| hoxy64art.cc/ | 172.67.206.61 | | 1.0 kB |
IP172.67.206.61:0
File typeHTML document, ASCII text, with very long lines (2702), with no line terminators Hash8b3f8e3a4c5c7be575873245153e9368 e6996be0a55b1d9b3b78a61d67718356f3a34087 2cd31031e590bceb9a08ac6a267e5d17c63dea1863f2a7a2f0a27ffff97b84fb
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:18 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 06 May 2024 16:23:15 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zE0ESd7txbeItDx2anHxthb%2B3z0iPRPBIvC%2FZVyRG4KR8VKnU4fsagpAhagtFfS%2FX01Uli4bUdNrfEefIQOmc0%2FUheOvqOvHze3jIVxow04rgp%2BD7mIKLK8nZ6kfx5A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ff70e69e3b0b06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| hoxy64art.cc/invite/i=141629/ | 172.67.206.61 | | 1.0 kB |
URL User Request GET hoxy64art.cc/invite/i=141629/ IP172.67.206.61:0
CertificateIssuerGoogle Trust Services LLC Subjecthoxy64art.cc Fingerprint92:51:71:BC:54:FC:15:71:34:ED:27:A6:3E:A7:85:BA:DF:4E:FD:D6 ValiditySun, 05 May 2024 10:24:58 GMT - Sat, 03 Aug 2024 10:24:57 GMT
File typeHTML document, ASCII text, with very long lines (2702), with no line terminators Hash8b3f8e3a4c5c7be575873245153e9368 e6996be0a55b1d9b3b78a61d67718356f3a34087 2cd31031e590bceb9a08ac6a267e5d17c63dea1863f2a7a2f0a27ffff97b84fb
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /invite/i=141629/ HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:19 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BvC4lUS2l2jB7hGcpD2%2FgYa27VsMxn5eulXtJEaYyc93chEhgZzIVrG1oXf32IEGI503vzS20SDT5LL7%2FRkxkeExmDPc%2BaHaBa%2BKz6%2F3I3J1zclqm9li63NxTtUswOc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ff70ea08a80b51-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| hoxy64art.cc/css/app.2d03d7d3.css | 172.67.206.61 | 200 OK | 2.6 kB |
URL GET HTTP/1.1hoxy64art.cc/css/app.2d03d7d3.css IP172.67.206.61:80
Requested byhttp://hoxy64art.cc/invite/i=141629/
File typeASCII text, with very long lines (15613), with no line terminators Hash8328c8a54c2b4ec4af619ca19a45148f d4f46ad73d3ef616a1a7efd449fcdea6ffeb5484 a2c46a7d9ef2a4d3e7523c257c87b5c8377ca938d0badbcf1b1405197708dcc9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/app.2d03d7d3.css HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/invite/i=141629/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:19 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 06 May 2024 16:23:14 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 7096
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bDVwzEavMCNyUGtIO8fML3MtZWGZbrbRuOQLu%2BjGui%2BNbtd1CIwtnRjD0hjTplMJYRQIv2%2BW%2BviWC5xkwc9hlgvlIUzLUDUs4IHtF7QMM9RSHHWK%2Bl8xlzJRSHnVgRQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ff70eb7f1f56c1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| hoxy64art.cc/css/chunk-vendors.c57533e1.css | 172.67.206.61 | 200 OK | 44 kB |
URL GET HTTP/1.1hoxy64art.cc/css/chunk-vendors.c57533e1.css IP172.67.206.61:80
Requested byhttp://hoxy64art.cc/invite/i=141629/
File typeASCII text, with very long lines (65536), with no line terminators Hashebfffebc1f62c3be51082e6595a0a005 e278fbd6fd48150b3f366b50ed388983d934978c f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/chunk-vendors.c57533e1.css HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/invite/i=141629/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:19 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 06 May 2024 16:23:14 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3125
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BWbISu9qCr64qUnkfG9cEshtcoQU2j3cU3aioPSNlOr8p%2BjchEmeqLI8I%2FZJv27nNjTwhOTiVMXoi%2FWEoL5Uqs081CqeYOKZMbKW09P3N%2BvVYhlGIFqBIPxiS2zDqTc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ff70eb7e4bb500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| hoxy64art.cc/js/app.6a1227bb.js | 172.67.206.61 | 200 OK | 25 kB |
URL GET HTTP/1.1hoxy64art.cc/js/app.6a1227bb.js IP172.67.206.61:80
Requested byhttp://hoxy64art.cc/invite/i=141629/
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash37e5a2726595875afeb7494f21001086 0c5f4d8d462837b89f110521ec6c0c2a475344ad 42ed824bf51320210e3cae51585ccff9f086595eedc79f165d052fbe3f77e132
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/app.6a1227bb.js HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/invite/i=141629/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:19 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 06 May 2024 16:23:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DxcxlxxW2Z9c5g%2F0FhDuyLVUuJCuosYhzjw0NIWBzuoVqhWgV8bLMUznCY%2B8yO%2B4I6y0jEesvjrGvaJGyY6r2P8jZXmv%2B%2FD9CShuTGTm9lK8dI177VkL6z5mLNz0b9Q%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ff70eb7be85697-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| hoxy64art.cc/js/chunk-vendors.ea790e22.js | 172.67.206.61 | 200 OK | 272 kB |
URL GET HTTP/1.1hoxy64art.cc/js/chunk-vendors.ea790e22.js IP172.67.206.61:80
Requested byhttp://hoxy64art.cc/invite/i=141629/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (51759) Size272 kB (272420 bytes) Hash4fee178f809d1b2a829099a8bb91c56c 178b6322fdc40c08fcbda0c096c668855ad49b51 c3580c9951b9554639c1404a246b3f27f818a99240c728f04cb964cd9e50b73d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/chunk-vendors.ea790e22.js HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/invite/i=141629/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:19 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 06 May 2024 16:23:30 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cXllQwH1GdeseASFVk1%2FSHZ259zpmHf6FnRLfDOWcUOp%2F4TQd0o4isbZgmtTukTRZzmWLT8u9E6BHR6MFwt3vbUPoQ8afzMrbbTTXADooeFZyhIv4ECESxBPQbVOoVI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ff70eb7aec0b51-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| hoxy64art.cc/invite | 172.67.206.61 | 200 OK | 0 B |
IP172.67.206.61:80
Requested byhttp://hoxy64art.cc/invite/i=141629/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /invite HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 21
Origin: http://hoxy64art.cc
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/invite/i=141629/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:20 GMT
Content-Length: 0
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yl9hS5sMnY5B3PKlNuJ2rOybWW2z4eWUNf%2BHWF6hDgUassvDarr8GP%2BojT%2Bnj4hEJwgS4UkSpvowOEuAGjcRsfAnR9plf7YXs5F5o6HMnT4C51ednokVmU%2BV%2F6BV4es%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ff70edfb89b500-OSL
alt-svc: h2=":443"; ma=60
|
|
| cdn.discordapp.com/attachments/1234839538300485775/1234839562182856724/dfb23.mp4?ex=66323175&is=6630dff5&hm=8f2031811cbca165a54368faab26533f3a6bef3a853df1888dfb71e5dd38603c& | 162.159.134.233 | | 36 B |
URL cdn.discordapp.com/attachments/1234839538300485775/1234839562182856724/dfb23.mp4?ex=66323175&is=6630dff5&hm=8f2031811cbca165a54368faab26533f3a6bef3a853df1888dfb71e5dd38603c& IP162.159.134.233:0
File typeASCII text, with no line terminators Hasha1ca4bebcd03fafbe2b06a46a694e29a ffc88125007c23ff6711147a12f9bba9c3d197ed c3fa59901d56ce8a95a303b22fd119cb94abf4f43c4f6d60a81fd78b7d00fa65
GET /attachments/1234839538300485775/1234839562182856724/dfb23.mp4?ex=66323175&is=6630dff5&hm=8f2031811cbca165a54368faab26533f3a6bef3a853df1888dfb71e5dd38603c& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 07 May 2024 07:19:20 GMT
content-type: text/plain;charset=UTF-8
content-length: 36
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7NpJYU1ZmZMWn%2FXvROs0BBottjc6ksQH27zD%2BMlHIOrypp%2FD3gmacL3U66VDfs0M12xQOPFkzdwUxXnXzfObmFlKMQU4fM6fwcM8FdA%2FMhkwpXM8Y7Qm7vNZIACBaoLIMm4jBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=UtdCK7SIY.8e4kEsGXmZZNuOaMUqUbNfsuWi9iddccc-1715066360-1.0.1.1-51.wgzcVQAFCpyTN56kZCNt8Q4afkpaCr7TKPGx7yMLA65DgIiM0EZMP9WxAixN.vA8Q0gYjAT2_7H85dH.Xrw; path=/; expires=Tue, 07-May-24 07:49:20 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=mHVdHYyru_Y_mco8Z3_Z9PRtNrbSdsj50HEyy8pakIs-1715066360226-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87ff70ef5c161c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hoxy64art.cc/getlog | 172.67.206.61 | 200 OK | 1.4 kB |
IP172.67.206.61:80
Requested byhttp://hoxy64art.cc/invite/i=141629/
Hash18ac5dcd8ede6f572d8ae8d4ae1c863f bf63a40007e38dbdb17e0ea9a2bf1699d69ce5b9 cf4e040e42c5b92dd09b8210b8aa43338504665bd59dc599a05e5169c447b9d3
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /getlog HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:20 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T8eDSSZnFYwS47G%2Bq1zd8dbUiDproZZ3fEusaCVy%2FiYLzRysswqBW6OWCHfkXMOXucvnxKvRpDAQD8I3UUfzfG0DTJgMn%2F62F9vZxKnzGYNZI0cCWdAtkTMaJH1uwBU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ff70eeed9db500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| hoxy64art.cc/socket.io/?EIO=3&transport=websocket | 172.67.206.61 | | 0 B |
URL hoxy64art.cc/socket.io/?EIO=3&transport=websocket IP172.67.206.61:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://hoxy64art.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: z1yCd63SwtKezjk0F+FIUw==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 07 May 2024 07:19:20 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: 40Ye5Qb4465x0F6zMBYB3koheiU=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=knPo9L5EcPROY2eZMKZz8bFfi%2BWjg7yCeZnEyFw8EQckx5tpJJjUsrIdT0R1kDBHmy%2BeifXmpLFmMTid2QBg1oABMYb2FQ5N4WWpqypKETozXpwzYYofulJo8n9TXEg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ff70ef2e471bfa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hoxy64art.cc/img/icons/favicon.svg | 172.67.206.61 | 200 OK | 995 B |
URL GET HTTP/1.1hoxy64art.cc/img/icons/favicon.svg IP172.67.206.61:80
Requested byhttp://hoxy64art.cc/invite/i=141629/
File typeHTML document, ASCII text, with very long lines (2702), with no line terminators Hash8b3f8e3a4c5c7be575873245153e9368 e6996be0a55b1d9b3b78a61d67718356f3a34087 2cd31031e590bceb9a08ac6a267e5d17c63dea1863f2a7a2f0a27ffff97b84fb
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/favicon.svg HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/invite/i=141629/
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:20 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1720
Last-Modified: Tue, 07 May 2024 06:50:40 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g5cHfcFX2lMlJGVfX1f%2BJdLLRceT1cNPi9%2B2a5%2FLNxkimpQ1czHZT5UgiydWLIiEcjxUbAEmQ02zvDUJxopr3I%2BXE5YKPhFZLQDYZkvuW3Tb3DO06Cn0wtlN0iLVStg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ff70f05b945697-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| hoxy64art.cc/img/icons/apple-touch-icon-152x152.png | 172.67.206.61 | 200 OK | 4.0 kB |
URL GET HTTP/1.1hoxy64art.cc/img/icons/apple-touch-icon-152x152.png IP172.67.206.61:80
Requested byhttp://hoxy64art.cc/invite/i=141629/
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hash1a034e64d80905128113e5272a5ab95e 92328e60f63d690f33cd4961b9934a539dc29b82 4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/invite/i=141629/
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:20 GMT
Content-Type: image/png
Content-Length: 4046
Connection: keep-alive
last-modified: Mon, 06 May 2024 16:23:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 7096
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C61Ijq02%2Bun0OHVcg9EWmXZauNF1VonjNxYumcnMhctyIJTcMZnCdSjPdVMFZRlhHfMYNSBw%2Bii%2BhwGXU4heDDZpLk7Jmfbi04Q%2Bdr24MBb7KhJPHR8vd0tlm2VA19E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ff70f0583bb500-OSL
alt-svc: h2=":443"; ma=60
|
|
| ocsp.sectigochina.com/ | 104.18.38.66 | | 472 B |
IP104.18.38.66:0
Hashad8eaf349d1a01f8c4b2934e2babc8c2 a826565e8f40887f1827bf884caf147b26d494e7 afdab61c0ed8f314ac55897252261f56b129dde1bd8eb2b2114e95033d8ebf0d
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 07:19:22 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 05 May 2024 01:24:12 GMT
Expires: Sun, 12 May 2024 01:24:11 GMT
Etag: "a826565e8f40887f1827bf884caf147b26d494e7"
Cache-Control: max-age=411207,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 87ff70fccef9712d-OSL
|
|
| b.yzcdn.cn/vant/icon-demo-1126.png | 154.85.69.54 | 200 OK | 8.9 kB |
URL GET HTTP/2b.yzcdn.cn/vant/icon-demo-1126.png IP154.85.69.54:443 ASN#139057 LEGEND DYNASTY PTE. LTD.
Requested byhttp://hoxy64art.cc/invite/i=141629/ CertificateIssuersslTrus Subject*.yzcdn.cn Fingerprint6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf87c46f346a5548224ccbe0b6bd75df5 8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370
GET /vant/icon-demo-1126.png HTTP/1.1
Host: b.yzcdn.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 07:19:22 GMT
content-type: image/png
content-length: 8886
server: openresty
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
cache-control: public, max-age=2592000
content-disposition: inline; filename="icon-demo-1126.png"; filename*=utf-8''icon-demo-1126.png
content-md5: +HxG80alVIIkzL4La9dd9Q==
content-transfer-encoding: binary
etag: "Fo6Li9S6PmtshVfZSnJgYf3WJJL9"
last-modified: Mon, 26 Nov 2018 11:08:05 GMT
x-reqid: YyIAAAASg9geDiAX
x-svr: IO
x-qiniu-zone: 0
x-log: X-Log
x-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC165_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC46_DE-Frankfurt-Frankfurt-11-cache-4
x-cache: HIT from BC46_DE-Frankfurt-Frankfurt-11-cache-4(baishan)
X-Firefox-Spdy: h2
|
|
| hoxy64art.cc/socket.io/?EIO=3&transport=websocket | 172.67.206.61 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1hoxy64art.cc/socket.io/?EIO=3&transport=websocket IP172.67.206.61:443
Requested byhttp://hoxy64art.cc/invite/i=141629/ CertificateIssuerGoogle Trust Services LLC Subjecthoxy64art.cc Fingerprint92:51:71:BC:54:FC:15:71:34:ED:27:A6:3E:A7:85:BA:DF:4E:FD:D6 ValiditySun, 05 May 2024 10:24:58 GMT - Sat, 03 Aug 2024 10:24:57 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: hoxy64art.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: http://hoxy64art.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: z1yCd63SwtKezjk0F+FIUw==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 07 May 2024 07:19:20 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: 40Ye5Qb4465x0F6zMBYB3koheiU=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=knPo9L5EcPROY2eZMKZz8bFfi%2BWjg7yCeZnEyFw8EQckx5tpJJjUsrIdT0R1kDBHmy%2BeifXmpLFmMTid2QBg1oABMYb2FQ5N4WWpqypKETozXpwzYYofulJo8n9TXEg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ff70ef2e471bfa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1234839538300485775/1234839562182856724/dfb23.mp4?ex=66323175&is=6630dff5&hm=8f2031811cbca165a54368faab26533f3a6bef3a853df1888dfb71e5dd38603c& | 162.159.134.233 | 404 Not Found | 0 B |
URL GET HTTP/2cdn.discordapp.com/attachments/1234839538300485775/1234839562182856724/dfb23.mp4?ex=66323175&is=6630dff5&hm=8f2031811cbca165a54368faab26533f3a6bef3a853df1888dfb71e5dd38603c& IP162.159.134.233:443
Requested byhttp://hoxy64art.cc/invite/i=141629/ CertificateIssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /attachments/1234839538300485775/1234839562182856724/dfb23.mp4?ex=66323175&is=6630dff5&hm=8f2031811cbca165a54368faab26533f3a6bef3a853df1888dfb71e5dd38603c& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: http://hoxy64art.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 07 May 2024 07:19:20 GMT
content-type: text/plain;charset=UTF-8
content-length: 36
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7NpJYU1ZmZMWn%2FXvROs0BBottjc6ksQH27zD%2BMlHIOrypp%2FD3gmacL3U66VDfs0M12xQOPFkzdwUxXnXzfObmFlKMQU4fM6fwcM8FdA%2FMhkwpXM8Y7Qm7vNZIACBaoLIMm4jBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=UtdCK7SIY.8e4kEsGXmZZNuOaMUqUbNfsuWi9iddccc-1715066360-1.0.1.1-51.wgzcVQAFCpyTN56kZCNt8Q4afkpaCr7TKPGx7yMLA65DgIiM0EZMP9WxAixN.vA8Q0gYjAT2_7H85dH.Xrw; path=/; expires=Tue, 07-May-24 07:49:20 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=mHVdHYyru_Y_mco8Z3_Z9PRtNrbSdsj50HEyy8pakIs-1715066360226-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87ff70ef5c161c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|