| cdn.discordapp.com/attachments/1234842826794209313/1234842848965169182/dfboka.mp4?ex=66323485&is=6630e305&hm=b6201757e8eb747b4e12cd240fe50b8a16baed765f222242fb01b42883e03fb4& | 162.159.135.233 | | 36 B |
URL cdn.discordapp.com/attachments/1234842826794209313/1234842848965169182/dfboka.mp4?ex=66323485&is=6630e305&hm=b6201757e8eb747b4e12cd240fe50b8a16baed765f222242fb01b42883e03fb4& IP162.159.135.233:0
File typeASCII text, with no line terminators Hasha1ca4bebcd03fafbe2b06a46a694e29a ffc88125007c23ff6711147a12f9bba9c3d197ed c3fa59901d56ce8a95a303b22fd119cb94abf4f43c4f6d60a81fd78b7d00fa65
GET /attachments/1234842826794209313/1234842848965169182/dfboka.mp4?ex=66323485&is=6630e305&hm=b6201757e8eb747b4e12cd240fe50b8a16baed765f222242fb01b42883e03fb4& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 04 May 2024 19:45:41 GMT
content-type: text/plain;charset=UTF-8
content-length: 36
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Al7xWbqhBmsss5XBs0cosakc4PBU2cft7LeerM3Bcl6LKCzCAaxoEmAmo6lffVSmDRM3qy%2Ba2HRh%2F%2FQo6zkHDIeIYClaS%2B0m57CgKae9G%2BHrkxJjLu%2B2VjPBE8Fytn3%2FqrZAMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=GXugj7vXv0XDIHiq28L8gAT2o_giXvuok41PjKGwM8U-1714851941-1.0.1.1-Nltyl.RzrUi_kGF.TVgh_G3VhqfeippTrYzMzeTOM6C5QVlPysGxF_jNH0a7RtEBwV0ErBOnEyImUXyNbAqPVQ; path=/; expires=Sat, 04-May-24 20:15:41 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=CIjs8aNsTgv1AbS5uKkv_ZFi2J5hz5_ZbRbla.bQ3z0-1714851941538-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87eafe1a8e7b56b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| povn8aek.cc/socket.io/?EIO=3&transport=websocket | 172.67.208.39 | | 0 B |
URL povn8aek.cc/socket.io/?EIO=3&transport=websocket IP172.67.208.39:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: povn8aek.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://ponb74xaf.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f1fN5ENtvrImpJ6Rm1n9mQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 04 May 2024 19:45:41 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Vlg8YxENMWRv5lt0S7iQfb4rp2o=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JAonmC%2BqIFMaVMGRusiS2XmQfeN%2Bjkw4%2BJL15C59O%2FM7PTGrATIi0oxq82qyjUq1%2FS3dLxR4nGN97oTZ3AdtOyQDrig1BZehnz6bUxs9nM5RJOa9s7UBWLA%2BPlylw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87eafe1a9c9d56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| b.yzcdn.cn/vant/icon-demo-1126.png | 154.85.69.54 | 200 OK | 8.9 kB |
URL GET HTTP/2b.yzcdn.cn/vant/icon-demo-1126.png IP154.85.69.54:443 ASN#139057 LEGEND DYNASTY PTE. LTD.
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuersslTrus Subject*.yzcdn.cn Fingerprint6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf87c46f346a5548224ccbe0b6bd75df5 8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370
GET /vant/icon-demo-1126.png HTTP/1.1
Host: b.yzcdn.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 19:45:42 GMT
content-type: image/png
content-length: 8886
server: openresty
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
cache-control: public, max-age=2592000
content-disposition: inline; filename="icon-demo-1126.png"; filename*=utf-8''icon-demo-1126.png
content-md5: +HxG80alVIIkzL4La9dd9Q==
content-transfer-encoding: binary
etag: "Fo6Li9S6PmtshVfZSnJgYf3WJJL9"
last-modified: Mon, 26 Nov 2018 11:08:05 GMT
x-reqid: YyIAAAASg9geDiAX
x-svr: IO
x-qiniu-zone: 0
x-log: X-Log
x-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC165_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC46_DE-Frankfurt-Frankfurt-11-cache-4
x-cache: HIT from BC46_DE-Frankfurt-Frankfurt-11-cache-4(baishan)
X-Firefox-Spdy: h2
|
|
| ponb74xaf.cc/img/icons/apple-touch-icon-152x152.png | 188.114.96.1 | 200 OK | 4.0 kB |
URL GET HTTP/3ponb74xaf.cc/img/icons/apple-touch-icon-152x152.png IP188.114.96.1:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hash1a034e64d80905128113e5272a5ab95e 92328e60f63d690f33cd4961b9934a539dc29b82 4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/invite/i=9098
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 19:45:42 GMT
content-type: image/png
content-length: 4046
last-modified: Sat, 04 May 2024 06:18:21 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0x17uguTZw57tMep84AXoEA19I%2B0XYrSwHoTxJuwwbT3q%2Bq8qZg0zri6Yy1C7tWSPcjd6flYn9okOrjUFRixitVLsMW8t0p%2F%2FrZ0KVFt76bNhichuBbzuxigOoEnN28%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eafdff8cae56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ponb74xaf.cc/invite | 188.114.96.1 | 400 Bad Request | 0 B |
IP188.114.96.1:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /invite HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 19
Origin: https://ponb74xaf.cc
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/invite/i=9098
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Sat, 04 May 2024 19:45:46 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oFbCcR0dQbN2gnBIyT1OT76rQmIlnwQpYCqsX31dJx7B3%2BS6EfhsK8%2BUp8%2B1aVhzC6ZbGx%2BdLD%2FgRKjKwCLQ4aFR2YE%2BDFM01x0CjC%2BAlaLkPvEf8Jxel%2BnwhXHPrQA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eafe1909c356af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ponb74xaf.cc/getlog | 188.114.96.1 | 200 OK | 12 kB |
IP188.114.96.1:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
Hashfdd483122234f6cf69aed7c6172e7858 3e5b102d248c0233339a8cc1dc179773cde318db ad64591334277c5d55492c435a2761206b9b0b5ab9c685e2b6abb7a0cd1f67be
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /getlog HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 19:45:41 GMT
content-type: application/json; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYqHTr9P3BWGeHTKF3%2FOFo4qlkLZdvZWEWbcx33lbnkraDM%2FNZMOmvnl2nJr1G0yE%2F8Z6upp5sr57u%2BtHTxt%2Fayb5alaLwDGgUP5Z5xTeVF1Glb3rsKC3zngDdkRJkE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eafe19fb0356af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| povn8aek.cc/socket.io/?EIO=3&transport=websocket | 172.67.208.39 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1povn8aek.cc/socket.io/?EIO=3&transport=websocket IP172.67.208.39:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectpovn8aek.cc FingerprintA4:BD:7B:35:83:E8:68:CD:4C:7E:1D:57:DF:E7:19:0A:DF:42:51:02 ValiditySat, 04 May 2024 04:57:30 GMT - Fri, 02 Aug 2024 04:57:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: povn8aek.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://ponb74xaf.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f1fN5ENtvrImpJ6Rm1n9mQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 04 May 2024 19:45:41 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Vlg8YxENMWRv5lt0S7iQfb4rp2o=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JAonmC%2BqIFMaVMGRusiS2XmQfeN%2Bjkw4%2BJL15C59O%2FM7PTGrATIi0oxq82qyjUq1%2FS3dLxR4nGN97oTZ3AdtOyQDrig1BZehnz6bUxs9nM5RJOa9s7UBWLA%2BPlylw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87eafe1a9c9d56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ponb74xaf.cc/js/chunk-vendors.ea790e22.js | 188.114.96.1 | 200 OK | 949 kB |
URL GET HTTP/3ponb74xaf.cc/js/chunk-vendors.ea790e22.js IP188.114.96.1:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
Size949 kB (949174 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/chunk-vendors.ea790e22.js HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/invite/i=9098
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 19:45:41 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 04 May 2024 06:18:42 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hnugzkzNj0jRBL7YR0AN8K8EYNE8bbXOvJZPFBpYbQh5fA%2BTxTUrornlEUXaS9UhYzV%2B6cqmJTIMk8bLaQ3TjZniNY%2Fj3aEEhvAqSMbMQptH8Pby2u3Ltrax8zgTcaA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eafdf63fc656af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ponb74xaf.cc/js/app.e4d28e5e.js | 188.114.96.1 | 200 OK | 171 kB |
URL GET HTTP/3ponb74xaf.cc/js/app.e4d28e5e.js IP188.114.96.1:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
Size171 kB (171134 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/app.e4d28e5e.js HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/invite/i=9098
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 19:45:35 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 04 May 2024 06:18:30 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iMVeIVhTa51rxIc1bTZa22wwVf4BpujVRYLLk%2F7mGo79KQqlqxmj8EQBxJBXEwhovWAeVxQDGzoeDd6iScbKET3Mc3TJb3TdXgSomK6mzrcxzOxmyC2hi7QRnQu2ULg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eafdf63fc856af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ponb74xaf.cc/css/chunk-vendors.c57533e1.css | 188.114.96.1 | 200 OK | 156 kB |
URL GET HTTP/3ponb74xaf.cc/css/chunk-vendors.c57533e1.css IP188.114.96.1:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size156 kB (156544 bytes) Hashebfffebc1f62c3be51082e6595a0a005 e278fbd6fd48150b3f366b50ed388983d934978c f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/chunk-vendors.c57533e1.css HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/invite/i=9098
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 19:45:35 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 04 May 2024 06:18:17 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 214
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2B54gvwvhwY%2FA1rudPhvl8B0VtukHTCJdxhNDkQkPq3L47YHSC%2BdqvIBTjQ7iv2%2Fuv4WlEGDUQXVwroh2B20eTBVDcwqe%2BhNVfrh9hl44DNSYhFe4q0ENvv3mGoBMNc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eafdf63fca56af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ponb74xaf.cc/css/app.73f85e8e.css | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3ponb74xaf.cc/css/app.73f85e8e.css IP188.114.96.1:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
File typeASCII text, with very long lines (14103), with no line terminators Hashfbb88a9a79e60f88a5ac4943fb251d38 3cb60523ee2bc0fbeb13c9041843fb1f082f4514 1b8a9726825a389f2184fadbf5205c28ea81fa90fbbb20c29a28fbd728df9c5e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/app.73f85e8e.css HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/invite/i=9098
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 19:45:35 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 04 May 2024 06:18:14 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 214
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6BxZu%2BqoIv0Xc214t3TrlIdxZb%2BbBbHbEYsxRncG%2FSgpGUZjKxvV0pJW8epTC8Zzc3R63IBGyiZ3U19pBA1os3Msu3onqTck4xXbwGZ38Or0AUt7HacaesTpiUVA3hs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eafdf64fd756af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ponb74xaf.cc/img/icons/favicon.svg | 188.114.96.1 | 200 OK | 2.7 kB |
URL GET HTTP/3ponb74xaf.cc/img/icons/favicon.svg IP188.114.96.1:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
File typeHTML document, ASCII text, with very long lines (2867), with no line terminators Hashf05d339a3fb844c0bab040e52628596e 9d4c43d3830c9588177d2dbc0676f6f79e56c147 738dffb1411c2326d0e92ef6905a9674945dd66f06e526b2ae603164f84e49ec
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/favicon.svg HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/invite/i=9098
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 04 May 2024 19:45:37 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=14400
cf-cache-status: HIT
age: 215
last-modified: Sat, 04 May 2024 19:42:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RUD%2BHKYT%2Bovi8RoB%2FAszM%2Bayk0RyohpN1t7%2FO1lMhoVoXyjzRZjSnCPUPLPloC%2B5HcPz1co4%2FMxDb9O2BIWO3LJOrSYmk2hexTSa1f0U2oAiX%2FD8j6BTPTSfnLg1b4U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eafdff8cb056af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1234842826794209313/1234842848965169182/dfboka.mp4?ex=66323485&is=6630e305&hm=b6201757e8eb747b4e12cd240fe50b8a16baed765f222242fb01b42883e03fb4& | 162.159.135.233 | 404 Not Found | 0 B |
URL GET HTTP/2cdn.discordapp.com/attachments/1234842826794209313/1234842848965169182/dfboka.mp4?ex=66323485&is=6630e305&hm=b6201757e8eb747b4e12cd240fe50b8a16baed765f222242fb01b42883e03fb4& IP162.159.135.233:443
Requested byhttps://ponb74xaf.cc/invite/i=9098 CertificateIssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /attachments/1234842826794209313/1234842848965169182/dfboka.mp4?ex=66323485&is=6630e305&hm=b6201757e8eb747b4e12cd240fe50b8a16baed765f222242fb01b42883e03fb4& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ponb74xaf.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 04 May 2024 19:45:41 GMT
content-type: text/plain;charset=UTF-8
content-length: 36
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Al7xWbqhBmsss5XBs0cosakc4PBU2cft7LeerM3Bcl6LKCzCAaxoEmAmo6lffVSmDRM3qy%2Ba2HRh%2F%2FQo6zkHDIeIYClaS%2B0m57CgKae9G%2BHrkxJjLu%2B2VjPBE8Fytn3%2FqrZAMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=GXugj7vXv0XDIHiq28L8gAT2o_giXvuok41PjKGwM8U-1714851941-1.0.1.1-Nltyl.RzrUi_kGF.TVgh_G3VhqfeippTrYzMzeTOM6C5QVlPysGxF_jNH0a7RtEBwV0ErBOnEyImUXyNbAqPVQ; path=/; expires=Sat, 04-May-24 20:15:41 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=CIjs8aNsTgv1AbS5uKkv_ZFi2J5hz5_ZbRbla.bQ3z0-1714851941538-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87eafe1a8e7b56b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ponb74xaf.cc/invite/i=9098 | 188.114.96.1 | 200 OK | 2.7 kB |
URL User Request GET HTTP/2ponb74xaf.cc/invite/i=9098 IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectponb74xaf.cc FingerprintB3:20:BC:93:91:21:89:A2:BE:3C:4B:BC:E8:11:C4:6F:94:35:91:24 ValidityWed, 01 May 2024 11:53:00 GMT - Tue, 30 Jul 2024 11:52:59 GMT
File typeHTML document, ASCII text, with very long lines (2867), with no line terminators Hashf05d339a3fb844c0bab040e52628596e 9d4c43d3830c9588177d2dbc0676f6f79e56c147 738dffb1411c2326d0e92ef6905a9674945dd66f06e526b2ae603164f84e49ec
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /invite/i=9098 HTTP/1.1
Host: ponb74xaf.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 19:45:35 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DwKZqwpfTob0I4LtEkA0DuDBUpaR8m1Zomwh%2Be%2FoDYKN%2Fbk2ba%2Bo9lqIeL4l%2FvwsGQkinXmsCEAS9oCuENTsB%2BaSHIo78zeMuwaM4KghBeVfR9hqxEJhScFtOjI7cJM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eafdf27eddb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|