| acceptabledcooeprs.shop/apiP |  188.114.97.1 | 403 Forbidden | 5.9 kB |
URL User Request GET HTTP/1.1acceptabledcooeprs.shop/apiP IP188.114.97.1:80
File typeHTML document, ASCII text, with very long lines (14392), with no line terminators Hash2b2b15788527aa736a15dfb5efe82198 9d8670320efe17b5f06ae96c07a8e3549fcafd30 e95aa6df60fad2a40cf627e320bfbbb49799262074e1e24147ea6bf7277c7eaf
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /apiP HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 05 May 2024 02:39:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: J7J+qH2ERRVgUkaRt4FHbRchI06OaV4jKtHcD5xTPyolvDWEXYr/9ZgDQSQ3Yfhu8hju304O+KcpMBGzOANRHgiLdIOeaEoGTTxiCGOyTGsTCwn+HTO5/IvAkvM3QOCx/jUq2gdSUDaiLaydnB9QLA==$Zq9W3cME7e/ir32/X9E30w==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B%2FwPBhunQwo9DdyRzZunlWfdYtTTiLDMMg3rkWGw4sEbWaeduQvmLvEedF3owZBF0o3pf2xJ9FZers7OC8IzhTdrhlOcQsd8LwuVqljSIFFGgZfBOyP1liqX%2BaJ71ocmrxvn%2BZhcdw2Mhg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ed5c501e6bb505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87ed5c501e6bb505 | 188.114.96.1 | | 113 kB |
URL acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87ed5c501e6bb505 IP188.114.96.1:0
File typeASCII text, with very long lines (65536), with no line terminators Size113 kB (112763 bytes) Hashd4c10a456dd15d7701955922127f8c5b d408c9f227fca9ade4e53ddfee65ea93a26bbe78 aef5a407f913a37a16a22941dee4a1122af173c94a8807936de8691bda98ef54
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87ed5c501e6bb505 HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://acceptabledcooeprs.shop/apiP?__cf_chl_rt_tk=YMa3mJmfV4sppDypy.2ucpWlnlNZSJvap2SsfzsbOD8-1714876771-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:39:32 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S1%2F4F3fgC3WsfYcEq8ISqb7THy5R%2Flk9KWpmnYAXBRT57G8m6RwjKMCCa5Bsy9Vq1feNPXdYtrLPdJfkhq9FwdI0IEqC1cMYK7FnV3vduDD9ArS7eXYeQlPbP1iIt9AjGfTrOgsxTwjdBA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ed5c51fae91bfe-OSL
alt-svc: h2=":443"; ma=60
|
|
| acceptabledcooeprs.shop/favicon.ico | 188.114.96.1 | 403 Forbidden | 5.9 kB |
URL GET HTTP/1.1acceptabledcooeprs.shop/favicon.ico IP188.114.96.1:80
Requested byhttp://acceptabledcooeprs.shop/apiP
File typeHTML document, ASCII text, with very long lines (14485), with no line terminators Hash48359b2d5791b7572d84fb4d267d9592 d523ba8571dee26ef451255bb2b54c9276d5de92 e7ccd731c6cd1b5a2926e969c1bb4d99fcadd3ba3a78c2ca36a41704011ab2cd
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://acceptabledcooeprs.shop/apiP?__cf_chl_rt_tk=YMa3mJmfV4sppDypy.2ucpWlnlNZSJvap2SsfzsbOD8-1714876771-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 05 May 2024 02:39:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: VjHNmma/dZq7/O65eaKUf0aSdrVRtYH61pbL5GAFqNAqm+JvqJwpTpR2Wz+Lb1zOiFwv1H5PTf08qpQY6LsdL5Q4CGk45fSxg0a94+pZTc2JBvyUnj7lpswFHzPdaYQIPyXytPO1wYNxbfVWh1Qbiw==$5nC5rRTDikdpgPdKiBD4XQ==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d2qlsHBAa1VUCetbXnK4wulJTcRGSrkQJfTDc2MkDi2JbkLZ30Cx4nDDyB8uHou2rTuIPBlK0PTDzaPK6KRVjBaU9ajJckNKMcpN%2Fzev62bhjuDCBu3q%2FqhVnwIn4VQ%2B%2FRBiySf2Cz7v5w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ed5c523af51bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| acceptabledcooeprs.shop/favicon.ico | 188.114.96.1 | 403 Forbidden | 5.8 kB |
URL GET HTTP/1.1acceptabledcooeprs.shop/favicon.ico IP188.114.96.1:80
Requested byhttp://acceptabledcooeprs.shop/apiP
File typeHTML document, ASCII text, with very long lines (14378), with no line terminators Hash268db69e85d4abcdd7168e97ca3889e6 824d2e5f17e2cf195e6984e6971d3df523ba5a30 b34029172ae41b5cd2e02a3deffcc7cb915348219466bc0287c857936ceeeb4b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://acceptabledcooeprs.shop/apiP
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 05 May 2024 02:39:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: 7ply7FJu5KM4Zr2idmekqtlbCMhHpWdlz785+Lxl1YMYDfUSjoH4f3f1yRE91qWQndU8Bx7tTPTLDS2f0ylEf3YfeFgp1queivCt5/Wl/MbTPSWBV57ZUjbrNoqlV8IZB1uUK5yNmNa2YmiYUhDyrg==$JY09obCKVuEXXgms/QY6jg==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qMGEuMib2rLm7J0yOrPB94X8xeYVMGIt9HNNJxwXtdT7eaJaZxVrVkDUKpb0pGwi4kC4SE%2BfY3c0MemjOigIYPg%2FHlVPP3T6YnGFj%2FtTgSTDuD7mfLpDKL7UFf1B1ZfbnDYOppjtI5PPDw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ed5c52ac837131-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/flow/ov1/943907531:1714872787:ub0qTusAs1x2Rl0EwdKGX4YqZ7IHjz0EbtiNeao8Wuo/87ed5c501e6bb505/1206e03e0b6f7ed | 188.114.96.1 | | 12 kB |
URL acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/flow/ov1/943907531:1714872787:ub0qTusAs1x2Rl0EwdKGX4YqZ7IHjz0EbtiNeao8Wuo/87ed5c501e6bb505/1206e03e0b6f7ed IP188.114.96.1:0
File typeASCII text, with very long lines (16396), with no line terminators Hashe92b20299b8604ec17a7f9bac0c274ac 7b93e3532567db869d793aaf6e2738b3644e0d4c a6076097fa8181b97f174382b5ea7377a1585b9d6b857a2b7538af4dfc4689a3
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/943907531:1714872787:ub0qTusAs1x2Rl0EwdKGX4YqZ7IHjz0EbtiNeao8Wuo/87ed5c501e6bb505/1206e03e0b6f7ed HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://acceptabledcooeprs.shop/apiP
Content-type: application/x-www-form-urlencoded
CF-Challenge: 1206e03e0b6f7ed
Content-Length: 1873
Origin: http://acceptabledcooeprs.shop
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:39:32 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: xB8yPKgaj26XFpfSYomXfqerBQhtdWMUuNWdVXHstUbPxnrammDjRmSczXy0WqGU$vk9cPeGA0f2zTMoN1dmSFw==
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=keLNEqeBjuMKfE1%2BPy0%2FV4YKifnJSfmZk75ibuETWKbbnTzAyrr%2FiXeNa9csvRo8biPsW4nHE5Whfv3k1N1bEOs3nVHBn%2FrMFEjQBhpo34QA3qE27NMYSKB%2FMXAI8wmS3s8zN4krGaGkhw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ed5c53e9f50b61-OSL
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D |  104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D IP104.17.2.184:0
File typePNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Hash9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84
GET /cdn-cgi/challenge-platform/h/g/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/or4c0/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 02:39:32 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 87ed5c55fbadb4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/932582805:1714872783:BY2YbIHwN1XUhm9hgUIYySop-T-ijOfuKV5OMczpj_k/87ed5c54fb31b4f1/a5e8f5ad01f7d12 | 104.17.2.184 | | 110 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/932582805:1714872783:BY2YbIHwN1XUhm9hgUIYySop-T-ijOfuKV5OMczpj_k/87ed5c54fb31b4f1/a5e8f5ad01f7d12 IP104.17.2.184:0
