Report - darxn37mk.cc

Report Overview

Visited public
2024-06-06 13:21:13
Tags
URL
darxn37mk.cc
Finishing URL
darxn37mk.cc/enter/register
IP / ASN
172.67.133.128
#13335 CLOUDFLARENET
Title
t33n leak 5-17 age

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
darxn37mk.cc	unknown	unknown	No data	No data	5.1 kB	1.3 MB	172.67.133.128
ocsp.sectigochina.com	unknown	2019-10-20	2022-02-25 07:42:56	2024-06-06 11:37:02	333 B	964 B	104.18.38.66
b.yzcdn.cn	425969	2014-12-08	2015-07-08 11:30:49	2023-10-23 14:59:32	426 B	9.8 kB	154.85.69.56
cdn.discordapp.com	2474	2015-02-26	2015-08-24 15:06:21	2024-06-05 18:12:04	1.3 kB	2.9 kB	162.159.134.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	darxn37mk.cc/js/chunk-vendors.ea790e22.js	949 kB	2023-03-07 01:35	2024-08-21 09:33
Pretty URL darxn37mk.cc/js/chunk-vendors.ea790e22.js IP 172.67.133.128 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:35 Last Seen2024-08-21 09:33 Times Seen1004 Hash 4fee178f809d1b2a829099a8bb91c56c 178b6322fdc40c08fcbda0c096c668855ad49b51 c3580c9951b9554639c1404a246b3f27f818a99240c728f04cb964cd9e50b73d Loading...

	darxn37mk.cc/js/app.6eeea450.js	171 kB	2024-08-19 20:37	2024-08-19 20:37
Pretty URL darxn37mk.cc/js/app.6eeea450.js IP 172.67.133.128 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-19 20:37 Last Seen2024-08-19 20:37 Times Seen1 Hash 2c74d42395b61dade10391508a7471f8 920bd891ac3452a277fd68454b98adb2166d62d6 222cd22228b6a9e7b495a41e804a65beab7093e4b7d9c93af0546e6bc4aada86 Loading...

HTTP Transactions (14)

	URL	IP	Response	Size
	cdn.discordapp.com/attachments/1247962556224507916/1247962680141025371/dar.mp4?ex=6661ef50&is=66609dd0&hm=bd9c77a64d9dd2eeed96746346a1b8b67d823a319ec28b06706093ec0b720482&	162.159.134.233		229 B
URL cdn.discordapp.com/attachments/1247962556224507916/1247962680141025371/dar.mp4?ex=6661ef50&is=66609dd0&hm=bd9c77a64d9dd2eeed96746346a1b8b67d823a319ec28b06706093ec0b720482& IP 162.159.134.233:0 ASN #13335 CLOUDFLARENET File type XML 1.0 document, ASCII text, with no line terminators Size 229 B (229 bytes) Hash 7107c0710409284ce16cf1acbd9bea3a 9cc873d19934338b3eee2bf26f9308363967e9d7 039ebfa27ace52acf0b6188d81171bcece11b50bc01df3e03d8840cf714c6b0c HTTP Headers GET /attachments/1247962556224507916/1247962680141025371/dar.mp4?ex=6661ef50&is=66609dd0&hm=bd9c77a64d9dd2eeed96746346a1b8b67d823a319ec28b06706093ec0b720482& HTTP/1.1 Host: cdn.discordapp.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: video/webm,video/ogg,video/;q=0.9,application/ogg;q=0.7,audio/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Range: bytes=0- DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Sec-Fetch-Dest: video Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Accept-Encoding: identity Pragma: no-cache Cache-Control: no-cache HTTP/2 404 Not Found date: Thu, 06 Jun 2024 13:20:49 GMT content-type: application/xml; charset=UTF-8 content-length: 229 cf-ray: 88f8b3b3cb1cb527-OSL cf-cache-status: HIT accept-ranges: bytes age: 135 cache-control: public, max-age=31536000 content-disposition: attachment expires: Fri, 06 Jun 2025 13:20:49 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-guploader-uploadid: ABPtcPrX5S9YHozfHEuQQUGDhzzECaJzM8QYNVVrrQUvr0CUQG4EzMiImsOsmzAh5Fa63dYc2Uq0va9gDA x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lKcjjY5ptCawp%2Byiffaiov6Y3qGUCtHCg%2BT1QdA59kGejG2PzzY27NpGxPwXgpHT%2B8hzCgkFzZSC%2F0%2BXIXsvc%2BnjeXkkDudLuWggaVZHte3b1QKSB2vGefWssst2KlolmjLUgA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} set-cookie: __cf_bm=YN3nUKCn_U8iqw5oOCsV01BdH968Mb1bbP.i6ZRd764-1717680049-1.0.1.1-Qya6NRr1oU5S1N81xfa3AgFfCWnCxDcNemFlH_yh5PQlS0VNp1UtjDa9v5Yv7MGSSzGNVAwZcK5vl_JTbbF8Cw; path=/; expires=Thu, 06-Jun-24 13:50:49 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None _cfuvid=kcpl8QrhglNxDHYbBjOpIeUsfuZMf6iv0TPUUwzyY6w-1717680049269-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None server: cloudflare X-Firefox-Spdy: h2

	darxn37mk.cc/socket.io/?EIO=3&transport=websocket	172.67.133.128		0 B
URL darxn37mk.cc/socket.io/?EIO=3&transport=websocket IP 172.67.133.128:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://darxn37mk.cc Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 4XfnEAA64FeVknsXHWspxw== DNT: 1 Connection: keep-alive, Upgrade Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache Upgrade: websocket HTTP/1.1 101 Switching Protocols Date: Thu, 06 Jun 2024 13:20:49 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: o6KaIpSJv7iwKMZxoUEyyg3tsKM= CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0vzl41iDSKzhHQVVCQqJZc43MATl6RZ12deMT%2Fc6PnXjgXru9XHCxEXiZKc7T3zGSPcZrsect7QNIE6dfoZBA2YBKI70xYVMjJpQa6Si%2BmjtdrXfveBIbRTY0b6fvQo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88f8b3b37cba0afa-OSL alt-svc: h3=":443"; ma=86400

	darxn37mk.cc/img/icons/apple-touch-icon-152x152.png	172.67.133.128	200 OK	4.0 kB
URL GET HTTP/3 darxn37mk.cc/img/icons/apple-touch-icon-152x152.png IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced Size 4.0 kB (4046 bytes) Hash 1a034e64d80905128113e5272a5ab95e 92328e60f63d690f33cd4961b9934a539dc29b82 4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135 HTTP Headers GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Thu, 06 Jun 2024 13:20:49 GMT content-type: image/png content-length: 4046 last-modified: Wed, 05 Jun 2024 18:16:08 GMT cache-control: max-age=14400 cf-cache-status: HIT age: 3045 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=31dKP9BegJEtbRfqDzngFJyBCB61xO%2F37ng%2FBPGo0tYKkqOSbkES56sUNAbFYfyTyBHc1pIzISxPJ2vHd%2FHNuk%2F7aTE798Jr2gLFxDP4e1jrq6FKJhVNwiqYPVQEiOw%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 88f8b3b4ec2d0b45-OSL alt-svc: h3=":443"; ma=86400

	darxn37mk.cc/img/icons/favicon.svg	172.67.133.128	200 OK	8.0 kB
URL GET HTTP/3 darxn37mk.cc/img/icons/favicon.svg IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type HTML document, ASCII text, with very long lines (2705), with no line terminators Size 8.0 kB (8000 bytes) Hash 84bbb21509db35ec6b79cb7ed6e3a5f5 16a59b2f918f6b3fa9fab8fda4c360482c5bef5c ad0eb729f046f032878486a67e39afe5e888edf47730aaf31ab3ca3cc4ca7fb4 HTTP Headers GET /img/icons/favicon.svg HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Thu, 06 Jun 2024 13:20:49 GMT content-type: text/html; charset=utf-8 cache-control: max-age=14400 cf-cache-status: HIT age: 5337 last-modified: Thu, 06 Jun 2024 11:51:52 GMT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zEkjnaMutqg7RKZBE0fTU%2BOrF3w3uEwb5RBa3A60yTiQRQE5EgxzUEYGGfKeumlhBRMz8BAVaQk%2F1VE7eHBzqZkV0mdXIrLV4Rptl4PKKAQ0cmbY38gMEPYuCrwaIKw%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 88f8b3b4ec2f0b45-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	ocsp.sectigochina.com/	104.18.38.66		472 B
URL ocsp.sectigochina.com/ IP 104.18.38.66:0 ASN #13335 CLOUDFLARENET File type data Size 472 B (472 bytes) Hash 886f69fc31139c46b5fd1a76502c9f51 c429946348de84bb45d4e092c1f8b71bca4192c2 f28272eaa2d3db536f68cb3a136cbd9082ea5c62e13b0829cd109ccd386cd06e HTTP Headers `POST / HTTP/1.1 Host: ocsp.sectigochina.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 06 Jun 2024 13:20:51 GMT Content-Type: application/ocsp-response Content-Length: 472 Connection: keep-alive Last-Modified: Wed, 05 Jun 2024 12:42:44 GMT Expires: Wed, 12 Jun 2024 12:42:43 GMT Etag: "c429946348de84bb45d4e092c1f8b71bca4192c2" Cache-Control: max-age=517191,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb1 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88f8b3c199a5b4ff-OSL`

	b.yzcdn.cn/vant/icon-demo-1126.png	154.85.69.56	200 OK	8.9 kB
URL GET HTTP/2 b.yzcdn.cn/vant/icon-demo-1126.png IP 154.85.69.56:443 ASN #139057 LEGEND DYNASTY PTE. LTD. Requested by https://darxn37mk.cc/ Certificate IssuersslTrus Subject.yzcdn.cn Fingerprint6A:A8:BA:7C:D4:B4:86:0B:74:EB:E6:19:C8:69:2E:8B:13:6C:1E:1B ValidityThu, 09 Nov 2023 00:00:00 GMT - Mon, 09 Dec 2024 23:59:59 GMT File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Size 8.9 kB (8886 bytes) Hash f87c46f346a5548224ccbe0b6bd75df5 8e8b8bd4ba3e6b6c8557d94a726061fdd62492fd b6304eb9b754d38d3ad74d0acce42c156536840351368ed3e4895a6b50cd9370 HTTP Headers `GET /vant/icon-demo-1126.png HTTP/1.1 Host: b.yzcdn.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Thu, 06 Jun 2024 13:20:51 GMT content-type: image/png content-length: 8886 server: openresty accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: X-Log, X-Reqid access-control-max-age: 2592000 cache-control: public, max-age=2592000 content-disposition: inline; filename="icon-demo-1126.png"; filename*=utf-8''icon-demo-1126.png content-md5: +HxG80alVIIkzL4La9dd9Q== content-transfer-encoding: binary etag: "Fo6Li9S6PmtshVfZSnJgYf3WJJL9" last-modified: Mon, 26 Nov 2018 11:08:05 GMT x-reqid: YyIAAAASg9geDiAX x-svr: IO x-qiniu-zone: 0 x-log: X-Log x-ser: BC5_dx-lt-yd-zhejiang-huzhou-3-cache-7, BC165_lt-obgp-fujian-xiamen-33-cache-1, BC132_IT-Lombardia-Milan-1-cache-1, BC46_DE-Frankfurt-Frankfurt-11-cache-4 x-cache: HIT from BC46_DE-Frankfurt-Frankfurt-11-cache-4(baishan) X-Firefox-Spdy: h2

	darxn37mk.cc/js/chunk-vendors.ea790e22.js	172.67.133.128	200 OK	949 kB
URL GET HTTP/3 darxn37mk.cc/js/chunk-vendors.ea790e22.js IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type Size 949 kB (949174 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /js/chunk-vendors.ea790e22.js HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Thu, 06 Jun 2024 13:20:48 GMT content-type: text/javascript; charset=utf-8 last-modified: Wed, 05 Jun 2024 18:18:28 GMT cache-control: max-age=14400 cf-cache-status: HIT age: 5337 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zTbz8pJ41hX6bqVZGx%2FNSJ1j1BvC5hhGmidn0bs8T%2BY5k30spqLGiGFokb1f6xhAB1l4uDSbgZqaJYcgfIC8e9Ljet6pO4mDoE15uY3B1BvKUcZImKSUTjqpM1XjRPI%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 88f8b3b0cf4d0b45-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	darxn37mk.cc/js/app.6eeea450.js	172.67.133.128	200 OK	171 kB
URL GET HTTP/3 darxn37mk.cc/js/app.6eeea450.js IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type Size 171 kB (171032 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /js/app.6eeea450.js HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Thu, 06 Jun 2024 13:20:48 GMT content-type: text/javascript; charset=utf-8 last-modified: Wed, 05 Jun 2024 18:17:34 GMT cache-control: max-age=14400 cf-cache-status: HIT age: 5337 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GC7680LBO%2Fp7xIpa5gXoYjwmnhy5DRtPxt3wLw8q8W5fcmQ7lUiTGEM7W3hHT0lYfHtJNLWm2MMFwoqTgtFgl%2Fj66tr37WKbdWNRGXUVjfudMg81NjSczOxZKHQ0Zcw%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 88f8b3b0cf4f0b45-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	darxn37mk.cc/css/app.2035d986.css	172.67.133.128	200 OK	14 kB
URL GET HTTP/3 darxn37mk.cc/css/app.2035d986.css IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type ASCII text, with very long lines (14103), with no line terminators Size 14 kB (14103 bytes) Hash b392e9a9927e7e682afa369c15d341fe 22bcf11713512a59ba43d64f312c016843ffa6d2 9f89a948d63754172652153db132f8e40c4b689ff311649d31480f73ec4b1fdf HTTP Headers `GET /css/app.2035d986.css HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Thu, 06 Jun 2024 13:20:48 GMT content-type: text/css; charset=utf-8 last-modified: Wed, 05 Jun 2024 18:15:56 GMT cache-control: max-age=14400 cf-cache-status: HIT age: 2122 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2BMql3DWUQm4eE03vJthcRM9g1hle3Ty1DMppQpWzF3Z0IztG0gCREmr0j6GUwDuniGPuPfY%2FDhTyAv1W4vCOYKfHVdhuzoBS8XKHUjyaWqCt%2FnpAH0YNDY734v6CmA%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 88f8b3b0cf510b45-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	darxn37mk.cc/getlog	172.67.133.128	200 OK	12 kB
URL GET HTTP/3 darxn37mk.cc/getlog IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type JSON text data Size 12 kB (11934 bytes) Hash b55b93f047e6a9a8a6f3325d65da3fbb 3d14e9312308fea1547ae24905994c8c3de27f71 4b797def4416ed59eefb3ee7e0ae95d8675f4251855b4a8bec5f20666338bd66 HTTP Headers GET /getlog HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/enter/register Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Thu, 06 Jun 2024 13:20:49 GMT content-type: application/json; charset=utf-8 cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zviS7cNabay5NTp3Svwmn9ApiWc21wSCk9SQWNw10zfwAwscYWMNU4TDXH%2BGBWGIWSylRpHdLBcJyRDd9WQ8qJ2fiCuG1HER9%2FT0SMINs%2F8mCyX%2B8t%2F3fym7SFtILNM%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 88f8b3b34a2d0b45-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	cdn.discordapp.com/attachments/1247962556224507916/1247962680141025371/dar.mp4?ex=6661ef50&is=66609dd0&hm=bd9c77a64d9dd2eeed96746346a1b8b67d823a319ec28b06706093ec0b720482&	162.159.134.233	404 Not Found	0 B
URL GET HTTP/2 cdn.discordapp.com/attachments/1247962556224507916/1247962680141025371/dar.mp4?ex=6661ef50&is=66609dd0&hm=bd9c77a64d9dd2eeed96746346a1b8b67d823a319ec28b06706093ec0b720482& IP 162.159.134.233:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /attachments/1247962556224507916/1247962680141025371/dar.mp4?ex=6661ef50&is=66609dd0&hm=bd9c77a64d9dd2eeed96746346a1b8b67d823a319ec28b06706093ec0b720482& HTTP/1.1 Host: cdn.discordapp.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: video/webm,video/ogg,video/;q=0.9,application/ogg;q=0.7,audio/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Range: bytes=0- DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Sec-Fetch-Dest: video Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Accept-Encoding: identity Pragma: no-cache Cache-Control: no-cache HTTP/2 404 Not Found date: Thu, 06 Jun 2024 13:20:49 GMT content-type: application/xml; charset=UTF-8 content-length: 229 cf-ray: 88f8b3b3cb1cb527-OSL cf-cache-status: HIT accept-ranges: bytes age: 135 cache-control: public, max-age=31536000 content-disposition: attachment expires: Fri, 06 Jun 2025 13:20:49 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-guploader-uploadid: ABPtcPrX5S9YHozfHEuQQUGDhzzECaJzM8QYNVVrrQUvr0CUQG4EzMiImsOsmzAh5Fa63dYc2Uq0va9gDA x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lKcjjY5ptCawp%2Byiffaiov6Y3qGUCtHCg%2BT1QdA59kGejG2PzzY27NpGxPwXgpHT%2B8hzCgkFzZSC%2F0%2BXIXsvc%2BnjeXkkDudLuWggaVZHte3b1QKSB2vGefWssst2KlolmjLUgA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} set-cookie: __cf_bm=YN3nUKCn_U8iqw5oOCsV01BdH968Mb1bbP.i6ZRd764-1717680049-1.0.1.1-Qya6NRr1oU5S1N81xfa3AgFfCWnCxDcNemFlH_yh5PQlS0VNp1UtjDa9v5Yv7MGSSzGNVAwZcK5vl_JTbbF8Cw; path=/; expires=Thu, 06-Jun-24 13:50:49 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None _cfuvid=kcpl8QrhglNxDHYbBjOpIeUsfuZMf6iv0TPUUwzyY6w-1717680049269-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None server: cloudflare X-Firefox-Spdy: h2

	darxn37mk.cc/	172.67.133.128	200 OK	2.7 kB
URL User Request GET HTTP/2 darxn37mk.cc/ IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type HTML document, ASCII text, with very long lines (2871), with no line terminators Size 2.7 kB (2705 bytes) Hash 55467773a5c97c4cb2748778bf4535da 7289e26e2aefc2e8a443cbca27f822b9710c8c02 a1b6b003517e611927e44981249e225593a1b371e96cee1dc8ab8b3f67495491 HTTP Headers `GET / HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Thu, 06 Jun 2024 13:20:48 GMT content-type: text/html; charset=utf-8 last-modified: Wed, 05 Jun 2024 18:16:05 GMT cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gpPjw9djgEWTVJel0PCl%2BoPUxqhOuAv6lxBjW7nY6RdPG%2BBCjPwcpAQ%2BG20pnEpYs8VQwKLVHLXU6%2FPgIsM416mPWfV7egc%2BFOuv5%2F%2BluORPZpqh%2BynnUVyFSiY%2FVL0%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 88f8b3ad5f855694-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	darxn37mk.cc/css/chunk-vendors.c57533e1.css	172.67.133.128	200 OK	156 kB
URL GET HTTP/3 darxn37mk.cc/css/chunk-vendors.c57533e1.css IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 156 kB (156544 bytes) Hash ebfffebc1f62c3be51082e6595a0a005 e278fbd6fd48150b3f366b50ed388983d934978c f5ce9e73e1f7cea326eedd4f39d9b2d703ba4ccb31a6078cdc1fb16481298a32 HTTP Headers `GET /css/chunk-vendors.c57533e1.css HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://darxn37mk.cc/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Thu, 06 Jun 2024 13:20:48 GMT content-type: text/css; charset=utf-8 last-modified: Wed, 05 Jun 2024 18:16:04 GMT cache-control: max-age=14400 cf-cache-status: HIT age: 2122 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mcCbGLk6e2y0fJizHX6dlvRWiGNuu%2Be0F2a8sFG3ferPdnLqiXh0laQtqSxRAZyNrpy7kYHZzdMpGiCcczvzxdnTWhpdT7b9b%2BLHHlcHkfBz3fxfJfzrnR5pPweeJL4%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 88f8b3b0cf500b45-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	darxn37mk.cc/socket.io/?EIO=3&transport=websocket	172.67.133.128	101 Switching Protocols	0 B
URL GET HTTP/1.1 darxn37mk.cc/socket.io/?EIO=3&transport=websocket IP 172.67.133.128:443 ASN #13335 CLOUDFLARENET Requested by https://darxn37mk.cc/ Certificate IssuerGoogle Trust Services LLC Subjectdarxn37mk.cc Fingerprint3D:46:A2:AC:A6:9B:F3:17:B7:39:32:00:43:D6:9B:6A:79:31:23:C4 ValidityWed, 05 Jun 2024 16:52:26 GMT - Tue, 03 Sep 2024 16:52:25 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: darxn37mk.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://darxn37mk.cc Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 4XfnEAA64FeVknsXHWspxw== DNT: 1 Connection: keep-alive, Upgrade Cookie: inviteNumber=-1; username=; hasLogin=false; tier=-1; password=; userId=-1; hasGuide=false Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache Upgrade: websocket HTTP/1.1 101 Switching Protocols Date: Thu, 06 Jun 2024 13:20:49 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: o6KaIpSJv7iwKMZxoUEyyg3tsKM= CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0vzl41iDSKzhHQVVCQqJZc43MATl6RZ12deMT%2Fc6PnXjgXru9XHCxEXiZKc7T3zGSPcZrsect7QNIE6dfoZBA2YBKI70xYVMjJpQa6Si%2BmjtdrXfveBIbRTY0b6fvQo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88f8b3b37cba0afa-OSL alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by