| my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/ |  172.67.215.9 | 403 Forbidden | 2.2 kB |
URL User Request GET HTTP/2my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/ IP172.67.215.9:443
CertificateIssuerGoogle Trust Services LLC Subjectworld4foryou.com FingerprintF4:3B:E1:38:A9:A7:97:8E:21:50:03:A7:B5:57:D6:3C:39:9E:57:DE ValidityThu, 22 Feb 2024 16:39:28 GMT - Wed, 22 May 2024 16:39:27 GMT
File typeHTML document, ASCII text, with very long lines (1125) Hash0dffb13fa4e290256aac072ef3a17186 dbe46206aaa5185009fab957dd048d43e7440d2e cef1ee36da9f153c16142de239040eedfe49c01dde27229cd7e4f144e396d99e
GET /de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/ HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Thu, 28 Mar 2024 21:29:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Thu, 28 Mar 2024 21:29:33 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j5OBFhDKqv0BHmxeeRgiveXFiP26hJWhe72ygOfCrpGsfg4NdNMwjFfuSi4aTv3gK%2FhsgtMqrsLNdRxYamteYl7HPOtr%2F0Tki6m%2FJs4c%2FtIIP%2Bxi9c%2FBLDYEA8F2r4I1G7lYjSc%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86bab6ffeddd5691-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| my.world4foryou.com/cdn-cgi/styles/cf.errors.css | 172.67.215.9 | 200 OK | 4.5 kB |
URL GET HTTP/1.1my.world4foryou.com/cdn-cgi/styles/cf.errors.css IP172.67.215.9:80
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/
File typeASCII text, with very long lines (24131) Hasha1cedc21f16b5a97114857154fab35e9 95e9890a15a4f7f94f7f19d2c297e4b07503c526 1103290e25ebda2712abe344a87facbac00ddaba712729be9fe5feef807bf91b
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Sinkholed / Blocked |
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 21:29:18 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 22 Mar 2024 11:37:58 GMT
ETag: W/"65fd6d96-5e44"
Server: cloudflare
CF-RAY: 86bab7007e775691-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Thu, 28 Mar 2024 23:29:18 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
|
|
| my.world4foryou.com/cdn-cgi/images/browser-bar.png?1376755637 | 172.67.215.9 | 200 OK | 715 B |
URL GET HTTP/1.1my.world4foryou.com/cdn-cgi/images/browser-bar.png?1376755637 IP172.67.215.9:80
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/
File typePNG image data, 960 x 53, 8-bit colormap, non-interlaced Hash226dcb8f6144bdaafdfbd8f2f354be64 3785cc5b3bf52f8e398177b0ff1020b24aa86b8c 8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Sinkholed / Blocked |
GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://my.world4foryou.com/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 21:29:18 GMT
Content-Type: image/png
Content-Length: 715
Connection: keep-alive
Last-Modified: Fri, 22 Mar 2024 11:37:58 GMT
ETag: "65fd6d96-2cb"
Server: cloudflare
CF-RAY: 86bab700aeab5691-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Thu, 28 Mar 2024 23:29:18 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
|
|
| my.world4foryou.com/cdn-cgi/images/cf-no-screenshot-error.png |  104.21.43.2 | 200 OK | 3.2 kB |
URL GET HTTP/1.1my.world4foryou.com/cdn-cgi/images/cf-no-screenshot-error.png IP104.21.43.2:80
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/
File typePNG image data, 178 x 175, 8-bit colormap, non-interlaced Hash0d768cbc261841d3affc933b9ac3130e aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7 1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Sinkholed / Blocked |
GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://my.world4foryou.com/cdn-cgi/styles/cf.errors.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 21:29:18 GMT
Content-Type: image/png
Content-Length: 3213
Connection: keep-alive
Last-Modified: Fri, 22 Mar 2024 11:37:58 GMT
ETag: "65fd6d96-c8d"
Server: cloudflare
CF-RAY: 86bab700afbbb509-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Thu, 28 Mar 2024 23:29:18 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
|
|
| my.world4foryou.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.215.9 | 302 Found | 0 B |
URL GET HTTP/2my.world4foryou.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.215.9:443
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/ CertificateIssuerGoogle Trust Services LLC Subjectworld4foryou.com FingerprintF4:3B:E1:38:A9:A7:97:8E:21:50:03:A7:B5:57:D6:3C:39:9E:57:DE ValidityThu, 22 Feb 2024 16:39:28 GMT - Wed, 22 May 2024 16:39:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Thu, 28 Mar 2024 21:29:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://my.world4foryou.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=db677Fozya56J2wOYIK8i5aqDr%2FonBXR6bciFpfPG313AEPBM07od8v49hps3ScpxA4P1EBXzkV6hYx4CRo1kKKQSDuz2kewCvFDUa6uVXxL8Yvv%2FHHnKzV3Ao%2BGaABf6AfqWHX%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86bab700ded85691-OSL
alt-svc: h2=":443"; ma=60
|
|
| my.world4foryou.com/favicon.ico | 104.21.43.2 | 403 Forbidden | 1.7 kB |
URL GET HTTP/1.1my.world4foryou.com/favicon.ico IP104.21.43.2:80
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/
File typeHTML document, ASCII text, with very long lines (394) Hashc8fd870e25d8dd2322997c9702988429 e011eb02e534f537b1fd4e53f7b9abc4b771509b fe1437c1528757e224aec8a89b89e262d4c0f71abeaade53d0fad63a7883d4ab
GET /favicon.ico HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Thu, 28 Mar 2024 21:29:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Thu, 28 Mar 2024 21:29:33 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uSUN%2BRIfnn49AtKM84tNknPe72WlqfReXkrXSsZI2hz5GBu0Qkv6TynYu7oa779G66iWa%2B1JUdt9GVe2EVjjpSqo35FD3XlqtHUK3Mj8tng0yjJ2tKEAZmCdM5z3HrefLEkwJtHu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86bab700cfddb509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| my.world4foryou.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.215.9 | 302 Found | 0 B |
URL GET HTTP/2my.world4foryou.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.215.9:443
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/ CertificateIssuerGoogle Trust Services LLC Subjectworld4foryou.com FingerprintF4:3B:E1:38:A9:A7:97:8E:21:50:03:A7:B5:57:D6:3C:39:9E:57:DE ValidityThu, 22 Feb 2024 16:39:28 GMT - Wed, 22 May 2024 16:39:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 28 Mar 2024 21:29:18 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js
cache-control: max-age=300, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dygMIr3qiCqjcH3NncxHppNrf0HjVv35EihkxqvztQ%2Fec3cbaOXg8zY5T%2BXL%2BS71gzXNsdAS%2FD3n%2F9hXYOT%2F%2FzuIqGqR93m13rN8WDSX8Nym6xcq4PksKE1LHHe1VLd5nAhiJR4m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bab700f809b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| my.world4foryou.com/cdn-cgi/challenge-platform/h/g/jsd/r/86bab6ffeddd5691 | 104.21.43.2 | 400 Bad Request | 0 B |
URL OPTIONS HTTP/3my.world4foryou.com/cdn-cgi/challenge-platform/h/g/jsd/r/86bab6ffeddd5691 IP104.21.43.2:443
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/ CertificateIssuerGoogle Trust Services LLC Subjectworld4foryou.com FingerprintF4:3B:E1:38:A9:A7:97:8E:21:50:03:A7:B5:57:D6:3C:39:9E:57:DE ValidityThu, 22 Feb 2024 16:39:28 GMT - Wed, 22 May 2024 16:39:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/86bab6ffeddd5691 HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 11650
Origin: http://my.world4foryou.com
DNT: 1
Connection: keep-alive
Referer: http://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Date: Thu, 28 Mar 2024 21:29:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Location: https://my.world4foryou.com/cdn-cgi/challenge-platform/h/g/jsd/r/86bab6ffeddd5691
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FLhB7bdNuP40vsRUnkIrnM%2BAW%2BibBSpxa9UUC4X40u11bbAUIApt9e2Mio3%2BRvL%2Bj0cl97qW2bcmC4VUDuVw6d1ONMY6efUFBX0KnzCj3lJT4Em3CuSkHNUtvfUF8jYnJkAJmtj7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 86bab701d8beb509-OSL
alt-svc: h2=":443"; ma=60
|
|
| my.world4foryou.com/cdn-cgi/challenge-platform/h/g/jsd/r/86bab6ffeddd5691 | 172.67.215.9 | 400 Bad Request | 7.1 kB |
URL OPTIONS HTTP/3my.world4foryou.com/cdn-cgi/challenge-platform/h/g/jsd/r/86bab6ffeddd5691 IP172.67.215.9:443
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/ CertificateIssuerGoogle Trust Services LLC Subjectworld4foryou.com FingerprintF4:3B:E1:38:A9:A7:97:8E:21:50:03:A7:B5:57:D6:3C:39:9E:57:DE ValidityThu, 22 Feb 2024 16:39:28 GMT - Wed, 22 May 2024 16:39:27 GMT
Hash8b3ecde66e05b0cdc5c6f0c8632901bc 9b29e18065cbfac2e09cb074f5ab657d05834b4f 76e3b803922de0c39ee615f71c39f77793cb6aa4cb9823639d62638472bedafc
OPTIONS /cdn-cgi/challenge-platform/h/g/jsd/r/86bab6ffeddd5691 HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Referer: http://my.world4foryou.com/
Origin: http://my.world4foryou.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Thu, 28 Mar 2024 21:29:18 GMT
content-type: application/json
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
cf-chl-out: 6/wVJ6OzfkG1b/OXC2Q1AA==$zsSwu5mjFT/vKE3mfV1lJA==
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iXbtL5BiCh4%2FolnMNUsBVknx6jQ0fcgJfB0osk%2FvTTgXxkmMx2NVOw%2FegnyBQoEGKtZNqpPofJqK0kdj8YXP1TsbcAisVn3h0YIZ8r%2B6rRTsQZOBHAjgsgx89sG4K8Fa5cOUvwGi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bab7022d4b7131-OSL
alt-svc: h3=":443"; ma=86400
|
|
| my.world4foryou.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js | 172.67.215.9 | 200 OK | 7.8 kB |
URL GET HTTP/2my.world4foryou.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js IP172.67.215.9:443
Requested byhttp://my.world4foryou.com/de/818fbdfdfd62298/cc.php?%23_818fbdfdfd622986d/ CertificateIssuerGoogle Trust Services LLC Subjectworld4foryou.com FingerprintF4:3B:E1:38:A9:A7:97:8E:21:50:03:A7:B5:57:D6:3C:39:9E:57:DE ValidityThu, 22 Feb 2024 16:39:28 GMT - Wed, 22 May 2024 16:39:27 GMT
File typeJavaScript source, ASCII text, with very long lines (7814), with no line terminators Hashd8a14dfe053c708f357ff0bc3026cc5a 0e61a86792ba73112931ab1e6505c5d9acaa76e4 e3ace07d11483c1f2f7b6d6ce7f2d1cda597423cefeb4fb6f734cad7ba064622
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js HTTP/1.1
Host: my.world4foryou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 28 Mar 2024 21:29:18 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
content-encoding: br
x-content-type-options: nosniff
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9skHQOByy%2F5lGL4PKjYVMrxtw6HfXIBR9wbhKcQnQYKTkwmCnpsf%2BSbuR7TBugPGeUHe7qcie0y1FTmgOpgtbfo%2FJhW3flazKsZjt0IZpC7xhGifZQkUILD8CMfav5M0tP5wXdiA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bab7010812b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|