Report - key-hax.net/online/download/dsound.dll

Report Overview

Visited public
2025-05-06 21:27:40
Tags
sinkhole suspicious cloudflare
URL
key-hax.net/online/download/dsound.dll
Finishing URL
key-hax.net/online/download/dsound.dll
IP / ASN
104.21.64.1
#13335 CLOUDFLARENET
Title
Attention Required! | Cloudflare
Suspicious - Sinkholed / Blocked

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
key-hax.net	unknown	unknown	No data	No data	4.8 kB	76 kB	104.21.80.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	key-hax.net/online/download/dsound.dll	ScriptElement	210 B	2023-03-07	2025-05-11
Pretty URL key-hax.net/online/download/dsound.dll IP 104.21.64.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 04:03 Times Seen83484 Hash ab1ac4cf0f484cc9f859c0a7983353e0 2da142b1135bd10cdbed4a7353e4483acc30ebe9 50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324 Loading...

	key-hax.net/online/download/dsound.dll	ScriptElement	375 B	2023-03-07	2025-05-11
Pretty URL key-hax.net/online/download/dsound.dll IP 104.21.64.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 04:03 Times Seen85442 Hash 56df91490fa1984fa82b297dcb23c22d 2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9 275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24 Loading...

	about:blank	ScriptElement	236 B	2025-05-06	2025-05-06
Pretty URL about:blank IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-06 21:28 Last Seen2025-05-06 21:28 Times Seen1 Hash de1b04f2736d44877a0e2a1cf39af26d 5e72acf3805bb58f5fb5a45debdb79d188ee076c edceff6b215114bdcdf6d5c2f957ff849c9ca164bc9d9856e30b097e9a945c63 Loading...

	key-hax.net/cdn-cgi/challenge-platform/scripts/jsd/main.js	ScriptElement	8.5 kB	2025-05-06	2025-05-06
Pretty URL key-hax.net/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.64.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-06 21:28 Last Seen2025-05-06 21:28 Times Seen1 Hash 4c9428d9477e3e6ec836ea67b8623728 b553e3542c7c2e0df532b60d70e09d7b9f676319 2c65b628e5380bc192171c2d1415929e685a2c91d277eb2a9aaee4ce5bfda40e Loading...

	key-hax.net/online/download/dsound.dll	ScriptElement	38 B	2023-03-07	2025-05-11
Pretty URL key-hax.net/online/download/dsound.dll IP 104.21.64.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 04:03 Times Seen83924 Hash eb2ee6e4b3d4e81bacdb2474d9b3c2f5 6588855b25c975b224e0fd1b50ca1b3f36cd46ed 3dd83a652b2e60d8dfc699cd2006f70007b826a92b49e61e9194bf422481ac05 Loading...

	key-hax.net/online/download/dsound.dll	ScriptElement	921 B	2025-05-06	2025-05-06
Pretty URL key-hax.net/online/download/dsound.dll IP 104.21.64.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-06 21:28 Last Seen2025-05-06 21:28 Times Seen1 Hash ec04c0d9eff85dd97e7539f16bb60ab7 8af80d3270ced7cf7be9704cc3dedce23a7324d7 7907d123384996877b8305908790efbeaa1be59bc2748d62fd8531465bdaffc0 Loading...

HTTP Transactions (11)

URL IP Response Size

key-hax.net/favicon.ico

104.21.80.1

403 Forbidden

4.5 kB

URL GET
key-hax.net/favicon.ico
IP
104.21.80.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll

File type
HTML document, ASCII text, with very long lines (394)
Size
4.5 kB (4513 bytes)
Hash
24eb75d3350b32e80cc7fbdf990d8ae5
caf3a592e1f5b15cd9c19b6a1a661da37d399d78
d676bfc219f7d7181b4a990dbc37c0ed7a9e6cbb4a643a0c6b700dd229819e42

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://key-hax.net/online/download/dsound.dll
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Tue, 06 May 2025 21:27:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Tue, 06 May 2025 21:27:23 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BpLBgXVANis0OGSwS954h2JlLcQbo%2BaTbwp8AQGV8Lp3fg6d6J1ttVJ%2BMwfc7OMlzlPnSmsw%2BR6DQfEZZ8493tPviwWXfB%2FXzjv9bTLR8ZxfDxR%2BDpKly9iRBIegnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93bb8f55be82569f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=459&min_rtt=429&rtt_var=137&sent=4&recv=7&lost=0&retrans=0&sent_bytes=3651&recv_bytes=778&delivery_rate=8258555&cwnd=252&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

key-hax.net/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.21.64.1

302 Moved Temporarily

8.5 kB

URL GET
key-hax.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.21.64.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll

File type

Size
8.5 kB (8497 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Date: Tue, 06 May 2025 21:27:08 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://key-hax.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LHOucLqxUC7dSepV8Cy1uXJykbysvnJ%2FB6G5yY0ozOHX10tJLj7DDEmUtE5kb%2BE53lkp3PRc1thsR8JY%2Byoopo7xPJltpTRVyhJh%2FotPdWkjLjre%2BrK%2FbKXUB96EGA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93bb8f55ccda56a8-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=494&min_rtt=423&rtt_var=73&sent=11&recv=16&lost=0&retrans=0&sent_bytes=9162&recv_bytes=1540&delivery_rate=12397260&cwnd=257&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

key-hax.net/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.21.64.1

302 Found

8.5 kB

URL GET
key-hax.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.21.64.1:443
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll
Certificate
IssuerGoogle Trust Services
Subjectkey-hax.net
Fingerprint19:15:B5:37:B8:E4:4B:9E:20:7F:C9:B3:4E:9F:EA:A6:AC:2E:06:FC
ValidityTue, 15 Apr 2025 08:52:18 GMT - Mon, 14 Jul 2025 09:49:32 GMT

File type

Size
8.5 kB (8497 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 06 May 2025 21:27:08 GMT
content-length: 0
server: cloudflare
vary: Accept-Encoding
cf-ray: 93bb8f56089d1c06-OSL
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AQyKLujs8Rwm%2FjWfbpH%2BG%2FuSnmx%2Bdx5wKd5GvxdTu9jaSg%2Bpf1uKl3Zu0S%2FFXe8aEsfOUPT7FDa%2Bcri8yad9tPzlTkjDsrSc9aJf4X8R%2BVrpN9ngwMiQgDlPYDQJvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=513&min_rtt=450&rtt_var=145&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1070&delivery_rate=6787500&cwnd=253&unsent_bytes=0&cid=995d230c96458378&ts=45&x=0"
X-Firefox-Spdy: h2

key-hax.net/cdn-cgi/challenge-platform/h/b/jsd/r/0.7254766810377479:1746565891:zNG21RHfJ9egMgYyBEIa25eI-osG7dGsXxGkfvEr1Fo/93bb8f546b2156a8

104.21.80.1

302 Moved Temporarily

0 B

URL POST
key-hax.net/cdn-cgi/challenge-platform/h/b/jsd/r/0.7254766810377479:1746565891:zNG21RHfJ9egMgYyBEIa25eI-osG7dGsXxGkfvEr1Fo/93bb8f546b2156a8
IP
104.21.80.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.7254766810377479:1746565891:zNG21RHfJ9egMgYyBEIa25eI-osG7dGsXxGkfvEr1Fo/93bb8f546b2156a8 HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 11511
Origin: http://key-hax.net
DNT: 1
Connection: keep-alive
Referer: http://key-hax.net/online/download/dsound.dll
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Date: Tue, 06 May 2025 21:27:08 GMT
Content-Type: text/html
Content-Length: 143
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://key-hax.net/cdn-cgi/challenge-platform/h/b/jsd/r/0.7254766810377479:1746565891:zNG21RHfJ9egMgYyBEIa25eI-osG7dGsXxGkfvEr1Fo/93bb8f546b2156a8
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lolsZ1l8gIVMjbx5x22v4B1sao%2BUd3tITsmTETCYrP1rEPZTXV5LwGuHrP38u6mgDKzE0IwqPg1OQrQId3reoRLWtQqQN7m5w6%2BROZ%2FVmyt9igzV9PeK655KWPR8Og%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93bb8f57283e569f-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=503&min_rtt=429&rtt_var=191&sent=9&recv=17&lost=0&retrans=0&sent_bytes=6341&recv_bytes=12848&delivery_rate=8258555&cwnd=255&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

key-hax.net/online/download/dsound.dll

104.21.64.1

403 Forbidden

4.5 kB

URL User Request GET
key-hax.net/online/download/dsound.dll
IP
104.21.64.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectkey-hax.net
Fingerprint19:15:B5:37:B8:E4:4B:9E:20:7F:C9:B3:4E:9F:EA:A6:AC:2E:06:FC
ValidityTue, 15 Apr 2025 08:52:18 GMT - Mon, 14 Jul 2025 09:49:32 GMT

File type
HTML document, ASCII text, with very long lines (396)
Size
4.5 kB (4545 bytes)
Hash
a1e3e07e055d8dc8d645703f31a9914b
7a7527f27108d21bd44fd017f14e7f9c93c0f7b2
7a52837a5298c82b85d0f9ba0294af64c046a38a08308dbf79a81219064b87f2

HTTP Headers

GET /online/download/dsound.dll HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Tue, 06 May 2025 21:27:07 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=F904myMXonsz%2B6ZUCAGmfKgRwgvgacSQGeDagTM2Hzb1L0Z1RbYfWfY3GozQwzbuPuRXGrFSZVr%2FSBtXg7DZ%2BALRVmh%2F7hknKxIV%2FoAuKV8OLiIHTG02%2BvIvuF4ARQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: 93bb8f52ebb456b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

key-hax.net/cdn-cgi/styles/cf.errors.css

104.21.64.1

200 OK

24 kB

URL GET
key-hax.net/cdn-cgi/styles/cf.errors.css
IP
104.21.64.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll

File type
ASCII text, with very long lines (24050)
Size
24 kB (24051 bytes)
Hash
5e8c69a459a691b5d1b9be442332c87d
f24dd1ad7c9080575d92a9a9a2c42620725ef836
84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091

HTTP Headers

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://key-hax.net/online/download/dsound.dll
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 May 2025 21:27:08 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 25 Apr 2025 17:07:48 GMT
ETag: W/"680bc164-5df3"
Server: cloudflare
CF-RAY: 93bb8f552c1856a8-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 06 May 2025 23:27:08 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip

key-hax.net/cdn-cgi/images/cf-no-screenshot-error.png

104.21.80.1

200 OK

3.2 kB

URL GET
key-hax.net/cdn-cgi/images/cf-no-screenshot-error.png
IP
104.21.80.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll

File type
PNG image data, 178 x 175, 8-bit colormap, non-interlaced
Size
3.2 kB (3213 bytes)
Hash
0d768cbc261841d3affc933b9ac3130e
aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7
1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://key-hax.net/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 May 2025 21:27:08 GMT
Content-Type: image/png
Content-Length: 3213
Connection: keep-alive
Last-Modified: Fri, 25 Apr 2025 17:07:48 GMT
ETag: "680bc164-c8d"
Server: cloudflare
CF-RAY: 93bb8f557e2d569f-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 06 May 2025 23:27:08 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

key-hax.net/cdn-cgi/challenge-platform/h/b/jsd/r/0.7254766810377479:1746565891:zNG21RHfJ9egMgYyBEIa25eI-osG7dGsXxGkfvEr1Fo/93bb8f546b2156a8

104.21.64.1

405 Method Not Allowed

0 B

URL GET
key-hax.net/cdn-cgi/challenge-platform/h/b/jsd/r/0.7254766810377479:1746565891:zNG21RHfJ9egMgYyBEIa25eI-osG7dGsXxGkfvEr1Fo/93bb8f546b2156a8
IP
104.21.64.1:443
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll
Certificate
IssuerGoogle Trust Services
Subjectkey-hax.net
Fingerprint19:15:B5:37:B8:E4:4B:9E:20:7F:C9:B3:4E:9F:EA:A6:AC:2E:06:FC
ValidityTue, 15 Apr 2025 08:52:18 GMT - Mon, 14 Jul 2025 09:49:32 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.7254766810377479:1746565891:zNG21RHfJ9egMgYyBEIa25eI-osG7dGsXxGkfvEr1Fo/93bb8f546b2156a8 HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://key-hax.net
Referer: http://key-hax.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 405 Method Not Allowed
date: Tue, 06 May 2025 21:27:08 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TDlz%2BjepgbJFoozb0MdYWh0bqen6o9%2FRB52WV%2Fl9rHQP6B9b8SD4R4DvCu%2BRU5XVQSl5zybjrDtCi6sc5ldsaWz6QIHMNeAxhfXfMvm264ohy0t0obmAP4yPq2ECkw%3D%3D"}],"group":"cf-nel","max_age":604800}
allow: POST
cf-ray: 93bb8f576bd7b4f4-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2552&min_rtt=2123&rtt_var=1102&sent=13&recv=8&lost=0&retrans=0&sent_bytes=3824&recv_bytes=1267&delivery_rate=276876&cwnd=12000&unsent_bytes=0&cid=8bd313db565742fa&ts=44&x=16"

key-hax.net/online/download/dsound.dll

104.21.64.1

403 Forbidden

5.5 kB

URL User Request GET
key-hax.net/online/download/dsound.dll
IP
104.21.64.1:80
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (945)
Size
5.5 kB (5451 bytes)
Hash
692f3a109a5398a551ec3d5690b3184f
9184bb655def618875baa10d1a49c38a07241e26
05a37805bdcbbf2b3be9227da80c4e8b23ba9f22182cd90fd0433a5ecd2fae04

HTTP Headers

GET /online/download/dsound.dll HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Tue, 06 May 2025 21:27:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Tue, 06 May 2025 21:27:23 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iEvjGDbuXm24Z%2FVRA%2BOMprp1osTMY6ahV2dFNu61FlpvMNmM%2BL7MdBsn8DWXfMl5OzFSgrcemLRrSYUoiAkkI1HM4KKIQzZAHdIpOnnJcLOeNfGGJA8uyAjtraKuWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93bb8f546b2156a8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=432&min_rtt=432&rtt_var=216&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=422&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

key-hax.net/cdn-cgi/images/browser-bar.png?1376755637

104.21.64.1

200 OK

715 B

URL GET
key-hax.net/cdn-cgi/images/browser-bar.png?1376755637
IP
104.21.64.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll

File type
PNG image data, 960 x 53, 8-bit colormap, non-interlaced
Size
715 B (715 bytes)
Hash
226dcb8f6144bdaafdfbd8f2f354be64
3785cc5b3bf52f8e398177b0ff1020b24aa86b8c
8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://key-hax.net/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 May 2025 21:27:08 GMT
Content-Type: image/png
Content-Length: 715
Connection: keep-alive
Last-Modified: Fri, 25 Apr 2025 17:07:48 GMT
ETag: "680bc164-2cb"
Server: cloudflare
CF-RAY: 93bb8f557c8756a8-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 06 May 2025 23:27:08 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes

key-hax.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js?

104.21.64.1

200 OK

8.5 kB

URL GET
key-hax.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js?
IP
104.21.64.1:443
ASN
#13335 CLOUDFLARENET

Requested by
http://key-hax.net/online/download/dsound.dll
Certificate
IssuerGoogle Trust Services
Subjectkey-hax.net
Fingerprint19:15:B5:37:B8:E4:4B:9E:20:7F:C9:B3:4E:9F:EA:A6:AC:2E:06:FC
ValidityTue, 15 Apr 2025 08:52:18 GMT - Mon, 14 Jul 2025 09:49:32 GMT

File type
JavaScript source, ASCII text, with very long lines (8497), with no line terminators
Size
8.5 kB (8497 bytes)
Hash
4c9428d9477e3e6ec836ea67b8623728
b553e3542c7c2e0df532b60d70e09d7b9f676319
2c65b628e5380bc192171c2d1415929e685a2c91d277eb2a9aaee4ce5bfda40e

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/701fd2559006/main.js? HTTP/1.1
Host: key-hax.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 06 May 2025 21:27:08 GMT
content-type: application/javascript; charset=UTF-8
cf-ray: 93bb8f5638cf1c06-OSL
server: cloudflare
content-encoding: br
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zB09Ip2d9O%2FXB059Wh1nny6vKb7xmzAWth9RiQ6nwOjZf4wHhP1%2FQQjaW6HV6uTYhJLr2hsj%2BTWmQuKmp1VzMZrQ%2BkawlrlT0HyrIUr8UaPMdaE%2FMeN9P%2FHn0q0Upw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2954&min_rtt=450&rtt_var=4991&sent=8&recv=12&lost=0&retrans=0&sent_bytes=3874&recv_bytes=1182&delivery_rate=6787500&cwnd=255&unsent_bytes=0&cid=995d230c96458378&ts=68&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers