Report - insomniahack.fun/app/Insomnia.zip

Report Overview

Submitted URL
insomniahack.fun/app/Insomnia.zip
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-02 11:05:44
Access
public
Website Title
Insomnia - best loader with cheats!
Final URL
insomniahack.fun/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
insomniahack.fun	unknown	2024-03-16	2024-03-16	2024-03-19	10 kB	364 kB	188.114.96.1
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20	2024-05-01	2.4 kB	22 kB	104.17.3.184

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed
2024-05-02	medium	insomniahack.fun	Sinkholed

ThreatFox

No alerts detected

JavaScript (39)

	URL	Size	First Seen	Last Seen
	unknown	247 B	2024-05-02	2024-05-02
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 0d951be519b26ac261e0c075cd3e0f88 c775baa3a500e3941401b8c62338a8d59c7637cb 8b42815cc00840d8c668744c35fece127f7b710ebf112005e7fef3752afb590b Loading...

	insomniahack.fun/	0 B	2023-03-07	2024-05-17
Pretty URL insomniahack.fun/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-17 04:16:01 Times Seen37724311 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	insomniahack.fun/	1.1 kB	2024-05-02	2024-05-02
Pretty URL insomniahack.fun/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash ca545c3e9e5e27252e4b589a4cae25ad 4025224615bb3fa53b7a500bfef4034b1d8d3d0a 89f2c968e2f09a847a4784cb45482097d1548e1dee831bc4bad35f66d42b972b Loading...

	insomniahack.fun/cdn-cgi/challenge-platform/scripts/jsd/main.js	7.9 kB	2024-05-02	2024-05-02
Pretty URL insomniahack.fun/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:46 Times Seen2 Hash 54e4cb471e32c3100fc095ff2d65a5ed bfd47497449b139c10e6308a53e1e15dbcf7cb2b 6dbbb5e09ee95f5c72559d06fd5e59bdd3457d8d08b7c33ceec2453d70cd035c Loading...

		Size	First Seen	Last Seen
	#1 Eval - 630e85015b5e68a4bf80e6558a3b90d4	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 630e85015b5e68a4bf80e6558a3b90d4 ef1c1776496ff3f39ea9dfda2e303a13da79321a 029f6da617cafd65ce775bbba97485f5cec468725ab3ea482539df7f099f82e1 Loading...

	#2 Eval - 88a0b9e18cedc066ece39272d5f153df	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 88a0b9e18cedc066ece39272d5f153df ab8fae5e007b1185b28533f01d1eeda7ca71eb40 c0a20e2aceef0f55d273c4a408aaa5b0bf51180261a0fb98f0119861cca71a9a Loading...

	#3 Eval - be0178ddf235301639cfe056621ddb72	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash be0178ddf235301639cfe056621ddb72 7ab6ecbe0d81e49e18c164106fddf8dc2913d848 f34b752ea9d1ef1b528de834088867fb6a93934ed706a1754645eb1ac936bd94 Loading...

	#4 Eval - f74a118586dc4bba7ffce6d52eaaa306	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash f74a118586dc4bba7ffce6d52eaaa306 4c34da89fac5abfaaf84756061425ba605d202d0 229682b201b3254045919110a7f40705a58cf60918f91333213b821e4853f5e2 Loading...

	#5 Eval - e2f3da67f33097113f94f1a92fa9ea7a	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash e2f3da67f33097113f94f1a92fa9ea7a 48d53a803c09a7b00066901ea03dec562654df7a 445af871c9326696da303539a7fd738085c02ed5f5da4e0a02dd115cee9cce11 Loading...

	#6 Eval - ef707c1fcdb78b96ec8b7891f7415b52	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash ef707c1fcdb78b96ec8b7891f7415b52 a47f62eff82e58abdb5644f8adf0f2583faa1690 c046da4ec206642e55eb2bbde468bf489a24fa506ade374a909be4c8ceadc0c1 Loading...

	#7 Eval - bf5d29b9bef6ae99750fc949b3c2eb6f	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash bf5d29b9bef6ae99750fc949b3c2eb6f 966ba26e0194f284cb80d3bad2d32037c1e33eb6 f2586bd356f0bc668180db79f38a5240a28a0e2f9c09a2840b6bf8982a604066 Loading...

	#8 Eval - 289e4504bfbcb46698a92f5da63e0a2d	62 B	2024-04-25	2024-05-06
Pretty Observations First Seen2024-04-25 19:17:05 Last Seen2024-05-06 16:16:09 Times Seen1078 Hash 289e4504bfbcb46698a92f5da63e0a2d a6dcf5b386a04b545d7e94c553c5947d8e95ec2b 3c82ba90261822f61f18c06c5f5efe8f16d31b2486e7dcf16e8c5be62809b917 Loading...

	#9 Eval - 5697da80f8b859ff6b596debdbedc612	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 5697da80f8b859ff6b596debdbedc612 b7bf8c35d01147b3a36a2a3f6c09229abb9a5fb2 de420fe4eaf24431f500bcd716e3c1945490c2f56a6d2ee159cdc1980ddda932 Loading...

	#10 Eval - 938d58ffc4bbe06ff5ed79b291929099	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 938d58ffc4bbe06ff5ed79b291929099 2b55f88e9ae8c67e2b25fd00da533f9059723061 dbf2d650e4d81cc007458fde22570b3f0b71c6d537707774d6729500b33e5007 Loading...

	#11 Eval - 7b5c5c5a08b148d79142984e15b17feb	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 7b5c5c5a08b148d79142984e15b17feb 8004dae185351f76ba0178fa2ed5ce4826e86d02 12002076a5ae629c89cf5204871508a4772a87b0cd744348a1819911e3f08913 Loading...

	#12 Eval - f74349fc152bbe71e4c863d79a96551d	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash f74349fc152bbe71e4c863d79a96551d d5220b1b259d9cd75e8e1b11995e8c393be20fac 4b2bec901c02f63c2f6124af121d8aa2d8b81ce018a62eac44f5f8265605dabf Loading...

	#13 Eval - a532a0bdd24ad7fe5adf89fb85fb1307	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash a532a0bdd24ad7fe5adf89fb85fb1307 aa6d6f04b3f9ea8fa9221bc9d50c38783e07fbe2 2593351a11191adcaa077c9b83e61e3b8420771a1095f53f53128830906b5bc7 Loading...

	#14 Eval - 2ea4cabf8f5f0abf824ea0ee7ccbb792	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 2ea4cabf8f5f0abf824ea0ee7ccbb792 0affe73680dfa48af491deacd565f111e42bb005 09fc966f3148c0643da311255ed4e154ba7ff37bc9dc47be92e1f03ba99bcd41 Loading...

	#15 Eval - 3e964e06798066181bfea6694d43bd6f	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 3e964e06798066181bfea6694d43bd6f 82dc6ae17f88bc5a78f2e43f9a1ae833c38a67b2 f527be8ac57ac4af9ecdc5189350f6d3496e65cfc5f888f35e01e26422c9810f Loading...

	#16 Eval - 175292718783820b96d48369a1b67e47	2.8 kB	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 175292718783820b96d48369a1b67e47 3b9f94013ba733a1e8e672df8bf2d504e4033015 e373d6725787bb263393203ab67e913e750d43715880bf19bf3685f49dad2b97 Loading...

	#17 Eval - 513f9340ddca658915ee2416910fc8de	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 513f9340ddca658915ee2416910fc8de 7811c562fdd3d0b806dfb9244a6b26b587bfd616 95968656bfe8930f4425dea9a09db2dda6f087a91ddeaf6fd86c3b9587352115 Loading...

	#18 Eval - 31f315295df3b4aa482f06bcd9eb0d24	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 31f315295df3b4aa482f06bcd9eb0d24 f7ffb30dc16387d6ec844916c1d8e49634fd9296 c4b933447eb9a8328c60e6fc69fdc84ef8660d3d0e0bc2e0c92034bb6f1b9909 Loading...

	#19 Eval - 8a754830491c381fa00a531e7ff3d500	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 8a754830491c381fa00a531e7ff3d500 3be5dd4b4266f6ef760c9e43628f826e2a324403 faef30928be9fc98f7192615757f53c709ace78ecadf3b8e638cb90d3175375f Loading...

	#20 Eval - 7c388dd07ddf81b33701d1c414167cf6	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 7c388dd07ddf81b33701d1c414167cf6 fff69d6924f5cf2017ed71990c9ff3b193b4beb2 b0814a46998ca06aa7ba5ff05c03e7afcff994335d64b3affe187848268e1587 Loading...

	#21 Eval - 9ce35fbcc31a319559c9355ba147d669	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 9ce35fbcc31a319559c9355ba147d669 da9ffbb554444a7447062f6a07fff68ae84e8737 e77dd94b876e72485be002ebffab6ef802e4cec4e32dc77a2d4d39509839f589 Loading...

	#22 Eval - 1a96b7bbec400bfba08125090f3cad95	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 1a96b7bbec400bfba08125090f3cad95 b21f356e82f41a70e9d4c97a4c814cf4dfd94319 8ade6b3944767c0d38077c0e75c280a491ac142d900365147a839bcbd3bb53a9 Loading...

	#23 Eval - 02c174f02ba52e28f50406e438d6a10a	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 02c174f02ba52e28f50406e438d6a10a ddebc59826a8463c3fa977f0180811b7e787ab3b 7f21060d7a97d206d2829542409d063d06c8ebd41f85df1702452ab93f052747 Loading...

	#24 Eval - 5ff946fa86ca53b892207776dfcf93ec	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 5ff946fa86ca53b892207776dfcf93ec 8c06d7ca36153be520a69d5f4ee9ddab4dc6b3df 70957d461771c6310b6280a04818bf51b01b0afd392d78598d6e99669e652e16 Loading...

	#25 Eval - 22bebad4a33020f6ee44e39ab25146a8	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 22bebad4a33020f6ee44e39ab25146a8 0c21ee2c08588f7ebd37d254c622c4750f182563 48a90394b503d47334db4d62b08b08e9ced3b83288489868deae5a1f24bdd14a Loading...

	#26 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-05-17
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-05-17 04:05:10 Times Seen352890 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#27 Eval - ae9234537224ff579ab040797e884bf5	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash ae9234537224ff579ab040797e884bf5 bf168a342502770486b6c94b054177f84fd0d779 94b7b99162f3120257604287135f03fcb0d2137d34e16143b12c7d06838426dd Loading...

	#28 Eval - 3ca29059ca02ad331f999ec95461738b	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 3ca29059ca02ad331f999ec95461738b 277b7cb01a64db1bb4cafb10ba78a246347428e5 0971db792b113b830adbd83bae9d29cca4f52091491fe271bd0ff4c2b95dd5c6 Loading...

	#29 Eval - 5b1ce725cde6c9cad93d1f59fa348214	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:45 Last Seen2024-05-02 13:05:45 Times Seen1 Hash 5b1ce725cde6c9cad93d1f59fa348214 261a9cb3471a2e3a8cfc43d220bf5f45e4a621bd 1abcb636216c4a8fbbcfe5bb7e9771dbe109318ce8ccb50f3c29115bbcaa5dbb Loading...

	#30 Eval - 4c7b1940ee888b7c9e4ce70fc77dbe6e	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:46 Last Seen2024-05-02 13:05:46 Times Seen1 Hash 4c7b1940ee888b7c9e4ce70fc77dbe6e 97b890c9a5b4ba292b308ce9c8ab3046212a73d9 87133c5979beb41edd609d5241024f3c71238b0cda62de69d10a1749ff64ee2e Loading...

	#31 Eval - 14dd2f4e030d78e9c4ea40037b51c585	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:46 Last Seen2024-05-02 13:05:46 Times Seen1 Hash 14dd2f4e030d78e9c4ea40037b51c585 21394bb714d5f1a48b0c6a95c0712f266472da91 887a41c38b9c2f341d32e10f5c9469e06937c0a17f23c29be58363e93ced56f2 Loading...

	#32 Eval - 8915bef1520a37d8a8091788df1d3946	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:46 Last Seen2024-05-02 13:05:46 Times Seen1 Hash 8915bef1520a37d8a8091788df1d3946 a84638cd2c5a24f26857aa1077bb04ed578887cd 38b8a779fc895784f2ddf20eb24b43cfa5541da642825b09dd2678717d26fc9f Loading...

	#33 Eval - 71ed72d333737af0138bf596bf5ab61c	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:46 Last Seen2024-05-02 13:05:46 Times Seen1 Hash 71ed72d333737af0138bf596bf5ab61c 0560b6228b5b2ad0d2c0ca5d45d3a32aac077802 85fc2beee02a51d767e93a4144c8348fabad25648c1022ce9f879a8725b168bf Loading...

	#34 Eval - bb6f27d0fe0b2fb6061a153bb7cb5998	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:46 Last Seen2024-05-02 13:05:46 Times Seen1 Hash bb6f27d0fe0b2fb6061a153bb7cb5998 deb002c42ff3c64d2b78c48e2bd7ffc3e18120a9 9d52217cb6f2fbaf3755975d56cfc443236f848af530120ffa04e1d52c70c8b5 Loading...

	#35 Eval - d34897c28171cd5e4c3aeda658f17684	28 B	2024-05-02	2024-05-02
Pretty Observations First Seen2024-05-02 13:05:46 Last Seen2024-05-02 13:05:46 Times Seen1 Hash d34897c28171cd5e4c3aeda658f17684 3957dd8a37f0705563e54ded88a2de10f8f9adfb a9659b1c3567fea5166cef9d11c7f09f7b8d0cbdd99b7647fcca3f0902cee9f4 Loading...

HTTP Transactions (21)

URL IP Response Size

insomniahack.fun/app/Insomnia.zip

188.114.96.1

301 Moved Permanently

167 B

URL User Request GET HTTP/1.1
insomniahack.fun/app/Insomnia.zip
IP
188.114.96.1:80
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
167 B (167 bytes)
Hash
0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/Insomnia.zip HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Thu, 02 May 2024 11:05:18 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 02 May 2024 12:05:18 GMT
Location: https://insomniahack.fun/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2tdPe%2FeWKvz4TkQfjiP59ELbmHatzrv60nMJVHqU9dLQeaUbu70kDg%2BHjX0udwWyLQcol1rRQ0lP98e%2BwrpUq9dC%2FVbPrIf42LtehAb0krHkUMaRNR7hJ4pj9ngTITZnAtwJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 87d789155a53569f-OSL
alt-svc: h2=":443"; ma=60

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D

104.17.3.184

61 B

URL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D
IP
104.17.3.184:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Size
61 B (61 bytes)
Hash
9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/o4vt5/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:19 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 87d7891a7cb91c06-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/cdn-cgi/challenge-platform/h/g/flow/ov1/1942346834:1714644698:f2IGQzKbagV1N9MQoz0mNzX6f_MH71gK3_lB9dzqYjg/87d78915ae7d56ae/ec8d001f4729d26

188.114.97.1

22 kB

URL
insomniahack.fun/cdn-cgi/challenge-platform/h/g/flow/ov1/1942346834:1714644698:f2IGQzKbagV1N9MQoz0mNzX6f_MH71gK3_lB9dzqYjg/87d78915ae7d56ae/ec8d001f4729d26
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (16412), with no line terminators
Size
22 kB (22190 bytes)
Hash
bbfed2bc0347a46dc8897470ee540fb7
a093a7fb6d85f945c00a62c411ec33d0f65861f4
d0ad31202878b4cc7c7f148061a3417bd2f5a697e665891688cdc040248ae1dd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1942346834:1714644698:f2IGQzKbagV1N9MQoz0mNzX6f_MH71gK3_lB9dzqYjg/87d78915ae7d56ae/ec8d001f4729d26 HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://insomniahack.fun/
Content-type: application/x-www-form-urlencoded
CF-Challenge: ec8d001f4729d26
Content-Length: 1856
Origin: https://insomniahack.fun
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:19 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: nyJiZi8H7c8qMOYksEUo4UHzV94KcFG770xQ1JMfrHpB5gCVPGlt+McWD0E7H9qX$hHbIAoxDn/M6Ns8xm3AMWw==
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1KV%2BS0coXMsvjgHd3aVChaA1aLHKUp%2BJvIkI04HDo2xD6PM4IujNsi2cIucCy1RuD60%2FMD4HTcuyUAvLpLb07Ypu02UVluxug3d2LssT1TDpwRwF6eUWdEMS2rdD%2FJ%2FeLm6N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d7891919a056ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit

104.17.3.184

19 kB

URL
challenges.cloudflare.com/turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit
IP
104.17.3.184:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (42565)
Size
19 kB (19357 bytes)
Hash
65b0a652c40c95d12c4ddb3b4567c1ea
c654efa19d01d6553ed4e0f500d350011e023ad1
c6b5cd0b65ebbb519dd845ba2979b40e58b056ca2c90f67a8bfea871d39615a7

HTTP Headers

GET /turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://insomniahack.fun
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 11:05:19 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d789185c4256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

insomniahack.fun/favicon.ico

188.114.97.1

73 kB

URL
insomniahack.fun/favicon.ico
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (21591)
Size
73 kB (73358 bytes)
Hash
dea06740d5e62b2197a899c77d3e29e3
5ec57da9af7e209d0d88ccb44ea2326b73474a2b
6d90ca3019960688458df4476f177f024ec8f3743783b2865022b37fb5b1241c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://insomniahack.fun/?__cf_chl_rt_tk=hPvq4gVmGBUpoDHRAfqbyZ3f2nlnOaYUvEw5VUFb_Jc-1714647918-0.0.1.1-1279
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Thu, 02 May 2024 11:05:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nJJoYPAp5ImSkryVP%2BMawV0OsayHmGCeBC5kjWz1gdNWnZuG1dLlHl%2BfcIGWGYkbsw%2BfdtADm0e5rAXOcnlhg0skCzCJPspWFe4RMANeWqOEDldQ%2BhZqjB8Yml8ES5NfIMDi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d78917b86856ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87d7891a0c4c1c06/1714647920084/81a2cb113e73e48ce6b09b51bfce9104ee0f9bd37c1b185423f23d956f1a945a/VrLpn35OzqoRdkE

104.17.3.184

1 B

URL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87d7891a0c4c1c06/1714647920084/81a2cb113e73e48ce6b09b51bfce9104ee0f9bd37c1b185423f23d956f1a945a/VrLpn35OzqoRdkE
IP
104.17.3.184:0
ASN
#13335 CLOUDFLARENET

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/pat/87d7891a0c4c1c06/1714647920084/81a2cb113e73e48ce6b09b51bfce9104ee0f9bd37c1b185423f23d956f1a945a/VrLpn35OzqoRdkE HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/o4vt5/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 401 Unauthorized
date: Thu, 02 May 2024 11:05:21 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20ggaLLET5z5IzmsJtRv86RBO4Pm9N8GxhUI_I9lW8alFoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAycESnW8nWijopFBbXs0ShsFXencIiaM4x8DmoYUMDVIj9LKs0W82Vt7SxGoLjV854ZLsONjPcD9gaNsV1U7ial-U1eHrh6bc6pi2_dUVK8NsyLnCLOtvOiP0SY8vabqRR4dPd6S61Y-diDWwToPoCSioJqJhohK4pCLZ5_YF-5VfEFiyMTtIeFQadCwQWCTWWHJgK8wlIzn3e6mBeQZJ1VsOf21BzIlCKUydJy4Pf1ah0N7KjgN2pp4S9j2sSUl0ZbfnPznB7zO130ijqjcDO7wydsvznYw_ApvEdn5mKTlOFBQM1jktH72KBkAGAS-M4Zko5MazCXVbKxK3oLAhkwIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIIGiyxE-c-SM5rCbUb_OkQTuD5vTfBsYVCPyPZVvGpRaABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAi_Bv1vvWWnyuOfVJgRV-AQLxEJECUUmMRrMnYz-gJA-oMd79ajvP3atoTZqB_EsZIq7SMmpbCRFhPolqzIrtXh7AF1Q-ZWY2RoRVRgKr7d6iJMZ49iZUmbz837eqBZJrEMuXftZmY35str5sb0GjzklF8z_hcQJC9vancYXncsYoiMDaROW0tLwSQA9BGfbmA6GlbVj4XH8DH19cKifxmO6RlIPPKlL1KmZbrRakkpuqvJO2-x1Zc2S5GCpponuvQTqJQH8Ud9loZLI75e-Xa9KAUNtBTM0t9WSEsv8cSJLV1BPBVTy1lOnwghofw4fqmlYv6CXClzAUqWouSTJ7uwIDAQAB", max-age=20
server: cloudflare
cf-ray: 87d789238c881c06-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87d7891a0c4c1c06/1714647920087/rElVZI8qzSVYxWa

104.17.3.184

61 B

URL
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87d7891a0c4c1c06/1714647920087/rElVZI8qzSVYxWa
IP
104.17.3.184:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 1 x 64, 8-bit/color RGB, non-interlaced
Size
61 B (61 bytes)
Hash
fa8db5f6dd97fa64f844e33541c0fd9c
acb9cce0c0e85eb567b9aadb0acd5bc54f1fd27d
a182c680d3e66fa392a6e03d5b16284abb964eb2ba5b24d356f3b65d6f43f293

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/i/87d7891a0c4c1c06/1714647920087/rElVZI8qzSVYxWa HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/o4vt5/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:21 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87d789244d3b1c06-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/icons/hackedmenu.png

188.114.97.1

200 OK

21 kB

URL GET HTTP/3
insomniahack.fun/icons/hackedmenu.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
PNG image data, 739 x 461, 8-bit/color RGBA, non-interlaced
Size
21 kB (21192 bytes)
Hash
422bc30e565dcd725cef7bb4052f16bf
b8587bd27c189e454c9a541f5e4a6fbd856d8007
4e6ceb84f6e325fd8d3daa576f0f2d4ca75e89ccb41854319c783bf99531c301

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/hackedmenu.png HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: image/png
content-length: 21192
last-modified: Wed, 03 Apr 2024 15:25:25 GMT
etag: "660d74e5-52c8"
expires: Sun, 16 Jun 2024 11:01:04 GMT
cache-control: max-age=3888000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 265
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vn%2BOUOOkSyx7tpPvhqOsCjWRQhqSY34A81kcjrJE3XJ4taXfVxndSupZpFRYqimMpEo84D8qykB0dKdggV7cHGi3dIspUWiZG5jQV0rywjhQcYIOnDTOL%2FerrFaCvn7eWb1X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d7895749e256ae-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/cdn-cgi/challenge-platform/scripts/jsd/main.js

188.114.97.1

302 Found

0 B

URL GET HTTP/3
insomniahack.fun/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Thu, 02 May 2024 11:05:29 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js
cache-control: max-age=300, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gzE8OobCKip4bMFwyuKDmZzlLrVQYvAxv2DzXhStRUtKwDvN%2FSzbfNwz61Qf%2FB6FmPzO4VEkPm6V4MwckGw3OD1NC7FahbcedMbQPvM0CXzdlJf3d58gvgxwt%2FI7vef%2B9WyB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d789577a2356ae-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/css/firstFontAddition.woff2

188.114.97.1

200 OK

32 kB

URL GET HTTP/3
insomniahack.fun/css/firstFontAddition.woff2
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 32272, version 1.0
Size
32 kB (32272 bytes)
Hash
91c1abde26995ed2f211f73c11f96047
0b10cff8bdbcba61d5b6797214627912bca4ae45
45447a2b45991ea4e67ff0866444ca07fcf62c28dbfd5fa072ab76d3d0c46390

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/firstFontAddition.woff2 HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/css/css2-2.css
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-length: 32272
last-modified: Wed, 28 Feb 2024 17:33:10 GMT
etag: "7e10-612748957c180"
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2BdC0TBRHbAME5yDDaVWQNXlwMDxkc9kMYosDSLvksyz%2BQrB1pObOLxLh3DKLZINrS1QCVfUzXDlw%2FuZEgsre54qw8GZaeGrdSnY%2B4LPF9qzaCl5xe15fl9yrV7mciQP6x6a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d78956e96756ae-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/css/firstFontAddition.woff2

188.114.97.1

200 OK

32 kB

URL GET HTTP/3
insomniahack.fun/css/firstFontAddition.woff2
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 32272, version 1.0
Size
32 kB (32272 bytes)
Hash
91c1abde26995ed2f211f73c11f96047
0b10cff8bdbcba61d5b6797214627912bca4ae45
45447a2b45991ea4e67ff0866444ca07fcf62c28dbfd5fa072ab76d3d0c46390

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/firstFontAddition.woff2 HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/css/css2-2.css
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-length: 32272
last-modified: Wed, 28 Feb 2024 17:33:10 GMT
etag: "7e10-612748957c180"
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yL9nHYIgBbLfZTukhTwESYi%2F2kP4wd6XjvAtd%2Fb1oRhCxR4ZoeH%2Bcsrl3pJcZESWcDJwLXa475h6l1zHou2gWJ5Gd0RDzOGH0DDUsExrH42f6049puM%2FYheH%2F2nNvCMu4vwe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d7895709a056ae-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/icons/key.svg

188.114.97.1

200 OK

56 kB

URL GET HTTP/3
insomniahack.fun/icons/key.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
SVG Scalable Vector Graphics image
Size
56 kB (55616 bytes)
Hash
31f41d5bbafe13bd391dff9bb430ee8c
3c49f46cd8d81e5cec2c84012a5398a0fbac95f2
a6952c959a07fdbe9b61c80c6ffc94ae5a280a79c257f47b1fd3e161038f7550

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/key.svg HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: image/svg+xml
last-modified: Fri, 15 Mar 2024 15:26:00 GMT
vary: Accept-Encoding
etag: W/"65f46888-783c"
expires: Sun, 16 Jun 2024 11:01:03 GMT
cache-control: max-age=3888000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 266
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=obfiiDIta4rQ3fY%2BS5TRY5NkAGUcfGkZAW%2FEdNH5%2BsF2p0UtvZ3He%2FPSvsKl6%2BhxeOZKkLDMpc9XwPNpUEENgvvS0T1naLkOfsXYR2MhrB3q9G4QnOitChcedA%2BXHxIa8Rtc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d7895678ff56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

insomniahack.fun/css/css2-2.css

188.114.97.1

200 OK

33 kB

URL GET HTTP/3
insomniahack.fun/css/css2-2.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
ASCII text
Size
33 kB (32626 bytes)
Hash
7e8230e75510eff13169867c831296b8
046f2f492b5a14025ea115b9939d1f5da7ec7611
a9a447daec6fb494dc535c485a8b199156a981f25ad494d075f254211cf508cb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/css2-2.css HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/styles.css
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: text/css
last-modified: Fri, 15 Mar 2024 17:58:20 GMT
vary: Accept-Encoding
etag: W/"65f48c3c-1854"
expires: Sun, 16 Jun 2024 11:01:04 GMT
cache-control: max-age=3888000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 265
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2Fk06o3xy9AqOC%2BTvL%2BmMH8uj0Q0qqaPveBZhqqo69IH97s%2BnZLxraw5cHjJZr7eEJJF6mcv2ikM4A0UmzjFfvi5fpZiAV0h1l%2FNwepxU%2F2jIYJtDiHtp0Eb%2BnYVM1wnFYNC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d78956a92b56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

insomniahack.fun/icons/icon.png

188.114.97.1

200 OK

4.3 kB

URL GET HTTP/3
insomniahack.fun/icons/icon.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Size
4.3 kB (4305 bytes)
Hash
d6ee4120e9c2857f7b06be5e2c9f4b8c
8ffa0d03e07669472b7c78fb14ce93aab500f91a
fa9140ecfd0324c0544beda769fed2d6de474983916632aa0d02d4fd9c937440

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /icons/icon.png HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: image/png
content-length: 4305
last-modified: Wed, 28 Feb 2024 17:33:06 GMT
etag: "65df6e52-10d1"
expires: Sun, 16 Jun 2024 11:01:04 GMT
cache-control: max-age=3888000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 265
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cUzygEEA2wp53GO%2F1eB6EAqPdbYTzhcHhrM42riZUpX%2BFc2%2Baz44hI7bgT8La8vS4U25syI1scumDs8l5jKeIC%2Flk96TcmA9bK%2BbzIUQMCJrNVgc6JXR%2BmN9pbP42opZVJ01"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d789586b1756ae-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/cdn-cgi/challenge-platform/h/g/jsd/r/87d78954bf3856ae

188.114.97.1

200 OK

0 B

URL POST HTTP/3
insomniahack.fun/cdn-cgi/challenge-platform/h/g/jsd/r/87d78954bf3856ae
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/jsd/r/87d78954bf3856ae HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12144
Origin: https://insomniahack.fun
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=an3L_t0yMq6Wn3W1zSAo6prbW_p1UnGVZtgnk07f_u8-1714647929-1.0.1.1-2EfRmppNI9FMZFEHGFnthCD6wbEyEHI5ilr.t9.jz4spLZ5PWOD2POSO0v_GAVzxRv1a7U39aFfLdvz_E5QrfQ; path=/; expires=Fri, 02-May-25 11:05:29 GMT; domain=.insomniahack.fun; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OGndCbrp4TvyrFwY1y51WAQTbwIMaLSi3l2k1WWgIeQyV2TZGVbvFgvTibwJhp4sUjxz4vN%2FSEDHWtqimauadF7h5U4WPHHTPPZHROQR3c6g90%2Bh2tYopC8EjbQM417g%2FTxW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d78958fba156ae-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/css/css2.css

188.114.97.1

200 OK

22 kB

URL GET HTTP/3
insomniahack.fun/css/css2.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
ASCII text
Size
22 kB (21564 bytes)
Hash
a0580d823668fa574b8ca6355a996c3f
2e867ef4f4cefa36e414da555431d48be2ddd4a3
c66fcce31fa06a5e2169be8f6b97eda62c63b0243a21e9a90b4c7cee3dbc0bc3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/css2.css HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/styles.css
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: text/css
last-modified: Wed, 28 Feb 2024 17:33:14 GMT
vary: Accept-Encoding
etag: W/"65df6e5a-543c"
expires: Sun, 16 Jun 2024 11:01:04 GMT
cache-control: max-age=3888000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 265
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LyMUv%2FlHhhEYaWXv8Jq8zxq49kin1WjvHKmu6Tnj4OYymYEff%2BnTTORm9%2FM4T5%2BJMGBeori%2FvM725SgQn0QcrE6nffhzOUKiSkE0AmDUSj3zdieIN63CR3%2F%2F8%2B4ckmFp03lT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d78956991c56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

insomniahack.fun/css/css2-1.css

188.114.97.1

200 OK

351 B

URL GET HTTP/3
insomniahack.fun/css/css2-1.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
ASCII text, with very long lines (362), with no line terminators
Size
351 B (351 bytes)
Hash
effdc3ddbd121db0c176f98e25902632
9b3d8085314df937c10935f966179f110f1ff9e7
f8baff3d1dff46d0c1c0ca2dc09e73f3d64b16a9fd25c00e12fd24582cd63248

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/css2-1.css HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/styles.css
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: text/css
last-modified: Wed, 28 Feb 2024 17:33:14 GMT
etag: W/"65df6e5a-15f"
expires: Sun, 16 Jun 2024 11:01:04 GMT
cache-control: max-age=3888000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 265
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F0A7a9X2Momuxca2uqurm9m9MBMOk4Uje2ClyilM9cGgkJSPKB4Q6FMEDjFXB4aAChTco3i9A1w5OjWTYBHjm6%2Bmpue6aWaf2YsA9XEimtnvWsQ0jN1VIeUmWKJaaKbMDh98"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d78956a92956ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

insomniahack.fun/cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js

188.114.97.1

200 OK

7.9 kB

URL GET HTTP/3
insomniahack.fun/cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
JavaScript source, ASCII text, with very long lines (7853), with no line terminators
Size
7.9 kB (7853 bytes)
Hash
54e4cb471e32c3100fc095ff2d65a5ed
bfd47497449b139c10e6308a53e1e15dbcf7cb2b
6dbbb5e09ee95f5c72559d06fd5e59bdd3457d8d08b7c33ceec2453d70cd035c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d0ff3ebede6b/main.js HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: application/javascript; charset=UTF-8
content-encoding: br
vary: accept-encoding
cache-control: max-age=14400, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P6BkXT3AtK9PctUESkq4wJ%2FYEWY%2F%2FOVAXpGnGLG99tQNibTItJJaLOSNAhcPzjtGq3LLVM9HsT07zdfvaAqjPvWWlWjwnucxHCb9UPptVhdwS63BwHmWM8xrXIqpwnbEf03i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains; preload
server: cloudflare
cf-ray: 87d78957aa4956ae-OSL
alt-svc: h3=":443"; ma=86400

insomniahack.fun/

188.114.97.1

403 Forbidden

16 kB

URL User Request GET HTTP/3
insomniahack.fun/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
HTML document, ASCII text, with very long lines (15832), with no line terminators
Size
16 kB (15832 bytes)
Hash
4e29d14c2240cf9e02b0d1725a4e94c0
894a9d065c6829f0b99a53b4bbb8f10c53f7b128
cd1f58909f51850dd59eaa244ebaecba3792fa04e3ce78c4df8ec31b1ce11688

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Thu, 02 May 2024 11:05:18 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: qYanwBu1tyOB1VXlIJBLOzdJrNl3oLF1FVi8A2BKNqv57VRDWrn2PNWaORAfEerAQLkhuxf7Pna/sROVeuAxdGq/zVIaH8F6BihMH2dvSNl+YortHunnbbQpdU/QusO/rfa7AL6Nm7wBaRvEuvtUzA==$gDIlkeFo7z1eIPz0uTZ4kg==
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rAML3iSDsYFz8QZdPyly3MMm2M86NaixzVm7nhM6rd0kSGmO%2F%2B04y%2FUd95ktlrGz0vsHeJdXLPkUbKHIB6AqEvpTsD%2B3HAVm4XFqkUX%2BDuf2ez6Fb1hBAPGjhd1cLQ%2BN8oim"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d78915ae7d56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

insomniahack.fun/styles.css

188.114.97.1

200 OK

22 kB

URL GET HTTP/3
insomniahack.fun/styles.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://insomniahack.fun/
Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
ASCII text
Size
22 kB (21929 bytes)
Hash
98a373077b610bd4ac5d9586643aff94
960ce62203994b314f12f338031fa05519a90f7b
c3dfaeda8de8bd548c093b36df6091153c4f6c142eca64da22256ead4db93643

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /styles.css HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://insomniahack.fun/
Cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: text/css
last-modified: Thu, 25 Apr 2024 13:13:44 GMT
vary: Accept-Encoding
etag: W/"662a5708-55a9"
expires: Sun, 16 Jun 2024 11:01:03 GMT
cache-control: max-age=3888000
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 266
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F703D0mIZHIyv2SCmYndnKdQuCJ43PlISpm4McSfxbBjm9DHv0NveU1jvq5msLSmnZuK1xA85VyuGv%2FhBiD6xjhakHwKVrbSsWYnWeg68eH8mk4Z2vMjbSCKb2rR%2FzZV77xh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d7895668fb56ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

insomniahack.fun/

188.114.97.1

200 OK

8.0 kB

URL User Request POST HTTP/3
insomniahack.fun/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectinsomniahack.fun
Fingerprint56:AF:07:7A:AA:C7:2F:03:00:33:F6:62:30:57:EE:C4:1F:D9:13:18
ValiditySat, 16 Mar 2024 18:36:36 GMT - Fri, 14 Jun 2024 18:36:35 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (8190), with no line terminators
Size
8.0 kB (7950 bytes)
Hash
71ba79c15f8f6663c250ddbc87d97914
af30e408e16ea809f03727be8b80157d430ee710
54557c5594d238eb62a75f07271d1e2457398caf4960eb0849bf61718856ad28

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST / HTTP/1.1
Host: insomniahack.fun
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://insomniahack.fun/?__cf_chl_tk=hPvq4gVmGBUpoDHRAfqbyZ3f2nlnOaYUvEw5VUFb_Jc-1714647918-0.0.1.1-1279
Content-Type: application/x-www-form-urlencoded
Content-Length: 3951
Origin: https://insomniahack.fun
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 02 May 2024 11:05:29 GMT
content-type: text/html; charset=UTF-8
set-cookie: cf_clearance=bg879rpayrz23zZFRg1Ct8D64KP.I7GhrEb6EQIzBo8-1714647918-1.0.1.1-vhhr9lm2PVkbhUhC6bqBgK56OyBUyvgXGwYxVW29JWB9CEGTKI9JQrfMg0rKoixeaEnUAmeih8aNm6roaNfiFg; path=/; expires=Fri, 02-May-25 11:05:29 GMT; domain=.insomniahack.fun; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KuO%2BhNe3VxCQhvIjEIgP00BRtRFxYOEsPUbhP7m6PoCaCpSePznGQQIi0UUqBJDWH61Y0TyXsE2iqpZHHcYx3aIGeI7YsDs%2FDbE5wVjSBrz36joEmWF1SPiiFD8oKWp7xdCe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87d78954bf3856ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (39)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations