| jaox36mk.cc/css/chunk-vendors.c57533e1.css | 172.67.144.211 | 200 OK | 71 kB |
URL GET HTTP/3jaox36mk.cc/css/chunk-vendors.c57533e1.css IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashebfffebc1f62c3be51082e6595a0a005 e278fbd6fd48150b3f366b50ed388983d934978c f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/chunk-vendors.c57533e1.css HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/invite/i=1917
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:14:42 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 26 Apr 2024 15:56:56 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3055
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iOXCrE3QSbu2G1FcAHnAf7zzk2dL4WvaaPlHpIDTmMbx2WH21N1fZK0jR1UF3POYPEnssMPOjkluF3Wzm13nDJ5DbwVOf%2FXKlDog36EwBqpN4r8W7ukeIjlP6ZlIxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4548be8db505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| jaox36mk.cc/invite | 172.67.144.211 | 200 OK | 0 B |
IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /invite HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 19
Origin: https://jaox36mk.cc
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/invite/i=1917
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:14:43 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t8TY6Uy1IxpD%2BZoh348OlmWPpfkXVlUNY2roMHsaBA6iVgtUUb%2Buyk2ZXlD5%2B4eOzhyUV9Ech%2BTY63bw0Ed6NUXUU2U3fKvyniUMyinzDcS8DghBRFpGOYglP4G7MQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa454bb891b505-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1232355013255368829/1232355032511287316/dfbbtrbd.mp4?ex=6629278f&is=6627d60f&hm=93737fab1a36747f0d632d500b69dcd59818e681a336bfea49470ef4e7a4f39b& | 162.159.135.233 | | 36 B |
URL cdn.discordapp.com/attachments/1232355013255368829/1232355032511287316/dfbbtrbd.mp4?ex=6629278f&is=6627d60f&hm=93737fab1a36747f0d632d500b69dcd59818e681a336bfea49470ef4e7a4f39b& IP162.159.135.233:0
File typeASCII text, with no line terminators Hasha1ca4bebcd03fafbe2b06a46a694e29a ffc88125007c23ff6711147a12f9bba9c3d197ed c3fa59901d56ce8a95a303b22fd119cb94abf4f43c4f6d60a81fd78b7d00fa65
GET /attachments/1232355013255368829/1232355032511287316/dfbbtrbd.mp4?ex=6629278f&is=6627d60f&hm=93737fab1a36747f0d632d500b69dcd59818e681a336bfea49470ef4e7a4f39b& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 26 Apr 2024 23:14:43 GMT
content-type: text/plain;charset=UTF-8
content-length: 36
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=deWJtDPsJOxgpGYYbKRoluQt9Nyx%2BTxUCaehU059qyWpW7BRMAqksiG3h%2B9im79FLvszmpbX1yi0H7Qr3%2BT0uY6FTcUdK7qz6KbvqSN1W8Jvhtemm%2Bu845nnqse%2FlCDp45nVGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=QydO.myzU752h3BEEjP.T4fJq0VzOhvZ0CLlxZMTAts-1714173283-1.0.1.1-DxY1kjeGXGl1Z5Szo8AJAvQkZ2wuRyg525Dp0LeWfzq5WT.kzpHhe83uli4oJHgGljm.oDlOQtLxZ0YaKjubiQ; path=/; expires=Fri, 26-Apr-24 23:44:43 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=AOY4gezc8rZZiexgbMMVQfMPkwGgAqckbCNz78BkOG0-1714173283390-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87aa454d2d9056a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| jaox36mk.cc/socket.io/?EIO=3&transport=websocket | 172.67.144.211 | | 0 B |
URL jaox36mk.cc/socket.io/?EIO=3&transport=websocket IP172.67.144.211:0
CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://jaox36mk.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3gmML6/4fA0uq41DjQUlxw==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 26 Apr 2024 23:14:43 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XICwWJ16epoSFiBuCx1/mqwoNLU=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pN%2BPA0OjA%2B0FPE%2F3n8fHejzn0zEBatVtyK%2BWCKqoC9XWI02bFA9Ujcar7jShFCjAZYkpF%2BgU38pJQhxA5pH4eXuSUOmg6T6%2B4rhLhTCjO0b1pGKtXi3rGEy34W0SbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87aa454ccbb60afe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| jaox36mk.cc/img/icons/apple-touch-icon-152x152.png | 172.67.144.211 | 200 OK | 4.0 kB |
URL GET HTTP/3jaox36mk.cc/img/icons/apple-touch-icon-152x152.png IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hash1a034e64d80905128113e5272a5ab95e 92328e60f63d690f33cd4961b9934a539dc29b82 4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/invite/i=1917
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:14:43 GMT
content-type: image/png
content-length: 4046
last-modified: Fri, 26 Apr 2024 15:56:58 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AiJSR1g3Vo%2BnM2Kdih7xv6zC3J3DRDZKbaSUT1Yb2iyPQmJ6uOKONs7LXR90WghmhzBOy7JmriN58ADo8sst9YrHncC6UIFgsu66LS7Wdiqi%2B9wXNKHsCug2P4YCwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa454e5a0bb505-OSL
alt-svc: h3=":443"; ma=86400
|
|
| b.yzcdn.cn/vant/icon-demo-1126.png | 154.85.69.54 | 200 OK | 8.9 kB |
URL GET HTTP/2b.yzcdn.cn/vant/icon-demo-1126.png IP154.85.69.54:443 ASN#139057 LEGEND DYNASTY PTE. LTD.
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuersslTrus Subject*.yzcdn.cn Fingerprint6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf87c46f346a5548224ccbe0b6bd75df5 8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370
GET /vant/icon-demo-1126.png HTTP/1.1
Host: b.yzcdn.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:14:44 GMT
content-type: image/png
content-length: 8886
server: openresty
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
cache-control: public, max-age=2592000
content-disposition: inline; filename="icon-demo-1126.png"; filename*=utf-8''icon-demo-1126.png
content-md5: +HxG80alVIIkzL4La9dd9Q==
content-transfer-encoding: binary
etag: "Fo6Li9S6PmtshVfZSnJgYf3WJJL9"
last-modified: Mon, 26 Nov 2018 11:08:05 GMT
x-reqid: YyIAAAASg9geDiAX
x-svr: IO
x-qiniu-zone: 0
x-log: X-Log
x-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC165_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC46_DE-Frankfurt-Frankfurt-11-cache-4
x-cache: HIT from BC46_DE-Frankfurt-Frankfurt-11-cache-4(baishan)
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=yAdQOQ82kUVFmC1OOsfIIBKG9OocwR0pwUB8-58a1Ha8yqGnBTW56-2niCqUwjf2Brk2jNavYzgQxY28kgnmjPDIsAV1gWcuidRE5S9mxeZb3MXX-L8sftgDjms_MuzD
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Fri, 26 Apr 2024 23:14:15 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 46
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| jaox36mk.cc/js/chunk-vendors.ea790e22.js | 172.67.144.211 | 200 OK | 949 kB |
URL GET HTTP/3jaox36mk.cc/js/chunk-vendors.ea790e22.js IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
Size949 kB (949174 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/chunk-vendors.ea790e22.js HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/invite/i=1917
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:14:42 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 26 Apr 2024 15:57:08 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jW%2BKtlyUuxCnC5NSXdd%2FTM7J%2FlOExSRRzgwk5ctMh%2BFF%2Btijv3vPNFzz4%2BkDVPcK%2BCgx8UzvfSNHMVcKBPNmi7l6YM2onVRO4fdIoehDOPhustdf0asKYYskRCz39w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4548be87b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| jaox36mk.cc/socket.io/?EIO=3&transport=websocket | 172.67.144.211 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1jaox36mk.cc/socket.io/?EIO=3&transport=websocket IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://jaox36mk.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3gmML6/4fA0uq41DjQUlxw==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 26 Apr 2024 23:14:43 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XICwWJ16epoSFiBuCx1/mqwoNLU=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pN%2BPA0OjA%2B0FPE%2F3n8fHejzn0zEBatVtyK%2BWCKqoC9XWI02bFA9Ujcar7jShFCjAZYkpF%2BgU38pJQhxA5pH4eXuSUOmg6T6%2B4rhLhTCjO0b1pGKtXi3rGEy34W0SbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87aa454ccbb60afe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1232355013255368829/1232355032511287316/dfbbtrbd.mp4?ex=6629278f&is=6627d60f&hm=93737fab1a36747f0d632d500b69dcd59818e681a336bfea49470ef4e7a4f39b& | 162.159.135.233 | 404 Not Found | 0 B |
URL GET HTTP/2cdn.discordapp.com/attachments/1232355013255368829/1232355032511287316/dfbbtrbd.mp4?ex=6629278f&is=6627d60f&hm=93737fab1a36747f0d632d500b69dcd59818e681a336bfea49470ef4e7a4f39b& IP162.159.135.233:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /attachments/1232355013255368829/1232355032511287316/dfbbtrbd.mp4?ex=6629278f&is=6627d60f&hm=93737fab1a36747f0d632d500b69dcd59818e681a336bfea49470ef4e7a4f39b& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 26 Apr 2024 23:14:43 GMT
content-type: text/plain;charset=UTF-8
content-length: 36
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=deWJtDPsJOxgpGYYbKRoluQt9Nyx%2BTxUCaehU059qyWpW7BRMAqksiG3h%2B9im79FLvszmpbX1yi0H7Qr3%2BT0uY6FTcUdK7qz6KbvqSN1W8Jvhtemm%2Bu845nnqse%2FlCDp45nVGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=QydO.myzU752h3BEEjP.T4fJq0VzOhvZ0CLlxZMTAts-1714173283-1.0.1.1-DxY1kjeGXGl1Z5Szo8AJAvQkZ2wuRyg525Dp0LeWfzq5WT.kzpHhe83uli4oJHgGljm.oDlOQtLxZ0YaKjubiQ; path=/; expires=Fri, 26-Apr-24 23:44:43 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=AOY4gezc8rZZiexgbMMVQfMPkwGgAqckbCNz78BkOG0-1714173283390-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87aa454d2d9056a9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| jaox36mk.cc/img/icons/favicon.svg | 172.67.144.211 | 200 OK | 2.7 kB |
URL GET HTTP/3jaox36mk.cc/img/icons/favicon.svg IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
File typeHTML document, ASCII text, with very long lines (2867), with no line terminators Hashb82351462bebd8e11651e5d59bfdc8ba 298541b9fe2c24ff4bc5216f3a0fc62aa624098a a0a53a26fb88f87bf1a4bf3e3c10d10d5924f9b235351e95b93f0ab41052d283
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/favicon.svg HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/invite/i=1917
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:14:43 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=14400
cf-cache-status: HIT
age: 52
last-modified: Fri, 26 Apr 2024 23:13:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VJpz4erYEh8LReKB1fEzU8hVuSn%2FxQtLegJuVcFvIMcEyE7%2FFCfvwLsApBwQtreJklIRLnbb0TGuHd%2BJq84ieRHR3VNoJBbRbQLoQqG749N7gC6StgFFzZKPFMYGaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa454e5a0db505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| jaox36mk.cc/invite/i=1917 | 172.67.144.211 | 200 OK | 2.7 kB |
URL User Request GET HTTP/2jaox36mk.cc/invite/i=1917 IP172.67.144.211:443
CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
File typeHTML document, ASCII text, with very long lines (2867), with no line terminators Hashb82351462bebd8e11651e5d59bfdc8ba 298541b9fe2c24ff4bc5216f3a0fc62aa624098a a0a53a26fb88f87bf1a4bf3e3c10d10d5924f9b235351e95b93f0ab41052d283
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /invite/i=1917 HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:14:42 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=frTdACfR%2BjeOGE16fKqRXirkD7HLGdlorFrepa57B3btUGQvJzoHVU%2FaNiw3oIcUFToGetrR4v9mhLu7zcf4R9cajSfTevj%2BIRS5CpIhgfO23HIp7T2nIhoqJqoyKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa45456eb156af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| jaox36mk.cc/css/app.2bbde7cb.css | 172.67.144.211 | 200 OK | 16 kB |
URL GET HTTP/3jaox36mk.cc/css/app.2bbde7cb.css IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
File typeASCII text, with very long lines (15613), with no line terminators Hash36e337e4d6ccb311dbe528a753454070 b80998c19f7e64194849aa719938a5cab6a340de 8e184dc7a0f93aba7de8fe0498512d54c303e34b50897632d190ed753a3b45e6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/app.2bbde7cb.css HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/invite/i=1917
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:14:42 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 26 Apr 2024 15:56:55 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3055
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cn88PiLZU08Yuc1eLZuNskIoRvob%2BlE%2FMGpU5vP6KZYmY4hhqBd%2FmJrGo3V0bD8nCqc%2FpPGGOH%2FW4uqA%2Fmv9nREHRgDcAg1f7wB%2FO6u%2BYI%2BWIjx%2BPq6FT2a0f2zkUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4548be8eb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| jaox36mk.cc/getlog | 172.67.144.211 | 200 OK | 12 kB |
IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
Hash074b4e2a633c191494edd3adcc898ab8 67c7b13cb4fee88e294723f6c4a7d8ae6cee2b44 9b319883e5ec56e48f9fc922ce60895ea6453a0a2b0b561cb48205cdb4ba8735
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /getlog HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:14:43 GMT
content-type: application/json; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tAbj43KkLTkgsGExTpaMXLSRiEKUTM3ENYiorLJNntRCtyA21G2aWzylAkrMsrXfT1zImriqBv3lG2sN%2FeCNxG4RmU%2FnOSfTNwAGowP87dLAMDbVQol8K3t3DNgOwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa454c8910b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| jaox36mk.cc/js/app.e6573cf9.js | 172.67.144.211 | 200 OK | 175 kB |
URL GET HTTP/3jaox36mk.cc/js/app.e6573cf9.js IP172.67.144.211:443
Requested byhttps://jaox36mk.cc/invite/i=1917 CertificateIssuerGoogle Trust Services LLC Subjectjaox36mk.cc FingerprintA7:4A:61:E6:93:B7:9F:7E:A7:EC:1B:A8:9D:6D:0F:00:86:85:17:37 ValidityThu, 25 Apr 2024 08:44:24 GMT - Wed, 24 Jul 2024 08:44:23 GMT
Size175 kB (175102 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/app.e6573cf9.js HTTP/1.1
Host: jaox36mk.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jaox36mk.cc/invite/i=1917
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:14:42 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 26 Apr 2024 15:57:04 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nLDOaOpZdqs3v5qCX%2FBWFTEIF%2FOXgEjru4r4c8fRfprfjVJW6j8%2FXS3n6MsTCJ0bq6Bcr3gsPViT%2BjHMKjymYYEPGG9b0V8BCCqvgzYiYloe6QvD%2FE5uIz6heKm7EA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4548be8cb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|