Report - fakenham.cylex-uk.co.uk/

Report Overview

Submitted URL
fakenham.cylex-uk.co.uk/
IP
104.18.11.104
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 13:48:25
Access
public
Website Title
Attention Required! | Cloudflare
Final URL
fakenham.cylex-uk.co.uk/
Tags
sinkhole suspicious cloudflare
urlquery detections
Suspicious - Sinkholed / Blocked

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fakenham.cylex-uk.co.uk	unknown	2007-10-25	2015-01-29	2023-11-05	6.1 kB	34 kB	104.18.11.104
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24	2024-04-18	469 B	20 kB	104.16.79.73

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	fakenham.cylex-uk.co.uk/cdn-cgi/challenge-platform/scripts/jsd/main.js	7.8 kB	2024-04-19	2024-04-19
Pretty URL fakenham.cylex-uk.co.uk/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.18.11.104 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 15:48:26 Last Seen2024-04-19 15:48:26 Times Seen2 Hash 70d9782606a4ed3ced9ba485eeb5e897 aa664ce751c6ef51b0d3f877a89f9cd5db6d42f5 89199384bafacdbadb537c1503358ceafd5d9101a528c7134a0881ba78af377c Loading...

	fakenham.cylex-uk.co.uk/	0 B	2023-03-07	2024-05-02
Pretty URL fakenham.cylex-uk.co.uk/ IP 104.18.11.104 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-02 16:59:56 Times Seen37276413 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	fakenham.cylex-uk.co.uk/	393 B	2023-04-05	2024-05-02
Pretty URL fakenham.cylex-uk.co.uk/ IP 104.18.11.104 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:39:40 Last Seen2024-05-02 16:45:51 Times Seen69225 Hash 34ad0a116707d3b794129a6720af92d7 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Loading...

	fakenham.cylex-uk.co.uk/	0 B	2023-03-07	2024-05-02
Pretty URL fakenham.cylex-uk.co.uk/ IP 104.18.11.104 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-02 16:59:56 Times Seen37276413 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	fakenham.cylex-uk.co.uk/	1.1 kB	2024-04-19	2024-04-19
Pretty URL fakenham.cylex-uk.co.uk/ IP 104.18.11.104 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 15:48:26 Last Seen2024-04-19 15:48:26 Times Seen1 Hash fbd862bcc147c5fac7a637909bea4015 52901e0e8f1e0a336b07186f86d52b833a3e4b49 bbec7072b7171ba367df4cf62d2ef8afcd2d49ea2d4651ba13b045615756b20a Loading...

	static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793	19 kB	2024-04-17	2024-05-02
Pretty URL static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 IP 104.16.79.73 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 04:05:01 Last Seen2024-05-02 15:07:04 Times Seen1484 Hash 3be93fd15d2f7dee2fc0c8981c6fa5c6 8cd88c36fad3e96641dbc4d781f5ddbe5123312f 17106bf803d42bcf2f2bdf778ece084d3f91c68e7ea41dae7bff61fefa573dee Loading...

	unknown	247 B	2024-04-19	2024-04-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 15:48:26 Last Seen2024-04-19 15:48:26 Times Seen1 Hash 7d3ba3102da471cac08ca86a28a76c72 5948207eaa5bd40981d64d3337c6e8ea870bb93a 582e2c9d746d798ba65ef164bdf4b22c13361a0edb1a675460a969e88e39f030 Loading...

HTTP Transactions (11)

URL IP Response Size

fakenham.cylex-uk.co.uk/cdn-cgi/styles/cf.errors.css

104.18.11.104

200 OK

5.2 kB

URL GET HTTP/3
fakenham.cylex-uk.co.uk/cdn-cgi/styles/cf.errors.css
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type
gzip compressed data, from Unix
Size
5.2 kB (5230 bytes)
Hash
8c7180398bb47e8b677a0a808382b4d2
0c315b451a86b3a4934d9c6b988fd05df5de5fe2
a3010138b9546f73cd9d9d1331c2d69a8a19138303d3ab12680188c95b754d93

HTTP Headers

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fakenham.cylex-uk.co.uk/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 13:48:00 GMT
content-type: text/css
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: W/"661e9d00-5df3"
server: cloudflare
cf-ray: 876d5986ac9756c4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Fri, 19 Apr 2024 15:48:00 GMT
cache-control: max-age=7200, public
content-encoding: gzip

fakenham.cylex-uk.co.uk/

104.18.11.104

403 Forbidden

7.7 kB

URL User Request GET HTTP/2
fakenham.cylex-uk.co.uk/
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type
HTML document, ASCII text, with very long lines (1488)
Size
7.7 kB (7710 bytes)
Hash
55e25720f714fda1f4b0aae59aae133e
45d300e95b88ec43c9508cf32e298de508bb7cf7
263e3d51ff391759a7e38261ca872f14dafa8eaa8b7e08ec90cb5386bb66749f

HTTP Headers

GET / HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Fri, 19 Apr 2024 13:48:00 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Fri, 19 Apr 2024 13:48:15 GMT
set-cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ; path=/; expires=Fri, 19-Apr-24 14:18:00 GMT; domain=.cylex-uk.co.uk; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876d59858dfc56c9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fakenham.cylex-uk.co.uk/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.18.11.104

302 Found

0 B

URL GET HTTP/3
fakenham.cylex-uk.co.uk/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Fri, 19 Apr 2024 13:48:00 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876d59876d3756c4-OSL
alt-svc: h3=":443"; ma=86400

fakenham.cylex-uk.co.uk/cdn-cgi/rum?

104.18.11.104

204 No Content

0 B

URL POST HTTP/3
fakenham.cylex-uk.co.uk/cdn-cgi/rum?
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fakenham.cylex-uk.co.uk/
content-type: application/json
Content-Length: 1039
Origin: https://fakenham.cylex-uk.co.uk
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Fri, 19 Apr 2024 13:48:00 GMT
access-control-allow-origin: https://fakenham.cylex-uk.co.uk
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 876d59878d5356c4-OSL
x-frame-options: DENY
x-content-type-options: nosniff

fakenham.cylex-uk.co.uk/cdn-cgi/challenge-platform/h/b/jsd/r/876d59862c3356c4

104.18.11.104

200 OK

0 B

URL POST HTTP/3
fakenham.cylex-uk.co.uk/cdn-cgi/challenge-platform/h/b/jsd/r/876d59862c3356c4
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/jsd/r/876d59862c3356c4 HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12181
Origin: https://fakenham.cylex-uk.co.uk
DNT: 1
Connection: keep-alive
Referer: https://fakenham.cylex-uk.co.uk/
Cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 13:48:00 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=ggwrPTSoQshxocYxm5fkcqEyLDnyP491hey_kowH5M8-1713534480-1.0.1.1-kocOjwQSkv.o3LIoboO9ZfPer6uqNzoEvxoNHR_8EomN3hlENRhQBrusZaBV5GWorbrvQUFEayKRdBHeb4Fz2w; path=/; expires=Sat, 19-Apr-25 13:48:00 GMT; domain=.cylex-uk.co.uk; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876d59885e5b56c4-OSL
alt-svc: h3=":443"; ma=86400

fakenham.cylex-uk.co.uk/cdn-cgi/rum?

104.18.11.104

204 No Content

0 B

URL POST HTTP/3
fakenham.cylex-uk.co.uk/cdn-cgi/rum?
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fakenham.cylex-uk.co.uk/
Content-Type: application/json
Content-Length: 461
Origin: https://fakenham.cylex-uk.co.uk
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/3 204 No Content
date: Fri, 19 Apr 2024 13:48:23 GMT
access-control-allow-origin: https://fakenham.cylex-uk.co.uk
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 876d5a16f8fe56c4-OSL
x-frame-options: DENY
x-content-type-options: nosniff

fakenham.cylex-uk.co.uk/cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js

104.18.11.104

200 OK

7.8 kB

URL GET HTTP/3
fakenham.cylex-uk.co.uk/cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type
JavaScript source, ASCII text, with very long lines (7822), with no line terminators
Size
7.8 kB (7822 bytes)
Hash
70d9782606a4ed3ced9ba485eeb5e897
aa664ce751c6ef51b0d3f877a89f9cd5db6d42f5
89199384bafacdbadb537c1503358ceafd5d9101a528c7134a0881ba78af377c

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/471dc2adc340/main.js HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 13:48:00 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: br
cache-control: max-age=14400, public
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 876d59879d6856c4-OSL
alt-svc: h3=":443"; ma=86400

static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793

104.16.79.73

200 OK

19 kB

URL GET HTTP/2
static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793
IP
104.16.79.73:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerGoogle Trust Services LLC
Subjectcloudflareinsights.com
Fingerprint73:92:5A:16:97:55:FC:A5:32:7C:F3:9D:0C:84:EF:F3:2F:AA:B5:00
ValiditySun, 10 Mar 2024 02:33:42 GMT - Sat, 08 Jun 2024 02:33:41 GMT

File type
JavaScript source, ASCII text, with very long lines (19261), with no line terminators
Size
19 kB (19261 bytes)
Hash
3be93fd15d2f7dee2fc0c8981c6fa5c6
8cd88c36fad3e96641dbc4d781f5ddbe5123312f
17106bf803d42bcf2f2bdf778ece084d3f91c68e7ea41dae7bff61fefa573dee

HTTP Headers

GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fakenham.cylex-uk.co.uk
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 13:48:00 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.4.0"
last-modified: Mon, 15 Apr 2024 22:09:58 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 876d5986e8d95699-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

fakenham.cylex-uk.co.uk/cdn-cgi/images/browser-bar.png?1376755637

104.18.11.104

200 OK

715 B

URL GET HTTP/3
fakenham.cylex-uk.co.uk/cdn-cgi/images/browser-bar.png?1376755637
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type
PNG image data, 960 x 53, 8-bit colormap, non-interlaced
Size
715 B (715 bytes)
Hash
226dcb8f6144bdaafdfbd8f2f354be64
3785cc5b3bf52f8e398177b0ff1020b24aa86b8c
8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fakenham.cylex-uk.co.uk/cdn-cgi/styles/cf.errors.css
Cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 13:48:00 GMT
content-type: image/png
content-length: 715
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: "661e9d00-2cb"
server: cloudflare
cf-ray: 876d5986dcc556c4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Fri, 19 Apr 2024 15:48:00 GMT
cache-control: max-age=7200, public
accept-ranges: bytes

fakenham.cylex-uk.co.uk/cdn-cgi/images/cf-no-screenshot-error.png

104.18.11.104

200 OK

3.2 kB

URL GET HTTP/3
fakenham.cylex-uk.co.uk/cdn-cgi/images/cf-no-screenshot-error.png
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type
PNG image data, 178 x 175, 8-bit colormap, non-interlaced
Size
3.2 kB (3213 bytes)
Hash
0d768cbc261841d3affc933b9ac3130e
aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7
1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fakenham.cylex-uk.co.uk/cdn-cgi/styles/cf.errors.css
Cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 13:48:00 GMT
content-type: image/png
content-length: 3213
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: "661e9d00-c8d"
server: cloudflare
cf-ray: 876d5986ecc756c4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Fri, 19 Apr 2024 15:48:00 GMT
cache-control: max-age=7200, public
accept-ranges: bytes

fakenham.cylex-uk.co.uk/favicon.ico

104.18.11.104

403 Forbidden

4.5 kB

URL GET HTTP/3
fakenham.cylex-uk.co.uk/favicon.ico
IP
104.18.11.104:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fakenham.cylex-uk.co.uk/
Certificate
IssuerLet's Encrypt
Subjectcylex-uk.co.uk
Fingerprint2A:5D:A8:2E:95:06:AF:0B:FD:AB:7C:C1:07:B9:30:FF:A4:F2:FC:5B
ValidityTue, 16 Apr 2024 02:36:14 GMT - Mon, 15 Jul 2024 02:36:13 GMT

File type
HTML document, ASCII text, with very long lines (4751), with no line terminators
Size
4.5 kB (4516 bytes)
Hash
f3c8c476546db0c67b33476083cb22cd
95dbdbd0fb04e84af4fd395114c5dcf3931b2c9d
b088974f95fd076687686726f9236eb9b5deaa9db67808f5dc9a2a909a616d52

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fakenham.cylex-uk.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fakenham.cylex-uk.co.uk/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=8A003isfcxQbsq8NxyFHXRdShnLq_GPK1WGZGxGnWJg-1713534480-1.0.1.1-BcWP3UtKeqpFVi_48HN2IAKQoe8mbBjgyWcqjwOU5KsX.KhggKcSG_A9kMHwrtb6F7vm7PLs8raw7KWeriaKxQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Fri, 19 Apr 2024 13:48:00 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: max-age=15
expires: Fri, 19 Apr 2024 13:48:15 GMT
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876d59875d3556c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size