Report - wbm40.com/

Report Overview

Visited public
2025-06-17 19:26:09
Tags
URL
wbm40.com/
Finishing URL
7418.cukxblkc.top/chan/GS3526/bQtzm
IP / ASN
156.255.123.42
#63888 DATAWING LIMITED
Title
7418.cukxblkc.top/chan/GS3526/bQtzm

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
wbm40.com	unknown	2024-12-24	2025-06-17	2025-06-17	478 B	965 B	156.255.123.42
www.googletagmanager.com	75	2011-11-11	2012-10-04	2025-06-11	438 B	399 kB	142.250.74.136
7418.cukxblkc.top	unknown	2025-06-16	2025-06-17	2025-06-17	19 kB	2.1 MB	54.240.174.41

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed
2025-06-17	medium	cukxblkc.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	From	Size	First Seen	Last Seen
	wbm40.com/	ScriptElement	173 B	2025-06-17	2025-06-17
Pretty URL wbm40.com/ IP 156.255.123.42 ASN #63888 DATAWING LIMITED Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-17 19:26 Last Seen2025-06-17 19:26 Times Seen1 Hash 86e8d89da143f81dee6a4864b4744e0d 96da4d34c7648feaafb56af900a9eb05b6dec93d ef5bd451d6475080e32342635859b1559be02897767ba8e4e7e7ad5b690ebef9 Loading...

	7418.cukxblkc.top/js/main.js?v=20	ScriptElement	7.0 kB	2025-06-11	2025-06-23
Pretty URL 7418.cukxblkc.top/js/main.js?v=20 IP 54.240.174.41 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-06-11 14:05 Last Seen2025-06-23 18:07 Times Seen7 Hash 84fdd19c7b332318f0ab664a225b98ff c23110302751ba30fae44d011f1eaf9e41f18a16 e8891945a8dc07427687184d60f0a445713797344644cfa74690af9ce433fbaa Loading...

	7418.cukxblkc.top/js/clipboard.min.js	ScriptElement	9.2 kB	2023-03-07	2025-06-23
Pretty URL 7418.cukxblkc.top/js/clipboard.min.js IP 54.240.174.41 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:23 Last Seen2025-06-23 23:09 Times Seen3112 Hash 15f52a1ee547f2bdd46e56747332ca2d 9a7cb405f9beed005891587d41f76a0720893ffc e17a1d816e13c0826e0ed7febfabc3277f45571234bde0bf9120829a7169edc9 Loading...

	7418.cukxblkc.top/chan/GS3526/bQtzm	ScriptElement	163 B	2025-03-06	2025-06-23
Pretty URL 7418.cukxblkc.top/chan/GS3526/bQtzm IP 54.240.174.41 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-06 04:24 Last Seen2025-06-23 18:07 Times Seen12 Hash 4cac038c96f3b76adfd6c8d6a158d7f8 6f7699d3feb7506166afd75f07d68bdc229445cf 12ef4ab9bdd0e78f9294a9d73ce3a9c56837441c549982966636dea126a4b1a7 Loading...

	7418.cukxblkc.top/js/qrcode.js	ScriptElement	33 kB	2023-03-13	2025-06-23
Pretty URL 7418.cukxblkc.top/js/qrcode.js IP 54.240.174.41 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:34 Last Seen2025-06-23 18:07 Times Seen29 Hash 94d9239fa4ec4729036fb42e5d8946ef d537f9e9e8461d8e41f9962f9487e28fe2373a0f fdcf79059c85550c7dd02178c22c0ed34659d1235d6c2ec4640c4be67e7f1365 Loading...

	7418.cukxblkc.top/js/jquery.fullPage.min.js	ScriptElement	25 kB	2024-12-12	2025-06-23
Pretty URL 7418.cukxblkc.top/js/jquery.fullPage.min.js IP 54.240.174.41 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-12 16:20 Last Seen2025-06-23 18:07 Times Seen14 Hash 9b77b7ea4ca45ace6bd0d43337eacc70 0f84e3178b66b0efeb5f37b87b2d59eeced35f3b 3f74fb9024d86e365212bc333e8f12dabda06fcbca2c840d1be9f2de66ed5b32 Loading...

	7418.cukxblkc.top/js/jquery.js	ScriptElement	248 kB	2023-03-12	2025-06-23
Pretty URL 7418.cukxblkc.top/js/jquery.js IP 54.240.174.41 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 20:24 Last Seen2025-06-23 18:07 Times Seen24 Hash bd5acd460aa627c4187fecc7c6894992 ff4ae0ffc83511bf08248d0eef1778b03b8ab2a5 0765d0119c7638a5fbd9053f023ce1f114a0a7ad7b2953be8ec322a553e12146 Loading...

	www.googletagmanager.com/gtag/js?id=G-TJZJ4GFDB1	ScriptElement	398 kB	2025-06-17	2025-06-17
Pretty URL www.googletagmanager.com/gtag/js?id=G-TJZJ4GFDB1 IP 142.250.74.136 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2025-06-17 19:26 Last Seen2025-06-17 19:26 Times Seen1 Hash c2d8a4953dd27cdc23be324aa3b8d8ad 89a77e8dc1c7bf3b77d231f3cc5b5595c6084340 1b80808f875a4ac0c4ac9a7a151734dd94f5bad2970821458751040c2344aca9 Loading...

HTTP Transactions (42)

URL IP Response Size

GET wbm40.com/

156.255.123.42

200 OK

330 B

URL User Request GET
wbm40.com/
IP
156.255.123.42:443
ASN
#63888 DATAWING LIMITED

Certificate
IssuerGoogle Trust Services
Subjectwbm40.com
Fingerprint1B:56:54:22:09:DC:AD:0B:2F:66:32:C2:19:05:D6:DB:41:9A:B2:1B
ValidityMon, 21 Apr 2025 07:06:11 GMT - Sun, 20 Jul 2025 08:03:38 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (324), with no line terminators
Size
330 B (330 bytes)
Hash
28d0e407a93ba35332281d540296b429
a76356cf9b160a79befd9e4257eabae83d24ceb0
6b78011f69df0654d581fd0204176d1c8a3e070d67db92bb4fd2baf56f663c1d

HTTP Headers

GET / HTTP/1.1
Host: wbm40.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 17 Jun 2025 19:25:45 GMT
content-type: text/html; charset=utf-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
x-powered-by: PHP/7.3.33
p3p: CP="CAO PSA OUR"
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xVAXQvGS4rm%2FmfRn4YaOIZp7Q34qHYQhGkUVaXISQHeE9EUbs0YltCH9LF3%2FszW%2BoQwFmvDJ6b2nhyEph0Nzscpfy%2Fw8niw%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9514ef462e43ebc6-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET www.googletagmanager.com/gtag/js?id=G-TJZJ4GFDB1

142.250.74.136

200 OK

398 kB

URL GET
www.googletagmanager.com/gtag/js?id=G-TJZJ4GFDB1
IP
142.250.74.136:443
ASN
#15169 GOOGLE

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint93:AC:F6:E3:CB:D8:8F:95:04:0C:A1:34:97:CB:ED:C4:F9:99:EB:12
ValidityMon, 19 May 2025 08:41:43 GMT - Mon, 11 Aug 2025 08:41:42 GMT

File type
JavaScript source, ASCII text, with very long lines (6004)
Size
398 kB (398403 bytes)
Hash
c2d8a4953dd27cdc23be324aa3b8d8ad
89a77e8dc1c7bf3b77d231f3cc5b5595c6084340
1b80808f875a4ac0c4ac9a7a151734dd94f5bad2970821458751040c2344aca9

HTTP Headers

GET /gtag/js?id=G-TJZJ4GFDB1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 17 Jun 2025 19:25:47 GMT
expires: Tue, 17 Jun 2025 19:25:47 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 132553
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/androidModal.css?v=1

54.240.174.41

200 OK

1.4 kB

URL GET
7418.cukxblkc.top/image/modal/androidModal.css?v=1
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
ASCII text
Size
1.4 kB (1352 bytes)
Hash
e2e100d0b4e37090af5bc20f3744ab60
9b251707644ba5e803f05f96648b229885ec552d
1ea44b8193726831b9bc8c830b88e5efd2a90eb02ea69f5f12c01e4343305c85

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/androidModal.css?v=1 HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 17 Jun 2025 06:55:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: W/"682c3469-548"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MWuHclZp6oobfAAeMRwIXbLOrnqsexPF2ggpkW8004NnOH1SaPXU2w==
age: 45039
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/desktop/business.webp

54.240.174.41

200 OK

4.1 kB

URL GET
7418.cukxblkc.top/image/desktop/business.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.1 kB (4132 bytes)
Hash
eca3b77fa462dbf0f4d3ba0240f67771
5d3c71ed4add88214fef7f888dcc986a547a48d3
a8f06cbc889aa7c713e97c2da7f933f295210681bfd40652f97bad1cebf84122

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/desktop/business.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 4132
server: nginx
date: Tue, 17 Jun 2025 15:26:29 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-1024"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vrW3ThT9zxhTVneR6IKIi2NB4fqxacqM8l7PIsAeE5pBgMBGfC3ymQ==
age: 14358
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/desktop/banner_3.png?v=1

54.240.174.41

200 OK

259 kB

URL GET
7418.cukxblkc.top/image/desktop/banner_3.png?v=1
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 884 x 944, 8-bit colormap, non-interlaced
Size
259 kB (259346 bytes)
Hash
9a24ca7ba5bfa5e5ba41ae2ba9b9d976
7e93dec722af4475c191cf19f1801024771e701a
68b8a0f16682ff65c163dcb2ef9e38f6512c107ffe36d800ec876a4a60779664

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/desktop/banner_3.png?v=1 HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 259346
server: nginx
date: Tue, 17 Jun 2025 07:33:14 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-3f512"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _0gE817bBH16Sdflr3KgxLnclDkE0SWsgu2Vy4QNAk59FtVUS3DyTg==
age: 42753
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/index.php?m=index&a=api_index&url=https://7418.cukxblkc.top/chan/GS3526/bQtzm

54.240.174.41

200 OK

328 B

URL GET
7418.cukxblkc.top/index.php?m=index&a=api_index&url=https://7418.cukxblkc.top/chan/GS3526/bQtzm
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
JSON text data
Size
328 B (328 bytes)
Hash
445a0bacf4ed9f32c30f59ccf98de23f
26402d531a5c473629501f786b74e5aecf6d7492
72deeea35e9220b3fc03384f21ae849e890e487feeeb8dd5fef074d3aa750290

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index.php?m=index&a=api_index&url=https://7418.cukxblkc.top/chan/GS3526/bQtzm HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json
server: nginx
date: Tue, 17 Jun 2025 19:25:47 GMT
p3p: CP="CAO PSA OUR"
access-control-allow-origin: *
x-powered-by: PHP/7.3.33
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ITbR_-SRVa-23F-FWulbHlhISMjR2z_xhsfxFP2VwvZW4P1DLGBjAg==
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/header_1.png

54.240.174.41

200 OK

31 kB

URL GET
7418.cukxblkc.top/image/header_1.png
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 690 x 250, 8-bit colormap, non-interlaced
Size
31 kB (31400 bytes)
Hash
0d52e7def16c4d7a5d17a80689871e33
468d94afd5b8dbdc09917abe63a10f721b2df727
c36a0bf7c9763c63518eecfb5c2a2fcfc0b08901d0745c13d85545be37f128e3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/header_1.png HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 31400
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-7aa8"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PhNR_mtLnhweqYL1Aw4-o6154fcUZfHDWnbSq5HC1W2LyKMbF93nQw==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell8.webp

54.240.174.41

200 OK

10 kB

URL GET
7418.cukxblkc.top/image/modal/cell8.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
10 kB (10240 bytes)
Hash
fc51e02e9e932e84f6da4948a40b87ce
49c00a80839d0e4f14a7642e64b211111cee817f
2c88b01311b8c7d3016d08a86fc9853d2a9df37e158b6e7284782381812a2556

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell8.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 10240
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-2800"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JVukI2mAeM8J4IbwYnYDC05C1R01bP_7-jqy5jhjAX_5Du29SHnflg==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/js/jquery.js

54.240.174.41

200 OK

248 kB

URL GET
7418.cukxblkc.top/js/jquery.js
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
248 kB (247596 bytes)
Hash
bd5acd460aa627c4187fecc7c6894992
ff4ae0ffc83511bf08248d0eef1778b03b8ab2a5
0765d0119c7638a5fbd9053f023ce1f114a0a7ad7b2953be8ec322a553e12146

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery.js HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 17 Jun 2025 06:55:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: W/"682c3469-3c72c"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YNxDsl0aBrDlp7oN0rNX9V_bkVXKi994P2qljjp4NSjitHxa0I_DNQ==
age: 45039
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/android_btn.png

54.240.174.41

200 OK

4.6 kB

URL GET
7418.cukxblkc.top/image/android_btn.png
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 259 x 109, 8-bit colormap, non-interlaced
Size
4.6 kB (4621 bytes)
Hash
d35c51e1cf8c71cba9a2b54232d6d949
c4519abf706f9e617da1b73ca5265fe816fbf9e5
de0efa1809bdf00e40fdd14c07d8d117d258490788130eb0803a858a1fa9b9fa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/android_btn.png HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 4621
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-120d"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3YSfys-55RAG-yl4mQX75gndO1_qM5omvsc4REBUYZgLfMareb-NDw==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/desktop/banner_2.png?v=1

54.240.174.41

200 OK

262 kB

URL GET
7418.cukxblkc.top/image/desktop/banner_2.png?v=1
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 866 x 938, 8-bit colormap, non-interlaced
Size
262 kB (262057 bytes)
Hash
2ddd1ed97b4186e10f12aeb86c4fd93f
2611b6f1a8935e86b5118c8d93db9a189abafca3
dec35f79eb0adc92879794076c40fe63f2affe5639e384c4a377397a40b5bd2a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/desktop/banner_2.png?v=1 HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 262057
server: nginx
date: Tue, 17 Jun 2025 07:33:14 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-3ffa9"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JbRaNqueOEdCGjPjfHLZgkRSlfbj-PpmviWpVhlDbER6o98oHb-PyQ==
age: 42752
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/header_2.png

54.240.174.41

200 OK

28 kB

URL GET
7418.cukxblkc.top/image/header_2.png
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 690 x 250, 8-bit colormap, non-interlaced
Size
28 kB (28444 bytes)
Hash
b8f66bac7d1183ebf001ccc40d6f1493
00aaef3f89cde430e49901ece04f4b5172ad1d52
fc9494b40719f121eea5a1d041f88757a803058d906d65f2310dcc98f5d588cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/header_2.png HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 28444
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-6f1c"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IZGcggWeOSqr7v6yQxHr71tIbpYfq1mIg_C-ANJsHcdYAT8cQtfq4A==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/mobile/tips_2.webp

54.240.174.41

200 OK

14 kB

URL GET
7418.cukxblkc.top/image/mobile/tips_2.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
14 kB (13892 bytes)
Hash
3f0cd9df7f0a89f8f42ac4c1fe8bfa7b
afc90e05be4d88aa68dfc5d8c557e92c6fe43fd2
428a7d3aecfb5e9851c62a0e609c5819af0d8350a6e7eb1d31618972a9f2eab8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/mobile/tips_2.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 13892
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-3644"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vJxth8qsP8z6Hd7rckejP1Xn8fGnQpcv4FFd-PGZEOuBUbHeZAAp0w==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/back-black.webp

54.240.174.41

200 OK

682 B

URL GET
7418.cukxblkc.top/image/modal/back-black.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
682 B (682 bytes)
Hash
96547a9ec64fdc49bea05989af66c120
cb466102cfd8fc8890b9284664677403aba48c00
4ee7c1a4fce8e9bdcbae90568c0519c807f0f5d5fb4de853d2605040f5c40ebd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/back-black.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 682
server: nginx
date: Tue, 17 Jun 2025 06:56:57 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-2aa"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e7CQCXJaVZC3DTAakke2kvugmvVU9GIS4wG4HkWheRYAJO88bkTUXQ==
age: 44930
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/desktop/uc_text.webp

54.240.174.41

200 OK

8.1 kB

URL GET
7418.cukxblkc.top/image/desktop/uc_text.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
8.1 kB (8146 bytes)
Hash
fbc57ebdfb3e8209b9fd78a539da86be
48484e8e22a073b29d4e714ba21fdd50a2f18a7d
d5da606025b51e9df0aa1766003869de64f35b5898793419593469c65428f3b4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/desktop/uc_text.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 8146
server: nginx
date: Tue, 17 Jun 2025 06:56:26 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-1fd2"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EcEhpPA5lxBDVoh4eXWcne58dNx0bFcJNh7F6YnXp2jfs8OgauW7zA==
age: 44961
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell1.webp

54.240.174.41

200 OK

10 kB

URL GET
7418.cukxblkc.top/image/modal/cell1.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
10 kB (10202 bytes)
Hash
33f9d3726b2a9816086a7d544bfdfd6c
5c2beecc0fa48d4336f47a67c28fd61841e78b00
3c4ca491270b3de428e727e81ccf6ab149f94fc6c0fee0904c271b7156dad0fc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell1.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 10202
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-27da"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1Q5FhZihd_kJZChmO-S63LEqHbwXiCKvaQC_0cRXQicoyMBQ8zpvnQ==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell3.webp

54.240.174.41

200 OK

12 kB

URL GET
7418.cukxblkc.top/image/modal/cell3.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
12 kB (12364 bytes)
Hash
5e6e30ea6070b9c14ad4e2637b1e0558
07cff1812857828df1cec6502bf5876dcba2e9e1
3187d5f8d236951670c4af6a204fc56dafc229f268b2cfc293b4d4b6c6e500b1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell3.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 12364
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-304c"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FUBklW9t2sz2SMhCL0u3yTIxLcAsOoT9jdjzaA1wO3KXco219g1utQ==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/mobile/tips_1.webp

54.240.174.41

200 OK

13 kB

URL GET
7418.cukxblkc.top/image/mobile/tips_1.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
13 kB (12672 bytes)
Hash
e2034ac5687a8bf755f3d44d2636270c
832060fe7e16dcf4823d1b7b00bf2e96454e40ed
b2a7c37eab5e2d5a79b80896b4636b27cf079907a8f356278987c2a3419641b2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/mobile/tips_1.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 12672
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-3180"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: akMKMm-4DN8a3AlFed9I51fgVZpRqlmfVcJxT_PIHGoqcM4G0FF3ZQ==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/desktop/contact.webp

54.240.174.41

200 OK

5.1 kB

URL GET
7418.cukxblkc.top/image/desktop/contact.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
5.1 kB (5126 bytes)
Hash
4084955e2ba8da1d780de8b6e61b15a2
e52c3bb56458fb03fbea6bafd7f98ecc7cd62ce3
c4705a3bbb5496f4405983015dd223f5e69c8e101cc3db4b220ec43189c9cafd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/desktop/contact.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 5126
server: nginx
date: Tue, 17 Jun 2025 07:33:14 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-1406"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fNUVD903R1qeZpm7xme8WJ5G2ZXJZHylBGiycW_U7zrG4R63BpflDg==
age: 42753
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell9.webp

54.240.174.41

200 OK

9.8 kB

URL GET
7418.cukxblkc.top/image/modal/cell9.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
9.8 kB (9800 bytes)
Hash
31030ab6a67326d147976fb7fc01474b
1add16a03f8a11286750415718f3ae9e9fd1b330
d7deb0660db88ffdd0205e5866f114e5a3076b7ddd91f7df093edd1c1aa9df29

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell9.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 9800
server: nginx
date: Tue, 17 Jun 2025 06:57:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-2648"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kfVq5uTL0dJzBlMVf3CP8F1lHZrO91HiE_Mnbjy_UMxMJZVMXwMgWA==
age: 44919
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/js/clipboard.min.js

54.240.174.41

200 OK

9.2 kB

URL GET
7418.cukxblkc.top/js/clipboard.min.js
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (9067)
Size
9.2 kB (9160 bytes)
Hash
15f52a1ee547f2bdd46e56747332ca2d
9a7cb405f9beed005891587d41f76a0720893ffc
e17a1d816e13c0826e0ed7febfabc3277f45571234bde0bf9120829a7169edc9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/clipboard.min.js HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 17 Jun 2025 06:55:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: W/"682c3469-23c8"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kvTo8YcGaGK2p79uw1K6hj0rUkYGUypfH4sULpp2GmujvW2kfLLbbw==
age: 45039
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/logo.webp

54.240.174.41

200 OK

20 kB

URL GET
7418.cukxblkc.top/image/logo.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
20 kB (20010 bytes)
Hash
1c3ecf166568796774ebc5716fb51a19
10a3af7ed45ca4ebe0a7cbb1123b2866662463b7
f5e3dccabe29255b86bebb3fb7f901bacbea8df9f891126ded59a04d1f55f8fa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/logo.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 20010
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-4e2a"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7Fcw3n7vTp2BauXmjEIe0i5DNmkDo4jGpOfufcr0Ng8Zz0gvJaRMyQ==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/header_3.png

54.240.174.41

200 OK

35 kB

URL GET
7418.cukxblkc.top/image/header_3.png
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 690 x 250, 8-bit colormap, non-interlaced
Size
35 kB (35004 bytes)
Hash
38d7ecf7edfbd85d194756b0c485977e
d68c0d5b0865d071ba1b15e4c36dd58203d6252f
0ad7b7f143ae89cf4881d10d0261554a225b68a7e0bef2f10d1eeae625a27809

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/header_3.png HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 35004
server: nginx
date: Tue, 17 Jun 2025 06:56:47 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-88bc"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lfn-hwuX3bg2IM9AsIaP3CUA4_kQ7cSErPqe-JpZbTZDF7NMLdtw-Q==
age: 44940
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/css/jquery.fullPage.css

54.240.174.41

200 OK

4.4 kB

URL GET
7418.cukxblkc.top/css/jquery.fullPage.css
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
ASCII text
Size
4.4 kB (4402 bytes)
Hash
bc9aee9faf5d6e4a9f32fc057e8856c2
de66c10c135156c5a3311ffaaafe44b410df55f0
3c682616f9b4a1a7f2d9211f10a0c0da15a4e0135ec0906ee3e046a25d8d011d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/jquery.fullPage.css HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 17 Jun 2025 06:55:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: W/"682c3469-1132"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AwwRt2fOVv0tgCBxmjxk1waEd8o2yyXesxA5Zzo8rl3E82tV735lHA==
age: 45039
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/js/jquery.fullPage.min.js

54.240.174.41

200 OK

25 kB

URL GET
7418.cukxblkc.top/js/jquery.fullPage.min.js
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (642)
Size
25 kB (25079 bytes)
Hash
9b77b7ea4ca45ace6bd0d43337eacc70
0f84e3178b66b0efeb5f37b87b2d59eeced35f3b
3f74fb9024d86e365212bc333e8f12dabda06fcbca2c840d1be9f2de66ed5b32

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery.fullPage.min.js HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 17 Jun 2025 06:55:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: W/"682c3469-61f7"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3H_LovZUPLGksgw-8ibsgOLC6UuT_C1r_4kUNJHw8qm3EsKYI67nEw==
age: 45039
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell7.webp

54.240.174.41

200 OK

11 kB

URL GET
7418.cukxblkc.top/image/modal/cell7.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
11 kB (10686 bytes)
Hash
58944cfdaa5aa11a365123e4cc147805
b8be1f579ea962d0d0dd2651a181f6b637e6050a
1720b33024904abc808d24c82936e560b448cf2684981c25e5a7813c2df61d33

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell7.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 10686
server: nginx
date: Tue, 17 Jun 2025 06:57:07 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-29be"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HCu5T9ZTYQ3PdLog34QYxBJkJR4MfeplbNhnTtZI6lbOVhmb3mvdcg==
age: 44920
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/js/qrcode.js

54.240.174.41

200 OK

33 kB

URL GET
7418.cukxblkc.top/js/qrcode.js
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
ASCII text, with very long lines (3736)
Size
33 kB (33204 bytes)
Hash
94d9239fa4ec4729036fb42e5d8946ef
d537f9e9e8461d8e41f9962f9487e28fe2373a0f
fdcf79059c85550c7dd02178c22c0ed34659d1235d6c2ec4640c4be67e7f1365

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/qrcode.js HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 17 Jun 2025 06:55:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: W/"682c3469-81b4"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sDqo1QkoERvg6O2KGy03HPxSfMl5czT-29UFOke_RXXEfXJTK7bshQ==
age: 45039
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/ios_btn.png

54.240.174.41

200 OK

4.7 kB

URL GET
7418.cukxblkc.top/image/ios_btn.png
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 259 x 109, 8-bit colormap, non-interlaced
Size
4.7 kB (4736 bytes)
Hash
db9502081511be3719bd4c028855a02b
56020cf322ce0bc890a2a6448bc69c5d2e664efc
a1b1eb512064f32682f3114171f9bc6c7a64f5919950b2e81abb82f430260c0d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/ios_btn.png HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 4736
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-1280"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: no2QEZx_uJsrZKkpnjvb-GbhEQDPFWm_Rl0qHapgfXsgps2I3vtqeA==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/mobile/ba_android.png?v=1

54.240.174.41

200 OK

4.7 kB

URL GET
7418.cukxblkc.top/image/mobile/ba_android.png?v=1
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 259 x 109, 8-bit colormap, non-interlaced
Size
4.7 kB (4672 bytes)
Hash
d3b20e5db840906971e550c576888808
044353ee23fd7f4b07e5517fc9086fcd87e1a80e
15729415b4e89d8b318678b2cc37f1a483692c7f9579ac5234738e63c1c95b0a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/mobile/ba_android.png?v=1 HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 4672
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-1240"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7aUsdJeAFVtzWsxHxOt7kE4K1Ne9VZ0CpPtc-DLwmGTae0Ryofwn3g==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/doc-ios-1.webp

54.240.174.41

200 OK

637 kB

URL GET
7418.cukxblkc.top/image/modal/doc-ios-1.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
637 kB (637192 bytes)
Hash
2a8cb86638ce819c17e7b2f13a3b825e
15c6eae3620e07a3f1455f463eb22791c94d6d6c
0587a0ffb1a1ee17a4b7901c3543780078d702f563a6947172e80d5a27cf50c4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/doc-ios-1.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 637192
server: nginx
date: Tue, 17 Jun 2025 06:57:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-9b908"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hi1Wc4hoCtxnvg2xFLd7Hu2Wykwiws43XsXj3eireXUvajws0x6qTQ==
age: 44919
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/favicon.ico

54.240.174.41

200 OK

7.9 kB

URL GET
7418.cukxblkc.top/favicon.ico
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
HTML document, ASCII text
Size
7.9 kB (7897 bytes)
Hash
00612ef966d46356ebd36cfe4202aae5
03297b349a821da3324657435a6422941142b687
dc238f68b2e3eea1b58c68bd95638fd50df5176d6015f9cbf573012a27f8dcf6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
server: nginx
date: Tue, 17 Jun 2025 06:58:50 GMT
last-modified: Mon, 09 Jun 2025 12:54:15 GMT
etag: W/"6846d977-1ed9"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T4y001csD0Nx6-5MwbV4rsw28hyiHNwqWwP6VIVvhAv4XO0rsxxe3w==
age: 44817
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell4.webp

54.240.174.41

200 OK

11 kB

URL GET
7418.cukxblkc.top/image/modal/cell4.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
11 kB (11410 bytes)
Hash
3d8d66ce94c169581deb3754ee2a09b5
05712e9b6167812b5dfea95c0a98b009ace3a95f
0d6696f3dd49730f4d4b74b52c5f821ef1c231a9d1e5e8152eaee5494fc906f4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell4.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 11410
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-2c92"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1rxfdAwloj7EfdnsznTgFc1m-J5JONFx2igEOFv5p0hyxEcHLD87KQ==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell5.webp

54.240.174.41

200 OK

8.8 kB

URL GET
7418.cukxblkc.top/image/modal/cell5.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
8.8 kB (8842 bytes)
Hash
3b66abf3c8bda92c22d0a59d63e07a66
00477331770130099b1f22f5771cd67c441e8862
693e6969ed61b954f0db0293a3467f0d65244ab8f1f79a8171e19ea774d3dce5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell5.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 8842
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-228a"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X9L7o_XoxpsvITO11WE6v6bi_joV6KdqvH9GhtxaTQ2B0iLQViGWcA==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell6.webp

54.240.174.41

200 OK

11 kB

URL GET
7418.cukxblkc.top/image/modal/cell6.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
11 kB (10910 bytes)
Hash
1d880a769a38224a351f65cc57b06a84
c6bbf98edefe24757c42199f4abc2f520dee38b7
1039ec3e3ccc2616aa12662b36b96c8131a5ea1f4cb63f844394c2a5d06ce277

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell6.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 10910
server: nginx
date: Tue, 17 Jun 2025 06:57:07 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-2a9e"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1MgrpPhJPbVhafAOsSNOwCf8hvonM7hgx_4AhAnrYxmSSZ9aauizFA==
age: 44920
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/css/style.css?v=21

54.240.174.41

200 OK

10 kB

URL GET
7418.cukxblkc.top/css/style.css?v=21
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
ASCII text
Size
10 kB (10435 bytes)
Hash
136c4056ddbf608ef814280796235ca1
04b24c414596e98c697f7bccca83d6ce94ea8180
3fb850b74ebdfee7541f4e65ae634c92b1cdeca2491ff9ad774351ff0ed3f9d6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/style.css?v=21 HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 17 Jun 2025 06:55:08 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: W/"682c3469-28c3"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: teZ29CZ6xuVtAEk_iB4BfcTKB-DB2Y33CTgGuKOanzOpDfLtUnTwLA==
age: 45039
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/js/main.js?v=20

54.240.174.41

200 OK

7.0 kB

URL GET
7418.cukxblkc.top/js/main.js?v=20
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
7.0 kB (6981 bytes)
Hash
84fdd19c7b332318f0ab664a225b98ff
c23110302751ba30fae44d011f1eaf9e41f18a16
e8891945a8dc07427687184d60f0a445713797344644cfa74690af9ce433fbaa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/main.js?v=20 HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 17 Jun 2025 06:55:08 GMT
last-modified: Mon, 09 Jun 2025 12:54:15 GMT
etag: W/"6846d977-1b45"
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jwdh3CL6gLEgq-DRta3BKkIy_LmTKQR6Y5SJE_sNlvCvCbM5XZ_XJA==
age: 45039
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/tips.gif

54.240.174.41

200 OK

5.0 kB

URL GET
7418.cukxblkc.top/image/tips.gif
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
GIF image data, version 89a, 750 x 100
Size
5.0 kB (5022 bytes)
Hash
aa997acb92ffe0ec2d4a82045ebab3c5
bb546550a3c079bf94c6f739812176f6ac8d048f
7d111198064236d87fe27fdf8ca3fea39acf465933081344a0ea877370b654a2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/tips.gif HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/gif
content-length: 5022
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-139e"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NPvfDQWHBdLgYX0ux90cYcJ6H7MQxYX8Hh9sVv_FZvvHZxlSPYLo4w==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/desktop/backckground.webp

54.240.174.41

200 OK

37 kB

URL GET
7418.cukxblkc.top/image/desktop/backckground.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
37 kB (36866 bytes)
Hash
603238637c631f2d0ab1f56829a60d80
4fdc2a5dd94eeb76d899a62b94c8c6d31adc6071
b53b9f50b74f52598bfa99dac160790989a349ed8a55f5db57e4b8ffcdb28781

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/desktop/backckground.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/css/style.css?v=21
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 36866
server: nginx
date: Tue, 17 Jun 2025 08:10:18 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-9002"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 64a2bzPjisG9ZIO8t5jcXchEg8Ujv2aCS0lPEueE44k2IM17Cwie9A==
age: 40529
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/desktop/qrcode_bg.webp

54.240.174.41

200 OK

13 kB

URL GET
7418.cukxblkc.top/image/desktop/qrcode_bg.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
13 kB (13014 bytes)
Hash
5a9f50a81fa74e655f1adec75ca290ec
f5565a4408a928df4720445777e22939ab130e88
cef125990305c6bd9b7e059a0eb15ecb322586e438c1a70f0fd3c0a9df9d7d55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/desktop/qrcode_bg.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/css/style.css?v=21
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 13014
server: nginx
date: Tue, 17 Jun 2025 08:10:18 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-32d6"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k678vpWcYiM8IMhb_OGI4pDV-tbw7q-IqoNVkhxKwM2fUWGG5bLwWw==
age: 40529
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/chan/GS3526/bQtzm

54.240.174.41

200 OK

7.9 kB

URL User Request GET
7418.cukxblkc.top/chan/GS3526/bQtzm
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
HTML document, ASCII text
Size
7.9 kB (7897 bytes)
Hash
00612ef966d46356ebd36cfe4202aae5
03297b349a821da3324657435a6422941142b687
dc238f68b2e3eea1b58c68bd95638fd50df5176d6015f9cbf573012a27f8dcf6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /chan/GS3526/bQtzm HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wbm40.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
server: nginx
date: Tue, 17 Jun 2025 19:25:46 GMT
last-modified: Mon, 09 Jun 2025 12:54:15 GMT
etag: W/"6846d977-1ed9"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nGyWdldcK88xRQEUfyeDzg-rhyvbjBpIz0sMFQX9o3UhvqbQJz86Ag==
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/modal/cell2.webp

54.240.174.41

200 OK

9.3 kB

URL GET
7418.cukxblkc.top/image/modal/cell2.webp
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
9.3 kB (9312 bytes)
Hash
1520c52f62543549334850e8cf90da95
6aaa18cf59dc3cca6f45160b4bcdd44bff87e6aa
b8a56d378edadc0c524fc10a8ae3d339db48826d9e685fe589a9479fabc311e9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/modal/cell2.webp HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/webp
content-length: 9312
server: nginx
date: Tue, 17 Jun 2025 07:07:01 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-2460"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VRNwmbRhS7gy7ZDCUmm2TyavU2ubmNvtaXWne0WksVrKHoHP7gi7JQ==
age: 44326
vary: Origin
X-Firefox-Spdy: h2

GET 7418.cukxblkc.top/image/desktop/banner_1.png?v=1

54.240.174.41

200 OK

269 kB

URL GET
7418.cukxblkc.top/image/desktop/banner_1.png?v=1
IP
54.240.174.41:443
ASN
#16509 AMAZON-02

Requested by
https://7418.cukxblkc.top/chan/GS3526/bQtzm
Certificate
IssuerAmazon
Subject*.cukxblkc.top
FingerprintCE:B0:E5:50:53:5E:BA:92:F7:6E:01:33:A1:C8:88:DA:55:CA:47:AE
ValidityTue, 17 Jun 2025 00:00:00 GMT - Thu, 16 Jul 2026 23:59:59 GMT

File type
PNG image data, 851 x 921, 8-bit colormap, non-interlaced
Size
269 kB (268615 bytes)
Hash
f6e12ebe03ab5d26b11a0a85b236fb76
9fb9f8230c460b14d1328009767b42f7c0de54bb
504e44b1e0804d207a37cff5856aeb60f3d57dd10586f758831b9b0fbfa6e419

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /image/desktop/banner_1.png?v=1 HTTP/1.1
Host: 7418.cukxblkc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://7418.cukxblkc.top/chan/GS3526/bQtzm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 268615
server: nginx
date: Tue, 17 Jun 2025 07:33:14 GMT
last-modified: Tue, 20 May 2025 07:51:05 GMT
etag: "682c3469-41947"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wolYmBCgFBD7a11A2MfQPcoNEnu3_zSMYWdHxeQI7UItD7BnSELC1A==
age: 42753
vary: Origin
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (42)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN