Report - jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367

Report Overview

Visited public
2024-08-01 18:38:44
Tags
sinkhole suspicious cloudflare
URL
jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
Finishing URL
jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
IP / ASN
172.67.144.33
#13335 CLOUDFLARENET
Title
Attention Required! | Cloudflare
Suspicious - Sinkholed / Blocked

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-08-01 18:12:56	2.3 kB	6.2 kB	23.36.76.226
jitu99bookie.co	unknown	unknown	No data	No data	4.2 kB	23 kB	104.21.55.23

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367	ScriptElement	0 B	0001-01-01	2025-05-08
Pretty URL jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367 IP 104.21.55.23 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-08 03:42 Times Seen4629204 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	ScriptElement	236 B	2024-08-19	2024-08-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 15:00 Last Seen2024-08-19 15:00 Times Seen1 Hash 2908d4598bdc6e7310816970a060496e abbd148d1fe09e584ea86209eab79f8e9927a325 313bd0f64eeb202894ea996150df6c9bd29c2179aa06f2de5b7f4317c3ce1cc2 Loading...

	jitu99bookie.co/cdn-cgi/challenge-platform/scripts/jsd/main.js	ScriptElement	7.8 kB	2024-08-19	2024-08-19
Pretty URL jitu99bookie.co/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.55.23 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 15:00 Last Seen2024-08-19 15:00 Times Seen1 Hash ce11436424ca592757ff9c74c19cadcc 3f9decf632c914ddfdfe190eff5da7aa89f2925c 4c384efb661ed60f34b24f62be82e99be70bc087319dd8b5d00e0eba965c6fcf Loading...

	jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367	ScriptElement	393 B	2023-04-05	2025-03-02
Pretty URL jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367 IP 104.21.55.23 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:39 Last Seen2025-03-02 06:13 Times Seen143291 Hash 34ad0a116707d3b794129a6720af92d7 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Loading...

	jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367	ScriptElement	0 B	0001-01-01	2025-05-08
Pretty URL jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367 IP 104.21.55.23 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-08 03:42 Times Seen4629204 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367	ScriptElement	923 B	2024-08-19	2024-08-19
Pretty URL jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367 IP 104.21.55.23 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-19 15:00 Last Seen2024-08-19 15:00 Times Seen1 Hash 295f35ec9b2a015e34cc306de3f9e8a9 2467824f91fa381f1798cbe277db5cb0f43653d4 e97eba437180b7b26402f2dbb5fd255d20fcb21408897305b46ea4274004a6f0 Loading...

HTTP Transactions (17)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
1fc39f9a6ccc25867cc2924e625282d0
f859354fa7202cd2f2cbd279ad12ab0358c638d1
037bd31a93556f0a88d519cc4629ca3f8fcc94ffc357a71d34a133e5943c3b96

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "037BD31A93556F0A88D519CC4629CA3F8FCC94FFC357A71D34A133E5943C3B96"
Last-Modified: Thu, 01 Aug 2024 06:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9709
Expires: Thu, 01 Aug 2024 21:20:07 GMT
Date: Thu, 01 Aug 2024 18:38:18 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
44e4b90088be23610d96d270d377406d
ce7ab232af453bb960a97435173b3ab09a376054
31567666bda7db348cd6e2ad94576da2c7240872f45e969fd6a52cf14440e95b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "31567666BDA7DB348CD6E2AD94576DA2C7240872F45E969FD6A52CF14440E95B"
Last-Modified: Thu, 01 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9717
Expires: Thu, 01 Aug 2024 21:20:15 GMT
Date: Thu, 01 Aug 2024 18:38:18 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
b84a2e6efef529bac3e0d5dd309babe7
b22b4d0e8f84859a83b85939ae4c77d16fde0c93
9ed1020ce84380273c514b5c14a8705879d8233acaae13b428063bc7b83a067b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9ED1020CE84380273C514B5C14A8705879D8233ACAAE13B428063BC7B83A067B"
Last-Modified: Thu, 01 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6729
Expires: Thu, 01 Aug 2024 20:30:28 GMT
Date: Thu, 01 Aug 2024 18:38:19 GMT
Connection: keep-alive

jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367

104.21.55.23

403 Forbidden

2.1 kB

URL User Request GET HTTP/2
jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
IP
104.21.55.23:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectjitu99bookie.co
Fingerprint0D:1D:C0:A9:23:88:4B:94:55:AE:84:DE:D4:F0:04:CC:D7:0F:B6:7A
ValidityMon, 29 Jul 2024 16:47:49 GMT - Sun, 27 Oct 2024 16:47:48 GMT

File type
HTML document, ASCII text, with very long lines (945)
Size
2.1 kB (2095 bytes)
Hash
5cb8381fed7a4e1056659e1e9c9ef137
df311e830cc96389db5301d938c996e373776a61
eafde409ab3ab7198fa81fc06d5ab645728e3c8739d485088e84e25733195da7

HTTP Headers

GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367 HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Thu, 01 Aug 2024 18:38:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Thu, 01 Aug 2024 18:38:34 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p4e63PSZfbPcGO5kmfersTOUOic%2FVNSM0%2Bfn4fg1kN%2FPRWYC9nonkw9LVd0dEFvpOj4rAoembRnIMFdo50%2BFzX20TDO46Oyi5FylqU6HXXmhn%2B3XXHLv0TVk2hRN0vvqXY4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8ac7f1cbae7c712a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
a4d6b926b81d6d764f45acb544ca4e54
f123a7aae8e5c35edfde0506e9ae0d129b65f28b
6a327a87f207fd32257661671310e329c10e67ee895c4afc67b197ceb2af19b0

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6A327A87F207FD32257661671310E329C10E67EE895C4AFC67B197CEB2AF19B0"
Last-Modified: Thu, 01 Aug 2024 06:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16932
Expires: Thu, 01 Aug 2024 23:20:31 GMT
Date: Thu, 01 Aug 2024 18:38:19 GMT
Connection: keep-alive

jitu99bookie.co/cdn-cgi/styles/cf.errors.css

104.21.55.23

200 OK

4.5 kB

URL GET HTTP/1.1
jitu99bookie.co/cdn-cgi/styles/cf.errors.css
IP
104.21.55.23:80
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367

File type
ASCII text, with very long lines (24050)
Size
4.5 kB (4515 bytes)
Hash
5e8c69a459a691b5d1b9be442332c87d
f24dd1ad7c9080575d92a9a9a2c42620725ef836
84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091

HTTP Headers

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Aug 2024 18:38:19 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 30 Jul 2024 21:55:42 GMT
ETag: W/"66a9615e-5df3"
Server: cloudflare
CF-RAY: 8ac7f1cd1802712a-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Thu, 01 Aug 2024 20:38:19 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip

jitu99bookie.co/cdn-cgi/images/browser-bar.png?1376755637

104.21.55.23

200 OK

715 B

URL GET HTTP/1.1
jitu99bookie.co/cdn-cgi/images/browser-bar.png?1376755637
IP
104.21.55.23:80
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367

File type
PNG image data, 960 x 53, 8-bit colormap, non-interlaced
Size
715 B (715 bytes)
Hash
226dcb8f6144bdaafdfbd8f2f354be64
3785cc5b3bf52f8e398177b0ff1020b24aa86b8c
8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jitu99bookie.co/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Aug 2024 18:38:19 GMT
Content-Type: image/png
Content-Length: 715
Connection: keep-alive
Last-Modified: Tue, 30 Jul 2024 21:55:42 GMT
ETag: "66a9615e-2cb"
Server: cloudflare
CF-RAY: 8ac7f1cd5843712a-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Thu, 01 Aug 2024 20:38:19 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

jitu99bookie.co/cdn-cgi/images/cf-no-screenshot-error.png

104.21.55.23

200 OK

3.2 kB

URL GET HTTP/1.1
jitu99bookie.co/cdn-cgi/images/cf-no-screenshot-error.png
IP
104.21.55.23:80
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367

File type
PNG image data, 178 x 175, 8-bit colormap, non-interlaced
Size
3.2 kB (3213 bytes)
Hash
0d768cbc261841d3affc933b9ac3130e
aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7
1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jitu99bookie.co/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Aug 2024 18:38:19 GMT
Content-Type: image/png
Content-Length: 3213
Connection: keep-alive
Last-Modified: Tue, 30 Jul 2024 21:55:42 GMT
ETag: "66a9615e-c8d"
Server: cloudflare
CF-RAY: 8ac7f1cd6a7756a2-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Thu, 01 Aug 2024 20:38:19 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

jitu99bookie.co/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.21.55.23

302 Found

143 B

URL GET HTTP/2
jitu99bookie.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.21.55.23:443
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
Certificate
IssuerGoogle Trust Services
Subjectjitu99bookie.co
Fingerprint0D:1D:C0:A9:23:88:4B:94:55:AE:84:DE:D4:F0:04:CC:D7:0F:B6:7A
ValidityMon, 29 Jul 2024 16:47:49 GMT - Sun, 27 Oct 2024 16:47:48 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
143 B (143 bytes)
Hash
cb7b8f439b04c00f4a2d78160ddfee8d
9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4
12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Date: Thu, 01 Aug 2024 18:38:19 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://jitu99bookie.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jC9puq3I9s%2BVhzUk2NtCPFtJv6qlkrW%2FoIHLde6w88rw4XHzWpfVSU2D9HP8zDHmdxT6BcxeHNesS1mVOPfMVyILoEDaGIQywftjFZ3J5nEoi67JWfly7ZeqKXhH5hGcSjg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8ac7f1cda8a6712a-OSL
alt-svc: h2=":443"; ma=60

jitu99bookie.co/favicon.ico

104.21.55.23

403 Forbidden

1.7 kB

URL GET HTTP/1.1
jitu99bookie.co/favicon.ico
IP
104.21.55.23:80
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367

File type
HTML document, ASCII text, with very long lines (394)
Size
1.7 kB (1737 bytes)
Hash
19aa30bc44ecdaedae319a0be6a7b574
c562c0ea4f719eeb3a235e7f534b7976f557f51d
017d54854c37040f67074cfe105642abecdebd13aba584baddcc65f4c50c8192

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Thu, 01 Aug 2024 18:38:19 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Thu, 01 Aug 2024 18:38:34 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=obiWourjUFxOSGXaV0sdAuPUeQCxgM9ObE0ZXRE9AcpY95B2tMBK2%2FELlfT9Qk%2FDatYdSnpzauy6P5Qh3YwiqFRLgZfo0fwjBvKzSOK1N52ljCihJVfvJtfPy4adqsRXTII%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8ac7f1cd9aa256a2-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

jitu99bookie.co/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.21.55.23

302 Found

0 B

URL GET HTTP/2
jitu99bookie.co/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.21.55.23:443
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
Certificate
IssuerGoogle Trust Services
Subjectjitu99bookie.co
Fingerprint0D:1D:C0:A9:23:88:4B:94:55:AE:84:DE:D4:F0:04:CC:D7:0F:B6:7A
ValidityMon, 29 Jul 2024 16:47:49 GMT - Sun, 27 Oct 2024 16:47:48 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 01 Aug 2024 18:38:19 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/8c81cb09042c/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dIomEcTuZQVfAwlTkRWZLxeqHxLlfF%2BtPb8cVlLQcI45zEYv37JkhtpSbnuA6ATymbMTHfoGOi313IL9Yukjw%2Bo1E4cG7VDCk79YNJuXV6cqFu0G%2Bfj4MESKGQDRzOddlo0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ac7f1cdf86856a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

jitu99bookie.co/cdn-cgi/challenge-platform/h/b/jsd/r/8ac7f1cbae7c712a

104.21.55.23

404 Not Found

143 B

URL OPTIONS HTTP/3
jitu99bookie.co/cdn-cgi/challenge-platform/h/b/jsd/r/8ac7f1cbae7c712a
IP
104.21.55.23:443
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
Certificate
IssuerGoogle Trust Services
Subjectjitu99bookie.co
Fingerprint0D:1D:C0:A9:23:88:4B:94:55:AE:84:DE:D4:F0:04:CC:D7:0F:B6:7A
ValidityMon, 29 Jul 2024 16:47:49 GMT - Sun, 27 Oct 2024 16:47:48 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
143 B (143 bytes)
Hash
cb7b8f439b04c00f4a2d78160ddfee8d
9aa44b5d68f6359f10de0dcd24ea3e12548d9bd4
12755429beb15d5eb57eafa45b8dba326343dd099bf0552038694c3856e8860e

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/jsd/r/8ac7f1cbae7c712a HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 11672
Origin: http://jitu99bookie.co
DNT: 1
Connection: keep-alive
Referer: http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Date: Thu, 01 Aug 2024 18:38:20 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://jitu99bookie.co/cdn-cgi/challenge-platform/h/b/jsd/r/8ac7f1cbae7c712a
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RcDFNv0Wy2tLPWkCGWRoa2f%2Fb0wQbDRgtJLED%2BB6gS2zJAeBR7C%2BX7ewQOFXwJ6CWMajilUX%2F9vpX%2BPFepDqSV2WfTylax3pqBGRTOy6B6FeliVrpiGygCX0JLlSeFbLn5o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8ac7f1cf8ced56a2-OSL
alt-svc: h2=":443"; ma=60

jitu99bookie.co/cdn-cgi/challenge-platform/h/b/jsd/r/8ac7f1cbae7c712a

104.21.55.23

404 Not Found

7 B

URL OPTIONS HTTP/3
jitu99bookie.co/cdn-cgi/challenge-platform/h/b/jsd/r/8ac7f1cbae7c712a
IP
104.21.55.23:443
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
Certificate
IssuerGoogle Trust Services
Subjectjitu99bookie.co
Fingerprint0D:1D:C0:A9:23:88:4B:94:55:AE:84:DE:D4:F0:04:CC:D7:0F:B6:7A
ValidityMon, 29 Jul 2024 16:47:49 GMT - Sun, 27 Oct 2024 16:47:48 GMT

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
fedb2d84cafe20862cb4399751a8a7e3
81f344a7686a80b4c5293e8fdc0b0160c82c06a8
f1234d75178d892a133a410355a5a990cf75d2f33eba25d575943d4df632f3a4

HTTP Headers

OPTIONS /cdn-cgi/challenge-platform/h/b/jsd/r/8ac7f1cbae7c712a HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Referer: http://jitu99bookie.co/
Origin: http://jitu99bookie.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 01 Aug 2024 18:38:20 GMT
content-type: application/json
content-length: 7
cf-chl-out: GjKP5SpmHiBxQ8h0hc/VorZXwqN3x/FR484=$/7GOqTzzagqDm2r3
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0MuAnpj1LbcxUyzt0qAvbv9WrnENWY1gXASOAsiCQijBB4YitrP096U0%2FjNcqkd9Py%2BwUHU%2BmW755XPkwEQbKtJ3Dr%2BpEEvvy3mBbc16fKYva0wMqrpE3Jc7UmA2ObR8I1E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ac7f1cfdb1c1c02-OSL
alt-svc: h3=":443"; ma=86400

jitu99bookie.co/cdn-cgi/challenge-platform/h/b/scripts/jsd/8c81cb09042c/main.js?

104.21.55.23

200 OK

4.2 kB

URL GET HTTP/2
jitu99bookie.co/cdn-cgi/challenge-platform/h/b/scripts/jsd/8c81cb09042c/main.js?
IP
104.21.55.23:443
ASN
#13335 CLOUDFLARENET

Requested by
http://jitu99bookie.co/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=28365367
Certificate
IssuerGoogle Trust Services
Subjectjitu99bookie.co
Fingerprint0D:1D:C0:A9:23:88:4B:94:55:AE:84:DE:D4:F0:04:CC:D7:0F:B6:7A
ValidityMon, 29 Jul 2024 16:47:49 GMT - Sun, 27 Oct 2024 16:47:48 GMT

File type
JavaScript source, ASCII text, with very long lines (7829), with no line terminators
Size
4.2 kB (4153 bytes)
Hash
ce11436424ca592757ff9c74c19cadcc
3f9decf632c914ddfdfe190eff5da7aa89f2925c
4c384efb661ed60f34b24f62be82e99be70bc087319dd8b5d00e0eba965c6fcf

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/8c81cb09042c/main.js? HTTP/1.1
Host: jitu99bookie.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 01 Aug 2024 18:38:19 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q9QuuuclRrzgmmolnvpu%2BtNJTHli5lUjxAe9on%2FRZG3f5V0qUnIcFBA10tPsaQREha4ibpaQ30mxaazO%2Fi%2FW86CkGgXeq8cfFsZdf9sAAzUAxoYpqelIB4GYBRGMgNDfW%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ac7f1ce48b456a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
086417994a199f2bbee25bd5c76ce9d7
6de33407c60c52a9ed18403c3d0edebefec7c48a
0998db04ec6e07ad3a0ac6fb2410cd5d1c9ab6ea0b036c89c79f51f024e3a1f8

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0998DB04EC6E07AD3A0AC6FB2410CD5D1C9AB6EA0B036C89C79F51F024E3A1F8"
Last-Modified: Thu, 01 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18995
Expires: Thu, 01 Aug 2024 23:54:56 GMT
Date: Thu, 01 Aug 2024 18:38:21 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
086417994a199f2bbee25bd5c76ce9d7
6de33407c60c52a9ed18403c3d0edebefec7c48a
0998db04ec6e07ad3a0ac6fb2410cd5d1c9ab6ea0b036c89c79f51f024e3a1f8

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0998DB04EC6E07AD3A0AC6FB2410CD5D1C9AB6EA0B036C89C79F51F024E3A1F8"
Last-Modified: Thu, 01 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18995
Expires: Thu, 01 Aug 2024 23:54:56 GMT
Date: Thu, 01 Aug 2024 18:38:21 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
086417994a199f2bbee25bd5c76ce9d7
6de33407c60c52a9ed18403c3d0edebefec7c48a
0998db04ec6e07ad3a0ac6fb2410cd5d1c9ab6ea0b036c89c79f51f024e3a1f8

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0998DB04EC6E07AD3A0AC6FB2410CD5D1C9AB6EA0B036C89C79F51F024E3A1F8"
Last-Modified: Thu, 01 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18995
Expires: Thu, 01 Aug 2024 23:54:56 GMT
Date: Thu, 01 Aug 2024 18:38:21 GMT
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size