Report - ekbete36.com/

Report Overview

Submitted URL
ekbete36.com/
IP
104.21.44.69
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-04 08:44:01
Access
public
Website Title
Online Casino | Online Betting | Gamble Online India | Ekbet
Final URL
ekbete36.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
108

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-04	435 B	1.7 kB	142.250.74.106
ekbete36.com	unknown	unknown	No data	No data	18 kB	5.3 MB	172.67.196.181
file.f3zoo.com	unknown	2023-01-14	2023-12-18	2023-12-18	464 B	2.1 kB	172.67.132.65
static.hasrtrvln.cc	unknown	2023-05-09	2023-12-18	2023-12-18	23 kB	212 kB	104.18.31.12
ap.f3zoo.com	unknown	2023-01-14	2023-12-18	2023-12-18	956 B	16 kB	188.114.96.1
static.hasrtrvln.ccnull	unknown	unknown	No data	No data	418 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	static.hasrtrvln.ccnull	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed
2024-05-04	medium	hasrtrvln.cc	Sinkholed

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	ekbete36.com/static/js/manifest.ccd27d54f5a4bc601c78.js	3.4 kB	2024-05-04	2024-05-04
Pretty URL ekbete36.com/static/js/manifest.ccd27d54f5a4bc601c78.js IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 10:44:09 Last Seen2024-05-04 10:44:09 Times Seen1 Hash da570480e93c9ef8cd0ed3aba7e493b3 d16f87b2919ca428fe0c806d6ab7a90dca364a1e 65f970fbcf98735a2a983a196f61ee9e1c724046fb4c8886094b31e0f9c55d51 Loading...

	ekbete36.com/static/js/vendor-swiper.2ddf65656d09a3b4dec7.js	132 kB	2024-02-22	2024-05-04
Pretty URL ekbete36.com/static/js/vendor-swiper.2ddf65656d09a3b4dec7.js IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-22 05:33:10 Last Seen2024-05-04 10:44:10 Times Seen4 Hash 3bf940d9bcb0a2fae743d22425af0a0d a01fe458e06aafc4f1920ad150361683984329fb 37d5114ba0c965bfb5fd3fca59ab39b1183ec3814fc0662e0dce3ac754a0d27e Loading...

	ap.f3zoo.com/app/index.min.js	14 kB	2023-12-18	2024-05-04
Pretty URL ap.f3zoo.com/app/index.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-18 00:21:57 Last Seen2024-05-04 10:44:09 Times Seen4 Hash 29278e42904d72ea782c5f8383aefd94 519d0a03c69ebeb9fe77674e0b7a40109034b227 8bf20776c0b6e68a9d6f4995cc0e01fe6fa85b236dc6b87ec75b0d45e8b4ce7f Loading...

	ekbete36.com/	22 B	2023-03-07	2024-05-14
Pretty URL ekbete36.com/ IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:15:52 Last Seen2024-05-14 23:02:06 Times Seen808 Hash c2d31df16ae20bd0a560df0e2b9cb293 09c28695f660fb434f10d51d72093fbfcc58aafe 2eccfb41e55f88b284d20767b0f431e9f11925d9e7f048222a0288d6e2549e53 Loading...

	ekbete36.com/	818 B	2023-12-18	2024-05-04
Pretty URL ekbete36.com/ IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-18 00:21:57 Last Seen2024-05-04 10:44:09 Times Seen3 Hash b15aaa5f40a4a2c5f0f8c4c27132a0ce c03f4bc342af65ebd630384eb6aa47220f3275c9 d02a5edb838c3e6a8196cab80e5915b0ff79e6f3c3f3e34da8cf12078a14a511 Loading...

	ekbete36.com/static/js/vendor.4507fff49e6d129d923e.js	983 kB	2024-02-22	2024-05-04
Pretty URL ekbete36.com/static/js/vendor.4507fff49e6d129d923e.js IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-22 05:33:10 Last Seen2024-05-04 10:44:09 Times Seen3 Hash 6f304100420eaa79179ca5d98b4560d5 79de6b7eeec0a2941a72643a6b0e5c2780c62881 2a7e278f311134a771cee1b7e99c65125fbf7363285a1da074240d69814e2730 Loading...

	ekbete36.com/	315 B	2023-12-18	2024-05-04
Pretty URL ekbete36.com/ IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-18 00:21:57 Last Seen2024-05-04 10:44:09 Times Seen3 Hash ba073c30298f7edb85f4d671efd6528c 5c3dbb36a55254517c37b267cadb98905c08fc48 fc0f5d47118f2d086967ece5d9eec4a2716824c9f4d890fbcc00f733d3726d0c Loading...

	ekbete36.com/	441 B	2023-12-18	2024-05-04
Pretty URL ekbete36.com/ IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-18 00:21:57 Last Seen2024-05-04 10:44:09 Times Seen3 Hash 7d1211485d85fe426b63d0a9693bc3ca ac50c4af4500443fece0c964cde01e5230ddd455 c20891e0084aefc57b21cff4d1b931068a7f055eb0436803548b406f542aa35f Loading...

	ekbete36.com/static/js/vendor-element.d24ceec529687f0b6920.js	654 kB	2024-02-22	2024-05-04
Pretty URL ekbete36.com/static/js/vendor-element.d24ceec529687f0b6920.js IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-22 05:33:10 Last Seen2024-05-04 10:44:09 Times Seen4 Hash 03fe23120ecd7b05cc36eb8f2f553e43 967b321484d3661d95faddc3b9b7a6e2a45c9828 08044b9c87a83fb07573b9e225126796a5e7c8231c5c5dfd8656174bc20d4906 Loading...

	unknown	54 B	2023-04-12	2024-05-22
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-12 08:25:39 Last Seen2024-05-22 00:34:28 Times Seen9844 Hash fcaea4b8885ca5c1fb3ddd5c490da5c6 35745f87b37210d992a9ed534a593ae500b7adaa 934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272 Loading...

	ekbete36.com/static/js/vendor-vuetify.2af9729c26b827a5d2f9.js	798 kB	2024-02-22	2024-05-04
Pretty URL ekbete36.com/static/js/vendor-vuetify.2af9729c26b827a5d2f9.js IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-22 05:33:10 Last Seen2024-05-04 10:44:09 Times Seen3 Hash 6241dddeda1c17feab302e2f2059a051 1daf5e1e80dbcd9b9586a8c9de9def79cc073e80 9c0002a0a13168c411c3ff432a92cb69db1d96949695860b5a22ea94dbbe78c5 Loading...

	ekbete36.com/static/js/vendor-moment.a2fc0a85ba9e62734972.js	303 kB	2024-02-22	2024-05-04
Pretty URL ekbete36.com/static/js/vendor-moment.a2fc0a85ba9e62734972.js IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-22 05:33:10 Last Seen2024-05-04 10:44:09 Times Seen3 Hash 7df7351495706eb609a9be7a3db7e1fd 04946c7b481a76d3785b6a5c5bf528bcab449741 536c7660e7de20246792ff690aa1dffacbfe6c5f537a26ce9d387a53161fe14b Loading...

	ekbete36.com/static/js/common-api.a51845e267cbb79cd230.js	118 kB	2024-05-04	2024-05-04
Pretty URL ekbete36.com/static/js/common-api.a51845e267cbb79cd230.js IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 10:44:09 Last Seen2024-05-04 10:44:09 Times Seen1 Hash 13947e5020367b9b43521b3323fc3669 f91d334d78e27fb11507e2276e3f4f15d263f4b2 47bfa66c2f64ba478dfb8c5aa0b178eea1c0f520cbe0ea808296a80a619f0b31 Loading...

	ekbete36.com/static/js/build821.eb3c97a0a46fbe871f13.js	676 kB	2024-05-04	2024-05-04
Pretty URL ekbete36.com/static/js/build821.eb3c97a0a46fbe871f13.js IP 172.67.196.181 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 10:44:09 Last Seen2024-05-04 10:44:09 Times Seen2 Hash b65920495683f88fa7231b322eee80a3 ca395ed8a4b6a673e55a48de9f6ddd225a90135d 2df2e1bb8a0c1c08783e0c22c2ef8a0eef52a63ee43a32aa5e610e291cb9909a Loading...