File typeASCII text, with very long lines (65536), with no line terminators Size110 kB (110231 bytes) Hasha67b33058ba9fbfddfa876db9a400dbe ff3e2bcf47201c134daa3378127669e19b2d2bdd 5443682b58cb66daa9620d2f3ee7e4281361d1b77d83671583a4eb25bbf80d05
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/932582805:1714872783:BY2YbIHwN1XUhm9hgUIYySop-T-ijOfuKV5OMczpj_k/87ed5c54fb31b4f1/a5e8f5ad01f7d12 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/or4c0/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: a5e8f5ad01f7d12
Content-Length: 3529
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 02:39:33 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: KQI99clBo2EMs5wcWZ/R8rpGDT01DHQK5AeTIisrB2UkSTdPNDRW0jO3PNOFeCh6tpoYe3pp7QEfbmaXj0iUFj/XNhIhUZ04sSClgneDE+OMKRlWmmYdsKEZ19VgopfOT4kIv/G2+aLb2B7clWBVr4FfozlWnDW/hX6gtj//iV62AWvRiKpYGFEabeeUIBm5DehDShJxhsbfUHhNEzbhuyvwZlKnTAQ7tVFWo7rYKnduyFJEVUQVMezn36gCAA5wM9HUw/QsGE0QIqLjfus1WtN6/P6LaZ4Mq9uxPegiNyJqmEoC69VT8xVeswKJM91IM5kiVssL6ZZppEd222nYcwjHGKl/fA9te6Rhvto45Gtg5+hly2KiOi5+uT2O3pCdH3KIJvIUhmF1ULbcla/oqL3X+duWYooWmdrNJnLRLxnLrXVh3GXjxq5YwMy8gTFkiU0d1DC3d3/+rS3o3yPZyQ==$4fXcDf5cdSEPHjzww57Gzg==
vary: accept-encoding
server: cloudflare
cf-ray: 87ed5c583caeb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87ed5c54fb31b4f1/1714876773169/O96rAUilC6jtMPX | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87ed5c54fb31b4f1/1714876773169/O96rAUilC6jtMPX IP104.17.2.184:0
File typePNG image data, 71 x 62, 8-bit/color RGB, non-interlaced Hashf63d2aa300f3a33910503fea9e1f6441 e309e062be085b89f11fdfe624cd4286c02fe6f7 6d66711a1ae54dc6085f5feb693af149db33567e1d00bcb58afa15841982fc9b
GET /cdn-cgi/challenge-platform/h/g/i/87ed5c54fb31b4f1/1714876773169/O96rAUilC6jtMPX HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/or4c0/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 02:39:35 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87ed5c661b83b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/flow/ov1/943907531:1714872787:ub0qTusAs1x2Rl0EwdKGX4YqZ7IHjz0EbtiNeao8Wuo/87ed5c501e6bb505/1206e03e0b6f7ed | 188.114.96.1 | | 1.8 kB |
URL acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/flow/ov1/943907531:1714872787:ub0qTusAs1x2Rl0EwdKGX4YqZ7IHjz0EbtiNeao8Wuo/87ed5c501e6bb505/1206e03e0b6f7ed IP188.114.96.1:0
File typeASCII text, with very long lines (2328), with no line terminators Hash668f01c6da3441535d3cb602a930d493 e581a4a331a763e6f821a89fa3eeac0d104329c8 4a24467f8d62b2dab79fbff8301641719360471d9ca624393d3f59a5d852c172
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/943907531:1714872787:ub0qTusAs1x2Rl0EwdKGX4YqZ7IHjz0EbtiNeao8Wuo/87ed5c501e6bb505/1206e03e0b6f7ed HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://acceptabledcooeprs.shop/apiP
Content-type: application/x-www-form-urlencoded
CF-Challenge: 1206e03e0b6f7ed
Content-Length: 2545
Origin: http://acceptabledcooeprs.shop
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:39:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-out: Vw3hqcZoxPBaLbhmNT5TWhTu3QT4CpijIr3AYjdJQfyyZtAXEjtdI2IVay+ngTy0F3Z1OUAlW4GSRBXLHISPPuMGXoH14lMCPurLolXnu+Y=$zCCtph69oOaM/lGTuKmt/g==
cf-chl-out-s: 4pwz72ZDiSv81zUGyG1/Fw==$bC4if1k5x41OCpdrScgkfw==
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9e%2FbnO4rFI8d5cg3KkFC4r0IDk8xTO7N50WnnnXSKkbB5taP2QTWc5J2rgJUXL3CYCXYVmstBUTRuDkeZNCbF4T0VoPiWnfjb2R%2FUjXU6R6enWqRIWkGSqWgHn8eiP9I9h7tm5xscqENUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ed5c89df830b61-OSL
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/932582805:1714872783:BY2YbIHwN1XUhm9hgUIYySop-T-ijOfuKV5OMczpj_k/87ed5c54fb31b4f1/a5e8f5ad01f7d12 | 104.17.2.184 | | 27 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/932582805:1714872783:BY2YbIHwN1XUhm9hgUIYySop-T-ijOfuKV5OMczpj_k/87ed5c54fb31b4f1/a5e8f5ad01f7d12 IP104.17.2.184:0
File typeASCII text, with very long lines (22300), with no line terminators Hashb2d98076dcb5ebfa176fb1c389f8e89c f93909bb5ee00285f236d34c654c8efdc348a501 6391702ff1fc4c312a4ab44ac30c11fab7aa5fec62e5c8e26dc599baf8297bdd
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/932582805:1714872783:BY2YbIHwN1XUhm9hgUIYySop-T-ijOfuKV5OMczpj_k/87ed5c54fb31b4f1/a5e8f5ad01f7d12 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/or4c0/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: a5e8f5ad01f7d12
Content-Length: 27524
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 02:39:35 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: /h4sHhE8d71w/SeL12P7Zhl1dugbtc6pYPGNy3ZGukw7BWcW1t1bI6txrGLKd0Rf$MfiJ5bU5FD4RFdqXtuc83A==
vary: accept-encoding
server: cloudflare
cf-ray: 87ed5c676c3db4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| acceptabledcooeprs.shop/apiP | 188.114.96.1 | 403 Forbidden | 5.9 kB |
URL User Request GET HTTP/1.1acceptabledcooeprs.shop/apiP IP188.114.96.1:80
File typeHTML document, ASCII text, with very long lines (14413), with no line terminators Hashdf4295a4bc26020821ff9aa14e40a467 f8fb88c369a5519c1c93e4d87c5b7ced39d2830a 78f2a5c7a6624bf6c18065d3f1d8e7ca9cbb80e652ba38c64d2a79b50dfe9994
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /apiP HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 05 May 2024 02:39:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: UK5JVysHMrwt2GXrOPPxe/qQ7beUDnZV96WxPO75cW+D2/Q4Yir4kZ/KehKBpgt7+87lWjJXiRx7VqjMQFUO/RkhBqdYYVxFo/b7w44Un+HQAbeLxL+W5a+JacqCIEJxCbSmOLJXawOYJCD2OmIjMw==$atsinfD9jL4HUlyPVV9TRg==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tPKl4%2Bqz%2B6A5Yc%2F7DTDhKHF%2BRy85yy0voJ2UXx8Y8yTlhWGEmWXm4wnckQnBSX5ii1c513J7Ho9Wm9k0zjHmxcc0oCxAjELrDNp%2FMoqCj9fqWbj4a2GZGrd1Ft%2Bv6uG6ZkDqu3W8e%2B2Kag%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ed5c96ba760b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87ed5c96ba760b61 | 188.114.96.1 | 200 OK | 111 kB |
URL GET HTTP/1.1acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87ed5c96ba760b61 IP188.114.96.1:80
Requested byhttp://acceptabledcooeprs.shop/apiP
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size111 kB (111355 bytes) Hashbf4a622b8c46a4282c82b98c2a224ba4 e1fdb8aa10d78e14c3e6135a01326df7830e756a 831069d14d2d4f3b56e19cbf0b28f49c9694f8fb3838e22fe6f9f475a9f096ae
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=87ed5c96ba760b61 HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://acceptabledcooeprs.shop/apiP?__cf_chl_rt_tk=yuy5Aylxs.nTZFHGKcfKEahY38c_JZsOums4dPbpOaU-1714876783-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:39:43 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gBCoHHXk2v%2B0UWhwdl%2Fa6a6sy07MwnUSb3XpqVNPtpxWdb4pCoUvMlkY6SrdVXHj4FXCm2yxI5%2BvaYnIf06i6Y5e5PLGG%2Bn2%2F73v7jgccmKDo2dCeeIgaATo8g52xT3Kdcz7si4vQzmfGg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ed5c971a42568d-OSL
alt-svc: h2=":443"; ma=60
|
|
| acceptabledcooeprs.shop/favicon.ico | 188.114.96.1 | 403 Forbidden | 5.9 kB |
URL GET HTTP/1.1acceptabledcooeprs.shop/favicon.ico IP188.114.96.1:80
Requested byhttp://acceptabledcooeprs.shop/apiP
File typeHTML document, ASCII text, with very long lines (14506), with no line terminators Hash054215642ebc3563b5374aad65de2a3c 95f51ecf47d1ca97aded3adc85940928ef7ff553 de61b302f6efc9fb69aae08bb6512160506c348b5c4cd1cf357d93f9da1212af
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://acceptabledcooeprs.shop/apiP?__cf_chl_rt_tk=yuy5Aylxs.nTZFHGKcfKEahY38c_JZsOums4dPbpOaU-1714876783-0.0.1.1-1301
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 05 May 2024 02:39:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
cf-chl-out: AaMLbnESSPu9QUkObBflO3RVJJLTQxNnfZsyoReKRxQqa70Y3FNTAMfyxntHSJ1Y4LV2ukPKDzJa86eubzmxUVLDRNZYso6XDfjPvn8nKpewnf3Iko2AmLFNtQgaaFYVwbDoyR2Wf06KtskNnQuP5g==$rPw3RWOORx08UelYLox7BQ==
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sW6SLskf1cWjSOyJV8ozXruhRDilrsj5f2%2FF%2BP7Q3NKIJQtq4%2FXF7LiYtIFe%2Bl6NUaZJwLK4JHhvj3PscyDVrpR%2FdOFYdTj5takmDIwUKxEynO4dZQqvWuiIgLWKklGy1HkKpWRO3B%2FiSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ed5c975a5b568d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| challenges.cloudflare.com/turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit | 104.17.2.184 | 200 OK | 20 kB |
URL GET HTTP/3challenges.cloudflare.com/turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit IP104.17.2.184:443
Requested byhttp://acceptabledcooeprs.shop/apiP CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (42565) Hash65b0a652c40c95d12c4ddb3b4567c1ea c654efa19d01d6553ed4e0f500d350011e023ad1 c6b5cd0b65ebbb519dd845ba2979b40e58b056ca2c90f67a8bfea871d39615a7
GET /turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://acceptabledcooeprs.shop
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 02:39:32 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed5c52bd3ab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit | 104.17.2.184 | 200 OK | 27 kB |
URL GET HTTP/3challenges.cloudflare.com/turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit IP104.17.2.184:443
Requested byhttp://acceptabledcooeprs.shop/apiP CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (42565) Hash65b0a652c40c95d12c4ddb3b4567c1ea c654efa19d01d6553ed4e0f500d350011e023ad1 c6b5cd0b65ebbb519dd845ba2979b40e58b056ca2c90f67a8bfea871d39615a7
GET /turnstile/v0/g/d0ff3ebede6b/api.js?onload=XagHGl3&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://acceptabledcooeprs.shop
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 02:39:43 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ed5c97ce47b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/xeoa0/0x4AAAAAAAAjq6WYeRDKmebM/light/normal | 104.17.2.184 | 200 OK | 26 kB |
URL GET HTTP/3challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/xeoa0/0x4AAAAAAAAjq6WYeRDKmebM/light/normal IP104.17.2.184:443
Requested byhttp://acceptabledcooeprs.shop/apiP CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (41702) Hashba46022f468cf84b6f54dfb04bfae2ff 3fd03a5e0f1187c137af22935fee00d7670f52e3 1c082352e1b77f18d398e84368e986fed3a42034256580fb47082bf2d441bd14
GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/xeoa0/0x4AAAAAAAAjq6WYeRDKmebM/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 02:39:43 GMT
content-type: text/html; charset=UTF-8
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
vary: accept-encoding
server: cloudflare
cf-ray: 87ed5c99ef10b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87ed5c99ef10b4f1/1714876784166/idI48CuOZSk1d9L | 104.17.2.184 | | 61 B |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87ed5c99ef10b4f1/1714876784166/idI48CuOZSk1d9L IP104.17.2.184:0
File typePNG image data, 89 x 20, 8-bit/color RGB, non-interlaced Hashb8ce282738ecfc80fc187a924b8b99a7 61ac629f7a74524d2e4420aa3839c0d5fc8506be 6ff5d6d90d15626d244f2a245e7e68738d15e781200ab7a9e117af4580d44082
GET /cdn-cgi/challenge-platform/h/g/i/87ed5c99ef10b4f1/1714876784166/idI48CuOZSk1d9L HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/xeoa0/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 02:39:46 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 87ed5cad3fd9b4f1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/flow/ov1/1637161665:1714872815:CYGqeXCgDD_5pX0bS-KWYOn40yzLPkzKCGTSaCTXTHI/87ed5c96ba760b61/87bafb28d050ec0 | 188.114.96.1 | 200 OK | 1.8 kB |
URL POST HTTP/1.1acceptabledcooeprs.shop/cdn-cgi/challenge-platform/h/g/flow/ov1/1637161665:1714872815:CYGqeXCgDD_5pX0bS-KWYOn40yzLPkzKCGTSaCTXTHI/87ed5c96ba760b61/87bafb28d050ec0 IP188.114.96.1:80
Requested byhttp://acceptabledcooeprs.shop/apiP
File typeASCII text, with very long lines (2328), with no line terminators Hash769765bca10f538557592a7bd9b718b5 92b2c4108801221b8643413f95942bfe898673af 11404cbf831af3e08b8c2697c92da00ca6ffb9efc6c0e5da342669b91ba86e57
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1637161665:1714872815:CYGqeXCgDD_5pX0bS-KWYOn40yzLPkzKCGTSaCTXTHI/87ed5c96ba760b61/87bafb28d050ec0 HTTP/1.1
Host: acceptabledcooeprs.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://acceptabledcooeprs.shop/apiP
Content-type: application/x-www-form-urlencoded
CF-Challenge: 87bafb28d050ec0
Content-Length: 2535
Origin: http://acceptabledcooeprs.shop
DNT: 1
Connection: keep-alive
Cookie: cf_chl_rc_i=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 02:39:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-out: ll0KBoA50WLMC1LkFOAdIjoQs5Tz4PYiBoy7VY21V4xd2W1bmi7PuWRh23jEVMsUqCAA0WFXsYPWM3SSRX3dv6fo7xHuKMUww1Wdm8vg/10=$ZKscmXEHl4dAo3ZHHO5m/A==
cf-chl-out-s: 520cIi7+1BjMRXV/sn1EKw==$T/yBng6u0d6RuiR7jEzVig==
vary: accept-encoding
content-encoding: gzip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UCBGIi7abBI5i2f8Siu1uSlA17D7y2w8n6iP33ybILXT7%2BHrQAKkk1faX2GSb0rZuohf5m2m30fomPMnjvHb1%2FUwxTDXzA1j%2BIIccgvWWfy7DkgYEd4Rk74fI%2FJBX6Lh7teS49wwZRMKfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ed5cd02ca3569f-OSL
alt-svc: h2=":443"; ma=60
|
|