Report - t.ly/2vTzZ

Report Overview

Visited public
2023-10-23 21:13:14
Tags
URL
t.ly/2vTzZ_
Finishing URL
redfb.top/REDSTONE/
IP / ASN
104.26.12.201
#13335 CLOUDFLARENET
Title
403 Forbidden

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-10-22 18:12:20	694 B	1.4 kB	142.250.74.131
redfb.top	unknown	2023-10-23	2023-10-23 18:10:38	2023-10-23 18:10:39	5.4 kB	20 kB	172.67.135.59

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-23 21:12:57	low	Client IP	Internal IP	ET INFO URL Shortening Service Domain in DNS Lookup (t .ly)
2023-10-23 21:12:57	low	Client IP	Internal IP	ET INFO URL Shortening Service Domain in DNS Lookup (t .ly)
2023-10-23 21:12:57	low	Client IP	104.26.13.201	ET INFO Observed URL Shortening Service Domain (t .ly in TLS SNI)
2023-10-23 21:12:58	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile
2023-10-23 21:12:58	medium	Client IP	172.67.135.59	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	redfb.top/REDSTONE/	ScriptElement	1.1 kB	2024-08-21	2024-08-21
Pretty URL redfb.top/REDSTONE/ IP 172.67.135.59 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-21 03:41 Last Seen2024-08-21 03:41 Times Seen1 Hash afe73f400fd54cf4edb25fae88659743 0fdd1849157f4d89f266c0f5f92e94107d2d7da9 7707f144e3476f751e20435b86069d061ac2c166d3d00810099061c3c8097933 Loading...

	unknown	ScriptElement	247 B	2024-08-21	2024-08-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-21 03:41 Last Seen2024-08-21 03:41 Times Seen1 Hash dfbf98eda00866fb8f99c21b7c1e7419 a816ecaae91edee20d96822744a84833c0e51dba dd4c966b70db2de6e0c59c93a6c1d414b742d701ce57a7a5f50803881d273273 Loading...

	redfb.top/cdn-cgi/challenge-platform/scripts/jsd/main.js	ScriptElement	7.4 kB	2023-10-23	2023-10-23
Pretty URL redfb.top/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 172.67.135.59 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-23 23:13 Last Seen2023-10-23 23:13 Times Seen1 Hash 12531314978ba7034fe9b19f27147977 63043912600fce33a0b575132b69e65b54489c83 1f9c5fe55c8b8b3fc086a33aa4c925033b9cb1d876b96380f8507e57f54dfbdb Loading...

		Size	First Seen	Last Seen
	#1 Eval - 7fd138b76fbafab419b8792176ce8fbe	4.4 kB	2024-08-21 03:41	2024-08-21 03:41
Pretty Observations First Seen2024-08-21 03:41 Last Seen2024-08-21 03:41 Times Seen1 Hash 7fd138b76fbafab419b8792176ce8fbe e115e288db0e9d737084fde39e55feb2274d6fc6 06f7095ebffe07f163fb8988659ec18e91bc7c100967ef905fa8f8793c024468 Loading...

HTTP Transactions (8)

URL IP Response Size

ocsp.pki.goog/s/gts1p5/rY6OmNP0xUs

142.250.74.131

471 B

URL
ocsp.pki.goog/s/gts1p5/rY6OmNP0xUs
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5d496866b3769d353f22841e1c63c2dd
48b4abde895c745e791f69fd6bbcb4baca0c2a95
68b7d19424ca6f511135de681fd7562b56db496522449b61d870d811d7e03cfd

HTTP Headers

POST /s/gts1p5/rY6OmNP0xUs HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 23 Oct 2023 21:12:57 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

redfb.top/REDSTONE/

172.67.135.59

403 Forbidden

0 B

URL User Request GET HTTP/3
redfb.top/REDSTONE/
IP
172.67.135.59:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectredfb.top
Fingerprint07:05:07:F1:34:62:13:B3:A4:AA:BE:06:17:1D:21:75:B2:23:8B:88
ValidityMon, 23 Oct 2023 15:07:04 GMT - Sun, 21 Jan 2024 15:07:03 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET /REDSTONE/ HTTP/1.1
Host: redfb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: fbdRVRYTxTRkFqO9FbhydG_lOWo=u2KatIPDAbFIVbIvMOXEQmieiF4; VJCnVPs1DdQzMAUACyl-uhy_MkQ=1698095574; 8N58z4jATBrgvq5nVkZHuQRQSyY=1698181974; a_I8nDKN9D-Y1T721nNIdu9InH4=VdK87qoTtjqWgALfuNPpYLxM8jQ
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Mon, 23 Oct 2023 21:12:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 23 Oct 2023 22:12:58 GMT
Location: https://redfb.top/REDSTONE/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u1pt%2FPxOo7xzIsHhc%2FqmnnZd2vx5OlbzCwxyQfIUQDnYrnPtVehmUp2OFxAngjo07yAVSaPSM4sBdTlEHnOMUUfdnXwlR%2Fu8%2ByodlkkzYIPjGdnVEhuC61fE3f8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81acfb328c2d56cc-OSL
alt-svc: h2=":443"; ma=60

redfb.top/REDSTONE/

172.67.135.59

403 Forbidden

0 B

URL User Request GET HTTP/3
redfb.top/REDSTONE/
IP
172.67.135.59:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectredfb.top
Fingerprint07:05:07:F1:34:62:13:B3:A4:AA:BE:06:17:1D:21:75:B2:23:8B:88
ValidityMon, 23 Oct 2023 15:07:04 GMT - Sun, 21 Jan 2024 15:07:03 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

POST /REDSTONE/ HTTP/1.1
Host: redfb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
vNFRTlHimMT1kKBRY-HK773Shw: 42333045
X-Requested-with: XMLHttpRequest
X-Requested-TimeStamp: 
X-Requested-TimeStamp-Expire: 
X-Requested-TimeStamp-Combination: 
X-Requested-Type: GET
X-Requested-Type-Combination: GET
gGVuXR9Sld3SOawnT4dJcypFDA: rXdDXE6y9C1Y7Lq6uTWKZXceuUc
Content-type: application/x-www-form-urlencoded
Content-Length: 22
Origin: https://redfb.top
DNT: 1
Connection: keep-alive
Referer: https://redfb.top/REDSTONE/
Cookie: fbdRVRYTxTRkFqO9FbhydG_lOWo=u2KatIPDAbFIVbIvMOXEQmieiF4; VJCnVPs1DdQzMAUACyl-uhy_MkQ=1698095574; 8N58z4jATBrgvq5nVkZHuQRQSyY=1698181974; a_I8nDKN9D-Y1T721nNIdu9InH4=VdK87qoTtjqWgALfuNPpYLxM8jQ; dBj_FEYpmzXPLq_gK-ksR7lXt-E=lkLPZiL_UVgRTxwDers97UXe5XU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Mon, 23 Oct 2023 21:12:58 GMT
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
set-cookie: Fc0jHEfHqEEQz-8gCMZG75jh4UQ=5wiQ_-f41RqPzSGzn-6WoFUOfFU; path=/; expires=Tue, 24-Oct-23 21:12:58 GMT; Max-Age=86400;
SG48-ga0k3AIjEivt_hoEsRpR3w=1698095578; path=/; expires=Tue, 24-Oct-23 21:12:58 GMT; Max-Age=86400;
Ee7PvES2O-L-hbZ2Dqw30zKYHpc=1698181978; path=/; expires=Tue, 24-Oct-23 21:12:58 GMT; Max-Age=86400;
9Z8n8smkWQWouJze3t4DxKRt_GQ=gjHKREJ0bxL7JhzYvKDQmoW-tZk; path=/; expires=Tue, 24-Oct-23 21:12:58 GMT; Max-Age=86400;
i_i0kqaN2EGK9c5_ruG-x2ZkSbA=dic9hJKySMhbajB1jFIq7DSpFV4; path=/; expires=Tue, 24-Oct-23 21:12:58 GMT; Max-Age=86400;
x-frame-options: SAMEORIGIN
cache-control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: 0
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BEHwEJp68dug0mRcSmd1qctK%2BMnh052U7xeFKCUhhwFpFayTHe09eXJo0EYsCV6BBJDnyw3PU1%2Fh9kysw%2FSuqloIqVHKTWJL8o3EnqDd2IhvjB%2BwhT4dtgeRPqM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81acfb33cb4e56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/rY6OmNP0xUs

142.250.74.131

471 B

URL
ocsp.pki.goog/s/gts1p5/rY6OmNP0xUs
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5d496866b3769d353f22841e1c63c2dd
48b4abde895c745e791f69fd6bbcb4baca0c2a95
68b7d19424ca6f511135de681fd7562b56db496522449b61d870d811d7e03cfd

HTTP Headers

POST /s/gts1p5/rY6OmNP0xUs HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 23 Oct 2023 21:12:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

redfb.top/favicon.ico

172.67.135.59

403 Forbidden

146 B

URL GET HTTP/3
redfb.top/favicon.ico
IP
172.67.135.59:443
ASN
#13335 CLOUDFLARENET

Requested by
https://redfb.top/REDSTONE/
Certificate
IssuerGoogle Trust Services LLC
Subjectredfb.top
Fingerprint07:05:07:F1:34:62:13:B3:A4:AA:BE:06:17:1D:21:75:B2:23:8B:88
ValidityMon, 23 Oct 2023 15:07:04 GMT - Sun, 21 Jan 2024 15:07:03 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
bcfacc6f2d2ee7cd5e014be08612f93e
7bb6f49a83b5186d5f8598e852bfbeee102d8a4d
ef1a3d1af87d9d441ef37f001f2ffb6900ef0a7a4884a5ef165bc2b09e224b38

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: redfb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://redfb.top/REDSTONE/
Cookie: fbdRVRYTxTRkFqO9FbhydG_lOWo=u2KatIPDAbFIVbIvMOXEQmieiF4; VJCnVPs1DdQzMAUACyl-uhy_MkQ=1698095574; 8N58z4jATBrgvq5nVkZHuQRQSyY=1698181974; a_I8nDKN9D-Y1T721nNIdu9InH4=VdK87qoTtjqWgALfuNPpYLxM8jQ; dBj_FEYpmzXPLq_gK-ksR7lXt-E=lkLPZiL_UVgRTxwDers97UXe5XU; Fc0jHEfHqEEQz-8gCMZG75jh4UQ=5wiQ_-f41RqPzSGzn-6WoFUOfFU; SG48-ga0k3AIjEivt_hoEsRpR3w=1698095578; Ee7PvES2O-L-hbZ2Dqw30zKYHpc=1698181978; 9Z8n8smkWQWouJze3t4DxKRt_GQ=gjHKREJ0bxL7JhzYvKDQmoW-tZk; i_i0kqaN2EGK9c5_ruG-x2ZkSbA=dic9hJKySMhbajB1jFIq7DSpFV4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Mon, 23 Oct 2023 21:12:58 GMT
content-type: text/html
x-content-type-options: nosniff, nosniff
x-xss-protection: 1; mode=block, 1; mode=block
cache-control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IJATTLJU3LZK%2FeyNRmaiJsIp6zsH%2FQAraRepnT2RYMBUwmrDt4z6wN9CN6mz7u5rq09mwCk6KIJkMm65VHUl2Qf60gezolXwu6v66tZOk%2BC5JjAsnGvnFcBDJBw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81acfb360e805690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

redfb.top/cdn-cgi/challenge-platform/scripts/jsd/main.js

172.67.135.59

302 Found

7.4 kB

URL GET HTTP/3
redfb.top/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
172.67.135.59:443
ASN
#13335 CLOUDFLARENET

Requested by
https://redfb.top/REDSTONE/
Certificate
IssuerGoogle Trust Services LLC
Subjectredfb.top
Fingerprint07:05:07:F1:34:62:13:B3:A4:AA:BE:06:17:1D:21:75:B2:23:8B:88
ValidityMon, 23 Oct 2023 15:07:04 GMT - Sun, 21 Jan 2024 15:07:03 GMT

File type

Size
7.4 kB (7356 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: redfb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: fbdRVRYTxTRkFqO9FbhydG_lOWo=u2KatIPDAbFIVbIvMOXEQmieiF4; VJCnVPs1DdQzMAUACyl-uhy_MkQ=1698095574; 8N58z4jATBrgvq5nVkZHuQRQSyY=1698181974; a_I8nDKN9D-Y1T721nNIdu9InH4=VdK87qoTtjqWgALfuNPpYLxM8jQ; dBj_FEYpmzXPLq_gK-ksR7lXt-E=lkLPZiL_UVgRTxwDers97UXe5XU; Fc0jHEfHqEEQz-8gCMZG75jh4UQ=5wiQ_-f41RqPzSGzn-6WoFUOfFU; SG48-ga0k3AIjEivt_hoEsRpR3w=1698095578; Ee7PvES2O-L-hbZ2Dqw30zKYHpc=1698181978; 9Z8n8smkWQWouJze3t4DxKRt_GQ=gjHKREJ0bxL7JhzYvKDQmoW-tZk; i_i0kqaN2EGK9c5_ruG-x2ZkSbA=dic9hJKySMhbajB1jFIq7DSpFV4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 302 Found
date: Mon, 23 Oct 2023 21:12:58 GMT
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/7ff8d35b/main.js
vary: accept-encoding
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=POSNIVqIpsaDDgOhodSM%2FAPFN64u6EUbljLIx3tz8yxs3jL9r4eJHmosXxWBxf85D6ADAeske45BJ3XFu%2Fz5kiEHkvYX0b01kG1pSDpsciIN4v2oQR6ZdavYpbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81acfb360e815690-OSL
alt-svc: h3=":443"; ma=86400

redfb.top/cdn-cgi/challenge-platform/h/b/scripts/jsd/7ff8d35b/main.js

172.67.135.59

200 OK

7.4 kB

URL GET HTTP/3
redfb.top/cdn-cgi/challenge-platform/h/b/scripts/jsd/7ff8d35b/main.js
IP
172.67.135.59:443
ASN
#13335 CLOUDFLARENET

Requested by
https://redfb.top/REDSTONE/
Certificate
IssuerGoogle Trust Services LLC
Subjectredfb.top
Fingerprint07:05:07:F1:34:62:13:B3:A4:AA:BE:06:17:1D:21:75:B2:23:8B:88
ValidityMon, 23 Oct 2023 15:07:04 GMT - Sun, 21 Jan 2024 15:07:03 GMT

File type
ASCII text, with very long lines (7356), with no line terminators
Size
7.4 kB (7356 bytes)
Hash
12531314978ba7034fe9b19f27147977
63043912600fce33a0b575132b69e65b54489c83
1f9c5fe55c8b8b3fc086a33aa4c925033b9cb1d876b96380f8507e57f54dfbdb

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/7ff8d35b/main.js HTTP/1.1
Host: redfb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: fbdRVRYTxTRkFqO9FbhydG_lOWo=u2KatIPDAbFIVbIvMOXEQmieiF4; VJCnVPs1DdQzMAUACyl-uhy_MkQ=1698095574; 8N58z4jATBrgvq5nVkZHuQRQSyY=1698181974; a_I8nDKN9D-Y1T721nNIdu9InH4=VdK87qoTtjqWgALfuNPpYLxM8jQ; dBj_FEYpmzXPLq_gK-ksR7lXt-E=lkLPZiL_UVgRTxwDers97UXe5XU; Fc0jHEfHqEEQz-8gCMZG75jh4UQ=5wiQ_-f41RqPzSGzn-6WoFUOfFU; SG48-ga0k3AIjEivt_hoEsRpR3w=1698095578; Ee7PvES2O-L-hbZ2Dqw30zKYHpc=1698181978; 9Z8n8smkWQWouJze3t4DxKRt_GQ=gjHKREJ0bxL7JhzYvKDQmoW-tZk; i_i0kqaN2EGK9c5_ruG-x2ZkSbA=dic9hJKySMhbajB1jFIq7DSpFV4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Oct 2023 21:12:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OcNqXIoMYL7HYG%2Fpnbnt9gjm31xL4rF6w4ehxCyX4sood0WfgzNhn8fA%2FVPlohuas3K%2BKDDGuZdwpfKqIAe54r0dwP2gPEvgHk6mWkW7q7wpCWVYK2H6UPOoJVQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81acfb362e8d5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

redfb.top/cdn-cgi/challenge-platform/h/b/jsd/r/81acfb353dc75690

172.67.135.59

200 OK

0 B

URL POST HTTP/3
redfb.top/cdn-cgi/challenge-platform/h/b/jsd/r/81acfb353dc75690
IP
172.67.135.59:443
ASN
#13335 CLOUDFLARENET

Requested by
https://redfb.top/REDSTONE/
Certificate
IssuerGoogle Trust Services LLC
Subjectredfb.top
Fingerprint07:05:07:F1:34:62:13:B3:A4:AA:BE:06:17:1D:21:75:B2:23:8B:88
ValidityMon, 23 Oct 2023 15:07:04 GMT - Sun, 21 Jan 2024 15:07:03 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/jsd/r/81acfb353dc75690 HTTP/1.1
Host: redfb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12179
Origin: https://redfb.top
DNT: 1
Connection: keep-alive
Referer: https://redfb.top/REDSTONE/
Cookie: fbdRVRYTxTRkFqO9FbhydG_lOWo=u2KatIPDAbFIVbIvMOXEQmieiF4; VJCnVPs1DdQzMAUACyl-uhy_MkQ=1698095574; 8N58z4jATBrgvq5nVkZHuQRQSyY=1698181974; a_I8nDKN9D-Y1T721nNIdu9InH4=VdK87qoTtjqWgALfuNPpYLxM8jQ; dBj_FEYpmzXPLq_gK-ksR7lXt-E=lkLPZiL_UVgRTxwDers97UXe5XU; Fc0jHEfHqEEQz-8gCMZG75jh4UQ=5wiQ_-f41RqPzSGzn-6WoFUOfFU; SG48-ga0k3AIjEivt_hoEsRpR3w=1698095578; Ee7PvES2O-L-hbZ2Dqw30zKYHpc=1698181978; 9Z8n8smkWQWouJze3t4DxKRt_GQ=gjHKREJ0bxL7JhzYvKDQmoW-tZk; i_i0kqaN2EGK9c5_ruG-x2ZkSbA=dic9hJKySMhbajB1jFIq7DSpFV4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 23 Oct 2023 21:12:58 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=zbTuVw6v8xIOOQRCVr5quSSnM.g6TRRDdER8PY4BoRY-1698095578-0-1-69b0ef05.6b0d8b6b.438cce4a-0.2.1698095578; path=/; expires=Tue, 22-Oct-24 21:12:58 GMT; domain=.redfb.top; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yPYIrgjJgvaDuivW5u5QPnqnDnZ1FWzAbzFHVTGm3g8PXxPE7LN6%2FGnONLqtZwR216%2BFuiX7zgYSYaE5QSk9zy1%2B4PLzckAx1mLCT2%2FTuRfafhsy1mY6VZSEfBE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81acfb372f5d5690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate