| wdxkrty8.cc/ | 172.67.205.148 | | 997 B |
IP172.67.205.148:0
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hash0b5b59cf3d5d51b435b89e7c59091b9d 454921c420d3122496a740a3cd4a67429596e0da cece82d9c0c11ee567616ccab3e227f666c6ee9af92d0684b5a930d63e303fd9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:44 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Wed, 27 Mar 2024 17:48:16 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4xqvmJhhsnzZKdKOtiIykc1t3aU3iXWWKypX2jcZXwIoNYlrC%2FCL0tX%2BmOC3d5mxS0OUz2WmWR05TpP6q7FA3hv%2Bm6owGYCSUspR5IOV0jfaNLRTrEXndS5SkDl5AA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 86b685eaf8ff0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| | 104.21.85.116 | | 997 B |
IP104.21.85.116:0
CertificateIssuerGoogle Trust Services LLC Subjectwdxkrty8.cc FingerprintB6:BA:2D:21:31:3C:C1:7E:9C:4B:18:07:0D:4E:A0:C2:90:62:B0:D8 ValiditySun, 24 Mar 2024 04:41:47 GMT - Sat, 22 Jun 2024 04:41:46 GMT
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hash0b5b59cf3d5d51b435b89e7c59091b9d 454921c420d3122496a740a3cd4a67429596e0da cece82d9c0c11ee567616ccab3e227f666c6ee9af92d0684b5a930d63e303fd9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /info HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:45 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hAZcIW2mSF5o0wI%2FTDyo5YaQo8CpB2WZIylerkKnpIq5lqasO37A3FhCLNtXkHL30GliMYG41Em7D7WP9NGEzfUO4uwoJSD0OS7yDK5ttDnNDsx1Hr02kVTJKW2aOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 86b685edac831c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| wdxkrty8.cc/js/app.c869f2ed.js | 172.67.205.148 | 200 OK | 24 kB |
URL GET HTTP/1.1wdxkrty8.cc/js/app.c869f2ed.js IP172.67.205.148:80
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashaaca845925bf6027ed05d2381ba5d60c 1ea690cef9c3d3d5c747a8be5de83168e7f73977 4c6359607284fbc79762a05cb2a53d51a7feb51c08e3fd219439ea354220b57d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/app.c869f2ed.js HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/info
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:45 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Wed, 27 Mar 2024 17:48:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V23BJJYQJvSnR7y6GYjQCBm35fle5gKPz9DV%2B4IEFpdG%2BIAe0kB7KaYZjpqz2GIZfx5i0mWdxYtPVCXYbQ%2ByD5PBaBixWRrJJ7E0QvH42rWjD0oSKVP4e9gJOE5GJA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86b685ef7e8f5695-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| wdxkrty8.cc/css/chunk-vendors.c57533e1.css | 172.67.205.148 | 200 OK | 44 kB |
URL GET HTTP/1.1wdxkrty8.cc/css/chunk-vendors.c57533e1.css IP172.67.205.148:80
File typeASCII text, with very long lines (65536), with no line terminators Hashebfffebc1f62c3be51082e6595a0a005 e278fbd6fd48150b3f366b50ed388983d934978c f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/chunk-vendors.c57533e1.css HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/info
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:45 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Wed, 27 Mar 2024 17:48:15 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kWUmOPh1v2LqkMxSW5xLclckjfddQn%2BXhJNpaLgPvw%2BhLeO4mYdoy2F5tDnE4unJ%2Baj6GZ1VYhHGrA9VmJBIMFJvMqYvu%2FwCo1dhQEF61VCQWmVAkx0ZtLtg7Ite3A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86b685ef7bc2568d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| wdxkrty8.cc/js/chunk-vendors.ea790e22.js | 104.21.85.116 | 200 OK | 272 kB |
URL GET HTTP/1.1wdxkrty8.cc/js/chunk-vendors.ea790e22.js IP104.21.85.116:80
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (51759) Size272 kB (272420 bytes) Hash4fee178f809d1b2a829099a8bb91c56c 178b6322fdc40c08fcbda0c096c668855ad49b51 c3580c9951b9554639c1404a246b3f27f818a99240c728f04cb964cd9e50b73d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/chunk-vendors.ea790e22.js HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/info
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:46 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Wed, 27 Mar 2024 17:49:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cCBNVSOjH5iggW2jfaccHS%2BtMNXxtBTrM9kAPK1%2B4AY6v00DB05t9aXDjDvG8ALOx9gw7pwKJGP7dryb80ZmSfYFR4Y3HwXaQ7B%2FkhHKrzmE6IQWZN%2FAVZUTiRQ4SQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86b685ef6d961c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| wdxkrty8.cc/css/app.3be22801.css | 172.67.205.148 | 200 OK | 2.5 kB |
URL GET HTTP/1.1wdxkrty8.cc/css/app.3be22801.css IP172.67.205.148:80
File typeASCII text, with very long lines (14103), with no line terminators Hash5b3e2f21a4c694d0e799dc11dfbc1f0f f7114b76ba27a934a23e99e8a02420be954b23bd 89827e95d3bb5d896891953953370ef079e537890091a2558ffb867874ac42d0
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/app.3be22801.css HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/info
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:46 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Wed, 27 Mar 2024 17:48:12 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LJsYFgA46Y78945x50BVahbdNr0UlLlt8P9UeAJKoQRUNa3HuO%2BmuYk%2FzOuEh%2FZ5Q2D%2FtV0rFZyddroNuebgKduDXtrkGPR%2FVvX4MsBu9F2vAAAvXMQTG4ByWirJYA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86b685ef7f36b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| cdn.discordapp.com/attachments/1222537749941321772/1222537771672010833/erb5617r8.mp4?ex=66169406&is=66041f06&hm=9358d9d17a0b1bdcc0c5ceda381cceead44856a20a1c5f9257aba4a5b1e4de4b& | 162.159.133.233 | | 2.2 MB |
URL cdn.discordapp.com/attachments/1222537749941321772/1222537771672010833/erb5617r8.mp4?ex=66169406&is=66041f06&hm=9358d9d17a0b1bdcc0c5ceda381cceead44856a20a1c5f9257aba4a5b1e4de4b& IP162.159.133.233:0
File typeISO Media, MP4 v2 [ISO 14496-14] Size2.2 MB (2247629 bytes) Hashfed3c2be4aa918094213af7b33b46b5c 18aa5805abde94415a465dced1bcc00d74e63e18 74fb58053ee13f536cca34d61dbe1f2164ef5b5bc0b28d42fe039ce9e763fdb3
GET /attachments/1222537749941321772/1222537771672010833/erb5617r8.mp4?ex=66169406&is=66041f06&hm=9358d9d17a0b1bdcc0c5ceda381cceead44856a20a1c5f9257aba4a5b1e4de4b& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Thu, 28 Mar 2024 09:16:46 GMT
content-type: video/mp4
content-length: 2247629
content-range: bytes 0-2247628/2247629
cf-ray: 86b685f76f1d56ae-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 53045
cache-control: public, max-age=31536000
content-disposition: attachment; filename=erb5617r8.mp4
etag: "fed3c2be4aa918094213af7b33b46b5c"
expires: Fri, 28 Mar 2025 09:16:46 GMT
last-modified: Wed, 27 Mar 2024 13:28:38 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1711546118511007
x-goog-hash: crc32c=YEZxcQ==, md5=/tPCvkqpGAlCE697M7RrXA==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2247629
x-guploader-uploadid: ABPtcPpHmAGN3KTEm25UGU11i_ituQNfNFgKq1mPoKog75zPGLrafSi8id0YOijoe7yEafAWlciAyyBqdA
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fGCw9mRYYJALGqb%2B%2FMCs1%2FyT6x%2BuobwDsJozmssY10mpc674aXJB%2Bvcfw%2BgfbKsi%2B6J1a3jZKzhYd2IjUmz7oYzE%2B3SVNMJQXMr0bAJynPnuny%2BvjIxKnk8KLBOsY%2FwzWvuV%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=ayynfNMFI7dosceZOxan54iHOxhyYS1AR_jlZqxL0MI-1711617406-1.0.1.1-5GCjkwb6CefPX3q4dCr5kSpJ_YIyhimEN06VqFBtuwSGdc_oU_htGcfQJUwo_NiltEd4gPpbG4g5tUfe9hQXkA; path=/; expires=Thu, 28-Mar-24 09:46:46 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=qiu4yZsUH2o3inAZwtCGF2XEc0Mzw5Mknu1YZywZVdY-1711617406658-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| wdxkrty8.cc/getlog | 172.67.205.148 | 200 OK | 1.3 kB |
IP172.67.205.148:80
Hash796da73630a0d78484a5ee9dddf97ee7 d3efa084537bb95ace22520bb74a73c6609d80dd 1ed70d8b370a3a1a87c502de052b8ca6c4c071b34413e270428011a7c507409d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /getlog HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:46 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FX3As9EmFB83T%2Bmxg9qB%2BlFNEdK1xMaSW0SvhwES6NsAVAP%2BgNbH9tGRC3dAHS4LV%2Fog9u9nhO8YwMChoyYb78CndZ1WxhTL5E7w46wWTZB7f4PCmIDr1FU94VMBcA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 86b685f71a14568d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| wdxaju2.cc/socket.io/?EIO=3&transport=websocket | 104.21.13.168 | | 0 B |
URL wdxaju2.cc/socket.io/?EIO=3&transport=websocket IP104.21.13.168:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: wdxaju2.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://wdxkrty8.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sw1CRo5CkCJl+t7s3qOkOg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 28 Mar 2024 09:16:46 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: VRaSMOnOFthMkiOTZYgZHfj65GA=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sO278zh1ITp%2F12TWpx2brV8e52rwxzvqkY%2FcMo3b2SNb2EKAUhgd3cQqLCRurbCTl9HkRwDhF1aaCiV4Eol%2FM247OZFA4zJ11am9XD3fH6wXEpb4aL4s4pw4upAY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 86b685f76ce15694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wdxkrty8.cc/img/icons/apple-touch-icon-152x152.png | 172.67.205.148 | 200 OK | 4.0 kB |
URL GET HTTP/1.1wdxkrty8.cc/img/icons/apple-touch-icon-152x152.png IP172.67.205.148:80
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hash1a034e64d80905128113e5272a5ab95e 92328e60f63d690f33cd4961b9934a539dc29b82 4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/info
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:47 GMT
Content-Type: image/png
Content-Length: 4046
Connection: keep-alive
last-modified: Wed, 27 Mar 2024 17:48:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xGdAYuU7QliNhAdrD63%2FAZU%2F1tFzyyFf8QT8cm6VAdOytl53mQB1zO9M6E%2By6qjLooRlvQoMsqS7ownLsgId9%2FMdopLc%2FGnrhVtbNF2PO%2Bbv8%2FS5uGnGw%2BF8etMxtw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86b685f92baa568d-OSL
alt-svc: h2=":443"; ma=60
|
|
| wdxkrty8.cc/img/icons/favicon.svg | 172.67.205.148 | 200 OK | 991 B |
URL GET HTTP/1.1wdxkrty8.cc/img/icons/favicon.svg IP172.67.205.148:80
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hash0b5b59cf3d5d51b435b89e7c59091b9d 454921c420d3122496a740a3cd4a67429596e0da cece82d9c0c11ee567616ccab3e227f666c6ee9af92d0684b5a930d63e303fd9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/favicon.svg HTTP/1.1
Host: wdxkrty8.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/info
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:47 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Last-Modified: Thu, 28 Mar 2024 04:38:56 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52svg23cz1N1Lyq5eQRaUeOA29EMHEfUNTvd%2BsiiHylExeVypN6iHgghL8T6uAdvwZBC0pKhzLgljp4M2nnqqXS6VFKR5peEo%2Fz8NQ6n7IFdLwqi5Mj03zLDu8nRbA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86b685f92ee75695-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| ocsp.sectigochina.com/ | 172.64.149.190 | | 472 B |
IP172.64.149.190:0
Hashd3e9e4f5b5aa0c21f37e18147f897040 b7bb9c03fc28f95b892b514090b96faeb9456fc2 7406ce5917f3d71d45cda7312990a55df2765c3f3794770327574e368c17b0a1
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 09:16:48 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 27 Mar 2024 12:42:44 GMT
Expires: Wed, 03 Apr 2024 12:42:43 GMT
Etag: "b7bb9c03fc28f95b892b514090b96faeb9456fc2"
Cache-Control: max-age=531864,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 86b686020addb52d-OSL
|
|
| b.yzcdn.cn/vant/icon-demo-1126.png | 185.23.181.28 | 200 OK | 8.9 kB |
URL GET HTTP/2b.yzcdn.cn/vant/icon-demo-1126.png IP185.23.181.28:443 ASN#138915 Kaopu Cloud HK Limited
CertificateIssuersslTrus Subject*.yzcdn.cn Fingerprint6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf87c46f346a5548224ccbe0b6bd75df5 8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370
GET /vant/icon-demo-1126.png HTTP/1.1
Host: b.yzcdn.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 28 Mar 2024 09:16:48 GMT
content-type: image/png
content-length: 8886
server: openresty
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
cache-control: public, max-age=2592000
content-disposition: inline; filename="icon-demo-1126.png"; filename*=utf-8''icon-demo-1126.png
content-md5: +HxG80alVIIkzL4La9dd9Q==
content-transfer-encoding: binary
etag: "Fo6Li9S6PmtshVfZSnJgYf3WJJL9"
last-modified: Mon, 26 Nov 2018 11:08:05 GMT
x-reqid: YyIAAAASg9geDiAX
x-svr: IO
x-qiniu-zone: 0
x-log: X-Log
x-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC197_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC26_DE-Frankfurt-Frankfurt-7-cache-2
x-cache: HIT from BC26_DE-Frankfurt-Frankfurt-7-cache-2(baishan)
X-Firefox-Spdy: h2
|
|
| wdxaju2.cc/socket.io/?EIO=3&transport=websocket | 104.21.13.168 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1wdxaju2.cc/socket.io/?EIO=3&transport=websocket IP104.21.13.168:443
CertificateIssuerGoogle Trust Services LLC Subjectwdxaju2.cc Fingerprint45:42:A9:0C:60:60:AF:C4:8A:84:9D:C6:78:ED:D8:A1:BE:4A:BE:55 ValidityWed, 27 Mar 2024 15:58:44 GMT - Tue, 25 Jun 2024 15:58:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: wdxaju2.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://wdxkrty8.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sw1CRo5CkCJl+t7s3qOkOg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 28 Mar 2024 09:16:46 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: VRaSMOnOFthMkiOTZYgZHfj65GA=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sO278zh1ITp%2F12TWpx2brV8e52rwxzvqkY%2FcMo3b2SNb2EKAUhgd3cQqLCRurbCTl9HkRwDhF1aaCiV4Eol%2FM247OZFA4zJ11am9XD3fH6wXEpb4aL4s4pw4upAY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 86b685f76ce15694-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1222537749941321772/1222537771672010833/erb5617r8.mp4?ex=66169406&is=66041f06&hm=9358d9d17a0b1bdcc0c5ceda381cceead44856a20a1c5f9257aba4a5b1e4de4b& | 162.159.133.233 | 206 Partial Content | 2.2 MB |
URL GET HTTP/2cdn.discordapp.com/attachments/1222537749941321772/1222537771672010833/erb5617r8.mp4?ex=66169406&is=66041f06&hm=9358d9d17a0b1bdcc0c5ceda381cceead44856a20a1c5f9257aba4a5b1e4de4b& IP162.159.133.233:443
CertificateIssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
Size2.2 MB (2247629 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /attachments/1222537749941321772/1222537771672010833/erb5617r8.mp4?ex=66169406&is=66041f06&hm=9358d9d17a0b1bdcc0c5ceda381cceead44856a20a1c5f9257aba4a5b1e4de4b& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://wdxkrty8.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Thu, 28 Mar 2024 09:16:46 GMT
content-type: video/mp4
content-length: 2247629
content-range: bytes 0-2247628/2247629
cf-ray: 86b685f76f1d56ae-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 53045
cache-control: public, max-age=31536000
content-disposition: attachment; filename=erb5617r8.mp4
etag: "fed3c2be4aa918094213af7b33b46b5c"
expires: Fri, 28 Mar 2025 09:16:46 GMT
last-modified: Wed, 27 Mar 2024 13:28:38 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1711546118511007
x-goog-hash: crc32c=YEZxcQ==, md5=/tPCvkqpGAlCE697M7RrXA==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2247629
x-guploader-uploadid: ABPtcPpHmAGN3KTEm25UGU11i_ituQNfNFgKq1mPoKog75zPGLrafSi8id0YOijoe7yEafAWlciAyyBqdA
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fGCw9mRYYJALGqb%2B%2FMCs1%2FyT6x%2BuobwDsJozmssY10mpc674aXJB%2Bvcfw%2BgfbKsi%2B6J1a3jZKzhYd2IjUmz7oYzE%2B3SVNMJQXMr0bAJynPnuny%2BvjIxKnk8KLBOsY%2FwzWvuV%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=ayynfNMFI7dosceZOxan54iHOxhyYS1AR_jlZqxL0MI-1711617406-1.0.1.1-5GCjkwb6CefPX3q4dCr5kSpJ_YIyhimEN06VqFBtuwSGdc_oU_htGcfQJUwo_NiltEd4gPpbG4g5tUfe9hQXkA; path=/; expires=Thu, 28-Mar-24 09:46:46 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=qiu4yZsUH2o3inAZwtCGF2XEc0Mzw5Mknu1YZywZVdY-1711617406658-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|