Report - dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html

Report Overview

Submitted URL
dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
IP
172.67.218.5
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 13:01:34
Access
public
Website Title
403 Forbidden
Final URL
dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dropoptionfilestorage.nl	unknown	2024-01-21	2024-01-21	2024-04-09	7.4 kB	30 kB	104.21.38.19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	dropoptionfilestorage.nl	Sinkholed
2024-04-17	medium	dropoptionfilestorage.nl	Sinkholed
2024-04-17	medium	dropoptionfilestorage.nl	Sinkholed
2024-04-17	medium	dropoptionfilestorage.nl	Sinkholed
2024-04-17	medium	dropoptionfilestorage.nl	Sinkholed
2024-04-17	medium	dropoptionfilestorage.nl	Sinkholed
2024-04-17	medium	dropoptionfilestorage.nl	Sinkholed
2024-04-17	medium	dropoptionfilestorage.nl	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html	1.1 kB	2024-04-17	2024-04-17
Pretty URL dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html IP 104.21.38.19 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 15:01:35 Last Seen2024-04-17 15:01:35 Times Seen1 Hash c543ad4617232c5e7fde9fb08570a9da 74c4f3fe5a9f7e71066875ee8eb7af0018e98c1a 449237eb11629d515419c199d433ba87683c088bd1789027878375cad0b6faf6 Loading...

	unknown	247 B	2024-04-17	2024-04-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 15:01:35 Last Seen2024-04-17 15:01:35 Times Seen1 Hash 0e419a8a551433acb1971e08cbddc41a 5b82ca64e289144b78422f4220f20959dc29fba5 b6536f6df15488ea83ba6b6a743da8d3cfffb623d9e0573a8e84b892f7e6422b Loading...

	dropoptionfilestorage.nl/cdn-cgi/challenge-platform/scripts/jsd/main.js	7.8 kB	2024-04-17	2024-04-17
Pretty URL dropoptionfilestorage.nl/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.38.19 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 15:01:35 Last Seen2024-04-17 15:08:10 Times Seen4 Hash 2d69436218a197293f2cfdb8ab9ba154 5d87b7977dc3978fdafb3b53dfb6b939607d03e4 6dbc37e9b6fb9f6255e2fd54ea373c40bb0e301e2b55b1dd35da8d81a07dd7c1 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 0d74ab1cb95fc9e9e27655188a9adadd	4.5 kB	2024-04-17	2024-04-17
Pretty Observations First Seen2024-04-17 15:01:35 Last Seen2024-04-17 15:01:35 Times Seen1 Hash 0d74ab1cb95fc9e9e27655188a9adadd d078f86d5da144da4f9f2b00100f10d26e0b1feb 87f4b54b5e54b067f246ed739d7438496474913e0d99c065b0a0ad5373fffcd4 Loading...

HTTP Transactions (8)

URL IP Response Size

dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html

104.21.38.19

403 Forbidden

167 B

URL User Request GET HTTP/3
dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
IP
104.21.38.19:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdropoptionfilestorage.nl
FingerprintCE:D1:AC:74:00:54:8D:7E:F9:FF:4D:E7:3D:D6:6B:FD:ED:50:11:D2
ValidityMon, 08 Apr 2024 22:27:40 GMT - Sun, 07 Jul 2024 22:27:39 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
167 B (167 bytes)
Hash
0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html HTTP/1.1
Host: dropoptionfilestorage.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: 8LyPrQzIRAdZgy4L7MTqWBW6ZFM=iJIQdzxZ6No8XJkX2Lv4XRHDQlw; niSSDKJO464twJ079Em5-w2kUTc=1713358800; G1w4KPptzpHnmbu_g5VUpWXGenI=1713445200; fB6u-mGg6PSeVi3PAkTzOsWGgFc=0A2CI1d0YcEJxcJjx3zmfU_xYOc
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Wed, 17 Apr 2024 13:01:10 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 17 Apr 2024 14:01:10 GMT
Location: https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cChtQby6iUKNIrP9ZfymBiK7wpuJGWuP1z6ZgzYLkawDywrfEkFT8iNi4ZO%2B91LPRrPdSePJ0ekx5uJMBDxIyzDZD4KJDBByMmzyA62MCsoS0pynBN8eXPvcO95o5LuL4EpzQOIu01N9g3k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 875c9a2b9f8d92d6-CPH
alt-svc: h2=":443"; ma=60

dropoptionfilestorage.nl/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.21.38.19