HTTP Transactions (92)

URL IP Response Size

fonts.googleapis.com/css?family=Nunito:400,600,700

142.250.74.106

200 OK

1.0 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Nunito:400,600,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
1.0 kB (1043 bytes)
Hash
953988113894154cdd0033ded50769c8
fbe529ef8f88d0ccfff6d8b1d1848312c6bdbc08
1d87bd96f2799bc11ca5d6fefea861787ccd19065f40ebb5abdabb033097d173

HTTP Headers

GET /css?family=Nunito:400,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 May 2024 08:43:34 GMT
date: Sat, 04 May 2024 08:43:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ekbete36.com/static/js/vendor-element.d24ceec529687f0b6920.js

172.67.196.181

200 OK

170 kB

URL GET HTTP/3
ekbete36.com/static/js/vendor-element.d24ceec529687f0b6920.js
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (63703), with no line terminators
Size
170 kB (170197 bytes)
Hash
03fe23120ecd7b05cc36eb8f2f553e43
967b321484d3661d95faddc3b9b7a6e2a45c9828
08044b9c87a83fb07573b9e225126796a5e7c8231c5c5dfd8656174bc20d4906

HTTP Headers

GET /static/js/vendor-element.d24ceec529687f0b6920.js HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-9f8dc"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MnIE0m%2FSsq3eyNeIHQZHnak8Tk62UTgR%2FgSFBcKSpkj7SojVcrzGyacObRU%2Bq05iIoZs7E1ocx1fuOi4Xmtdk%2B5BZK%2BpzKAcP0rSWRvr9CKvtk0F43%2F8Y5SyehntBf4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342bea891c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/js/build821.eb3c97a0a46fbe871f13.js

172.67.196.181

200 OK

199 kB

URL GET HTTP/3
ekbete36.com/static/js/build821.eb3c97a0a46fbe871f13.js
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65384), with no line terminators
Size
199 kB (198555 bytes)
Hash
b65920495683f88fa7231b322eee80a3
ca395ed8a4b6a673e55a48de9f6ddd225a90135d
2df2e1bb8a0c1c08783e0c22c2ef8a0eef52a63ee43a32aa5e610e291cb9909a

HTTP Headers

GET /static/js/build821.eb3c97a0a46fbe871f13.js HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-a512c"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wZqBjollN7ihbL73wybHOuMUGvFXH9U9aSFIOfK5qipDsr8T2zn6QxTZ4IsQcDL7Oj9ZwMbsTR6Rz%2FIdIOgKxx0qA%2Fdao8u5cqi1OkRu%2FA9V5xwPYTEsAC0sw2HnHCc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342c0a9c1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/img/pic-data.5eee41d.jpg

172.67.196.181

200 OK

30 kB

URL GET HTTP/3
ekbete36.com/static/img/pic-data.5eee41d.jpg
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
JPEG image data, baseline, precision 8, 297x153, components 3
Size
30 kB (30152 bytes)
Hash
5eee41d18609ede6a7bd6841bef394a9
d26bfefedf94ba7568c84111ce88f8986189a97d
2d8132f0366ede6f41f63e5dd17e821a69c609070d2800e82f592dded63661e9

HTTP Headers

GET /static/img/pic-data.5eee41d.jpg HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: image/jpeg
content-length: 30152
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: "6633595d-75c8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wgpQShRya%2BRVcKk6iLzhp9A4dkdEdVoMfXvgRPgYI74r4wvp2wRq%2BDsIQuMr6w7uRS9KzZF0SW9o0vk8icqiamXiprp48OQK25ZcFKCY7AsXiiz%2BRLqs3yqi%2FgwmvyY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e734375a001c06-OSL
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/img/bottom-bank-logo.796c0b4.png

172.67.196.181

200 OK

25 kB

URL GET HTTP/3
ekbete36.com/static/img/bottom-bank-logo.796c0b4.png
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
PNG image data, 576 x 48, 8-bit/color RGBA, non-interlaced
Size
25 kB (25202 bytes)
Hash
796c0b45ad0b1166b192f6b42c7699c1
934d2326771d15ac968f3fc26c3a19259884bbe2
d1fb25183c660ae769c99dad166394b07fd1e4f7361e1f0cfaa78d16c59cc058

HTTP Headers

GET /static/img/bottom-bank-logo.796c0b4.png HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: image/png
content-length: 25202
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: "6633595d-6272"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efKh7iaNBDd3fVOLDhFeW9TyysmvFtinYRxfh9WKzEUNJdQDIwR48b1xWjji6jAh6VSLNFkaVafvIvZfqCunkbCKn35R%2BpV5cR5s4L77SfsfNUv7ymCQj91D56paXZw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e734377a171c06-OSL
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/img/download-title.3a211c5.png

172.67.196.181

200 OK

14 kB

URL GET HTTP/3
ekbete36.com/static/img/download-title.3a211c5.png
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
PNG image data, 299 x 118, 8-bit/color RGBA, non-interlaced
Size
14 kB (14280 bytes)
Hash
3a211c5c01736b3225afac55012ad778
ac592c81a6bc89f3098b5f83313f6221fb3a3265
5a8532a3dfc1faad776193f4026bfaf9e4b8689370b73a37694ebc9047f69d67

HTTP Headers

GET /static/img/download-title.3a211c5.png HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: image/png
content-length: 14280
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: "6633595d-37c8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1y2khQYpvEF8gsYPNiGrpl03BEWIUgaczVGy4ZWsB2AqdfiB5n41xuEXkAmgfob%2FX6GsfPJqZ5NNCMf8Rjwj9tC%2B9lTvUqBNlMOytOFlKfUfda6e2Kue60YX5N1uWro%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e734376a071c06-OSL
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/fonts/element-icons.535877f.woff

172.67.196.181

200 OK

28 kB

URL GET HTTP/3
ekbete36.com/static/fonts/element-icons.535877f.woff
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
Web Open Font Format, TrueType, length 28200, version 1.0
Size
28 kB (28200 bytes)
Hash
535877f50039c0cb49a6196a5b7517cd
0000c4e27d38f9f8bbe4e58b5ce2477e589507a7
ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17

HTTP Headers

GET /static/fonts/element-icons.535877f.woff HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/static/css/build821.60b5b2f6133292ded2df7cadd74710d4.css
Cookie: lang=en_US; ec695f7fac064cfea2a6b26c96cce0ee=3dbb71171481221510995027ec695f7fac064cfea2a6b26c96cce0ee
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: font/woff
content-length: 28200
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: "6633595d-6e28"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VjOOU8u1p0Hz9sijsJtEVJcy2MiulAy5O6tuJ1apTWDMcoy2I5XUITLyUpzI9jdy91ysFAWiSer4hn41aNInyDDE881uEYe4bMDxLLR%2BYSlk7xl0WjVZna93vDp9oGs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e73438bb071c06-OSL
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/img/home_mobile_bg.84bf454.jpg

172.67.196.181

200 OK

102 kB

URL GET HTTP/3
ekbete36.com/static/img/home_mobile_bg.84bf454.jpg
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1001x650, components 3
Size
102 kB (102445 bytes)
Hash
84bf454f354257aab0e08f079d3a9204
954211122097c99d481a922dbea65c04fe819b97
c1a8cc183c00048281e4f950928482ec901ad75843f7a34cb6131776ca8deb2d

HTTP Headers

GET /static/img/home_mobile_bg.84bf454.jpg HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: image/jpeg
content-length: 102445
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: "6633595d-1902d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PygEQQ69%2BGskdzaPP6GjjipG2B55T7qNsXIQUbzFC9udhk5tlxiz6wZ9YAIwCuFfUfyfmXIkYKyW3492htMT9Uh17WBix7Coi0L5zTm75QVgVc85fkTSYkSkVgOc%2BHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e734376a061c06-OSL
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/img/bottom-game-logo.cd35e3f.png

172.67.196.181

200 OK

167 kB

URL GET HTTP/3
ekbete36.com/static/img/bottom-game-logo.cd35e3f.png
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
PNG image data, 1196 x 261, 8-bit/color RGBA, non-interlaced
Size
167 kB (166961 bytes)
Hash
cd35e3f0d415f7477bef1791c7a918d2
4657b3b5f41456dac45b59f57c73e049c4082f16
99c0f125087a7a62401a39621f040c7a129a6f36a48d813789738bb29898f49d

HTTP Headers

GET /static/img/bottom-game-logo.cd35e3f.png HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: image/png
content-length: 166961
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: "6633595d-28c31"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7NO82l7NUqobXOkh191DN2YAeWCQeuUdK%2F9HVoL9eMIcrzK%2F8Oft4eDPmT%2FeAUSU1OeyE8D29Rs3Yxqtcrqa4BdVhLZrKxf9R8ncHp%2FCA5wZ0AQC3ItSU8ba9QjHDLk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e734377a161c06-OSL
alt-svc: h3=":443"; ma=86400

file.f3zoo.com/file/manager/conf/69888917/3.jpg??timestamp=1706415606116

172.67.132.65

200 OK

1.2 kB

URL GET HTTP/2
file.f3zoo.com/file/manager/conf/69888917/3.jpg??timestamp=1706415606116
IP
172.67.132.65:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectf3zoo.com
Fingerprint35:71:63:5A:25:E9:68:CF:86:30:CA:9E:14:17:E8:CA:33:A5:D7:6C
ValidityMon, 29 Apr 2024 14:21:00 GMT - Sun, 28 Jul 2024 14:20:59 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1213 bytes)
Hash
6cc2606c9b42d3f6ef7f9f54e1e6c09a
282c0ad9b11be5ee5b735b1e709d1cea8a21220e
fad387ca15fa78d7906960fa218fcd5a480cf77892050a67dc8cfc2ea01f64aa

HTTP Headers

GET /file/manager/conf/69888917/3.jpg??timestamp=1706415606116 HTTP/1.1
Host: file.f3zoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
content-length: 1213
content-security-policy: block-all-mixed-content
etag: "dd035c00c638d6043a658d70a0b9f3ae-1"
last-modified: Thu, 25 Apr 2024 06:58:52 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 17CB444287679C56
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lFaY%2BBG%2FqJs01N5wlqlC805Ie1mC%2BCbB%2F8O0H2tF57aM9Nt9TlxRUwHpidLfcUh1xSzc5RSbA4kL%2BybZX91VajINJmko6MOLlO5t667%2BMfQY%2F1GwbJ%2FimAb7P1Boim6D6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7343f6c0f569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.hasrtrvln.cc/image/1677487048827482.png

104.18.31.12

52 kB

URL GET
static.hasrtrvln.cc/image/1677487048827482.png
IP
104.18.31.12:0
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type
PNG image data, 257 x 309, 8-bit/color RGBA, non-interlaced
Size
52 kB (52142 bytes)
Hash
76c41df0631afb17c206609f17764197
047f99baddcf461baefde1a78aa065dee3cda516
64f2390fc066aa021bbee44c0623d1f3306dd6107efe7a6f51136317c4f9038b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1677487048827482.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Mon, 27 Feb 2023 08:37:28 GMT
etag: W/"63fc6bc8-c0d8"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343db953569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1712736502625125.png

104.18.31.12

85 kB

URL GET
static.hasrtrvln.cc/image/1712736502625125.png
IP
104.18.31.12:0
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type
PNG image data, 257 x 309, 8-bit/color RGBA, non-interlaced
Size
85 kB (85420 bytes)
Hash
acff6c84f9a35cb509dec82c0cd0ae5c
a3ccfbb754f34097954f036f0245ce2d3860172b
bbb3acadff120223a725213c300c7b5a3dcc8cad2ef29da58b68fa988137e034

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1712736502625125.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Wed, 10 Apr 2024 08:08:22 GMT
etag: W/"661648f6-12d5d"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343dd983569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1662521622978282.png

104.18.31.12

41 kB

URL GET
static.hasrtrvln.cc/image/1662521622978282.png
IP
104.18.31.12:0
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type
PNG image data, 300 x 400, 8-bit colormap, non-interlaced
Size
41 kB (40996 bytes)
Hash
a78dcf3fa25d56d311f336776766b367
d6f9ac6b8850a1410e0294838492797bb1c09658
a2f4f24485dd71cb562da54bc4aa4b3f441d94464ab14efaa6ca5a89f1ea5f88

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1662521622978282.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Wed, 07 Sep 2022 03:33:43 GMT
etag: W/"63181117-8043"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e4a34569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1662521485289662.png

104.18.31.12

11 kB

URL GET
static.hasrtrvln.cc/image/1662521485289662.png
IP
104.18.31.12:0
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type
RIFF (little-endian) data, Web/P image
Size
11 kB (10958 bytes)
Hash
4d8a17cdf0e8e7346687bcf6cf960ca2
67dbf98b751c469925d73a0eb60b07d8cbd8310d
62bdb50d26dfaae6c8d0b8eb2815569e9fb4017c1adf32b0c5e633f199b8f319

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1662521485289662.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=9035
content-disposition: inline; filename="1662521485289662.webp"
etag: W/"6318108d-234b"
last-modified: Wed, 07 Sep 2022 03:31:25 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343df9c4569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1713770742034420.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1713770742034420.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1713770742034420.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 22 Apr 2024 07:25:42 GMT
etag: W/"662610f6-4d245"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d28c8569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/css/build821.60b5b2f6133292ded2df7cadd74710d4.css

172.67.196.181

200 OK

1.7 MB

URL GET HTTP/3
ekbete36.com/static/css/build821.60b5b2f6133292ded2df7cadd74710d4.css
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
1.7 MB (1688939 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/css/build821.60b5b2f6133292ded2df7cadd74710d4.css HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: text/css
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-19c56b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gzVu8qHAwlMr9vs8Id%2FbxN5FHrmruhJESatWxnup%2FmMmx19rKY%2ByE0RALOmrnG%2F4t5lBI9EgMB3gH%2BwKi7xHHokZ1xEYZSzgVLI9OqNYyb%2BL7z04LGXMA6nFYMulvj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342bea841c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/fetchImg

172.67.196.181

200 OK

64 B

URL POST HTTP/3
ekbete36.com/api/guest/fetchImg
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
64 B (64 bytes)
Hash
9813a4781de31dfd384f05d835add698
fbc267f15c7a71a06ea6b61594cd79b96952ed36
153a6f88577f97eeb61c335ed6526551ec244142f9b7bde7221603e3e3c556ee

HTTP Headers

POST /api/guest/fetchImg HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 35
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=04345298C55999E566192255000CE7FC; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rCouODQ76P79K6gIokstbCgtcvyeCHVVB6EwH1WIanHO0U6ghiqydmblZlIcM74YtbGjZeCK8QoNt8iHRYj0Zy8MHKGuaSmlpIOwqUl5cqxq2v24bzdF4Lfk85QmyoQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734383aac1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1713770548171404.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1713770548171404.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1713770548171404.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 22 Apr 2024 07:22:28 GMT
etag: W/"66261034-7709f"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d28c4569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673952104324380.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673952104324380.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673952104324380.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Tue, 17 Jan 2023 10:41:44 GMT
etag: W/"63c67b68-16571"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e5a4f569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/

172.67.196.181

200 OK

6.0 kB

URL User Request GET HTTP/2
ekbete36.com/
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (6104), with no line terminators
Size
6.0 kB (5963 bytes)
Hash
4cbf9949d34d6f444b7d0b76d9818928
28545934fade5557cbc7e288cfbcd05363eb93e4
147beef440ee9fe90c6b0226cf160add3262c28689d5fbcff0193c95a68b4dd5

HTTP Headers

GET / HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 08:43:32 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:06 GMT
cache-control: no-cache, no-store
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mPB5Sq5GvOuFWMiNbLEDTRroj%2BmJGNNMy0e9jWw83m9WC1AnfysRkTEeOtfV0seu5Oj7gZYfwcrk4d2oEvcrrYPw3lyL1o%2F8na6d8%2BrOpFr8em3Cx2w3XOzgnq2wAUE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734289b255685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ekbete36.com/api/guest/queryBonusArticleInfoList

172.67.196.181

200 OK

174 kB

URL POST HTTP/3
ekbete36.com/api/guest/queryBonusArticleInfoList
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
174 kB (174325 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /api/guest/queryBonusArticleInfoList HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: JSESSIONID=83B5D0DB4CABAFAB1C14BAF74EBC4D51; lang=en_US; ec695f7fac064cfea2a6b26c96cce0ee=3dbb71171481221510995027ec695f7fac064cfea2a6b26c96cce0ee
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=E2761C379738C04A345364ECB4377543; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EaJW%2FcKOdegMDq6%2B1Q%2Bm%2BwWHhurledgBcPbbMfCjGjjo%2BEQVIOsbld9y3%2F0AxwDy8wUfsgQZOBV3NxjQuiKMwqwBhM3iemRPTFnIOAMahoqDb1EkKGMa66FkVScE3Yc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e7343a3c081c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1713770772341789.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1713770772341789.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1713770772341789.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 22 Apr 2024 07:26:12 GMT
etag: W/"66261114-4e493"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d38e3569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1710408652391445.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1710408652391445.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1710408652391445.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Thu, 14 Mar 2024 09:30:52 GMT
etag: W/"65f2c3cc-747f9"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d7916569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1663232288472103.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1663232288472103.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1663232288472103.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=102321
content-disposition: inline; filename="1663232288472103.webp"
etag: W/"6322e920-18fb1"
last-modified: Thu, 15 Sep 2022 08:58:08 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343de9af569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673954930605697.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673954930605697.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673954930605697.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=94032
content-disposition: inline; filename="1673954930605697.webp"
etag: W/"63c68672-16f50"
last-modified: Tue, 17 Jan 2023 11:28:50 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343df9c9569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/js/manifest.ccd27d54f5a4bc601c78.js

172.67.196.181

200 OK

3.4 kB

URL GET HTTP/3
ekbete36.com/static/js/manifest.ccd27d54f5a4bc601c78.js
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
JavaScript source, ASCII text, with very long lines (3531), with no line terminators
Size
3.4 kB (3353 bytes)
Hash
f502dde72eca81a7c9fb7569cc9f8372
e4f7f9dc94b28b63f032bf19afdbd39765b62047
19970d7ab338e53cea395ce3d784ec9946e6a1ba7c78d7af997329ec8efd48f9

HTTP Headers

GET /static/js/manifest.ccd27d54f5a4bc601c78.js HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-d19"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B5%2F3Ah%2Bdhbr7MMs1lHX2DsWNp0TWbIyhj7hQdjl4cTSAjnz8ICSLXpHK%2BmtSUN8bzo4FpD8dOyC3%2Fospoz9v1gyUC1%2F8ud82qtHW81ZQbBLF50Yw8vzgXIN4DCrDWrQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342bea861c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/fetchImg

172.67.196.181

200 OK

341 B

URL POST HTTP/3
ekbete36.com/api/guest/fetchImg
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (391), with no line terminators
Size
341 B (341 bytes)
Hash
3c3387b527a7878be1feac54cee27e9d
0025a592ba6de7200eac1f8318b87f7a43b1b55d
feb4234fa4962eb210a93ba721e9cf57cad61d981f3473a6d9de48b06107f9a0

HTTP Headers

POST /api/guest/fetchImg HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 28
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=426257BF13308B7B3972700D578F20A5; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2BizPC1uqVfgJz3ksSmjOSItgTpmkb62J42q7BCxsRV4gcnYCtQE8M9IPCkK173vC74kudPtKIuOK2YdL4K96ieleVmmQhIzuLqf%2FIyhFxDN5ZxrbqgyXZg1AyrUi9Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734382aa71c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/allGameInfo

172.67.196.181

200 OK

49 kB

URL POST HTTP/3
ekbete36.com/api/guest/allGameInfo
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
49 kB (48552 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /api/guest/allGameInfo HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=2FF5D793D7DD63FA61E63B979432F11B; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jwn4d5vp29zzt1QmTifHbHqhcKWqncXYCYiRY8wzQITBrjVcm51e1KCb4hVf%2BDn0GaLOIz199StXxxl8qISDZDdBCpG%2Fiedu6o3Ohi7%2BAHs09iguSwmxupWhIA4ENtk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734386ad11c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1662521321205897.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1662521321205897.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1662521321205897.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=36640
content-disposition: inline; filename="1662521321205897.webp"
etag: W/"63180fe9-8f20"
last-modified: Wed, 07 Sep 2022 03:28:41 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e09d4569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673600764117579.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673600764117579.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673600764117579.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Fri, 13 Jan 2023 09:06:04 GMT
etag: W/"63c11efc-9978"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e2a10569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673952058180126.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673952058180126.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673952058180126.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Tue, 17 Jan 2023 10:40:58 GMT
etag: W/"63c67b3a-15ae1"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e5a4b569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1676531542938308.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1676531542938308.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1676531542938308.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=112827
content-disposition: inline; filename="1676531542938308.webp"
etag: W/"63edd757-1b8bb"
last-modified: Thu, 16 Feb 2023 07:12:23 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e7a75569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/js/vendor-moment.a2fc0a85ba9e62734972.js

172.67.196.181

200 OK

303 kB

URL GET HTTP/3
ekbete36.com/static/js/vendor-moment.a2fc0a85ba9e62734972.js
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
303 kB (302732 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/js/vendor-moment.a2fc0a85ba9e62734972.js HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-49e8c"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTEkpwEyeaV58ReqbIGzQCTHsbdGJwCzAEynJGIzirFe3ZCNOk3d9oF8dpakxT5Fw%2Fzqb3TLZKrGIWEqGnPJBcwHMz3BRONrJt8dG1%2FCYWYvCfoIhjjAB6kSpfRnk7w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342bfa9a1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1675935697937701.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1675935697937701.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1675935697937701.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=122226
content-disposition: inline; filename="1675935697937701.webp"
etag: W/"63e4bfd2-1dd72"
last-modified: Thu, 09 Feb 2023 09:41:38 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e5a5b569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1676531514455970.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1676531514455970.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1676531514455970.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=106209
content-disposition: inline; filename="1676531514455970.webp"
etag: W/"63edd73a-19ee1"
last-modified: Thu, 16 Feb 2023 07:11:54 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e6a66569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1700303979307892.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1700303979307892.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1700303979307892.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Sat, 18 Nov 2023 10:39:39 GMT
etag: W/"6558946b-19e9f"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d9937569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1662522429977488.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1662522429977488.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1662522429977488.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Wed, 07 Sep 2022 03:47:10 GMT
etag: W/"6318143e-9f66"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e3a2e569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ap.f3zoo.com/dotclouds/manager/conf/embedded/window/all?companyId=ec695f7fac064cfea2a6b26c96cce0ee&sourceStyle=EMBEDDED_WINDOW_STYLE_PC&d=06431689071598183

188.114.96.1

200 OK

734 B

URL GET HTTP/3
ap.f3zoo.com/dotclouds/manager/conf/embedded/window/all?companyId=ec695f7fac064cfea2a6b26c96cce0ee&sourceStyle=EMBEDDED_WINDOW_STYLE_PC&d=06431689071598183
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectf3zoo.com
Fingerprint35:71:63:5A:25:E9:68:CF:86:30:CA:9E:14:17:E8:CA:33:A5:D7:6C
ValidityMon, 29 Apr 2024 14:21:00 GMT - Sun, 28 Jul 2024 14:20:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (776), with no line terminators
Size
734 B (734 bytes)
Hash
6c52c4fa6bf19b08d51d3f87ed93e8d8
56018bb9aa39eec68a68bf1e94150e7a1645a328
5a404fa7bf1ce83e08d88675982876b76cfba77012e2a160a5d4829d133a6db2

HTTP Headers

GET /dotclouds/manager/conf/embedded/window/all?companyId=ec695f7fac064cfea2a6b26c96cce0ee&sourceStyle=EMBEDDED_WINDOW_STYLE_PC&d=06431689071598183 HTTP/1.1
Host: ap.f3zoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
set-cookie: JSESSIONID=5BCF425B4DFC8529F697F33FB8320CBE; Path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LIq4W%2B9ODjnv8gbqMjQr6hvRFWfUy0A%2FdCSWJOI%2BaBtObtZMDGWvphKiQzDlpcT7njrHJEuEzy53TVlw51Q49g0B1bclniv%2BohqjKsPlY4ympzE0po0ho7ECmfho6ko%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e73438cd3b56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1677488658222171.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1677488658222171.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1677488658222171.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=184362
content-disposition: inline; filename="1677488658222171.webp"
etag: W/"63fc7212-2d02a"
last-modified: Mon, 27 Feb 2023 09:04:18 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e3a26569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1686123596966417.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1686123596966417.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1686123596966417.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=132582
content-disposition: inline; filename="1686123596966417.webp"
etag: W/"6480344d-205e6"
last-modified: Wed, 07 Jun 2023 07:39:57 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e4a46569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/queryBonusArticleTypeList

172.67.196.181

200 OK

365 B

URL POST HTTP/3
ekbete36.com/api/guest/queryBonusArticleTypeList
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (439), with no line terminators
Size
365 B (365 bytes)
Hash
3a37773abe2083f05a5c1335914d8db1
9f036a4d756a2c328fec970715d7521b1f1e32d6
f286a89d054a1cd4daf9eb29d7f7d4505eed8ca743caaff0a44f79bea3fb0c89

HTTP Headers

POST /api/guest/queryBonusArticleTypeList HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=D5C5A582F33741A5703011B858FA140B; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0yyW7SVI7hiaq9q%2BOyatU1fhrOOCtF9C834HNG7R134lqpyrx%2FlLB3%2FbSCM98wI2nUINyf0fQ7%2F56HiNCywn38TL3Qa42VAt1Um%2FyAKpMpNtt7uG0%2B3oGv8okL2gRmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734380a7d1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1713770732593309.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1713770732593309.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1713770732593309.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 22 Apr 2024 07:25:32 GMT
etag: W/"662610ec-5e1ea"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d28c6569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673596459132716.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673596459132716.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673596459132716.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=151965
content-disposition: inline; filename="1673596459132716.webp"
etag: W/"63c10e2b-2519d"
last-modified: Fri, 13 Jan 2023 07:54:19 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e19f2569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1679021733694668.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1679021733694668.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1679021733694668.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=142032
content-disposition: inline; filename="1679021733694668.webp"
etag: W/"6413d6a5-22ad0"
last-modified: Fri, 17 Mar 2023 02:55:33 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e1a05569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/game/guest/newHeatGamePlatform

172.67.196.181

404 Not Found

138 B

URL POST HTTP/3
ekbete36.com/api/game/guest/newHeatGamePlatform
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
138 B (138 bytes)
Hash
3a9c2fe371b0336f33d152d121320f5a
340cad8ab1b2249ca4ddabab0075369e593c7d5e
27982762c62d6fce18afe7968d3b7a5534404db4bf1fb861148cd14f0f301bfe

HTTP Headers

POST /api/game/guest/newHeatGamePlatform HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
set-cookie: JSESSIONID=DDC6C7CDEDB6869884B0F77B70B53880; Path=/api; Secure; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ISD%2F4nbCevYfbMWcHb63e5FnMIvWQ7m8rc1jc2lfx85VcB8Xiyohy5ze3PRpN0lOehNdZEG2GX9Q%2Bf%2FpmY%2B2aXg72a0WRm0rAsBAIlHvaf%2BlyCyptjPOVgDOvYBcdhw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734381a921c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/articleType

