| login.restorecord-redirect.xyz/assets/22198.f5f5aeb061c44ad3e071.js | 188.114.96.1 | 200 OK | 4.6 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/22198.f5f5aeb061c44ad3e071.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (12232) Hash037eb3fd7c79a6a5da8011e606e917bd 078368fc9988f02a9d9b2faa6494b3209ca6f8a1 b24340e4a45954dadfd82c820035335f0d27ea454fdbbb263ca273cd590d5a23
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/22198.f5f5aeb061c44ad3e071.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"2fff-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cupkGth2JDQTEjwi6tOqVEqIus42PegB1KHCADB73SDnyq7PmFieU5blVpTvCz%2Bh66iasnbSSKpxeASOTCN3MIPm5vHrd3Q67jQMWEZj0V2VyQdX0%2BuSSk9QEnCZqVF3lLzVJHyhdzSCvxHYZK%2BCyg8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119bedeb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/40876.477d9a39902b14c7bd0a.js | 188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/40876.477d9a39902b14c7bd0a.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (38897) Hash167366b2e3d129cc3dced1a4e7dbd82b 62a0800ba5389dfb92136e31c08cfabacdccb8fe e943c9ed5fd4c16dc88029340b62dccd9afb900ed4501c7bd14e6264a34df983
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/40876.477d9a39902b14c7bd0a.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"9828-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stj5MgKfJVUtETWMo%2BkcfoGTQ2ysQ4m9ckkwFOia4p%2F2Q6OeRYfybBG8M9FoX8c9BTke98aNwkKAJMBv4fTrfgO%2BPG1c%2F3Tlqc5ZC3piGBPSTjtVGWNs2XSHsurbWN4yC6UGAXV4nC06ycGWd0bthTQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a3f9fb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/64612.26d2bf1afbde26a43a76.js | 188.114.96.1 | 200 OK | 5.4 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/64612.26d2bf1afbde26a43a76.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (15643) Hashe889f804c915f5278e961cde93d50e20 25e94c62cca79bfaba361e27e49cc687e72b74dd f3649beebf41954e8e4aceed2d74c5fcc81a61e1123b4190efa9a02f785977fd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/64612.26d2bf1afbde26a43a76.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"3d52-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dOUDFcdajLZOFnak7hdseHqypMKe3H0okjgjTRnu6EahETsPOmnpPBi4Ck1IH8ntjB%2F1BndVCBIEetw86ottm8549BAmUR25E7nH%2Fl2El34DcTNlghcIPDdCnOx8lYMJA0%2BKLq9A47i4wD%2F6VspN6v4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a0f64b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/75676.8481ee3ef6c0d7c670c6.js | 188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/75676.8481ee3ef6c0d7c670c6.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (13527) Hash502ff8e5505ed7ca0324277b0bc89a44 d72fbdd0644c128b92e705195be59364fe41d03a da6f72756a57cf6b4ee7fe8d1ffa539976246470d740b0434e62ce7bb3d4a60f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/75676.8481ee3ef6c0d7c670c6.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"350e-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BsD7ULaOfQTWwmIN5HMX4AVM1W03dlxq9a0gcfFvFrGksCIIVB40eQAci%2BYb7r4ru7Oh24wFeXMvARUkMbPgDNhdkXntGzhmVdJOYBzk7wR3lEUL9Yn2kJfV10x9QVjNr2pQeiMxsyQXodsWyAlJ%2BGY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aebfb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/23356.ac12463556a44bd7b330.js | 188.114.96.1 | 200 OK | 313 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/23356.ac12463556a44bd7b330.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size313 kB (313357 bytes) Hashea40ae308128c34c5c2315acb36e7c92 66a9ab4bb72d4d334a0f477930bd9abc8e617a97 50b771c9c9d4597221d281e5ade7f69786b1c63b9c81c84c61073812a35cdd3c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/23356.ac12463556a44bd7b330.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"167001-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D0dkj8%2BP7ZD6ebeXDdfq7NiIxp%2Fv7DuO3x1enDj6An45G%2FPubTkwkfSptsxIESAfiI58Hz4Kb7lweopCfJUuO%2Bl3YAIQBYrGXtlKZxvY0YspobrtOA%2BCgnxJmlQ4H8oGIgTIliQ5kwnLbRpKxOXJcFw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119cef5b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/37102.04489c88475d6b93636f.js | 188.114.96.1 | 200 OK | 9.1 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/37102.04489c88475d6b93636f.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (18523) Hash6a056d7583533ca1f6f22eb59c25f71e fd9008c3477be5b59118cec1d51e0d5942e9511a 93ac8375ee2ec8788c40ffd8afb828f87d2e3b7a718f346cd92d353f32cf3754
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/37102.04489c88475d6b93636f.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"4892-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ietrC%2Bm%2B4mtlRAfcWau4ukGNnWo7ZfTzGdhgVZ%2FvmCN8Wk%2BjAw9x7La1EaoHdEFOk4ffw7t0rdamIeY2is3R2dHz6nLRbiauqNoNr2XTyS33sjibGHBeOKdT5qFJLPT%2F%2FmE0z8KZJ9gaS9WqQyR8yj8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119bedcb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/66701.1a83dd6990836d80fe7c.js | 188.114.96.1 | 200 OK | 8.5 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/66701.1a83dd6990836d80fe7c.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (11178) Hashb2c21f2a66a342876b66fe2ccca32047 d6c8eaedf6bac6cc072935d1607b9387d912e2a4 82651ceeb7e2bd56422c831f2557e259f8e3ce6cf4e47020e5f0b4f13c81562f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/66701.1a83dd6990836d80fe7c.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"2be1-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AsSGsWiPw7pSFOjSuqaZMAz8FInGMeWVnAZw86QxfWYEbJLlj5m9Pcm41zPAAFzQ6odtOa9E6HcqHjRE7Q0zc1PjsSpV24fh4qhKezQiSZjpGegoSIc%2FpTlw5bAjMkyo%2F8as9Cezj2d2IuK2Q0N27%2F4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119bed7b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/47146.d5c177e816a2cf054d31.js | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/47146.d5c177e816a2cf054d31.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (43856) Hash2dd911fe6af5b351702811c2d2dbdb35 6d22418ce848dafc32e9e0f8224fc6ce13a8efaf 40e9ecd17a864fde103d7ac450a265ed91814c0dbf4ab22f26df913e1f724969
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/47146.d5c177e816a2cf054d31.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"ab87-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HuFQZGzI%2BEyymQhHUHgNuiliKEzDkikT4GOQWzA4D6CoxgYpavg9ow6KyFt%2F08uoCiuq90e8H4%2Br32NkUJqHMnPahCIiVdGNTWdyGwgwugfjNnf0t7%2B%2F1f2c0QG%2BdjftPAwxqM0Q974Rkv1Q1sjErVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119bec9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/49191.4c47aae235ac3c0cdcd4.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/49191.4c47aae235ac3c0cdcd4.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (12692) Hashd4ce6646e8d5ffda699497912a3eebd1 4a805ee77c49b82538f97e189c6fe64763b596af 27303c6d56e622d841fdf0dbe19d3b61ba24b4d9ed0f0063554d40d051419a8f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/49191.4c47aae235ac3c0cdcd4.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"31cb-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Feuv93f4jTjycU%2BZapwDsHfxYCFRLE1626VvAt3lbzLulIiWTMfb21mlnBsWDADVMDXRXCFX%2FYpkjpUKQWjTfINHhnjBaazff%2FxYP%2BVCfefsRbjZke2P9XyiA6aGSP6a80X5odhS2RLlxjw4f5IVl1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119beddb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/b9811218b3a54ad59fb2.woff2 | 188.114.96.1 | 200 OK | 65 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/b9811218b3a54ad59fb2.woff2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with no line terminators Hashc7621ccdd6a8ca9b681b2def747d72a7 61c3dbec477606bebcf5d6ccb58f26659651d0e2 135667d8b38dcb9372bf4d65eaa44fa5438d0b06831a2cd562eb82b8d44f4098
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/b9811218b3a54ad59fb2.woff2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:13 GMT
content-type: font/woff2
content-length: 65
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"41-18d27c367b0"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OYFWE13Ovvpt78YakpwXeDHiEX7AFt5M2F7UjBQbibB5aNOWhuiWwC02jtkDumvBngjAZo6o4Ax6kKn7tWd%2FPIZthX9nMufErpCUEqssrY72DyUsFJtq6WgseIPs4Pe%2FnESXbo77MqdGBE84kqjCRj0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf128e9c1b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/74970.ad098636400bd7dcbe6c.js | 188.114.96.1 | 200 OK | 8.7 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/74970.ad098636400bd7dcbe6c.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (28091) Hash3c3526a5242b8edbf4465c32aaf8fa93 577aabb70319ddb82ff368904993a42b33867d13 56d5c52d9d7ee3aa25c7670d3a69b9d711c20ed56e61f26f21cb459640fbf3d2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/74970.ad098636400bd7dcbe6c.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"6df2-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c0tCdVTcPb9hQlfP%2FEVBKyhoVPvbZcZtuiiBjo0Ccy%2BKVu2chxhaq2%2BR0V%2FClbzYc2%2FqxaSdk8CLE7NeIBMfVv3PyGTz%2F8DKCVtRrYuWW8ZhvOp%2FovCp8pRxeNFXr2mDyKOPBYrjwtMVVznTveuxGCo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119beceb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/94491.6feea119a246906e42da.js | 188.114.96.1 | 200 OK | 192 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/94491.6feea119a246906e42da.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (29770) Size192 kB (191667 bytes) Hash2b097f530ff3ef39552a90e18a8bd883 326b60321000b059a090e4ef046b9421d64962f5 dd4f80fbf943312c9ed47c07c0cd767cfa20d3657f0b50a5787704991ee85f00
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/94491.6feea119a246906e42da.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"7481-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eHKr7mXjxLcSACsSXNTkG9OemIhU9sBtCx%2FNxdhBhAxJAJOPU%2FSi4CzPI7uj2KWOOOThQaMVRurkzlhCaufrw%2FBmpBLRfdFKJi8bKUiZfbr%2BqPq%2BWPxYXKIQ%2Fst36uu975n3rCSc0kXgBn8ZZFdN5hE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119bed5b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/20ac37ed2576dd48d7dc.woff2 | 188.114.96.1 | 200 OK | 65 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/20ac37ed2576dd48d7dc.woff2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with no line terminators Hash84b7416cff14fd88e25c7a5e808f96e7 141dc0f5c13044dad660a2add445baf5c472dffb d8c6f38967f6cf2d568e34abe3e04c2c2c195becd596c1cee7b9b83822dd768c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/20ac37ed2576dd48d7dc.woff2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:15 GMT
content-type: font/woff2
content-length: 65
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"41-18d27c367b0"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wIjN49oel5IbhojlJNaE5B4n8cudGDu75aN7EXU00Zq2sE79q9rZfjitWrgfpy9FJjbu0AtjArHZ7rGmzkma8oC4G9%2FQehLZoUKBv1clSd2YESDoW31KlQIdVHIzg7ePe6AiQlOYWLnUNVfiVEQCaqc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1325a25b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/69628.7b15742208fc0d4aa02d.js | 188.114.96.1 | 200 OK | 28 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/69628.7b15742208fc0d4aa02d.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65519), with no line terminators Hash345efed9d62429e18913d1635c5e90b0 f764667ec4e7eb14802a586c865797dc041e5d87 d9373ccd4bb87c72365f519e305eb5f9c9f5ef347569b34ef08bf3126a9389c9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/69628.7b15742208fc0d4aa02d.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"164df-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KJ7Hg3cgJCbf1qdwsLTMS7B1AA8asXO8S749lFlhhRFrbNk%2BzsfHA72Ii2GvsdpnEKxHNNQrg%2F8IhrsCnORpkYdWzH1k7QT8oas3V7EAKajVmv6HdHA%2FkvHxidn%2FB6YwPBZSgiCSF17u3VDtdowYric%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a2f86b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/web.a572a92ab0a38d32b311.js | 188.114.96.1 | 200 OK | 70 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/web.a572a92ab0a38d32b311.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb97d0dbd751b156ed94ff7be9e299ec2 a7adab0116d09edf46e2fc7ddce04b410cac250f 866bf767de1021c0532594c9493db97ea678bb09641905230423d3276937fc9c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/web.a572a92ab0a38d32b311.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"1c3ff-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ruuP4G%2BbfkYGyPVx86qLcluDCemZSjRTEObYQ18t0fTxH5t1cPdU%2FQSbYdmZb04RhHl0KVLj3DIEnE3bbC86R1lUwmF2FjirI7QdIC8ixQZkQ2mXff%2FTSNRzfFCS5Kh9a7kqBabbTvvE7pjVaU7O3H4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a4febb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/94381.75805595bcb471e9283c.js | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/94381.75805595bcb471e9283c.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (17283) Hash1d9461b1a5901db3a1913721102de7f6 b5aaaaf164bd8d45b150d86ec7580dd08743efc3 8fee5c60698b99ceefb3b9443339bf6ae1b610b3e5df65ef668eb1dbc8643dde
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/94381.75805595bcb471e9283c.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"43ba-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h1obOlNHpMJtcA8RzSW4a1ymUuQJzD%2FazN9QteQ1mSgIA4blb3RBbo%2FctUkvb8gMmmuWCnatZxH6Z0hpZSH3KN8FK1hfNPgrxgT%2BJCN094nLFhDXgWz4HR0570p41Fmdd6Ao3%2F3W4vdC8h7WXeom%2B%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a2f96b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/11538.db58e10c3c76859618f0.js | 188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/11538.db58e10c3c76859618f0.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (30244) Hash7f54de7efa90ea0e15b1c612bad83249 1a5edff4e5621f3f3fe3c536c18cd787872aa17e db01fa5a4d163102243a550ad6e1f79763c2b718a1e4e1261bbbaf0c548f5b2b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/11538.db58e10c3c76859618f0.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"765b-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ANwQSve2BFc32ZIV3PywXk8%2FL9vzJnStF3lcpBIQHgPmz5A73XjGAwCHIAuuUt%2BAjK0l%2FIMmN7jTSJgi8BEkY3o66PvlrFa0hywzDW1ybojN6iUAJxTbIPOXlvnqE3BsKDjZEvMhwmfQMjUFyTm8T0w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a3fa3b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/8240.59954d342c818ac8b70f.js | 188.114.96.1 | 200 OK | 31 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/8240.59954d342c818ac8b70f.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash18dcf8fa835cfc1860e0869ae9711d8a 372560e730d7725d0d486544b57f7ca5a1e740a1 3bc562cf2f8191b1220d710ccb7cfba8dd0eca628055f0fc4bf98b0f8e7289dd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/8240.59954d342c818ac8b70f.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"13b4b-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KT%2Bz7F0xSxwoye7p3A9pTQvlBmOYWKflwIrnmWtvqSfQP8QUaNYbCjIQZuMI%2FY%2Fyv1Ui9lrK5KRoWBfwrrOLPIWU75A1vRrr1GShDmLPpEx%2B%2FtTyCiLsLE%2FzWMJl8y2L19wTuvQ8JO%2BbK%2FGbtU2WwGM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119becdb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/9a02726c2f8410020238.woff2 | 188.114.96.1 | 200 OK | 188 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/9a02726c2f8410020238.woff2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 187596, version 2.459 Size188 kB (187596 bytes) Hashe55012627a8f6e7203b72a8de730c483 4c43b88403ec9c3053d74b4c502bcaf99f594c57 8390503760c8f26556001a28e7d95e4a237a4780e7ceeebf0853ce252fde4ba8
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/9a02726c2f8410020238.woff2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:15 GMT
content-type: font/woff2
content-length: 187596
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 21:49:24 GMT
etag: W/"2dccc-18d28d992a0"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LYeXChySsg0vKUHfImdljBUToDM9KlY1b3zAmcNU84NdvPSMnFpyqiczWAtUiNcXfMb%2BZ8NdQ1rkuXKQXp2sTIarSnDuLGXWb5tzxnhY470sVEsn7UTWy4cljraZCE8w5xfqlgClw3gGixjIZ4cn0TY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1342cfdb527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/74836.b991877dde75f9619c99.js | 188.114.96.1 | 200 OK | 186 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/74836.b991877dde75f9619c99.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (19958) Size186 kB (185777 bytes) Hash5de4f60b4efa8bb9454edb13d1cb9d83 5eb21a1fb900d78a23b781b715ee7f3eeb52b672 b6399a12a07f326a303c82e16981091cc42b529ea9f8b0c6986a0d7e91036692
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/74836.b991877dde75f9619c99.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"4e2d-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x1t50L1WaISDsz5hn1S%2FQ6KeUkWIYqBCieVYLSxEvWdRnCe8TSEvJYvd%2BrF7wvsm%2BSHEB%2F4aWqatPIS9hnzbDz77U012Ks1f9soQjzRS6hg%2F%2FM40pv0d35hu%2FVS%2FBa2AQyFc07ZMHNv3kW4ZbNVUZRc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119bed1b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/56145.19258dcaeb421600cd44.js | 188.114.96.1 | 200 OK | 253 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/56145.19258dcaeb421600cd44.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size253 kB (252791 bytes) Hashac9b7c0a29cd7075d85f511611a17abf 6d357c8586a695d47fe8f73189ff5bc7c3ab4c12 e991594389189111b1404e992b0a1b6f8aab79a86c3a81a4ec54f0b44765506a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/56145.19258dcaeb421600cd44.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"33f02-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qpaEGlgO%2BpKxvErQ5MUEiRSpr1yOaTUjm1uXLqasIeDZulE2mN1tph8W%2FO4n6%2FjiO0OqJy8YCE2%2F%2BkWbJ2MJ7KaEX1Wi3br6uiODbNucsnxC4mqb%2Bqd78OTruekb%2FmKRwzCuaPqgRWWHNW9c9YLpVJw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ceeeb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/18409.4b935bbdaf404e1ee4c3.js | 188.114.96.1 | 200 OK | 7.0 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/18409.4b935bbdaf404e1ee4c3.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (9485) Hash29920b68fe02222e46d03962e1a6b98d 499b49c4a23245d3707d765ae5b580da0b7669db 834dc61d92b2544ae84b60bde591e551fa6d167d7720b4fe8f0a2044ad08804e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/18409.4b935bbdaf404e1ee4c3.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2546-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GWq1Na697NtHMKOeRZbXwk6ATbPPONdQ6pyY%2BlB%2Fc%2BqbUjk%2BenLIF%2FoZeF8G9epJKvUcSa5mS2YEDXi5nZ%2B3oHwinP%2FA6Ix2O2A61mu8N3OcgPkGjkzU78uUdFzr58nd8zJz7%2BU2KpwNG%2FckpLCyfNU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a0f67b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/22918.9f2b9d54bbfc371a4d92.js | 188.114.96.1 | 200 OK | 6.2 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/22918.9f2b9d54bbfc371a4d92.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (18420) Hash5c6249fadadcf61985346cfe7e1b7245 0cd8c3cadd55dea165b09b350937732c9c63081f 79f170c6631891285f067a393d02bdc4aa9e270c83c2c0fc144882faeaeb71f2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/22918.9f2b9d54bbfc371a4d92.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"482b-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DMpnZdPU4%2BLd2%2FXDCrhGdT%2FolM6KId%2BFxCoaJw2LjWnCjUk0zErT5Sb%2FHXtkI0Wy8%2FVk%2Bt2jlekHRLHLycVN9dP%2BtGWp3CkQqN6E8z5fvJ0O%2FQI0pvXM1FvMby8oDPoA%2BfK1iJRBwbQs7O4Vn%2Fh%2F5Vo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1195e06b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/api/v9/science | 188.114.96.1 | 204 No Content | 0 B |
URL POST HTTP/3login.restorecord-redirect.xyz/api/v9/science IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /api/v9/science HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Super-Properties: eyJvcyI6IkxpbnV4IiwiYnJvd3NlciI6IkZpcmVmb3giLCJkZXZpY2UiOiIiLCJzeXN0ZW1fbG9jYWxlIjoiZW4tVVMiLCJicm93c2VyX3VzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsImJyb3dzZXJfdmVyc2lvbiI6Ijk2LjAiLCJvc192ZXJzaW9uIjoiIiwicmVmZXJyZXIiOiIiLCJyZWZlcnJpbmdfZG9tYWluIjoiIiwicmVmZXJyZXJfY3VycmVudCI6IiIsInJlZmVycmluZ19kb21haW5fY3VycmVudCI6IiIsInJlbGVhc2VfY2hhbm5lbCI6InN0YWJsZSIsImNsaWVudF9idWlsZF9udW1iZXIiOjI2MDEwMSwiY2xpZW50X2V2ZW50X3NvdXJjZSI6bnVsbH0=
X-Fingerprint: 1238556220600746016.daWOI9xqZPWq0XLsqlAD59PdqtE
X-Discord-Locale: en-US
X-Discord-Timezone: UTC
X-Debug-Options: bugReporterEnabled
Content-Length: 751
Origin: https://login.restorecord-redirect.xyz
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 10 May 2024 18:20:17 GMT
access-control-allow-origin: https://discord.com
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
content-security-policy: frame-ancestors 'none'; default-src 'none'
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bRt987t%2F8JIBHD2l9Ax%2BPhKE1B1PrxlgfeMemn%2BxAiV3NBouodR%2FnJgBr%2BfqPjpQw2QPqNjWMKnI1Psaut%2F6KAoAnM0uY5Bf1KGlkukv9R8QRQVdCfd6H46XXaN5"}],"group":"cf-nel","max_age":604800}
set-cookie: __cfruid=72e160ad3cc0699c9b3cec3ccf1aa8e4b6e00699-1715365216; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None, _cfuvid=z4JC8bH_Q9cHOBs9JGCBCjAxvTOMV7Vzvk8XlZzh98E-1715365216919-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
via: 1.1 google
x-content-type-options: nosniff
etag: W/"a-bAsFyilMr4Ra1hIU5PyoyFRunpI"
server: cloudflare
cf-ray: 881bf13b2f8eb527-OSL
|
|
| login.restorecord-redirect.xyz/assets/78891.2eacf9854660d1cbcc66.js | 188.114.96.1 | 200 OK | 16 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/78891.2eacf9854660d1cbcc66.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8359) Hashe6316733a921697e7ab77ee310d708bf 6877264ab1bfacd94741bf3b580d022c873d2775 82a3fbe09bb9ea57d00ea2b4b6a88eb6cd0b967f888ce5da692ca74456402d65
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/78891.2eacf9854660d1cbcc66.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"20de-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=53IAFlVkJU8Cu9cImW5d6PcmX0260KSli%2BusuFNsU3JGhSUdgMMsMXKpvGlWe1cQq%2F8gf%2F65k6cLhfx9OPfgtLfiYXHk7n0EPzmMu%2Fv4wSvIsmiE%2FiR6fh3kATi7uklcBfznH334VMzSJvgkMLwHnH4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a1f7ab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/60499.862663374dc7b2606eb6.js | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/60499.862663374dc7b2606eb6.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (17610) Hash4ccfa2e22aa81b9717908bd2e198c04b 77c537671daf78c65664c86b2348a8901076b2f1 b7094a75dfa107fdacecb7d4de84339c5bbbdd4f7d138de620e58fcacae645de
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/60499.862663374dc7b2606eb6.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"4501-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KxOtaPuYvprMmKEAmi1nKj67UU688qI%2BGMb%2B9UeRviRDYtaZpa%2Fgt5130OyRSg5TxzIvYX8AvKI6olkSmopxFyn%2Fmb5fLTwYOFtMUPhyJP9ElwP%2FP7X6n01b%2FfrCGn2odpz1BSgcKHhD4DsSDoPA2oI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119bedab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/67079.912803f13064d4c3677e.js | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/67079.912803f13064d4c3677e.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (23306) Hash2a521f7bf2072b4d3eabdf38c0681157 90cfe120f3d79aa5d4efed7a5b458ec27e2d9af0 d7cc40cdb7b530f4d0050c5354a295361f1550e1e3f3092b8e2758fc26006903
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/67079.912803f13064d4c3677e.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"5b41-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fk7dWt1tI9k0C8KdX%2Fg%2Fclocoykanui8nDSyohAq%2BA%2BM35OlW3mjNBcs1cVAXSrZxXToVyGPfGzni4d1PwIXZlMGCJ173wHMB4DZ0iwPuyvxB8%2FzWNyakN3tOIWIf2cEzr26IKv3nScKnNPHXLIXccM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ceebb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/8e64227ebe6f34850334.js | 188.114.96.1 | 200 OK | 5.6 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/8e64227ebe6f34850334.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (2138) Hash22e992f0628b3d94ae2c99ad0e437656 f18568913acb85bc2c740e9d619d2ba7f5765d78 4364f4990adfdfae452760d6adc89de0ca942751ed196160c1196c9602145169
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/8e64227ebe6f34850334.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"88b-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RUE2UJzJhyhfO6ks1HDadssc%2FF%2F4VddXVaARlED%2BxZ%2B0BrXTF5gi5tY2Wnkr9T8MP0y7e%2FBdsfj0N4a56nbswizRsw97O8l%2BOfqcXPMrhSa9E2J3xZjPwPoF3WbXVEUNOn%2Fu2UR8B%2FZjzpZbegPiPZo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12b3d96b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/43870.0bfb9a80f88725fba82a.js | 188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/43870.0bfb9a80f88725fba82a.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (12536) Hash4a5dbaaa2de36a47b31cfed187c7010d 2dc2fe96364b7908203d990daadb8a927b3ad490 fbcde0bc982ed39ff1a8f01ed530ec98f3dc846c75b6323dcae398779766af74
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/43870.0bfb9a80f88725fba82a.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"312f-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=khV5jC0pA1tRIntHHh4vJnja8VGK9sQNfjsHIwd68gdiwIg2NoK42IljBxF%2FVsp9NahiJaEpPxP8CESQmI8Im43MnUQ%2FF2Voj7lZ1m1A3WHC7EOrS93%2BrUhg2EgIgXOhZNN7c6%2FUsXt6Yh%2B1NIMUnMc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aea7b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/26737.36ed5a81390b304d18a5.js | 188.114.96.1 | 200 OK | 9.4 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/26737.36ed5a81390b304d18a5.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (9496), with no line terminators Hash95d4749bd78c2a6b73af4d40c1072db0 d84ff435507b47269b7877de20e2b5637f2ada02 37b9c1afe404b4c5e7e36ce3374735666c8f23665a3c88ba38e3cae0192c1e46
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/26737.36ed5a81390b304d18a5.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"249b-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y5M3TJxgYuubx3JPwoqohXCFVd47KoiFYzyQpCHqmxHBPOPhHVIvI4Xh0d667IArCpGityDV9J1misHJC2yD3r1u7OsdXMv2W%2B5T%2BscCy0ncY1aMXqt98Y7CNaPUSrSRG1OOHyY8Fr3ql8lm0%2BEeckk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ef1fb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/ee6b51adb64f6365352c.woff2 | 188.114.96.1 | 200 OK | 179 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/ee6b51adb64f6365352c.woff2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 179380, version 2.459 Size179 kB (179380 bytes) Hash7cf1be7696bf689b97230262eade8ad8 8eb128f9e3cf364c2fd380eefaa6397f245a1c82 a981989aee5d4479ffadf550d9ecff24a4ac829483e3e55c07da3491f84b12ba
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/ee6b51adb64f6365352c.woff2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:15 GMT
content-type: font/woff2
content-length: 179380
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 21:49:32 GMT
etag: W/"2bcb4-18d28d9b1e0"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FYzJpaX11Dcz7wZIDvrsCWmg%2BJY%2FOjCLxwn7AZR3wTYFaGy7bHG%2F2h6JNfQXzq6yzdXv4YlSDiDZPnHHqgNWoc%2BK3dTCozDtEgqFlAZEjOLuFcfMv%2FClDpBr67Xbm97VlnrD47I163XmUEM0gOJ7Id0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf134adbfb527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/48059.86a954da9c9a44ee9dee.js | 188.114.96.1 | 200 OK | 121 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/48059.86a954da9c9a44ee9dee.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size121 kB (120793 bytes) Hash0913b93dc0dd7e4beacfbb0303501b18 e2fa12d63460ad8a54218971c444b085958ced88 9f32de28a06abc9233adf200a94a4d637cd39ab3b3970390175b42e09e5820fe
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/48059.86a954da9c9a44ee9dee.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"1d7d9-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAK8SfAHYIusP4sZtZbaCe%2Fs52%2BW9Wltt%2Br9wtZR5kLbb%2BIjP%2BuzdNZ%2BVXkgGsWUd2RBybafFkosR7c6IQODjNFnibimyjPwQodkN%2FyxBsi1jCQNvm6W1FekRjSKQWI91xuDBiw5VVRHs7zIMvov4bQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a0f4db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/3f46bbecb4287c0a829f.woff2 | 188.114.96.1 | 200 OK | 65 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/3f46bbecb4287c0a829f.woff2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with no line terminators Hash8e0185b3d3272056b90fa759b629b4a1 f80ecdd55cf374b1f5520fcd64e97883c1f514d8 7f2fc9c03ac5cee4e206b61d510b427ba6e8f5c7554d1b5db42c5caa7cf2307a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/3f46bbecb4287c0a829f.woff2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:15 GMT
content-type: font/woff2
content-length: 65
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"41-18d27c367b0"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4QvGIsWuskdqA7IS3Ik1tsm%2F7pAmzTBX5vwrisMraDboSU5P5PH7u8%2FvUedMCQoNkDOyRvBfrhzI9UDZBhM3MTFkJIqrSFaY%2FZaOFcXcnemezXmJ0vCAhirOOAthXuHNMXL5KG94Pcm3vVMmsFqUYHI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1326a36b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/shared.6fd41c763b4cd504862f.js | 188.114.96.1 | 200 OK | 119 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/shared.6fd41c763b4cd504862f.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size119 kB (118990 bytes) Hashf2444e4ebe925f193c83f692cd8766e6 9d0c75a19d0693743e6429ab8da62f70184426ab 957af5a5dbcbbb943faca25af701c1a3d8839ad98d55ee5aaa401aa2f117ea8b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/shared.6fd41c763b4cd504862f.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"1d0ce-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1FZPMbDoVOhevgGmZ5ShQqRE7QAHM70X8RJpCPBEXHpf71XoW%2Bf0NqQUPNRBwJI5Zy5N4KxW3dhWg%2BaL%2BNEBIFsG10IWfufX%2Bxgw%2BtPPBXw7n34ohJ%2BUK6KYyksPNnymAUuoFUnghOUIjQTglOonoDw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1194df5b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/app.046be1857b9835ad19e7.js | 188.114.96.1 | 200 OK | 684 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/app.046be1857b9835ad19e7.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size684 kB (683933 bytes) Hash548bf6aaee7185ceee59b635b557dc9a 75c298df5f2397e4218d17de297d781fe169b461 4a0fbde1b61188ce3cda8fdce6f655968b6264dadea210b0434dfbb667f1a4d6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/app.046be1857b9835ad19e7.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"a6f9d-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W7J%2BJ84wzDeHAA3SodxKHV2G1vq%2BBus8m7H1xQQjRhU5jVzL2%2FKlXjqd096xuIZmejQR58SyqtlEZ%2FxT%2BDZhzLJG7mTB6CZ3hq%2FtaXIMTP5inoNP5NiudV3vyzDzLkzfy%2BHEg61O9Qrx%2FcdIoctUNmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1194df7b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/78033.af8587a9881dd8fba471.js | 188.114.96.1 | 200 OK | 1.4 MB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/78033.af8587a9881dd8fba471.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size1.4 MB (1402833 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/78033.af8587a9881dd8fba471.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"1567d1-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kG%2Fx9RwXA2NojDCpNUxxsRwVsUd4V7TLWCteXl%2BZ9REZ2pDowKUnkZbt1mkkVshJHhu%2B77mDQqX7Ps%2BQSklF65Lb0JIjfCddf6AWtrBRIlHA2GdSWTaYlZ%2Bu3Dn7acHAsYSqYb0DNGofImii%2F9670HI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ff3ab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/25653.f1981721227784f0166e.js | 188.114.96.1 | 200 OK | 164 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/25653.f1981721227784f0166e.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size164 kB (164235 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/25653.f1981721227784f0166e.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2818b-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GvUwSfX6HvRjKr7o7nph8pEiz7xBbO8lqWt7s3xi5VGPWs5IoSBBznrBhpWRw8%2BXUjwWIxIdiLKVK1CaKtIYWmD7QNKFpmtNd16GDgnBMPXyngBgNXWHm%2FI%2BRYg22%2F8b25NmRaVV8J4EHDfNp8CX3Ng%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11ae946b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/api/v9/experiments?with_guild_experiments=true | 188.114.96.1 | 200 OK | 37 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/api/v9/experiments?with_guild_experiments=true IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hash387501193101b28352e07538b23e08c3 5b884bcc9b635c5d5ed2e27b5bf4ac929144d9a1 b0928d99420fac43ddbc39821ae986ce3c7a19fff98b237d9f2870ce80b1126f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /api/v9/experiments?with_guild_experiments=true HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Super-Properties: eyJvcyI6IkxpbnV4IiwiYnJvd3NlciI6IkZpcmVmb3giLCJkZXZpY2UiOiIiLCJzeXN0ZW1fbG9jYWxlIjoiZW4tVVMiLCJicm93c2VyX3VzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsImJyb3dzZXJfdmVyc2lvbiI6Ijk2LjAiLCJvc192ZXJzaW9uIjoiIiwicmVmZXJyZXIiOiIiLCJyZWZlcnJpbmdfZG9tYWluIjoiIiwicmVmZXJyZXJfY3VycmVudCI6IiIsInJlZmVycmluZ19kb21haW5fY3VycmVudCI6IiIsInJlbGVhc2VfY2hhbm5lbCI6InN0YWJsZSIsImNsaWVudF9idWlsZF9udW1iZXIiOjI2MDEwMSwiY2xpZW50X2V2ZW50X3NvdXJjZSI6bnVsbH0=
X-Context-Properties: eyJsb2NhdGlvbiI6IkxvZ2luIn0=
X-Discord-Locale: en-US
X-Discord-Timezone: UTC
X-Debug-Options: bugReporterEnabled
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://discord.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Audit-Log-Reason, X-Track, X-Super-Properties, X-Context-Properties, X-Failed-Requests, X-Fingerprint, X-RPC-Proxy, X-Discord-Locale, X-Discord-Timezone, X-Debug-Options, x-client-trace-id, If-None-Match, X-Captcha-Key, X-Captcha-Rqtoken, X-Discord-Resource-Optimization-Level, X-Discord-MFA-Authorization, Range, X-RateLimit-Precision
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
content-security-policy: frame-ancestors 'none'; default-src 'none'
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9VgMY3DQ7pmllhVI6lDxM8%2Fq7s9Nh0iC3t8hExgLxJ9yWr4UBPckwRfiS2m2cN41xeWDcSqeBUm%2FBgd7th7GQ91mqG8asxAm%2F0pHNER65UaaDtJyyIb3xCwrJLX"}],"group":"cf-nel","max_age":604800}
set-cookie: __dcfduid=f21821440ef911ef99890a42ca58b883; Expires=Wed, 09-May-2029 18:20:14 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax, __sdcfduid=f21821440ef911ef99890a42ca58b8831dd987db1b4928c62c6a15c3f6151274613a3316b321fa88056e0e17d041e22c; Expires=Wed, 09-May-2029 18:20:14 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax, __cfruid=1ecc6c9aa993e803d278d232e949c2c31a1a4db2-1715365214; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None, _cfuvid=bnRiS4fSqJvhuAgU1omJ_6VB58iTuz95lTMmCNKepJQ-1715365214332-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
via: 1.1 google
x-content-type-options: nosniff
etag: W/"90cd-W4hLzJtjXF1e0uJ7W/SskpFE2aE"
server: cloudflare
cf-ray: 881bf12a7c4fb527-OSL
content-encoding: br
|
|
| login.restorecord-redirect.xyz/assets/13798.6a2a5ac1a86675c94b6c.js | 188.114.96.1 | 200 OK | 7.9 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/13798.6a2a5ac1a86675c94b6c.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8182), with no line terminators Hash81548497b4c074d04063c9f226154ade 3548f8053d9df0534168b499bf42407d8e573e2e 13ac083b959b6c894e5118fd5a686a4985575125a984190c1f7454264cfedeed
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/13798.6a2a5ac1a86675c94b6c.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"1eb0-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1mLMaGvVDPYvnwBg%2B1McP7z6ANVlEEmk5s0RkzlLBLiw%2BeK1fvMhqpw6EE5p4%2FQb0veVMxFB566Chm7TdtNzn%2Fsy0g0jAsF4eklDaYANu3%2BqrilbPwAar5c6Ehz2zGMpi%2BTLSR7cRTQxrm1gc82vKJA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1195e08b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/22843.1bda3edd4dd152273661.js | 188.114.96.1 | 200 OK | 21 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/22843.1bda3edd4dd152273661.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (20995) Hash3d7d3c6641376eab526dc37c2a3aea87 9a4405500ec4685d070b940e3e58dbe95ebedf94 8bd28e45bdf228abeeaec72fec246300bf1a2d85ed2bec3710889cb3ad8b72dd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/22843.1bda3edd4dd152273661.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"523a-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OS6a%2BT%2Bs%2Bly0oIgKbU6KmTfP%2FapyZSdmVyApDMrOvMFJt40v1Agpsz5Z1YJBR1BOHk1C2alik0SrbZj1nvD8MYYAX6nKHZWePEv8IRTzIXPDMeBmGjSOrsJCyWhhpj40o8lz7A8xtpvj3A%2BW2gJWQ7c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1197e56b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/23777.2a4fc059cb5b5caf5307.js | 188.114.96.1 | 200 OK | 60 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/23777.2a4fc059cb5b5caf5307.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (59652) Hash264bf832f52128869c50c91968264bb4 95a54d2525f093719198bfa0aaa1c7ef8574cc4f 515cb4b2b1c5a8190e7a9f74c13a3539aa2f758af17a50a71b9832fe53a88f9f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/23777.2a4fc059cb5b5caf5307.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"e93b-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=igezibxrEMuJrs6XkxKS%2Fy8exSJ%2BpLxkrE3Cz5s6K7yF9u7TxqW0swG19iKaAttnbVzjdhMUIm4DfMegsbCDiR%2FAuNve4Su5VJOT3QWkuQ%2BntNbrrVQoHQt6bCdJYKyTzGnD1FTpdzt3nkBVw84VVgY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119cee0b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/47470.c4ab7647d25b8ac58ca8.js | 188.114.96.1 | 200 OK | 312 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/47470.c4ab7647d25b8ac58ca8.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size312 kB (311789 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/47470.c4ab7647d25b8ac58ca8.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"4c1ed-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2BgrM9s57y3M%2FFdko3QCxYfDgQKXfUUjwObyLeLMW%2FxynkiGWWZTJjP26nAo9TmdRBLw4WKo%2BWDql2pgB8de8LBJJrh1I%2FG%2BZpfEEQ5hQPCy0BVK1Fp4LSWza55Eef5iN3Afe2CaIx1UktTwIjCsDZk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a7857b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/399f7f1238d1fe8b2b51.js | 188.114.96.1 | 200 OK | 109 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/399f7f1238d1fe8b2b51.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size109 kB (108609 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/399f7f1238d1fe8b2b51.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"1a841-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nrCe7wY7MroU05gTWytdxVrQSGCn1elfozrA1VOMIO%2BBKDcvnswU2zcT%2BAAW4oRzshMVpD5U1ff9uLlM0jP0q6cSFV8CblDs1lG6TDqqQ5CMQNoeTJWy9hVCFKfkZtZM3G%2Bxyc4BpYuauGxa%2F0ybtR4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12ce903b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/94751.a83f5d49f2a33eb3efc1.js | 188.114.96.1 | 200 OK | 1.0 MB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/94751.a83f5d49f2a33eb3efc1.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size1.0 MB (1006633 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/94751.a83f5d49f2a33eb3efc1.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"f5c29-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Of8jU0FY1Qk42yGHS7mUkohc%2B8pACNGyXa%2FG4ziQqD9TYNu2h6ZvY1q%2FR6%2F0tUaDsFpOHCWZ1jY0%2BzSPgY8orbaIrDWyag6F3bODa486UImKIDfweatbi0Ly7VNwk051VcDHlNU29%2F0gpCCWTl4xNxw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1198e65b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/18407.d0257553d76c1da19de7.js | 188.114.96.1 | 200 OK | 63 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/18407.d0257553d76c1da19de7.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (62630) Hashc6070a74fc7828610536a88f4ef0ac00 58ff20e6b81343ce9fb04c9a3b98e96eeaced06b 5a52fadd5efd62ecee80f803d600055810fb7765497d80e95e8f61aa27286cc5
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/18407.d0257553d76c1da19de7.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"f4dd-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uAH6CPE5lX0Z7rBFO0yPxFLLQ6PZFGhmQmuzEvbYefzCjj37PHU7%2FAYq7LWPPLVx5CBxR18VrctYfZFvNlxohapchtmsYfHZzrAKsxwxffjdhfnseyTv7LR2ZR4fCM03L5dEdcVlMjBLhScJ3LMoj40%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aeb9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/68291.687557b9b660607399a3.js | 188.114.96.1 | 200 OK | 18 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/68291.687557b9b660607399a3.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (17615) Hashdd0045a215121572125a5304c3133a15 3ef4f53e521272322eac0952cf5b9b7f7b01ceee b491a88ee2a3533fc0c2eaa6a9f23a5e5d8e431a06aa9cf36e4c36fdcb0c699f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/68291.687557b9b660607399a3.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"4506-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XQef5uSl8EE3HqwryypnoiYUWROID%2Fce4haecKS1mjeMGNEOJnspu0o0%2BtlVfDHAO2U9Aaa0ZrB9cCX0B%2FYINvd40%2FXfMIGmLLyN8c9XroPxxXL%2BgMI4T1V29Hyy2TX8E5GoH%2FsKdyaYUsiyLxugE6o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12c8831b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/44504.4c4113c3ec609733dacd.js | 188.114.96.1 | 200 OK | 60 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/44504.4c4113c3ec609733dacd.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (59916) Hash34be6172cc28f54550f737535ee7406b ae6f7a023c57531df95cfce4b8c2faf862b922c5 419e3eebea240a838aa818a0ac9b57d607a52c7547cd9ee876bfb2bd84226e8b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/44504.4c4113c3ec609733dacd.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"ea43-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zioDPLyN3fpmFsHYoueBLA1CxA42lmUsYggX7SXlRtC2oMXQe6Lmt3vEOMFJszFaY%2FJwS9lvwZLgEm9f6qh4Wj7HYBMrWcDxr7I4HHkzXsoVOF5np0Qrgnjr2DgL%2FO0cL%2BNzFfTKCLTfISYppZnImHk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12ca868b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/13942.42b3309fce7f57e5eb63.js | 188.114.96.1 | 200 OK | 141 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/13942.42b3309fce7f57e5eb63.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size141 kB (140709 bytes) Hashb57f45095b443009c496ab1c1471be7f e9af53d0e3e3ab155abafa07d23c79dae2c71f2c 408ebf752cddb6bc3782d7266fa4a7aa759bb9d4255f8d17cc7aade0ecb971b5
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/13942.42b3309fce7f57e5eb63.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"225a5-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6qDqNbOTYmgsfeo6LifKv2rjJOMkjob14vDuaOvoxHeUauv4pQ5o2XgCqQL7vr6obW2htXttPQs1LKudCNk3T7eacCH82%2Bq80iqyocQOB3A2KsJx68SQDIGjkbly2w966FBFvbGxezb1O8NzpSlq8h0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1198e62b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/75851.82c9a7f8176d778029e3.js | 188.114.96.1 | 200 OK | 9.7 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/75851.82c9a7f8176d778029e3.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with very long lines (9810), with no line terminators Hashac6ef2a39ee1dd9bfd9906c593a8ffc6 0770b44a9791f7bb2d95b3c44c79a96fdf08ac4f 99c9f93237bec55428a7d0199a1a1c33239ff4f3afc72f09a03c860961430ad7
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/75851.82c9a7f8176d778029e3.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"25ed-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WRVwrOQ58VJ1k1Vbivqe0%2BzUE9IXSdSWe1kOTGdeivOZ%2FOSPea9LcFBXfTNKVdUSF5NBXQQEm2KbRSnvHQmf9tCjiwN2yDwJL9WC81Sb%2BItXvIxxp7n%2F0M4IXiRPfSPHjWWHr8hoUoUJKkREm4Sbw9g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1199e78b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/41831.ad048c0163425aea4d2e.js | 188.114.96.1 | 200 OK | 16 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/41831.ad048c0163425aea4d2e.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (15734) Hashaa0f56ed2b08f1029037fc3d27925069 87365d2e6e51333ebd33cdc51cad33fa7aa5fc44 84267bc281052f153133ac0dacddd98dfbf3edaa99aa2b60f0ed645e90d1c0d1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/41831.ad048c0163425aea4d2e.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"3dad-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hIP0UBYzr45mBx%2FUJC7Z%2FEVLPsD9Um%2BLndIYlrLr%2FbBRxOWWUuhTi2vyCIJdBCizEJ18KSEjs55D%2B%2BmAp8r8eLMqXiXNVWTkExhY7bxWPtcl9OvkfAKE9wLo5bwwG5q6gO7VaYYbSZHoZA8qBpjjhsE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aea6b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/44d5e1639bc492dc8d62.svg | 188.114.96.1 | 200 OK | 3.1 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/44d5e1639bc492dc8d62.svg IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeSVG Scalable Vector Graphics image Hash02799b7410be627fa7a88303875c8132 4cd594b6972f1081641e15ec286e9bf5a6786b2e 004f3b15b564c0aa1283e18e84b1f4bbc714f5ffedaa5dabd7281c01b08a559c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/44d5e1639bc492dc8d62.svg HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"c4a-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5XdfNw4h9OoHZ9wJ9y3a3V44kL3ZtNkorybEtHMFcA2KFgWRHi%2F4qx%2BipJY%2B03TRItX9bkcm6b4lyDFfAfJQuZ5qNez3k%2BWFUW49o3acL0xRHFQfisAmUhHr1B%2B7PLMciWkMUp7wpmu%2B42C0rbgLGqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d5a1fb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/55695.a2abd2a754a025899810.js | 188.114.96.1 | 200 OK | 959 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/55695.a2abd2a754a025899810.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size959 kB (959311 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/55695.a2abd2a754a025899810.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"ea34f-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XptJ1GbEyUs%2FSlQECdEPtXJsWA5mYR0VhULnUG%2F8mwzJkWLv%2FlfrlyjiSo9N4dXWsQTmYTV7f10K0Dqi%2BwRZJbrAjf7WuGHVRpbL6yZcI%2B6Mor9SuweymZUS4PQNkTvoxrsvOhObynWFHdLDJqNNBJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e40b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/14875.31e886d6d1db8a56b5df.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/14875.31e886d6d1db8a56b5df.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (14036) Hashb73ea7c5ff12b5ac922cf837484b41d4 ecb0e464f4dc99dc4c2a88a0af3a5e80c8cbb0a2 558da14d878234c5150f3875e25a8049954a5ac6446595d3f58ac828620a6389
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/14875.31e886d6d1db8a56b5df.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"370b-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJq8k6ZcS7%2FoMJIPKvSmaIlSQU0aWsO6Z38vke5zN2W5E7%2BgAUzUf7bcQlxaXV6Y410YZJfujHioMWYKngAGIiiy17%2FWqUqeSTWC9tAeoUI%2BeOXxt%2B7k3cBMrjQ8ngVeXlRU6ttg3DRo5B7MRGso0rE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1198e71b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/41611.7d797575820892675652.js | 188.114.96.1 | 200 OK | 21 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/41611.7d797575820892675652.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (20820) Hasha290ac62b9753650e23d6e78ea4af855 417747142045ca3f2e616d389c0e678c3d6bab48 7140411b3e59a097ef31914fad63941fcc863cbc7fdf7f8aca5ddb67f9a6388b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/41611.7d797575820892675652.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"518b-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qcFkyZu9ymfbYpQT0SxFXSP2xitoqeh%2FltN2zYBb5jpHE7N49Ve5vxUcr%2BAeLd86GSdigr7XIe20D9DiP%2BomgOr9PdYmUyVpozWOQf%2FAluaW4WGGygWEWgg2lUNzZzx4OpRaaHFtj0V%2Fp84DS%2FfRdOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119cedfb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/96634.06d9840e14d8b8f41b43.js | 188.114.96.1 | 200 OK | 16 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/96634.06d9840e14d8b8f41b43.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (16229) Hashb924f4be14a3e2330a86646c12dd033e fb8f63674d6d1b4a937d5e293bb46a10a384bc03 d65f5776f04bea788fecab1869863fdbd743604e16b45c40a3a5c91029b80057
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/96634.06d9840e14d8b8f41b43.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"3f9c-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ML0tku0VJHd7g72yzctl%2Bp4QwdXffJgulq307D4iV697vU9TmTFPlGVx91hW6%2FmSK83RNyyECTHumIql9mQw2azlplwTSSZJDDS6ZyDsZ7boqk8L%2Fko4Rj1I8oJGAmwWBe0iFGjy1AEI1rGmnqgyEfQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cc8c4b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/a9639edf37cbf3bc290c.js | 188.114.96.1 | 200 OK | 5.8 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/a9639edf37cbf3bc290c.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with very long lines (5947), with no line terminators Hashf392c77642c2fdc2ad568c6141c40966 8f9529db4fcc332030fe2b066220c4d5752e2cc7 9c96486a4197d9bfe932ae15364d60dbda2ce77fb28f6e53319f5a9b6b25b486
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/a9639edf37cbf3bc290c.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"169a-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZfzaR9rSax603hh0HkMpTis4Uk94VLOpv9X7v3MFp%2B5%2FIXqQj%2FkeDNuSS5eKYDoYGorBs0R47B3a3ALBnaKT8r5HL%2FeIcOro6zL4Fn8iPAtNc8Ub%2FSXzaiMkgQRxoZWK%2FmhRXfDUScQ6j1oPkHxcqlM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d0957b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/63550.a619020e4c7b3d5be7ac.js | 188.114.96.1 | 200 OK | 8.0 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/63550.a619020e4c7b3d5be7ac.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8041), with no line terminators Hashb03a74e4793c52da60a440f2b73aea20 a845f9c25a2f8fb2a10e67468045286a3f0d5851 d64c4d797460c5e849a45bdd00b59075f1a415c2be3a2de56f719e7372534101
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/63550.a619020e4c7b3d5be7ac.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"1f1c-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=42qpbpowLIgeBQL%2FcsEPVMznX0GvQZZ716e0K5MqlvNcZGuFyLf7pkrNE%2BXpnNwqkJPKRwIZkQFSpG9Z%2Bujqfux%2BWe%2FUqRe7il2F3hRlxWbvAmeXrxySUPLHfu%2BN5zIKgU65BZKrKoDFu%2FA8HUknhB0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1195e14b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/482.6e1c86f88a37a71d42ec.js | 188.114.96.1 | 200 OK | 21 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/482.6e1c86f88a37a71d42ec.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (20577) Hashba0cca7d871b0de10a4344be2427733f 4d4149acf6c6694000b0b4a5f18b4bff6aba6878 066deb7f1b943e4ccefdc62fc9dc214596787f8904a464de52bbaecf02ad8d86
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/482.6e1c86f88a37a71d42ec.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"5096-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mJEJ3K2QuaqvBfv0vns494dYIspfnCJCS7EO%2B5esylIw8Ji4R6f2zS%2Fr1rGjKxZtOGeRitMdt0rqYf%2BgJFKH8YCJP997CT39HhbEd5sp7wlW8IJZ9UcFJ1EmC%2BeRfhLIF0K65g7ytnb2QVp01G%2BYfQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e24b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/e0ece3c23b33d18f4d00.woff2 | 188.114.96.1 | 200 OK | 187 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/e0ece3c23b33d18f4d00.woff2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 186744, version 2.459 Size187 kB (186744 bytes) Hash05422eb499ddf5616e44a52c4f1063ae eab3a7e41cbf851df0f0962ed18130cf89673a65 c1d71bd80fc3ecf5ef1a97092a456a046d55fd264be721f2a25be3e59ccb8b2b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/e0ece3c23b33d18f4d00.woff2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:15 GMT
content-type: font/woff2
content-length: 186744
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 21:49:41 GMT
etag: W/"2d978-18d28d9d508"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcgcS9sqwp6RBFa3l6e1b98TnjHQtkkDPoqV%2F7hPFskvIQnPTsMepMG9ZXssCzIklI1B1NPHIiVE0tvulN3X5zkYX5tLyqsYPx94JfjjvDVgmPj7NY36PM9Y9ZUWwnEB%2FypY5Fog9YNsclCuj7NKvyA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1342d00b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/fd3f659b46061bd95594.js | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/fd3f659b46061bd95594.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (12472) Hash1f26d0370e5e43ea29dcff7c1c53d661 dea8cfb895f9081bcf0b5c6eaa2608c0da58393d 8f23b16a70005926318364b1757e80b28978294775227047866f5a64f1683fea
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/fd3f659b46061bd95594.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"30e9-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PRikN9rCB7%2BDX3W0HAg5xGMiBTBynmBbCWkhHA0WpULwjd4WNEGL%2FrrdmEB0jBGKawK5c5X5%2B4C4shwZ1fHGgv2jEB9cFQl%2BTm%2F2I4N%2F0JCO0o6l%2BIeGX6RvvyJ1uEe5epcsoiNe6L9B22IZ7OiktGU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12ca883b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/23992.0430129d8ed977cac0d4.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/23992.0430129d8ed977cac0d4.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/23992.0430129d8ed977cac0d4.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"37fe-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LSCSZ1DYRUjGa0DaorA%2BhEiaOMSIV2fhYbsl%2FC9QEBOVQnzc9IQ5iW%2FZTG6gOuyHqG8QZ4r6ThAz%2FROvDczD1B2sE5vhiROepBS34tsrijUvXf6EeqGJzQlXA59UyqTOh2eXtxomJXc06gLuTtwDpJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cd8ccb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/71554.35bafd030ac297a37d2b.js | 188.114.96.1 | 200 OK | 100 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/71554.35bafd030ac297a37d2b.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size100 kB (100440 bytes) Hashba52e5e9910264fad8c8cc08677ff419 2a8303994f8bf6fbce44a9198fc69f39a41b8af6 e6eebeabe896bd729ea9001e3049ec54e5438c7d5ecc845ae6a3f8d5c51e7f2c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/71554.35bafd030ac297a37d2b.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"18858-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GPqaD7YqHcqcCIEvGwdLkAPR8LQzghIMR%2BaPzsKp2iEBJGIOb2dEzTKL8a2qtFuBwphwkLQjAJVSluLGjnJxEVgSwbk12l9WAp0jQtyw8YyRhOYqCjDtkXR3566G0o7Ad5SYkCmAinLM%2FVSR4kMACTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119df01b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/6086.2af42e57fcf6739db519.js | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/6086.2af42e57fcf6739db519.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (19374) Hash6fc5e9f209e47dece5d8e86354e38916 78a29b4cf26974c725b5952e0b65baed2e3309c6 014e1cfc914dc362f3a55113e3aa27163bcd88c8323905e7d8b43c7b16ae821d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/6086.2af42e57fcf6739db519.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"4be4-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2Fm8dzo3KJSdIXexg32CUFgg%2B2dOH%2FE3EgEaAduBnsn2vPY5yUNt9ylDh2o3xSfZ7xoxNFR5913tPkVR02Ma6IK%2B0SuCePbB3gtyXACFawsj2PV8qeew0A4HbxRbjAE4AicTIpV0XINbIRTfMsoLEgw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a0f57b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/10991.d742d0d238c0d99e96ae.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/10991.d742d0d238c0d99e96ae.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (10475) Hashfa3d9476408d24313aaaa8d6794932fc 4ab50205305c760862e0892cdf69e397a73fab7a 1f9dc95a0409e1d5a703e72a1f03578ba3b0c28cc1e7177a2b7f46cd7056cd2a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/10991.d742d0d238c0d99e96ae.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"2922-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ej%2BzfJx3DsRyD1NAm3HzUYqp2K0CNedsXt%2BLxj8j4xSJ%2BOE9CNY65LleyoikQ0%2F%2FnA8LS4M1zt%2F9K7X6ukF1CiadkLWLyLd304jCPfwod6ouGhlow3VSaueAYqV0LKEPfS80sMhFZ4Gk9wWN6G6K5u8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e2db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/58166.4ec31e1810af6eda852a.js | 188.114.96.1 | 200 OK | 38 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/58166.4ec31e1810af6eda852a.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (37774) Hashce66262030ddf4d78cd0600c1706bbca 195a3af6bbcd112990859fffef3a9b92a777788e e8d1036a715eff98d533a5edf5e91f079e9eb7482fe9c2eabd6df44d51d3eaf7
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/58166.4ec31e1810af6eda852a.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"93c5-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dn58ZaN8hD%2BUis3u0Ef6QsurppryCMEDsJHAO9kPw5lFSQwW%2B8QOGRLWAzZmKDcHLnhduZSIQ%2FqtI9zxFIjZ54Mdg12NQVpyoGCkETNu1QnB96hROhj3u3HTC428%2B5klcx4QfVJo5t5IiXSUFqrTWFc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a4fb9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/a826e445dff97cf15335.svg | 188.114.96.1 | 200 OK | 2.1 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/a826e445dff97cf15335.svg IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeSVG Scalable Vector Graphics image Hash1ff7f50b770d68712d36c79ae6121521 e3fe855784e971e2c57de12e878aa073da7d31bd ad965cb39af806b0543af5c32ae34cd0b136dda9272e6d877b067cd00563e048
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/a826e445dff97cf15335.svg HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"80a-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TmPQSy4frX2PcJ2t9AP22xoVmz0Jo05mopyMxXSTvwwdLLakKBx5Znr54Rk599bEKbpQRP2V4ScQNQQq%2B2GXvKzAQ%2FXu%2F50kJUHdStO4YPSbNEX5YMGN%2BBUimRh2Lz9Ia7ufeHcjKftaf1nWxfsJDh8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d39f7b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/7442b576347c1d02886f.svg | 188.114.96.1 | 200 OK | 395 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/7442b576347c1d02886f.svg IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeSVG Scalable Vector Graphics image Hash3e60ff1de94af19ce4bc825b9d2fd18a c5a4ae459f6596bdefe85021f198826e316b4198 8a32440759eee1d213b1561c980ebe7856fcaffa11588a4b7131cf83fb1c2092
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/7442b576347c1d02886f.svg HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"18b-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EZ%2FUCqwRmLY4tzIy839cW0%2FCCtComB4bkjusHQQGYePWdtCNhcQO6G8UPB%2B%2FIigiRjQtK7aRTK0edXGQeBnXRKKxEiVubJqweAeEWt%2F6Tuzc0KPz3Po%2F5Ta07wQj1RF7f2qh4WaTZ%2FcRLit0vCmjtSw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d4a05b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/65000.e1b9099437a0cb5444c8.js | 188.114.96.1 | 200 OK | 21 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/65000.e1b9099437a0cb5444c8.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (21036) Hashabc619bd0b72681ed95131a5e0489b12 50f98a563f0b7771b5df533e8dd75306f37606d5 0384028309684382f2d9e791a778dbe1a4a0e9bc6e6756bdfc3d4f236ae3bc66
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/65000.e1b9099437a0cb5444c8.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"5263-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QhZ3Ad5XzCQ%2BvETybhhcw7BoRDaZluxFbs2wcmFLAv8UTv5mhcjUiB%2BhHBZnjY7e20yjqGuaDunEZ7H6%2F4RLE4YmiV9k1YCjmyHZVyfMPTXzsjVEJiBkrExtDF6LTCDUbM0aCM%2BHgqhAkZJXAwLTnbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e28b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js | 188.114.96.1 | 302 Found | 7.9 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 10 May 2024 18:20:14 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/1b3559406bc8/main.js
access-control-allow-origin: *
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IXRptkrAzh9CoUNZoXaNX32F6ZWITEGs3mjHz%2BhKdNfWio%2B6WCYyBNVgdRkw0RiYKurTB6NBM4UzPnrmuu8z0M8VXvszt1AaZQszSlAfVGzKDpmk9%2BekomtCGnXdubE0w8k292kIVlAwuYwkP9a1eWA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12c2f8cb527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/96897.008f2a416a4c547f02a7.js | 188.114.96.1 | 200 OK | 8.9 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/96897.008f2a416a4c547f02a7.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (9305), with no line terminators Hash09526b3c9921a6dc860a1ad3e0b0bbb7 8830182678c4c396ec9098dbb522bf8124196a97 9c1e6291fe3e409a901297061f201be5ea9de639ca97a63badffdc77f50fbce1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/96897.008f2a416a4c547f02a7.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"22bc-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KuzjfeAkkiHZO0ONLqlRE7J0URdAEtcRFtrwG5%2Fey1iIOuqJvQK6rCq32Zmcdafc3F9T3nwVrZz9P08FHxjPVk4ysRNHzZWQs0Zg7bzDvZ6VI7SrWAnT1H7NvVaHVgnj91rFSr1fbp1j0FEmfKPsJgM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ef1db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/1182f0e14eb94a3d391e.js | 188.114.96.1 | 200 OK | 37 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/1182f0e14eb94a3d391e.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (36601) Hash52b599c4aedf6b6ffe9c2ed3d2b352bd 936cdde615c933061158424d3b8ee939c0f862c3 17968598d9e70c9e4261422b17902c0d3cee59654d9fb070842f392d2f760ecc
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/1182f0e14eb94a3d391e.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"8f2a-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BFOpXxIK9Gm0LlZFqLutSzoM6qI86TWI1zlLAaV7Xo8mNouvqgdp7O54QWPoEFHpoNgiOF8%2BUn%2FnC2s9OFKcqT5jv7dyRHNyVYKyEyHMGKq0cewfWDc3Ble38aVhiDAspm%2Fbsk7M4ONE7CapDZLkpAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cb8aeb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/47470.c4ab7647d25b8ac58ca8.js | 188.114.96.1 | 200 OK | 312 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/47470.c4ab7647d25b8ac58ca8.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size312 kB (311789 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/47470.c4ab7647d25b8ac58ca8.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"4c1ed-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=keO4TyAA65X4%2FZw7B9Oog2WMmAAspb7WOLoFvg83BdW7Pn0qbPVeOpRY8Kx4bgY0lowVqE6qlEyEXX1RbldQqzQHIhd%2FMDf0B1d%2Fk%2FFBZOY5IjRS6qkQmsBLWZi%2Beri0cjL%2BHAJkgLfAFMBmhbvTw5g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1197e51b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/48590.9d5fbcc5aac137b478e1.js | 188.114.96.1 | 200 OK | 38 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/48590.9d5fbcc5aac137b478e1.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (38172) Hash43c0247c5fd0d2aca49282b1f2e8b884 9c3d283f016f69a880edb60ebc384c9f39002a56 998a4388e4821fd233dad8d1faf2700c0c47741c4843925dd9252b1bd3dc0c50
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/48590.9d5fbcc5aac137b478e1.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"9553-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bkn8pUa9%2BNmNN6xlBjIJ3MiBPCmgVclWkRQ5TL3yeXdu8T8%2Bj1VcOnQDMin59YmE7cZaMN2gkU8mTidD60GPhZP%2F2MTRmZI%2Ftgbr%2BeeUtWyWYtHxeXp%2FDLV6zpVwSr8NpFQ2sf6sQoZ6FzP7fniVIJo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aeb0b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/38081.229b2d35737bf3f84541.js | 188.114.96.1 | 200 OK | 22 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/38081.229b2d35737bf3f84541.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (21630) Hashc20b5e9bd89cd932aec62501526bc4af eb2f709ad66bef7b20d4ecce454b827cb5758391 b4c9960af0c70acf545990b29eab7e4465caa262df425c820907bf259da27441
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/38081.229b2d35737bf3f84541.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"54b5-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CbhZZThiarrIxY2ZohOJsFlzYwDxnVLERnd50c7yC4YhGbuDsH3FYO84rL57xtOUkzWTVnL9Zp%2Ftac3AijWtc7huljUdpdwoW0Mewf%2FCiBuLBPZ%2BCbBMuTw5fGaEwtidIXy8nfnY0iPw%2BZDLrOIn2Zk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119df09b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/18814.2887004806e3f2dcb541.js | 188.114.96.1 | 200 OK | 17 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/18814.2887004806e3f2dcb541.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (16511) Hasheb44fdac0aefca117662f9db435ffc09 bf2224f54fd833cad9374ec73e35425ca7850d0d 8e7a022b3c6e28ed485a3e73ea49864a44b188c56ff7f3be7ab7cd268662a33a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/18814.2887004806e3f2dcb541.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"40b6-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PwlOAAlHW8aOwcaO9k4ekF31bgSTCxFXeF8Ht02iRsZUh0SpZFKMcFl6%2FaOUE2bC0%2FIPARqp2SffaHZcgs1My5uj3WWLpdJa%2FAkqooTQwfzzfETeS7GMJG93ptDU%2BHOjeF6vzFh%2BeIVSbnGywyq08Vk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119defeb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/18667.a2153b412864bc0484ff.js | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/18667.a2153b412864bc0484ff.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (11075) Hash40ac4831e99b9248bfcac7f7dc820c49 ff2b273c92b32ed9a0849743bec41a5af5b9d3c1 b47a9d595f8492f38ccddba2d47641117fc6a8426d73db79218259717462518f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/18667.a2153b412864bc0484ff.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2b7a-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=waPUUgv%2FVacUy%2FDxvZB78rdEdkY%2BfsmKsnmo%2FQGmNhWZikvTR7Ql6tDC9y0F0CMARCKEiCjhn467IAwmZPdGSWKc%2F5Rjum%2BVUGsXs4AO0PuOutj6mHJR%2BtD1EPh%2BLys6VXG0fTBP5AFe3RpXkM8hVNQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cd8e2b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/1af9bdf041e000508e41.svg | 188.114.96.1 | 200 OK | 137 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/1af9bdf041e000508e41.svg IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeSVG Scalable Vector Graphics image Hashde7079c084523cbb534e908927ab5519 cd4e81dfbcc142ff38ac775c9302f26d3bd28fa0 b5d51114897461dedb697b36086385bdc8b62f56da6914fcec198644a96aa65a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/1af9bdf041e000508e41.svg HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"89-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d19XtNG%2F%2FKTAUYfNivBx%2BnvpDmgjDTGlqsvWwzr2GyGt2GDK1cWZY6z4zjS3wMjNwEfZqTwq4RRrr3s5G8nm2bpAEZX%2FnhxoR%2BRT56jDec19ZHEOck4UQCXv1KZDwpdqgaBHTptAS3AihGpt1xLWP64%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d49ffb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/adf75861421c2a6a6269.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/adf75861421c2a6a6269.png IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hash092b071c3b3141a58787415450c27857 d7002b9404799e18bab34e931a6f2e23ab1ba3a4 f1ca5949ef43d0a6130a1176794b4b38b393f2638c6cc5c2b8449adb6ed3f144
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/adf75861421c2a6a6269.png HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:15 GMT
content-type: image/png
content-length: 1532
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"5fc-18d27c367b0"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x4c%2FHZaZF83Ken26lGbyUSn4FsXuaI7NyBMnTv1%2BRdBE1bKiqDBPENEFlYXDoo4KHlE6%2BAMN7EH4MWsuIsogSScyJKHeCcXL2h8z8EOoT%2Be0TSdbPnACmsGC67SIxVvsi2JghT4gP1Sc39G30fviENA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1328a7eb527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/17605.396d4d0fd6f31f0ccbc9.js | 188.114.96.1 | 200 OK | 149 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/17605.396d4d0fd6f31f0ccbc9.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size149 kB (149407 bytes) Hashd76190debc34ded2033eb596d275c6e6 1d65e4a7e5bc735bff02c5fbb1dbc89d31cabb6b 8069a865a2a03e1afbe4b88edf980d24295d5643a48e180f71f84373ca3d76d5
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/17605.396d4d0fd6f31f0ccbc9.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"2479f-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=62cpEZWLYQxy8n%2Fw5nzDJ74iDpj4sNs1zO0coj3TXvU8y4kf11LLnYLhrPGSJ%2B%2FS%2FoLH%2Fet%2BnvY%2FB8XADhSovTOXWfxlokBdezOKSV89oilzFK%2FbVGvFpZFkqi1SL2%2FS5KPYdPeRtN0s%2FSP6u7Bennw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119cef3b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/31421.ced40b898074b2c19b15.js | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/31421.ced40b898074b2c19b15.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (12060) Hashce1c4ffbc40c7e9bf65f4228013a5819 5032e464391b595927baf62c1e4bf0034ef66d26 131db5cf2b0741365470de35e02d94da3de2b223b8c18e3ca3dd7c26af23d6e6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/31421.ced40b898074b2c19b15.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2f53-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xQgF9yVEFPu6h0ZC8Hhw5Ui%2FUN4CP0I2O2MT%2BBC%2F0ltZt7JK%2BEXE26OkyNOJ80lG0jHVdI3B2tApN07Pr0iSHpSLSj8wgAcANdeQG2KVqJWtCXCAcQtIk7a22W7KKiGcmgkZPhpPfJqfaenkP8iKZhg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a1f81b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/22843.1bda3edd4dd152273661.js | 188.114.96.1 | 200 OK | 21 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/22843.1bda3edd4dd152273661.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (20995) Hash3d7d3c6641376eab526dc37c2a3aea87 9a4405500ec4685d070b940e3e58dbe95ebedf94 8bd28e45bdf228abeeaec72fec246300bf1a2d85ed2bec3710889cb3ad8b72dd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/22843.1bda3edd4dd152273661.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"523a-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cxyx5C5JaSJftGBp5B8ptIvwcTThjFf3l09Vy597Bsa3EVHItnBgVyg9OSIO5La%2B5vfpAMg5HsmU3eMiGoFGwadBeXu6s6YGgfejkk0XOWC4dL1KuZYHqgwO0zrnYEvIt1c8aemcS7r590rkhcN4Qbw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a7875b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/7273.654bf842a369e2d3de94.js | 188.114.96.1 | 200 OK | 484 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/7273.654bf842a369e2d3de94.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size484 kB (483947 bytes) Hash8da1faca35a6cf1029dfc42e48b9c810 45f463dd73d51dabbb399d6ae6a4c1f16019e50a 14acf9e94dd9a0cb4dc91e43f797654258398f2c91ce40aff16960d049111125
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/7273.654bf842a369e2d3de94.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"7626b-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2F74qzFBYYZZ0MUMQ1bTCB4Y12GW1It54MYVmZnuhubvPAKbfLt6IYhHc0Mik7u1l%2BvQ2SYQjyTJzV7MCK%2BWlVeiZ5z392PqOCTX268GAummAaX01kaOp1lPneZzeNjMWlf76SzC6%2B9dcMhEjcwTA38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11ae949b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/shared.20ac0e19e560421c41a2.css | 188.114.96.1 | 200 OK | 475 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/shared.20ac0e19e560421c41a2.css IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size475 kB (474928 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/shared.20ac0e19e560421c41a2.css HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: text/css; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"73f30-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2m6v3PW7J%2FzP8qVFjEafe4PP4mh18MWsguaZc5lOUk%2BXLchPp4%2F6ZcOXx4Vn1i7%2BXtd%2BdcjRNn2SUMVRB7TDvZsRqK7VQ37Dm2tSIYrKWkMUN%2F4%2FfCxRUreX34j%2FMoJKQx8bmj1WdXz%2BWUnBM%2BVk9s8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1193de1b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/64999.3c0486790babc24c66a4.js | 188.114.96.1 | 200 OK | 201 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/64999.3c0486790babc24c66a4.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size201 kB (201090 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/64999.3c0486790babc24c66a4.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"31182-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d1fpY%2BeS21yfx7VWO3TIdvM0MhrKTHiWa7byx0szUu8sm5mtcX7AG70o8LWxia29UiO4HvAsLXETEP2qn599JNnpIldlOjJYdnJ%2B5sWExietwkXx3EpCSlfXRB0%2FSU14B%2FYkNpgJ5K5H9g1K6ccueZ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1197e4cb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/321a07cbc6f5919dbce9.svg | 188.114.96.1 | 200 OK | 139 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/321a07cbc6f5919dbce9.svg IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeSVG Scalable Vector Graphics image Hashd8307f61f76f425f8834fd27a04c1b3e 5fd275de4826b418e24dfb34abca1dd2d6397b78 e05e223815347635e74c037681ab5036542fbd6c1a0f08a9c923153ccf837441
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/321a07cbc6f5919dbce9.svg HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"8b-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l7%2Bpr7yRCqzNb353eYtN6d%2B3WkbHinFWbeq600I3hAriDgN31Gzj8N945HAhRDngnKLm5iHgYPfJy3ec0xPRE5kSQqw5y0v69mGCTCugYSVpvjYAK22%2F2NM2CLRwK2fysckLaecR987M%2FDDv3CyWlsc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d39f0b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/46541.c33eae8d471e53d0e4b0.js | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/46541.c33eae8d471e53d0e4b0.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (11221) Hash5ae0a08a3f12c1e8188baa3c52edfdd0 f557a1633dafe82e67dc1c79430a29e8c2770c1a 8c9541c705b78af92818361f371dffe2932fe667fe5bddfff23a10a94b0e9491
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/46541.c33eae8d471e53d0e4b0.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"2c0c-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mBbBlUtZWMDmjLP3hHHh5YQP2d0vkwW%2B%2FOkeXPoPY0oSgQfoHNm2WbvHz4qk1v%2FjszqvTF67N8UZUqe%2BMkfusIdGE49I%2Fq5%2FQ0Or5ZHuei%2FC6Wom%2FRBv48LcR8MAvevKk%2Fwnx69U%2F3ae%2FG6T2ESEEU4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119df04b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/89261.02ed5e657cba70087452.js | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/89261.02ed5e657cba70087452.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (14959) Hash792d2294c9fb0e7d0a07bff3abbb0d0b e3ec35950876ae2e409e65759d0802c00a91e40e 2d3415e0b866788b07564eeec5035c17ac14645fd13b0bcb9bdf71b5f66a1e69
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/89261.02ed5e657cba70087452.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"3aa6-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g7n8wJwgSJtQchtB11%2B1qNu2gW7Yo1r9xA4D06rj%2BmrD3EaP6K2H%2B2UmvGgOvXkXK%2BPpcgE7LuATq7NK1nuv6z%2FezJ3FOpFOgnmtQv8JfHpaSfBuphQaibIkjRRG6vRaIBYfPjaQfN838lyw1UswOJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ef12b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/55639.406bee7d3e2064cd65d4.js | 188.114.96.1 | 200 OK | 28 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/55639.406bee7d3e2064cd65d4.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (27753) Hash75d1d4ed4e9080766fea15d7548a9472 b64d354f4c71d5176d3cb52dc7e55e752b48059a 66e11c8abc27f8285a8a7a8179af491f8b5d8e797b92afe6bd4a2cd710b2e122
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/55639.406bee7d3e2064cd65d4.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"6ca0-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AUp38SA2nGHyuyH9V9qfY%2BXVczBcyhAhM24eBwgHu%2FCAIFR23xYzLTAqo90b91n63l52GqJJQdZGh5%2FhLguWS4rtvCHR7xo0f7DSJJK%2F4iiOv5hwatwyIwrgkFvJd7hzA75z%2FkuixtsFJxa0nyj7gAg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a0f54b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/sentry.1e20f9b7b3b2507e0dc7.js | 188.114.96.1 | 200 OK | 8.0 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/sentry.1e20f9b7b3b2507e0dc7.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8219), with no line terminators Hashf6c12b3561afb0c5be1c10e2085c10bc 82e6c80f75bd4500d11b8a8eeab09258913fbc04 1fcf9bcb46efa6f11a6f1b081012b0dfa29746b084197a8b57f6cd0288e6646b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/sentry.1e20f9b7b3b2507e0dc7.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"1f4d-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tKMRmvAqZdl%2BbjH816TqEJJAooNQiq4RxxvObqrnxn49tV%2BRVuNcpo3MtLbaX1PJRgwXVTaT%2BrtZdNEy8HT5KDpYFeNrfHJu7LB5l0j0fmRO4PaOUdMsS9GI9xmWtR2CXZTtbIgikWEDxdjXFuQXwFI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a5ff5b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/94288.dbd73ecb6b1482a870b7.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/94288.dbd73ecb6b1482a870b7.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (9979) Hash38d4ac71291ec9223ae33b9ebb5a4e89 7282b3fb164396d9510224b3040a89902c825546 9a8d5847b100e711a41231d5c45682b01b8173438f96c52667fd872976c18cc9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/94288.dbd73ecb6b1482a870b7.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2732-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r85dqwHooULMGE3cQAdcE21xhz8XDpMdgApZeuYIR3yAR4hOU90ndbauMoT8WpJtr0IWCQvKwJtHPeGcMWjJWNEzaP1F4JMSOZO4FjpSteBoSTSB6BWmT2pgNftr0NMI1rbvhlQr8RbwCXnFCSyIhG4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11ae945b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css | 188.114.96.1 | 200 OK | 2.0 MB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size2.0 MB (1982257 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/app.efcb8c8bc767b60fbdd8.css HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: text/css; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"1e3f31-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sNprKP2G%2BevOg9NFNWXbg1BKMlOlFq4WjiFJHP7YGu0r2Qe97Dvf7vMfwGbDD0%2BcDEG0fiU0IwC3tZNv14qg2oy0g2WyN81CMFLXXJLm0oOiTnn%2FwoLsN1WYGZUmvN4NA%2FEcUho9r4x4Bp1RQU5TvDk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1194dfcb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/3341.1a1f8595a0c8fc9f99cf.js | 188.114.96.1 | 200 OK | 8.5 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/3341.1a1f8595a0c8fc9f99cf.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8843), with no line terminators Hashe26a8efc5dde624130372229258ab5c8 6fb44998a93cba1ead19a776409849a6c50bebe7 6302c624d089c3bcde5638a15d621c0f664857468478526bcac9b419ddc6d81f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/3341.1a1f8595a0c8fc9f99cf.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"211e-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XP75Xgt2Zf9cW6vaxHnjDdZce5XWOzP6u8OdDX70NjSbi03wGEN6AEK2ksMO7mAyeviTDsR62PzIpsDM78bOkkx0pqPXZ7JEjbbGG7MGKe81Dl%2FVTbQwD4qTUC1pMQDz60%2FgG0XEb%2Fdu9G3crle71HU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1197e49b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/58409.1811376ebb7f14b0be53.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/58409.1811376ebb7f14b0be53.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (13964) Hashb04469c4ff1a1e4369a1238f1a6e7e13 baa699271e0bad0d5d568f5d0cb2dac21f5a2d0b 2dc6a1da0d49480f89ccab794ec25a14cab0ca4034039ae26e39faccdda82a50
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/58409.1811376ebb7f14b0be53.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"36c3-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EGZTfej%2FrJ7F5G%2BsH8f%2BduQKRbzanaTGjdl3SVEe9nb0WFBy24auIO615qpmmux4tVsyuse9GMdBpaSEz2HU8GO4ArjfmGLCMCfCXcrGVciqfsg2RXQZRo64YNs5bHpYTMi76%2BUfw3ZG6kA%2FoCVmi2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a6848b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/3c723e3c991fcd7cce58.js | 188.114.96.1 | 200 OK | 164 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/3c723e3c991fcd7cce58.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with no line terminators Hashbb871017dfff7157e3481a5dff8e4529 36e5c0824c189aef00bbd5f35387a84b7010227d 55aacccdae49dac44e6d8fb3cf3041ba4873558d2d851d0abe9ecdf99dc1e0b4
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/3c723e3c991fcd7cce58.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"a4-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5ucDfulFOkP6qckYUhQy6iaNdglHIPrUEw7pbjIJvFG8GaokGiTOWO9dkV93Y2r8wB3RpQxsrSVgoOdwWGxHdS7PS3gh2wWazpfh0a03H%2F21PkiWInD3%2BPJl%2FNQyWOO%2Fj%2FklYi1GKqq9ZWqXVq%2BwWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d39e6b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/f84e3e81b8d0718cd917.woff2 | 188.114.96.1 | 200 OK | 65 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/f84e3e81b8d0718cd917.woff2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with no line terminators Hashc0caa8227e2754f8440029c42df9f7e9 cc2f0e3655002fdff933711fabb53d63c23cbfbd 89a8e6fe1c595fb5fe77edd74ee8990458ecbf2941bb44e60ce8d96b6fde660f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/f84e3e81b8d0718cd917.woff2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:15 GMT
content-type: font/woff2
content-length: 65
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"41-18d27c367b0"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ceuQ3W9YCGhgKvvoQ2A4mSJpzbYkLL2Din8xX7mAoesu1%2BIQqc3c6J0aSEn0RSMbjNZWHDFui4HViWgL6DFVas8gzBNHgZxwxp75CyiIHq3gD4mf7SfRAyoiG3RQwLbSjKEPBnMZzXCadThOaB7VxRQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1326a3ab527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/94816.637e7c0b320aab380f7b.js | 188.114.96.1 | 200 OK | 87 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/94816.637e7c0b320aab380f7b.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/94816.637e7c0b320aab380f7b.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"1553f-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=adaPB7dl6pdb95IBmLRS6g6upuNm5OVqnFiu6RGd%2BHHwY6EhYaVl%2FdMgDRqdNnlBjd5E6pq8uMVt11B%2BMBOmJ3zy9dnxd4DEJGF%2F7MXhmZza59jSsvyyXl93hAqM4JXgjpSV%2F7dbQniDmX04TzbVbek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119bed9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/77015.48150de6efe657e3c6e2.js | 188.114.96.1 | 200 OK | 34 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/77015.48150de6efe657e3c6e2.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (33607) Hash81c3fc72ba9d6399582bf44261a7d3ae 1c226b78a91b94e41031384e952806a0f7df56b3 5d14345894349f81168d5cbac6e2427d0390773574634f6936e06680a832d282
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/77015.48150de6efe657e3c6e2.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"837e-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=niHQmEXanQXBKezbzegT8bYvAZt0p5p5ZixwAImcH%2FxeXhoJWoXZjSm20tu27aPRZ%2FsgtxIn%2BiwB8XOSx3ZbYykHRti0UKxuN3HUcdARssDX70G1K9WoMsjxNB9wCPTFp2IHmw9U8%2B%2FCKq9X8wvUPtk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119def8b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/7273.654bf842a369e2d3de94.js | 188.114.96.1 | 200 OK | 484 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/7273.654bf842a369e2d3de94.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size484 kB (483947 bytes) Hash8da1faca35a6cf1029dfc42e48b9c810 45f463dd73d51dabbb399d6ae6a4c1f16019e50a 14acf9e94dd9a0cb4dc91e43f797654258398f2c91ce40aff16960d049111125
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/7273.654bf842a369e2d3de94.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"7626b-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GIRVvW28ZHMqRfmSEXvdJcK6y%2BG7fPjnHVILwOQUkmz%2BwCKpW0btZonB0jGQqBK7rKn3SFYRIRP0NYEDX3rND0hJJgSKcUB%2BlxOkkBTpsvNAysXQv5mMaao5DYFWytHWj%2FyHWXcEbPDtn%2F6gzYTSfZM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a3fadb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/e9e649f003bbece806b1.js | 188.114.96.1 | 200 OK | 16 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/e9e649f003bbece806b1.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (15715) Hash6a513e08bb57247ee2a7f7f28392d957 9ad8a8814f81f63d7e6302f913b45a047f2e8985 e6a791274ec54c4a3ac6c8b2f7a2689d04e9579f00b218e9e849abae247c0fc6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/e9e649f003bbece806b1.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"3d94-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4WY6n%2FCoY2d5B1YvPj4Qq0YnZoVpZVW6UralSA2aW%2B9YmX6lGBz2La2oZPQNKC2dU%2FD1MNgJQmURwen0tl3oYb5frS4Nyba2oMa6h%2FLN%2FrA8%2F%2Ftz9A5vZbICDeZNpapoLFx5alfB427QLdfoBxi8EPM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cc8bdb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/09563300dbb31ab193bc.js | 188.114.96.1 | 200 OK | 164 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/09563300dbb31ab193bc.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with no line terminators Hash8e42afb6be6c7e5cb3f80a429a9b38a5 9f69a17c261ecb637260673bf19224d146446522 e99ddcc2b404b34c865bf9b0476cbf22be543672d12349f58aa61d5905898014
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/09563300dbb31ab193bc.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"a4-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AIJVcukODcnDeEgvamygkqc30yOcZQ%2B7WmDn82807V%2FYZnptlFhtgSGs%2BXtu8L2Xe7pTfqswzacBDSOTbmcDuPQiV7mfdb7pbJYrnZWB0zDcX0PEBDrY2l37tIGWXkFYoTYkgIFYKTnm%2BR%2BAEOsJ%2ByM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d39ccb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/17820.e883271a8a21d461b3cc.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/17820.e883271a8a21d461b3cc.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (14165) Hash3eab1ae6e3a0d5dd18c280bb01fc9426 e09de192241afa3b47cfd3420cba919f5d5bee7c a7400219aa005e47acfbedf2ca55d9da87fc8d4386888f6c995c03358602793a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/17820.e883271a8a21d461b3cc.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"378c-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CtD3pnv3eYdgyU3BMXrRhyFxfPcqcPiYGdEsCodZOadzAvq8vnEuuRg4C9B3arc8XdKqrlXrc6xcKT%2BJegrxOwBIFetGE36aAtWjWrrncOPs93vsde86j%2FKymjG1PSTSomyv%2Ffmgp6eBuZBku5aowsw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e2bb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/27043.105ce50242094adf158e.js | 188.114.96.1 | 200 OK | 91 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/27043.105ce50242094adf158e.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/27043.105ce50242094adf158e.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"16445-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mUcilC4DD2KZFUPBqLyWPDK9v5f%2FwhBfBdU3NteD1AbPJcv6pDmmvqY2g5bvVVSrZ5bTVpmQhjF4q%2FX0u6D52kuHZLPfty5fEdkhltfqA2Fi9hC5nWr3xHlJ0%2FO%2BIrePT6Tu02rcGHvfpUOmaxOZaJI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ff32b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/31717.335393f06f604050b43d.js | 188.114.96.1 | 200 OK | 65 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/31717.335393f06f604050b43d.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (64808) Hashf21348f766d7fce1d259877b826da099 73baf8dd6916a60dab75cd1879feda4b29a090a8 bfb3e51c1397bb6498dd873eee144f50271c74c4630bb8ae0d55a1da8aeb9863
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/31717.335393f06f604050b43d.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"fd5f-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UrIq8ZKyOZuN4GGXlnFFFUeCdPsl8UHWTBi1YzajZ7OSibasbqRQplfoOEkjcGqxDfeSQ1Jg%2BuDU3YrplYhrm%2FCuXkAF0p1K%2BV%2BdhmY3hAdkyutZYfeqxQw19gPU8BKCLvH94HcMIgkSDEOb23A1GJg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1199e90b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/40413.ee00763112ee8df65f08.js | 188.114.96.1 | 200 OK | 7.9 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/40413.ee00763112ee8df65f08.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8028), with no line terminators Hash0b2eb75acf108aad28037290505f993b 20c3bca016fb59ad79e807f379078b71d12da15b b603d4be2b12cf965a38fad6eb246c3cabc86f6b4370e7733d7495495a7ae0ee
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/40413.ee00763112ee8df65f08.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"1ee3-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1v9hSFtM%2Fduhsg00rCCybyk9b9cHMVZPiY06yNhkHuwkruHN%2FC37ytD4DzbTnmoByFCBB5Zo49qeIjqAeVSdco4YragJJ3lYuLGB2P%2FnKdkNAcNbDZwLct0lSb3OsWirrZLkWFifW5u2qfC%2FeSg7JBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12c984cb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/images/favicon.ico | 188.114.96.1 | 200 OK | 25 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/images/favicon.ico IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeMS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hashec2c34cadd4b5f4594415127380a85e6 e7e129270da0153510ef04a148d08702b980b679 128e20b3b15c65dd470cb9d0dc8fe10e2ff9f72fac99ee621b01a391ef6b81c7
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/images/favicon.ico HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:16 GMT
content-type: image/x-icon
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 21:48:45 GMT
etag: W/"5ff5-18d28d8fa48"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVYoA%2BmmAVilhDPdM3ujm79HjcL2FoNcFc%2Fj9jyIyeHQfZtEn0F4YujAC5ouVc2L2Nl16gNCn3peemS%2BJSaGKAxKe2oAZZe24Y1QetedNCi4AZzLxRW8o3kDlqXypfKY6UZQ9GzEVjV5YCnTqFbwiC8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf139ad32b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/21396.259a270b7e3f8803a333.js | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/21396.259a270b7e3f8803a333.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (14756) Hashc74d5b820b3ada88a22cf587816c396f 6234d885e01df794f61cb4f40f67b2fb9f7adebd f693e1a4e6fac3c7d5a97cf8ebc5e28ec4c1aebeab83580734ca143563efdb14
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/21396.259a270b7e3f8803a333.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"39db-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4xGhTeN9ZXzuS%2FGKRu9RcXuKa6trR3%2BhPy4m05%2FoS2aIoGGx%2BGhJtEo%2FMTqQly3M8cjSGQkTXHQOQuv%2BlLL1JoohR7AaLBfZIxDkgK48Sck6zJIWQRy9QyFo7BW5R8%2F8uB9h%2FD2GGyVDxiy9679RM%2FI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1195e00b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/30982.a6d605c291ff090be83b.js | 188.114.96.1 | 200 OK | 12 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/30982.a6d605c291ff090be83b.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (11446) Hashd06e1097bc0b493b61ec8ccb6a3c1338 d69f77887e7611c330cff1fa7aaea9dafbc57ed5 1587658b44a41e7384ad7bd8d2e747e98ff01403347075b0205c68463b87dac8
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/30982.a6d605c291ff090be83b.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"2ced-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AtgX%2BQYlkJsGMbYbSIH9JuxjMt8OTwzh16iSmYEbBeY%2F8ClLYDzYHp9K87np51sNUWrfkCVdjpky4IYhxvEzLzfii8gX9QaWDIitPhhNcwYGo255EJ8g%2Buz1G2L5VstkSeaBepy7FQa13F5I5oi1CTo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1199e94b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/86480.ebf8826a7f33e22a6aba.js | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/86480.ebf8826a7f33e22a6aba.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (14887) Hashefa64bf325b069f9cddd3a1e224e7679 c18d2104d2ab6cf8599c57fc52d01faf8c48aec9 94139cd642069de9ba7621638c1dd08ff2703c859f69df7e24ee109f4f3cd250
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/86480.ebf8826a7f33e22a6aba.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"3a5e-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xe7IpyCTiyHo2pTRMu6DVwOJpiMZlTm4fkOT4G4WwA5wAp3MqPx35I%2FpLUUi7i%2FR8fG65TBYlIyvJyn0O%2BYKYy0juRk4C8SnRLStmaMufM10AH%2F12R5L9FpbLjFb%2FdUPvaHoC6tAwyoaM%2FEQKpkDRzI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aeb7b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/6eba4b5678bf2ff1c053.js | 188.114.96.1 | 200 OK | 45 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/6eba4b5678bf2ff1c053.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (45008) Hash837a213770a91c0bac5bc9e9c90010f2 0607bcf00f83d5529a1948a9214e8926dcf7348f c615595bc0fca0392ff1f30597dc0ab1cc6bf06493ce2f283bc30736a3083c30
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/6eba4b5678bf2ff1c053.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"b001-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WD8TABDQ9Bgz3aUOSNxdc3O37Ge9JFIEdXxeutxtnnUWHMF7k4JZXeXVfYnmo0Zd7jlh3K5%2BD6HUEw%2F5YcWyH54fhDbJtJ2Kmu6DqwFHKrNBE3hLYdblfAcV1uE9dobfCeYJxkgDH12qWLDUP7PKMB0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cc8b6b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/52033.8c199987fcf5a97f2ee5.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/52033.8c199987fcf5a97f2ee5.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (10438) Hash8eaae7e1a96c8c653d0d85b3733e705f 5b7a6b708f070bbdf46cf15e3c613e3e60896260 83e5ef5e06c1625afe2ad608af5ab6b3dcf13652395d218b8f2a2442bb5791c5
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/52033.8c199987fcf5a97f2ee5.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"28fd-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYmuoWpnqeAcsYeFKc2uNdEMxFlhsKw1nujE72POw4HhP6mgBQDdm4hczvy7n%2FZL%2B7CSh91eCoCkQ9r4ddcZkIYrVg9rOovBHbzdVQaut6qU3oioEfHgtXwS6iBpW2IIMtqu0tuePoqmAOajkGGqPyQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cd8e8b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/25f1e66664a140ac84c9.woff2 | 188.114.96.1 | 200 OK | 182 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/25f1e66664a140ac84c9.woff2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 181532, version 2.459 Size182 kB (181532 bytes) Hash980082c4328266be3342a03dcb37c432 4179f54fd61655067a20a2b37224fde3d8e5024e 1b03dae61d613604b3d41d61cc4bc2e05f19bd27c7ff2638242f9036f2b8794e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/25f1e66664a140ac84c9.woff2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/assets/app.efcb8c8bc767b60fbdd8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: font/woff2
content-length: 181532
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 21:49:09 GMT
etag: W/"2c51c-18d28d95808"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DeG2qeTXKW6L54lRBN2DONIbeAR%2FfkHULt6uhl%2BgajVpbDj1yGZvjy%2B4vq%2BSvmB1TNZdDQozxjcSE0bcutSPHEGuVQvdlkaMjYel9bapAuFEaBAVmRnTkys4A%2Bi32rXfckMPLGCzJs0VkmLF8rdFRHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d8a85b527-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/66888.79756ea63981ab2a6341.js | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/66888.79756ea63981ab2a6341.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (14863) Hash1d86b77c518ea58ffd94ca73f4ecf8ec 46fdebd87f50f9aeb25b1908c92995e8d39212e1 a2740f55ae9c5911162e7891dab7a0a23ceed7ff351fb7956bf02f2a46e68f24
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/66888.79756ea63981ab2a6341.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"3a46-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JcshBBu8Yhc10akTzr1D9t47sYbhbtjQ1sVBrCs91eiwVF4qAMaQ4ztQ3WRr9WKV4osjOtxAEf%2FDtTJi%2FEe7jAenpO6s2%2BcNcWbtnN1PI%2FzZeI7epwqt7XSK2zPHVOMWUvjsHeql2ZQNVIujREEzJdQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119df06b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/4650ae2583f4cebb91ab.js | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/4650ae2583f4cebb91ab.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (10990) Hashaefacf14a0528576a759837b74b8054b c3769250863d85360b36096f544b1e9c9904c9bc c0ea7413413b3ee925b173f94f67a7753ff6a77c00759b004e417b865ad9b727
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/4650ae2583f4cebb91ab.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2b1f-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kuyjR1QFXwnWazuq9I68C1DhSx5pD6XOBlch21dbYwdDGbA3RSQMUACserkP7kVpAXYo7u3y5k9hc8TFsuihvb8sE%2FDpksfbaxu5dKuZtXYZJhpwabxMSiYTPvnXCgZ3L4ktqxOI7kNSfMwH%2B0uaj0s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cb89eb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/799ce01abdb0da7bdef1.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/799ce01abdb0da7bdef1.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (10064) Hashf9eab234b26ace83cf074c0e8ee41795 7400543cf80242671ca9f63aff06b4fe7e33c3e2 99c1fb6a35c0b13536fb0ab5c1afb16fa359fa23e56d7c50fa86207f10e082cf
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/799ce01abdb0da7bdef1.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2781-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ud6BAxJaXGQgIxytC7WVvwjSstUyHMFZ9cyeIEnxm%2BfGP%2FA5DbDjryIAVjL7zcGI%2BKtDbfdejam3zmMSy8XGZPfJh9UCLV43UYAb0omVp2UHsV83cqsvaOLJJmQSQ%2B1h1o6TRXxKQat5JK1L%2BcQuvFo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cb8aab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ | 188.114.96.1 | 200 OK | 12 kB |
URL User Request GET HTTP/2login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeHTML document, ASCII text, with very long lines (8134) Hash95a4ce54cf97a8509be9a66701984e4f 384a32399873a045e0f8ecedbf80edc815d9c089 4ff05b910d8ae875dbff0d7261102e7e2064384d571265531a4691853d6c88c4
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:20:10 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=0
last-modified: Sat, 06 Apr 2024 12:04:42 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3VCj6NKUq9oqFAcsZR7B51urYpi8m3sG%2Fmk7QeYmVjp0OZRhiXk86SHFcuc8DQGjIWfy8QN%2FvUALSvL80mGSwgn%2BWSMc%2FaYiqQe1aDoyp5fdRDXwXfy6zvEtlEf9ZgF0omZ8xCcVs%2BtwlRdT8oEr0fU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881bf114fe185694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| login.restorecord-redirect.xyz/assets/19263.fe32553ff71153cb7656.js | 188.114.96.1 | 200 OK | 6.7 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/19263.fe32553ff71153cb7656.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with very long lines (6802), with no line terminators Hash22004ec800dc7d91289b0f2b29cfb22e 54698e8664becd4ffa7f35cd3eb3be9d9c357ce1 3031275133c2f739865c83543d1130f56f98a103fcb5548177c7cd026f5de85e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/19263.fe32553ff71153cb7656.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"1a57-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4nLnXDgcYDotblMC0NMenWay4JlDoqCZuzAIvdg7vsPBVOJsgMkvzVAcmO%2FuReXX2ThOv71Pv4IkGK8dxhPgtdJ2mbvkRYHPMZnPMvhfPCxLl5NDA3aTcIaRfRp0%2BHH4XJIq1dms28pxSDBOuAksKFs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e27b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/94288.dbd73ecb6b1482a870b7.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/94288.dbd73ecb6b1482a870b7.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (9979) Hash38d4ac71291ec9223ae33b9ebb5a4e89 7282b3fb164396d9510224b3040a89902c825546 9a8d5847b100e711a41231d5c45682b01b8173438f96c52667fd872976c18cc9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/94288.dbd73ecb6b1482a870b7.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2732-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CSSME%2BTOYkzWvEvtRg%2FmhRpF6fsa%2F24%2FML9pVGLRsduphhjSTm80L8wjLMwEJPDKSiHFroiz0dTAPKtPfptrSxBq2ewtAWbRwY4mzHyY8cbtcd88aIsI50ZBKByIbIK4qPTwGSEpFnTntvilOJP0tj0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1198e5cb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/1b3559406bc8/main.js | 188.114.96.1 | 200 OK | 7.9 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/1b3559406bc8/main.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (7912), with no line terminators Hash6b0f2afaba56edea524128398487d427 c930ff5576e5326d6eda6b6b6ecf204526dc1db6 1332b489c9443606a5b4b4e8fa5d4efc2c8a8b7bd27119cd78caf17f535e5346
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/1b3559406bc8/main.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bHwiRNZdNyD8oxiYiSJVhChmanEdggNfUzP3QS6xrFONh%2Bz3Gj6fjDP%2FykTx3dZ38l08oiCVXFdZqOJYCcOrBHyxmCJ7mTvdtUb%2Bo5IzFbxLk1UAF9qVoz83YTkWPVwlxuomAosZkTmt7OpU1agfBaY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d8a8ab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/25653.f1981721227784f0166e.js | 188.114.96.1 | 200 OK | 164 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/25653.f1981721227784f0166e.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size164 kB (164235 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/25653.f1981721227784f0166e.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2818b-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y7YPM%2BJqBx%2B29D195fBQTr3PGForAL0w%2Bskr3V7RdHylqpTymUDn02rmviwCLvyDYw9w%2BRWEsxOlRIy8kDkkeBAFi1mU5VMLO80rrOCNK2fz6ECMLL5PZv08rIYjIoU8uvSAaQLvVpLa%2BgU3Ug06suI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1198e5db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/58409.1811376ebb7f14b0be53.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/58409.1811376ebb7f14b0be53.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (13964) Hashb04469c4ff1a1e4369a1238f1a6e7e13 baa699271e0bad0d5d568f5d0cb2dac21f5a2d0b 2dc6a1da0d49480f89ccab794ec25a14cab0ca4034039ae26e39faccdda82a50
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/58409.1811376ebb7f14b0be53.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"36c3-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KJitmmIDB%2BgkkkmbpmqzOSSkFwB9mTEngum4%2BUaFEd8M3hjdq4vZ3c6R%2BXmNGvHthU4zHN12yX%2BCp2K8sU6Fqn2DN%2F7AP88y3V%2FneEkVgieMboORQ5l3dYoxaHI%2FXv2p80ouv%2F2SogUXYqeJXtRl78g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e32b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/99b391e2f74aa1e0d266.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/99b391e2f74aa1e0d266.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/99b391e2f74aa1e0d266.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"3558-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3VsiJxsJYyoqg5VXem11vKDUPGQ71FwcRTombug1%2Fq0XOc%2FN3tp%2B7NvCKEzQb0F6j5tPKdix74gJWro206xcHN9QgXsDaVAsn8oJLff%2FxNepTz9zgKScUIG6ixTTXQ%2Ft%2FSjXyzHqkl2f8PAPnRW%2FqLI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12ca876b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/1f3e315f020ed5635dc1.svg | 188.114.96.1 | 200 OK | 180 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/1f3e315f020ed5635dc1.svg IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeSVG Scalable Vector Graphics image Hash7be3d705f8fd758f30fdb6d593364954 469caeb23537d7152c40fca8e5a8c9a03013eb07 907d7bc2d1af895ac583237f9005822ad480c51fd03618f5a7819c3d71b62424
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/1f3e315f020ed5635dc1.svg HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"b4-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uY4opr0ctXRMeToPK889%2BLWQf2IQ%2F%2By3r3iN83JW8EX%2FVjmu73jHve1ea1wFB8KfP5CZ1BkvlQrOsFUbdTCEDjrpyR6qru4twySLfRJhYfAmbmOEmMR9lbTpfeGtBY1kww9Mvvloyhf0WfRfxb2ptrk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d49fcb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/api/v9/auth/location-metadata | 188.114.96.1 | 200 OK | 111 B |
URL GET HTTP/3login.restorecord-redirect.xyz/api/v9/auth/location-metadata IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash85eacb562bbb530202e85ea94c46283e 69f432337fb66ba9961666f6212dbd2b082c43cb 2e42e879137f2011d68a43698b438087f8151df6aa54b605f1fe7d3bf99cd642
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /api/v9/auth/location-metadata HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Super-Properties: eyJvcyI6IkxpbnV4IiwiYnJvd3NlciI6IkZpcmVmb3giLCJkZXZpY2UiOiIiLCJzeXN0ZW1fbG9jYWxlIjoiZW4tVVMiLCJicm93c2VyX3VzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMCIsImJyb3dzZXJfdmVyc2lvbiI6Ijk2LjAiLCJvc192ZXJzaW9uIjoiIiwicmVmZXJyZXIiOiIiLCJyZWZlcnJpbmdfZG9tYWluIjoiIiwicmVmZXJyZXJfY3VycmVudCI6IiIsInJlZmVycmluZ19kb21haW5fY3VycmVudCI6IiIsInJlbGVhc2VfY2hhbm5lbCI6InN0YWJsZSIsImNsaWVudF9idWlsZF9udW1iZXIiOjI2MDEwMSwiY2xpZW50X2V2ZW50X3NvdXJjZSI6bnVsbH0=
X-Fingerprint: 1238556220600746016.daWOI9xqZPWq0XLsqlAD59PdqtE
X-Discord-Locale: en-US
X-Discord-Timezone: UTC
X-Debug-Options: bugReporterEnabled
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:16 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://discord.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Authorization, X-Audit-Log-Reason, X-Track, X-Super-Properties, X-Context-Properties, X-Failed-Requests, X-Fingerprint, X-RPC-Proxy, X-Discord-Locale, X-Discord-Timezone, X-Debug-Options, x-client-trace-id, If-None-Match, X-Captcha-Key, X-Captcha-Rqtoken, X-Discord-Resource-Optimization-Level, X-Discord-MFA-Authorization, Range, X-RateLimit-Precision
access-control-allow-methods: POST, GET, PUT, PATCH, DELETE
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
content-security-policy: frame-ancestors 'none'; default-src 'none'
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G71fMQeyp%2FqOd6Ak%2BZVAEds9Rjpt65hwDthczFUPhpzV8C0M9Lp0bCYEVwr4YqEN8ManZNhN%2FNGKz1GcT09UykmpiynYZTXoNx9gZAtV8Noi9H66KwgkxmqmQPaQ"}],"group":"cf-nel","max_age":604800}
set-cookie: __dcfduid=f308aa880ef911ef8f597687852448d8; Expires=Wed, 09-May-2029 18:20:15 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax, __sdcfduid=f308aa880ef911ef8f597687852448d8921ccda4a36818f966b94884a8623071861838aad1b865a30ddf935fccc453d0; Expires=Wed, 09-May-2029 18:20:15 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax, __cfruid=429c6574c42bce7b2b7a7d178479ee398554778b-1715365215; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None, _cfuvid=n54FJ9MX5xJ7Z6n2fhImHI.wXv82xDve1_Jbyf9QgMM-1715365215965-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
via: 1.1 google
x-content-type-options: nosniff
etag: W/"6f-O8EuL13iL1+dnZ/7Ku5r5bdRWNA"
server: cloudflare
cf-ray: 881bf1327a5cb527-OSL
content-encoding: br
|
|
| login.restorecord-redirect.xyz/assets/20117.7c4ea5cd4685b0442b9f.js | 188.114.96.1 | 200 OK | 56 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/20117.7c4ea5cd4685b0442b9f.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (55750) Hash3a328a58679dc7c65aede3025f694875 2b46354311cf752e3c734ac9e5f803bada1eea8c f6cee9961dcde12c0dbd889adb3579ab836fcaa34c99828f36856b5f1de9bb90
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/20117.7c4ea5cd4685b0442b9f.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"d9fd-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RpJhR5vB%2F%2BmzEkWcdLV%2B17AlEBz%2B%2BcWHabykcOqk1hpYNmrIowzB2cWixemUKCnfIesJkyyu6Pp13Uny2e4l%2BO5CPCwQw9r%2Fox2xsZV9MTeyvqBwrHGTcfBZErDfzlNgVJw%2F3hlygSf8fA%2FqetANlbg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e30b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/47387.b94323b63bcf5c32ba76.js | 188.114.96.1 | 200 OK | 80 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/47387.b94323b63bcf5c32ba76.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb235b236312169e0db519e60c0d7eea1 6d34c175ce387b8bd435ce463d44706f08e9137d 03c0d5a0ff0b821c4ceff908a8fd7e62ea9b881711023244449f71455215d00e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/47387.b94323b63bcf5c32ba76.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"13927-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jNIhxMimRFkJ8SyzDCJa4CIwCFeVbTYTOB%2FOtcVAggYTeVV4Wga9SP7fN%2Fi9rtav1Ps60Dm9VWzvxZ2dn4SpAU0Q%2FJ5DPHBkKHiJiHGGSCzcGmolUoTYKqKJAMCHpfnDK2L35C5IsuF7vFn5%2BuGLWBk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1199e8bb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/8f581f91e7e650ac87a2.svg | 188.114.96.1 | 200 OK | 137 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/8f581f91e7e650ac87a2.svg IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeSVG Scalable Vector Graphics image Hash897482ffa8de9752445d3eab06524d8c be0afe5b3be92b25fd9baf6c4a98e30a8b4e831d 071d1d5a1ae9749fb0b9175ce5f7b74e994c97cb33f38e2a68bd717b32518dab
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/8f581f91e7e650ac87a2.svg HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"89-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Yl1XTncpWJGKpNifH3Z1t6xU3R99YlrJZUmVuwYiYmqJ5HRMiqz8VIrj6stn%2BZFxRIrGVJ1RHkNgvzJfxZrp4MtQyAFF%2BtFRWrJLgf4gOf5EML86RfhS1pzzQQuNGR9IDgpk9Pm1eOdznZJVcYnUH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d4a15b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/33547.5c46865f95647d249cb8.js | 188.114.96.1 | 200 OK | 61 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/33547.5c46865f95647d249cb8.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/33547.5c46865f95647d249cb8.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"ee2c-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EoR856T7Dfnw2o6Ikn7fAYmiNua0DMVO7qWvJpBDEnOEakpxODC0pyJs%2BHD1HEEAx2jbPh9WbjcfXfAayJag8FkpqCrLz%2F1i%2B83wIs5yz%2BNcJ4VNPjPmK%2Ft4%2Bg%2Bd3xge6bMbp683gZN2UxXl9tWvAxs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a2f92b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/65800.d803fbd4c225782b31d6.js | 188.114.96.1 | 200 OK | 40 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/65800.d803fbd4c225782b31d6.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (39520) Hash6ebe1a578a746f1da064f34508d700bf b27eeeec818818be41f90df32894c3c618d183be c5781d163c837d6d2c72081b42e6ac0b513ba744a8a2ef95b62a4be628fd0168
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/65800.d803fbd4c225782b31d6.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"9a97-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MxFc8uk44Rgu7Jttg22g%2FXFt0FTDDwDN2uM5MGzPYTd5WSxDwCtloSSoCmf%2BCNj3%2Fwb%2BHhPiOymfD8aFHxlRbpJZxmq24ZJO55utHIl13QW6D7DoJ1U4Zy2W9qLQW7KCsO31S7qsNiMiU4%2FOSjT8nAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a4fc0b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/78995.c052e63a7b5574176cf3.js | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/78995.c052e63a7b5574176cf3.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/78995.c052e63a7b5574176cf3.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"4b93-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oytIujhF6lzP4UahM1SmzYgJ61DKd%2B07G3FQAaF%2BbfbDa%2Fh01MRvQhcvgQkHNqrhL7uoM1f4BdFu9USteZvG5jROAEqz6wOdxD6teRpjWEst%2FNVJ7G6SVdiGUyLJb6OlYbBdArIl1lrdK4Zov%2BRTjcU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12c985db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/71193.ad9560e90cdc0645a7a0.js | 188.114.96.1 | 200 OK | 774 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/71193.ad9560e90cdc0645a7a0.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size774 kB (773921 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/71193.ad9560e90cdc0645a7a0.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"bcf21-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ibuh3n5V8LwseNSWDa62%2BmrriRIb4KdXxwLJQUHTIAGLEq0Y2eEUTFwncagtiSWl7KPm0aw4P%2FeKOqyE2l1qyTIUEDFqUhqpSn2b8q3znwSPH2HjLSlayTWC6cR7z%2BW212hY%2Fvfz9WlpsKHXmxKvlEc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1195e18b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/34426.9f82349d8cf165e1b07e.js | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/34426.9f82349d8cf165e1b07e.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (14800) Hash495af705377c93d5c53e1b8c3b14d883 16ac3e41a677731e5ced48142c2949a75154fc64 83edb478f8ed6fa71c304bd0571c29d682453217ab896bd84fecfc4f2e42b2ac
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/34426.9f82349d8cf165e1b07e.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"3a07-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KV%2BeuhlgwCVJsM2HhcvJSz7GKBOIy9zuJLWz2dNvgiXuRQvHraBGAFOyCuOa5fy1KHxbz71u05QSgERmzNpRObhzJIa%2FZc9nricQXU1gfhCe%2Fi%2FxJrc%2B4rLolqO2ICmPNQUZ1%2Bc8r7Lak257%2FfdzksU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1199e9eb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/99742.217a8e519977f9b5cbf0.js | 188.114.96.1 | 200 OK | 18 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/99742.217a8e519977f9b5cbf0.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (18014) Hash1960cd6ad791e73cdcfafff546853923 0ad17a1e5860279e6885d8d94ee0e29a1730d530 13c1c620578fee12330a7c3c003da2ea56f487fe471125b76add74f74d0bc36c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/99742.217a8e519977f9b5cbf0.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"4695-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BQhSabi%2BYRW21RDxqSApFayEuDKyOp2zVYqB%2BpRkTjBBmezNQDO9Thpdn%2BUG0tURGYXcoSXW7AYDBYioh%2B9m4BKJdiRJ%2BjKgzRuffbdTXIuMRsjH7JWqCvdXjE2nKwysVJ526%2BaMzaIgd1aZhj%2B%2B4FQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aec2b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/98106.5d0f74b94113ede84656.js | 188.114.96.1 | 200 OK | 111 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/98106.5d0f74b94113ede84656.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size111 kB (110574 bytes) Hash052c17e11e732de852f587cb1fe2cda5 31a92c74ce4c31c741d43570106a7086c94362fa 52bf56ddfb5538d260a9163c9fa4bd213fb2b79ee3da2a2cda4de6c37ed53ff6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/98106.5d0f74b94113ede84656.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"1afee-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AeLSEfA6ByyKmGk9GkImOf52DF38jiHM2D7InfZAz5srYFyOiBDa27etiZgGJOIT%2FOhLGaHdhGWT%2BH0DbI9Rpfb87%2BWZj0aawuojGGKIEwPpd477vZk26ddgKikcuWkdgFxItA7DROOVsbaHAYbeguM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12c781eb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/68560.e27fd85667a295676749.js | 188.114.96.1 | 200 OK | 49 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/68560.e27fd85667a295676749.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (49324) Hash264fdf0094b5d416ab5fcb70a1f52ca4 f76c8aafe7d2ea911de8ce22bfbaa66d974cd348 73487f57bc5d9a1a20ca844eea8d8e14799184ce34fdf2e31c70a502955b0380
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/68560.e27fd85667a295676749.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"c0e3-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DKEp3%2FEmZ9%2BjbYefrKbpgPvAP6AGSqT3yBaE3Xt3F9olfBLjhqqPBznXRQapzWBAntJzaseA4YVu0Nxc33Bu5z2WLBdwk7GwHghdmzZ3YuCanlM1FysDHa86YADb%2BcWXeWQ8WpCAG1x7o09WFRqEcSQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12cd8f0b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/d8d8bb7602e34b57bbef.js | 188.114.96.1 | 200 OK | 164 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/d8d8bb7602e34b57bbef.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeASCII text, with no line terminators Hashf82bf1c23c9485e0017406246ad5bd7e 6edc2406e77fe53d60d5c955b76b6f34a5b3cd59 f110fea7669d1c9ada9bc6f23ebf0fa2ef1d58f2fc98b30d6d25de027a0b8afd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/d8d8bb7602e34b57bbef.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"a4-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ewAgqknfeWrLUnNib%2FsjvZLstODSiH4u%2FQaXbr9kCzFAFyqrqhEjBFUDInuFN2go3E7XAsHBvYqvEJgx7bEpMUnKRvc21w%2BFBHTZphE6lBSaixAOoLu6KMxmJT4BpieoJpZiZ0OFOJQIRwsciWIo2U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d39deb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/5486.e277dbe0f48aff03f253.js | 188.114.96.1 | 200 OK | 18 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/5486.e277dbe0f48aff03f253.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (18439) Hashda488d066f499947444eb7a2c835e1fc 378be16a36214b56e040795885974a4e7d5635f9 1dfc9020a696de7183246e819d88bfd70298526c4bbe9042b5b39d3628cbaebd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/5486.e277dbe0f48aff03f253.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"483d-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PXuc%2FwFfjF7%2B48fdrJ26XqnF0z%2BvA1WLYLCba5gFKHEMQW%2BJKF8zvasVWXa9LlzqJtqYwIv1Nt540gGnqguRZMYPOkgqd%2FbdR%2BpnAqM9ZbA1wHiVz42ANHUpE9hl0%2BGt54QINHKkm1ntSGgfuurOMMM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1199e7eb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/80083.7fd81fb4889aa662cd19.js | 188.114.96.1 | 200 OK | 26 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/80083.7fd81fb4889aa662cd19.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (26162) Hash0abbebabbe917f168094124bb3cce39a 9de38e8e88c1c3450db921ccfcaa3afb35563194 21dd7691eb613640f3b6e7ca733fbb99374430c34523f31fbeeb877ca8c5c494
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/80083.7fd81fb4889aa662cd19.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"6669-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mVduZmWsbtwKS2f%2Bmo0OZb6RpRQytHvAVHXdMHC8wHjM7ByYu08C88XlGDceBQ%2BTVJyZRlKQW6sZ2MvfS6N4uF9w6S6NZTPg8ff5ccQkrt5a4PMvdcGvE%2B8rx58WkwONm%2FYIhHz5PXgnM2azHnwDsPw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119deffb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/3341.1a1f8595a0c8fc9f99cf.js | 188.114.96.1 | 200 OK | 8.5 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/3341.1a1f8595a0c8fc9f99cf.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8843), with no line terminators Hashe26a8efc5dde624130372229258ab5c8 6fb44998a93cba1ead19a776409849a6c50bebe7 6302c624d089c3bcde5638a15d621c0f664857468478526bcac9b419ddc6d81f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/3341.1a1f8595a0c8fc9f99cf.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"211e-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wZ6rnL7Pw%2FzxXbhJ3TV0WTi6d%2FtWuk3Zr0uP9dakwecX6KMISHlG131u691lUDQ4cYwPnV%2Bzo%2Br%2BXQXI0O%2BLILp33r6IHYoKELHMi5I1zQhGOIJIYKOKQP%2F%2BFSG6sBhgRcZQsHoXT5xhotTvoysFPCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a7855b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/62768.3bd3b009dc2945b07d60.js | 188.114.96.1 | 200 OK | 40 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/62768.3bd3b009dc2945b07d60.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (39620) Hashb6b6813d1e66352c0decf44454134375 95a172f9805fdeee7bf82568b66c493972b35ad3 b07bc7d7d0a9086f1b02065c938b99544f7d651295ca2c860b22ff02c482a239
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/62768.3bd3b009dc2945b07d60.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"9afb-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9jE%2FpMFFQodbPYoeQykeHi1Ufv8QUe5cGx2bD%2FN0MKsqmz7J3ogUULyB4hojEWQi2%2Bs%2FkUzlxXSqLsr62KlArEtVSxmdwIL7BSbl%2BvQdqQ47gkZNOKEw2%2FvNF66xfqkqcn8I7YfxP%2BkYyaCaO8P6X4A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119defbb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/6575.507fad3ad28f9e5198cf.js | 188.114.96.1 | 200 OK | 1.8 MB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/6575.507fad3ad28f9e5198cf.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Size1.8 MB (1792121 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/6575.507fad3ad28f9e5198cf.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:12 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"1b5879-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DFQPjpFBFmKXkTy4ZONvSN62pe24ArVyVsWDD1w5%2FZDbMoyPwLLgZ%2BjQP0B9HgNp4WcMVdKfudHGrv%2Fn%2FuBxzFXbvLEIF4bRcNy7zH1DFjv8Tzi6FmOPho1k1Z7oqZvMIeQpJa5YzRXiv%2FmucgK3p%2FE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a4fd2b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/?v=2 | 188.114.96.1 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1login.restorecord-redirect.xyz/?v=2 IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?v=2 HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://login.restorecord-redirect.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: c+uBCAA7+FDCZvJ5Gy5u2g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 10 May 2024 18:20:15 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Wo7DyhSGr0H0UZdpPvDouj/5zgI=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=okS0JByYz9V%2BZ7S1ts15GToxwdjbVKLvHkXZfkcFrptxFGd5ti9fpEHl35tCAHhvDJjhnQTwt%2F956IHQ%2FS9We9pTEpIswahirDTfjuX4W3OS93bLH1cNJhBlblEBuo8%2BMyNkd5nXgauh29D3V6Le0XA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 881bf132c97bb50b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/31897.ec700144df6b20f401cb.js | 188.114.96.1 | 200 OK | 6.5 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/31897.ec700144df6b20f401cb.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (6675), with no line terminators Hashc541881b1eb8c6fc9ef167b40d30b518 b18e4deb44d3a876d671cd0c32c1cf60512dd342 b45ec7b4dce9bbc331cb5b4af670a517c046f91c6cc8d32f04c143456f3bba9f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/31897.ec700144df6b20f401cb.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"1970-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IvIp9tSyuE9lzGjHS6LALfx9WXjIs5RnQRZVh94OzBwtPKvthRsCXUCabMU68QgymDgmoTjR7tyZldX8cWMviPvYgR59ANZ42Ou%2F0GzFeedMc5lA92WxMxpWHzdoh%2BJvyAWFYsd4URsTO%2BmOevjMyIY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1196e39b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/21251.87af35fe00e980d9651d.js | 188.114.96.1 | 200 OK | 22 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/21251.87af35fe00e980d9651d.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (22100) Hash87ae3712843239cfd30ac976bd99940d f94f35e5ba76aa102c14972c75cd67728f6efeae e4f129ecb25b26e3644847541c531e34f3e0848bfdbb9f0f00fe97347bbd9db9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/21251.87af35fe00e980d9651d.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"568b-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2FQWpkwbmuSlFMMwdR%2FBr%2F0zsmTSLkgGzNVSWERR4I8pJ4JUp%2FYQzAaDLiallwaAGbsncVb1oVvXr8DTfa%2FpJrLVr5OLJvxOmkb%2BRJoxEB1YP5liNPssE5dcAAfpXeGW4kfixL8BLaX%2B7D8hiwcxJD8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aeacb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/37580.f4011cf1c76f3c28f15f.js | 188.114.96.1 | 200 OK | 24 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/37580.f4011cf1c76f3c28f15f.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (24059) Hash57c8c6f403f66b72ca058bfa2a84d58e e19ca14f4bb25d322910c510f04ef2429487a2ae 934565da3cbcca91b42b6e506c8586d87297ee0d781d1eb7a73d006641a5a5ea
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/37580.f4011cf1c76f3c28f15f.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"5e32-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XBH163eZuxwMBnXGsZASP7GHT9QSFWc5lMF6T3tCDQiFcuJe6pJnixe1Nl6aJQqJCG8nBRxGRU%2FomJVqndZnJWav6D%2BzIvPVOGxPeRBRWm6tJ3uu1whPvgidH0dPHMTL2E0850Hfk%2FVygL9Tary0%2Fyg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119aebab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/46318.26a20b3d6c9d947ee7c5.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/46318.26a20b3d6c9d947ee7c5.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (14296) Hashc31c995e6b740c207b3c24a0d1145425 922fd2d139a1ff8bfb89dfec828ed4e52946f359 8faf3e169db9dfba36885821526edddb14b4e0c3feeb1f20786c3f2c51115831
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/46318.26a20b3d6c9d947ee7c5.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"380f-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sCBaVfPJ5eQnVmJjxlC4Z3Guk3VgIubCOb3ijJp4NyTx5HEK6JTBm7zChWtOU6PUGWeJeIcS%2Fhenkw738YMhArpg7rUECjX7iQskcxkrLZ2gU7G3jtv%2BI%2BXaGJ81inctCs41dx2EIyaBQbdB0fDZhsQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf1198e6bb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/47498.38da6b2cf2f487359536.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/47498.38da6b2cf2f487359536.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (10010) Hasha4ff99b0bbadc5f521c2a07f0f1e3f93 30b17f14702fe71f825a3966b652f65705ec3c93 6e2b1b73e8b8dbf90920572224e0edfbf56fa6e20d0cede00321cb2ac91c1254
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/47498.38da6b2cf2f487359536.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2751-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JS0o5NL1WpKmtwa%2FfRZwbDvdh0vmzM2t96%2BI59Gssl690%2BObArTtQTEZ3WVJcI3uVdAjZ8hTsJjgfHnw%2FX8PhpRXd8Cwi2PBTVgMQIlxMjbLEcSsj1W5mG4V8EhjbJ4FC1gf6WvEdhmlgUX3cdvfrXQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ff45b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/65225.45a68e44217bdc89eb40.js | 188.114.96.1 | 200 OK | 76 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/65225.45a68e44217bdc89eb40.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash5ccb90b22d94fa973ac33a2890fc7929 bb8b8e3a4a475920dc76225e76dad6c1305a76e8 e06633cbe7f25420c71e6a28fd6ccab71404df0d3fcf630e26cdb040e0e0ae2f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/65225.45a68e44217bdc89eb40.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"127f6-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FuP1Iske03iiDTaErgnlobXMfjZ%2Bj6Z6rQjzwLTMkuYyWEsvbLqXOGW58TKyn8%2BRbyjqSlaiC%2BBgUehkphWbgQ4MyhmXuucVG2FNKmVR%2B0sRpIO5K6rgrvzmtI40rl38Y%2FOgXYqvjZqdHo3DibbQkpI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a2f8ab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/81161.16bd418e776559e11cd2.js | 188.114.96.1 | 200 OK | 16 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/81161.16bd418e776559e11cd2.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (15686) Hash3c97dbccfd4e8411ca557fa727fd0a19 f35fea6cecdc989d2850b9a1f7abd2330aff5133 ca76d86c4f5150906a316d1ca088cd09eadbd882971821fa6e030127b81eac32
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/81161.16bd418e776559e11cd2.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"3d7d-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G6GrUYhvs4tCdz0TCr68NMnliF%2F6TdKg%2FlY29c4ZJsxVKafXhYjdL94bBhetQ79rxZ7xqE6aEajJqTi27kd0%2BJCX%2FU2Wy4IQshBbIHPfGtv0Jp77oigtIszvwoMvCV4SZLX3tA3ne2YtyZwPVzMbmsE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119ef24b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/53509.d075f1bff85f12b95485.js | 188.114.96.1 | 200 OK | 9.6 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/53509.d075f1bff85f12b95485.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (9755), with no line terminators Hashe9eff6bdc6b8bf132d282ab7e5a01c35 089fddfc575d1e95f64830332cd239ed1bd373fa 31a2beb20e1900be01f696441242a8abbd9f3f40dd8e9146d61bf141b36b4cdc
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/53509.d075f1bff85f12b95485.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"2592-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AaXOBG%2FBMVm7dsU0Bcd6YQ1CNUYr7x7EuFCv0Hik%2B%2BRJsYqHQ6H0ZjqR%2FMnRQmzwPrz2gss%2BzV6060gPc1LVdcqXI5Y6%2BLZJ7cGI2ltet%2BvYkNBKLXJJP9oKw%2FpLEQ95LBGOt5elA9gJw%2FLNTdy8pHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf11a3facb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/62783.e18caa1168cc95380ff7.js | 188.114.96.1 | 200 OK | 100 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/62783.e18caa1168cc95380ff7.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hasha98ad4c95668e7f4c84026bb92b67cab 7491bc769395414fb0547fd10164defb59634ee3 68e24e65cc7a6af0a0d33cac04f39aca1e1e670d0c137724abe4a917975ede8e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/62783.e18caa1168cc95380ff7.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:38 GMT
etag: W/"18608-18d27c37750"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1RS7MKu23ehMli9i89tsiF5tNtfP3tss8%2B5TltffqrG46UylnImbAow8N39WFuygxmhh1ywq7RNDGdr2eUG9vuBqL320tBrnR3IS4FO4PWnhONyaQ3yo24yMyfeZ0RUMqiqGRFQprL0Q0lHWvRi%2B9wo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12ce8fab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/3205da2e8f78633583d0.svg | 188.114.96.1 | 200 OK | 688 B |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/3205da2e8f78633583d0.svg IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeSVG Scalable Vector Graphics image Hash845877ca568da4ce63844760bd808400 c25334314d5646fa7bdc85e171bf96d3d4c6e794 cdded65b4ce8893fde73a93b00ee2061dbdabdbdaba65f0fc61631c17ce980ef
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/3205da2e8f78633583d0.svg HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:14 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:34 GMT
etag: W/"2b0-18d27c367b0"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y8YS6aKPjmgaw2AKtS%2FhLO%2FAnQCL8y%2F2Y1QCD%2BGJ4Ov7nisT0f%2FgEer16U2uFczva9mv4Bfk%2BYzjYpBNi7NJDM9Pu7%2F2GiEFaeWf4%2BQMAIVLKFp2dKciNoEEXp2PXRhuAZ1debq6ajLKTstOQyYc8Ok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf12d4a0db527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| login.restorecord-redirect.xyz/assets/14786.f948127b41553ade279f.js | 188.114.96.1 | 200 OK | 179 kB |
URL GET HTTP/3login.restorecord-redirect.xyz/assets/14786.f948127b41553ade279f.js IP188.114.96.1:443
Requested byhttps://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ CertificateIssuerGoogle Trust Services LLC Subjectrestorecord-redirect.xyz Fingerprint00:BB:4E:5C:21:2F:36:C1:81:93:C6:11:CE:6D:58:D5:5E:32:E5:DA ValiditySat, 20 Apr 2024 20:52:20 GMT - Fri, 19 Jul 2024 20:52:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size179 kB (178740 bytes) Hashd69e56d43eca67fdd7b58880418dad05 2c978cf96ee924c1eaf3a8e7f4f7a1df8a67bde7 1e625e5053b23ddf6c8c3c0775e2b7f865ad1fd8e34a3b67b0b12b714dafddd2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/14786.f948127b41553ade279f.js HTTP/1.1
Host: login.restorecord-redirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://login.restorecord-redirect.xyz/login?redirect_to=/oauth2/authorize?client_id=1231650031707099176&redirect_uri=https://restorecord.com/callback&response_type=code&scope=identify%20guilds%20guilds.join&state=5oUalVDauxEMOdlW5x2RaxmSYx0aKNjYqZVbjZnUzMGbK5GT1xmMaZHetlkNJlmYwZ0ViZnUtl0cJlnVH5EbUpXSUp0dJRlSKJkaNx2ZU10QKRlS3lEVKpkQq1Eb0clWyY0RTdXSUp0cKhVYuZ1aJZTSTpFdG1mYpd3QOpXTU10MRRlTy0EVOh3YU1kNJl3YspEWhdHaYpVa3lWSyMGVNVzaE10MBpnT41ERNdXVq5EeNpWT4lUaPlWUXNFM1clWwhnMZl2dplUeVRVT4VkaOl3aE90MBRkT4VkaOVTT65UavpWSrxWRaNHbXRmbKlXZ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:20:11 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=14400
last-modified: Sat, 20 Jan 2024 16:45:36 GMT
etag: W/"2ba34-18d27c36f80"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bhOE0fQjtDtxKcRfSxHlfajIOpY8TDXkBvzmz4NeauLMXumxsOGK71tfee%2B2M8vAFDKSOkqKQ8qtHPrN8Y8m0e%2FqGaVSs0ySwHt9bRlNUIh7TnfURer1x%2Fyzk%2BBLzKy5H8EjFEP3iOKu8qtvkun9fzY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881bf119df0ab527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|