Report - matias.me/nsfw/

Report Overview

Visited public
2025-04-01 17:33:51
Tags
botpanel malware
URL
matias.me/nsfw/
Finishing URL
matias.me/nsfw/
IP / ASN
172.67.148.67
#13335 CLOUDFLARENET
Title
?
Malware - Botnet panel

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
matias.me	unknown	2008-07-09	2017-05-13	2025-03-26	3.7 kB	4.1 MB	104.21.39.188
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24	2025-03-26	496 B	20 kB	104.16.80.73

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	matias.me/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	ScriptElement	12 kB	2023-03-07	2025-06-18
Pretty URL matias.me/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP 104.21.39.188 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-06-18 04:05 Times Seen34129 Hash 88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142 Loading...

	static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	ScriptElement	20 kB	2024-06-07	2025-06-18
Pretty URL static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 IP 104.16.80.73 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-07 09:21 Last Seen2025-06-18 04:48 Times Seen61662 Hash ec18af6d41f6f278b6aed3bdabffa7bc 62c9e2cab76b888829f3c5335e91c320b22329ae 8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f Loading...

	matias.me/nsfw/workspace.a4362daf.js	ScriptElement	11 kB	2024-11-06	2025-06-15
Pretty URL matias.me/nsfw/workspace.a4362daf.js IP 104.21.39.188 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-11-06 15:59 Last Seen2025-06-15 08:34 Times Seen21 Hash 6bbbad1e5990e9708cde3fc60acc17fa 82a6ea0ac828b70c40a1e1eed8dc67c6f02e6c8b 22c87e71113827e68885dfb658a9e2035f56340396185c72d820a6028ce540e0 Loading...

HTTP Transactions (9)

URL IP Response Size

matias.me/nsfw/

104.21.39.188

200 OK

1.4 kB

URL User Request GET
matias.me/nsfw/
IP
104.21.39.188:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectmatias.me
FingerprintF3:17:2A:29:88:58:28:B8:2C:88:D4:BF:C2:A4:FB:32:02:91:F6:5F
ValidityFri, 28 Feb 2025 21:19:56 GMT - Thu, 29 May 2025 22:18:39 GMT

File type
HTML document, ASCII text, with very long lines (1483), with no line terminators
Size
1.4 kB (1400 bytes)
Hash
0ea4b9184916f2a1f48ed2203ca35a7b
b8c3dde055c901ec40007b8d2201fabb3c1df61e
6cd868ea3eda7eb9f35806f5120ee6c4e39f450785093efa9f96c65f333a9b25

HTTP Headers

GET /nsfw/ HTTP/1.1
Host: matias.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 01 Apr 2025 17:33:27 GMT
content-type: text/html; charset=utf-8
content-encoding: br
cf-ray: 9299d4e93dd9fc46-AMS
last-modified: Thu, 07 Nov 2019 20:05:52 GMT
access-control-allow-origin: *
expires: Wed, 19 Mar 2025 22:12:37 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 150E:8C405:387C6C:38DB27:67DB3EFD
age: 0
via: 1.1 varnish
x-served-by: cache-rtm-ehrd2290033-RTM
x-cache: HIT
x-cache-hits: 0
x-timer: S1743528808.890426,VS0,VE101
vary: Accept-Encoding
x-fastly-request-id: 69f230b27059f9382c6ab2d96f1aa703b53d67c8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KMm8Etnn90uVgfi6z7VmyVOsTcROe%2BnSyAXFideDhmnpZg3LFjdVhP8gMPV5ZKPf4zyMbZHjRsnnEO6uVL7Yb2khoB6FdBCOSXjNhQFpsxERfCAoInuv9nCakc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfCacheStatus;desc="DYNAMIC", cfL4;desc="?proto=TCP&rtt=25231&min_rtt=19802&rtt_var=13142&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3268&recv_bytes=1246&delivery_rate=218236&cwnd=244&unsent_bytes=0&cid=cf9fbeee41451a1d&ts=162&x=0"
X-Firefox-Spdy: h2

matias.me/nsfw/reset.6b91d48b.css

104.21.39.188

200 OK

820 B

URL GET
matias.me/nsfw/reset.6b91d48b.css
IP
104.21.39.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://matias.me/nsfw/
Certificate
IssuerGoogle Trust Services
Subjectmatias.me
FingerprintF3:17:2A:29:88:58:28:B8:2C:88:D4:BF:C2:A4:FB:32:02:91:F6:5F
ValidityFri, 28 Feb 2025 21:19:56 GMT - Thu, 29 May 2025 22:18:39 GMT

File type
ASCII text, with very long lines (823), with no line terminators
Size
820 B (820 bytes)
Hash
6457685bc15f633d062f02c5e8e27aab
46d2870d3ed9c239eed08f6b56f80d5560d6afa3
1981c60c49df5696577c5628252ad03ffc9a2fcee57c3d2a62479ef166c17c56

HTTP Headers

GET /nsfw/reset.6b91d48b.css HTTP/1.1
Host: matias.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://matias.me/nsfw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 01 Apr 2025 17:33:28 GMT
content-type: text/css; charset=utf-8
content-length: 494
last-modified: Thu, 07 Nov 2019 20:05:52 GMT
access-control-allow-origin: *
etag: W/"5dc47920-334"
expires: Wed, 19 Mar 2025 22:16:47 GMT
cache-control: max-age=1382400
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: D451:158CB:37B2F1:381118:67DB3EBF
via: 1.1 varnish
age: 417
x-served-by: cache-rtm-ehrd2290049-RTM
x-cache: HIT
x-cache-hits: 1
x-timer: S1742421724.629853,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: fd17894fbd6b848f95a91b72d76b7f027d599f77
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y02mDyXymMFSqarQSMg0xeShC%2BOHAIv%2BtBb94Y86qJAQcC4eMDCDf6EbiXrkwjlkz0ii%2B02hZ1prm6Ut%2BOiEbVqON9rWuddafEvCWUgXBLYTlSLuGmBzaqf5YyE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9299d4ec5e40fc46-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=23421&min_rtt=19728&rtt_var=8267&sent=13&recv=17&lost=0&retrans=0&sent_bytes=4984&recv_bytes=1591&delivery_rate=219604&cwnd=247&unsent_bytes=0&cid=cf9fbeee41451a1d&ts=549&x=0"
X-Firefox-Spdy: h2

static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015

104.16.80.73

200 OK

20 kB

URL GET
static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP
104.16.80.73:443
ASN
#13335 CLOUDFLARENET

Requested by
https://matias.me/nsfw/
Certificate
IssuerGoogle Trust Services
Subjectcloudflareinsights.com
FingerprintAD:90:D1:30:C9:77:BF:DE:1F:AB:8C:0D:6E:67:CB:6A:E8:42:DB:18
ValidityThu, 27 Feb 2025 14:42:34 GMT - Wed, 28 May 2025 15:42:17 GMT

File type
JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Size
20 kB (19948 bytes)
Hash
ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f

HTTP Headers

GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://matias.me
DNT: 1
Connection: keep-alive
Referer: https://matias.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 01 Apr 2025 17:33:28 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 9299d4ecd9e40afa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

matias.me/nsfw/konga.92cb31af.mp3

104.21.39.188

206 Partial Content

4.1 MB

URL GET
matias.me/nsfw/konga.92cb31af.mp3
IP
104.21.39.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://matias.me/nsfw/
Certificate
IssuerGoogle Trust Services
Subjectmatias.me
FingerprintF3:17:2A:29:88:58:28:B8:2C:88:D4:BF:C2:A4:FB:32:02:91:F6:5F
ValidityFri, 28 Feb 2025 21:19:56 GMT - Thu, 29 May 2025 22:18:39 GMT

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo
Size
4.1 MB (4098382 bytes)
Hash
4659616f2ff61c9f841dc13a9cf1a85e
4c615da2166a56494477a5ecdbd9265a34116d18
44d078060ed874d9613ce06bf8a69a71a5deb87777a38f828314ec2b0e0e2e98

HTTP Headers

GET /nsfw/konga.92cb31af.mp3 HTTP/1.1
Host: matias.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://matias.me/nsfw/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 206 Partial Content
date: Tue, 01 Apr 2025 17:33:28 GMT
content-type: audio/mp3
content-length: 4098382
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2B8M%2Fh8O5rcn6e2WSYMep6fjo6ehdEL4vfQBE4CVLds7jLMAmrzjOpBiT93mJkRqnbnZAvobZysgQIwldeTCUuswCoMztQ51C8ff16ydjMv21EIt3xw0%2BMrUQqE%3D"}],"group":"cf-nel","max_age":604800}
x-origin-cache: HIT
last-modified: Thu, 07 Nov 2019 20:05:52 GMT
access-control-allow-origin: *
etag: "5dc47920-3e894e"
expires: Fri, 28 Mar 2025 11:24:17 GMT
cache-control: max-age=1382400
x-proxy-cache: HIT
x-github-request-id: 398C:2530DF:37A5D7:380384:67DB3E9B
via: 1.1 varnish
age: 417
x-served-by: cache-rtm-ehrd2290023-RTM
x-cache: HIT
x-cache-hits: 1
x-timer: S1742421670.619396,VS0,VE7
vary: Accept-Encoding
x-fastly-request-id: 6a61695a3a98437cd7c833ef3a5da4f0e1ba1414
cf-cache-status: HIT
content-range: bytes 0-4098381/4098382
cf-ray: 9299d4edbfa0a4bf-AMS
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400

matias.me/favicon.ico

104.21.39.188

200 OK

5.4 kB

URL GET
matias.me/favicon.ico
IP
104.21.39.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://matias.me/nsfw/
Certificate
IssuerGoogle Trust Services
Subjectmatias.me
FingerprintF3:17:2A:29:88:58:28:B8:2C:88:D4:BF:C2:A4:FB:32:02:91:F6:5F
ValidityFri, 28 Feb 2025 21:19:56 GMT - Thu, 29 May 2025 22:18:39 GMT

File type
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
5.4 kB (5430 bytes)
Hash
7e32175edf6ff3d745595252229bc1f4
e3efab660fc6e891b721ef1077b0dcc21a7441e9
769d0afa927636170236705a8dda233a6e25e034011b3c2c76403e7c69dd7a4f

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: matias.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://matias.me/nsfw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 01 Apr 2025 17:33:28 GMT
content-type: image/vnd.microsoft.icon
content-length: 1645
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VLlf3OnsoTSzYOEuYvjr3hw0qmNeqZvGwE3gWIucObPsuAaU34tAdJmVY%2BURluvLIQwLuvZMY8xTXyay1kVuQpjpzZuhfDZ4MAOld9twI2nNB5UP0LGiwy6LuFk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 22 May 2024 22:49:00 GMT
access-control-allow-origin: *
etag: W/"664e765c-1536"
expires: Wed, 19 Mar 2025 22:13:59 GMT
cache-control: max-age=1382400
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 8715:740A:394084:39A0CB:67DB3F4F
accept-ranges: bytes
age: 416
via: 1.1 varnish
x-served-by: cache-rtm-ehrd2290036-RTM
x-cache: MISS
x-cache-hits: 0
x-timer: S1742421839.435816,VS0,VE105
vary: Accept-Encoding
x-fastly-request-id: bd9d2b456dab813b1d6f428c703175f2f8deb8d2
cf-cache-status: HIT
cf-ray: 9299d4effffaa4bf-AMS
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400

matias.me/cdn-cgi/rum?

104.21.39.188

204 No Content

0 B

URL POST
matias.me/cdn-cgi/rum?
IP
104.21.39.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://matias.me/nsfw/
Certificate
IssuerGoogle Trust Services
Subjectmatias.me
FingerprintF3:17:2A:29:88:58:28:B8:2C:88:D4:BF:C2:A4:FB:32:02:91:F6:5F
ValidityFri, 28 Feb 2025 21:19:56 GMT - Thu, 29 May 2025 22:18:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: matias.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1298
Origin: https://matias.me
DNT: 1
Connection: keep-alive
Referer: https://matias.me/nsfw/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
date: Tue, 01 Apr 2025 17:33:29 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://matias.me
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 9299d4f11842a4bf-AMS
x-frame-options: DENY

matias.me/nsfw/style.e5beaf9c.css

104.21.39.188

200 OK

1.1 kB

URL GET
matias.me/nsfw/style.e5beaf9c.css
IP
104.21.39.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://matias.me/nsfw/
Certificate
IssuerGoogle Trust Services
Subjectmatias.me
FingerprintF3:17:2A:29:88:58:28:B8:2C:88:D4:BF:C2:A4:FB:32:02:91:F6:5F
ValidityFri, 28 Feb 2025 21:19:56 GMT - Thu, 29 May 2025 22:18:39 GMT

File type
ASCII text, with very long lines (1079), with no line terminators
Size
1.1 kB (1078 bytes)
Hash
293daaa944260125f5b2af8e70396c0d
2cec8c421b8de192339e613f855c42f5782f38da
c75b321b635c4deb0eb97b0995c9ccc6b99e6be7a796536f8baaaa139e7f61e9

HTTP Headers

GET /nsfw/style.e5beaf9c.css HTTP/1.1
Host: matias.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://matias.me/nsfw/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 01 Apr 2025 17:33:28 GMT
content-type: text/css; charset=utf-8
content-length: 591
x-origin-cache: HIT
last-modified: Thu, 07 Nov 2019 20:05:52 GMT
access-control-allow-origin: *
etag: W/"5dc47920-436"
expires: Wed, 19 Mar 2025 22:16:47 GMT
cache-control: max-age=1382400
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 9E19:109434:36BD3C:371AA2:67DB3E73
age: 417
via: 1.1 varnish
x-served-by: cache-rtm-ehrd2290034-RTM
x-cache: MISS
x-cache-hits: 0
x-timer: S1742421620.919397,VS0,VE114
vary: Accept-Encoding
x-fastly-request-id: c29f726f092a9370a1ae31b010f6705b4188f0dc
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=olFUKu3b3I%2F7z%2FSNIxVR0DzrXGER1AoVmzk8fzNE6OLmKgkc%2FEGGg8oheKx11S0KpFy7zhwnf%2FsrXOklDSTuXdq9N5bTD8urFr16IMvmeKB8I7DVWcAD3ijMnh8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9299d4ec5e5cfc46-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=23421&min_rtt=19728&rtt_var=8267&sent=21&recv=17&lost=0&retrans=0&sent_bytes=10584&recv_bytes=1591&delivery_rate=219604&cwnd=247&unsent_bytes=0&cid=cf9fbeee41451a1d&ts=554&x=0"
X-Firefox-Spdy: h2

matias.me/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js

104.21.39.188

200 OK

12 kB

URL GET
matias.me/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
104.21.39.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://matias.me/nsfw/
Certificate
IssuerGoogle Trust Services
Subjectmatias.me
FingerprintF3:17:2A:29:88:58:28:B8:2C:88:D4:BF:C2:A4:FB:32:02:91:F6:5F
ValidityFri, 28 Feb 2025 21:19:56 GMT - Thu, 29 May 2025 22:18:39 GMT

File type
JavaScript source, ASCII text, with very long lines (12331)
Size
12 kB (12332 bytes)
Hash
88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: matias.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://matias.me/nsfw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 01 Apr 2025 17:33:28 GMT
content-type: application/javascript
last-modified: Fri, 14 Mar 2025 21:24:18 GMT
etag: W/"67d49e82-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fw4zuki0lis3tTeJ3JYXIpwibciyFtFnxHnV%2BbJIXfltzQKWmtAc3Ws%2FXRnuD4UNpR2BK7MV0cQzZC9oADX40Qv6X4kplFTcDuBqHPrn%2BaMghxGs8WGarrAFOnk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9299d4ec6e7afc46-AMS
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 03 Apr 2025 17:33:28 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2

matias.me/nsfw/workspace.a4362daf.js

104.21.39.188

200 OK

11 kB

URL GET
matias.me/nsfw/workspace.a4362daf.js
IP
104.21.39.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://matias.me/nsfw/
Certificate
IssuerGoogle Trust Services
Subjectmatias.me
FingerprintF3:17:2A:29:88:58:28:B8:2C:88:D4:BF:C2:A4:FB:32:02:91:F6:5F
ValidityFri, 28 Feb 2025 21:19:56 GMT - Thu, 29 May 2025 22:18:39 GMT

File type

Size
11 kB (10710 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /nsfw/workspace.a4362daf.js HTTP/1.1
Host: matias.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://matias.me/nsfw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 01 Apr 2025 17:33:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 4230
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fyN80GrxKd6zEuQ1jqEVOoRkpO30fTtiv6acoS0rxtuvHW6dDVA9%2FbQN%2FMlWESWEYzjBzMf1wrak89WmaWjOGZDEpzwqu4D2oAMhzF6Ghnpqh%2FP9wtO1IUl%2Fgrs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 07 Nov 2019 20:05:52 GMT
access-control-allow-origin: *
etag: W/"5dc47920-29d6"
expires: Wed, 19 Mar 2025 22:16:48 GMT
cache-control: max-age=1382400
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 4D2B:2E8FF9:3660E8:36BE23:67DB3E73
age: 417
via: 1.1 varnish
x-served-by: cache-rtm-ehrd2290022-RTM
x-cache: MISS
x-cache-hits: 0
x-timer: S1742421620.202658,VS0,VE108
vary: Accept-Encoding
x-fastly-request-id: f1620c40643d8b50b19348acc0d58f8042e548d8
cf-cache-status: HIT
accept-ranges: bytes
cf-ray: 9299d4edffaca4bf-AMS
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL POST

IP