172.67.196.181

200 OK

2.0 kB

URL POST HTTP/3
ekbete36.com/api/guest/articleType
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (2063), with no line terminators
Size
2.0 kB (1995 bytes)
Hash
24d8b9e7393a01f6f5d97066bc27579f
8c5567ff54180b159713da35baaaea062698ae6b
500c864c911aa29befa798e886c8aa6fd767bfcd4ae616b834667a903e496c55

HTTP Headers

POST /api/guest/articleType HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=6415E08D0A096CE125E66B7277B27D8E; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2tOxi569pnmzrs5UKfoHYczNGEevTeo5NRwucTgm2GeIi%2Bpe6XM2pFDUcmckK8lGxqaz6s%2FAYUVBB97GXM2aIeCkuDIiOHNYf%2FQRIsauqD5Ls8EbIwRfCu4ekqupAQ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734381a961c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1710835549421367.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1710835549421367.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1710835549421367.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: image/jpeg
last-modified: Tue, 19 Mar 2024 08:05:49 GMT
etag: W/"65f9475d-43361"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:35 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343adeb256a5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static.hasrtrvln.cc/image/1663232250414603.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1663232250414603.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1663232250414603.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=103072
content-disposition: inline; filename="1663232250414603.webp"
etag: W/"6322e8fa-192a0"
last-modified: Thu, 15 Sep 2022 08:57:30 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343de99b569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/allGameInfo

172.67.196.181

200 OK

49 kB

URL POST HTTP/3
ekbete36.com/api/guest/allGameInfo
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
49 kB (48552 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /api/guest/allGameInfo HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=0753B11211DF43CC5A2397D8B7F01F65; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qs5WUVK4wFyLm8d3dgJQPAqW6Rg2BZt%2F5pTuYz%2BUgTafPUoERlyuyp6s6Ga9j4gCSv5JXTWxfOOqAROn%2FVIBW7wPIiw%2B7SOuxuO8V9BTjxC8ZJL4PQ9XaSbk3D38jFk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734386ad31c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1713770484323734.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1713770484323734.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1713770484323734.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 22 Apr 2024 07:21:24 GMT
etag: W/"66260ff4-2c1e9"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d38cd569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1713770762577295.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1713770762577295.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1713770762577295.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 22 Apr 2024 07:26:02 GMT
etag: W/"6626110a-51e24"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d38d2569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/171377056687630.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/171377056687630.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/171377056687630.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=456594
content-disposition: inline; filename="171377056687630.webp"
etag: W/"66261047-6f792"
last-modified: Mon, 22 Apr 2024 07:22:47 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343d28c1569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1713770788550935.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1713770788550935.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1713770788550935.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 22 Apr 2024 07:26:28 GMT
etag: W/"66261124-3fc9f"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d48ee569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/167412024926471.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/167412024926471.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/167412024926471.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=142042
content-disposition: inline; filename="167412024926471.webp"
etag: W/"63c90c39-22ada"
last-modified: Thu, 19 Jan 2023 09:24:09 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e4a3d569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673598503502771.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673598503502771.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673598503502771.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=34868
content-disposition: inline; filename="1673598503502771.webp"
etag: W/"63c11627-8834"
last-modified: Fri, 13 Jan 2023 08:28:23 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e2a09569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/favicon.ico

172.67.196.181

200 OK

68 kB

URL GET HTTP/3
ekbete36.com/favicon.ico
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Size
68 kB (67646 bytes)
Hash
6312fddf4767e7c6632847c2fc6723c9
1204c8529cf43b5af01ee66ee4eecfcff03d618d
1fe72c005ccca8c6b6945c39036028629f9be2fe1866a04ab0a3fa9651f28825

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US; ec695f7fac064cfea2a6b26c96cce0ee=3dbb71171481221510995027ec695f7fac064cfea2a6b26c96cce0ee
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:37 GMT
content-type: image/x-icon
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-1083e"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fy5K4Wm9YO1aINMW%2B%2Feadz3RxwDp5FBpXpMBBHlVvpvohMizCOnW62Sf2WB03bmM7%2FbrW4iHrYy6XYgrQM4YjKjbAi4ld%2F3ZDLwC5xATBuqOnANZt3K4AZ9nYiejtbg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e734436acb1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/game/guest/gamePlatformGroup

172.67.196.181

200 OK

33 kB

URL POST HTTP/3
ekbete36.com/api/game/guest/gamePlatformGroup
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
33 kB (32743 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /api/game/guest/gamePlatformGroup HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=FE4C1E3B0908CF0A20D74BBA6E3A3B0C; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b6ve0g3P24VAncPr3xKYHAfNzBjNps%2Fx1dT4OPC9lTkmQ%2FTZVNQ%2F3XAUJLs5EBZY5x99ICunc5thF0BrIV0VEFZLbZkYOCVVFh71WpZlenSB%2FDU8p01TZCLPb51vY%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734380a801c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/fetchImg

172.67.196.181

200 OK

1.1 kB

URL POST HTTP/3
ekbete36.com/api/guest/fetchImg
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (1180), with no line terminators
Size
1.1 kB (1050 bytes)
Hash
ed658fe2231e6de04cdfeda92bd5fbb9
b60b7df611d698618914cdf0f3d54be9d3ce3079
d8aa0530d156a7b6a59a00a55d5b1f7289dedf173285475f2bd54d5786789bec

HTTP Headers

POST /api/guest/fetchImg HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 36
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=82DABE8541A880534AAD6AD70ABBB181; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6W2xWbQOpxCJHe6graPac603KpOz8j2kQEXB2fdZQLVttmD666B2rUtgxT1fp3bJzVm0YFBXExaElKKEHyqOBNdKhRZWQezrlYG3JBCb5ciSwV3YMHKnQyqA5vPVp0w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734383aaa1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1674207605380663.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1674207605380663.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1674207605380663.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Fri, 20 Jan 2023 09:40:05 GMT
etag: W/"63ca6175-44be"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343da946569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1662717136071315.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1662717136071315.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1662717136071315.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Fri, 09 Sep 2022 09:52:16 GMT
etag: W/"631b0cd0-83a8"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e09db569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1675836205766237.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1675836205766237.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1675836205766237.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Wed, 08 Feb 2023 06:03:25 GMT
etag: W/"63e33b2d-1d386"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e09eb569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/js/common-api.a51845e267cbb79cd230.js

172.67.196.181

200 OK

118 kB

URL GET HTTP/3
ekbete36.com/static/js/common-api.a51845e267cbb79cd230.js
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
118 kB (118231 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/js/common-api.a51845e267cbb79cd230.js HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-1cdd7"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fl644iLc5%2FoeQVzV%2BABRXcQiJAeLzC%2FjgM%2F1cIsw5u%2BXBJt%2FWsmOI%2FaVK9aql5czwKPEKroAvna%2FhZbvGnfGzOvy6CD1Nx61gO4xYeNkYF7xE6Ohqfp6cXfnibocaY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342bfa9b1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/fetchImg

172.67.196.181

200 OK

350 B

URL POST HTTP/3
ekbete36.com/api/guest/fetchImg
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (400), with no line terminators
Size
350 B (350 bytes)
Hash
9e4c53c1fd55acc0ba1be62b6e365124
552b29e8c17f5698fe9e06f30992c5eb92fa7afa
4653cf20a8b2ecadbbb6975ec1def5e8fbfc940667debab4a17073e217c28e8f

