Report - Godleaks.cc

Report Overview

Visited public
2024-10-16 06:27:34
Tags
URL
Godleaks.cc
Finishing URL
godleaks.cc/register
IP / ASN
104.21.83.3
#13335 CLOUDFLARENET
Title
Club Penguin

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
godleaks.cc	unknown	2024-10-15	2024-10-15	2024-10-15	4.3 kB	2.4 MB	172.67.166.116

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	godleaks.cc/js/main.js	ScriptElement	1.8 kB	2024-08-31	2024-11-07
Pretty URL godleaks.cc/js/main.js IP 172.67.166.116 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-31 14:15 Last Seen2024-11-07 12:40 Times Seen47 Hash 2d2a04629354b97365fb7de65278e6f2 5e0a03147034a2bd84abf061affe755452e21422 05db2f8843a3c30ac4b322e406ba52ae3949df7f4d490037782cf24e12ea26ef Loading...

HTTP Transactions (8)

	URL	IP	Response	Size
	godleaks.cc/favicon.ico	172.67.166.116	301 Moved Permanently	43 B
URL GET HTTP/3 godleaks.cc/favicon.ico IP 172.67.166.116:443 ASN #13335 CLOUDFLARENET Requested by https://godleaks.cc/register Certificate IssuerGoogle Trust Services Subjectgodleaks.cc FingerprintD8:E3:31:BB:72:3C:F9:4B:39:87:33:12:39:75:B0:48:5F:62:2E:21 ValidityMon, 14 Oct 2024 23:52:06 GMT - Sun, 12 Jan 2025 23:52:05 GMT File type ASCII text, with no line terminators Size 43 B (43 bytes) Hash 55522fdc37f6dca7385b20332322e842 cae00cb10d2e6ce6b7122cbbbaa6d230bdd3e3a8 3399c8130bc08a1f67dd11f6e2c28c0a1f77ae9a35ad0c45b6f6ca6685d60e21 HTTP Headers GET /favicon.ico HTTP/1.1 Host: godleaks.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://godleaks.cc/register Cookie: connect.sid=s%3AUX1LrC7LryNQ8DtczXwXTMccwBm0ig7d.1omw1hjkVJLjsrXKfrqVzGwkPjbcASqf1kOGifSQsak Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 301 Moved Permanently date: Wed, 16 Oct 2024 05:24:19 GMT content-type: text/plain; charset=utf-8 content-length: 43 x-powered-by: Express location: /register vary: Accept, Accept-Encoding cache-control: max-age=14400 cf-cache-status: EXPIRED report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2FGj4abQaybawUHOwQA4yGrn3F8E6GO5UAoUwld%2BF77qCQzO8%2FCIn3ElcLBsFb%2BBALSPriGgQ%2Bean90n1jCr0JYzhkoib8l9N0v7JQQKY8XEnHKeh1EFxbDvkk5JUA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 8d359f323f7056c1-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri

	godleaks.cc/js/main.js	172.67.166.116	200 OK	1.8 kB
URL GET HTTP/3 godleaks.cc/js/main.js IP 172.67.166.116:443 ASN #13335 CLOUDFLARENET Requested by https://godleaks.cc/register Certificate IssuerGoogle Trust Services Subjectgodleaks.cc FingerprintD8:E3:31:BB:72:3C:F9:4B:39:87:33:12:39:75:B0:48:5F:62:2E:21 ValidityMon, 14 Oct 2024 23:52:06 GMT - Sun, 12 Jan 2025 23:52:05 GMT File type ASCII text, with very long lines (1976), with no line terminators Size 1.8 kB (1844 bytes) Hash 2ae5c51e784a433b20dd9668a2355614 ad4a6e51cd6ce17420d607a42b39eb1b9bc9a4c7 18e630cee4ffe7fd6c5e5e6ef4d2b595b068b77e26068262753c98f74bca9c20 HTTP Headers `GET /js/main.js HTTP/1.1 Host: godleaks.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://godleaks.cc/register Cookie: connect.sid=s%3AUX1LrC7LryNQ8DtczXwXTMccwBm0ig7d.1omw1hjkVJLjsrXKfrqVzGwkPjbcASqf1kOGifSQsak Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 16 Oct 2024 05:24:18 GMT content-type: application/javascript; charset=UTF-8 x-powered-by: Express cache-control: public, max-age=14400 last-modified: Thu, 29 Aug 2024 18:41:47 GMT etag: W/"734-1919f719761" cf-cache-status: EXPIRED report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qnCVrfcFTFxxScDphKpY9Gd%2B5zEHTCsAxnHRLadnKKioKM5xrWyHQnVN%2BqGjcxxw0uITYbKw7aSedzMN5ZOuOqwTKHCU2Mowd%2F8Gurl9BNJnzd8YR8K5AP1XWSSsxg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8d359f2a9b6f56c1-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri

	godleaks.cc/img/Avatar.png	0.0.0.0	200 OK	0 B
URL GET godleaks.cc/img/Avatar.png IP 0.0.0.0:0 ASN #0 Requested by https://godleaks.cc/register Certificate IssuerGoogle Trust Services Subjectgodleaks.cc FingerprintD8:E3:31:BB:72:3C:F9:4B:39:87:33:12:39:75:B0:48:5F:62:2E:21 ValidityMon, 14 Oct 2024 23:52:06 GMT - Sun, 12 Jan 2025 23:52:05 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /img/Avatar.png HTTP/1.1 Host: godleaks.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://godleaks.cc/css/main.css Cookie: connect.sid=s%3AUX1LrC7LryNQ8DtczXwXTMccwBm0ig7d.1omw1hjkVJLjsrXKfrqVzGwkPjbcASqf1kOGifSQsak Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Wed, 16 Oct 2024 05:24:20 GMT content-type: image/png content-length: 1998490 x-powered-by: Express cache-control: public, max-age=14400 last-modified: Mon, 05 Aug 2024 14:59:14 GMT etag: W/"1e7e9a-191230d3849" cf-cache-status: EXPIRED accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eKGAZHejbvcWwwW4D%2FyWscxFCK173Hab2Fg40AXDXzU9ZObciMgmCM0%2FPNb9dHHJMU3TQgUUOsC9GKSdwp66DM2PuK6HlpWWZ1xx6Vr2fIaXTeJ9v0FtPJhDI%2FOrZQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8d359f30ad3156c1-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri

	godleaks.cc/mov/intro.mp4	172.67.166.116	206 Partial Content	2.3 MB
URL GET HTTP/3 godleaks.cc/mov/intro.mp4 IP 172.67.166.116:443 ASN #13335 CLOUDFLARENET Requested by https://godleaks.cc/register Certificate IssuerGoogle Trust Services Subjectgodleaks.cc FingerprintD8:E3:31:BB:72:3C:F9:4B:39:87:33:12:39:75:B0:48:5F:62:2E:21 ValidityMon, 14 Oct 2024 23:52:06 GMT - Sun, 12 Jan 2025 23:52:05 GMT File type Size 2.3 MB (2321077 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /mov/intro.mp4 HTTP/1.1 Host: godleaks.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: video/webm,video/ogg,video/;q=0.9,application/ogg;q=0.7,audio/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Range: bytes=0- DNT: 1 Connection: keep-alive Referer: https://godleaks.cc/register Cookie: connect.sid=s%3AUX1LrC7LryNQ8DtczXwXTMccwBm0ig7d.1omw1hjkVJLjsrXKfrqVzGwkPjbcASqf1kOGifSQsak Sec-Fetch-Dest: video Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Accept-Encoding: identity Pragma: no-cache Cache-Control: no-cache HTTP/3 206 Partial Content date: Wed, 16 Oct 2024 05:24:18 GMT content-type: video/mp4 content-length: 2797442 x-powered-by: Express cache-control: public, max-age=14400 last-modified: Tue, 15 Oct 2024 01:16:40 GMT etag: W/"2aaf82-1928dbfa59b" cf-cache-status: HIT age: 2496 content-range: bytes 0-2797441/2797442 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qvDV7DSU3I0uaMXecAOnnpFATjyQGNM67HQf2w7BKgtTBrKXBPQxl2Db7jG91WAHPHXjn%2BPYKYCXDx9iJ78jufCRaQrgzgtkGxcLJDiq619zsptxPIztpZFH8cXkzg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8d359f30fdba56c1-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri

	godleaks.cc/register	172.67.166.116	200 OK	6.4 kB
URL GET HTTP/3 godleaks.cc/register IP 172.67.166.116:443 ASN #13335 CLOUDFLARENET Requested by https://godleaks.cc/register Certificate IssuerGoogle Trust Services Subjectgodleaks.cc FingerprintD8:E3:31:BB:72:3C:F9:4B:39:87:33:12:39:75:B0:48:5F:62:2E:21 ValidityMon, 14 Oct 2024 23:52:06 GMT - Sun, 12 Jan 2025 23:52:05 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (7000), with no line terminators Size 6.4 kB (6436 bytes) Hash d11837b6c29b89ad03324f0128ba831b 9da5ebd2d9715fa49c94992ad9310a205b6f69ad c5dc14e6b153e4967aec517a697d700e8bac6b3d3849ab4caa6874772eb21c8d HTTP Headers GET /register HTTP/1.1 Host: godleaks.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://godleaks.cc/register DNT: 1 Connection: keep-alive Cookie: connect.sid=s%3AUX1LrC7LryNQ8DtczXwXTMccwBm0ig7d.1omw1hjkVJLjsrXKfrqVzGwkPjbcASqf1kOGifSQsak Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Wed, 16 Oct 2024 05:24:19 GMT content-type: text/html; charset=utf-8 x-powered-by: Express cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=265tvYin000g3edLq94yPmPgJaRdsk8tB%2BDe%2BexAQgKLRw0fJhsBGFMSmVp0xlOih10TgaYVjPFC%2FqtTczM1ypL0z8eI%2F37WVgb7Y5dAefcOXtNECMUWVSEyEgBeHQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" server: cloudflare cf-ray: 8d359f32d84756c1-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri

	godleaks.cc/	172.67.166.116	301 Moved Permanently	6.4 kB
URL User Request GET HTTP/2 godleaks.cc/ IP 172.67.166.116:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectgodleaks.cc FingerprintD8:E3:31:BB:72:3C:F9:4B:39:87:33:12:39:75:B0:48:5F:62:2E:21 ValidityMon, 14 Oct 2024 23:52:06 GMT - Sun, 12 Jan 2025 23:52:05 GMT File type Size 6.4 kB (6436 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: godleaks.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently date: Wed, 16 Oct 2024 05:24:17 GMT content-type: text/html; charset=utf-8 x-powered-by: Express location: /register vary: Accept set-cookie: connect.sid=s%3AUX1LrC7LryNQ8DtczXwXTMccwBm0ig7d.1omw1hjkVJLjsrXKfrqVzGwkPjbcASqf1kOGifSQsak; Path=/; HttpOnly cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2BU6xwqRsT7e78t53OB4S6cncDOBTmagTXP8AwocnS60TcDSwPWC1F5nTvbQcH5wUdV0EwpquOMkwqXHEfVhDAFtMchtH%2FNCgPtwwwk%2ByjUnJYArQ1a8hwDfgnTEew%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" server: cloudflare cf-ray: 8d359f28bc4ab512-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	godleaks.cc/register	172.67.166.116	200 OK	6.4 kB
URL User Request GET HTTP/2 godleaks.cc/register IP 172.67.166.116:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectgodleaks.cc FingerprintD8:E3:31:BB:72:3C:F9:4B:39:87:33:12:39:75:B0:48:5F:62:2E:21 ValidityMon, 14 Oct 2024 23:52:06 GMT - Sun, 12 Jan 2025 23:52:05 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (7000), with no line terminators Size 6.4 kB (6436 bytes) Hash 937712114c2a0d3c8ea6af168b9fe922 3c4f764987cf3514f5107d805b0bc48bf194ef0a 47041f663f7c9a0360e2bdaff1c7f66bfab9e2b04e0a1d1243ea5e1b0c620961 HTTP Headers GET /register HTTP/1.1 Host: godleaks.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: connect.sid=s%3AUX1LrC7LryNQ8DtczXwXTMccwBm0ig7d.1omw1hjkVJLjsrXKfrqVzGwkPjbcASqf1kOGifSQsak Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Wed, 16 Oct 2024 05:24:17 GMT content-type: text/html; charset=utf-8 x-powered-by: Express cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NDH3hYs9AnOIK%2FhpGRvQlzpzzAQ4yPPqq1DEmklaoZtDSeMfSKoWuHFz8xTfqZn%2BGjA8kSvV82s%2FVS5KvO6dfLDX6Ze6Tv8AXGsy3iWVdKpqAIKwe9weGDYqpp0ggQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} speculation-rules: "/cdn-cgi/speculation" server: cloudflare cf-ray: 8d359f294d1ab512-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	godleaks.cc/css/main.css	172.67.166.116	200 OK	20 kB
URL GET HTTP/3 godleaks.cc/css/main.css IP 172.67.166.116:443 ASN #13335 CLOUDFLARENET Requested by https://godleaks.cc/register Certificate IssuerGoogle Trust Services Subjectgodleaks.cc FingerprintD8:E3:31:BB:72:3C:F9:4B:39:87:33:12:39:75:B0:48:5F:62:2E:21 ValidityMon, 14 Oct 2024 23:52:06 GMT - Sun, 12 Jan 2025 23:52:05 GMT File type ASCII text, with CRLF line terminators Size 20 kB (20382 bytes) Hash 444f4ecf96d40317d1f07730b21c8e5f c4bb34b64781936406ff2c79eb182b9d094909b0 a446d0cc2b9a0fb29180bf964df9da9e9e83deb8a98d4c5b0099ccdec7b8e5dc HTTP Headers GET /css/main.css HTTP/1.1 Host: godleaks.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://godleaks.cc/register Cookie: connect.sid=s%3AUX1LrC7LryNQ8DtczXwXTMccwBm0ig7d.1omw1hjkVJLjsrXKfrqVzGwkPjbcASqf1kOGifSQsak Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Wed, 16 Oct 2024 05:24:17 GMT content-type: text/css; charset=UTF-8 x-powered-by: Express cache-control: public, max-age=14400 last-modified: Wed, 11 Sep 2024 04:21:31 GMT etag: W/"4f9e-191df50a9ce" cf-cache-status: EXPIRED report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LD43J4oo1my7320EWpAK2hqCDy%2FUbzSP1ULvxa4fPF%2F6O4q6uX0NmUpOtRvGf2rI3BksCWEQjkqfVRSouSmMihVWvDYVMgexVKU4rQUbCN%2FvS3dnOVfLgMRw%2B4I5cw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8d359f2a9b6e56c1-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size