Report - oktxax.xyz/User/txcoin/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index

Report Overview

Submitted URL
oktxax.xyz/User/txcoin/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-10 22:09:48
Access
public
Website Title
BitForex
Final URL
oktxax.xyz/Login/index
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-05-09	1.0 kB	116 kB	151.101.129.229
lf3-cdn-tos.bytecdntp.com	413880	2021-01-11	2022-03-14	2024-05-08	459 B	14 kB	163.181.92.237
oktxax.xyz	unknown	unknown	No data	No data	6.4 kB	278 kB	188.114.97.1
lib.sinaapp.com	310212	2009-06-29	2012-05-23	2023-09-21	439 B	23 kB	27.221.16.146
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-10	1.5 kB	50 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-10	494 B	27 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed
2024-05-10	medium	oktxax.xyz	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	oktxax.xyz/Login/index	1 B	2023-03-07	2024-06-04
Pretty URL oktxax.xyz/Login/index IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:54 Last Seen2024-06-04 10:06:31 Times Seen73327 Hash 68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b Loading...

	oktxax.xyz/Public/Static/js/jquery.min.js	84 kB	2023-03-07	2024-06-04
Pretty URL oktxax.xyz/Public/Static/js/jquery.min.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:01:55 Last Seen2024-06-04 08:41:47 Times Seen2348 Hash d021c983bd6e7291b43a5cc1fb2ebe99 ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079 Loading...

	oktxax.xyz/Public/Static/js/layer/layer.js	20 kB	2023-04-11	2024-06-04
Pretty URL oktxax.xyz/Public/Static/js/layer/layer.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 09:52:52 Last Seen2024-06-04 08:41:47 Times Seen312 Hash 666f4437565d197e9459e19a29f58315 afc5c0a1369137e52b37ad5fb63f48202ce31368 4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100 Loading...

	oktxax.xyz/Login/index	244 B	2024-05-11	2024-05-11
Pretty URL oktxax.xyz/Login/index IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-11 00:09:29 Last Seen2024-05-11 00:09:54 Times Seen2 Hash c85aa1010cf22e4e530e584dfd0655c8 aa7c0ae68c458d6586fcae7cc6ac359f41d916f6 7e7a05d27f72c9320ae37eaa7deeadc83ee244a82daaa8d39a969d3c4cc26697 Loading...

	oktxax.xyz/Login/index	2.2 kB	2024-05-11	2024-05-11
Pretty URL oktxax.xyz/Login/index IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-11 00:09:29 Last Seen2024-05-11 00:09:54 Times Seen2 Hash 478c510464d0fc397e7c0ec8931b8e7c 682fc799d8346f32f6915b2c33e9a61b9efa797c 9c6e0e86fee4028fe87495ad179d2666f23172d0f107f7d53ce5f54fc12dee7f Loading...

	oktxax.xyz/Public/Static/slider/jquery.js	96 kB	2023-03-07	2024-06-03
Pretty URL oktxax.xyz/Public/Static/slider/jquery.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:00 Last Seen2024-06-03 09:14:55 Times Seen1228 Hash eaec1712551cd2792f4607f39fab12e7 2439711705752fac5dd1a6a8d6b1be63ffcbc76d 746e54e89161118a67bd59103c4ab55e3060735cc85c1d047c2cf04d4b12043d Loading...

	oktxax.xyz/Public/Static/slider/disk/longbow.js	12 kB	2023-11-01	2024-05-11
Pretty URL oktxax.xyz/Public/Static/slider/disk/longbow.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-01 19:27:31 Last Seen2024-05-11 00:09:54 Times Seen6 Hash 1c558bae85c8ce7e789ac9b6d0e787cf 94e262f52f7270067be357f90ff2913f95a5d7ca e567a74c9de466af6281ac64e1d93f7cc943f53586b5fa5749229d67d1a77305 Loading...

HTTP Transactions (21)

URL IP Response Size

cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css

151.101.129.229

200 OK

8.0 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text
Size
8.0 kB (8017 bytes)
Hash
dbf1248779dc682a91ba529b5efe0ffc
0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152
32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70

HTTP Headers

GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.3.0
x-jsd-version-type: version
etag: W/"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI"
content-encoding: br
accept-ranges: bytes
date: Fri, 10 May 2024 22:09:23 GMT
age: 1422398
x-served-by: cache-fra-etou8220059-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8017
X-Firefox-Spdy: h2

lf3-cdn-tos.bytecdntp.com/cdn/expire-1-M/font-awesome/5.15.2/css/all.min.css

163.181.92.237

200 OK

13 kB

URL GET HTTP/2
lf3-cdn-tos.bytecdntp.com/cdn/expire-1-M/font-awesome/5.15.2/css/all.min.css
IP
163.181.92.237:443
ASN
#24429 Zhejiang Taobao Network Co.,Ltd

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerDigiCert, Inc.
Subject*.bytecdntp.com
FingerprintC2:7F:33:D6:C6:DE:56:DE:8C:6D:89:F5:F8:38:99:12:9D:02:EF:3D
ValidityFri, 30 Jun 2023 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (59158)
Size
13 kB (12868 bytes)
Hash
c4af24ce595437830af0a401897698b2
06b7f92dd894a9edb0aeb9d040b489460ecff593
d1fb8d8337cd22568295b0ed998c85c58f0b4cd083af0b0db21cb0af80002f2d

HTTP Headers

GET /cdn/expire-1-M/font-awesome/5.15.2/css/all.min.css HTTP/1.1
Host: lf3-cdn-tos.bytecdntp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: text/css
content-length: 12868
date: Fri, 10 May 2024 16:20:03 GMT
last-modified: Sat, 22 Jan 2022 22:35:31 GMT
vary: Accept-Encoding
etag: W/"61ec86b3-e7d0"
expires: Sun, 09 Jun 2024 16:18:00 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
content-encoding: gzip
server-timing: inner; dur=12
x-tt-trace-host: 017777ab9fc27d9931a5cb866f0aeb56ce8b3de5855a6b7232f795171fab5cea1a4127146eaf8aa49e11b7136d8c17ab4d2ef1e98a035aff72349fa514cb961123e3b58e466d70a39570910a3834e4c4b8
x-tt-trace-tag: id=03;cdn-cache=hit;type=static
x-tt-trace-id: 00-2405110020038390ECD4B9383E277924-742294070FD84C6C-00
x-tt-logid: 202405110020038390ECD4B9383E277924
ali-swift-global-savetime: 1715358003
via: cache16.l2de2[654,654,200-0,M], cache14.l2de2[656,0], ens-cache16.de5[0,0,200-0,H], ens-cache10.de5[1,0]
age: 20960
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 10 May 2024 16:20:03 GMT
x-swift-cachetime: 2592000
x-response-cache: edge_hit
x-response-cinfo: 91.90.42.154
timing-allow-origin: *, *
eagleid: a3b55c9e17153789634862371e
X-Firefox-Spdy: h2

oktxax.xyz/Public/Static/css/base.css

188.114.97.1

200 OK

5.4 kB

URL GET HTTP/3
oktxax.xyz/Public/Static/css/base.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type
gzip compressed data, from Unix
Size
5.4 kB (5408 bytes)
Hash
83be74efbd84f76c0ae7dbba9c65239c
bde813d4e3d3846e6616429713022579ba9afa93
1e20edcd509f804064cf220ec501ec4c3775f7b004fee9ae2f46ca8fd9533eb0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/css/base.css HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
vary: Accept-Encoding
etag: W/"6385e7ce-58a"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ME%2BVq4ycrH1ozBXyIkameeEmLet3hozWSTYTxL7%2BlnvLRFOVweM0TKDbxHsb7hIhGYXPpmwaHCXH5ZmtX71b2z8%2FbxdCUETQGzR2Ys%2F1WVQ87y7498ML8n%2FDakbm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d92990b52d-OSL
alt-svc: h3=":443"; ma=86400

lib.sinaapp.com/js/bootstrap/4.2.1/css/bootstrap.min.css

27.221.16.146

200 OK

23 kB

URL GET HTTP/2
lib.sinaapp.com/js/bootstrap/4.2.1/css/bootstrap.min.css
IP
27.221.16.146:443
ASN
#4837 CHINA UNICOM China169 Backbone

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerDigiCert Inc
Subject*.sinaapp.com
Fingerprint15:0E:26:D5:E5:9D:1E:A4:64:13:CE:B1:B0:EE:B4:F0:CE:9E:00:6A
ValidityFri, 10 Nov 2023 00:00:00 GMT - Tue, 10 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65324)
Size
23 kB (22973 bytes)
Hash
f411c136e2bb302ada2120b3eb1d5bc3
3ae9bb0e7929489abd23736ae892939c8fe98645
6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c

HTTP Headers

GET /js/bootstrap/4.2.1/css/bootstrap.min.css HTTP/1.1
Host: lib.sinaapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 22:09:25 GMT
content-type: text/css
content-length: 22973
last-modified: Tue, 31 Mar 2020 05:09:20 GMT
vary: Accept-Encoding
content-encoding: gzip
via: 4725
expires: Fri, 17 May 2024 22:09:25 GMT
cache-control: max-age=604800
sae-cache: HIT from 27.221.16.146
accept-ranges: bytes
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c

151.101.129.229

200 OK

107 kB

URL GET HTTP/3
cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Web Open Font Format, TrueType, length 106812, version 1.0
Size
107 kB (106812 bytes)
Hash
df7de9fe96a30f78c7f652f5b00ae016
1b10ce080e2562a8b7e8395044d3ca83dc112999
011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b

HTTP Headers

GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oktxax.xyz
DNT: 1
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 106812
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff
x-jsd-version: 1.3.0
x-jsd-version-type: version
etag: W/"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk"
accept-ranges: bytes
date: Fri, 10 May 2024 22:09:24 GMT
age: 1445023
x-served-by: cache-fra-etou8220031-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2

142.250.74.131

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15764, version 1.0
Size
16 kB (15764 bytes)
Hash
603b8950590bf833546eee7cbc79944a
ebbde06eb829868c5f689afe2d48377608be1e7b
0f303f31706d39866cced9dcc17b61fb8423674278d7f6051d66b3a79ffbca18

HTTP Headers

GET /s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oktxax.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 03:22:24 GMT
expires: Sat, 10 May 2025 03:22:24 GMT
cache-control: public, max-age=31536000
age: 67620
last-modified: Wed, 11 May 2022 19:24:35 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

oktxax.xyz/Public/Static/slider/jquery.js

188.114.97.1

200 OK

38 kB

URL GET HTTP/3
oktxax.xyz/Public/Static/slider/jquery.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type
gzip compressed data, from Unix
Size
38 kB (38044 bytes)
Hash
d819b884041d5ab264dd75a7d194dbb1
959e687d9ded2b511f23a257625271982f439c2e
ae0abbdb9bd6bd03114455ef219647b5748130e0956116baa693abebf3b1f573

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/slider/jquery.js HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
vary: Accept-Encoding
etag: W/"6385e7ce-17881"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CXaq5RA%2FOMfH%2BQywRN3O1vHiBrK7CMp8%2BR0JlqqX4MI921FS6%2BxSAbrRnrRzy%2BnVZ2fBMYftSCxjslheV0qRZPMCNP3CwfaYwJElRBffLbIEqmwlwzeCmg%2F6uJYz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d949acb52d-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.131

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oktxax.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 10:46:32 GMT
expires: Wed, 07 May 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 300172
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.131

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://oktxax.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 06:08:19 GMT
expires: Sat, 10 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
age: 57665
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

oktxax.xyz/Public/Static/css/nologed.css

188.114.97.1

200 OK

1.3 kB

URL GET HTTP/3
oktxax.xyz/Public/Static/css/nologed.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type
ASCII text, with very long lines (1409), with no line terminators
Size
1.3 kB (1285 bytes)
Hash
2246714e8b49188608d167afb7014480
98cf3f8e8044030c40c165b8639dea4a07cde5a5
6d7e99d69ec14ec7732a37bfc7ebefdc154a02de5ef0b3856c82b70324b57e93

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/css/nologed.css HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
vary: Accept-Encoding
etag: W/"6385e7ce-505"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VSdxFac4zkV%2BO78nNSIQK4NFM67nJX6GfPWsRFoKUvNM8KFLix5bDnC2OIA7Njz9x18np5F8rOAgAeQRzSLAMIiYraQKdlQSVaEoptfc0WxBfCCb8pmpv1GNZcqv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d92997b52d-OSL
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=latin-ext

142.250.74.106

200 OK

26 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=latin-ext
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text
Size
26 kB (26330 bytes)
Hash
aa41248927242f42f765c279234b7cfb
65f39cf67b13ae7bd1c08e66a5b8e3b769d090ff
b2b513d915ee0689890c4c17b634c139f58067a1b0ec3513e21886945b215c66

HTTP Headers

GET /css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 22:09:23 GMT
date: Fri, 10 May 2024 22:09:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

oktxax.xyz/Public/Dela/demo/demo.css

188.114.97.1

200 OK

395 B

URL GET HTTP/3
oktxax.xyz/Public/Dela/demo/demo.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type
Unicode text, UTF-8 text, with very long lines (439), with no line terminators
Size
395 B (395 bytes)
Hash
941cb5ce0e8b472cc8fd47f2b89e80b3
47a6c096af3eca461be24b1f9857761ab1ede901
71089071269307754dac68d491f77f16aea95b356971c7a8ccf164d8832e3dc2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Dela/demo/demo.css HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
etag: W/"6385e7ce-18b"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ph0AlPKCy%2FzwByoW2moPDSPMkW1hgotajaOKtpxKW0%2FK5OQM8Bb8DLfK9e41cvWCEsr5BJZ1jpmgYp6SlARNKolvOVjh%2BraBxJDwtHkwZjq1zfliIC1h7YW5UBNa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d40d9399eb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

oktxax.xyz/Public/Static/slider/disk/style.css

188.114.97.1

200 OK

2.3 kB

URL GET HTTP/3
oktxax.xyz/Public/Static/slider/disk/style.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type
ASCII text, with very long lines (2546), with no line terminators
Size
2.3 kB (2278 bytes)
Hash
34b42d3f4c1f22a1e52b6daefd6e2908
caea45b5a601b195d2c78b9f626d966c748694fd
185134a0deef09bb6a151bb22405e9aa6775638fc951060b262703617329a7ca

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/slider/disk/style.css HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
vary: Accept-Encoding
etag: W/"6385e7ce-8e6"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aLnghwZjh0RehhWYnMXjBJcew%2FLlA1QPytgXGKtK5TCcvYZDDCSANFvWtdni9hoZo3y8TOiltsa8B%2FD0sUNbrEOwtthIWxS0ewR%2BPEC6aaWw79XCrPOH32Om2IAI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d949a7b52d-OSL
alt-svc: h3=":443"; ma=86400

oktxax.xyz/Public/Dela/template/dela-template.css

188.114.97.1

200 OK

62 kB

URL GET HTTP/3
oktxax.xyz/Public/Dela/template/dela-template.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
62 kB (61508 bytes)
Hash
fd3581be64a654a254c4503f2617c27c
fd4c93422b5cdce3d16534a7fcbdbeac8a32c7e1
58b6150aa66de72c55acf030aa9f46c006379669619577fc2feffd32e0a45e97

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Dela/template/dela-template.css HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
vary: Accept-Encoding
etag: W/"6385e7ce-f044"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xzorMFR%2FDnL5vmPR%2BPfm%2BPvnYDVFcSbf8gz2a33ibt4w2lAO%2BsdluyeNVf2dszAZIlXDPgW82wBYTNzk7Pt47KIGM8bN838jz3BvB8o7AVYJs4BYVhSqob8fntvC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d9399fb52d-OSL
alt-svc: h3=":443"; ma=86400

oktxax.xyz/Public/Static/js/layer/skin/layer.css

188.114.97.1

200 OK

14 kB

URL GET HTTP/3
oktxax.xyz/Public/Static/js/layer/skin/layer.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type

Size
14 kB (14048 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/js/layer/skin/layer.css HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:24 GMT
content-type: text/css
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
vary: Accept-Encoding
etag: W/"6385e7ce-36e0"
expires: Sat, 11 May 2024 10:09:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 22
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A9o4aeciydsuRig918WLYRC8p2POi7u4rlaKz9JA5iKaYqBaU8J4NxX0rgnc3wV1r1ZXpE%2BbVblKY9LFzwwH2ha3ZAa%2FSl7UDhTlPmLHpij9jJ2u0UVEKmomT%2BBR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40e15a5fb52d-OSL
alt-svc: h3=":443"; ma=86400

oktxax.xyz/User/txcoin/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index

188.114.97.1

302 Found

13 kB

URL User Request GET HTTP/2
oktxax.xyz/User/txcoin/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type

Size
13 kB (12596 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /User/txcoin/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index/Login/index HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 10 May 2024 22:09:22 GMT
content-type: text/html;charset=utf-8
set-cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: /Login/index
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W8pL6D5WbaCIjEkon6m6%2FRr%2BYUA%2BSbrCPGpBKwDVW3HccLGQ3bApZXxDwxVwEtCMC1QV1AbSxRchqS%2BXklqPJWyyHTnYggKSrzVh1z3l71T0H83IR5HHqLOmVVvc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d51d6456aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

oktxax.xyz/Public/Static/js/jquery.min.js

188.114.97.1

200 OK

84 kB

URL GET HTTP/3
oktxax.xyz/Public/Static/js/jquery.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type
JavaScript source, ASCII text, with very long lines (32061)
Size
84 kB (84280 bytes)
Hash
d021c983bd6e7291b43a5cc1fb2ebe99
ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff
c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/js/jquery.min.js HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: application/javascript
last-modified: Mon, 08 Jan 2024 16:38:47 GMT
vary: Accept-Encoding
etag: W/"659c2517-14938"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KEMryHvtq1W2Seq80l8ZcNX25TPT8oDfBwDSuKVgathfMEXI4ZthHclF7xhSIDLZ0g%2FQlvTlYNGQGAMuIWFYS6q023kUYG4CO0RIJZjWi191i460%2BqLy4tv7Q%2BkY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d949a9b52d-OSL
alt-svc: h3=":443"; ma=86400

oktxax.xyz/Public/Static/js/layer/layer.js

188.114.97.1

200 OK

20 kB

URL GET HTTP/3
oktxax.xyz/Public/Static/js/layer/layer.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type

Size
20 kB (19843 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/js/layer/layer.js HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
vary: Accept-Encoding
etag: W/"6385e7ce-4d83"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=woBI59ga%2FcWrS6H387%2FLQPli0UZ2WdUH1K5K3JcBnZbmpOwrjTYxkKxwWWefN43DYb0jKUEmoV9BwuV9ef5de7r%2Fey3TE6CW0H8w4euv%2FpMkLZtmBTh9LXbRl8yv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d949abb52d-OSL
alt-svc: h3=":443"; ma=86400

oktxax.xyz/Public/Static/slider/disk/longbow.js

188.114.97.1

200 OK

12 kB

URL GET HTTP/3
oktxax.xyz/Public/Static/slider/disk/longbow.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type

Size
12 kB (12178 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/slider/disk/longbow.js HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: application/javascript
last-modified: Tue, 29 Nov 2022 11:06:54 GMT
vary: Accept-Encoding
etag: W/"6385e7ce-2f92"
expires: Sat, 11 May 2024 10:08:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 25
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pYiEoFlhxIFx2YzEXhV%2FG7S5h%2BFyuhTzr2LT1nDGCsv8e84Bl67KPiM46hmet%2Briz10uEHuIdkJE13eIUX0qcQPSLYnn0h%2BHuU%2F9rhEUVsJOiN2jzECwpqDIiT96"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d949b8b52d-OSL
alt-svc: h3=":443"; ma=86400

oktxax.xyz/favicon.ico

188.114.97.1

200 OK

4.2 kB

URL GET HTTP/3
oktxax.xyz/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://oktxax.xyz/Login/index
Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type
MS Windows icon resource - 1 icon, 31x32, 32 bits/pixel
Size
4.2 kB (4158 bytes)
Hash
cef1fdcf0f902d25694d5ea83a3d8e97
beed6c02f9875f1471122900f5d063d6fe67f0c6
aaefc2dae382655fd38fef068fd3d8983038829141a7aee69b2748c21f11e8cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oktxax.xyz/Login/index
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 22:09:24 GMT
content-type: image/x-icon
last-modified: Sat, 09 Mar 2024 10:50:58 GMT
etag: W/"65ec3f12-103e"
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2BbCz6WVv1iXIkdpBsk%2BJYKV42xG1bOZaWuIwAwguXFlty4kqm3CNdBTymEUnGqSkrAtwvsEhY8WK66pTTrzcz1Buw1kT1Bco0WuESLctU8CxcZzq4ro1q3YmSRQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881d40e22b2db52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

oktxax.xyz/Login/index

188.114.97.1

200 OK

13 kB

URL User Request GET HTTP/2
oktxax.xyz/Login/index
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectoktxax.xyz
FingerprintF6:AC:84:07:9E:E7:39:0C:7A:EF:DE:86:92:31:4B:11:E8:BA:FF:30
ValidityWed, 24 Apr 2024 12:26:43 GMT - Tue, 23 Jul 2024 12:26:42 GMT

File type

Size
13 kB (12596 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Login/index HTTP/1.1
Host: oktxax.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=tvocq2edid7o23qudli06dgllb
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 22:09:23 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: private
x-powered-by: ThinkPHP
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Idie3%2BvUPGUO0N8AZJ63%2FugJUABEuKrPOYxXjwXKsytQVE6Bmg8zJLzS15LJf38O6TXf22qccxfeOk2NaT07HUrCbzSAarb3uqZGbFgOX4uXZqW8J2jxtVi9wmEs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881d40d66f2b56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL GET HTTP/2

IP

ASN

Requested by