HTTP Headers

POST /api/guest/fetchImg HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 40
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=83CEE415E8058BA59DC44DED521D6677; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtzecpuq5d6hSU1JkI1OVCLNIXCH5U1WN3dsrKJLOzOA408B1Uvi%2BA6RF2KlUZXATbe2PRdvU57pjcu3PZTksB5amnROaBhBMuMgLHjW5c4C%2FARdj44AAuId40883Po%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734382aa31c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/fetchImgs

172.67.196.181

200 OK

136 B

URL POST HTTP/3
ekbete36.com/api/guest/fetchImgs
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
136 B (136 bytes)
Hash
b051a6f4ae9d86d33e5abdcd7b1a479e
decd0b81ad052473f9c02a41989e2e0cba921f8e
517853780e85700d67b557726eee914417ababd8b0b30e9ba19714f196035e3c

HTTP Headers

POST /api/guest/fetchImgs HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 79
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=AA539D02C463888C22B74541A94AF19D; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=76VFPMqQ5o6Hnx4hPgm2zjwhIeGlyB3VbgprMgQHglvKjdFZh1t20mnlMzgZHFc0NhCq%2FMyU7oDZaAuVOfRMsR4wMS8ViJFkDxtAoru7aGFI6DyBT6LgAyHCeiF6i%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734382aa81c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1663232236157275.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1663232236157275.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1663232236157275.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Thu, 15 Sep 2022 08:57:16 GMT
etag: W/"6322e8ec-1c08e"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343dd994569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/167395207570748.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/167395207570748.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/167395207570748.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=82733
content-disposition: inline; filename="167395207570748.webp"
etag: W/"63c67b4b-1432d"
last-modified: Tue, 17 Jan 2023 10:41:15 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e5a58569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1713770752580397.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1713770752580397.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1713770752580397.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 22 Apr 2024 07:25:52 GMT
etag: W/"66261100-54b12"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d28ca569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1711097744708809.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1711097744708809.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1711097744708809.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Fri, 22 Mar 2024 08:55:45 GMT
etag: W/"65fd4791-7f8fc"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d7914569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1674207799849277.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1674207799849277.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1674207799849277.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Fri, 20 Jan 2023 09:43:19 GMT
etag: W/"63ca6237-550a"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343db94d569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673580601948853.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673580601948853.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673580601948853.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=86874
content-disposition: inline; filename="1673580601948853.webp"
etag: W/"63c0d03a-1535a"
last-modified: Fri, 13 Jan 2023 03:30:02 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343de99f569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/js/vendor-vuetify.2af9729c26b827a5d2f9.js

172.67.196.181

200 OK

798 kB

URL GET HTTP/3
ekbete36.com/static/js/vendor-vuetify.2af9729c26b827a5d2f9.js
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
798 kB (798312 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/js/vendor-vuetify.2af9729c26b827a5d2f9.js HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-c2e68"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GTL31BMAvH2c6uIuEiG5cZz%2BaM8qL4PHwWHdwT2ndl0xY2HAgUgoJonOQqVkLrJqhLPZHo2FFu3e9ZqJri%2FFBsGde3YteqekqaZ5uIqrAdKfFvbdaXZOibnzhog%2Bf5s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342bfa931c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/js/vendor-swiper.2ddf65656d09a3b4dec7.js

172.67.196.181

200 OK

132 kB

URL GET HTTP/3
ekbete36.com/static/js/vendor-swiper.2ddf65656d09a3b4dec7.js
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
132 kB (132524 bytes)
Hash
3bf940d9bcb0a2fae743d22425af0a0d
a01fe458e06aafc4f1920ad150361683984329fb
37d5114ba0c965bfb5fd3fca59ab39b1183ec3814fc0662e0dce3ac754a0d27e

HTTP Headers

GET /static/js/vendor-swiper.2ddf65656d09a3b4dec7.js HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-205ac"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z2o5nQP%2B03unRBV2o4DqrgyAFPD4UeK6fMAWsarFoyRlaiVvC%2FUf1olAiAXefFag%2BWsxGWuxC3UWvR68gaCbNc%2B95MrByitC%2BUTjGSdedL%2B0MSJxg1SyeMbNOqPtmhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342bfa961c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/frontConfig/getFrontConfig/list

172.67.196.181

200 OK

116 kB

URL POST HTTP/3
ekbete36.com/api/guest/frontConfig/getFrontConfig/list
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
116 kB (116497 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /api/guest/frontConfig/getFrontConfig/list HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=37672C9BBEA61D972019A0A2E1A83613; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mzrLzW6OJdx3YlQnOEGnjCZ%2B1fzBMQVkiHnlKuUqXX1GcUs6ReGQ3clwMljlGLatPb9icB0J%2B%2BCzFSV9zhZJBawCqDTWW74WIPF%2B5pISxQKmlxroRpxdPIIsNmI%2BvN8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734386ad41c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1662521585042133.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1662521585042133.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1662521585042133.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=40393
content-disposition: inline; filename="1662521585042133.webp"
etag: W/"631810f1-9dc9"
last-modified: Wed, 07 Sep 2022 03:33:05 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e2a0c569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1676531527094545.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1676531527094545.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1676531527094545.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=103514
content-disposition: inline; filename="1676531527094545.webp"
etag: W/"63edd747-1945a"
last-modified: Thu, 16 Feb 2023 07:12:07 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e6a69569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1714381781391111.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1714381781391111.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1714381781391111.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Mon, 29 Apr 2024 09:09:42 GMT
etag: W/"662f63d6-1ae243"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d18ba569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/upload/1714382625421129.jpg

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/upload/1714382625421129.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /upload/1714382625421129.jpg HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/jpeg
last-modified: Mon, 29 Apr 2024 09:23:45 GMT
etag: W/"662f6721-48701"
cf-cache-status: MISS
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343d790f569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1679021675209703.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1679021675209703.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1679021675209703.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Fri, 17 Mar 2023 02:54:35 GMT
etag: W/"6413d66b-15f07"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343de9a7569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1703592158742759.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1703592158742759.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1703592158742759.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Tue, 26 Dec 2023 12:02:38 GMT
etag: W/"658ac0de-2a893"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e19fe569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1662716759865243.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1662716759865243.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1662716759865243.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Fri, 09 Sep 2022 09:45:59 GMT
etag: W/"631b0b57-ad68"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e1a07569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/static/js/vendor.4507fff49e6d129d923e.js

172.67.196.181

200 OK

983 kB

URL GET HTTP/3
ekbete36.com/static/js/vendor.4507fff49e6d129d923e.js
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type

Size
983 kB (982844 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/js/vendor.4507fff49e6d129d923e.js HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:33 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 02 May 2024 09:14:05 GMT
etag: W/"6633595d-eff3c"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8jE5upCarQfgbon4M1iAhkWlXJFWPR%2FRK4CCupmBi0v2kD37cJHnsA20Hcwqv654O2j48eXjILh5IGjm6AKmCp%2FbWEp%2Fzh9kYEKsBzAlniYAlwjfE%2F73JFak%2BY8nEKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7342bea881c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/fetchImg

172.67.196.181

200 OK

3.3 kB

URL POST HTTP/3
ekbete36.com/api/guest/fetchImg
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (3748), with no line terminators
Size
3.3 kB (3338 bytes)
Hash
2a1e11d1f1fbf46675f1df7a4c683588
4e9876b76518ffbfa485a8445b5bfa0cf4f0e57b
6de6a41a24cf5db9268226793a7b573cd23cb870c1eec53b663a5e69dbccf78e

HTTP Headers

POST /api/guest/fetchImg HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 33
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=83B5D0DB4CABAFAB1C14BAF74EBC4D51; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lMMBiFlvMX%2FC%2BS0cMV7qTnJS%2BrF4uL3qp9VAC1EDLFVRLHGu3HIQqJjnEoesopnRnN%2FsBjkKnU460oq%2BRUSbGEkqNCNL96Bpencu4QfYmj7I%2FZf1cEWPd9BZ38w1V%2Bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734382aa51c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/init

172.67.196.181

200 OK

1.3 kB

URL POST HTTP/3
ekbete36.com/api/init
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (1429), with no line terminators
Size
1.3 kB (1253 bytes)
Hash
07a83b595372c4e23eab0b65bbb1f5d2
e3670b5506fe40fcc752d054fa1e242b3e395294
c44cd0f7e2343f8f17769de53b25fcfc65ff1519eddd5907e006e222e5561d30

HTTP Headers

POST /api/init HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=E36995A0F4676F466CC175EEF0DDCE8E; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PDNamXNVSAHHLsEjAyPwyfuHKQ9Ux6uMqjmF%2BOoWjFW0rT%2F%2BELFqgkeKM97%2BKU3wnTbTtuiL1BuPEHmUZgqoPdHV8xv%2FVzIrTxRLYpc3EsDD0OMUj%2FDh%2BMeKkME6LOg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734387adb1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673596287359495.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673596287359495.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673596287359495.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=144200
content-disposition: inline; filename="1673596287359495.webp"
etag: W/"63c10d7f-23348"
last-modified: Fri, 13 Jan 2023 07:51:27 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343e4a36569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ekbete36.com/api/guest/firstNavList

172.67.196.181

200 OK

64 B

URL POST HTTP/3
ekbete36.com/api/guest/firstNavList
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
64 B (64 bytes)
Hash
9813a4781de31dfd384f05d835add698
fbc267f15c7a71a06ea6b61594cd79b96952ed36
153a6f88577f97eeb61c335ed6526551ec244142f9b7bde7221603e3e3c556ee

HTTP Headers

POST /api/guest/firstNavList HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 22
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=799A04E8609002391B9FD6DD13F977A8; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q2chKnQ%2Bg9ciiha7CQ5hvEs6WOAjbeB7Ij97W9P6Qc66IO%2BLHPiVSsFz87GE1EIH0gLHfhAttlEUDWiSjva3nK%2BvFnwGzsC1SYM8%2Fsm592iz17xT9Ah0LhjG3pLjoTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734387ae51c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1674207701361663.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1674207701361663.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1674207701361663.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Fri, 20 Jan 2023 09:41:41 GMT
etag: W/"63ca61d5-563c"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343dc96b569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1662543529744130.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1662543529744130.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1662543529744130.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/webp
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=75918
content-disposition: inline; filename="1662543529744130.webp"
etag: W/"631866a9-1288e"
last-modified: Wed, 07 Sep 2022 09:38:49 GMT
vary: Accept
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 87e7343df9bc569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.ccnull/

0.0.0.0

0 B

URL GET
static.hasrtrvln.ccnull/
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: static.hasrtrvln.ccnull
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

static.hasrtrvln.cc/image/167411965213992.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/167411965213992.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/167411965213992.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Thu, 19 Jan 2023 09:14:12 GMT
etag: W/"63c909e4-24e38"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e5a49569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ap.f3zoo.com/app/index.min.js

188.114.96.1

200 OK

14 kB

URL GET HTTP/2
ap.f3zoo.com/app/index.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectf3zoo.com
Fingerprint35:71:63:5A:25:E9:68:CF:86:30:CA:9E:14:17:E8:CA:33:A5:D7:6C
ValidityMon, 29 Apr 2024 14:21:00 GMT - Sun, 28 Jul 2024 14:20:59 GMT

File type

Size
14 kB (14004 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /app/index.min.js HTTP/1.1
Host: ap.f3zoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/javascript
last-modified: Tue, 26 Sep 2023 08:39:00 GMT
etag: W/"651298a4-36b4"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O2MeOwNnEM46aay9Za0ciCWVl2eAwjorHcSyoCfRMh%2BVxtxEhi3qygxRBGN699n0NzgtQjsLNMRuoK8scMiEQxwWdXlBtYqId3c%2F1ZPbReWIbimQ2QNeV%2FnWfxuoBv4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e73434ef1a56a5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ekbete36.com/api/guest/pushInfoList

172.67.196.181

200 OK

2.8 kB

URL POST HTTP/3
ekbete36.com/api/guest/pushInfoList
IP
172.67.196.181:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectekbete36.com
Fingerprint14:46:E4:19:89:7A:7F:56:F5:A5:2E:83:AC:A0:43:51:2E:44:A8:9E
ValidityFri, 19 Apr 2024 05:56:41 GMT - Thu, 18 Jul 2024 05:56:40 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (2967), with no line terminators
Size
2.8 kB (2813 bytes)
Hash
0c920cd7444a81ee979796e2f6668f47
b7e65f99effe9444a9cf595ca52a26a46ad4d89d
6a9fd1e041bf31a4f497871ea020b71adcf450787efd0941b758f6c00316442a

HTTP Headers

POST /api/guest/pushInfoList HTTP/1.1
Host: ekbete36.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 22
Origin: https://ekbete36.com
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Cookie: lang=en_US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:35 GMT
content-type: application/json;charset=UTF-8
set-cookie: JSESSIONID=D90BFC6E66B1636437BC72CE7B754EEE; Path=/api; Secure; HttpOnly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vuQ%2BE1x1kkCoOc4H1qXf5NrdCDK3qY57eoZM3Cpm%2BgHBN9Rt9RdwQclX97xqIT3ia%2BOdfr76UafTpPYCgMmmZ1hc4i4LemUZ%2B2oW6cUSMkHThpZDaK9HCuoKYySJc9k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e734381a8e1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

static.hasrtrvln.cc/image/1673953821089257.png

0.0.0.0

0 B

URL GET
static.hasrtrvln.cc/image/1673953821089257.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://ekbete36.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecthasrtrvln.cc
Fingerprint2C:3B:AD:A8:42:3E:E4:64:1A:93:FF:DE:68:3B:8F:38:19:5F:F5:85
ValiditySun, 24 Mar 2024 16:01:40 GMT - Sat, 22 Jun 2024 16:01:39 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/1673953821089257.png HTTP/1.1
Host: static.hasrtrvln.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ekbete36.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 08:43:36 GMT
content-type: image/png
last-modified: Tue, 17 Jan 2023 11:10:21 GMT
etag: W/"63c6821d-15bcf"
cf-cache-status: REVALIDATED
expires: Sat, 04 May 2024 12:43:36 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e7343e5a56569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML