Report - ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk

Report Overview

Visited public
2023-12-05 13:39:19
Tags
URL
ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
Finishing URL
ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
IP / ASN
172.67.148.223
#13335 CLOUDFLARENET
Title
Just a moment...

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ragaz.co.za	unknown	2022-01-25	2022-01-25 11:28:10	2023-12-05 01:05:53	2.7 kB	83 kB	172.67.148.223
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20 07:02:03	2023-12-05 05:09:09	4.5 kB	398 kB	104.17.3.184

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-05	medium	ragaz.co.za	Sinkholed
2023-12-05	medium	ragaz.co.za	Sinkholed
2023-12-05	medium	ragaz.co.za	Sinkholed
2023-12-05	medium	ragaz.co.za	Sinkholed
2023-12-05	medium	ragaz.co.za	Sinkholed
2023-12-05	medium	ragaz.co.za	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk	ScriptElement	4.0 kB	2024-08-20	2024-08-20
Pretty URL ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk IP 172.67.148.223 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 16:41 Last Seen2024-08-20 16:41 Times Seen1 Hash d50ce1a03fb69a1dd0aed9e160d99ac9 e060e3bb39cc05cc37903c45ca457fc1df247b02 4ffb83f18494b2a21603270e54f1075e1089bbdccadaa44bf425736032dfe907 Loading...

	challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=CUdK8&render=explicit	ScriptElement	34 kB	2023-11-30	2023-12-14
Pretty URL challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=CUdK8&render=explicit IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 14:29 Last Seen2023-12-14 14:42 Times Seen11689 Hash 8c90f391245a994ae95e644a587c8626 7bfc99336571d0ccfe38f9e1d18cb26b4adfc316 acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7 Loading...

	ragaz.co.za/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=830cb16078dc5693	ScriptElement	170 kB	2023-12-05	2023-12-05
Pretty URL ragaz.co.za/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=830cb16078dc5693 IP 172.67.148.223 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 14:39 Last Seen2023-12-05 14:39 Times Seen1 Hash 9749c6949a841fec12dd36a94227d1ed 16b2ac6b7d2d580915834afed39be3d6b77ab3ff b521745645e9d08eeef89d9e4bfdb383f2a84e6642d88254c7c87030514f68f8 Loading...

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal	ScriptElement	3.1 kB	2024-08-20	2024-08-20
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 16:41 Last Seen2024-08-20 16:41 Times Seen1 Hash 94a9e52ec3ab696ee10b88c83d908eda 2f2d27c4645435ed338def8ff3c06f0443734699 e0680e0d8a5d338ad225985670c1976fe30c10dc8e3350e77baec1c42c138cb6 Loading...

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830cb1658b8756b7	ScriptElement	187 kB	2023-12-05	2023-12-05
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830cb1658b8756b7 IP 104.17.3.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 14:39 Last Seen2023-12-05 14:39 Times Seen1 Hash c25a349f52290ef98c700c22081bbff5 5a8f85df8c3fc33e56fd328f8530a2cd2dbab745 31ae7d022933ea5e2f1e4369de3e8a1814d8eeb8ac91dd3c1a46aabb1e1fa5bc Loading...

	unknown	Function	26 B	2023-04-11	2025-05-11
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:13 Last Seen2025-05-11 16:01 Times Seen127486 Hash 1c862db5f2555377c2dc1e62ed7b3981 c29e6dc25c08a70995127ec13ded6f80d9a36174 27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07 01:03	2025-05-11 16:00
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 16:00 Times Seen369083 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

		Size	First Seen	Last Seen
	#1 Write - d50fe447c67a515d4ba936505175a8fe	3.6 kB	2023-11-30 14:29	2024-08-20 17:20
Pretty Observations First Seen2023-11-30 14:29 Last Seen2024-08-20 17:20 Times Seen11653 Hash d50fe447c67a515d4ba936505175a8fe 78d20da444441fb45dcf61e09d9bcbc9f01502e2 7dcf7a54137031c03f28f6a33cb62b258023c5de06d504259d5ad39f16b1b85e Loading...

HTTP Transactions (13)

URL IP Response Size

ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk

172.67.148.223

403 Forbidden

3.1 kB

URL User Request GET HTTP/2
ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
IP
172.67.148.223:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5A:A4:1B:DD:A1:D6:DC:F2:C3:06:01:79:F1:80:0E:AE:C9:D5:39:FD
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4720), with no line terminators
Size
3.1 kB (3079 bytes)
Hash
b4fce4404c1b638f9412ce6b06bfc5f6
2bf8f68ece7fe8d6127b35aafd0d0c1b70cc4ee0
7df408593a031bd5032214635b77627129df7565d7dac6600ee7f011099995f2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /c3?utm_term=piano%20free%20mod%20apk HTTP/1.1
Host: ragaz.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Tue, 05 Dec 2023 13:39:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=osZsm1rS3Ck8F%2BiQTn6vZXk2iHUc2PEzOimDhQJY37%2BBd5BFL%2FkC%2FkofT45c78sUeYKauyY8MdgKCjAHkKqenIQ2rKt%2B%2BGI0quN6Ejfu39oso8P2aLhcFf%2B2kHTbQw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830cb16078dc5693-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ragaz.co.za/cdn-cgi/styles/challenges.css

172.67.148.223

200 OK

2.6 kB

URL GET HTTP/1.1
ragaz.co.za/cdn-cgi/styles/challenges.css
IP
172.67.148.223:80
ASN
#13335 CLOUDFLARENET

Requested by
http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk

File type
ASCII text, with very long lines (6600), with no line terminators
Size
2.6 kB (2624 bytes)
Hash
2c78b7f8fa496092bf41d5edd51611e7
8b0b1b276e8194b0a5497db478ec2ea9b4f83c42
2b0bd09c1cc7119d27e45353a59bf6c2721563e1689853ff704057a7439508d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: ragaz.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 13:39:02 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Nov 2023 16:06:21 GMT
ETag: W/"65660ffd-19c8"
Server: cloudflare
CF-RAY: 830cb1622be1b4f4-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Tue, 05 Dec 2023 15:39:02 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip

ragaz.co.za/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=830cb16078dc5693

172.67.148.223

200 OK

56 kB

URL GET HTTP/1.1
ragaz.co.za/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=830cb16078dc5693
IP
172.67.148.223:80
ASN
#13335 CLOUDFLARENET

Requested by
http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk

File type
ASCII text, with very long lines (65536), with no line terminators
Size
56 kB (56089 bytes)
Hash
9749c6949a841fec12dd36a94227d1ed
16b2ac6b7d2d580915834afed39be3d6b77ab3ff
b521745645e9d08eeef89d9e4bfdb383f2a84e6642d88254c7c87030514f68f8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=830cb16078dc5693 HTTP/1.1
Host: ragaz.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk&__cf_chl_rt_tk=UTyYHy8sYjH_Y3qm_M15BYkv1EgjWlbwGoBovrvhhHw-1701783541-0-gaNycGzNBdA
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 13:39:02 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rK4JShD5ztZ4Yo4fBJ0eTFesHwcvX3CSHfw90ZVeW2vpFg5LuggSJ8%2BTtyJzC%2BHYvqnKjIFHnCf%2F36PRnghXZrck6jmeO2w2wlj15Vw64XqX4t%2B21xN8YC2ENSluMw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 830cb1631cedb4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ragaz.co.za/favicon.ico

172.67.148.223

403 Forbidden

3.0 kB

URL GET HTTP/1.1
ragaz.co.za/favicon.ico
IP
172.67.148.223:80
ASN
#13335 CLOUDFLARENET

Requested by
http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4567), with no line terminators
Size
3.0 kB (2997 bytes)
Hash
6889cff4bfd18ebaba39ef04e4e8b875
e02af297e62f17d17bcba9e0087e84a55835843e
8d7614c7ba67a0d1eb58840662a248c56eab853d751a1b7e6895c50f318bb1c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ragaz.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Tue, 05 Dec 2023 13:39:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GdbSo%2FCNq2puN9EARPQ2qDGLbLRGuM7vLh2oKF%2FvlzqeMEzVDrO0Sx4wWUXD3iSspya30nHq5q2Z%2FDcE%2FLIKlPANZWNHlcF3vZ%2FlMc34LJJLPrwQdymYL9q6%2BDvZnA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830cb1635d53b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ragaz.co.za/favicon.ico

172.67.148.223

403 Forbidden

3.0 kB

URL GET HTTP/1.1
ragaz.co.za/favicon.ico
IP
172.67.148.223:80
ASN
#13335 CLOUDFLARENET

Requested by
http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4567), with no line terminators
Size
3.0 kB (2996 bytes)
Hash
4fa1a70b1a096d067189af3e0e7d93d5
eb8c4105d6f4b28b04a3b20112a1d4bbbba8c420
2f51248e46bacc50a19c201ec7bfa961f1821c89add94b25720e15146acc508e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ragaz.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Tue, 05 Dec 2023 13:39:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
cf-mitigated: challenge
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lBd4rJX9zEit6dBHwYKU8zAEAhqypWc2S%2BHIasLWbI2M0veFtqoxh%2B38oavoJgVXq4QGUzuj5UZEQI2t4TOnygHSt6BZEPY5x5i6B8%2BxDaAqJAVdT3wJwhVTQc2Bdg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 830cb163c8dd0b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ragaz.co.za/cdn-cgi/challenge-platform/h/b/flow/ov1/1175444139:1701781758:bs9eBjiWlOzyV5ByxQ4n-g6pf5OGi2LuMfuQmEKYIE4/830cb16078dc5693/660134c2c247abd

172.67.148.223

200 OK

9.5 kB

URL POST HTTP/1.1
ragaz.co.za/cdn-cgi/challenge-platform/h/b/flow/ov1/1175444139:1701781758:bs9eBjiWlOzyV5ByxQ4n-g6pf5OGi2LuMfuQmEKYIE4/830cb16078dc5693/660134c2c247abd
IP
172.67.148.223:80
ASN
#13335 CLOUDFLARENET

Requested by
http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk

File type
ASCII text, with very long lines (12616), with no line terminators
Size
9.5 kB (9528 bytes)
Hash
2994a27acbb267b14c4e69ff2c4a1c39
c61e14593a76aa488205776248a4530641a1256d
6c7ff06a2cf1042e70a8e7ec94d221563a0dea61e35a9843f4654dbcefd506a7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1175444139:1701781758:bs9eBjiWlOzyV5ByxQ4n-g6pf5OGi2LuMfuQmEKYIE4/830cb16078dc5693/660134c2c247abd HTTP/1.1
Host: ragaz.co.za
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
Content-type: application/x-www-form-urlencoded
CF-Challenge: 660134c2c247abd
Content-Length: 1737
Origin: http://ragaz.co.za
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 13:39:02 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-chl-gen: fqvHvbbc42sEcAe0IJ3Yyz2wyFjzGN6QD/zhA7u0h2wDdOaPCJKbFSc4cagppZ9H$zhjoriA2m7egubf5Jgaspw==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=umlFXtISBMMZWYQgS43xo5L8vZ6C8Y1iGkbHf1pEjxghi%2FWoGB1zvWeAiyo3tpSzTkycYfXZOoiiGGpUcze2FKoDKlaNTmzKbScg0AmfcwaWHpAmUoqEP4GHSlqp1A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 830cb164ffebb4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D

104.17.3.184

200 OK

61 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\012- data
Size
61 B (61 bytes)
Hash
9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:39:02 GMT
content-type: image/png
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 830cb1665c5e56b7-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/175149204:1701781621:kEcHWN8mBVbRkYbMflkt6X46R-6Rv7TLImv93FBdxaM/830cb1658b8756b7/08ba64df59405ea

104.17.3.184

200 OK

84 kB

URL POST HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/175149204:1701781621:kEcHWN8mBVbRkYbMflkt6X46R-6Rv7TLImv93FBdxaM/830cb1658b8756b7/08ba64df59405ea
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
84 kB (83516 bytes)
Hash
5f2733bc05816c8d65ca492493dd0c8f
af11855c4ab28da7d833309bdc2abd0fb1b685a6
2947c49e4d0b581888311c3597463e7c47cf2621026ece400c320131e79154f0

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/flow/ov1/175149204:1701781621:kEcHWN8mBVbRkYbMflkt6X46R-6Rv7TLImv93FBdxaM/830cb1658b8756b7/08ba64df59405ea HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 08ba64df59405ea
Content-Length: 3079
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:39:03 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: MuF0UbRSD2eM0h5JBls3P9s+P87KgPHJGDhW1CJC6PuJvX6QVu5NnlryrOQakd33u0ioAARQ3+sdRR7/nP+KSRYywvHqPj0yiRkbmagDqawYTgazYZODRbh7noV6JUeZOs3g3sDnNrdHB0OQKCkD6wCSjE8CFVD37XTZSaLTmhmwgXTZF3q3m+XNgDXwFNxwyQly7hjhx7INhHQhOgN9TxN8mwfwmKeiptKxmx+8hYQT/sT2AOKNTQHSMZBXreFEk80e8bOp4S0NFWudYc9GVgM+Fa7kmn3Chx5tA2rYoVKLI4Wo20ScQxDk4CUvUOGCb848AnHU4fxFQVJ1v3aEnClT1EehVceknfoF2uvbh64=$kjkO4UlJx4Ptitl05/U0Bg==
server: cloudflare
cf-ray: 830cb167ee9c56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/175149204:1701781621:kEcHWN8mBVbRkYbMflkt6X46R-6Rv7TLImv93FBdxaM/830cb1658b8756b7/08ba64df59405ea

104.17.3.184

200 OK

18 kB

URL POST HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/175149204:1701781621:kEcHWN8mBVbRkYbMflkt6X46R-6Rv7TLImv93FBdxaM/830cb1658b8756b7/08ba64df59405ea
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (17840), with no line terminators
Size
18 kB (17840 bytes)
Hash
0e50d1445eecf4572d50d658a236bcad
7f193e6064c5bb1242cb8074921f897bd78e0049
50995e99618970c6f1e19c0630251b9a5e8d103fa138e40cdf2405bb54db40c8

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/flow/ov1/175149204:1701781621:kEcHWN8mBVbRkYbMflkt6X46R-6Rv7TLImv93FBdxaM/830cb1658b8756b7/08ba64df59405ea HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Content-type: application/x-www-form-urlencoded
CF-Challenge: 08ba64df59405ea
Content-Length: 24833
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:39:05 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: UxLwH/2g8KDgtUc5l81QoF4GIbq5VtV94gwklrLJ2VJFuNlunZA+W3hxpdBES+34$649n29tlkVVLCQoMyLWA9w==
server: cloudflare
cf-ray: 830cb1748f1956b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=CUdK8&render=explicit

104.17.3.184

200 OK

34 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=CUdK8&render=explicit
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (33875)
Size
34 kB (33876 bytes)
Hash
8c90f391245a994ae95e644a587c8626
7bfc99336571d0ccfe38f9e1d18cb26b4adfc316
acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7

HTTP Headers

GET /turnstile/v0/b/56d3063b/api.js?onload=CUdK8&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ragaz.co.za
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 05 Dec 2023 13:39:02 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 830cb1640de45693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal

104.17.3.184

200 OK

73 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
http://ragaz.co.za/c3?utm_term=piano%20free%20mod%20apk
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (40091)
Size
73 kB (72895 bytes)
Hash
e24e8b2819081da4e47912379062093d
b12723d8bdf2e635fdc8f74fef9fb27afff3770e
8334f67a5feb91d3e921e820a3aba7bf070b6850827d7d990d6623b642ec96ae

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:39:02 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 830cb1658b8756b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830cb1658b8756b7

104.17.3.184

200 OK

187 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830cb1658b8756b7
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
187 kB (187121 bytes)
Hash
c25a349f52290ef98c700c22081bbff5
5a8f85df8c3fc33e56fd328f8530a2cd2dbab745
31ae7d022933ea5e2f1e4369de3e8a1814d8eeb8ac91dd3c1a46aabb1e1fa5bc

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830cb1658b8756b7 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:39:02 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 830cb1665c5f56b7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/830cb1658b8756b7/1701783543040/_mXsbzCGRdmoxFy

104.17.3.184

200 OK

61 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/830cb1658b8756b7/1701783543040/_mXsbzCGRdmoxFy
IP
104.17.3.184:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
Certificate
IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
PNG image data, 76 x 67, 8-bit/color RGB, non-interlaced\012- data
Size
61 B (61 bytes)
Hash
495b4474c748e0be069be7814bf3f755
65aae3640e045ab3ef356c75261cd66eb4a12997
1f0b9d6f5d52f6e7004fb84f3e5c0367e6a70c68c478b21bc555b025f6191341

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/i/830cb1658b8756b7/1701783543040/_mXsbzCGRdmoxFy HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/hebh8/0x4AAAAAAAAjq6WYeRDKmebM/light/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 05 Dec 2023 13:39:04 GMT
content-type: image/png
server: cloudflare
cf-ray: 830cb16fa91c56b7-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (13)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type