| id-ddasnkee.com/Login.php |  104.21.23.213 | 403 Forbidden | 167 B |
URL User Request GET HTTP/3id-ddasnkee.com/Login.php IP104.21.23.213:443
CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /Login.php HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: jcCzQtr18__U9R8jEoWEvsmrbyM=lRlvleIka8BCPKSm2MaYFC61pbI; YaAtx5Xajr0OUmh6mbmgIo9lBZc=1715151341; I-kzRLzzZ0Urv9MJJFd-bscNRH4=1715237741; AXjZGvqIxFhjZoa8slRYNaNIfuc=3zlacKvk4mH88PgzVmdDXb12ya4
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 May 2024 06:58:32 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 08 May 2024 07:58:32 GMT
Location: https://id-ddasnkee.com/Login.php
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lBjybBlWKdcI%2BIXXeX06oSWw%2B5AzJ8kf1EClUJ%2BOS7y%2FuSz4OfFPghNsRVWSKc8OXqHLwJgrvNT8Zs7xHL1ACffaSxkzPbKQ2uQSKpxZ55NH8PgnlbBbBuPHszHmp32XFjI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 88078fd5f9cbb51b-OSL
alt-svc: h2=":443"; ma=60
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/scripts/jsd/main.js |  172.67.213.237 | 302 Found | 0 B |
URL GET HTTP/3id-ddasnkee.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/Login.php CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: jcCzQtr18__U9R8jEoWEvsmrbyM=lRlvleIka8BCPKSm2MaYFC61pbI; YaAtx5Xajr0OUmh6mbmgIo9lBZc=1715151341; I-kzRLzzZ0Urv9MJJFd-bscNRH4=1715237741; AXjZGvqIxFhjZoa8slRYNaNIfuc=3zlacKvk4mH88PgzVmdDXb12ya4; TpU6AeIo91azMqcOY3zNsGmLiw0=lkLPZiL_UVgRTxwDers97UXe5XU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Wed, 08 May 2024 06:58:32 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js
cache-control: max-age=300, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HbDCgp%2FX6fEZfP8SfFzw66UVk%2FgoL0GWYFtfXvPa7dSRBgVe5CDTocPHzeY34x9IAT5AGRhmiTulAinVq%2B%2BY7wwkR0ymGl4i0F1TiVxlAKgzsExeNHN5tqkqYOF%2FLfOcsDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88078fd85f2d0b06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| id-ddasnkee.com/Login.php | 172.67.213.237 | 403 Forbidden | 0 B |
URL User Request GET HTTP/3id-ddasnkee.com/Login.php IP172.67.213.237:443
CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST /Login.php HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
OxJC5OGA9ArKISyPWOJ-1XvBC2k: 27292531
X-Requested-with: XMLHttpRequest
X-Requested-TimeStamp:
X-Requested-TimeStamp-Expire:
X-Requested-TimeStamp-Combination:
X-Requested-Type: GET
X-Requested-Type-Combination: GET
z8R2hXuLeR8JCBSG4dJq8rrJ7c0: 2D19kmjwc2DK8PXA3g82F5WgZg
Content-type: application/x-www-form-urlencoded
Content-Length: 22
Origin: https://id-ddasnkee.com
DNT: 1
Connection: keep-alive
Referer: https://id-ddasnkee.com/Login.php
Cookie: jcCzQtr18__U9R8jEoWEvsmrbyM=lRlvleIka8BCPKSm2MaYFC61pbI; YaAtx5Xajr0OUmh6mbmgIo9lBZc=1715151341; I-kzRLzzZ0Urv9MJJFd-bscNRH4=1715237741; AXjZGvqIxFhjZoa8slRYNaNIfuc=3zlacKvk4mH88PgzVmdDXb12ya4; TpU6AeIo91azMqcOY3zNsGmLiw0=lkLPZiL_UVgRTxwDers97UXe5XU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 08 May 2024 06:58:32 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block, 1; mode=block
set-cookie: qhNxB3BHKTwadlHk-LNRaaF3PHc=xGvcNAUiktZj2YWAIWEVXrdZ9fc; path=/; expires=Thu, 09-May-24 06:58:31 GMT; Max-Age=86400;
1oaSIPoqimsQbl5iNHIxvlTxaw8=1715151511; path=/; expires=Thu, 09-May-24 06:58:31 GMT; Max-Age=86400;
xVqSlpLLZ8PRt2XzXAep4s7cJR8=1715237911; path=/; expires=Thu, 09-May-24 06:58:31 GMT; Max-Age=86400;
HVSltZW8AOITRVWGMh12foo6TO0=zFjPMTyZNsuwIiUMQuaiCR4pemw; path=/; expires=Thu, 09-May-24 06:58:31 GMT; Max-Age=86400;
vhMoaa2JgDBEDF1U0oeQy4mbHms=BhC_Z_IxFB-eOSI0tyzzOxgzAL4; path=/; expires=Thu, 09-May-24 06:58:31 GMT; Max-Age=86400;
x-frame-options: SAMEORIGIN
cache-control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFTG3UtDQrv1rha4vEN0zQ5NuCc01ybLCN0CsI7uPl3%2Fqi96R1E7igccH2cqsMP72ktNGd2UxExa0rnD%2BOBnj5q6eRJvviU5jLAR%2F1T6YZcPEFlRemadcLh4MeMi1MExx%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88078fd85f2a0b06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/jsd/r/88078fd62d5f0b06 | 172.67.213.237 | | 0 B |
URL id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/jsd/r/88078fd62d5f0b06 IP172.67.213.237:0
CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/b/jsd/r/88078fd62d5f0b06 HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12155
Origin: https://id-ddasnkee.com
DNT: 1
Connection: keep-alive
Referer: https://id-ddasnkee.com/Login.php
Cookie: jcCzQtr18__U9R8jEoWEvsmrbyM=lRlvleIka8BCPKSm2MaYFC61pbI; YaAtx5Xajr0OUmh6mbmgIo9lBZc=1715151341; I-kzRLzzZ0Urv9MJJFd-bscNRH4=1715237741; AXjZGvqIxFhjZoa8slRYNaNIfuc=3zlacKvk4mH88PgzVmdDXb12ya4; TpU6AeIo91azMqcOY3zNsGmLiw0=lkLPZiL_UVgRTxwDers97UXe5XU; qhNxB3BHKTwadlHk-LNRaaF3PHc=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 1oaSIPoqimsQbl5iNHIxvlTxaw8=1715151511; xVqSlpLLZ8PRt2XzXAep4s7cJR8=1715237911; HVSltZW8AOITRVWGMh12foo6TO0=zFjPMTyZNsuwIiUMQuaiCR4pemw; vhMoaa2JgDBEDF1U0oeQy4mbHms=BhC_Z_IxFB-eOSI0tyzzOxgzAL4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 06:58:32 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=2sbd62a3.KqZcGtoSsrTMO6XHVM5GdZyI2rHnfDY5oY-1715151512-1.0.1.1-EBWBAJhgxOUYu0LkuqOdFLwfwxeb3wK0vT.86ImyGGXSvhlKfDJYxFKM61KMUCgfvQ3kTlW.x2ujV1wHpTbVfw; path=/; expires=Thu, 08-May-25 06:58:32 GMT; domain=.id-ddasnkee.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yKuFyUuS29NaaH6Fmu1kmdbXeHRyQViunqIbVvISKoYnk3xQYN6whsSdFnvmFdZoXDwdL6g64dbXuWxbkyRJzUNQ2KDAkvR8%2Fg2nTCFLmASRuyIqNci6FkP7xmFgCOHG%2FzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88078fda1aebb4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.213.237 | 302 Found | 0 B |
URL GET HTTP/3id-ddasnkee.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/Login.php CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: jcCzQtr18__U9R8jEoWEvsmrbyM=lRlvleIka8BCPKSm2MaYFC61pbI; YaAtx5Xajr0OUmh6mbmgIo9lBZc=1715151341; I-kzRLzzZ0Urv9MJJFd-bscNRH4=1715237741; AXjZGvqIxFhjZoa8slRYNaNIfuc=3zlacKvk4mH88PgzVmdDXb12ya4; TpU6AeIo91azMqcOY3zNsGmLiw0=lkLPZiL_UVgRTxwDers97UXe5XU; qhNxB3BHKTwadlHk-LNRaaF3PHc=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 1oaSIPoqimsQbl5iNHIxvlTxaw8=1715151511; xVqSlpLLZ8PRt2XzXAep4s7cJR8=1715237911; HVSltZW8AOITRVWGMh12foo6TO0=zFjPMTyZNsuwIiUMQuaiCR4pemw; vhMoaa2JgDBEDF1U0oeQy4mbHms=BhC_Z_IxFB-eOSI0tyzzOxgzAL4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 08 May 2024 06:58:32 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js
access-control-allow-origin: *
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FghLIu2AGCl3rpPKlVuAAf9oqny5ZdkziMpVyzC8%2Fv8mByrbQMbn%2Fo4wXzG2q%2Fy8%2FC2h9OozBILTdWdzsJ3Psy6qcCiQpjpdLkDQtdXjnIx2liA7CtnFiRK9jMZ8DxnfNig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88078fdb8d25b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/jsd/r/88078fda4b37b4f3 | 172.67.213.237 | 200 OK | 0 B |
URL POST HTTP/3id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/jsd/r/88078fda4b37b4f3 IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/Login.php CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/b/jsd/r/88078fda4b37b4f3 HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12155
Origin: https://id-ddasnkee.com
DNT: 1
Connection: keep-alive
Referer: https://id-ddasnkee.com/Login.php
Cookie: jcCzQtr18__U9R8jEoWEvsmrbyM=lRlvleIka8BCPKSm2MaYFC61pbI; YaAtx5Xajr0OUmh6mbmgIo9lBZc=1715151341; I-kzRLzzZ0Urv9MJJFd-bscNRH4=1715237741; AXjZGvqIxFhjZoa8slRYNaNIfuc=3zlacKvk4mH88PgzVmdDXb12ya4; TpU6AeIo91azMqcOY3zNsGmLiw0=lkLPZiL_UVgRTxwDers97UXe5XU; qhNxB3BHKTwadlHk-LNRaaF3PHc=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 1oaSIPoqimsQbl5iNHIxvlTxaw8=1715151511; xVqSlpLLZ8PRt2XzXAep4s7cJR8=1715237911; HVSltZW8AOITRVWGMh12foo6TO0=zFjPMTyZNsuwIiUMQuaiCR4pemw; vhMoaa2JgDBEDF1U0oeQy4mbHms=BhC_Z_IxFB-eOSI0tyzzOxgzAL4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 06:58:33 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=aEK0I0iFl13nkj9tugbKIaIFAjr62.XrB2Amvn5YWL4-1715151513-1.0.1.1-138_gbcxyqsJa_ygPuvmdIkQUKRbBtXb9nX0N8oK_oMwZOveOWLrouCCd0hymNdIpXhe1HL3MnQSRRipa6opIw; path=/; expires=Thu, 08-May-25 06:58:33 GMT; domain=.id-ddasnkee.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x0ji6CIlGpauduiaaCdxjR1JuhDD399a4B42I5PPnfDcXhDE7v6rjYzxMfGybLDx3D5HhefMpitOizBa6u9YXsZbM9SmYZUGfEAKDoEkBNaVF55eX%2BAW%2FLvZvobBiqxTMsM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88078fdc9e83b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| id-ddasnkee.com/favicon.ico | 172.67.213.237 | 403 Forbidden | 146 B |
URL GET HTTP/3id-ddasnkee.com/favicon.ico IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/Login.php CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
File typeHTML document, ASCII text, with no line terminators Hashbcfacc6f2d2ee7cd5e014be08612f93e 7bb6f49a83b5186d5f8598e852bfbeee102d8a4d ef1a3d1af87d9d441ef37f001f2ffb6900ef0a7a4884a5ef165bc2b09e224b38
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://id-ddasnkee.com/Login.php
Cookie: jcCzQtr18__U9R8jEoWEvsmrbyM=lRlvleIka8BCPKSm2MaYFC61pbI; YaAtx5Xajr0OUmh6mbmgIo9lBZc=1715151341; I-kzRLzzZ0Urv9MJJFd-bscNRH4=1715237741; AXjZGvqIxFhjZoa8slRYNaNIfuc=3zlacKvk4mH88PgzVmdDXb12ya4; TpU6AeIo91azMqcOY3zNsGmLiw0=lkLPZiL_UVgRTxwDers97UXe5XU; qhNxB3BHKTwadlHk-LNRaaF3PHc=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 1oaSIPoqimsQbl5iNHIxvlTxaw8=1715151511; xVqSlpLLZ8PRt2XzXAep4s7cJR8=1715237911; HVSltZW8AOITRVWGMh12foo6TO0=zFjPMTyZNsuwIiUMQuaiCR4pemw; vhMoaa2JgDBEDF1U0oeQy4mbHms=BhC_Z_IxFB-eOSI0tyzzOxgzAL4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 08 May 2024 06:58:32 GMT
content-type: text/html
x-content-type-options: nosniff
x-xss-protection: 1; mode=block, 1; mode=block
cache-control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable
pragma: public
cf-cache-status: HIT
age: 79957
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5iISozfrIEPiQ0X5P7fjeHqADWo75KKv4rJ75Odt6%2FN5ReLmC81vpQje%2Fsv3i7OWwoBqQdk1fajaEgTGHaFebbMXJ6y20AfZjxrPvlgWXxTBI6EYQYtGtGutP9zLZ3ImjF0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88078fdb7d22b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js | 172.67.213.237 | 200 OK | 7.8 kB |
URL GET HTTP/3id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/Login.php CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7842), with no line terminators Hash02a4b1d6d8a34191e5e935e9a05f040e 84aecacfc3f18676e66c0bfaeea467718d3612c5 0130e835c4b2696c0b160cdf806c07f892b115b39b8f4c697fc51610f90d3f58
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: jcCzQtr18__U9R8jEoWEvsmrbyM=lRlvleIka8BCPKSm2MaYFC61pbI; YaAtx5Xajr0OUmh6mbmgIo9lBZc=1715151341; I-kzRLzzZ0Urv9MJJFd-bscNRH4=1715237741; AXjZGvqIxFhjZoa8slRYNaNIfuc=3zlacKvk4mH88PgzVmdDXb12ya4; TpU6AeIo91azMqcOY3zNsGmLiw0=lkLPZiL_UVgRTxwDers97UXe5XU; qhNxB3BHKTwadlHk-LNRaaF3PHc=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 1oaSIPoqimsQbl5iNHIxvlTxaw8=1715151511; xVqSlpLLZ8PRt2XzXAep4s7cJR8=1715237911; HVSltZW8AOITRVWGMh12foo6TO0=zFjPMTyZNsuwIiUMQuaiCR4pemw; vhMoaa2JgDBEDF1U0oeQy4mbHms=BhC_Z_IxFB-eOSI0tyzzOxgzAL4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 06:58:32 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lvPEQt5mZxwrZDvei4N%2FZF5vjRYHyrlHuiRtzRFk9nSm6At%2BB8sYWTSF2V8Ie4uVUdvYDZOXgnwcYVYP4Ma2X10wLIRgQLfUj5kPCEm3iSb2wbqbYmvnXQoc%2Fjnsv9u%2Bj3k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88078fdb9d32b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|