Report - public-usa.mkt.dynamics.com/api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/r/YPD57hntF0KT_WFham28ngAAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fexceil.de%252FWindows%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=fImm0o7gh1BqrvyqB9de4Sx1tPkrNYBQ3p2Hcuuckgc%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee

Report Overview

Visited public
2025-02-26 09:09:38
Tags
URL
public-usa.mkt.dynamics.com/api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/r/YPD57hntF0KT_WFham28ngAAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fexceil.de%252FWindows%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=fImm0o7gh1BqrvyqB9de4Sx1tPkrNYBQ3p2Hcuuckgc%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee
Finishing URL
exceil.de/Windows/#msdynmkt_trackingcontext=eef9f060-ed19-4217-93fd-61616a6dbc9e
IP / ASN
52.146.76.30
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Title
403 Forbidden

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
public-usa.mkt.dynamics.com	unknown	1994-04-12	2020-10-16	2025-02-20	1.8 kB	1.3 kB	52.146.76.30
cxppusa1rdrect01sa02cdn.blob.core.windows.net	unknown	1995-08-10	2024-07-30	2025-02-20	492 B	36 kB	20.209.75.97
exceil.de	unknown	unknown	2025-02-24	2025-02-24	6.7 kB	19 kB	104.21.1.190

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	exceil.de/Windows/#msdynmkt_trackingcontext=eef9f060-ed19-4217-93fd-61616a6dbc9e	ScriptElement	923 B	2025-02-26	2025-02-26
Pretty URL exceil.de/Windows/#msdynmkt_trackingcontext=eef9f060-ed19-4217-93fd-61616a6dbc9e IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-02-26 09:09 Last Seen2025-02-26 09:09 Times Seen1 Hash 395e7107a074021ea03d9fa32bdeebfa b053c8ca549356470666ee0323149bc10823f0af ca468d458d9ad0e03e6b7e97174b25bdf1a9b40dca364e616bc1da09c7b5e1e9 Loading...

	unknown	ScriptElement	236 B	2025-02-26	2025-02-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-26 09:09 Last Seen2025-02-26 09:09 Times Seen1 Hash 354fb96ff0553695428c4471da8040e4 01d6b76f09138dc209cfda5f9c88790c8e164fec a81f0575910eeece9f23f29da8cfd5a0d2d346027ca90ce70ba5b5d281838f2a Loading...

	exceil.de/cdn-cgi/challenge-platform/scripts/jsd/main.js	ScriptElement	8.4 kB	2025-02-26	2025-02-26
Pretty URL exceil.de/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.1.190 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-26 09:09 Last Seen2025-02-26 09:09 Times Seen1 Hash a3532892702fa3a45f6b64fda57fec98 371ed895aecba4d22eb879a7cab4dcecd1b25a73 1995e95b47dc52e5bfebc9d943d0a2104d9874c716e31ba5f4b641460a669f32 Loading...

		Size	First Seen	Last Seen
	#1 Eval - b4a40b863ae709ea061d81d0b79e82a6	4.4 kB	2025-02-26 09:09	2025-02-26 09:09
Pretty Observations First Seen2025-02-26 09:09 Last Seen2025-02-26 09:09 Times Seen1 Hash b4a40b863ae709ea061d81d0b79e82a6 4ef118ee05a9dc0e7abc2c2c3a7c22e2f22b0d58 a246602960f866d948632d6039aab688806c23141e44e4208e45b13e710d2be9 Loading...

HTTP Transactions (10)

	URL	IP	Response	Size
	public-usa.mkt.dynamics.com/api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/r/YPD57hntF0KT_WFham28ngAAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fexceil.de%252FWindows%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=fImm0o7gh1BqrvyqB9de4Sx1tPkrNYBQ3p2Hcuuckgc%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	52.146.76.30	200 OK	726 B
URL public-usa.mkt.dynamics.com/api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/r/YPD57hntF0KT_WFham28ngAAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fexceil.de%252FWindows%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=fImm0o7gh1BqrvyqB9de4Sx1tPkrNYBQ3p2Hcuuckgc%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee IP 52.146.76.30:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type HTML document, ASCII text, with very long lines (726), with no line terminators Size 726 B (726 bytes) Hash 18a66b15607bc316a7a16e4f68ad4260 3d378db17b557992289d60e849498b3556d2b49d b3fddc281cd8a5485835a95d654e17ffeba1d5c5295bd4bb5f0664d30e80d605 HTTP Headers GET /api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/r/YPD57hntF0KT_WFham28ngAAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fexceil.de%252FWindows%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=fImm0o7gh1BqrvyqB9de4Sx1tPkrNYBQ3p2Hcuuckgc%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee HTTP/1.1 Host: public-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx Date: Wed, 26 Feb 2025 09:09:14 GMT Content-Type: text/html Content-Length: 726 Connection: keep-alive x-ms-trace-id: 52e2c87691385390f674e8b806808b96 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff`

	cxppusa1rdrect01sa02cdn.blob.core.windows.net/botdetection/BotDetection/BotDetection.bundle.js	20.209.75.97	200 OK	35 kB
URL cxppusa1rdrect01sa02cdn.blob.core.windows.net/botdetection/BotDetection/BotDetection.bundle.js IP 20.209.75.97:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JavaScript source, ASCII text, with very long lines (34938) Size 35 kB (35011 bytes) Hash ca6bea7011be6d673f62802506b99e09 9c751eb4704993fecd41d107b0151f50a4a153d1 646b8bf0e6065d4bb68ca05e418b423cfe7420a59a9a6aa46df99562c67328b6 HTTP Headers `GET /botdetection/BotDetection/BotDetection.bundle.js HTTP/1.1 Host: cxppusa1rdrect01sa02cdn.blob.core.windows.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://public-usa.mkt.dynamics.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Length: 35011 Content-Type: application/javascript Content-MD5: ymvqcBG+bWc/YoAlBrmeCQ== Last-Modified: Wed, 18 Dec 2024 15:46:22 GMT ETag: 0x8DD1F7B1F624360 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: a7a7e24d-801e-0025-1c2e-88f363000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * Date: Wed, 26 Feb 2025 09:09:14 GMT`

	public-usa.mkt.dynamics.com/api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/cp/YPD57hntF0KT_WFham28njGyB60u0KVJtjU5DPIUbkY	52.146.76.30	404 Not Found	21 B
URL public-usa.mkt.dynamics.com/api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/cp/YPD57hntF0KT_WFham28njGyB60u0KVJtjU5DPIUbkY IP 52.146.76.30:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type ASCII text, with no line terminators Size 21 B (21 bytes) Hash f859a93f0a6eddf4cab3fe5d463e9caa 30c4d19b4703ce6928a7959190fad94529b1b5da d5fa0de11139a4e36dd4a2c5dba0a9667822eb96c21a27e02e9d7879c27a0f5e HTTP Headers POST /api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/cp/YPD57hntF0KT_WFham28njGyB60u0KVJtjU5DPIUbkY HTTP/1.1 Host: public-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://public-usa.mkt.dynamics.com/api/orgs/f5c2cf1b-eff2-ef11-b015-000d3a106b0a/r/YPD57hntF0KT_WFham28ngAAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fexceil.de%252FWindows%252F%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=fImm0o7gh1BqrvyqB9de4Sx1tPkrNYBQ3p2Hcuuckgc%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee Content-Type: application/json Content-Length: 360 Origin: https://public-usa.mkt.dynamics.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Server: nginx Date: Wed, 26 Feb 2025 09:09:15 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * x-ms-trace-id: 81cd855c6c9c49a8036a6099df9d512f Strict-Transport-Security: max-age=2592000; preload`

	GET exceil.de/cdn-cgi/challenge-platform/scripts/jsd/main.js	104.21.1.190	302 Found	0 B
URL GET HTTP/3 exceil.de/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.1.190:443 ASN #13335 CLOUDFLARENET Requested by https://exceil.de/Windows/#msdynmkt_trackingcontext=eef9f060-ed19-4217-93fd-61616a6dbc9e Certificate IssuerGoogle Trust Services Subjectexceil.de Fingerprint6D:5B:FA:52:71:67:A7:F8:BC:F1:7C:07:DF:5B:5B:E7:9E:1D:3D:86 ValidityMon, 24 Feb 2025 05:13:27 GMT - Sun, 25 May 2025 06:13:23 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: exceil.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: _dDZii2K2UKh-lMdDlfDYp0riZg=XoflUna_LGiLk-PTqYvCeus30-g; l1zox5ijh8H2_2ydfhigoMUaHgY=1740560954; 6UohB5Fo4Qsyw59cEbO3WtMU31I=1740647354; Z-q_qhiQkvuYxX4BFnZKLAUwaB4=XMZB6U6RYNOM9ibuoDuMlsDyTls; GAX14u82gBVzFzW_PPvOxwOXynA=lkLPZiL_UVgRTxwDers97UXe5XU Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found date: Wed, 26 Feb 2025 09:09:16 GMT content-length: 0 location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EjK4rna2xcp2UuiFeC4z%2BD4CV2UmK8%2B6FgpVNfdwoX2%2BWJOHuMESQnSa42omxgllpTm96DLDq9juNi9LZoDQsdRQqNL8G46C4AZoEgIbs%2BzKa%2FP7IzcvCUnLWBk%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 917ecb97ef510b3d-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1678&min_rtt=433&rtt_var=1776&sent=29&recv=28&lost=0&retrans=0&sent_bytes=23739&recv_bytes=2142&delivery_rate=17369683&cwnd=257&unsent_bytes=0&cid=b61f1117c9e79ca6&ts=288&x=0" X-Firefox-Spdy: h2

	exceil.de/Windows/	104.21.1.190	204 No Content	0 B
URL exceil.de/Windows/ IP 104.21.1.190:0 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectexceil.de Fingerprint6D:5B:FA:52:71:67:A7:F8:BC:F1:7C:07:DF:5B:5B:E7:9E:1D:3D:86 ValidityMon, 24 Feb 2025 05:13:27 GMT - Sun, 25 May 2025 06:13:23 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /Windows/ HTTP/1.1 Host: exceil.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br h038nngSOYTJxZABW5k0vxIedxU: 45272250 X-Requested-with: XMLHttpRequest X-Requested-TimeStamp: X-Requested-TimeStamp-Expire: X-Requested-TimeStamp-Combination: X-Requested-Type: GET X-Requested-Type-Combination: GET sdWV2ChGDJf3Iq9op9hYZ3PfSc: RGTRoMZ8jJyRvjmaJ2XD1h3jueo Content-type: application/x-www-form-urlencoded Content-Length: 22 Origin: https://exceil.de DNT: 1 Connection: keep-alive Referer: https://exceil.de/Windows/ Cookie: _dDZii2K2UKh-lMdDlfDYp0riZg=XoflUna_LGiLk-PTqYvCeus30-g; l1zox5ijh8H2_2ydfhigoMUaHgY=1740560954; 6UohB5Fo4Qsyw59cEbO3WtMU31I=1740647354; Z-q_qhiQkvuYxX4BFnZKLAUwaB4=XMZB6U6RYNOM9ibuoDuMlsDyTls; GAX14u82gBVzFzW_PPvOxwOXynA=lkLPZiL_UVgRTxwDers97UXe5XU Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 204 No Content date: Wed, 26 Feb 2025 09:09:16 GMT x-content-type-options: nosniff, nosniff x-xss-protection: 1; mode=block, 1; mode=block set-cookie: yqpurWtT6qNdgQLdIwVSY1NriLc=7JgYTMz31F_MQ2ChBc7MxWFL8TA; path=/; expires=Thu, 27-Feb-25 09:09:16 GMT; Max-Age=86400; JaljBBk1krk6DzH7is7qv15DNwc=1740560956; path=/; expires=Thu, 27-Feb-25 09:09:16 GMT; Max-Age=86400; golLWTEJIQrUWMdpGbtQCvfMRxo=1740647356; path=/; expires=Thu, 27-Feb-25 09:09:16 GMT; Max-Age=86400; ZGyvLHv9tTO7bqRf96IePhns9so=y0Gj1Dq6l-SoR5IbOu_xXeXjT1w; path=/; expires=Thu, 27-Feb-25 09:09:16 GMT; Max-Age=86400; BZsIJLEwP_uoIFODbQwvIji9Zuw=6cupjpqwzFXUgICQFnZdGX31maE; path=/; expires=Thu, 27-Feb-25 09:09:16 GMT; Max-Age=86400; x-frame-options: SAMEORIGIN cache-control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache expires: 0 x-robots-tag: noindex, nofollow cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BoHMCUsV7m9C%2FWWmZ9yp4zYvDtlG%2F5vNkI4w01eo%2B5xbMPLOhMhSGjI6KrIM1X17ZEbGEtP%2FOnnsnJ%2FPHcE9BnlWAI5zA8NKEabWAwQ4XSDcUzLF%2FjNm%2FS%2FzPQ0%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 917ecb97df4a0b3d-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1473&min_rtt=433&rtt_var=1339&sent=35&recv=31&lost=0&retrans=0&sent_bytes=28759&recv_bytes=2259&delivery_rate=17369683&cwnd=257&unsent_bytes=0&cid=b61f1117c9e79ca6&ts=329&x=0" X-Firefox-Spdy: h2

	GET exceil.de/cdn-cgi/challenge-platform/scripts/jsd/main.js	104.21.1.190	302 Found	0 B
URL GET HTTP/3 exceil.de/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.1.190:443 ASN #13335 CLOUDFLARENET Requested by https://exceil.de/Windows/#msdynmkt_trackingcontext=eef9f060-ed19-4217-93fd-61616a6dbc9e Certificate IssuerGoogle Trust Services Subjectexceil.de Fingerprint6D:5B:FA:52:71:67:A7:F8:BC:F1:7C:07:DF:5B:5B:E7:9E:1D:3D:86 ValidityMon, 24 Feb 2025 05:13:27 GMT - Sun, 25 May 2025 06:13:23 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: exceil.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: _dDZii2K2UKh-lMdDlfDYp0riZg=XoflUna_LGiLk-PTqYvCeus30-g; l1zox5ijh8H2_2ydfhigoMUaHgY=1740560954; 6UohB5Fo4Qsyw59cEbO3WtMU31I=1740647354; Z-q_qhiQkvuYxX4BFnZKLAUwaB4=XMZB6U6RYNOM9ibuoDuMlsDyTls; GAX14u82gBVzFzW_PPvOxwOXynA=lkLPZiL_UVgRTxwDers97UXe5XU; yqpurWtT6qNdgQLdIwVSY1NriLc=7JgYTMz31F_MQ2ChBc7MxWFL8TA; JaljBBk1krk6DzH7is7qv15DNwc=1740560956; golLWTEJIQrUWMdpGbtQCvfMRxo=1740647356; ZGyvLHv9tTO7bqRf96IePhns9so=y0Gj1Dq6l-SoR5IbOu_xXeXjT1w; BZsIJLEwP_uoIFODbQwvIji9Zuw=6cupjpqwzFXUgICQFnZdGX31maE Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 302 Found date: Wed, 26 Feb 2025 09:09:16 GMT content-length: 0 location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * priority: u=3,i=?0 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O5xYQ5DbMQSBBC3VgULf6p6CQM2aJsA3ZQVKZDDg%2BQqFZIliGY6Sybuhmh0sXkpJcxoJvuWBBLu7WsxVhPOq%2FjaN6d07mxIjbZXekqXhtc26PF9J%2FGq1LAXtur8%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 917ecb9a894656a3-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=3128&min_rtt=1007&rtt_var=2349&sent=18&recv=23&lost=0&retrans=0&sent_bytes=6467&recv_bytes=16435&delivery_rate=8528&cwnd=12000&unsent_bytes=0&cid=2105b6c6c5f1591d&ts=421&x=1", cfExtPri, cfHdrFlush;dur=0

	POST exceil.de/cdn-cgi/challenge-platform/h/b/jsd/r/0.47362137271001953:1740557455:3HcvRAE1waHGTBgl6ZzlD7cfHpw3-NJsh_YH3LorlrE/917ecb996fb856a3	104.21.1.190	200 OK	0 B
URL POST HTTP/3 exceil.de/cdn-cgi/challenge-platform/h/b/jsd/r/0.47362137271001953:1740557455:3HcvRAE1waHGTBgl6ZzlD7cfHpw3-NJsh_YH3LorlrE/917ecb996fb856a3 IP 104.21.1.190:443 ASN #13335 CLOUDFLARENET Requested by https://exceil.de/Windows/#msdynmkt_trackingcontext=eef9f060-ed19-4217-93fd-61616a6dbc9e Certificate IssuerGoogle Trust Services Subjectexceil.de Fingerprint6D:5B:FA:52:71:67:A7:F8:BC:F1:7C:07:DF:5B:5B:E7:9E:1D:3D:86 ValidityMon, 24 Feb 2025 05:13:27 GMT - Sun, 25 May 2025 06:13:23 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.47362137271001953:1740557455:3HcvRAE1waHGTBgl6ZzlD7cfHpw3-NJsh_YH3LorlrE/917ecb996fb856a3 HTTP/1.1 Host: exceil.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain;charset=UTF-8 Content-Length: 12162 Origin: https://exceil.de DNT: 1 Connection: keep-alive Referer: https://exceil.de/Windows/ Cookie: _dDZii2K2UKh-lMdDlfDYp0riZg=XoflUna_LGiLk-PTqYvCeus30-g; l1zox5ijh8H2_2ydfhigoMUaHgY=1740560954; 6UohB5Fo4Qsyw59cEbO3WtMU31I=1740647354; Z-q_qhiQkvuYxX4BFnZKLAUwaB4=XMZB6U6RYNOM9ibuoDuMlsDyTls; GAX14u82gBVzFzW_PPvOxwOXynA=lkLPZiL_UVgRTxwDers97UXe5XU; yqpurWtT6qNdgQLdIwVSY1NriLc=7JgYTMz31F_MQ2ChBc7MxWFL8TA; JaljBBk1krk6DzH7is7qv15DNwc=1740560956; golLWTEJIQrUWMdpGbtQCvfMRxo=1740647356; ZGyvLHv9tTO7bqRf96IePhns9so=y0Gj1Dq6l-SoR5IbOu_xXeXjT1w; BZsIJLEwP_uoIFODbQwvIji9Zuw=6cupjpqwzFXUgICQFnZdGX31maE Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Wed, 26 Feb 2025 09:09:16 GMT content-type: text/plain; charset=UTF-8 content-length: 0 priority: u=3,i=?0 set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.exceil.de; Priority=High; HttpOnly; Secure; SameSite=None cf_clearance=IW1Cf__xonCPQI0363awKobsYuURppDehidR4v2jp80-1740560956-1.2.1.1-A6FvlShD7zpntPJyj8oeD_vIfwfB6P99dZtnx438XqMJezvvwp4lLtrnIOgvPcK8_sx1sUNsreHGfwyngKYQUptoM.f9KssmxDUuZovnYA57t4sZKCZ2aGXLKiYjhlXUY9I_Er7Tkn6t5kUupo1Hof4kF.YqLYpR97D_hqX99d20lmd1KANTQxzw5Yo9_GzWiHTuy5TwI5_e.0ZHz85aIchkKEG99iZ.ZrZiDtHH7wjcpnT_EKimPjXA.Gf33rvE06wWzWfMhEfmVA136GLAvGGkpsaoziw4QSgT6jeky4I; Path=/; Expires=Thu, 26-Feb-26 09:09:16 GMT; Domain=.exceil.de; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=arZwDbyxFFudpRGIOKILJHJCICL3QW3LLJMvbGWbV4qHMd6bj7%2FFNaJsHYyrJcgfmUcz5tjkFYL3eEBnNgzz2VcXwrcEFHwKAlH6UtuGh4%2FY2meq%2FGxyLmxiZmU%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 917ecb9b9ac456a3-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2768&min_rtt=1007&rtt_var=1920&sent=26&recv=36&lost=0&retrans=0&sent_bytes=12715&recv_bytes=30505&delivery_rate=37787&cwnd=12000&unsent_bytes=0&cid=2105b6c6c5f1591d&ts=586&x=1", cfExtPri, cfHdrFlush;dur=0

	GET exceil.de/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?	104.21.1.190	200 OK	10 kB
URL GET HTTP/3 exceil.de/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? IP 104.21.1.190:443 ASN #13335 CLOUDFLARENET Requested by https://exceil.de/Windows/#msdynmkt_trackingcontext=eef9f060-ed19-4217-93fd-61616a6dbc9e Certificate IssuerGoogle Trust Services Subjectexceil.de Fingerprint6D:5B:FA:52:71:67:A7:F8:BC:F1:7C:07:DF:5B:5B:E7:9E:1D:3D:86 ValidityMon, 24 Feb 2025 05:13:27 GMT - Sun, 25 May 2025 06:13:23 GMT File type JavaScript source, ASCII text, with very long lines (8419), with no line terminators Size 10 kB (10194 bytes) Hash a3532892702fa3a45f6b64fda57fec98 371ed895aecba4d22eb879a7cab4dcecd1b25a73 1995e95b47dc52e5bfebc9d943d0a2104d9874c716e31ba5f4b641460a669f32 HTTP Headers GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? HTTP/1.1 Host: exceil.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: _dDZii2K2UKh-lMdDlfDYp0riZg=XoflUna_LGiLk-PTqYvCeus30-g; l1zox5ijh8H2_2ydfhigoMUaHgY=1740560954; 6UohB5Fo4Qsyw59cEbO3WtMU31I=1740647354; Z-q_qhiQkvuYxX4BFnZKLAUwaB4=XMZB6U6RYNOM9ibuoDuMlsDyTls; GAX14u82gBVzFzW_PPvOxwOXynA=lkLPZiL_UVgRTxwDers97UXe5XU; yqpurWtT6qNdgQLdIwVSY1NriLc=7JgYTMz31F_MQ2ChBc7MxWFL8TA; JaljBBk1krk6DzH7is7qv15DNwc=1740560956; golLWTEJIQrUWMdpGbtQCvfMRxo=1740647356; ZGyvLHv9tTO7bqRf96IePhns9so=y0Gj1Dq6l-SoR5IbOu_xXeXjT1w; BZsIJLEwP_uoIFODbQwvIji9Zuw=6cupjpqwzFXUgICQFnZdGX31maE Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Wed, 26 Feb 2025 09:09:16 GMT content-type: application/javascript; charset=UTF-8 cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff priority: u=3,i=?0 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ttl3UgmL%2BZY2vEX289eKhDziuwqLUAMGxIPijX8VhHvZm9brstlnaldyixMRtxfK08cQeDfHKsxGfHe2L%2B1Y8P6XmhdLS9WUOoDqrYqMiJtiVWu%2Fv%2BNvYPKv1pA%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 917ecb9aa9ae56a3-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=3128&min_rtt=1007&rtt_var=2349&sent=20&recv=24&lost=0&retrans=0&sent_bytes=7210&recv_bytes=17100&delivery_rate=8528&cwnd=12000&unsent_bytes=0&cid=2105b6c6c5f1591d&ts=438&x=1", cfExtPri, cfHdrFlush;dur=0

	GET exceil.de/favicon.ico	104.21.1.190	403 Forbidden	146 B
URL GET HTTP/3 exceil.de/favicon.ico IP 104.21.1.190:443 ASN #13335 CLOUDFLARENET Requested by https://exceil.de/Windows/#msdynmkt_trackingcontext=eef9f060-ed19-4217-93fd-61616a6dbc9e Certificate IssuerGoogle Trust Services Subjectexceil.de Fingerprint6D:5B:FA:52:71:67:A7:F8:BC:F1:7C:07:DF:5B:5B:E7:9E:1D:3D:86 ValidityMon, 24 Feb 2025 05:13:27 GMT - Sun, 25 May 2025 06:13:23 GMT File type HTML document, ASCII text, with no line terminators Size 146 B (146 bytes) Hash bcfacc6f2d2ee7cd5e014be08612f93e 7bb6f49a83b5186d5f8598e852bfbeee102d8a4d ef1a3d1af87d9d441ef37f001f2ffb6900ef0a7a4884a5ef165bc2b09e224b38 HTTP Headers GET /favicon.ico HTTP/1.1 Host: exceil.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://exceil.de/Windows/ Cookie: _dDZii2K2UKh-lMdDlfDYp0riZg=XoflUna_LGiLk-PTqYvCeus30-g; l1zox5ijh8H2_2ydfhigoMUaHgY=1740560954; 6UohB5Fo4Qsyw59cEbO3WtMU31I=1740647354; Z-q_qhiQkvuYxX4BFnZKLAUwaB4=XMZB6U6RYNOM9ibuoDuMlsDyTls; GAX14u82gBVzFzW_PPvOxwOXynA=lkLPZiL_UVgRTxwDers97UXe5XU; yqpurWtT6qNdgQLdIwVSY1NriLc=7JgYTMz31F_MQ2ChBc7MxWFL8TA; JaljBBk1krk6DzH7is7qv15DNwc=1740560956; golLWTEJIQrUWMdpGbtQCvfMRxo=1740647356; ZGyvLHv9tTO7bqRf96IePhns9so=y0Gj1Dq6l-SoR5IbOu_xXeXjT1w; BZsIJLEwP_uoIFODbQwvIji9Zuw=6cupjpqwzFXUgICQFnZdGX31maE Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 403 Forbidden date: Wed, 26 Feb 2025 09:09:16 GMT content-type: text/html x-content-type-options: nosniff, nosniff x-xss-protection: 1; mode=block, 1; mode=block cache-control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable pragma: public cf-cache-status: MISS priority: u=6,i=?0 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FOC0rEN5ULL38svPdGwAQP1W1UxLadn6wAIr%2BSyW2EZ2KY9JHromN3QeLre6ZbEvAhWjxQjcB%2FgIJh2oNtqithIXXlpQOnw%2BN0G5hDTTXeTH3FpS3hPCpPZQhxc%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 917ecb9a792a56a3-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2887&min_rtt=1007&rtt_var=2244&sent=24&recv=25&lost=0&retrans=0&sent_bytes=11860&recv_bytes=17143&delivery_rate=128491&cwnd=12000&unsent_bytes=0&cid=2105b6c6c5f1591d&ts=458&x=1", cfExtPri, cfHdrFlush;dur=0

	GET exceil.de/Windows/	104.21.1.190	403 Forbidden	1.1 kB
URL User Request GET HTTP/3 exceil.de/Windows/ IP 104.21.1.190:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectexceil.de Fingerprint6D:5B:FA:52:71:67:A7:F8:BC:F1:7C:07:DF:5B:5B:E7:9E:1D:3D:86 ValidityMon, 24 Feb 2025 05:13:27 GMT - Sun, 25 May 2025 06:13:23 GMT File type HTML document, ASCII text, with very long lines (1100), with no line terminators Size 1.1 kB (1084 bytes) Hash ad9bc4848dd3a9042da2202feb1a5957 0d30a7b5ee8d706ccc7ea5c126f6fa62725fd7db 06a0176c27d8d5a0b3d2bc08a423e4c43dd88c0efe56c78fbe81721e809552f0 HTTP Headers GET /Windows/ HTTP/1.1 Host: exceil.de User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://public-usa.mkt.dynamics.com/ DNT: 1 Connection: keep-alive Cookie: _dDZii2K2UKh-lMdDlfDYp0riZg=XoflUna_LGiLk-PTqYvCeus30-g; l1zox5ijh8H2_2ydfhigoMUaHgY=1740560954; 6UohB5Fo4Qsyw59cEbO3WtMU31I=1740647354; Z-q_qhiQkvuYxX4BFnZKLAUwaB4=XMZB6U6RYNOM9ibuoDuMlsDyTls; GAX14u82gBVzFzW_PPvOxwOXynA=lkLPZiL_UVgRTxwDers97UXe5XU; yqpurWtT6qNdgQLdIwVSY1NriLc=7JgYTMz31F_MQ2ChBc7MxWFL8TA; JaljBBk1krk6DzH7is7qv15DNwc=1740560956; golLWTEJIQrUWMdpGbtQCvfMRxo=1740647356; ZGyvLHv9tTO7bqRf96IePhns9so=y0Gj1Dq6l-SoR5IbOu_xXeXjT1w; BZsIJLEwP_uoIFODbQwvIji9Zuw=6cupjpqwzFXUgICQFnZdGX31maE Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/3 403 Forbidden date: Wed, 26 Feb 2025 09:09:16 GMT content-type: text/html x-content-type-options: nosniff, nosniff x-xss-protection: 1; mode=block, 1; mode=block cf-cache-status: DYNAMIC priority: u=1,i=?0 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iLh%2F5CvK6R%2BTxe9%2Fl6FSJp8eG9CEQ1j4GpFHvN4ml0j2zQ1m1YsgyvPWLxbGOjYZXiksMSDDad5NUSkUpWKIrnEth5Zfwdc4O5ltnf98g%2BeeT86em3GRSggFfgg%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 917ecb996fb856a3-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=3428&min_rtt=1007&rtt_var=2333&sent=15&recv=20&lost=0&retrans=0&sent_bytes=5288&recv_bytes=15059&delivery_rate=6047&cwnd=12000&unsent_bytes=0&cid=2105b6c6c5f1591d&ts=342&x=1", cfExtPri, cfHdrFlush;dur=0

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (10)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers