| cdn.discordapp.com/attachments/1242864401904832685/1242864437237518356/bur.mp4?ex=664f6335&is=664e11b5&hm=85b77323cb25d08c1db0e54ae8f700beaffcb86694d069053cbbdebce1905ab5& | 162.159.135.233 | | 36 B |
URL cdn.discordapp.com/attachments/1242864401904832685/1242864437237518356/bur.mp4?ex=664f6335&is=664e11b5&hm=85b77323cb25d08c1db0e54ae8f700beaffcb86694d069053cbbdebce1905ab5& IP162.159.135.233:0
File typeASCII text, with no line terminators Hasha1ca4bebcd03fafbe2b06a46a694e29a ffc88125007c23ff6711147a12f9bba9c3d197ed c3fa59901d56ce8a95a303b22fd119cb94abf4f43c4f6d60a81fd78b7d00fa65
GET /attachments/1242864401904832685/1242864437237518356/bur.mp4?ex=664f6335&is=664e11b5&hm=85b77323cb25d08c1db0e54ae8f700beaffcb86694d069053cbbdebce1905ab5& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 23 May 2024 22:57:59 GMT
content-type: text/plain;charset=UTF-8
content-length: 36
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=twlzK2fgYjA5gsSiOCnKbtm4YAlrb8dcFMNq%2BDvH9p0pEPGN2RjH2avg96AtjtO7APqLsMjT6vKIAsGEqvIfdg4ud3wCPz6VHERiYAmcslKqF1iYblvyUIMQCXvF9vPd2yXvoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=4KBmuZcPZYpdgo5QtE.L6B8oxq55eObjwgFajtF1Rgo-1716505079-1.0.1.1-dQ18X8OAdGkQVxxohXRUNbyEJ8mkM5gYFNcgOneUXcsmEQTlPKhROr0HsRgF89vzdXZR.NVM8E7uA1COSdEclA; path=/; expires=Thu, 23-May-24 23:27:59 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=iE9XeofqNCpCPnKyOjyCZq5Q5BT3p7LQP6YD6oPkmX8-1716505079382-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8888a5ea0fc9b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| buarp86xa.cc/invite | 172.67.179.166 | 200 OK | 0 B |
IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /invite HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 20
Origin: https://buarp86xa.cc
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/invite/i=85786
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:59 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jMZbCONeVKfhFrWrjKo6wyKIbO9GNU9nIB%2BbYFYVLSNzby29cVP0bhvp9nk61M4RAYKYuc22ypNlF1rSnU03WG8tNYh7jWHF4DGeLQwsm2jgtLK3sGiOcyuIGNM%2Bbtg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5e8c9a356aa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| buarp86xa.cc/js/app.e7b06d8e.js | 172.67.179.166 | 200 OK | 22 kB |
URL GET HTTP/3buarp86xa.cc/js/app.e7b06d8e.js IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash3c4d5bfd9f13fddc75c5e940cce7faa6 b9df6d8679852a0155479db7e7f7ceb24bb92fc6 980066d6c620bf29df9a4223f2044148da5f150951c42c094e9c8d139f19d2be
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/app.e7b06d8e.js HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/invite/i=85786
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 23 May 2024 18:04:31 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b3588EcV9c1rjS4PpkJ8Pe3c5ZweCEKBc8I8WqIbGNmBFsG9Q1GUCKRAElpQXAJKX5kvVzZ3M5k85WEr3R0nulHH1jDMIglx%2B29T0NceW5xsSn%2B1IgiVbE2j56oH%2FQU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8888a5e4bfba56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buarp86xa.cc/socket.io/?EIO=3&transport=websocket | 172.67.179.166 | | 0 B |
URL buarp86xa.cc/socket.io/?EIO=3&transport=websocket IP172.67.179.166:0
CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://buarp86xa.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LoCyrGbww2QjuAD4VEPe+g==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 23 May 2024 22:57:59 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: P24D06YslYFdfSL+CmC9M9g+fNg=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWJvqoav3Voz1dCnttJ6EY2f68jhLRQwcvhJymTXZMqxn6TjBbqVDEu3w9hu6pArgmTEQ1kIfJN%2BhyoJ%2FnSVj3EX0zhHiTJIhcbvGJlZXgRb9AcV0H8613e0G5YGG9w%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8888a5e9ec1a1c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| buarp86xa.cc/img/icons/apple-touch-icon-152x152.png | 172.67.179.166 | 200 OK | 4.0 kB |
URL GET HTTP/3buarp86xa.cc/img/icons/apple-touch-icon-152x152.png IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hash1a034e64d80905128113e5272a5ab95e 92328e60f63d690f33cd4961b9934a539dc29b82 4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/invite/i=85786
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:58:00 GMT
content-type: image/png
content-length: 4046
last-modified: Thu, 23 May 2024 17:59:39 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PwoSi0zuKkx2C%2BC%2BSx5XVMoYGBHn15XvMdFT4dCaoz97px5jGiMgmfyrVmNvDr%2FO0dqsUXkWX65Z0CtUc1V0GrEmLr%2BxPN3plIeFWfM8hT0VxuCwuC1ZM0l1OY%2BWqYU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8888a5ebdb4156aa-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ocsp.sectigochina.com/ | 104.18.38.66 | | 472 B |
IP104.18.38.66:0
Hashf00494bd0e393f30b441409539906524 e5446b0b22c985ece9ef1f5ea7028955c66d46f7 345540980b4bf7183c077f09f4d5c67f24d29d9d8a673f53ed3c98f0e920482d
POST / HTTP/1.1
Host: ocsp.sectigochina.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 May 2024 22:58:00 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 22 May 2024 12:42:44 GMT
Expires: Wed, 29 May 2024 12:42:43 GMT
Etag: "e5446b0b22c985ece9ef1f5ea7028955c66d46f7"
Cache-Control: max-age=481518,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8888a5f3295856c1-OSL
|
|
| b.yzcdn.cn/vant/icon-demo-1126.png | 154.85.69.57 | 200 OK | 8.9 kB |
URL GET HTTP/2b.yzcdn.cn/vant/icon-demo-1126.png IP154.85.69.57:443 ASN#139057 LEGEND DYNASTY PTE. LTD.
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuersslTrus Subject*.yzcdn.cn Fingerprint6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf87c46f346a5548224ccbe0b6bd75df5 8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370
GET /vant/icon-demo-1126.png HTTP/1.1
Host: b.yzcdn.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 May 2024 22:58:00 GMT
content-type: image/png
content-length: 8886
server: openresty
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
cache-control: public, max-age=2592000
content-disposition: inline; filename="icon-demo-1126.png"; filename*=utf-8''icon-demo-1126.png
content-md5: +HxG80alVIIkzL4La9dd9Q==
content-transfer-encoding: binary
etag: "Fo6Li9S6PmtshVfZSnJgYf3WJJL9"
last-modified: Mon, 26 Nov 2018 11:08:05 GMT
x-reqid: YyIAAAASg9geDiAX
x-svr: IO
x-qiniu-zone: 0
x-log: X-Log
x-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC165_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC46_DE-Frankfurt-Frankfurt-11-cache-4
x-cache: HIT from BC46_DE-Frankfurt-Frankfurt-11-cache-4(baishan)
X-Firefox-Spdy: h2
|
|
| buarp86xa.cc/invite/i=85786 | 172.67.179.166 | 200 OK | 2.7 kB |
URL User Request GET HTTP/2buarp86xa.cc/invite/i=85786 IP172.67.179.166:443
CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
File typeHTML document, ASCII text, with very long lines (2868), with no line terminators Hash3cbf03c002d025cc3a3719cd6ee03b95 db8e5594040ea929c729f23cadc5b9c50da87440 ed89d2a3edb3d79393865c299f3e63826e2b691c7dcb9cf2318d881bec16a34d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /invite/i=85786 HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 May 2024 22:57:58 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FWLUFPvhKCAuTBqJ5DYqC%2Fk0z5zkw%2BRoqCVeAR5LoFKkggxX38tCiBlUvLPUxmJzRvSHk0jSNZ%2FpPVAOfIHVd95vhhlqi%2BZTD9GrgXXwO6QecebDi1nVjBYjdgOcelI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5e0ead05693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| buarp86xa.cc/css/chunk-vendors.c57533e1.css | 172.67.179.166 | 200 OK | 156 kB |
URL GET HTTP/3buarp86xa.cc/css/chunk-vendors.c57533e1.css IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size156 kB (156544 bytes) Hashebfffebc1f62c3be51082e6595a0a005 e278fbd6fd48150b3f366b50ed388983d934978c f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/chunk-vendors.c57533e1.css HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/invite/i=85786
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:58 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 23 May 2024 17:59:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3919
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j6Wjs8SwzXmA5fLVdljPtZdNYQZf642yg4uo9W0Ni4bR6YsgmZFBGIXOWabD797213JWjUEUsGMQsTMHVEc7AxRjJef3yY2pSbKhLZhvctXD5iy5txUfI9TzGv4q1Sc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8888a5e4bfbb56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buarp86xa.cc/css/app.368308dd.css | 172.67.179.166 | 200 OK | 14 kB |
URL GET HTTP/3buarp86xa.cc/css/app.368308dd.css IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
File typeASCII text, with very long lines (14103), with no line terminators Hash7881d01372856cb3915da547d2299cc1 b6bd104b88f2d4c5c7b21e05c8a57ba94028fedb e98695138c48b51985c319764c37b63521977e38f253e7bf41867a5a54affd11
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/app.368308dd.css HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/invite/i=85786
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:58 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 23 May 2024 17:59:22 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qkaH5OSS22wroMAP1h42r2sFCUtTHSyOKBW8rIFVdyT47G8xNwEnNbPjH%2F5wELYhOtktfkBfWc0z3nayD3xZ7ktaUsrWjo8a%2FKqEvppBqYgd02YQIjgDF8yQMWwj7fc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8888a5e4bfbf56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buarp86xa.cc/img/icons/favicon.svg | 172.67.179.166 | 200 OK | 2.7 kB |
URL GET HTTP/3buarp86xa.cc/img/icons/favicon.svg IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
File typeHTML document, ASCII text, with very long lines (2868), with no line terminators Hash3cbf03c002d025cc3a3719cd6ee03b95 db8e5594040ea929c729f23cadc5b9c50da87440 ed89d2a3edb3d79393865c299f3e63826e2b691c7dcb9cf2318d881bec16a34d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/favicon.svg HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/invite/i=85786
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:58:00 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Thu, 23 May 2024 20:01:05 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qQkNnM3PkG3E%2BRwXTq2isMEstoYXCecnBF%2F6GZJREalFbyiBuBlriAw%2BQhTIglcgQe%2FhBs6DB3guuitmG3IMun0XgEep4jCo6f%2BvjI0%2BomitcTim0dpzC97YYrLIsHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8888a5ebdb4256aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buarp86xa.cc/js/chunk-vendors.ea790e22.js | 172.67.179.166 | 200 OK | 949 kB |
URL GET HTTP/3buarp86xa.cc/js/chunk-vendors.ea790e22.js IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
Size949 kB (949174 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/chunk-vendors.ea790e22.js HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/invite/i=85786
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 23 May 2024 18:15:05 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bq9DCkPOGFDs3YigEWPEhWaZW6BHi2xy2xR2BbAZ85fFfM9PUNVjugZD%2F6%2Bfnn4dC0BNxjnDkaYByz%2BJHRQqowDQjB24Nv5DzhNTf0jxW3wLWEg0%2FH%2B61quTvm%2BfiBI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8888a5e4bfb956aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| buarp86xa.cc/socket.io/?EIO=3&transport=websocket | 172.67.179.166 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1buarp86xa.cc/socket.io/?EIO=3&transport=websocket IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://buarp86xa.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LoCyrGbww2QjuAD4VEPe+g==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 23 May 2024 22:57:59 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: P24D06YslYFdfSL+CmC9M9g+fNg=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWJvqoav3Voz1dCnttJ6EY2f68jhLRQwcvhJymTXZMqxn6TjBbqVDEu3w9hu6pArgmTEQ1kIfJN%2BhyoJ%2FnSVj3EX0zhHiTJIhcbvGJlZXgRb9AcV0H8613e0G5YGG9w%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8888a5e9ec1a1c12-OSL
alt-svc: h3=":443"; ma=86400
|
|
| buarp86xa.cc/getlog | 172.67.179.166 | 200 OK | 12 kB |
IP172.67.179.166:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerLet's Encrypt Subjectbuarp86xa.cc Fingerprint02:82:A6:32:F4:8F:AF:51:A1:E0:7E:58:87:32:F7:2D:EC:FB:36:77 ValidityTue, 21 May 2024 00:37:34 GMT - Mon, 19 Aug 2024 00:37:33 GMT
Hash3aa6b0566335e0de1115ae1810f78e85 d77124c8c0967217b62a8e8373192d6880069c1c 6f76ccbab395c770c5a756dd347867ae1d390ca291a80653bb953f99f568968d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /getlog HTTP/1.1
Host: buarp86xa.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:59 GMT
content-type: application/json; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WvE2j5Utt%2FzWr36tw6%2Fb1%2FwkIfyYB2D%2FAv47VJI6YXBmW9OtFd4QLlXbzeG%2FBPbShEjz6TWuNQJMF%2BbHLtpdzfPe9k8%2BO11Z7U75L0kyM5E50zssp%2BxjzpYTP9qa5Yw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5e9aa3c56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1242864401904832685/1242864437237518356/bur.mp4?ex=664f6335&is=664e11b5&hm=85b77323cb25d08c1db0e54ae8f700beaffcb86694d069053cbbdebce1905ab5& | 162.159.135.233 | 404 Not Found | 0 B |
URL GET HTTP/2cdn.discordapp.com/attachments/1242864401904832685/1242864437237518356/bur.mp4?ex=664f6335&is=664e11b5&hm=85b77323cb25d08c1db0e54ae8f700beaffcb86694d069053cbbdebce1905ab5& IP162.159.135.233:443
Requested byhttps://buarp86xa.cc/invite/i=85786 CertificateIssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /attachments/1242864401904832685/1242864437237518356/bur.mp4?ex=664f6335&is=664e11b5&hm=85b77323cb25d08c1db0e54ae8f700beaffcb86694d069053cbbdebce1905ab5& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://buarp86xa.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 23 May 2024 22:57:59 GMT
content-type: text/plain;charset=UTF-8
content-length: 36
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=twlzK2fgYjA5gsSiOCnKbtm4YAlrb8dcFMNq%2BDvH9p0pEPGN2RjH2avg96AtjtO7APqLsMjT6vKIAsGEqvIfdg4ud3wCPz6VHERiYAmcslKqF1iYblvyUIMQCXvF9vPd2yXvoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=4KBmuZcPZYpdgo5QtE.L6B8oxq55eObjwgFajtF1Rgo-1716505079-1.0.1.1-dQ18X8OAdGkQVxxohXRUNbyEJ8mkM5gYFNcgOneUXcsmEQTlPKhROr0HsRgF89vzdXZR.NVM8E7uA1COSdEclA; path=/; expires=Thu, 23-May-24 23:27:59 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=iE9XeofqNCpCPnKyOjyCZq5Q5BT3p7LQP6YD6oPkmX8-1716505079382-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8888a5ea0fc9b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|