| cdn.discordapp.com/attachments/1238481582839300166/1238481601168539679/35drtbzx.mp4?ex=663f715f&is=663e1fdf&hm=a6787b8c19a1f05ef13225ecf8d768e829793247b5d5373d33306831a6a6d707& | 162.159.133.233 | | 2.2 MB |
URL cdn.discordapp.com/attachments/1238481582839300166/1238481601168539679/35drtbzx.mp4?ex=663f715f&is=663e1fdf&hm=a6787b8c19a1f05ef13225ecf8d768e829793247b5d5373d33306831a6a6d707& IP162.159.133.233:0
File typeISO Media, MP4 v2 [ISO 14496-14] Size2.2 MB (2191945 bytes) Hashe39ad7b6843711555117eaae0b3a0e1c 908a1f19220da14f905c6d882521c963a455a6fa caf2c3ec403113ca57932a856fe6f9ecc8a2cd2f50513fc75a78029d83b192d8
GET /attachments/1238481582839300166/1238481601168539679/35drtbzx.mp4?ex=663f715f&is=663e1fdf&hm=a6787b8c19a1f05ef13225ecf8d768e829793247b5d5373d33306831a6a6d707& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 22:13:57 GMT
content-type: video/mp4
content-length: 2191945
content-range: bytes 0-2191944/2191945
cf-ray: 881d478ccaa7712a-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 19085
cache-control: public, max-age=31536000
content-disposition: attachment; filename=35drtbzx.mp4
etag: "e39ad7b6843711555117eaae0b3a0e1c"
expires: Sat, 10 May 2025 22:13:57 GMT
last-modified: Fri, 10 May 2024 13:23:43 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1715347423672377
x-goog-hash: crc32c=R6AtBw==, md5=45rXtoQ3EVVRF+quCzoOHA==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2191945
x-guploader-uploadid: ABPtcPpq-GSCY_lK9kZAowoZtYSflt9jMIbf05lH6mr_54QZxN04Ci_4KdTfG3SWwgKanYNzz2JJI3SkCA
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7iJTUW8tZdXghRgw0YzHQxMd5L93zTx3phGEFcmtzM7cuQEZrNfKfridTTQrYQOXOQkNlOe9zFWsbWvCjmuq2d%2BV8o93yFjj5JUJ8fUynoLh5%2Ba5XZ2ZpYyk4yOQumz8W9wXyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=Fz7O2jSW7AEnjwf51wnyfwBt.XytUCnFYjwUR.1Ob1I-1715379237-1.0.1.1-otZYpmZKjxArnZeDz.uX_L6nySwVPqQ82jtmUy6WwwJ2h8aep_NYoL7Cp_gQwCT_JxVOTmc3U5Rm76V0RxBVjQ; path=/; expires=Fri, 10-May-24 22:43:57 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=xH.Qzi2iO3KhfUzOCTWYJwMJemOou4KJDa4VMpNWp2Y-1715379237902-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| buurpxa3.cc/socket.io/?EIO=3&transport=websocket | 188.114.97.1 | | 0 B |
URL buurpxa3.cc/socket.io/?EIO=3&transport=websocket IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://buurpxa3.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FlZe40IKHJsrfopIzTOiLA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 10 May 2024 22:13:58 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: x7pp2dtFxgHSZ1soKHpc7mEmjbo=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2FlnKjzyA0xTH2PXpKzQzZBYd4W4YRiAlyHvRQ0eNSeIyY6aiSmxeqS3xfBjh9azLs4YA5AHpSF4ZBOadRsPNPgVxn5yyOCtv6xqtlORdF28%2BcFAh2OpGP%2BEacCpnA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 881d478c9fa5b50b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| buurpxa3.cc/img/icons/apple-touch-icon-152x152.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3buurpxa3.cc/img/icons/apple-touch-icon-152x152.png IP188.114.97.1:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hash1a034e64d80905128113e5272a5ab95e 92328e60f63d690f33cd4961b9934a539dc29b82 4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:13:58 GMT
content-type: image/png
content-length: 4046
last-modified: Fri, 10 May 2024 15:55:15 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5239
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=86ko6MxXsatV7%2B86IlQUO8X8VNywhOkfMS%2BRfBXnEta6jJZJWUmQCqfVUMG3d9eaAuG5ETWvzmGmnavygIThRqqOWgdUqYVvZ5VIR8z%2Bu6VYrz2zwJVqw6R%2BS2bA%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d478ebc09b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| buurpxa3.cc/img/icons/favicon.svg | 188.114.97.1 | 200 OK | 1.4 kB |
