| GET assets.katfile.com/js/jquery.paging.js |  104.26.0.222 | 200 OK | 19 kB |
URL GET assets.katfile.com/js/jquery.paging.js IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeJavaScript source, ASCII text Hashd7a2c1c7af2a004a6d68e1e55b1cfb46 7fd6daa7076c30381880519ad06ef5639b19ee28 c8ecfe747c979fbd87624913200a9237343679923b495885bced089b80fc84f6
GET /js/jquery.paging.js HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: application/javascript
last-modified: Fri, 05 Jun 2020 10:19:18 GMT
etag: W/"4ba5-5a7539804e5a1"
cache-control: public, max-age=2628000
cf-cache-status: HIT
age: 183267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fcUSQgnDHSELzz1q5oOrFjl%2FDmMvWD0aIkNJm%2BIB771LdJrqptqKhLrUx%2BszQGG59TUyzwb3JT9SyTZrui%2Bh0Lca9ygh3ze4BET3maoz5RgFle0t5B4NKXpDKRd0emsPzem2Vw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d49a897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=87&recv=49&lost=0&retrans=0&sent_bytes=84681&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=787&x=0"
X-Firefox-Spdy: h2
|
|
| GET www.googletagmanager.com/gtag/js?id=G-TKFXMGCJEH |  142.250.74.136 | 200 OK | 340 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-TKFXMGCJEH IP142.250.74.136:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeJavaScript source, ASCII text, with very long lines (5343) Size340 kB (340296 bytes) Hash636a50dabb20c091f65d86c925b7ac59 fdb1222cb721a32b4e37c2ebaa563bb93ebba9a8 9ef04437258dc7159d6736f71215f012da236224ca3599d0f677e8779d37ef95
GET /gtag/js?id=G-TKFXMGCJEH HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 22 Mar 2025 16:11:46 GMT
expires: Sat, 22 Mar 2025 16:11:46 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 116097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET jt.whunpainty.com/gfDjGCz9xcLrHqjK7/83948 |  23.109.170.72 | 200 OK | 6 B |
URL GET jt.whunpainty.com/gfDjGCz9xcLrHqjK7/83948 IP23.109.170.72:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerLet's Encrypt Subjectjt.whunpainty.com Fingerprint7A:FA:C7:C1:0E:44:B5:A1:3B:E9:4D:CB:CE:58:84:FF:FC:3C:64:22 ValiditySat, 22 Feb 2025 06:46:28 GMT - Fri, 23 May 2025 06:46:27 GMT
File typeASCII text, with no line terminators Hash4fc71bf68a1d477bd1523733e34d1e90 15119105cffbe108b6cf290146ab02c9aa8517ba 74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /gfDjGCz9xcLrHqjK7/83948 HTTP/1.1
Host: jt.whunpainty.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 22 Mar 2025 16:11:46 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://katfile.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Sun, 23-Mar-2025 16:11:46 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sun, 23-Mar-2025 16:11:46 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| GET katfile.com/images/h527515_dl.gif | 104.26.0.222 | 200 OK | 7.8 kB |
URL GET katfile.com/images/h527515_dl.gif IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeGIF image data, version 89a, 280 x 81 Hash0c587d6d26ed00d51fb38e92de4fac36 10ad8340582f851290251b69fb250d80784b4d08 5f5906aa8811ee2a692f5a62c2ebcf683fcbe900572a823dc13f5d5e61565f13
GET /images/h527515_dl.gif HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: image/gif
content-length: 7835
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7910
etag: "1ee6-617a21c778680"
last-modified: Sat, 04 May 2024 15:01:30 GMT
cf-cache-status: HIT
age: 902077
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QF5AwYb%2FKRFG19ggkeHKH7J0YqxhmWFS4DOVeB2aavWizfEc8sL0sqMBeEVf%2FVkb2vYW%2BuGA8bfJhu%2Bf8WYrePm1OFXD8hBn4H1YojpsEWyDRsqs15Nmr4a3yB2l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d35a897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=16790&min_rtt=15465&rtt_var=1799&sent=42&recv=34&lost=0&retrans=0&sent_bytes=41281&recv_bytes=2330&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=763&x=0"
X-Firefox-Spdy: h2
|
|
| GET bc.decnetshantih.com/fEDmZ7L5YhxCw/91973 | 23.109.170.34 | 200 OK | 6 B |
URL GET bc.decnetshantih.com/fEDmZ7L5YhxCw/91973 IP23.109.170.34:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerLet's Encrypt Subjectbc.decnetshantih.com Fingerprint65:75:D6:B8:97:55:F6:1D:30:66:E0:97:89:F5:F6:30:17:FB:3B:94 ValiditySat, 22 Feb 2025 06:40:31 GMT - Fri, 23 May 2025 06:40:30 GMT
File typeASCII text, with no line terminators Hash4fc71bf68a1d477bd1523733e34d1e90 15119105cffbe108b6cf290146ab02c9aa8517ba 74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fEDmZ7L5YhxCw/91973 HTTP/1.1
Host: bc.decnetshantih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 22 Mar 2025 16:11:46 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 6
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Origin
Access-Control-Expose-Headers: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Megageocheckolololo, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, OPTIONS
Set-Cookie: GGI10=G/IAAASeD7dNK/dmKv8IjKne3vVF23LHD4p/239bRbcCCoMg63NMJOcmHtdgLENcdVb9C/8fcU22F4TMszPXDn3bi0JM1sszQtMiPRle3iuF+nW+PadvTJQWghuEE2erh7OxP8CGug0ouFXNMz9sX8bofOhPVVBMTsv72LAiF5aGU46qKWF8uZ1fb+RKCE0MoKV13JEH4pnoZXocf6ywyRddqbWmm1R6/v8=; max-age=3600000; path=/; secure; SameSite=None
GUI4=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; max-age=3600000; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| GET katfile.com/images/y.png | 104.26.0.222 | 200 OK | 485 B |
IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typePNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced Hashec321a871314144a3a69c281e170204e d761e5b175b950e44143571b668254e6312b4c13 e71c831a119bd441d0f1ec44f83c2beb3f26ce91959e03a3f70d8a1e6b09a105
GET /images/y.png HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: image/png
content-length: 485
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=488
etag: "1e8-5a75396eb89ed"
last-modified: Fri, 05 Jun 2020 10:18:59 GMT
cf-cache-status: HIT
age: 183267
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JNkcYTKj2BMrr4JOjuNyqucULiQlLuMGecniV8hl9naOkSXjjZStV7pwWf2TY%2BHRFQKmNTGizm%2FFOkOAEBd1G6eNjKPfvGiGMrG3Wj%2Bknwn86gj6KacfC32qMidU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a3d5ba897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=92&recv=49&lost=0&retrans=0&sent_bytes=89662&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=787&x=0"
X-Firefox-Spdy: h2
|
|
| GET katfile.com/pipiz5uxt64p/268400.rar | 104.26.0.222 | 200 OK | 36 kB |
URL User Request GET katfile.com/pipiz5uxt64p/268400.rar IP104.26.0.222:443
CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeHTML document, ASCII text, with very long lines (368) Hash309115875c2fadcfe60eae00b1cc7215 d95ff23035749c19b3c15f268ae3301db26bfd5e 8380102601641bfd0b548b158653e6d0f8c8c42399e09786fa8029e3d2e01c2a
GET /pipiz5uxt64p/268400.rar HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: text/html ; charset=UTF-8
strict-transport-security: max-age=0;includeSubDomains;
expires: Fri, 21 Mar 2025 16:11:45 GMT
cf-cache-status: BYPASS
set-cookie: lang=english; domain=katfile.com; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IB5aZw%2FI%2BWK2ocjNw9Kwgs4OjC%2Fs6llP3Yk9VMdAZn2YgmWxxiq3IL5uqnbT7nZ%2F8O8SCzJftNif4D8rn4skO%2FJ%2BHRzN1u1%2BBi6e1hUBY2zuBGXNcpwfuW21%2FAXz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f775feeaa897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=20576&min_rtt=15465&rtt_var=11917&sent=7&recv=12&lost=0&retrans=0&sent_bytes=3277&recv_bytes=1263&delivery_rate=278926&cwnd=253&unsent_bytes=0&cid=a5e3455b1067d916&ts=262&x=0"
X-Firefox-Spdy: h2
|
|
| GET maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 37 kB |
URL GET maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com Fingerprint90:B1:98:4A:7E:D6:37:CF:9B:DC:7D:67:82:58:17:6C:F7:F6:11:DE ValiditySun, 16 Mar 2025 01:14:49 GMT - Sat, 14 Jun 2025 02:14:23 GMT
File typeJavaScript source, ASCII text, with very long lines (32033) Hash5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://katfile.com
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"5869c96cc8f19086aee625d670d741f9"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 03/18/2024 12:13:26
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 8bfa65389a9f824a67d860820ea5ba6c
cdn-cache: HIT
cf-cache-status: HIT
age: 7991002
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 9246f77a7fd256a2-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET superiorityregard.com/220215dac8cc9093a5afec93d57830f9/invoke.js |  192.243.61.227 | 403 Forbidden | 0 B |
URL GET superiorityregard.com/220215dac8cc9093a5afec93d57830f9/invoke.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerLet's Encrypt Subjectsuperiorityregard.com Fingerprint2C:33:2A:D2:84:26:C2:5E:E3:7B:6B:8F:76:2E:CE:A6:6B:85:9F:CB ValidityMon, 17 Mar 2025 01:19:53 GMT - Sun, 15 Jun 2025 01:19:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /220215dac8cc9093a5afec93d57830f9/invoke.js HTTP/1.1
Host: superiorityregard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Sat, 22 Mar 2025 16:11:46 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: superiorityregard.com
|
|
| GET katfile.com/images/fast.gif | 104.26.0.222 | 200 OK | 7.7 kB |
URL GET katfile.com/images/fast.gif IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeGIF image data, version 89a, 300 x 239 Hash053a149b98b4a6d27e4687b21e930d6a eefc6499ff178344c2d6e3c1ba46a685e3a23544 c53801c88d58841ce76cc7eb387de830472fd348d7f3e6a068fdf8adbb273ac1
GET /images/fast.gif HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: image/gif
content-length: 7747
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7831
etag: "1e97-5a75396dd4d60"
last-modified: Fri, 05 Jun 2020 10:18:58 GMT
cf-cache-status: HIT
age: 182036
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2BSqeWm2VrQX0fcpgekt6AdWroWGKw48BXP9sTgzJt8dAg9ZTbcivc3OJNGvYf5rZJgGBzLID8A7EWgZiiBQmAUFEKu%2FImFCwQb5cWtSstWQLKitvEA%2FxxkohqyB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a3d60a897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=62&recv=49&lost=0&retrans=0&sent_bytes=61246&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=781&x=0"
X-Firefox-Spdy: h2
|
|
| GET assets.katfile.com/images/logo.png | 104.26.0.222 | 200 OK | 4.5 kB |
URL GET assets.katfile.com/images/logo.png IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typePNG image data, 519 x 150, 8-bit colormap, non-interlaced Hash51a321544853f41d37099ec6743c3768 0f1bbf5b4aa9ff7690b8e7e7ba60c3baacbc0185 1685d5714daa0c08778a7ed9320cb37c8a0c06d7e78104b6c09c08c675324054
GET /images/logo.png HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: image/png
content-length: 4521
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7851
etag: "1eab-5cfde790ae600"
last-modified: Wed, 03 Nov 2021 08:48:24 GMT
cf-cache-status: HIT
age: 814548
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V9r64z6msjg4SEXAg2XWME730suOS2X0umJYVRXCwgjl1k8VhUjtOAfr%2B6B%2FER40MEL9QzFtvAlTpz0QF7%2BeLy1JwjaMSqZeDc6xvD3sKf1twaduNFM6ouQ15cW2IwgpY3rHxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a3d55a897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=107&recv=49&lost=0&retrans=0&sent_bytes=107022&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=17890&cid=a5e3455b1067d916&ts=789&x=0"
X-Firefox-Spdy: h2
|
|
| GET katfile.com/js/share.js | 104.26.0.222 | 200 OK | 354 B |
IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeASCII text, with very long lines (370), with no line terminators Hasha404c2d849c1dc0000300a598bbb8d19 fb083ffcb986027b633214d59af68ea939c2ca41 9a37a276af68227ec752c2405446bf7cc48af6968e0d79465ee72e9d374959ec
GET /js/share.js HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: application/javascript
last-modified: Fri, 05 Jun 2020 10:19:18 GMT
etag: W/"162-5a753980a217b"
cache-control: public, max-age=2628000
cf-cache-status: HIT
age: 662868
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rW%2Be4sCj0QRNYmcgoNxnvOzAmotLTRO1rrGKUpDrPJBWmK1lI44nzAKkW8kmMf4iGoUerwErukco1lgRHjDPMrWN07pbui4cAJeijElCOIMqFqxouUY6ipIIw1Zk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d37a897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=16790&min_rtt=15465&rtt_var=1799&sent=49&recv=34&lost=0&retrans=0&sent_bytes=49779&recv_bytes=2330&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=764&x=0"
X-Firefox-Spdy: h2
|
|
| GET maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.11.207 | 200 OK | 121 kB |
URL GET maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP104.18.11.207:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com Fingerprint90:B1:98:4A:7E:D6:37:CF:9B:DC:7D:67:82:58:17:6C:F7:F6:11:DE ValiditySun, 16 Mar 2025 01:14:49 GMT - Sat, 14 Jun 2025 02:14:23 GMT
File typeASCII text, with very long lines (65371) Size121 kB (121200 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://katfile.com
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 10/31/2023 18:59:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 6dcf69ad6e6a652b7fe45e60f528e01a
cdn-cache: HIT
cf-cache-status: HIT
age: 725979
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 9246f77a2f3c56a2-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET assets.katfile.com/css/font-awesome.min.css | 104.26.0.222 | 200 OK | 31 kB |
URL GET assets.katfile.com/css/font-awesome.min.css IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /css/font-awesome.min.css HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Cookie: lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: text/css
last-modified: Fri, 05 Jun 2020 10:18:51 GMT
etag: W/"7918-5a75396671b69"
cache-control: public, max-age=2628000
cf-cache-status: HIT
age: 725021
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fL4g3Eo3rvdqQNxnX5CmO5ijvL9HWzs%2B627dBbbZgbgZhaSiqrzWUOBL%2BmmdCAkDVxwXITS6MILmWbbT9hKpa7cTgCbPse6s6SpSBJUawhtGW2OtGl5EklscsT2kMcF3cEjiag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d47a897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=77&recv=49&lost=0&retrans=0&sent_bytes=75132&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=784&x=0"
X-Firefox-Spdy: h2
|
|
| GET assets.katfile.com/js/jquery-1.9.1.min.js | 104.26.0.222 | 200 OK | 93 kB |
URL GET assets.katfile.com/js/jquery-1.9.1.min.js IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeJavaScript source, ASCII text, with very long lines (32089) Hash397754ba49e9e0cf4e7c190da78dda05 ae49e56999d82802727455f0ba83b63acd90a22b c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /js/jquery-1.9.1.min.js HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: application/javascript
last-modified: Fri, 05 Jun 2020 10:19:18 GMT
etag: W/"169d5-5a75398054b31"
cache-control: public, max-age=2628000
cf-cache-status: HIT
age: 183267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zQ8un4igbih17XIjhTvkQK1dIn8BFXCbJfayY7G30LQ%2FGZ60ja9ELYb%2BL5jg%2BpB9gXj1VnpdUcnNTiHAM%2FKIHiJAmNYk%2BYvT%2Bb7g0xqZggajoXUVGa4uti5Hwcrf0K8T2Q28DQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d44a897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=94&recv=49&lost=0&retrans=0&sent_bytes=90725&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=788&x=0"
X-Firefox-Spdy: h2
|
|
| GET katfile.com/cgi-bin/stats.fcgi?value=false | 104.26.0.222 | 200 OK | 2 B |
URL GET katfile.com/cgi-bin/stats.fcgi?value=false IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /cgi-bin/stats.fcgi?value=false HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
DNT: 1
Connection: keep-alive
Cookie: lang=english
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:46 GMT
content-type: text/plain; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JsAX8h%2FxgO7FB%2FVEroU0im%2BSY11qk2SpC3MwXTs6mDhz%2FB3Tc5HlRRkCDZU74MpQ%2Fm4fEVO%2BXcfXza9oWfCPON2%2F2R7t4nYhX4quM9VG1w61SgqqWMblh8Q51AVz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9246f77f9d4fa897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=15692&min_rtt=15438&rtt_var=62&sent=149&recv=92&lost=0&retrans=0&sent_bytes=157673&recv_bytes=3196&delivery_rate=1659722&cwnd=291&unsent_bytes=0&cid=a5e3455b1067d916&ts=1743&x=0"
X-Firefox-Spdy: h2
|
|
| GET assets.katfile.com/css/style.css | 104.26.0.222 | 200 OK | 47 kB |
URL GET assets.katfile.com/css/style.css IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
Hashfd40312c7fb62ba3bdbe2087690d3c97 84f08a3b4e2b6735750140fbdc95e82a4fa4d160 24568ddcab6a69abf34825d2929bc9c1bc51b76e8333224e5548a02854bc5c77
GET /css/style.css HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Cookie: lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: text/css
last-modified: Fri, 05 Jun 2020 10:18:51 GMT
etag: W/"b93d-5a75396677929"
cache-control: public, max-age=2628000
cf-cache-status: HIT
age: 183267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I254oaT5J9gnW5ieZMW88NY3n9K%2FvlkCEjDa6fvIJji5ndatXwIF%2FPd%2BXji4kIO1ruxd6v3GQUmejSfKS%2FJADh8aHY7AxzAfIKGSJKMEQwoSL8omZaYs01gqv2NdvB9cp6InNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d40a897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=52&recv=49&lost=0&retrans=0&sent_bytes=50446&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=780&x=0"
X-Firefox-Spdy: h2
|
|
| GET assets.katfile.com/images/social.jpg | 104.26.0.222 | 200 OK | 2.9 kB |
URL GET assets.katfile.com/images/social.jpg IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeJPEG image data, progressive, precision 8, 48x96, components 3 Hash87f58fefe0080c8173f4e38752ce7d3d ae7c147b866a6598dcb823d39685b602299341cb 960168900c401072d8d7197cddd7e366e5bf9d1f000cd1f42dda4f55c6779bef
GET /images/social.jpg HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets.katfile.com/css/style.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:46 GMT
content-type: image/jpeg
content-length: 2931
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=3848
etag: "f08-5a75397b68320"
last-modified: Fri, 05 Jun 2020 10:19:12 GMT
cf-cache-status: HIT
age: 150800
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAuAbAx%2FlE0kQAaNJ4TUNB7VywxyTJLMx7nEAO93pW%2BxgB1xLgMmTe9PNCfFfu8nxNHzP1Lwv2OsDaKYPkaRww1mEvH5vDOMU3CH%2FiN2vU6G53fbt5fKvnAGl7gZwbpTp5Gzng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f7803e41a897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=15692&min_rtt=15438&rtt_var=62&sent=144&recv=92&lost=0&retrans=0&sent_bytes=154082&recv_bytes=3196&delivery_rate=1659722&cwnd=291&unsent_bytes=0&cid=a5e3455b1067d916&ts=1732&x=0"
X-Firefox-Spdy: h2
|
|
| GET katfile.com/images/n.png | 104.26.0.222 | 200 OK | 565 B |
IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typePNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced Hashfbdbc0772c3437090ce660cd860c9944 7dc33d391ecf85076b62eff2a22d0383e89d5d41 763a4f8c31f48b89dab08da661304ddf008a75c6ebac7f57a76b2e30212e28ff
GET /images/n.png HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: image/png
content-length: 565
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=567
etag: "237-5a75396dc14e0"
last-modified: Fri, 05 Jun 2020 10:18:58 GMT
cf-cache-status: HIT
age: 133471
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WfqYiS5wvmuwKoitG62GNTiU9JjGF095Oy9tYeg%2FazvQcwxITCHjUC6ZkVtqHwNs0X67ExgeuYTZjZtcmbUOXwcyzSLmMFLtu3Jwuz9GdLAdTzDEyEzsWccjjnhG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d39a897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=16790&min_rtt=15465&rtt_var=1799&sent=39&recv=34&lost=0&retrans=0&sent_bytes=40112&recv_bytes=2330&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=763&x=0"
X-Firefox-Spdy: h2
|
|
| GET katfile.com/images/slow.gif | 104.26.0.222 | 200 OK | 7.9 kB |
URL GET katfile.com/images/slow.gif IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeGIF image data, version 89a, 300 x 239 Hash59c53f9e57d39d530d768540b13f2124 a1fa9e0a1d268f90506d92c26b2d1a63a95c3214 4ba548803968d02cc651403e94cdac5702da073e0b749b9cf588ceca2f06bf4c
GET /images/slow.gif HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: image/gif
content-length: 7914
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "1eea-5a7539743857a"
last-modified: Fri, 05 Jun 2020 10:19:05 GMT
cf-cache-status: HIT
age: 182036
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=auO%2FtyEzki4JL2F2ybfXeBs%2B67Cx2vrtDsT0wiboFT%2FIKATqFilLqLLjD53SpCX8v9vRPGcb0kNcPbgN35t2yhF9vFgkpC%2FFI4h%2FyHFy8D26RSt6qI1gliJtVSyH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a3d5ea897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=15680&min_rtt=15438&rtt_var=261&sent=112&recv=53&lost=0&retrans=0&sent_bytes=113804&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=17459&cid=a5e3455b1067d916&ts=800&x=0"
X-Firefox-Spdy: h2
|
|
| GET assets.katfile.com/images/flags.png | 104.26.0.222 | 200 OK | 14 kB |
URL GET assets.katfile.com/images/flags.png IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typePNG image data, 1248 x 11, 8-bit/color RGB, non-interlaced Hash82e196ea8abd98caa742e4e970ee83b9 c6434cb4614f0c1e8656a3d1bacba55ad251bd4d bd00a35847105e7dcf33d1159c04daf8458d2e9fee81036c9828537afaec356c
GET /images/flags.png HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets.katfile.com/css/style.css
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:46 GMT
content-type: image/png
content-length: 13713
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=15180
etag: "3b4c-5a753974b70d4"
last-modified: Fri, 05 Jun 2020 10:19:05 GMT
cf-cache-status: HIT
age: 732922
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9dqUtbqmpEtjj9umSBHMZ3ndLqiH4bY7viiffe8haouCa81kCbslfVfGUapivcnOEUzcnLGklH8VBIvAaSz40kiNf%2F003MaTE4VzUFSgdrE1c3Gg1HS0kI9E5FbiUFQ%2BTqo6QQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77f1c6ba897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=15825&min_rtt=15438&rtt_var=71&sent=130&recv=78&lost=0&retrans=0&sent_bytes=139772&recv_bytes=2994&delivery_rate=1659722&cwnd=279&unsent_bytes=0&cid=a5e3455b1067d916&ts=1560&x=0"
X-Firefox-Spdy: h2
|
|
| GET assets.katfile.com/css/bootstrap-custom.css | 104.26.0.222 | 200 OK | 20 kB |
URL GET assets.katfile.com/css/bootstrap-custom.css IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeassembler source, ASCII text Hash243f3c22aaf6e7551d7fa714793ab79d c2c73f09df177293d252a3b9d1f650b7936ebd97 fd4f4994b56bcff0ea2a0bfd0f95abba1aa0e57054494b327de8d3ff7ee3f4c7
GET /css/bootstrap-custom.css HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Cookie: lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: text/css
last-modified: Sun, 07 Nov 2021 11:15:28 GMT
etag: W/"4c5d-5d030fe5bf400"
cache-control: public, max-age=2628000
cf-cache-status: HIT
age: 809615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rvi%2B31L8R%2Bx0kk1t%2BGryiPRYTLfRXPGyQIPW6%2FnJTpBMExraci4oJcq7vf5mnJsSfPnHVNabUPc%2BDHw%2BkeXGQ%2FC0Gmhm44jm0YGDTQzrZxlj%2FLBWXn5UxA9lJPi3HhdCmTOIqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d48a897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=72&recv=49&lost=0&retrans=0&sent_bytes=70291&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=782&x=0"
X-Firefox-Spdy: h2
|
|
| GET maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css | 104.18.11.207 | 200 OK | 23 kB |
URL GET maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap-theme.min.css IP104.18.11.207:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectbootstrapcdn.com Fingerprint90:B1:98:4A:7E:D6:37:CF:9B:DC:7D:67:82:58:17:6C:F7:F6:11:DE ValiditySun, 16 Mar 2025 01:14:49 GMT - Sat, 14 Jun 2025 02:14:23 GMT
File typeASCII text, with very long lines (23192) Hashab6b02efeaf178e0247b9504051472fb 8256575374f430476bdcd49de98c77990229ce31 653e073e97423adda5bc3917a241ee8497dd38a48f14bcde0098a4e54fd0fa5e
GET /bootstrap/3.3.7/css/bootstrap-theme.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://katfile.com
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ab6b02efeaf178e0247b9504051472fb"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 03/18/2024 12:13:26
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 0f67a780c78177fc53ede0084b6f8759
cdn-cache: HIT
cf-cache-status: HIT
age: 22486679
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 9246f77a7fb756a2-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET katfile.com/images/icon_no_g.png | 104.26.0.222 | 200 OK | 177 B |
URL GET katfile.com/images/icon_no_g.png IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typePNG image data, 14 x 14, 8-bit gray+alpha, non-interlaced Hashea9723ce666cc1efb85525a4f8a0459d 3fa847757586a125998fa708eebdf59af0b77a67 3f4890ee47452e2bf0b3b9ff970362065c798e261f71176e6498675e11f40d51
GET /images/icon_no_g.png HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: image/png
content-length: 177
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1240
etag: "4d8-5a753970c96e8"
last-modified: Fri, 05 Jun 2020 10:19:01 GMT
cf-cache-status: HIT
age: 182036
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uDZI2AeOL%2Fz0%2BhUeBq9a1FGWq%2B0pnOrjq8YP1D3Fh88YFEFlyctB47r82N84TbMWlO206ABwpe7WYBJraKCwquhZaCzCN7s%2F%2BLSKJSJMAYxkIo8PDFJVcOPgvtTw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a4d66a897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=60&recv=49&lost=0&retrans=0&sent_bytes=60446&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=781&x=0"
X-Firefox-Spdy: h2
|
|
| GET katfile.com/images/icon_yes_g.png | 104.26.0.222 | 200 OK | 127 B |
URL GET katfile.com/images/icon_yes_g.png IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typePNG image data, 19 x 14, 8-bit gray+alpha, non-interlaced Hash988fc4727efd64e90376f86bfc59eb94 41aca95bc02fdc1bc3bfdec210ca4062aad88bc2 96cabcfbb09463e9c2218ed8d68a765ab84322b786de03e58efbd80433fab89f
GET /images/icon_yes_g.png HTTP/1.1
Host: katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/pipiz5uxt64p/268400.rar
Cookie: lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: image/png
content-length: 127
cache-control: public, max-age=2628000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1123
etag: "463-5a75397abb57c"
last-modified: Fri, 05 Jun 2020 10:19:12 GMT
cf-cache-status: HIT
age: 119104
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GpcMJWRhg1lh77LHYfCdTDGZ5PdEqiQ3dCBjssNJ9bOZbQ24oyG%2BeFwDetewCSdh0RxdRlQOSDqcnDdwFv%2FDmGoxdQ4bL2fX%2BSLDqM6KFH0L0wGnh4k8zjhaEt%2Ft"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a4d69a897-RIX
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=70&recv=49&lost=0&retrans=0&sent_bytes=69611&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=781&x=0"
X-Firefox-Spdy: h2
|
|
| GET superiorityregard.com/220215dac8cc9093a5afec93d57830f9/invoke.js | 192.243.61.227 | 403 Forbidden | 0 B |
URL GET superiorityregard.com/220215dac8cc9093a5afec93d57830f9/invoke.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerLet's Encrypt Subjectsuperiorityregard.com Fingerprint2C:33:2A:D2:84:26:C2:5E:E3:7B:6B:8F:76:2E:CE:A6:6B:85:9F:CB ValidityMon, 17 Mar 2025 01:19:53 GMT - Sun, 15 Jun 2025 01:19:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /220215dac8cc9093a5afec93d57830f9/invoke.js HTTP/1.1
Host: superiorityregard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Sat, 22 Mar 2025 16:11:46 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: superiorityregard.com
|
|
| GET superiorityregard.com/21/58/00/2158005ef7fcc0d6895e67f6d4f2e442.js | 192.243.61.227 | 403 Forbidden | 0 B |
URL GET superiorityregard.com/21/58/00/2158005ef7fcc0d6895e67f6d4f2e442.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerLet's Encrypt Subjectsuperiorityregard.com Fingerprint2C:33:2A:D2:84:26:C2:5E:E3:7B:6B:8F:76:2E:CE:A6:6B:85:9F:CB ValidityMon, 17 Mar 2025 01:19:53 GMT - Sun, 15 Jun 2025 01:19:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /21/58/00/2158005ef7fcc0d6895e67f6d4f2e442.js HTTP/1.1
Host: superiorityregard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Sat, 22 Mar 2025 16:11:46 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: superiorityregard.com
|
|
| GET assets.katfile.com/js/paging.js | 104.26.0.222 | 200 OK | 1.7 kB |
URL GET assets.katfile.com/js/paging.js IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeHTML document, ASCII text, with very long lines (1778), with no line terminators Hashcc6cc190d0f5515a00ac307c26fe033a b7028b457c314b3a61b4130bb98fc8f2cf3e769e 030ef0e5188e0cff37c54520d654e321e69a6d88ec6379d1817e546db88b58ea
GET /js/paging.js HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: application/javascript
last-modified: Fri, 05 Jun 2020 10:19:18 GMT
etag: W/"6ad-5a75398096dcb"
cache-control: public, max-age=2628000
cf-cache-status: HIT
age: 183267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6rHQ08JYyG6PWmrd29jKF3D68IJ2I64rbLV%2B6SBQBVfbOeXrozzYCS68Tt81GvLiMd4HH9NqeELYIyqFaJVoyNCxc461ssVaLqpd1x%2BWJxv7O%2FL4uBkzvbh%2BbgirD%2Fdm4xM8uA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d4ca897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=107&recv=49&lost=0&retrans=0&sent_bytes=107022&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=22995&cid=a5e3455b1067d916&ts=794&x=0"
X-Firefox-Spdy: h2
|
|
| GET assets.katfile.com/js/jquery.cookie.js | 104.26.0.222 | 200 OK | 3.1 kB |
URL GET assets.katfile.com/js/jquery.cookie.js IP104.26.0.222:443
Requested byhttps://katfile.com/pipiz5uxt64p/268400.rar CertificateIssuerGoogle Trust Services Subjectkatfile.com Fingerprint8A:A6:3F:15:6C:F7:A1:88:8E:87:DA:38:22:EE:4B:2A:80:EB:B8:7B ValidityTue, 25 Feb 2025 04:14:47 GMT - Mon, 26 May 2025 05:14:38 GMT
File typeJavaScript source, ASCII text, with very long lines (3441), with no line terminators Hash7e208f9bc7ca201678c76d96e899349c afa52ce81c7656bf1a8605bd2cbd38c2be00cd9b 0f0e74eaa31ad2d6c07d9ceb16efefc78aae0f45328759eb163800d261e53d29
GET /js/jquery.cookie.js HTTP/1.1
Host: assets.katfile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://katfile.com/
Cookie: lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 22 Mar 2025 16:11:45 GMT
content-type: application/javascript
last-modified: Fri, 05 Jun 2020 10:19:18 GMT
etag: W/"c31-5a753980602ca"
cache-control: public, max-age=2628000
cf-cache-status: HIT
age: 183267
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h9waFg35UjBvkS7zOsp75Msw9mZ5gWkhipk%2BUiWVSg0y3B2fIXlZSXifq%2B%2F%2FHsvhw82IzoKf%2BhDdZtkHS4FeMv1voC7OHXQWkZLdSwjYHa4mql%2BidB0sgz%2F6mqG7aIEBLxxoHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9246f77a2d4ba897-RIX
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=15760&min_rtt=15438&rtt_var=517&sent=84&recv=49&lost=0&retrans=0&sent_bytes=82711&recv_bytes=2874&delivery_rate=2357894&cwnd=256&unsent_bytes=0&cid=a5e3455b1067d916&ts=785&x=0"
X-Firefox-Spdy: h2
|
|