| torpkea3.cc/invite | 104.21.2.244 | 200 OK | 0 B |
IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /invite HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 20
Origin: https://torpkea3.cc
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/invite/i=14822
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:24:12 GMT
content-length: 0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yPNbGH7b4tq9DN8LsdVUzIitj7%2B%2FGDYvt7Yjg9hftSo5WZCmdJP3Iro%2FSFhcCEPwQQR7KqC74U33WyickqaRNASBIIM686q0HVkBfdI488F%2FHNeXAF%2BcKskYBHllng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881728812b34b4eb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1238156168346603522/1238156184528228362/dfbt51t.mp4?ex=663e424e&is=663cf0ce&hm=67e958d036d99ad0033c563a65e46f23fe23f73eaddcd7db806f0e12c4cb0832& | 162.159.129.233 | | 3.1 MB |
URL cdn.discordapp.com/attachments/1238156168346603522/1238156184528228362/dfbt51t.mp4?ex=663e424e&is=663cf0ce&hm=67e958d036d99ad0033c563a65e46f23fe23f73eaddcd7db806f0e12c4cb0832& IP162.159.129.233:0
File typeISO Media, MP4 v2 [ISO 14496-14] Size3.1 MB (3063604 bytes) Hash94587e592df4305603eacae194674c41 71639d2ac9802c10070177b2c7e5f2f89f3d8ee3 cd449708fadeb79824387f30cf4d8c0119ed5e802a8006dc235068a0eef23224
GET /attachments/1238156168346603522/1238156184528228362/dfbt51t.mp4?ex=663e424e&is=663cf0ce&hm=67e958d036d99ad0033c563a65e46f23fe23f73eaddcd7db806f0e12c4cb0832& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 04:24:11 GMT
content-type: video/mp4
content-length: 3063604
content-range: bytes 0-3063603/3063604
cf-ray: 881728829e30b509-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 29424
cache-control: public, max-age=31536000
content-disposition: attachment; filename=dfbt51t.mp4
etag: "94587e592df4305603eacae194674c41"
expires: Sat, 10 May 2025 04:24:11 GMT
last-modified: Thu, 09 May 2024 15:50:38 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1715269838335645
x-goog-hash: crc32c=/h4vuQ==, md5=lFh+WS30MFYD6srhlGdMQQ==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3063604
x-guploader-uploadid: ABPtcPr-xXwD0spuhcRJS1CowXGcFLyybVXfD24tHl09s3G0_e8I_ZQ12wNU8_H24Z1nadLr1hE
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0LyOgB7%2Fx83E6jV09k60%2FgHVOPrPB7h%2FkETEVTavBNAbiDMNlOtgF2JZ2D41iu51VZosofTP4Morjzb2pwhruV5TSo6ygNzK9l9DtptTvQFwFxbaNzqCz61zWH6WEA2tFI8w8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=XZ5xsX94QxpasgQPDmM_ZtDIlmdSksSJegIgNEdaqaE-1715315051-1.0.1.1-YZZIkS8Rg3E6j7qG36LB4h449g7PyuZRBd2u7NjlsKF4MnJfvSeiRWp4h0vL9yu_duwMxjf6dXdj6UoiQBV4aw; path=/; expires=Fri, 10-May-24 04:54:11 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=JxhawsZoXlQHUJklPKlIp_mTI2PIW_IBwMjzQdamsPo-1715315051965-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| torpkea3.cc/socket.io/?EIO=3&transport=websocket | 104.21.2.244 | | 0 B |
URL torpkea3.cc/socket.io/?EIO=3&transport=websocket IP104.21.2.244:0
CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://torpkea3.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XAd/s18xUIACYsbd6MjI/A==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 10 May 2024 04:24:12 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: L+Jq1D311uTAsBKSre/BLIWoSHA=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XcvA7fNsAs3qI79NLVMKKQPANdIytT1vCAqzLhuqcPiLSriKprCT2sw7TySEWwBZwKoiCeQ7TAabCA5CTjs%2BQVV6LzZmJ7ZC9a%2BGPT8I5OdT%2FvY3okg9MsflNySxkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 881728825c8d56c0-OSL
alt-svc: h3=":443"; ma=86400
|
|
| torpkea3.cc/img/icons/apple-touch-icon-152x152.png | 104.21.2.244 | 200 OK | 4.0 kB |
URL GET HTTP/3torpkea3.cc/img/icons/apple-touch-icon-152x152.png IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
File typePNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Hash1a034e64d80905128113e5272a5ab95e 92328e60f63d690f33cd4961b9934a539dc29b82 4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/invite/i=14822
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:24:12 GMT
content-type: image/png
content-length: 4046
last-modified: Thu, 09 May 2024 16:46:25 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3943
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oo3JyCPRNrCfcxlD1RCPO5W5%2BVFOCLkSqu9ml2dR%2BaLduyXsi6lsKD4hbUXcWawHqPnbXNyeWKGxH3HYxTkhsD6uLJa4ob60mTusTYx3WfB6SlM%2Bi2mROsfr5SqnKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881728859ebcb4eb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| torpkea3.cc/img/icons/favicon.svg | 104.21.2.244 | 200 OK | 1.4 kB |
URL GET HTTP/3torpkea3.cc/img/icons/favicon.svg IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
File typeHTML document, ASCII text, with very long lines (2701), with no line terminators Hash569b3368b6a08f751e24e4524a5c2ede df944bace7d9f938a231ddcdc3a9ba278c04740a 2153deff41a0f1ebea86f1337a1b97155bc3aa8d5748fb891edadd11d7a2b2d6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /img/icons/favicon.svg HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/invite/i=14822
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:24:12 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=14400
cf-cache-status: HIT
age: 1762
last-modified: Fri, 10 May 2024 03:54:50 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HKqugP91PtiKNw%2BgM92MgGDKMGEdKyBYwNNuVHSTY64279FRz664uLzpKvu7QDX%2FL6bxWRfk5VcTq5l3UrX8bUdZhHZV1ekPwX2rmEbeaVd5zI0N8rDy2Rt6zJQwXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881728859ebeb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| torpkea3.cc/css/chunk-vendors.c57533e1.css | 104.21.2.244 | 200 OK | 53 kB |
URL GET HTTP/3torpkea3.cc/css/chunk-vendors.c57533e1.css IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashebfffebc1f62c3be51082e6595a0a005 e278fbd6fd48150b3f366b50ed388983d934978c f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/chunk-vendors.c57533e1.css HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/invite/i=14822
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 04:24:11 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 09 May 2024 16:46:23 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4756
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Ltn%2B36P3OFb0WT8HzXPBJuHBHcK2K2wbaMra6TczppWOjGW%2F9hneRDqW6jhbnLt%2BRy4WSSOjga75QQqYLUf%2FjvpK20OYql146luUJcu5jyx6Lvr%2BzVpB39oIlTiiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817287f29feb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| torpkea3.cc/js/app.db80e923.js | 104.21.2.244 | 200 OK | 175 kB |
URL GET HTTP/3torpkea3.cc/js/app.db80e923.js IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
Size175 kB (174900 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/app.db80e923.js HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/invite/i=14822
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:24:11 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 09 May 2024 16:46:28 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1763
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g3wT0ImWFHaxgl0aqaio0uA72TR2eCbv6zCtm6zb3eYS%2BV9fI%2BXY%2FNH2Pm7YjFfluwBtyNMe4f4FXCtmuqNJT2DdG6x%2BxOBh4GKA7lQEsRpdADh%2FK1A8S4j1jjHK%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817287f29fdb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| torpkea3.cc/css/app.234ccc1f.css | 104.21.2.244 | 200 OK | 16 kB |
URL GET HTTP/3torpkea3.cc/css/app.234ccc1f.css IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
File typeASCII text, with very long lines (15613), with no line terminators Hash8bc907a6bcad7e5d6e121bbf4c4e4cd2 3d85f0e0391beb85f849ccb63eb367f689fd97e1 31985c75e806389d773ced0cd7e3e5b21ad08eac0aa804644f6c392919f63b99
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/app.234ccc1f.css HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/invite/i=14822
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:24:11 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 09 May 2024 16:46:23 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4756
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eK2zx1NsPpDdmrpN9lKmlZt93UJl0hIpzwC%2FLu3ePqbrZFSqC%2FpJYkwFqjgcRTpMvXUY9vNxYIWnnC%2FPK8W0RXblthknC8%2BOvZkdrYMS0df429kNOa8hfByLYBz6dw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817287f2a00b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| b.yzcdn.cn/vant/icon-demo-1126.png | 154.85.69.56 | 200 OK | 8.9 kB |
URL GET HTTP/2b.yzcdn.cn/vant/icon-demo-1126.png IP154.85.69.56:443 ASN#139057 LEGEND DYNASTY PTE. LTD.
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuersslTrus Subject*.yzcdn.cn Fingerprint6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf87c46f346a5548224ccbe0b6bd75df5 8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370
GET /vant/icon-demo-1126.png HTTP/1.1
Host: b.yzcdn.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 04:24:13 GMT
content-type: image/png
content-length: 8886
server: openresty
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: X-Log, X-Reqid
access-control-max-age: 2592000
cache-control: public, max-age=2592000
content-disposition: inline; filename="icon-demo-1126.png"; filename*=utf-8''icon-demo-1126.png
content-md5: +HxG80alVIIkzL4La9dd9Q==
content-transfer-encoding: binary
etag: "Fo6Li9S6PmtshVfZSnJgYf3WJJL9"
last-modified: Mon, 26 Nov 2018 11:08:05 GMT
x-reqid: YyIAAAASg9geDiAX
x-svr: IO
x-qiniu-zone: 0
x-log: X-Log
x-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC165_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC46_DE-Frankfurt-Frankfurt-11-cache-4
x-cache: HIT from BC46_DE-Frankfurt-Frankfurt-11-cache-4(baishan)
X-Firefox-Spdy: h2
|
|
| torpkea3.cc/socket.io/?EIO=3&transport=websocket | 104.21.2.244 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1torpkea3.cc/socket.io/?EIO=3&transport=websocket IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /socket.io/?EIO=3&transport=websocket HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://torpkea3.cc
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XAd/s18xUIACYsbd6MjI/A==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Fri, 10 May 2024 04:24:12 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: L+Jq1D311uTAsBKSre/BLIWoSHA=
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XcvA7fNsAs3qI79NLVMKKQPANdIytT1vCAqzLhuqcPiLSriKprCT2sw7TySEWwBZwKoiCeQ7TAabCA5CTjs%2BQVV6LzZmJ7ZC9a%2BGPT8I5OdT%2FvY3okg9MsflNySxkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 881728825c8d56c0-OSL
alt-svc: h3=":443"; ma=86400
|
|
| torpkea3.cc/getlog | 104.21.2.244 | 200 OK | 12 kB |
IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
Hashafc014b93c84edf3a9b2c613db9e485b aa9b9af24a8360e802468fd1afeb1f102ed0a027 17d8c0e31ab2bf5e2e0563da931a416dfa73387bdd4063bfe33d821f84e6eaa8
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /getlog HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/enter/register
Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:24:12 GMT
content-type: application/json; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xy71uy8Gw0OjUgv80R4gjI5VLeeAwOSGVpvP0lBVCxCGGm6hQ9g%2B4QYC6nG1OOsqnt3XtEKiUfFTy8G%2BzHMEmDw53hOGdoUYwC6LbIbCocuUnDBWlZPvk7N5t2QaZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881728821bddb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| torpkea3.cc/invite/i=14822 | 104.21.2.244 | 200 OK | 2.7 kB |
URL User Request GET HTTP/2torpkea3.cc/invite/i=14822 IP104.21.2.244:443
CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
File typeHTML document, ASCII text, with very long lines (2867), with no line terminators Hash3430bc19d238b016e90941ef8b30999c c80d3f40721e67ce333528e672a277dcf915b4d1 0ca2340d44f093f0466b590e757ac83c0a4e83d0eb58d930e31d62332b1f605c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /invite/i=14822 HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 04:24:11 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EBuqGpgM9ji8QEubjluMH31Qq45VXo4gPO3gZFotNGspJ6r4kgOaIUYwQdlf5EDNuET9hfajH2GaEk4UhJ0OYP%2FW6O2fZLBCDxYbwytllzudL2TAOKARfyFItGUZxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817287b5de356bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| torpkea3.cc/js/chunk-vendors.ea790e22.js | 104.21.2.244 | 200 OK | 949 kB |
URL GET HTTP/3torpkea3.cc/js/chunk-vendors.ea790e22.js IP104.21.2.244:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerGoogle Trust Services LLC Subjecttorpkea3.cc Fingerprint90:5B:AA:20:61:65:FD:3C:2C:E4:00:65:F7:10:8A:2C:AE:53:B7:F9 ValidityTue, 07 May 2024 08:14:42 GMT - Mon, 05 Aug 2024 08:14:41 GMT
Size949 kB (949174 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /js/chunk-vendors.ea790e22.js HTTP/1.1
Host: torpkea3.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/invite/i=14822
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 04:24:11 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 09 May 2024 16:46:34 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1758
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wH%2BjMEdoy9NHKiicyGTkAC3pT%2BkvFUiJvjDZ5N6%2BZLoXLeNfOgLkQRAU7jRBL1xl9WWzuKiEH9AyDecot6EhgbqXc4Bgn66Ni%2F54b%2FddGu2dtDhi1upmkmtkJdM%2FRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817287f19fcb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.discordapp.com/attachments/1238156168346603522/1238156184528228362/dfbt51t.mp4?ex=663e424e&is=663cf0ce&hm=67e958d036d99ad0033c563a65e46f23fe23f73eaddcd7db806f0e12c4cb0832& | 162.159.129.233 | 206 Partial Content | 3.1 MB |
URL GET HTTP/2cdn.discordapp.com/attachments/1238156168346603522/1238156184528228362/dfbt51t.mp4?ex=663e424e&is=663cf0ce&hm=67e958d036d99ad0033c563a65e46f23fe23f73eaddcd7db806f0e12c4cb0832& IP162.159.129.233:443
Requested byhttps://torpkea3.cc/invite/i=14822 CertificateIssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
Size3.1 MB (3063604 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /attachments/1238156168346603522/1238156184528228362/dfbt51t.mp4?ex=663e424e&is=663cf0ce&hm=67e958d036d99ad0033c563a65e46f23fe23f73eaddcd7db806f0e12c4cb0832& HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://torpkea3.cc/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 04:24:11 GMT
content-type: video/mp4
content-length: 3063604
content-range: bytes 0-3063603/3063604
cf-ray: 881728829e30b509-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 29424
cache-control: public, max-age=31536000
content-disposition: attachment; filename=dfbt51t.mp4
etag: "94587e592df4305603eacae194674c41"
expires: Sat, 10 May 2025 04:24:11 GMT
last-modified: Thu, 09 May 2024 15:50:38 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1715269838335645
x-goog-hash: crc32c=/h4vuQ==, md5=lFh+WS30MFYD6srhlGdMQQ==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3063604
x-guploader-uploadid: ABPtcPr-xXwD0spuhcRJS1CowXGcFLyybVXfD24tHl09s3G0_e8I_ZQ12wNU8_H24Z1nadLr1hE
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0LyOgB7%2Fx83E6jV09k60%2FgHVOPrPB7h%2FkETEVTavBNAbiDMNlOtgF2JZ2D41iu51VZosofTP4Morjzb2pwhruV5TSo6ygNzK9l9DtptTvQFwFxbaNzqCz61zWH6WEA2tFI8w8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=XZ5xsX94QxpasgQPDmM_ZtDIlmdSksSJegIgNEdaqaE-1715315051-1.0.1.1-YZZIkS8Rg3E6j7qG36LB4h449g7PyuZRBd2u7NjlsKF4MnJfvSeiRWp4h0vL9yu_duwMxjf6dXdj6UoiQBV4aw; path=/; expires=Fri, 10-May-24 04:54:11 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=JxhawsZoXlQHUJklPKlIp_mTI2PIW_IBwMjzQdamsPo-1715315051965-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|