302 Found

0 B

URL GET HTTP/3
dropoptionfilestorage.nl/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.21.38.19:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Certificate
IssuerGoogle Trust Services LLC
Subjectdropoptionfilestorage.nl
FingerprintCE:D1:AC:74:00:54:8D:7E:F9:FF:4D:E7:3D:D6:6B:FD:ED:50:11:D2
ValidityMon, 08 Apr 2024 22:27:40 GMT - Sun, 07 Jul 2024 22:27:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dropoptionfilestorage.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 8LyPrQzIRAdZgy4L7MTqWBW6ZFM=iJIQdzxZ6No8XJkX2Lv4XRHDQlw; niSSDKJO464twJ079Em5-w2kUTc=1713358800; G1w4KPptzpHnmbu_g5VUpWXGenI=1713445200; fB6u-mGg6PSeVi3PAkTzOsWGgFc=0A2CI1d0YcEJxcJjx3zmfU_xYOc; 1of9Nj2p3_bGGmNOD7mNvcMM22c=lkLPZiL_UVgRTxwDers97UXe5XU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Wed, 17 Apr 2024 13:01:10 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pALnIibDsKnvPBftE69JhCYTBX6Xp7nVhY%2FvhNazMMevw3OXNy2bCxPKp2Y2iZuUX6DXxBio8y90AXdsYGD9H%2FDO0xBlKhmawrKv2CMSt2dHKkS6e1l0X%2BSZJW%2B8HVp%2F47StXSGmf1yMGbs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875c9a2dde42abc6-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html

104.21.38.19

403 Forbidden

0 B

URL User Request GET HTTP/3
dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
IP
104.21.38.19:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdropoptionfilestorage.nl
FingerprintCE:D1:AC:74:00:54:8D:7E:F9:FF:4D:E7:3D:D6:6B:FD:ED:50:11:D2
ValidityMon, 08 Apr 2024 22:27:40 GMT - Sun, 07 Jul 2024 22:27:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html HTTP/1.1
Host: dropoptionfilestorage.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
8s0zjStm9yjUc0gpVg1ThP7YIg: 36282440
X-Requested-with: XMLHttpRequest
X-Requested-TimeStamp: 
X-Requested-TimeStamp-Expire: 
X-Requested-TimeStamp-Combination: 
X-Requested-Type: GET
X-Requested-Type-Combination: GET
CArqPtlnhzK5nLuxHAB1mXSO7e4: U-CPlmWwl9RdtWp1EZj3dNvfibU
Content-type: application/x-www-form-urlencoded
Content-Length: 22
Origin: https://dropoptionfilestorage.nl
DNT: 1
Connection: keep-alive
Referer: https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Cookie: 8LyPrQzIRAdZgy4L7MTqWBW6ZFM=iJIQdzxZ6No8XJkX2Lv4XRHDQlw; niSSDKJO464twJ079Em5-w2kUTc=1713358800; G1w4KPptzpHnmbu_g5VUpWXGenI=1713445200; fB6u-mGg6PSeVi3PAkTzOsWGgFc=0A2CI1d0YcEJxcJjx3zmfU_xYOc; 1of9Nj2p3_bGGmNOD7mNvcMM22c=lkLPZiL_UVgRTxwDers97UXe5XU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Wed, 17 Apr 2024 13:01:10 GMT
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
set-cookie: Na29JMVJucGi6iEtm6u0jG7vdDk=xGvcNAUiktZj2YWAIWEVXrdZ9fc; path=/; expires=Thu, 18-Apr-24 13:01:10 GMT; Max-Age=86400;
Yjb7nPs6fauvM9xtubUpxPWH7g8=1713358870; path=/; expires=Thu, 18-Apr-24 13:01:10 GMT; Max-Age=86400;
AJDc22tnRfITVMbA8iG8VukoRtY=1713445270; path=/; expires=Thu, 18-Apr-24 13:01:10 GMT; Max-Age=86400;
mny_kGDNUXTddrsVvVXr6jBeKM8=89XDccveSPjc8tRWie-QQxM4ITI; path=/; expires=Thu, 18-Apr-24 13:01:10 GMT; Max-Age=86400;
JmLGxBkt48wap2i3hGTwMicul2E=pGsBSnNhhoimZ6LJFW54dIsIYRQ; path=/; expires=Thu, 18-Apr-24 13:01:10 GMT; Max-Age=86400;
x-frame-options: SAMEORIGIN
cache-control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhuphhp%2Filmu4eVW2gDht3yWPJQsMTLVcW8cI%2B1Ha2u2QD7BqW6j9iKbo9dlQUeRT8e8Dq9tuavCel%2BuL2bKXRu6uQ3JIsbhdTIiQIn%2BhNGC47I%2BzE2KTrWG9rrJcd3oIA8EsHJPEnHMqFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875c9a2dde3aabc6-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html

104.21.38.19

403 Forbidden

14 kB

URL User Request GET HTTP/3
dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
IP
104.21.38.19:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdropoptionfilestorage.nl
FingerprintCE:D1:AC:74:00:54:8D:7E:F9:FF:4D:E7:3D:D6:6B:FD:ED:50:11:D2
ValidityMon, 08 Apr 2024 22:27:40 GMT - Sun, 07 Jul 2024 22:27:39 GMT

File type
data
Size
14 kB (14486 bytes)
Hash
6ca85af5aa89914480ca9ca2d8bc2872
316d0d602b77d0b04c11c08daa73edeb309d1bbc
f40ff4e1ef5434886f5dbe9389668d6b460146b3eb3b84e9665a9b9eb1a44851

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html HTTP/1.1
Host: dropoptionfilestorage.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 503 Service Unavailable
date: Wed, 17 Apr 2024 13:01:10 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
set-cookie: 8LyPrQzIRAdZgy4L7MTqWBW6ZFM=iJIQdzxZ6No8XJkX2Lv4XRHDQlw; path=/; expires=Thu, 18-Apr-24 13:00:00 GMT; Max-Age=86400;
niSSDKJO464twJ079Em5-w2kUTc=1713358800; path=/; expires=Thu, 18-Apr-24 13:00:00 GMT; Max-Age=86400;
G1w4KPptzpHnmbu_g5VUpWXGenI=1713445200; path=/; expires=Thu, 18-Apr-24 13:00:00 GMT; Max-Age=86400;
fB6u-mGg6PSeVi3PAkTzOsWGgFc=0A2CI1d0YcEJxcJjx3zmfU_xYOc; path=/; expires=Thu, 18-Apr-24 13:00:00 GMT; Max-Age=86400;
x-frame-options: SAMEORIGIN
cache-control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bg8tS6AfieLFa2xoC%2FOJcBLtDy0BHl7ABIkvAx%2BS78KfBk596VgYoFy%2Fvs%2FKz601qhHcrLj8SJR3GSwvWcP0sJtdSW0hGKERiFen%2FJU6F%2FfuT%2BZMn3keOMIf%2B3BFtB0EPLQ4pDgg24UZMBw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875c9a286ca4abc6-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

dropoptionfilestorage.nl/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.21.38.19

302 Found

0 B

URL GET HTTP/3
dropoptionfilestorage.nl/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.21.38.19:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Certificate
IssuerGoogle Trust Services LLC
Subjectdropoptionfilestorage.nl
FingerprintCE:D1:AC:74:00:54:8D:7E:F9:FF:4D:E7:3D:D6:6B:FD:ED:50:11:D2
ValidityMon, 08 Apr 2024 22:27:40 GMT - Sun, 07 Jul 2024 22:27:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dropoptionfilestorage.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 8LyPrQzIRAdZgy4L7MTqWBW6ZFM=iJIQdzxZ6No8XJkX2Lv4XRHDQlw; niSSDKJO464twJ079Em5-w2kUTc=1713358800; G1w4KPptzpHnmbu_g5VUpWXGenI=1713445200; fB6u-mGg6PSeVi3PAkTzOsWGgFc=0A2CI1d0YcEJxcJjx3zmfU_xYOc; 1of9Nj2p3_bGGmNOD7mNvcMM22c=lkLPZiL_UVgRTxwDers97UXe5XU; Na29JMVJucGi6iEtm6u0jG7vdDk=xGvcNAUiktZj2YWAIWEVXrdZ9fc; Yjb7nPs6fauvM9xtubUpxPWH7g8=1713358870; AJDc22tnRfITVMbA8iG8VukoRtY=1713445270; mny_kGDNUXTddrsVvVXr6jBeKM8=89XDccveSPjc8tRWie-QQxM4ITI; JmLGxBkt48wap2i3hGTwMicul2E=pGsBSnNhhoimZ6LJFW54dIsIYRQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Wed, 17 Apr 2024 13:01:11 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js
access-control-allow-origin: *
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BfylGcao3FjctRvhCG1XGdniYAvrD0Fd7vvnPHLCLJNBQ5M0Ix4%2BSPsnWhioLZil3FJeRgtSnOst52wrYEw76tPOpnisb6xRXzyEjuHeCgUuUW3TWC1e77vJwid33QwnzDp%2B%2BA1vMoF%2Bv48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875c9a3229e1abdb-CPH
alt-svc: h3=":443"; ma=86400

dropoptionfilestorage.nl/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js

104.21.38.19

200 OK

7.8 kB

URL GET HTTP/3
dropoptionfilestorage.nl/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js
IP
104.21.38.19:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Certificate
IssuerGoogle Trust Services LLC
Subjectdropoptionfilestorage.nl
FingerprintCE:D1:AC:74:00:54:8D:7E:F9:FF:4D:E7:3D:D6:6B:FD:ED:50:11:D2
ValidityMon, 08 Apr 2024 22:27:40 GMT - Sun, 07 Jul 2024 22:27:39 GMT

File type
JavaScript source, ASCII text, with very long lines (7813), with no line terminators
Size
7.8 kB (7813 bytes)
Hash
2d69436218a197293f2cfdb8ab9ba154
5d87b7977dc3978fdafb3b53dfb6b939607d03e4
6dbc37e9b6fb9f6255e2fd54ea373c40bb0e301e2b55b1dd35da8d81a07dd7c1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js HTTP/1.1
Host: dropoptionfilestorage.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 8LyPrQzIRAdZgy4L7MTqWBW6ZFM=iJIQdzxZ6No8XJkX2Lv4XRHDQlw; niSSDKJO464twJ079Em5-w2kUTc=1713358800; G1w4KPptzpHnmbu_g5VUpWXGenI=1713445200; fB6u-mGg6PSeVi3PAkTzOsWGgFc=0A2CI1d0YcEJxcJjx3zmfU_xYOc; 1of9Nj2p3_bGGmNOD7mNvcMM22c=lkLPZiL_UVgRTxwDers97UXe5XU; Na29JMVJucGi6iEtm6u0jG7vdDk=xGvcNAUiktZj2YWAIWEVXrdZ9fc; Yjb7nPs6fauvM9xtubUpxPWH7g8=1713358870; AJDc22tnRfITVMbA8iG8VukoRtY=1713445270; mny_kGDNUXTddrsVvVXr6jBeKM8=89XDccveSPjc8tRWie-QQxM4ITI; JmLGxBkt48wap2i3hGTwMicul2E=pGsBSnNhhoimZ6LJFW54dIsIYRQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 13:01:11 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
vary: accept-encoding
cache-control: max-age=14400, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FsoFfkgdIopezpOWac4tAQLIGHGIJU%2F7wUFfXxuIFAhtL5kzNDQtU1Jaf9JaBsx4aZpKKCPBhupaomRT%2F1bDGtNEQwZd08JrsXrjrQtcVxAw6epCixY2K8wOREGFL3o2TJ4cagAXvAJ8kvs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875c9a327a5aabdb-CPH
alt-svc: h3=":443"; ma=86400

dropoptionfilestorage.nl/favicon.ico

104.21.38.19

403 Forbidden

548 B

URL GET HTTP/3
dropoptionfilestorage.nl/favicon.ico
IP
104.21.38.19:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Certificate
IssuerGoogle Trust Services LLC
Subjectdropoptionfilestorage.nl
FingerprintCE:D1:AC:74:00:54:8D:7E:F9:FF:4D:E7:3D:D6:6B:FD:ED:50:11:D2
ValidityMon, 08 Apr 2024 22:27:40 GMT - Sun, 07 Jul 2024 22:27:39 GMT

File type
HTML document, ASCII text, with very long lines (574), with no line terminators
Size
548 B (548 bytes)
Hash
a7cf0a8915284e5935928ecd610fa90f
e925f9724ee0d543f2eade907be8145ab319c243
511ec2d25451ae56986344e49b41984c74963f99005ac6884ffc695b767c0fef

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: dropoptionfilestorage.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Cookie: 8LyPrQzIRAdZgy4L7MTqWBW6ZFM=iJIQdzxZ6No8XJkX2Lv4XRHDQlw; niSSDKJO464twJ079Em5-w2kUTc=1713358800; G1w4KPptzpHnmbu_g5VUpWXGenI=1713445200; fB6u-mGg6PSeVi3PAkTzOsWGgFc=0A2CI1d0YcEJxcJjx3zmfU_xYOc; 1of9Nj2p3_bGGmNOD7mNvcMM22c=lkLPZiL_UVgRTxwDers97UXe5XU; Na29JMVJucGi6iEtm6u0jG7vdDk=xGvcNAUiktZj2YWAIWEVXrdZ9fc; Yjb7nPs6fauvM9xtubUpxPWH7g8=1713358870; AJDc22tnRfITVMbA8iG8VukoRtY=1713445270; mny_kGDNUXTddrsVvVXr6jBeKM8=89XDccveSPjc8tRWie-QQxM4ITI; JmLGxBkt48wap2i3hGTwMicul2E=pGsBSnNhhoimZ6LJFW54dIsIYRQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 17 Apr 2024 13:01:11 GMT
content-type: text/html
vary: Accept-Encoding
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
cache-control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable
pragma: public
cf-cache-status: HIT
age: 450108
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2FlW556p8WI%2FXTFxOYgxUNRbEWmKaE%2ByzQCcFlWn%2Fn4XM%2BGBPU%2FzlELnSaKJLW2pwPOuXrTJ6HtivCQ%2FwCc7G4uvvgQUCYY0Yi1iaFhipjzkuiClFLwUQfF51EfLJ4Wvxb%2BzM%2FAQTyfa%2Bn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875c9a3229d1abdb-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

dropoptionfilestorage.nl/cdn-cgi/challenge-platform/h/g/jsd/r/875c9a2f4d22abdb

104.21.38.19

200 OK

0 B

URL POST HTTP/3
dropoptionfilestorage.nl/cdn-cgi/challenge-platform/h/g/jsd/r/875c9a2f4d22abdb
IP
104.21.38.19:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Certificate
IssuerGoogle Trust Services LLC
Subjectdropoptionfilestorage.nl
FingerprintCE:D1:AC:74:00:54:8D:7E:F9:FF:4D:E7:3D:D6:6B:FD:ED:50:11:D2
ValidityMon, 08 Apr 2024 22:27:40 GMT - Sun, 07 Jul 2024 22:27:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/jsd/r/875c9a2f4d22abdb HTTP/1.1
Host: dropoptionfilestorage.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12313
Origin: https://dropoptionfilestorage.nl
DNT: 1
Connection: keep-alive
Referer: https://dropoptionfilestorage.nl/Test/6827287428478472842749248294829482/49333948394333894343843935985303/3738394839583359839583593880353/index.html
Cookie: 8LyPrQzIRAdZgy4L7MTqWBW6ZFM=iJIQdzxZ6No8XJkX2Lv4XRHDQlw; niSSDKJO464twJ079Em5-w2kUTc=1713358800; G1w4KPptzpHnmbu_g5VUpWXGenI=1713445200; fB6u-mGg6PSeVi3PAkTzOsWGgFc=0A2CI1d0YcEJxcJjx3zmfU_xYOc; 1of9Nj2p3_bGGmNOD7mNvcMM22c=lkLPZiL_UVgRTxwDers97UXe5XU; Na29JMVJucGi6iEtm6u0jG7vdDk=xGvcNAUiktZj2YWAIWEVXrdZ9fc; Yjb7nPs6fauvM9xtubUpxPWH7g8=1713358870; AJDc22tnRfITVMbA8iG8VukoRtY=1713445270; mny_kGDNUXTddrsVvVXr6jBeKM8=89XDccveSPjc8tRWie-QQxM4ITI; JmLGxBkt48wap2i3hGTwMicul2E=pGsBSnNhhoimZ6LJFW54dIsIYRQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 17 Apr 2024 13:01:11 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=TR6SXOPoZ.ttsoU82rR_95lt7T7eUV8otZx56xod8Gk-1713358871-1.0.1.1-DxFB2LzdemE1ZLTYvL9OBei5LSiC0yyJSiK7Ar8NrwmvbQS9WjuMpfbmFGx.6efg3T84r1MjOdxkqNG1N8vviA; path=/; expires=Thu, 17-Apr-25 13:01:11 GMT; domain=.dropoptionfilestorage.nl; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dDVnCIQqbr1vUOW8u8WuGd35oAoycuyoSR8tK0uq93njTvW2usvyCm%2FopY3PAv1gygWtN%2FYzpt2i6Hp40n3IsCM9o9T5pMd%2BZUAzaV5w4Xe7uMRQQ%2BeSqYjQgI2V0NspgfVJKZIUWc7Au5U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875c9a335bdfabdb-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type