URL GET HTTP/3buurpxa3.cc/img/icons/favicon.svg IP188.114.97.1:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hash4c4311e924ff971f6b23ce779e9b3d03 83a8406b12ce252aab22b8d56cdf436af7fba97a 4c4cbfc410a5e82e9717db760cf74ab7b8cfc20c8edfc6e69bb46e34e0805129
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/favicon.svg HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:13:58 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=14400
cf-cache-status: HIT
age: 4991
last-modified: Fri, 10 May 2024 20:50:47 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=99A21MiO9R7tFCkTkfn4bNGTagx4SlVEIGGbV0DLC30W30OIPZQ56hWvpVwDz4TVTgfzFt008PRhjENPLJjCnap7vVkRLazT7h1llAS4T6L4rqqlX9crd46ubR5qcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d478ebc0ab4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buurpxa3.cc/getlog | 188.114.97.1 | 200 OK | 1.4 kB |
IP188.114.97.1:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
Hashf8fd55fbe96929e9da27c3c4201877ab c435c8a787f6d6f5ef6ccb2f33650d20b975b150 f69510aee02b39503a3016e03e6a94d1e6cea6f4ced1ab05e348e9cb41810b8f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /getlog HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:13:58 GMT
content-type: application/json; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2BJoLcVMK8%2FXqJgCW53PvnwXXGl%2BHsyJFpwNNNn0q99qalApFvANiET%2BAdcZqMVt2y1hvvSFOmTz7oIXPijVCk4ek2m1LxFCrmzy8tH3FAAhBxZHkME76MuSy2reqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d478c69dcb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ocsp.sectigochina.com/ | 172.64.149.190 | | 472 B |
IP172.64.149.190:0
Hash12650d96eac59b7ac2f24d7ad085c8ba 89ec765ffac48207f6bf73085cd4d0cd3858bf9e 58054f19bb692f233f1c6c9667262ce6e998627ae3a60b5b0aab327c425a4d1a
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 10 May 2024 22:13:59 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 08 May 2024 12:42:44 GMT
Expires: Wed, 15 May 2024 12:42:43 GMT
Etag: "89ec765ffac48207f6bf73085cd4d0cd3858bf9e"
Cache-Control: max-age=398449,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 881d4795798a712f-OSL
|
|
| buurpxa3.cc/css/chunk-vendors.c57533e1.css | 188.114.97.1 | 200 OK | 53 kB |
URL GET HTTP/3buurpxa3.cc/css/chunk-vendors.c57533e1.css IP188.114.97.1:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashebfffebc1f62c3be51082e6595a0a005 e278fbd6fd48150b3f366b50ed388983d934978c f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/chunk-vendors.c57533e1.css HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/enter/register
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 22:13:56 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 10 May 2024 15:55:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6010
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q0%2BfzYVQevOkFcYrpgOCiGPDyuUeiFhOQisxUFn2W8y0actopuYrnJ8tL4Bl%2FKbVzNCgfLV%2B3NRbNPajc3rc5djYlilti%2F0TlTdlHTDRjz3uTvhGpWRdur6Ig3VQOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d47871c55b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buurpxa3.cc/enter/register | 188.114.97.1 | 200 OK | 2.7 kB |
URL User Request GET HTTP/2buurpxa3.cc/enter/register IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
File typeHTML document, ASCII text, with very long lines (2867), with no line terminators Hash7119942d7fac03513be7e4fc6c2d162e 907bcf3a213113d950af094c0dfa3e8dbb713066 73caaa455f9666cdcdfe7a448e8d8bb42ec421062e88ea08001b31f180f5460a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /enter/register HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:13:56 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C4zOtT8D4nVrVhfZ6nswnHM6kC8aap1dggi27SSAc8MMgBWhUVBF4nHjY1ttKsMCh9CQmImYlvPOYQNMM2e4w2kVlMeIduaweDGfVsnbP6fkRVlTThRWRKDZRk7xSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d4783acb45687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| buurpxa3.cc/js/chunk-vendors.ea790e22.js | 188.114.97.1 | 200 OK | 949 kB |
URL GET HTTP/3buurpxa3.cc/js/chunk-vendors.ea790e22.js IP188.114.97.1:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
Size949 kB (949174 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/chunk-vendors.ea790e22.js HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/enter/register
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 22:13:57 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 10 May 2024 15:55:40 GMT
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WG%2FYvbcVAA%2BLy6nupZckSEGvwh7YFb%2FhNxeMBqHEDwZvdYqKvwqqaqmZsHXepNPbb4ag0nMVmmuykyr6rFQfho%2BJGlIC2wt7zg64Da6PJtN%2F88Vuz1KXbUnOD%2B%2Fkig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d47870c46b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buurpxa3.cc/js/app.14aa6985.js | 188.114.97.1 | 200 OK | 171 kB |
URL GET HTTP/3buurpxa3.cc/js/app.14aa6985.js IP188.114.97.1:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
Size171 kB (171080 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/app.14aa6985.js HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/enter/register
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 22:13:57 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 10 May 2024 15:55:24 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3HC4tuPqs2MBToSbIBvFogsZAUL%2FfyNca9JknjCoW9okfN1%2BxnbW5A4BWtTx3z6inVs3I39KJXoNXTRfJuv8aG0b9BMZSxyICULUDyjly0%2FY6J304HWEXfkFCa68Jg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d47870c47b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buurpxa3.cc/socket.io/?EIO=3&transport=websocket | 188.114.97.1 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1buurpxa3.cc/socket.io/?EIO=3&transport=websocket IP188.114.97.1:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://buurpxa3.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FlZe40IKHJsrfopIzTOiLA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 10 May 2024 22:13:58 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: x7pp2dtFxgHSZ1soKHpc7mEmjbo=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2FlnKjzyA0xTH2PXpKzQzZBYd4W4YRiAlyHvRQ0eNSeIyY6aiSmxeqS3xfBjh9azLs4YA5AHpSF4ZBOadRsPNPgVxn5yyOCtv6xqtlORdF28%2BcFAh2OpGP%2BEacCpnA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 881d478c9fa5b50b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1238481582839300166/1238481601168539679/35drtbzx.mp4?ex=663f715f&is=663e1fdf&hm=a6787b8c19a1f05ef13225ecf8d768e829793247b5d5373d33306831a6a6d707& | 162.159.133.233 | 206 Partial Content | 2.2 MB |
URL GET HTTP/2cdn.discordapp.com/attachments/1238481582839300166/1238481601168539679/35drtbzx.mp4?ex=663f715f&is=663e1fdf&hm=a6787b8c19a1f05ef13225ecf8d768e829793247b5d5373d33306831a6a6d707& IP162.159.133.233:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
Size2.2 MB (2191945 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /attachments/1238481582839300166/1238481601168539679/35drtbzx.mp4?ex=663f715f&is=663e1fdf&hm=a6787b8c19a1f05ef13225ecf8d768e829793247b5d5373d33306831a6a6d707& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 22:13:57 GMT
content-type: video/mp4
content-length: 2191945
content-range: bytes 0-2191944/2191945
cf-ray: 881d478ccaa7712a-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 19085
cache-control: public, max-age=31536000
content-disposition: attachment; filename=35drtbzx.mp4
etag: "e39ad7b6843711555117eaae0b3a0e1c"
expires: Sat, 10 May 2025 22:13:57 GMT
last-modified: Fri, 10 May 2024 13:23:43 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1715347423672377
x-goog-hash: crc32c=R6AtBw==, md5=45rXtoQ3EVVRF+quCzoOHA==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2191945
x-guploader-uploadid: ABPtcPpq-GSCY_lK9kZAowoZtYSflt9jMIbf05lH6mr_54QZxN04Ci_4KdTfG3SWwgKanYNzz2JJI3SkCA
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7iJTUW8tZdXghRgw0YzHQxMd5L93zTx3phGEFcmtzM7cuQEZrNfKfridTTQrYQOXOQkNlOe9zFWsbWvCjmuq2d%2BV8o93yFjj5JUJ8fUynoLh5%2Ba5XZ2ZpYyk4yOQumz8W9wXyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=Fz7O2jSW7AEnjwf51wnyfwBt.XytUCnFYjwUR.1Ob1I-1715379237-1.0.1.1-otZYpmZKjxArnZeDz.uX_L6nySwVPqQ82jtmUy6WwwJ2h8aep_NYoL7Cp_gQwCT_JxVOTmc3U5Rm76V0RxBVjQ; path=/; expires=Fri, 10-May-24 22:43:57 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=xH.Qzi2iO3KhfUzOCTWYJwMJemOou4KJDa4VMpNWp2Y-1715379237902-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| buurpxa3.cc/css/app.6a652bec.css | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3buurpxa3.cc/css/app.6a652bec.css IP188.114.97.1:443
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuerGoogle Trust Services LLC Subjectbuurpxa3.cc FingerprintFB:67:B1:E3:C9:FD:01:10:85:3C:B1:FC:C5:25:56:CA:D7:90:12:5F ValidityThu, 09 May 2024 08:09:53 GMT - Wed, 07 Aug 2024 08:09:52 GMT
File typeASCII text, with very long lines (14103), with no line terminators Hashf540cca5e497bfdb2d675f3e4bc56efd bcd71ad64562da3b524a92d374bb8a91c1fc0ce1 8eaa161e92f2327508126ffaf94ddc421c2f87163fe254da2ea74affb2778a0e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/app.6a652bec.css HTTP/1.1
Host: buurpxa3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/enter/register
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 22:13:56 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 10 May 2024 15:55:07 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3082
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FDZXpaI%2F1pkDPqlLCQRTfPRFOIe0%2BEn3adnq80hPQqWvU7DkX0KqbygDd%2F9pZQ%2FAEoxgK3%2B3fcqxMo7K%2FayCDseKlrov1XwSoMQPAEEohrZ3Kay7ix2ZNW1alTLOEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d47871c56b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b.yzcdn.cn/vant/icon-demo-1126.png | 154.85.69.54 | 200 OK | 8.9 kB |
URL GET HTTP/2b.yzcdn.cn/vant/icon-demo-1126.png IP154.85.69.54:443 ASN#139057 LEGEND DYNASTY PTE. LTD.
Requested byhttps://buurpxa3.cc/enter/register CertificateIssuersslTrus Subject*.yzcdn.cn Fingerprint6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf87c46f346a5548224ccbe0b6bd75df5 8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370
GET /vant/icon-demo-1126.png HTTP/1.1
Host: b.yzcdn.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buurpxa3.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 22:13:59 GMT
content-type: image/png
content-length: 8886
server: openresty
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
cache-control: public, max-age=2592000
content-disposition: inline; filename="icon-demo-1126.png"; filename*=utf-8''icon-demo-1126.png
content-md5: +HxG80alVIIkzL4La9dd9Q==
content-transfer-encoding: binary
etag: "Fo6Li9S6PmtshVfZSnJgYf3WJJL9"
last-modified: Mon, 26 Nov 2018 11:08:05 GMT
x-reqid: YyIAAAASg9geDiAX
x-svr: IO
x-qiniu-zone: 0
x-log: X-Log
x-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC165_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC46_DE-Frankfurt-Frankfurt-11-cache-4
x-cache: HIT from BC46_DE-Frankfurt-Frankfurt-11-cache-4(baishan)
X-Firefox-Spdy: h2
|
|