| id-ddasnkee.com/swiss/login.php/ |  172.67.213.237 | 403 Forbidden | 167 B |
URL User Request GET HTTP/3id-ddasnkee.com/swiss/login.php/ IP172.67.213.237:443
CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /swiss/login.php/ HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: gMCgBKy9EhRLfTHt4etzwd1k0IU=knyHzSWEStxd_6f9AWbYmp2hOGQ; keCJvfEoBo9CRZALCiXZt6Liwc8=1715015844; w-F1gyPLJasGALZ3cvCRQS_xu54=1715102244; 5cRy2REhqsgqjBzCaOqiO2G_9Y8=opA5lY4CPHbXvAmJtBLa_Fvi0YM
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Mon, 06 May 2024 17:17:32 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 06 May 2024 18:17:32 GMT
Location: https://id-ddasnkee.com/swiss/login.php/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=80A%2BPj5puyld7d487E2uUKFHRYZDsT%2FIJZ49kN4KnDvLLncjdCRoFIqrWGaRCMBc8YO6g%2Fn3SWkkhko87ofpYQW%2BB3xHFLZrrcXbiXqayQLmDDm4Jja0C7TgMfv8Ksr0Ovo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87fa9fd4ef0cb523-OSL
alt-svc: h2=":443"; ma=60
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.213.237 | 302 Found | 0 B |
URL GET HTTP/3id-ddasnkee.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/swiss/login.php/ CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: gMCgBKy9EhRLfTHt4etzwd1k0IU=knyHzSWEStxd_6f9AWbYmp2hOGQ; keCJvfEoBo9CRZALCiXZt6Liwc8=1715015844; w-F1gyPLJasGALZ3cvCRQS_xu54=1715102244; 5cRy2REhqsgqjBzCaOqiO2G_9Y8=opA5lY4CPHbXvAmJtBLa_Fvi0YM; sdW6zQNg9P8JHEH87_s8aA16Qng=lkLPZiL_UVgRTxwDers97UXe5XU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Mon, 06 May 2024 17:17:32 GMT
content-length: 0
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a%2FIxB7Fw%2BrEAAfRHIsEKWXSmB672IJGEeIvqcE%2FcV8NNUN5aPjC9DDPYCrzryAS1AW2JQLGx31iqjHK%2BY%2BlrpaMss5SdC9jwtrwQQkZkgv6qCJbyyRVN3hwtVfg38Lc0Yok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fa9fd6fcbc569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| id-ddasnkee.com/swiss/login.php/ | 172.67.213.237 | 403 Forbidden | 0 B |
URL User Request GET HTTP/3id-ddasnkee.com/swiss/login.php/ IP172.67.213.237:443
CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /swiss/login.php/ HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
kyd6rMIH36AllaboiP-5e5kzLiQ: 25292529
X-Requested-with: XMLHttpRequest
X-Requested-TimeStamp:
X-Requested-TimeStamp-Expire:
X-Requested-TimeStamp-Combination:
X-Requested-Type: GET
X-Requested-Type-Combination: GET
TVh1qcD5pbAgENLUMthMGkLt0cc: XJrtmWNpKddURFATdaUmQygbTY
Content-type: application/x-www-form-urlencoded
Content-Length: 22
Origin: https://id-ddasnkee.com
DNT: 1
Connection: keep-alive
Referer: https://id-ddasnkee.com/swiss/login.php/
Cookie: gMCgBKy9EhRLfTHt4etzwd1k0IU=knyHzSWEStxd_6f9AWbYmp2hOGQ; keCJvfEoBo9CRZALCiXZt6Liwc8=1715015844; w-F1gyPLJasGALZ3cvCRQS_xu54=1715102244; 5cRy2REhqsgqjBzCaOqiO2G_9Y8=opA5lY4CPHbXvAmJtBLa_Fvi0YM; sdW6zQNg9P8JHEH87_s8aA16Qng=lkLPZiL_UVgRTxwDers97UXe5XU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 06 May 2024 17:17:32 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block, 1; mode=block
set-cookie: CWCGWmkGeK72juCudOzBDa5zJ-c=xGvcNAUiktZj2YWAIWEVXrdZ9fc; path=/; expires=Tue, 07-May-24 17:17:29 GMT; Max-Age=86400;
5-TAkRd7okLVBkyupHWaaBenIZM=1715015849; path=/; expires=Tue, 07-May-24 17:17:29 GMT; Max-Age=86400;
YvQpt-0AEXMTxqENJ0A9aU8vi64=1715102249; path=/; expires=Tue, 07-May-24 17:17:29 GMT; Max-Age=86400;
U3SUjnzda-tcZjkdImNHm0_R7hw=PoOPwQGcFUmDS-bxyEsNGGieWkA; path=/; expires=Tue, 07-May-24 17:17:29 GMT; Max-Age=86400;
Tc9bM7QAlI0cYQ3ZIweZNA2TgzE=vZBeS4R-BiidYYnXE4cBCFrv01s; path=/; expires=Tue, 07-May-24 17:17:29 GMT; Max-Age=86400;
x-frame-options: SAMEORIGIN
cache-control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTUQlBXC8fCcA7GFw5dW7rsKmZOBCLAKSdihe54n%2Bpc6SDri9Nawr86HsKmAmfqIu2Ys4%2Fl69nF2sjBw8xgArxnSIg2%2BCFM%2FZdMPX00bMVCdyn8k2QZ4l7m4L9MMnmS9GV0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87fa9fd6fcb8569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.213.237 | 302 Found | 0 B |
URL GET HTTP/3id-ddasnkee.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/swiss/login.php/ CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: gMCgBKy9EhRLfTHt4etzwd1k0IU=knyHzSWEStxd_6f9AWbYmp2hOGQ; keCJvfEoBo9CRZALCiXZt6Liwc8=1715015844; w-F1gyPLJasGALZ3cvCRQS_xu54=1715102244; 5cRy2REhqsgqjBzCaOqiO2G_9Y8=opA5lY4CPHbXvAmJtBLa_Fvi0YM; sdW6zQNg9P8JHEH87_s8aA16Qng=lkLPZiL_UVgRTxwDers97UXe5XU; CWCGWmkGeK72juCudOzBDa5zJ-c=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 5-TAkRd7okLVBkyupHWaaBenIZM=1715015849; YvQpt-0AEXMTxqENJ0A9aU8vi64=1715102249; U3SUjnzda-tcZjkdImNHm0_R7hw=PoOPwQGcFUmDS-bxyEsNGGieWkA; Tc9bM7QAlI0cYQ3ZIweZNA2TgzE=vZBeS4R-BiidYYnXE4cBCFrv01s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Mon, 06 May 2024 17:17:33 GMT
content-length: 0
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rnd7AEseKpFbxvKiHPDfqcDIfuwyldW0ou7xS0Q38bqE5Qo2IHCqWuk136vQKRz%2B2iGwrzCcKrG9kmaPSQ7%2FbvkypKQ4jyV5l7%2BcouizgzGVPuhGyT14qAh9kjahnx9g1hc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fa9fd9ac855689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/jsd/r/87fa9fd88a215689 | 172.67.213.237 | 200 OK | 0 B |
URL POST HTTP/3id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/jsd/r/87fa9fd88a215689 IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/swiss/login.php/ CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/b/jsd/r/87fa9fd88a215689 HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12167
Origin: https://id-ddasnkee.com
DNT: 1
Connection: keep-alive
Referer: https://id-ddasnkee.com/swiss/login.php/
Cookie: gMCgBKy9EhRLfTHt4etzwd1k0IU=knyHzSWEStxd_6f9AWbYmp2hOGQ; keCJvfEoBo9CRZALCiXZt6Liwc8=1715015844; w-F1gyPLJasGALZ3cvCRQS_xu54=1715102244; 5cRy2REhqsgqjBzCaOqiO2G_9Y8=opA5lY4CPHbXvAmJtBLa_Fvi0YM; sdW6zQNg9P8JHEH87_s8aA16Qng=lkLPZiL_UVgRTxwDers97UXe5XU; CWCGWmkGeK72juCudOzBDa5zJ-c=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 5-TAkRd7okLVBkyupHWaaBenIZM=1715015849; YvQpt-0AEXMTxqENJ0A9aU8vi64=1715102249; U3SUjnzda-tcZjkdImNHm0_R7hw=PoOPwQGcFUmDS-bxyEsNGGieWkA; Tc9bM7QAlI0cYQ3ZIweZNA2TgzE=vZBeS4R-BiidYYnXE4cBCFrv01s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 06 May 2024 17:17:33 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=piMWYrOX5RfsX1ewx1VpTY39RcLjdiddoL1iLrpIlDM-1715015853-1.0.1.1-IxKho9mTAu.m8bAKjKguDi9e7PaCv9LucO4q.9q97aXCbN2URuKpiy8QP0RbJVwVjksni8iqirVcVXRpX98Mdg; path=/; expires=Tue, 06-May-25 17:17:33 GMT; domain=.id-ddasnkee.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lzk3UGbsfjqXonbqTFMQGjzLG3iML%2BE%2Bj38Quq%2BBDTFHsGFycWNOGAF8uyeQTn%2F8Qyj686LZqA3MS7yerzmp3MYoMqINKn7Ql60RhDFHMbMHkbsQ0BeiLLudjithZzNcnzo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87fa9fdacec45689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| id-ddasnkee.com/swiss/login.php/ | 172.67.213.237 | 403 Forbidden | 1.1 kB |
URL User Request GET HTTP/3id-ddasnkee.com/swiss/login.php/ IP172.67.213.237:443
CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
File typeHTML document, ASCII text, with very long lines (1125), with CRLF line terminators Hashbb6980d8e44492d300fe797c9dd860e6 251377165c58ab4b3549b144de92356c0abc7ff5 da984e24232b1add7f1de41829448184f47eaacd1ba35c0e10a6149315df9784
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /swiss/login.php/ HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://id-ddasnkee.com/swiss/login.php/
Cookie: gMCgBKy9EhRLfTHt4etzwd1k0IU=knyHzSWEStxd_6f9AWbYmp2hOGQ; keCJvfEoBo9CRZALCiXZt6Liwc8=1715015844; w-F1gyPLJasGALZ3cvCRQS_xu54=1715102244; 5cRy2REhqsgqjBzCaOqiO2G_9Y8=opA5lY4CPHbXvAmJtBLa_Fvi0YM; sdW6zQNg9P8JHEH87_s8aA16Qng=lkLPZiL_UVgRTxwDers97UXe5XU; CWCGWmkGeK72juCudOzBDa5zJ-c=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 5-TAkRd7okLVBkyupHWaaBenIZM=1715015849; YvQpt-0AEXMTxqENJ0A9aU8vi64=1715102249; U3SUjnzda-tcZjkdImNHm0_R7hw=PoOPwQGcFUmDS-bxyEsNGGieWkA; Tc9bM7QAlI0cYQ3ZIweZNA2TgzE=vZBeS4R-BiidYYnXE4cBCFrv01s
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Mon, 06 May 2024 17:17:33 GMT
content-type: text/html
x-content-type-options: nosniff
x-xss-protection: 1; mode=block, 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D72iQsDWo2vpG6Kto6SjHquKbo4UWvyDdAFQIkBXv3J1PqOV1E06b%2BHvt57mkJ3mlefem6d6U2FEkZcwuMAAixbFlfnSl%2FGb7%2F%2Fjy4AovmRWVkSeD%2FzO1Sz9q7ZzDjnsXgM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87fa9fd88a215689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| id-ddasnkee.com/favicon.ico | 172.67.213.237 | 403 Forbidden | 7.7 kB |
URL GET HTTP/3id-ddasnkee.com/favicon.ico IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/swiss/login.php/ CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash9fe3cb2b7313dc79bb477bc8fde184a7 4d7b3cb41e90618358d0ee066c45c76227a13747 32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://id-ddasnkee.com/swiss/login.php/
Cookie: gMCgBKy9EhRLfTHt4etzwd1k0IU=knyHzSWEStxd_6f9AWbYmp2hOGQ; keCJvfEoBo9CRZALCiXZt6Liwc8=1715015844; w-F1gyPLJasGALZ3cvCRQS_xu54=1715102244; 5cRy2REhqsgqjBzCaOqiO2G_9Y8=opA5lY4CPHbXvAmJtBLa_Fvi0YM; sdW6zQNg9P8JHEH87_s8aA16Qng=lkLPZiL_UVgRTxwDers97UXe5XU; CWCGWmkGeK72juCudOzBDa5zJ-c=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 5-TAkRd7okLVBkyupHWaaBenIZM=1715015849; YvQpt-0AEXMTxqENJ0A9aU8vi64=1715102249; U3SUjnzda-tcZjkdImNHm0_R7hw=PoOPwQGcFUmDS-bxyEsNGGieWkA; Tc9bM7QAlI0cYQ3ZIweZNA2TgzE=vZBeS4R-BiidYYnXE4cBCFrv01s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
date: Mon, 06 May 2024 17:17:33 GMT
content-type: text/html
x-content-type-options: nosniff
x-xss-protection: 1; mode=block, 1; mode=block
cache-control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3f9SFmZuPuHzPn4YzzS7fJbWoJ9MgqrRaVTpImQm6%2FwJNhcd9wzGixpiRWwfF1oaPbZGavX0W2p3mVTtJK9LYUSeDt8j%2BaebtRQXhUUwKgC%2BRSgBApRH6tSqsH6b6GV%2BJnw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fa9fd99c635689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js | 172.67.213.237 | 200 OK | 14 kB |
URL GET HTTP/3id-ddasnkee.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js IP172.67.213.237:443
Requested byhttps://id-ddasnkee.com/swiss/login.php/ CertificateIssuerGoogle Trust Services LLC Subjectid-ddasnkee.com FingerprintA5:61:EB:4A:0F:FA:4E:70:85:A0:C7:E4:9B:A9:DD:AB:C6:0D:A8:50 ValiditySat, 04 May 2024 19:06:00 GMT - Fri, 02 Aug 2024 19:05:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7822), with no line terminators Hashdc049574bd20e3a6dc3d66614a2a582d 7327228bebb1773726ed9ec4e8e08e662185c927 d792d501b25c3e58819191dbd7d8ba963e11d8bdded30ffa707740410801a0ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js HTTP/1.1
Host: id-ddasnkee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: gMCgBKy9EhRLfTHt4etzwd1k0IU=knyHzSWEStxd_6f9AWbYmp2hOGQ; keCJvfEoBo9CRZALCiXZt6Liwc8=1715015844; w-F1gyPLJasGALZ3cvCRQS_xu54=1715102244; 5cRy2REhqsgqjBzCaOqiO2G_9Y8=opA5lY4CPHbXvAmJtBLa_Fvi0YM; sdW6zQNg9P8JHEH87_s8aA16Qng=lkLPZiL_UVgRTxwDers97UXe5XU; CWCGWmkGeK72juCudOzBDa5zJ-c=xGvcNAUiktZj2YWAIWEVXrdZ9fc; 5-TAkRd7okLVBkyupHWaaBenIZM=1715015849; YvQpt-0AEXMTxqENJ0A9aU8vi64=1715102249; U3SUjnzda-tcZjkdImNHm0_R7hw=PoOPwQGcFUmDS-bxyEsNGGieWkA; Tc9bM7QAlI0cYQ3ZIweZNA2TgzE=vZBeS4R-BiidYYnXE4cBCFrv01s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 06 May 2024 17:17:33 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
vary: accept-encoding
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FJp9Ncz1Cfpwyp%2FbCY9MpNLQxr7C5uT%2BoXGV1qo3uk3GEaBKKJ9Vs%2FT7dYiclPpkuA7Odgcev8%2BCYKzyyxL9DYznwWrw%2Bx82Z9vwZU9hWFCcq%2FDyDPcNbvDTT22hNl%2Bwzj0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87fa9fd9dce95689-OSL
alt-svc: h3=":443"; ma=86400
|
|
104.21.23.213