /umi.086bc4b1.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "b3dec5068ec58f8e5ccfde1ba2855a42"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 7764531347289249002
x-cos-meta-md5: b3dec5068ec58f8e5ccfde1ba2855a42
x-cos-request-id: NjYyOWM2ODdfNjFlYzE1MGJfZjM0Zl81NjM0MjU3
Accept-Ranges: bytes
Last-Modified: Thu, 25 Apr 2024 02:48:50 GMT
Content-Encoding: br
Content-Length: 878464
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:04 GMT
EO-LOG-UUID: 17986379917348362736
EO-Cache-Status: HIT
|
|
| layercraft.co/favicon.png | 43.159.107.215 | 200 OK | 1.3 kB |
URL GET HTTP/1.1layercraft.co/favicon.png IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typePNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced Hash0c96653c21c0845e3620b152bc329b29 98d04d14e9808323a21239ca23da58b675171d4e 5c31b51dc01fcd24efe126dcf20e1f4d822a83861e17c592fb4c8d0bbe396275
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.png HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 24 Apr 2024 13:30:07 GMT
Etag: "0c96653c21c0845e3620b152bc329b29"
Content-Type: image/png
Server: tencent-cos
x-cos-hash-crc64ecma: 1539374138574853301
x-cos-meta-md5: 0c96653c21c0845e3620b152bc329b29
x-cos-request-id: NjYyOWJjYmVfNGJhZjRkMGJfMTJmNWZfNTZmNWViMQ==
Content-Length: 1344
Accept-Ranges: bytes
Connection: keep-alive
Cache-Control: max-age=3600
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 16875695030120101407
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-UZXCTib4r0qHDno2w1F2IlwK4FM_.1bd4780a.async.js | 43.159.107.215 | 200 OK | 13 kB |
URL GET HTTP/1.1layercraft.co/shared-UZXCTib4r0qHDno2w1F2IlwK4FM_.1bd4780a.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (33175) Hashfdfdf4a0627e8b92e1148608d2de6839 61eda200911cc6ee0bb43f7b26d6eddb949401c2 972159f4ccf7fd820f0cfe1eb7f4cfdb57ecae9a39dd4aef6b784957bfb0b5dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-UZXCTib4r0qHDno2w1F2IlwK4FM_.1bd4780a.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "fdfdf4a0627e8b92e1148608d2de6839"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 6640458425399956029
x-cos-meta-md5: fdfdf4a0627e8b92e1148608d2de6839
x-cos-request-id: NjYyOWMwZWZfYzkzNjEzMGJfMmI5ZmZfNTcwMWMzNw==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:08 GMT
Content-Encoding: br
Content-Length: 13351
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 14115044613258454644
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-3q3yEb8K9zunTyZzoI1TkNQXvU_.c9605579.async.js | 43.159.106.210 | 200 OK | 3.1 kB |
URL GET HTTP/1.1layercraft.co/shared-3q3yEb8K9zunTyZzoI1TkNQXvU_.c9605579.async.js IP43.159.106.210:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (5778) Hash1296ec47f17adfee96e84abeab8134c2 aae0f19e344da8f1e8d8f035cdccf57a0c4d4c27 157ff71b3f8f722f7e88351c0db93499c02a9b6e2108703dca5c43edab531fba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-3q3yEb8K9zunTyZzoI1TkNQXvU_.c9605579.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "1296ec47f17adfee96e84abeab8134c2"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 5944878756767791404
x-cos-meta-md5: 1296ec47f17adfee96e84abeab8134c2
x-cos-request-id: NjYyOWJmZmZfMWFlYzE1MGJfMjAyMzlfNTY3MzUwMg==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:08 GMT
Content-Encoding: br
Content-Length: 3057
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 10839973462410930066
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-tJtL1ufgNEcK8uFkFXoIcYiKwU_.3e66185a.async.js | 43.159.107.215 | 200 OK | 5.5 kB |
URL GET HTTP/1.1layercraft.co/shared-tJtL1ufgNEcK8uFkFXoIcYiKwU_.3e66185a.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (15273) Hashd341196c24a18eb6dc61c6a6cff964e7 297313463ecf1c971d75265569f24dcde80757cf 3a0527c326f81f395bf78667c053c9b30ab04451147ea1f33f3f4386164a8027
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-tJtL1ufgNEcK8uFkFXoIcYiKwU_.3e66185a.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "d341196c24a18eb6dc61c6a6cff964e7"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 15614570628413842294
x-cos-meta-md5: d341196c24a18eb6dc61c6a6cff964e7
x-cos-request-id: NjYyOWMzNWJfNGJhZjRkMGJfMTJmNmRfNTY3N2U4Zg==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:06 GMT
Content-Encoding: br
Content-Length: 5524
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 3661787682110802557
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-6kluX6rokvQuk5BtEcij-UKGJ4_.b57be652.async.js | 43.159.107.215 | 200 OK | 11 kB |
URL GET HTTP/1.1layercraft.co/shared-6kluX6rokvQuk5BtEcij-UKGJ4_.b57be652.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (27799) Hashcea901ff9a316380d2ac8d2c76344a37 fa0a1e6d3bfeac90062a04156a31d3a709466529 f1a3e6e39b3f0a7e526a0e7bb44049005cae30b41cd48df3a1127bf2941d5287
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-6kluX6rokvQuk5BtEcij-UKGJ4_.b57be652.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "cea901ff9a316380d2ac8d2c76344a37"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 318623509190083231
x-cos-meta-md5: cea901ff9a316380d2ac8d2c76344a37
x-cos-request-id: NjYyOWMwZWZfNWFmNGQwYl8xM2QwYV81NjQ4Njc3
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:05 GMT
Content-Encoding: br
Content-Length: 10797
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 1763534548238366322
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-uapaVbkdauF5K19vwc9jzk3pYNI_.0b72b2a4.async.js | 43.159.107.215 | 200 OK | 13 kB |
URL GET HTTP/1.1layercraft.co/shared-uapaVbkdauF5K19vwc9jzk3pYNI_.0b72b2a4.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (16630) Hash2b0e4e128fedcfaeea880c994d6b1ac4 6253caacbe36c6946b95390196e75ea16f326df8 090b53d850ca3a80ee605e2e490163e39943caa4f42af2801b02e742884b42b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-uapaVbkdauF5K19vwc9jzk3pYNI_.0b72b2a4.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "2b0e4e128fedcfaeea880c994d6b1ac4"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 11218673541601539215
x-cos-meta-md5: 2b0e4e128fedcfaeea880c994d6b1ac4
x-cos-request-id: NjYyOWMwZWVfZjg4YzdjMWVfNzNjXzU2YTNlNDA=
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:03 GMT
Content-Encoding: br
Content-Length: 12958
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 4663418800088527214
EO-Cache-Status: HIT
|
|
| layercraft.co/t__plugin-layout__Layout.8f39539f.chunk.css | 43.159.107.215 | 200 OK | 310 B |
URL GET HTTP/1.1layercraft.co/t__plugin-layout__Layout.8f39539f.chunk.css IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeASCII text, with very long lines (928) Hashcd15ecba9445f566522f7b974a4a9b0f d23698cbd6aef8139359a4c08b60c3c322942d0b 5179570e1991644fea7d386fb541ec88d2e2b50fa33bb5f0afc0992eb3a7d64a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /t__plugin-layout__Layout.8f39539f.chunk.css HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "cd15ecba9445f566522f7b974a4a9b0f"
Content-Type: text/css
Server: tencent-cos
x-cos-hash-crc64ecma: 9490919590561342041
x-cos-meta-md5: cd15ecba9445f566522f7b974a4a9b0f
x-cos-request-id: NjYyOWMwZWZfNWM5NjUyMGJfMTU4NWFfNTYzYTliYQ==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:08 GMT
Content-Encoding: br
Content-Length: 310
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 1154853978460463715
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-eTvgwDMjHChuWIXsu0GvfwTReQ_.2fec2578.async.js | 43.159.106.210 | 200 OK | 3.5 kB |
URL GET HTTP/1.1layercraft.co/shared-eTvgwDMjHChuWIXsu0GvfwTReQ_.2fec2578.async.js IP43.159.106.210:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (6151) Hash84f5850fdd0568ab445989658f87579c b01b39865200fa04ae40d0ab4c9f7a5f974c2bbe ddbf93b1a25da888995bfe708f28dce0a50747107b63ea896b1aa05112b47f2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-eTvgwDMjHChuWIXsu0GvfwTReQ_.2fec2578.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "84f5850fdd0568ab445989658f87579c"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 5730103374652079584
x-cos-meta-md5: 84f5850fdd0568ab445989658f87579c
x-cos-request-id: NjYyOWMwMDBfZGY4YzdjMWVfOTEzNF81NzNkNGY3
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:04 GMT
Content-Encoding: br
Content-Length: 3498
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 17737985420934245732
EO-Cache-Status: HIT
|
|
| layercraft.co/t__plugin-layout__Layout.b5f2e5e7.async.js | 43.159.107.215 | 200 OK | 100 kB |
URL GET HTTP/1.1layercraft.co/t__plugin-layout__Layout.b5f2e5e7.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (45376) Hash33e1c35ff59f3fb4f74dadf300d27089 fc1791b58970831082d52dda9224017fe6db316e b8e923dca7902f5fc03ab9c4c06a76a21827141eb2896738d47e8937a621aa56
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /t__plugin-layout__Layout.b5f2e5e7.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "33e1c35ff59f3fb4f74dadf300d27089"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 17297632145304834457
x-cos-meta-md5: 33e1c35ff59f3fb4f74dadf300d27089
x-cos-request-id: NjYyOWMwZjBfZGVlZjc4MGJfMWMxMmVfNTZlYzdjOQ==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:07 GMT
Content-Encoding: br
Content-Length: 99675
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 5711577392806445333
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-JRXxui7D9QAirdvtgadbqGEESw_.90c179bc.async.js | 43.159.106.210 | 200 OK | 3.8 kB |
URL GET HTTP/1.1layercraft.co/shared-JRXxui7D9QAirdvtgadbqGEESw_.90c179bc.async.js IP43.159.106.210:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (9464) Hash53f1edb26002f7337a645052853bd85a a5041b0fdb5347bb8893ea71af4aa68c7b0e3a3d 58f7863c94a6c881cb3b2076b0ee353a1c3a1de16492c4934aa4848418dd6c55
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-JRXxui7D9QAirdvtgadbqGEESw_.90c179bc.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "53f1edb26002f7337a645052853bd85a"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 13228917369642776429
x-cos-meta-md5: 53f1edb26002f7337a645052853bd85a
x-cos-request-id: NjYyOWMxYzVfM2NhZjQ4MGJfMzJjZWFfMTEwYzg1NA==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:05 GMT
Content-Encoding: br
Content-Length: 3778
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 3279620097179960923
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-Z8JcFPfIXcdWCulkswmOY257-l4_.6ae30475.async.js | 43.159.107.215 | 200 OK | 7.3 kB |
URL GET HTTP/1.1layercraft.co/shared-Z8JcFPfIXcdWCulkswmOY257-l4_.6ae30475.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (6727) Hash8c86a98a37dfdeba5d11bec63fd49e33 7ba6b39a567e8c6d396eb3d68d4161fa60140931 f31b766d45247c3adb22386f3adb651062826e4ba8d14fc9ffcf0e5e31760b02
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-Z8JcFPfIXcdWCulkswmOY257-l4_.6ae30475.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "8c86a98a37dfdeba5d11bec63fd49e33"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 4816861350144548348
x-cos-meta-md5: 8c86a98a37dfdeba5d11bec63fd49e33
x-cos-request-id: NjYyOWMwZjNfMTg3NmI3MDlfYzE0ZV81Njc0ODQw
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:03 GMT
Content-Encoding: br
Content-Length: 7275
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 7289528918388309314
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-PVynIde-9Vjwo5ysMmOCm6bUP5Q_.e328686a.async.js | 43.159.107.215 | 200 OK | 4.2 kB |
URL GET HTTP/1.1layercraft.co/shared-PVynIde-9Vjwo5ysMmOCm6bUP5Q_.e328686a.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (10236) Hashf8c6ab1c1a274b4c9088a8bb5090c27d b00fb94fc7228f8cb21feb4445d4b5bf96fc45ca 8953b8ec80f1239f478547163df45df73de6e0ac8b0cc81329293d8b2f4ae9a5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-PVynIde-9Vjwo5ysMmOCm6bUP5Q_.e328686a.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "f8c6ab1c1a274b4c9088a8bb5090c27d"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 8158562186665034246
x-cos-meta-md5: f8c6ab1c1a274b4c9088a8bb5090c27d
x-cos-request-id: NjYyOWMwMDFfZDBhYzQ4MGJfMzY5NzBfMTExMzhiOQ==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:05 GMT
Content-Encoding: br
Content-Length: 4228
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 15900310492008841044
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-F3dZE8TwsylQpCv0n0EeByzXlB0_.aaf92890.async.js | 43.159.107.215 | 200 OK | 140 kB |
URL GET HTTP/1.1layercraft.co/shared-F3dZE8TwsylQpCv0n0EeByzXlB0_.aaf92890.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size140 kB (140432 bytes) Hash6301048c70aebd3b40f94f49875b5c17 badc50e5d0844974911e0fa42e37bf2e23636086 0929e59b97857e057a34787f91123c0b88cb0ea689e3c504f9ff914f27efdd81
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-F3dZE8TwsylQpCv0n0EeByzXlB0_.aaf92890.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Thu, 25 Apr 2024 02:48:54 GMT
Content-Encoding: br
Etag: "6301048c70aebd3b40f94f49875b5c17"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 5707696889629565963
x-cos-meta-md5: 6301048c70aebd3b40f94f49875b5c17
x-cos-request-id: NjYyOWM1NTBfZjE4YzdjMWVfZjRiOF81NmIwZjkw
Content-Length: 140432
Accept-Ranges: bytes
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 1208461339096319116
EO-Cache-Status: HIT
|
|
| layercraft.co/web3modal-lib.d7fcaee8.async.js | 43.159.107.215 | 200 OK | 212 kB |
URL GET HTTP/1.1layercraft.co/web3modal-lib.d7fcaee8.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size212 kB (211843 bytes) Hashb4f7437a17ea18af74d212024f6b1a16 fc7fa986a5d7ddfc6a8ff5c71fcc168927ff4dee d7b86e3341813cb5cccaf6bbe9112cbd563aa30358d65be9aa6420f75db84445
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web3modal-lib.d7fcaee8.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 24 Apr 2024 13:30:04 GMT
Content-Encoding: br
Etag: "b4f7437a17ea18af74d212024f6b1a16"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 1150934018914942305
x-cos-meta-md5: b4f7437a17ea18af74d212024f6b1a16
x-cos-request-id: NjYyOWMwZjNfODY3NWI3MDlfOTQ0Yl81NjQwNjli
Content-Length: 211843
Accept-Ranges: bytes
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 11180018773750016095
EO-Cache-Status: HIT
|
|
| layercraft.co/wrappers__Base.8c6710cc.async.js | 43.159.107.215 | 200 OK | 247 kB |
URL GET HTTP/1.1layercraft.co/wrappers__Base.8c6710cc.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (45173) Size247 kB (246981 bytes) Hashbbdd049661102a7f9e3743d068e1de83 e0002474a58891017e2d65fa2c611e59ed25373c 8e890203e4925ce338119889b6449e2385b470bb807d84def0a291f5f3eac18f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wrappers__Base.8c6710cc.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "bbdd049661102a7f9e3743d068e1de83"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 14815825460219621944
x-cos-meta-md5: bbdd049661102a7f9e3743d068e1de83
x-cos-request-id: NjYyOWM0YzhfNGVjYzc4MGJfMTMzMjhfNTQwN2QyYg==
Accept-Ranges: bytes
Last-Modified: Thu, 25 Apr 2024 02:48:53 GMT
Content-Encoding: br
Content-Length: 246981
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:05 GMT
EO-LOG-UUID: 5549814649456828178
EO-Cache-Status: HIT
|
|
| fonts.cdnfonts.com/css/barlow |  104.21.72.124 | 200 OK | 7.4 kB |
URL GET HTTP/3fonts.cdnfonts.com/css/barlow IP104.21.72.124:443
CertificateIssuerGoogle Trust Services LLC Subjectcdnfonts.com FingerprintAA:60:46:5D:49:FA:16:2E:61:90:A6:B2:50:1E:CF:8E:0C:8B:D2:F0 ValidityWed, 27 Mar 2024 09:13:21 GMT - Tue, 25 Jun 2024 09:13:20 GMT
File typeASCII text, with very long lines (2899), with no line terminators Hashe03b90c8acc0b7e06b7cbe1b6f187596 823a4f566fdd7073061d929d94e2b4b694666a5b 4013bedf64993fa33437e21dd4a96b45b9ccfdc5b09e4e24fdc6fe59b1bbe150
GET /css/barlow HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 17:52:04 GMT
content-type: text/css;charset=UTF-8
cf-bgj: minify
cf-polished: origSize=3495
vary: Accept-Encoding
cache-control: max-age=2678400
cf-cache-status: HIT
age: 2969161
last-modified: Fri, 22 Mar 2024 09:06:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9XCBPFtS3dW%2BnzO54Q5yiye0G3FLbEs1mkZ2DDeajvepwGLbGOSUtHMB7NIm1OotvIdBxV1adz%2Fg9Ti6MAzl9w8Jxb4WYZYg1Eql6ZOyjtFhmwpXhWJH%2B0wexZOAYmnKHgDNPQU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
access-control-allow-origin: *
server: cloudflare
cf-ray: 87a02f4af8f556cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| prod-api.layercraft.co/subgraphs/name/b2-nft-launchpad | 43.159.107.215 | 200 OK | 0 B |
URL OPTIONS HTTP/1.1prod-api.layercraft.co/subgraphs/name/b2-nft-launchpad IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /subgraphs/name/b2-nft-launchpad HTTP/1.1
Host: prod-api.layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://layercraft.co/
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Set-Cookie: tgw_l7_route=05fb190dd83d6f19ef4e0ce09240ea98; Expires=Thu, 25-Apr-2024 17:52:36 GMT; Path=/
access-control-allow-origin: *
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
Server: TencentEdgeOne
Content-Length: 0
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 12781349326269229002
EO-Cache-Status: MISS
|
|
| prod-api.layercraft.co/subgraphs/name/b2-nft-market | 43.159.107.215 | 200 OK | 0 B |
URL POST HTTP/1.1prod-api.layercraft.co/subgraphs/name/b2-nft-market IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /subgraphs/name/b2-nft-market HTTP/1.1
Host: prod-api.layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://layercraft.co/
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Set-Cookie: tgw_l7_route=6014940051597331c3f51af119ac7cbe; Expires=Thu, 25-Apr-2024 17:52:36 GMT; Path=/
access-control-allow-origin: *
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
Server: TencentEdgeOne
Content-Length: 0
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 15228809333960913564
EO-Cache-Status: MISS
|
|
| layercraft.co/logo.png | 43.159.107.215 | 200 OK | 7.5 kB |
IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typePNG image data, 420 x 108, 8-bit/color RGBA, non-interlaced Hashfd70bd0ca75441828172a9ae1b772d24 00d38c2986a4a64e27af011be34e8faa8cd9ddf2 d41368a946b09c11cf4d37230f4c93c3520755a167a6dea33822726db3236c01
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /logo.png HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "fd70bd0ca75441828172a9ae1b772d24"
Content-Type: image/png
Server: tencent-cos
x-cos-hash-crc64ecma: 8606325478201511684
x-cos-meta-md5: fd70bd0ca75441828172a9ae1b772d24
x-cos-request-id: NjYyOWJjNGRfOGFlZjc4MGJfNDczM181NjY1OWVj
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:03 GMT
Content-Length: 7528
Connection: keep-alive
Cache-Control: max-age=3600
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 11663255951374071943
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-pG9HXWfT6vuNbzsc8XxvU2RDg_.c9d3667a.async.js | 43.159.107.215 | 200 OK | 5.6 kB |
URL GET HTTP/1.1layercraft.co/shared-pG9HXWfT6vuNbzsc8XxvU2RDg_.c9d3667a.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (9411) Hashc883b6220f7faf7f4f42cd906260a447 23b597db8f83c1c3cedd5d3e42f4584e0d9d6521 de1cb0facbce9a182f01e7352b1d315713dffdd633f73c04a317c44eb43a8bbf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-pG9HXWfT6vuNbzsc8XxvU2RDg_.c9d3667a.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "c883b6220f7faf7f4f42cd906260a447"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 10417627191320032257
x-cos-meta-md5: c883b6220f7faf7f4f42cd906260a447
x-cos-request-id: NjYyOWMwMDVfYTNlZjc4MGJfMmU3MjJfNTZiMjVmYg==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:06 GMT
Content-Encoding: br
Content-Length: 5624
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 1561573873540424736
EO-Cache-Status: HIT
|
|
| layercraft.co/shared-nrzPA7mESIVTDOhUQECTIdLF7qU_.e1194ec7.async.js | 43.159.107.215 | 200 OK | 36 kB |
URL GET HTTP/1.1layercraft.co/shared-nrzPA7mESIVTDOhUQECTIdLF7qU_.e1194ec7.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (25520) Hash67416d391dca162fb7af46d1ec28a76b ecfcd203eca1f50d0a87d50be1daa43c3a8f2179 18cab185fcd577048d9282d4c4e9a81a4fe0dfdffb50c4586e57f0f9b4ffcbb7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /shared-nrzPA7mESIVTDOhUQECTIdLF7qU_.e1194ec7.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 24 Apr 2024 13:30:08 GMT
Content-Encoding: br
Etag: "67416d391dca162fb7af46d1ec28a76b"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 7628858061689631558
x-cos-meta-md5: 67416d391dca162fb7af46d1ec28a76b
x-cos-request-id: NjYyOWMxZDhfMWM3NmI3MDlfNDZmOF81NDIyZjM0
Content-Length: 36101
Accept-Ranges: bytes
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 2757326042800720973
EO-Cache-Status: HIT
|
|
| layercraft.co/p__Home__index.cebffba7.async.js | 43.159.107.215 | 200 OK | 28 kB |
URL GET HTTP/1.1layercraft.co/p__Home__index.cebffba7.async.js IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (42058) Hash5246699fa565d6ca47ac58f596cdf7e1 1244c52f2769118a94de3175ccc853e84a72e0a7 9d1b3df4d15c0870b20b60fb09ee8997512bef306db44783384121ad8da653f5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p__Home__index.cebffba7.async.js HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "5246699fa565d6ca47ac58f596cdf7e1"
Content-Type: application/javascript
Server: tencent-cos
x-cos-hash-crc64ecma: 15484953968933202918
x-cos-meta-md5: 5246699fa565d6ca47ac58f596cdf7e1
x-cos-request-id: NjYyOWMwZGJfY2FkNDgwYl8xMTViN181NWYxMTFm
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:07 GMT
Content-Encoding: br
Content-Length: 28351
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 3354845639668632677
EO-Cache-Status: HIT
|
|
| layercraft.co/fonts/Poppins/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2 | 43.159.107.215 | 200 OK | 7.7 kB |
URL GET HTTP/1.1layercraft.co/fonts/Poppins/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2 IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/Poppins/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2 HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/fonts/Poppins.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "a09f2fccfee35b7247b08a1a266f0328"
Content-Type: application/octet-stream
Server: tencent-cos
x-cos-hash-crc64ecma: 17976757236279375262
x-cos-meta-md5: a09f2fccfee35b7247b08a1a266f0328
x-cos-request-id: NjYyOWMwMDVfMzJlYzE1MGJfMWNkNWVfNTY4NjRmYQ==
x-cos-trace-id: OGVmYzZiMmQzYjA2OWNhODk0NTRkMTBiOWVmMDAxODc0OWRkZjk0ZDM1NmI1M2E2MTRlY2MzZDhmNmI5MWI1OWE4OGMxZjNjY2JiNTBmMTVmMWY1MzAzYzkyZGQ2ZWM4MzZkMTZiZDQxYTg4MzRiMzIwYzRkYTRjMWFkNDM3YjQ=
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:09 GMT
Content-Length: 7748
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 10712652831088443787
EO-Cache-Status: HIT
|
|
| layercraft.co/fonts/Poppins/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2 | 43.159.107.215 | 200 OK | 7.9 kB |
URL GET HTTP/1.1layercraft.co/fonts/Poppins/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2 IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/Poppins/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2 HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/fonts/Poppins.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Wed, 24 Apr 2024 13:30:09 GMT
Etag: "9212f6f9860f9fc6c69b02fedf6db8c3"
Content-Type: application/octet-stream
Server: tencent-cos
x-cos-hash-crc64ecma: 17642715299798115763
x-cos-meta-md5: 9212f6f9860f9fc6c69b02fedf6db8c3
x-cos-request-id: NjYyOWMwZjdfZDBhYzQ4MGJfMzY5NzRfMTBkYzA2MQ==
x-cos-trace-id: OGVmYzZiMmQzYjA2OWNhODk0NTRkMTBiOWVmMDAxODc0OWRkZjk0ZDM1NmI1M2E2MTRlY2MzZDhmNmI5MWI1OWE4OGMxZjNjY2JiNTBmMTVmMWY1MzAzYzkyZGQ2ZWM4MzZkMTZiZDQxYTg4MzRiMzIwYzRkYTRjMWFkNDM3YjQ=
Content-Length: 7884
Accept-Ranges: bytes
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 1484973500564267047
EO-Cache-Status: HIT
|
|
| fonts.cdnfonts.com/s/14503/DINAlternate-Bold.woff | 104.21.72.124 | 200 OK | 59 kB |
URL GET HTTP/3fonts.cdnfonts.com/s/14503/DINAlternate-Bold.woff IP104.21.72.124:443
CertificateIssuerGoogle Trust Services LLC Subjectcdnfonts.com FingerprintAA:60:46:5D:49:FA:16:2E:61:90:A6:B2:50:1E:CF:8E:0C:8B:D2:F0 ValidityWed, 27 Mar 2024 09:13:21 GMT - Tue, 25 Jun 2024 09:13:20 GMT
File typeWeb Open Font Format, TrueType, length 59396, version 0.0 Hashe0d338409dd0c628a8855c263c4d18bc ada3de6261fcb3ee66e0693e2a69fac8bb2d7006 82cc922b6dfaec2a8760a8294f2874cd1a17a3e8d207c2fb299d1f6fcee86a85
GET /s/14503/DINAlternate-Bold.woff HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.cdnfonts.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:52:06 GMT
content-type: font/woff
content-length: 59396
last-modified: Sat, 05 Feb 2022 02:00:37 GMT
etag: "e804-5d73bbbcde754"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 454977
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QVb2%2FFkdmce779GAi%2F%2FVxAMtctROK%2BBq487WxXvxyGlxacnSANcIMRnribYsdbon2ltEwjFtq1q98kKtAjz%2B2ZHTGzH0HtOjy6Yo%2BRJQON3TzkEHr62WsdKlsKtHwnmM7%2BzoeDE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 87a02f585cd4712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| prod-api.layercraft.co/subgraphs/name/b2-nft-market | 43.159.107.215 | 200 OK | 182 B |
URL POST HTTP/1.1prod-api.layercraft.co/subgraphs/name/b2-nft-market IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
Hash3ed286a42ee2b799fc4e37a32b14b40e c2f3585e903c7ac98af8b4134d15f8027332ba82 d11b8889d29051cd914664f5faa3fdfe8f3dae6179f61aeedeae163bd25779ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /subgraphs/name/b2-nft-market HTTP/1.1
Host: prod-api.layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://layercraft.co/
content-type: application/json
Content-Length: 84
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/json
Set-Cookie: tgw_l7_route=6014940051597331c3f51af119ac7cbe; Expires=Thu, 25-Apr-2024 17:52:36 GMT; Path=/
access-control-allow-origin: *
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
graph-attestable: true
Server: TencentEdgeOne
Content-Length: 182
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 16222951412456373476
EO-Cache-Status: MISS
|
|
| layercraft.co/left.svg | 43.159.107.215 | 200 OK | 223 B |
IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeSVG Scalable Vector Graphics image Hash384e45068b8e47a4818e8ac1e16df2f7 83fbbb7188e3632b40f040b14a1e5ae8ec7dcf97 0f3ad2a9f73a9c82a2f4dbb0c56850c42f684d7c2ad1992d2cd2a531cc5e07d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /left.svg HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "384e45068b8e47a4818e8ac1e16df2f7"
Content-Type: image/svg+xml
Server: tencent-cos
x-cos-hash-crc64ecma: 612319388799889148
x-cos-meta-md5: 384e45068b8e47a4818e8ac1e16df2f7
x-cos-request-id: NjYyOWQ4ZWZfMjRlYzE1MGJfMWQyMmFfNTcyNWI2OQ==
Accept-Ranges: bytes
Last-Modified: Thu, 25 Apr 2024 02:48:54 GMT
Content-Encoding: br
Content-Length: 223
Connection: keep-alive
Cache-Control: max-age=3600
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 16101516354807978080
EO-Cache-Status: HIT
|
|
| layercraft.co/right.svg | 43.159.107.215 | 200 OK | 198 B |
IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeSVG Scalable Vector Graphics image Hashca31c23a4a50d1a83b474b8753ebe52b 50a6d1e972a002c1623d600d22f7d542debad080 88fffbb05527a2668a02a213926666845bd1a84cf5c8f2655d11fa415f2b41f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /right.svg HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Last-Modified: Thu, 25 Apr 2024 02:48:50 GMT
Content-Encoding: br
Etag: "ca31c23a4a50d1a83b474b8753ebe52b"
Content-Type: image/svg+xml
Server: tencent-cos
x-cos-hash-crc64ecma: 1891558592476912991
x-cos-meta-md5: ca31c23a4a50d1a83b474b8753ebe52b
x-cos-request-id: NjYyOWM4NTlfOGFlZjc4MGJfNDc0N181NWVkZWJk
Content-Length: 198
Accept-Ranges: bytes
Connection: keep-alive
Cache-Control: max-age=3600
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 18158759876697081355
EO-Cache-Status: HIT
|
|
| fonts.cdnfonts.com/s/15702/Barlow-Bold.woff | 104.21.72.124 | 200 OK | 42 kB |
URL GET HTTP/3fonts.cdnfonts.com/s/15702/Barlow-Bold.woff IP104.21.72.124:443
CertificateIssuerGoogle Trust Services LLC Subjectcdnfonts.com FingerprintAA:60:46:5D:49:FA:16:2E:61:90:A6:B2:50:1E:CF:8E:0C:8B:D2:F0 ValidityWed, 27 Mar 2024 09:13:21 GMT - Tue, 25 Jun 2024 09:13:20 GMT
File typeWeb Open Font Format, TrueType, length 41696, version 0.0 Hashec757475b37755f3e89e331213dd4cca 8e41d6601d84c7ef23b1180352c45bc55e8ff2c1 09e6e80571212621ae6a8a8ec76f833366f045b5adb0bf2969fefdc8b962b5b3
GET /s/15702/Barlow-Bold.woff HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.cdnfonts.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:52:06 GMT
content-type: font/woff
content-length: 41696
last-modified: Sat, 05 Feb 2022 02:00:38 GMT
etag: "a2e0-5d73bbbdac838"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 195807
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aT6D2%2B6C9Fr%2FX9RAw6fV3I9pEVVExIRuQ%2FCy5e0oN0VdSC23Y%2FLVmEXxf9g1YlNhiqOb0iDc4IGsmFyvJLhQ%2FfN5T2gsEoWaMjWjNEEVjtwPopqmGwSTek%2FKT9F2xmSyEOaCAvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 87a02f594dbb712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| layercraft.co/bg.svg | 43.159.107.215 | 200 OK | 568 B |
IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeSVG Scalable Vector Graphics image Hash2387b397cac0d55c8c4f916d1af4bccb 34a4329a147e7845a93c441cb23d0328a4361c49 8543bf4c3ffc155bc1424975dab05940b9ec0774d47d39d25c5eebdb4e5d68f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bg.svg HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "2387b397cac0d55c8c4f916d1af4bccb"
Content-Type: image/svg+xml
Server: tencent-cos
x-cos-hash-crc64ecma: 4920773162782833178
x-cos-meta-md5: 2387b397cac0d55c8c4f916d1af4bccb
x-cos-request-id: NjYyOWMwZGNfZjg4YzdjMWVfNzdmXzU3NTFlYjM=
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:03 GMT
Content-Encoding: br
Content-Length: 568
Connection: keep-alive
Cache-Control: max-age=3600
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 18008295517593929242
EO-Cache-Status: HIT
|
|
| layercraft.co/right.svg | 43.159.106.210 | 200 OK | 198 B |
IP43.159.106.210:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeSVG Scalable Vector Graphics image Hashca31c23a4a50d1a83b474b8753ebe52b 50a6d1e972a002c1623d600d22f7d542debad080 88fffbb05527a2668a02a213926666845bd1a84cf5c8f2655d11fa415f2b41f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /right.svg HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "ca31c23a4a50d1a83b474b8753ebe52b"
Content-Type: image/svg+xml
Server: tencent-cos
x-cos-hash-crc64ecma: 1891558592476912991
x-cos-meta-md5: ca31c23a4a50d1a83b474b8753ebe52b
x-cos-request-id: NjYyOWMwZGNfZjVlZjc4MGJfMjUxZjZfNTZhNzkzNg==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:03 GMT
Content-Encoding: br
Content-Length: 198
Connection: keep-alive
Cache-Control: max-age=3600
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 18157964222465174319
EO-Cache-Status: HIT
|
|
| layercraft.co/left.svg | 43.159.107.215 | 200 OK | 223 B |
IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeSVG Scalable Vector Graphics image Hash384e45068b8e47a4818e8ac1e16df2f7 83fbbb7188e3632b40f040b14a1e5ae8ec7dcf97 0f3ad2a9f73a9c82a2f4dbb0c56850c42f684d7c2ad1992d2cd2a531cc5e07d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /left.svg HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "384e45068b8e47a4818e8ac1e16df2f7"
Content-Type: image/svg+xml
Server: tencent-cos
x-cos-hash-crc64ecma: 612319388799889148
x-cos-meta-md5: 384e45068b8e47a4818e8ac1e16df2f7
x-cos-request-id: NjYyOWQ4ZWZfMjRlYzE1MGJfMWQyMmFfNTcyNWI2OQ==
Accept-Ranges: bytes
Last-Modified: Thu, 25 Apr 2024 02:48:54 GMT
Content-Encoding: br
Content-Length: 223
Connection: keep-alive
Cache-Control: max-age=3600
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 3074725568307290520
EO-Cache-Status: HIT
|
|
| layercraft.co/intro.svg | 43.159.107.215 | 200 OK | 11 kB |
IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
File typeSVG Scalable Vector Graphics image Hash2bd95807fcecf9dcc0d038f0aa5516ae bfa1298270eba3c5f41a0888593ea18f493cc834 00fbc4bbef0a9778d9e65e00f83e2ec4072a8a3b03813a916144264a8b149ab7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intro.svg HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "2bd95807fcecf9dcc0d038f0aa5516ae"
Content-Type: image/svg+xml
Server: tencent-cos
x-cos-hash-crc64ecma: 16689436667498390558
x-cos-meta-md5: 2bd95807fcecf9dcc0d038f0aa5516ae
x-cos-request-id: NjYyOWM4NTlfZDNhZTQ4MGJfMTM3NDhfNTY4MzYyOA==
Accept-Ranges: bytes
Last-Modified: Thu, 25 Apr 2024 02:48:52 GMT
Content-Encoding: br
Content-Length: 10899
Connection: keep-alive
Cache-Control: max-age=3600
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 17478970555509471616
EO-Cache-Status: HIT
|
|
| layercraft.co/prod-banner-home.json | 43.159.107.215 | 200 OK | 255 B |
URL GET HTTP/1.1layercraft.co/prod-banner-home.json IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
Hash3abe121d94ef2ebd538f883ad2f4d2d6 2a68c0d5de5867154c712d242245cf4fb8114f56 8564a4a5ce8263650a8fbfffa788196a0f14abc0ce6680c1511f3bce5f85144b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod-banner-home.json HTTP/1.1
Host: layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/home
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Etag: "3abe121d94ef2ebd538f883ad2f4d2d6"
Content-Type: application/json
Server: tencent-cos
x-cos-hash-crc64ecma: 12510921497529911654
x-cos-meta-md5: 3abe121d94ef2ebd538f883ad2f4d2d6
x-cos-request-id: NjYyOWMwZGNfYmJlZjc4MGJfMjMxOTlfNTZkNDdkNQ==
Accept-Ranges: bytes
Last-Modified: Wed, 24 Apr 2024 13:30:03 GMT
Content-Length: 255
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 18169737898190348922
EO-Cache-Status: HIT
|
|
| fonts.cdnfonts.com/s/15702/Barlow-Regular.woff | 104.21.72.124 | 200 OK | 41 kB |
URL GET HTTP/3fonts.cdnfonts.com/s/15702/Barlow-Regular.woff IP104.21.72.124:443
CertificateIssuerGoogle Trust Services LLC Subjectcdnfonts.com FingerprintAA:60:46:5D:49:FA:16:2E:61:90:A6:B2:50:1E:CF:8E:0C:8B:D2:F0 ValidityWed, 27 Mar 2024 09:13:21 GMT - Tue, 25 Jun 2024 09:13:20 GMT
File typeWeb Open Font Format, TrueType, length 40996, version 0.0 Hash02a9a93859fb5e1f3c8151cd95e29a8d 83769302cae16a23a87cf6459b8191cbb145d3d3 ee82a1f555e2d589311c0430a7f0c2b900ba6bc66717bab659254906000092db
GET /s/15702/Barlow-Regular.woff HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.cdnfonts.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 17:52:06 GMT
content-type: font/woff
content-length: 40996
last-modified: Sat, 05 Feb 2022 02:00:38 GMT
etag: "a024-5d73bbbdad008"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 454971
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=evpFQen%2FsqPqZ0gyNId1mrmfFB4Vg%2B7TkYBEfdjmznk7Sva3azJOI%2BsO5ZvCLsnDUZzy2zB%2Bd9s%2BSqTF93zbi72rjNckHiVsdDvjsW4UCSnw2EjOOdy%2F%2FDA7%2BLFGZeCZXsnkno8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 87a02f599e12712d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| prod-api.layercraft.co/subgraphs/name/b2-nft-launchpad | 43.159.107.215 | 200 OK | 1.6 kB |
URL OPTIONS HTTP/1.1prod-api.layercraft.co/subgraphs/name/b2-nft-launchpad IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
Hash88c6523e9c386b9201906dea42eba9c2 4c49d34f876d9b9bb5c6ba737cbaccb85dbf3a09 54de084dacde2618e8acedbd4b1404870f3a8496a0879cb4ccdea7da148db40d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /subgraphs/name/b2-nft-launchpad HTTP/1.1
Host: prod-api.layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://layercraft.co/
content-type: application/json
Content-Length: 104
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/json
Set-Cookie: tgw_l7_route=6014940051597331c3f51af119ac7cbe; Expires=Thu, 25-Apr-2024 17:52:36 GMT; Path=/
access-control-allow-origin: *
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
graph-attestable: true
Server: TencentEdgeOne
Content-Length: 1621
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 16337807046393396905
EO-Cache-Status: MISS
|
|
| prod-api.layercraft.co/subgraphs/name/b2-nft-market | 43.159.107.215 | 200 OK | 0 B |
URL POST HTTP/1.1prod-api.layercraft.co/subgraphs/name/b2-nft-market IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /subgraphs/name/b2-nft-market HTTP/1.1
Host: prod-api.layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://layercraft.co/
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Set-Cookie: tgw_l7_route=05fb190dd83d6f19ef4e0ce09240ea98; Expires=Thu, 25-Apr-2024 17:52:37 GMT; Path=/
access-control-allow-origin: *
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
Server: TencentEdgeOne
Content-Length: 0
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:06 GMT
EO-LOG-UUID: 4117337738837144040
EO-Cache-Status: MISS
|
|
| prod-api.layercraft.co/subgraphs/name/b2-nft-market | 43.159.107.215 | 200 OK | 4.5 kB |
URL POST HTTP/1.1prod-api.layercraft.co/subgraphs/name/b2-nft-market IP43.159.107.215:443
CertificateIssuerGoDaddy.com, Inc. Subject*.layercraft.co Fingerprint24:87:49:98:CC:58:C2:CA:9E:44:D0:83:80:D7:A0:8F:57:79:09:6C ValidityThu, 07 Mar 2024 14:51:09 GMT - Fri, 07 Mar 2025 14:51:09 GMT
Hash9b70f9874c35da2c0fe749ba4d9153d5 27d302b07acf701db57263ac944f1e24d5ec3731 b1134b5da40701cf6698b91aa904ad08ba35255143930e8633594184ea1033ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /subgraphs/name/b2-nft-market HTTP/1.1
Host: prod-api.layercraft.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://layercraft.co/
content-type: application/json
Content-Length: 399
Origin: https://layercraft.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/json
Set-Cookie: tgw_l7_route=6014940051597331c3f51af119ac7cbe; Expires=Thu, 25-Apr-2024 17:52:37 GMT; Path=/
access-control-allow-origin: *
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
graph-attestable: true
Server: TencentEdgeOne
Content-Length: 4488
Connection: keep-alive
Date: Thu, 25 Apr 2024 17:52:07 GMT
EO-LOG-UUID: 2003676880104311871
EO-Cache-Status: MISS
|
|
| layercraft-static-1318671312.cos.ap-singapore.myqcloud.com/banner/banner%204.png | 43.153.232.151 | 200 OK | 2.3 MB |
URL GET HTTP/1.1layercraft-static-1318671312.cos.ap-singapore.myqcloud.com/banner/banner%204.png IP43.153.232.151:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerGlobalSign nv-sa Subject*.cos.ap-singapore.myqcloud.com Fingerprint2A:C4:78:2E:15:6C:97:B7:BB:54:1F:40:CC:9A:92:01:3B:0E:E0:8F ValidityWed, 20 Mar 2024 02:21:13 GMT - Mon, 21 Apr 2025 02:21:12 GMT
File typePNG image data, 2880 x 780, 8-bit/color RGBA, non-interlaced Size2.3 MB (2250859 bytes) Hash046854df694e6a79ad810cc2763b5fb6 8bdce89e95dc53d2440a87869feb8623d543c34c 90432481c65789b29dcc86e9fa6290daca816bcda24e2233373f7f40e5088c14
GET /banner/banner%204.png HTTP/1.1
Host: layercraft-static-1318671312.cos.ap-singapore.myqcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2250859
Connection: keep-alive
Accept-Ranges: bytes
Content-Disposition: attachment
Date: Thu, 25 Apr 2024 17:52:08 GMT
ETag: "046854df694e6a79ad810cc2763b5fb6"
Last-Modified: Fri, 19 Apr 2024 11:13:09 GMT
Server: tencent-cos
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-cos-force-download: true
x-cos-hash-crc64ecma: 7248441023146824802
x-cos-request-id: NjYyYTk4NDhfMzJlYzE1MGJfMWNkMDFfNTg3OWJjOA==
|
|
| layercraft-static-1318671312.cos.ap-singapore.myqcloud.com/banner/home1.png | 43.153.232.151 | 200 OK | 2.1 MB |
URL GET HTTP/1.1layercraft-static-1318671312.cos.ap-singapore.myqcloud.com/banner/home1.png IP43.153.232.151:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerGlobalSign nv-sa Subject*.cos.ap-singapore.myqcloud.com Fingerprint2A:C4:78:2E:15:6C:97:B7:BB:54:1F:40:CC:9A:92:01:3B:0E:E0:8F ValidityWed, 20 Mar 2024 02:21:13 GMT - Mon, 21 Apr 2025 02:21:12 GMT
File typePNG image data, 2880 x 780, 8-bit/color RGBA, non-interlaced Size2.1 MB (2143869 bytes) Hash72bf337c3f2fa240afd77956b197892c 19affcd64195defedbc75f4dd3d3c0eaf46fb471 b88236545857f26cd63adc53ae46cf86f22980a57c663d24f0339dc92a773f13
GET /banner/home1.png HTTP/1.1
Host: layercraft-static-1318671312.cos.ap-singapore.myqcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2143869
Connection: keep-alive
Accept-Ranges: bytes
Content-Disposition: attachment
Date: Thu, 25 Apr 2024 17:52:08 GMT
ETag: "72bf337c3f2fa240afd77956b197892c"
Last-Modified: Thu, 18 Apr 2024 10:12:55 GMT
Server: tencent-cos
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-cos-force-download: true
x-cos-hash-crc64ecma: 12075401744615241718
x-cos-request-id: NjYyYTk4NDhfZDA4YzdjMWVfMjNlZmVfNTczNWY4Mg==
|
|
| fonts.cdnfonts.com/css/din-alternate | 104.21.72.124 | 200 OK | 176 B |
URL GET HTTP/2fonts.cdnfonts.com/css/din-alternate IP104.21.72.124:443
CertificateIssuerGoogle Trust Services LLC Subjectcdnfonts.com FingerprintAA:60:46:5D:49:FA:16:2E:61:90:A6:B2:50:1E:CF:8E:0C:8B:D2:F0 ValidityWed, 27 Mar 2024 09:13:21 GMT - Tue, 25 Jun 2024 09:13:20 GMT
File typeASCII text, with no line terminators Hash3226808de541125e3fe79db5a6c74345 97b891093157e5903bb500a2bd511313a6d50d26 97d7832a5df3ad06ef7649b7a8648526753bdac7922437001c0f9ea27c20533d
GET /css/din-alternate HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 17:52:04 GMT
content-type: text/css;charset=UTF-8
cf-bgj: minify
cf-polished: origSize=211
vary: Accept-Encoding
cache-control: max-age=2678400
cf-cache-status: HIT
age: 802352
last-modified: Tue, 16 Apr 2024 10:59:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bKOINFqh1pk2EcPfU59BbNl2l545XzuEKGe2BhM%2BS%2FxCeI7pND1GhPBO3ZSOdBxb9Jr%2FItJw1Snych%2Fi%2Fomo5sHlwkMuX2e8tdzrXZU1Ys9N0tZwb0gcH7SwfBejXpCTtdk0YR8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
access-control-allow-origin: *
server: cloudflare
cf-ray: 87a02f4af90156cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.cdnfonts.com/css/racing-sans-one | 104.21.72.124 | 200 OK | 184 B |
URL GET HTTP/2fonts.cdnfonts.com/css/racing-sans-one IP104.21.72.124:443
CertificateIssuerGoogle Trust Services LLC Subjectcdnfonts.com FingerprintAA:60:46:5D:49:FA:16:2E:61:90:A6:B2:50:1E:CF:8E:0C:8B:D2:F0 ValidityWed, 27 Mar 2024 09:13:21 GMT - Tue, 25 Jun 2024 09:13:20 GMT
File typeASCII text, with no line terminators Hash95ffa11b46e9201cc7032362e5b78cb6 3da6b1cb35ae1ab430087f6f504ac15ec46245a8 d1d44ee9cf4de735de5c23e31dc2e056b72541d489615da7531aa43de08a2e8d
GET /css/racing-sans-one HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://layercraft.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 17:52:04 GMT
content-type: text/css;charset=UTF-8
cf-bgj: minify
cf-polished: origSize=219
vary: Accept-Encoding
cache-control: max-age=2678400
cf-cache-status: HIT
age: 454980
last-modified: Sat, 20 Apr 2024 11:29:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=47eggP8DVY8jTLKawGATF%2B2eH501xevMT5xecy4WR4Yd3Xc35xAOI6AoU496JZlwRbJ3qWpqQMOPqTamWxfBpryGTas8odZJGjFF6izlMQTPJeQh8lWW4wyHjfwyUhyC0dtoDic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
access-control-allow-origin: *
server: cloudflare
cf-ray: 87a02f4ae8f156cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|