Report - kcfxt.top/

Report Overview

Visited public
2024-11-14 11:00:20
Tags
URL
kcfxt.top/
Finishing URL
kcfxt.top/#/
IP / ASN
188.114.96.1
#13335 CLOUDFLARENET
Title
ETH

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kcfxt.top	unknown	2024-02-25	2024-11-14	2024-11-14	4.0 kB	1.6 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-11-13	medium	kcfxt.top/	Crypto/Wallet
2024-11-13	medium	kcfxt.top/	Crypto/Wallet
2024-11-13	medium	kcfxt.top/	Crypto/Wallet
2024-11-13	medium	kcfxt.top/	Crypto/Wallet
2024-11-13	medium	kcfxt.top/	Crypto/Wallet
2024-11-13	medium	kcfxt.top/	Crypto/Wallet
2024-11-13	medium	kcfxt.top/	Crypto/Wallet
2024-11-13	medium	kcfxt.top/	Crypto/Wallet
2024-11-13	medium	kcfxt.top/	Crypto/Wallet

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	kcfxt.top/	ScriptElement	14 B	2023-03-07	2025-05-05
Pretty URL kcfxt.top/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:41 Last Seen2025-05-05 11:00 Times Seen842 Hash d9e35f3565e98641c0174d284e8ddd26 967e8443ce108fe2742f3ec46237a40560c67c35 6fc1c4ed09be48bc1d695bba608ad0c9ff9a525edd88b1819bdf413e88960e82 Loading...

	kcfxt.top/static/js/chunk-vendors.2bf9dfb8.js	ScriptElement	656 kB	2024-10-24	2025-02-26
Pretty URL kcfxt.top/static/js/chunk-vendors.2bf9dfb8.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-10-24 07:54 Last Seen2025-02-26 17:36 Times Seen354 Hash af6dec0f918333769e9abb68dbe3b7a1 7f5f0532c8ae4311e6632dcbe80d679bb33fff79 a07975d579b736a01b0af032d217ee6f7564b0c57ea10554d45f3c6afdd312e0 Loading...

	kcfxt.top/static/js/index.a7fce43f.js	ScriptElement	148 kB	2024-10-26	2025-02-16
Pretty URL kcfxt.top/static/js/index.a7fce43f.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-10-26 08:58 Last Seen2025-02-16 16:53 Times Seen155 Hash a576cb7c1a7f53ed750a707ca9095ec2 386356815d61fe29a3f683094d2d92c3fe0b4c92 9eff2c7465e83d87d6296d901a964aad296a07ccbf74c53f1587942b786934d2 Loading...

	kcfxt.top/static/js/pages-index-index~pages-index-preview.6a42433f.js	ScriptElement	931 kB	2024-10-24	2025-02-26
Pretty URL kcfxt.top/static/js/pages-index-index~pages-index-preview.6a42433f.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-10-24 07:54 Last Seen2025-02-26 17:36 Times Seen352 Hash 6a8e66b9544ebb2587bd49ac9c3f4fba cb9683bec25a87d679290ca2f9860e6fa9817111 adc1768692bbd7fee3bd69be1bdf3d3805bbb4d246ee32a7a56291e6b19ae195 Loading...

	kcfxt.top/static/js/pages-index-index.b2f7f695.js	ScriptElement	4.2 MB	2024-10-26	2025-02-16
Pretty URL kcfxt.top/static/js/pages-index-index.b2f7f695.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-10-26 08:58 Last Seen2025-02-16 16:53 Times Seen154 Hash 32ce177c71f083abe11d39955a06394b ebb3b428fc807e700de51427be23eef35d671278 054b876d8a48bbabce9e318d4b0399f64fdbb712f23bf7df434fe8687fb0bea2 Loading...

HTTP Transactions (9)

URL IP Response Size

kcfxt.top/static/js/chunk-vendors.2bf9dfb8.js

188.114.96.1

200 OK

204 kB

URL GET HTTP/3
kcfxt.top/static/js/chunk-vendors.2bf9dfb8.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kcfxt.top/
Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65470), with no line terminators
Size
204 kB (204214 bytes)
Hash
af6dec0f918333769e9abb68dbe3b7a1
7f5f0532c8ae4311e6632dcbe80d679bb33fff79
a07975d579b736a01b0af032d217ee6f7564b0c57ea10554d45f3c6afdd312e0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /static/js/chunk-vendors.2bf9dfb8.js HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kcfxt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 14 Nov 2024 10:59:53 GMT
content-type: application/javascript
content-length: 204214
last-modified: Mon, 25 Mar 2024 10:04:38 GMT
vary: Accept-Encoding
etag: "66014c36-31db6"
content-encoding: gzip
expires: Thu, 14 Nov 2024 22:59:53 GMT
cache-control: max-age=43200
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=49Nv4XOdYFWNd1lDyTQngPTVMbCMKqLhLXqufUcOgXNuRmamzZuIW0d6pBLKbYMEmmjsAx4%2BznqPcoj0v7dK587JgfTmOChQg4tq6JHJ7RroIk%2Fm5EUNc865l3E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8e267ea41e26f19a-CDG
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=35191&sent=14&recv=8&lost=0&retrans=0&sent_bytes=4113&recv_bytes=1577&delivery_rate=19054&cwnd=12000&unsent_bytes=0&cid=e3825194168f797a&ts=343&x=1", cfHdrFlush;dur=0

kcfxt.top/static/js/index.a7fce43f.js

188.114.96.1

200 OK

54 kB

URL GET HTTP/3
kcfxt.top/static/js/index.a7fce43f.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kcfxt.top/
Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65274), with no line terminators
Size
54 kB (54495 bytes)
Hash
a576cb7c1a7f53ed750a707ca9095ec2
386356815d61fe29a3f683094d2d92c3fe0b4c92
9eff2c7465e83d87d6296d901a964aad296a07ccbf74c53f1587942b786934d2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /static/js/index.a7fce43f.js HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kcfxt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 14 Nov 2024 10:59:53 GMT
content-type: application/javascript
content-length: 54495
last-modified: Mon, 25 Mar 2024 10:04:38 GMT
vary: Accept-Encoding
etag: "66014c36-d4df"
content-encoding: gzip
expires: Thu, 14 Nov 2024 22:59:53 GMT
cache-control: max-age=43200
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7CNp67JVojGFV1oAfO73CbwMjye%2BOXpi2HJ7HcRonAewbXleiZXBsIpTL9MuGuvsTodEVf9EANhsRRT4KYDmNhVaN7vkd3FDVn8F54anRQef4jSjulMt4vKaxls%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8e267ea41e2bf19a-CDG
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=35191&sent=24&recv=8&lost=0&retrans=0&sent_bytes=16113&recv_bytes=1577&delivery_rate=19054&cwnd=12000&unsent_bytes=0&cid=e3825194168f797a&ts=349&x=1", cfHdrFlush;dur=26

kcfxt.top/static/index.css

188.114.96.1

200 OK

26 kB

URL GET HTTP/3
kcfxt.top/static/index.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kcfxt.top/
Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
26 kB (26010 bytes)
Hash
73ae6c583d02d78f81e3f18860a2899a
07df9233fc11dddc34fbf519b891d40b2ac29c0f
e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /static/index.css HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kcfxt.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 14 Nov 2024 10:59:54 GMT
content-type: text/css
content-length: 26010
last-modified: Mon, 25 Mar 2024 10:04:38 GMT
vary: Accept-Encoding
etag: "66014c36-659a"
content-encoding: gzip
expires: Thu, 14 Nov 2024 22:59:53 GMT
cache-control: max-age=43200
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ER4uIwJ8VuDDJ%2F%2Ft6ybgNpeDWob6QLy1vEbsD43o2%2FxKa1T8EukMB0DPPanEEkb8txjEMdPA1JngAvyVcQZP9cj82NUikkStp45LdJc3mS%2FbGC2hNKlgfEkip14%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8e267ea41e22f19a-CDG
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=65448&sent=243&recv=17&lost=0&retrans=3&sent_bytes=274326&recv_bytes=1982&delivery_rate=334462&cwnd=192000&unsent_bytes=0&cid=e3825194168f797a&ts=702&x=1", cfHdrFlush;dur=0

kcfxt.top/static/js/pages-index-index~pages-index-preview.6a42433f.js

188.114.96.1

200 OK

160 kB

URL GET HTTP/3
kcfxt.top/static/js/pages-index-index~pages-index-preview.6a42433f.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kcfxt.top/
Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65180), with no line terminators
Size
160 kB (160234 bytes)
Hash
98acc6e7ed28b2a2aead53f6928bc238
aa1384d8eedd42acb45d82d36d49f082affd003b
de24f2b622e8e8751bc168c93d3c3fbf04f397e8ac7ee66782aaf93735ad8a8c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /static/js/pages-index-index~pages-index-preview.6a42433f.js HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kcfxt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 14 Nov 2024 10:59:54 GMT
content-type: application/javascript
content-length: 160234
last-modified: Mon, 25 Mar 2024 10:04:38 GMT
vary: Accept-Encoding
etag: "66014c36-271ea"
content-encoding: gzip
expires: Thu, 14 Nov 2024 22:59:54 GMT
cache-control: max-age=43200
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MJsgh%2Fu1Ubq5DAZIxnOdPolAwGczhAaSHBEiMLDT410%2BN1gcCLO6tC5EcxsgpuQ0E5iFMRcwOS7fDwqsBL08dVIND%2BlsWhcmiCqwuo2j0Y6W9NmrAv2iu7YDcUk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8e267ea8dccbf19a-CDG
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=57561&sent=269&recv=22&lost=0&retrans=3&sent_bytes=301711&recv_bytes=2843&delivery_rate=185732&cwnd=192000&unsent_bytes=0&cid=e3825194168f797a&ts=1104&x=1", cfHdrFlush;dur=0

kcfxt.top/static/js/pages-index-index.b2f7f695.js

188.114.96.1

200 OK

1.1 MB

URL GET HTTP/3
kcfxt.top/static/js/pages-index-index.b2f7f695.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kcfxt.top/
Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
1.1 MB (1120465 bytes)
Hash
32ce177c71f083abe11d39955a06394b
ebb3b428fc807e700de51427be23eef35d671278
054b876d8a48bbabce9e318d4b0399f64fdbb712f23bf7df434fe8687fb0bea2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /static/js/pages-index-index.b2f7f695.js HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kcfxt.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 14 Nov 2024 10:59:54 GMT
content-type: application/javascript
content-length: 1120465
last-modified: Mon, 25 Mar 2024 10:04:38 GMT
vary: Accept-Encoding
etag: "66014c36-1118d1"
content-encoding: gzip
expires: Thu, 14 Nov 2024 22:59:54 GMT
cache-control: max-age=43200
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RFSFfUhvtLT55Dk27EhE4XxMpoDvpSAUuD33KOUJYn7mUz6fxk035TRzJtoSkf6VleeDKDZ4zuoo9SwkUIdeZ%2F1zpOCXg0WUTat2KWEXGVWADBocQxi%2FxYNjSOk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8e267ea8dcd1f19a-CDG
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=57561&sent=279&recv=22&lost=0&retrans=3&sent_bytes=313711&recv_bytes=2843&delivery_rate=185732&cwnd=192000&unsent_bytes=0&cid=e3825194168f797a&ts=1105&x=1", cfHdrFlush;dur=0

kcfxt.top/static/img/re1.jpeg

188.114.96.1

200 OK

38 kB

URL GET HTTP/3
kcfxt.top/static/img/re1.jpeg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kcfxt.top/
Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 928x836, components 3
Size
38 kB (37800 bytes)
Hash
6ae9026095149abadff705f90eb947bf
9c2793e8dabe4dacc2bb96ffc78c63fcb5e89aa3
8e61ba5d4c9fb12d461a8109d17ef9e13b5c66c19fbf92fbdb62c8e0e17e9bff

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /static/img/re1.jpeg HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kcfxt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 14 Nov 2024 10:59:56 GMT
content-type: image/jpeg
last-modified: Mon, 25 Mar 2024 10:04:38 GMT
vary: Accept-Encoding
etag: W/"66014c36-93a8"
expires: Sat, 14 Dec 2024 10:59:56 GMT
cache-control: max-age=2592000
content-encoding: gzip
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KIVoGKDPb5nxuxKQCoJgZ51qC98lZhsEHSR5Cwb71o1NZ6PYl2F47UNbIwOsc13WYAsGTIH3%2BFyxRDOcbEIbZ6OFtuzFEBnQ4Yhs0roYzRYn4tr3UqPW1Vnq4HI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8e267eb38afdf19a-CDG
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=53798&sent=1371&recv=30&lost=1&retrans=4&sent_bytes=1619225&recv_bytes=3659&delivery_rate=18307&cwnd=537600&unsent_bytes=0&cid=e3825194168f797a&ts=2859&x=1", cfHdrFlush;dur=0

kcfxt.top/api/common/rate

188.114.96.1

200 OK

109 B

URL POST HTTP/3
kcfxt.top/api/common/rate
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kcfxt.top/
Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
109 B (109 bytes)
Hash
756ef7b113cf487aff88864d39e9285b
a5aeaf7e902125693e416b7b54009227987b5a79
ebe5def49c9edafff9ffaf5c66339e41b5cb11ebce10a6dcdec61ee6a4bfef54

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

POST /api/common/rate HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
lang: en
token: 
Content-Length: 0
Origin: https://kcfxt.top
DNT: 1
Connection: keep-alive
Referer: https://kcfxt.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 14 Nov 2024 10:59:55 GMT
content-type: application/json; charset=utf-8
access-control-expose-headers: __token__
access-control-allow-origin: https://kcfxt.top
access-control-allow-credentials: true
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MAk%2Fu7WAQnxLW5%2BQb%2Bn%2FAgXhkYyEJEtNzQSeYxBS7FkS%2BkGhdk1vG5XWaV1QCz3MZpAA6J17HQzgAIMDLOrFRI0SxDmVfzXTYrP5vZ7nCJeurxcNzCNb1lg57ReuFWlDNnm6Bevj%2BG2O3kD7KCxM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
vary: accept-encoding
server: cloudflare
cf-ray: 8e267ea94d7df19a-CDG
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=32395&sent=3&recv=6&lost=0&retrans=0&sent_bytes=139&recv_bytes=1260&delivery_rate=44786&cwnd=250&unsent_bytes=0&cid=5b7b7a6bf9ca6277&ts=155&x=0", cfL4;desc="?proto=QUIC&rtt=54351&sent=1369&recv=28&lost=1&retrans=4&sent_bytes=1618284&recv_bytes=3346&delivery_rate=5918&cwnd=537600&unsent_bytes=0&cid=e3825194168f797a&ts=1748&x=1", cfHdrFlush;dur=0

kcfxt.top/static/img/favicon.svg

188.114.96.1

200 OK

556 B

URL GET HTTP/3
kcfxt.top/static/img/favicon.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kcfxt.top/
Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
SVG Scalable Vector Graphics image
Size
556 B (556 bytes)
Hash
74683a51c346cfe904f4e0a4a6f2382a
02be8b4c4e71d6248a795f13e3556654b014e600
7d9d9ec5282c8215d5d6804dab03e15e813d3af880cd842fc59dc906bef4fae3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /static/img/favicon.svg HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kcfxt.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 14 Nov 2024 10:59:54 GMT
content-type: image/svg+xml
last-modified: Mon, 25 Mar 2024 10:04:38 GMT
etag: W/"66014c36-22c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TvM750y%2BC0tw981cH0DDJjwXUkjpBvd%2FpJ5lQivVU0gYDCnsUtxNrEpKyWN1q2hp6QBMVXvo3o4bwy6GweZGhPtjLfDv5iwPVzrKEwPqhX16zJUEx8g5Zf0UuMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8e267eab2fd2f19a-CDG
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=57706&sent=1368&recv=27&lost=1&retrans=4&sent_bytes=1617327&recv_bytes=3301&delivery_rate=9075&cwnd=537600&unsent_bytes=0&cid=e3825194168f797a&ts=1474&x=1", cfHdrFlush;dur=0

kcfxt.top/

188.114.96.1

200 OK

683 B

URL User Request GET HTTP/2
kcfxt.top/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectkcfxt.top
Fingerprint33:6B:8E:6E:46:C6:9A:CA:55:DB:AC:86:35:44:11:5A:80:EE:04:53
ValidityFri, 18 Oct 2024 15:10:11 GMT - Thu, 16 Jan 2025 15:10:10 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (672), with no line terminators
Size
683 B (683 bytes)
Hash
0f9aca6c3d9d41fbf26334cc6b692281
a4a5f39ee51a2c2c283e68a14c897cb1bf55a7cc
d5a5b3c03a09c83080ba623130402ad69bf15eb59451d86304bd60066ab4347e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: kcfxt.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 14 Nov 2024 10:59:53 GMT
content-type: text/html
last-modified: Mon, 25 Mar 2024 10:04:38 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WnhoNiUQFNjdSId5LB05dm%2FFDDezz6uhlsOBA6%2Bbec9ijEjG2MN39CoZfZ2qM6JMsPxhFdzu4bKGLjv%2BC%2FhEzPx93OkWg%2BecuRJfExtbVeSb37Qg7lDlj%2BRwBIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8e267e9f7c3a04aa-CDG
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=33709&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3268&recv_bytes=1235&delivery_rate=151206&cwnd=255&unsent_bytes=0&cid=50b17b990bb12973&ts=515&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3