Report - soterpedregal.com/let/cat/yeEPOyQEWOQP2u6bVM3WOHAwJEA/amFzb25oQHNsdXJwbWFpbC5uZXQ=

Report Overview

Visited public
2024-11-20 22:23:45
Tags
URL
soterpedregal.com/let/cat/yeEPOyQEWOQP2u6bVM3WOHAwJEA/amFzb25oQHNsdXJwbWFpbC5uZXQ=
Finishing URL
znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net
IP / ASN
172.93.120.11
#393960 HOST4GEEKS-LLC
Title

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
soterpedregal.com	unknown	2024-10-11	2024-11-20	2024-11-20	536 B	256 B	172.93.120.11
code.jquery.com	634	2005-12-10	2012-05-21	2024-11-20	411 B	32 kB	151.101.2.137
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-11-20	439 B	15 kB	104.17.25.14
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20	2024-11-20	6.1 kB	336 kB	104.18.95.41
znv.ubinexkhl.com	unknown	2024-10-31	2024-11-20	2024-11-20	2.1 kB	41 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-11-20	medium	ubinexkhl.com	Sinkholed
2024-11-20	medium	ubinexkhl.com	Sinkholed
2024-11-20	medium	ubinexkhl.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (50)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	48 kB	2023-03-07 01:31	2024-11-21 06:18
Pretty URL cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31 Last Seen2024-11-21 06:18 Times Seen49004 Hash 2ca03ad87885ab983541092b87adb299 1a17f60bf776a8c468a185c1e8e985c41a50dc27 8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762 Loading...

	unknown	1.9 kB	2024-11-18 09:43	2024-11-20 23:46
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-11-18 09:43 Last Seen2024-11-20 23:46 Times Seen42 Hash 28c122172c0c6ab8e049ede04bbde91c 6ea25c59b15a7d2219b3425f70c7232891b2121e 789f7387ff4b2066c718d5dd808ffc9e59bd88bfcda8ff1e6e634dfd0e77849b Loading...

	code.jquery.com/jquery-3.6.0.min.js	90 kB	2023-03-07 01:02	2024-11-21 06:43
Pretty URL code.jquery.com/jquery-3.6.0.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2024-11-21 06:43 Times Seen139551 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/	3.5 kB	2024-11-20 22:23	2024-11-20 22:23
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/ IP 104.18.95.41 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 2451d7804d3aa741268dc8321b197f1e 98e7e688ccef359b5ef0f5a8162bdd9da4490962 eb2683792d8cf16f09836cf280fb84b62f61e5e735fb2b9429989abb4d699d13 Loading...

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8e5bd80cda85b4f3&lang=auto	118 kB	2024-11-20 22:23	2024-11-20 22:23
Pretty URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8e5bd80cda85b4f3&lang=auto IP 104.18.95.41 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash ada9970aa07be026ece140be11ea51bc b6f2b54135c448fd00a29bcd1b0f109091d41e49 7f51fb686c54713c65fc005bf3c907146990e16a37e0a32ae6986a2ec3e4bd0a Loading...

	challenges.cloudflare.com/turnstile/v0/api.js?render=explicit	48 kB	2024-11-20 11:52	2024-11-21 06:56
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js?render=explicit IP 104.18.95.41 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-11-20 11:52 Last Seen2024-11-21 06:56 Times Seen419 Hash 481edb6f4045f16980c920ccd9705105 d8cb40abc935dc65d25d83d8358f52ac88742f73 5f7c821eea52471a9bbb0397df6b77ee279505be05bb52aef00932989522d3c2 Loading...

	unknown	1.4 kB	2024-11-20 22:23	2024-11-20 22:23
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 4f40a07d44c4616b8f99b526afa710d5 1185ee2a678890f1a6b4dac2c4a7db8640b613b2 78996d5c5ff4cd3b6d86fdbc0bb15f514b31647e2c0810494fbfc8518af92f82 Loading...

	znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net	20 kB	2024-11-20 22:23	2024-11-20 22:23
Pretty URL znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 1883bc8174c5d954d71497490b90ce98 b2854d3946d9af570dbd335624ec3480655e9907 bf5840a167b15e1d75e1a1c9ff5ff71e18f177a80dbc94d76274655cff633655 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 552e79d537720bad9d7c207c4493ff6c	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 552e79d537720bad9d7c207c4493ff6c 13e1f58742c35368e96c39030a8a18f869b8ba81 0b00030a9184c47605243a9334a67ed8083c485ffa4c5e8ecd272fd14a8e521c Loading...

	#2 Eval - 301772b21ad961152094d1d15c2f471a	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 301772b21ad961152094d1d15c2f471a 9601a5e765621d9f24340ee83640a1ee36b3b20c 38b392408ad0d34c5ffcaa4b7f14d0cc85e7bc476a41b2079fb264aa4d939f22 Loading...

	#3 Eval - 545dd5e860562cd5596ddea2479cc990	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 545dd5e860562cd5596ddea2479cc990 e6e7996e34b7559726260e9ecd2b0314aca76e75 9d5712f7bcbe0b1ce22024183d14f279ec4dcbf285b60ff2fba9467af813fa28 Loading...

	#4 Eval - 1ed1b316263f364e1f05c465dc2c34df	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 1ed1b316263f364e1f05c465dc2c34df 567dbc0f49bc42f120455cbb03c2606a08441cb2 59d025b6bd05afd81bafaeed4f4d62e7156dee04228a84ab205bf0b98f61b628 Loading...

	#5 Eval - 427429f89257a03870d15cabd5dbade8	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 427429f89257a03870d15cabd5dbade8 69c99cefa8e5bc8d75dc061ac155bbee42376afb 79393b5b26b05bb4834697a8d5517182392c1859c261772fc2951504c8ee0dd7 Loading...

	#6 Eval - 2967c9dd22ca3b696fc507c950f81332	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 2967c9dd22ca3b696fc507c950f81332 03839fe4aaf29fd4451cb3294954eaa3dc9dba99 4d6f4e7c1e52e5b1a92b8c077013e908ff0bfa5964cea9cfa54f55d44dbf91cb Loading...

	#7 Eval - ad87a4dd3941e0927829bcdbfb1c6f8a	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash ad87a4dd3941e0927829bcdbfb1c6f8a af6703f9ba7a7c1b1033adc66afd9647744c719f bfaca53e99db39553b13185b0757689c870afe272dfae34a93db4e78bb17debb Loading...

	#8 Eval - 59a94db7265dd8c4fc3277effa2df6e8	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 59a94db7265dd8c4fc3277effa2df6e8 5d5b385af2040ff59a0d6b554f5fcefa319de675 0c88aa76127d23d45fabcdf16909ea34a467b757f5928392e9a8340e843e9c58 Loading...

	#9 Eval - 9ad8aef79f375d612ea43eab282c7a4f	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 9ad8aef79f375d612ea43eab282c7a4f 01e2f57c20df7902806ff8cc47064dfd02ddd01a 3b056fb13fbc18870e4ded9920e5367cbaaa3d2d74c2c093e1276eeeaccdb826 Loading...

	#10 Eval - d6fb9986ad0ede576f96dc1e7301c27e	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash d6fb9986ad0ede576f96dc1e7301c27e d9031089ecc26837340dfb1a1e1a1ce2cb0c990a 95c1560eba3b833a55ba8296b83f850cb64751b629d67d31531ae6b50ae9d19b Loading...

	#11 Eval - e19cabbdfb68abaf9b5e3249db7d367e	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash e19cabbdfb68abaf9b5e3249db7d367e 7967a872c00269b7776f4f63e94bf3bdaca253f6 17ca01e998324b64c9b7e97240cb23252d22921fdbc5cad72c5a250fd2ad81bf Loading...

	#12 Eval - cfbfef212866ae5a624be8029a36e32a	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash cfbfef212866ae5a624be8029a36e32a 31e7fa5736a8144f8f239f16109dc0b7d181e26d d72231ae6657b75295c960745785adc45237d749255fdf8e1132fef1e7e51041 Loading...

	#13 Eval - 81f4f486b29115235b9c3b34add67a0c	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 81f4f486b29115235b9c3b34add67a0c b3dc3daea1f68ae62c0896eb9651fa049c9c5f66 b4553c1360e3f722755d20b3c51c39ab62184faea5da43c84665fdcd87142388 Loading...

	#14 Eval - 071344db5c9b83c9016a5c7fc255d9ff	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 071344db5c9b83c9016a5c7fc255d9ff 3e31747144a8c6922abce2f6472c038d317f4109 09dc17d55abddd0029cb271a0262f539e9c422e9bbe5f87dc865a684b3a02943 Loading...

	#15 Eval - c54564b3bf8f30c24fe80f9b77b2799c	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash c54564b3bf8f30c24fe80f9b77b2799c 70bf59f016cff776f8f84b83500c15b7287b90bb a5b7bdcb4a695350cf916c0c2fa87c06eccfc4b60591d7312b39cc31a3e62fd4 Loading...

	#16 Eval - 795ac651e8fc0b377cd6aca6089b99eb	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 795ac651e8fc0b377cd6aca6089b99eb 87f1b215a8254bc7a690f52577036a79c8c2d67a 14bb2b6bc8138dddc7a67a2d55f4154e6ddc54bc905cd2bd14d1a6f433917bf3 Loading...

	#17 Eval - 14de1da53f7f35fd700f5091e0e7c88c	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 14de1da53f7f35fd700f5091e0e7c88c f5fee0aac6a76156622d6cbe7d282fec06416016 fd0fe15a2aa5e6890709a04dec655079db05be63af96b642c5ae577d9b0c7049 Loading...

	#18 Eval - bb1cc9c2938a2d8be855fb3168d490d2	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash bb1cc9c2938a2d8be855fb3168d490d2 af23c77c16aa3fcbca40c917082d0bf6b82fac7c a01ef282857947f9f79f7fb79d1b120a22abad64b6ed26a9a40609ade2a84a1a Loading...

	#19 Eval - e066aab5ed2b957b8d55fe2e19e86318	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash e066aab5ed2b957b8d55fe2e19e86318 bbe35b39a3328e9344b9c65bf1f07e085524717c 46cd5f26668113c5394e6880be97152fb4dda64a06297ef66844b63fbf407e8c Loading...

	#20 Eval - 7b77f698b8188c7e133547e1d56a8fd4	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 7b77f698b8188c7e133547e1d56a8fd4 c965ae41a7fcd97cfb7409511a6011cf0b3abc6b 63eb4de6556488e150de18fdd7d3886507e60ddedb146682c68ca8d142792d0b Loading...

	#21 Eval - 369ba650e09bd40ee8c78ddee1b2b6b6	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 369ba650e09bd40ee8c78ddee1b2b6b6 1bec16b321a093f8b5c1b50a87663c63eeb36e56 0b0f2f15926d05f8f63d12b86c6aba0b948c047a9886a1528a2505aee9419112 Loading...

	#22 Eval - 8db5ddafa083fcf489c10123c25e89ec	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 8db5ddafa083fcf489c10123c25e89ec 681e78f1fc45c4c68cc384bfd26406bd71f345f4 f68225ed6fd0b005553ece3fd41bf1aaa9bd10842952d01df4c348706af65613 Loading...

	#23 Eval - 9f992515214e3c73586437f11348e616	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 9f992515214e3c73586437f11348e616 920ee71f92f2a5c2d480dc7faad7ced5dff9ba67 aac8a82c7ad7f65096c9189c21c4a670276d73b01d1e74a0d1a223e3804b924c Loading...

	#24 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07 01:03	2024-11-21 06:56
Pretty Observations First Seen2023-03-07 01:03 Last Seen2024-11-21 06:56 Times Seen319800 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#25 Eval - 56febbb7748f08d916cb300b4200befe	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 56febbb7748f08d916cb300b4200befe b6349a1f6e9140c2acb5955f8126c37e221f4e44 f4a9d31bbf180dc0c8b207f72f71a0476b15b5d4411f68cca6eea8ac4d22ce11 Loading...

	#26 Eval - 61abac00cd0afb5d790fe53051397bc4	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 61abac00cd0afb5d790fe53051397bc4 bd5ce7dfd29e4e7910fe966adb88398a4c310a86 a7f9f928b598d4ff65ec213dc375348560143e8feffd6c35c64eb10ad99b357d Loading...

	#27 Eval - 7fa19fb2107b9ce40f664ceca46c8eca	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 7fa19fb2107b9ce40f664ceca46c8eca 3e6cf3712955c7265c8ec2aa84dec5a65b991a8a 3f60527a0ea2538012a1bd8b9f58afc8f5b2b3d8f3883b11db2f8ebc90985aec Loading...

	#28 Eval - 510b7e4874332b9a211e8fc688bc9bd1	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 510b7e4874332b9a211e8fc688bc9bd1 81265e4d3ddaa7d1c5bb16cf89875228d506af34 b18ffab358f8482c0ca42343eaf2506187531b0b62018bcbb964bdf54677a457 Loading...

	#29 Eval - ee7d4f7a17cfae79798dce25fc390cc1	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash ee7d4f7a17cfae79798dce25fc390cc1 b6fcf2375a08a0f3e659a1d3e772113b856f2e38 88ad71dce6c29ef5668ca64ec90e32cd6cf94f8dfa826a9be9a99e4d9a4d3969 Loading...

	#30 Eval - b93f9ad5ca822716a9201b45f20ddce5	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash b93f9ad5ca822716a9201b45f20ddce5 b477d0a6364abf37b33f98019e2fa73bc028c4a3 dda52b3cd51926675abf539a7f3b094b11f930fc728adc0b657caaaec908df4c Loading...

	#31 Eval - 3e93a618af39a5eb7bc5daef2a204638	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 3e93a618af39a5eb7bc5daef2a204638 ca8d7937a3de8a72649367244116ebec08b47483 85584770b7d2280c86c7a64854ee69b586bbc14df41ecf29bdea6c72b3f8841e Loading...

	#32 Eval - 86818e314dee1e4ddadf86414f3b68e1	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 86818e314dee1e4ddadf86414f3b68e1 396894ad2a90eba387169b94951cc0c0d2273887 03334fb9894c7ab6e2750a640d07c50a56cddcb28d4451648e1fa0b7922bb322 Loading...

	#33 Eval - 587861be56b12e1f2ef8794d463be0e0	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 587861be56b12e1f2ef8794d463be0e0 75ceeea24459bc823e6d547e6799048691c1b7b1 8a0f11b93b4dc5a49657c04a56494a146261d2c71ce02afaa92b1693335e1bef Loading...

	#34 Eval - 1cb8ccc3b63abd1898b62df14739eb12	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 1cb8ccc3b63abd1898b62df14739eb12 a1fc8f8eefc91c5f6c2542b388640e7301af82e4 e6a5abe8f0da80996b3cb83c4ef9a7f1979c24345c3d111bae6d104b244a104c Loading...

	#35 Eval - 0c7b32423bc5e770e10d47060545c29e	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 0c7b32423bc5e770e10d47060545c29e 6110ccb979ba31315d08243dcff73d8bfc44aa5f 8f3da1672efe62c84c92e2c5f51882ac408a813372c198b23cddb08da3046340 Loading...

	#36 Eval - aef2ef0f302ac9cc2f8991660c6cc349	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash aef2ef0f302ac9cc2f8991660c6cc349 b9b8a5875841f20a39401a8f2a7f26f77c5481a7 f98f56ab8c6ccc32c329df5bbf72a6ebd286ac90ffe249f471c40b5fc521254a Loading...

	#37 Eval - 3435039983fea3935c474bc4485fdda9	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 3435039983fea3935c474bc4485fdda9 d380d08fada3bacdddaa20e99d8fbc4a1fcffe19 cff1f93d35688ae5a3757c2fd8dfadabd70b6ceb404cdceb49dde499fe294335 Loading...

	#38 Eval - 3094f702da7bc510d6320be00d559a2d	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 3094f702da7bc510d6320be00d559a2d 81f247e5305bb67aa629275bcf43f00a4a2c2b95 b5dc6d34003fe8201728566f657f31a2908ac0c5702f6716858d2b94366f49c5 Loading...

	#39 Eval - 6e580288cf850af8e0912d5fa59bb997	60 B	2024-11-20 11:52	2024-11-21 06:56
Pretty Observations First Seen2024-11-20 11:52 Last Seen2024-11-21 06:56 Times Seen422 Hash 6e580288cf850af8e0912d5fa59bb997 068f1952fb7d23589053d9b6d6a5297fa2791141 6db656d334064b4cd8b23cf57256d0b07cecd479bcd848ae65e075f3f604d394 Loading...

	#40 Eval - b25189e2db1080bc7551c0cbfc1b6efc	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash b25189e2db1080bc7551c0cbfc1b6efc 8fc3502da79e8cb8befed815080fb12ee0886b29 1dbcf38f6286dc16b7bc010e05eac4d94b525ce1c9f361f435c77b5ecc70d20b Loading...

	#41 Eval - 49aab64773d6589dd2f857d51ac75464	28 B	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash 49aab64773d6589dd2f857d51ac75464 a81250b3ab1423204833d0ad14113bc9b747892c 736032bbfaf521a02b9e1162906c864f8cd9be7216c8dad310599b2e1da3d5c0 Loading...

		Size	First Seen	Last Seen
	#1 Write - c803648e0fb2cca1e49c18b9944fea64	5.8 kB	2024-11-20 22:23	2024-11-20 22:23
Pretty Observations First Seen2024-11-20 22:23 Last Seen2024-11-20 22:23 Times Seen1 Hash c803648e0fb2cca1e49c18b9944fea64 406058c4fca30a99bd7b93e30925794703de107f 994fc8e13d70f6b93e9f86a6978080bd13b89cf5453b08e1f99561a10d567bb4 Loading...

HTTP Transactions (15)

URL IP Response Size

soterpedregal.com/let/cat/yeEPOyQEWOQP2u6bVM3WOHAwJEA/amFzb25oQHNsdXJwbWFpbC5uZXQ=

172.93.120.11

200 OK

0 B

URL
soterpedregal.com/let/cat/yeEPOyQEWOQP2u6bVM3WOHAwJEA/amFzb25oQHNsdXJwbWFpbC5uZXQ=
IP
172.93.120.11:0
ASN
#393960 HOST4GEEKS-LLC

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /let/cat/yeEPOyQEWOQP2u6bVM3WOHAwJEA/amFzb25oQHNsdXJwbWFpbC5uZXQ= HTTP/1.1
Host: soterpedregal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 20 Nov 2024 22:23:19 GMT
Server: Apache
refresh: 0;url=https://Znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

code.jquery.com/jquery-3.6.0.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (30875 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://znv.ubinexkhl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 20 Nov 2024 22:23:20 GMT
age: 2123727
x-served-by: cache-lga21931-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 997799
x-timer: S1732141401.915185,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js

104.17.25.14

200 OK

14 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net
Certificate
IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
FingerprintE6:47:BB:06:9C:32:48:7E:A6:0A:4B:62:53:7B:F0:35:5D:A9:A3:8A
ValiditySat, 28 Sep 2024 05:35:05 GMT - Fri, 27 Dec 2024 05:35:04 GMT

File type
JavaScript source, ASCII text, with very long lines (48316), with no line terminators
Size
14 kB (13972 bytes)
Hash
2ca03ad87885ab983541092b87adb299
1a17f60bf776a8c468a185c1e8e985c41a50dc27
8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762

HTTP Headers

GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://znv.ubinexkhl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 20 Nov 2024 22:23:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 13972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61182885-3694"
last-modified: Sat, 14 Aug 2021 20:33:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 85679
expires: Mon, 10 Nov 2025 22:23:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6mtV%2BpYiHZgURmNjMLdyHlNgEVh90XrgLy8%2Bd7PfmtN1oJgfo%2BRSmgF8pY3LGItIcgAz5aA1yOx282kjHV9fs9Ilvlpkq0LM5oiCga8WFKFT4%2BNSGI1Bf7zyQByvC%2BmvErsJrfiP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8e5bd80be9fbb51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/turnstile/v0/api.js?render=explicit

104.18.95.41

302 Found

0 B

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /turnstile/v0/api.js?render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://znv.ubinexkhl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 20 Nov 2024 22:23:20 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/g/e4025c85ea63/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 8e5bd80bdd7bb509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

challenges.cloudflare.com/turnstile/v0/g/e4025c85ea63/api.js

104.18.95.41

200 OK

22 kB

URL GET HTTP/2
challenges.cloudflare.com/turnstile/v0/g/e4025c85ea63/api.js
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type
JavaScript source, ASCII text, with very long lines (47694)
Size
22 kB (22428 bytes)
Hash
481edb6f4045f16980c920ccd9705105
d8cb40abc935dc65d25d83d8358f52ac88742f73
5f7c821eea52471a9bbb0397df6b77ee279505be05bb52aef00932989522d3c2

HTTP Headers

GET /turnstile/v0/g/e4025c85ea63/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://znv.ubinexkhl.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 20 Nov 2024 22:23:21 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 19 Nov 2024 14:16:20 GMT
cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8e5bd80c4e20b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

znv.ubinexkhl.com/favicon.ico

188.114.96.1

404 Not Found

4 B

URL GET HTTP/3
znv.ubinexkhl.com/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net
Certificate
IssuerGoogle Trust Services
Subjectubinexkhl.com
Fingerprint23:08:D5:FA:5E:E7:08:46:78:A3:0E:28:84:62:DD:F3:69:44:57:7D
ValidityThu, 31 Oct 2024 19:48:58 GMT - Wed, 29 Jan 2025 19:48:57 GMT

File type
data
Size
4 B (4 bytes)
Hash
c0fbf152cda1d8589603dc02f948af0b
763a284109bc2b53634044051f357438ccf2eb2e
908a04605257d72adbc449cd89724ec54db020b06eb72dd406c0fee22682ec56

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: znv.ubinexkhl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://znv.ubinexkhl.com/TyAyE/
Cookie: XSRF-TOKEN=eyJpdiI6ImZybUVIVFhPNzRsNjZHeTVZaWV4THc9PSIsInZhbHVlIjoiamxtT2g5NU5TK3ZJOGt1dTZJRkpub2dFUzlWdmxia1JPTCtKWmU0VHYybW9uQWQrOER3RjNDWVFOWGcxWUZnY3ZRMWVQTmk2Vm5YQ2Vwazl3ejN1UTBIRU51OWNTeUNkZUpjM0h1SXpFLzNXYUVMN29TTkRrT0pVWmsyTCtHSTciLCJtYWMiOiJjNmQwMTk1YjJiNmI3MTlhYTkxMzAxM2JlOTQwNTA4NjMxMzczZjZhYWQyYjIxZGQxODRjMTE0Y2QyZTZmZjdhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNiSGRFdnNEeHBHbEtoRUNmalpLYUE9PSIsInZhbHVlIjoibE9OVlpKY3NaRjJ1WHJPdmRLbTZLdWNCa0hmYXNoVFNQTWIwZzF3R3VzOTNsRzdGTTBDU2N0MmJVRG1pVlhJR2Q5cWRUMXgzbWU2U3pkbFVPc21WYXdoMGhBUDJhZzhyeWZtbWpFNW9rWWdHRm13L21TMmpTTmZqMWNWUG5aMnkiLCJtYWMiOiI0MjJlNTQ2MTdiMTEzNDA1N2M3YjQyZTU5N2MxNDk0OWZkYzg5YWM2ZmNhYTRkZWIzYjNjNTIwNDMxNjBhY2I2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Wed, 20 Nov 2024 22:23:21 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7mxFfsAr7Rk%2BzGjU%2B2QMhF12Urew%2FaynoiV2Ud1wGyRG%2Bna39gyGh5q3Sz7%2FH6oLzUIhm45QwHweQIzWt1nXtL1HEiJnCl0jbex%2Bz1nsnzbL0iYSsWmj%2BJWHHzeEmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 4808
server: cloudflare
cf-ray: 8e5bd80ceb640afa-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=36136&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2087&delivery_rate=79351&cwnd=183&unsent_bytes=0&cid=92e4a83a89d585eb&ts=357&x=0", cfL4;desc="?proto=QUIC&rtt=19930&sent=11&recv=6&lost=0&retrans=0&sent_bytes=4049&recv_bytes=1691&delivery_rate=33099&cwnd=12000&unsent_bytes=0&cid=3dfac7e38a00e312&ts=376&x=1", cfHdrFlush;dur=0

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8e5bd80cda85b4f3/1732141401445/ZFY2VD5q7HH2o0L

104.18.95.41

200 OK

61 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8e5bd80cda85b4f3/1732141401445/ZFY2VD5q7HH2o0L
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type
PNG image data, 83 x 90, 8-bit/color RGB, non-interlaced
Size
61 B (61 bytes)
Hash
f524019bb7496bcaad6711e2b48cc339
a407411e6e86db894756fb059a70e37a32cd372f
0db0dcb27da583be071de99a4329e678a53208ed6e748a886c1924d08f293448

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/i/8e5bd80cda85b4f3/1732141401445/ZFY2VD5q7HH2o0L HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 20 Nov 2024 22:23:22 GMT
content-type: image/png
content-length: 61
server: cloudflare
cf-ray: 8e5bd81859b7b4f3-OSL
alt-svc: h3=":443"; ma=86400

znv.ubinexkhl.com/TyAyE/

188.114.96.1

200 OK

16 kB

URL
znv.ubinexkhl.com/TyAyE/
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectubinexkhl.com
Fingerprint23:08:D5:FA:5E:E7:08:46:78:A3:0E:28:84:62:DD:F3:69:44:57:7D
ValidityThu, 31 Oct 2024 19:48:58 GMT - Wed, 29 Jan 2025 19:48:57 GMT

File type
HTML document, ASCII text, with very long lines (7745), with CRLF line terminators
Size
16 kB (15885 bytes)
Hash
9dfbcfaf734b94c095e02daff35f71c6
2032d9fdfec172972460299c3ce0fe05d04ae8c4
fd44fa1c193b83d86f490befaf8933e58e4c946c3627ad206dc0fe5b0e84bc44

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /TyAyE/ HTTP/1.1
Host: znv.ubinexkhl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 20 Nov 2024 22:23:20 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kQG659Pnixwt6t3k2qKvzg84ungg5gfxBlhwH7%2BgifHnAAaLM1TWbVBHQCK7UnkZfIQd9m4FJ4zEandoXvTn5KwHExLr4fOKazK2yHCqbQoOVAH4aKqMVzHmYWrrZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6ImZybUVIVFhPNzRsNjZHeTVZaWV4THc9PSIsInZhbHVlIjoiamxtT2g5NU5TK3ZJOGt1dTZJRkpub2dFUzlWdmxia1JPTCtKWmU0VHYybW9uQWQrOER3RjNDWVFOWGcxWUZnY3ZRMWVQTmk2Vm5YQ2Vwazl3ejN1UTBIRU51OWNTeUNkZUpjM0h1SXpFLzNXYUVMN29TTkRrT0pVWmsyTCtHSTciLCJtYWMiOiJjNmQwMTk1YjJiNmI3MTlhYTkxMzAxM2JlOTQwNTA4NjMxMzczZjZhYWQyYjIxZGQxODRjMTE0Y2QyZTZmZjdhIiwidGFnIjoiIn0%3D; expires=Thu, 21-Nov-2024 00:23:20 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImNiSGRFdnNEeHBHbEtoRUNmalpLYUE9PSIsInZhbHVlIjoibE9OVlpKY3NaRjJ1WHJPdmRLbTZLdWNCa0hmYXNoVFNQTWIwZzF3R3VzOTNsRzdGTTBDU2N0MmJVRG1pVlhJR2Q5cWRUMXgzbWU2U3pkbFVPc21WYXdoMGhBUDJhZzhyeWZtbWpFNW9rWWdHRm13L21TMmpTTmZqMWNWUG5aMnkiLCJtYWMiOiI0MjJlNTQ2MTdiMTEzNDA1N2M3YjQyZTU5N2MxNDk0OWZkYzg5YWM2ZmNhYTRkZWIzYjNjNTIwNDMxNjBhY2I2IiwidGFnIjoiIn0%3D; expires=Thu, 21-Nov-2024 00:23:20 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 8e5bd805e912569b-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=35833&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1386&delivery_rate=79462&cwnd=236&unsent_bytes=0&cid=cbf1e02915fd73a7&ts=370&x=0", cfL4;desc="?proto=TCP&rtt=22513&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3276&recv_bytes=1254&delivery_rate=261639&cwnd=254&unsent_bytes=0&cid=22a91fac16b4fd45&ts=766&x=0"
X-Firefox-Spdy: h2

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1723327922:1732137284:x2-F2sfmzFTDMPwNvJIbQYkN1RTuAZs05uXqQu_Ntz8/8e5bd80cda85b4f3/6KPVFJLzjd.MvPV2xOv1z2SLtPhUIWcUvoKiEgInr5s-1732141401-1.1.1.1-TbTSipEkTxFuo0npC5TNXVriqQ1U7vT18_LJOnqU1GkDaJbrZCgBR4ViP1pyNMOW

104.18.95.41

200 OK

137 kB

URL POST HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1723327922:1732137284:x2-F2sfmzFTDMPwNvJIbQYkN1RTuAZs05uXqQu_Ntz8/8e5bd80cda85b4f3/6KPVFJLzjd.MvPV2xOv1z2SLtPhUIWcUvoKiEgInr5s-1732141401-1.1.1.1-TbTSipEkTxFuo0npC5TNXVriqQ1U7vT18_LJOnqU1GkDaJbrZCgBR4ViP1pyNMOW
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
137 kB (136732 bytes)
Hash
a6bf4796c48b48b9afae5217bc8e7a0a
1a980f298d432f9ffe0c106f9b7c8fe21a328793
414531346ad28fbe73aa8da16e08a76520adbad1cbd194b25c9fa39449af5127

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1723327922:1732137284:x2-F2sfmzFTDMPwNvJIbQYkN1RTuAZs05uXqQu_Ntz8/8e5bd80cda85b4f3/6KPVFJLzjd.MvPV2xOv1z2SLtPhUIWcUvoKiEgInr5s-1732141401-1.1.1.1-TbTSipEkTxFuo0npC5TNXVriqQ1U7vT18_LJOnqU1GkDaJbrZCgBR4ViP1pyNMOW HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 6KPVFJLzjd.MvPV2xOv1z2SLtPhUIWcUvoKiEgInr5s-1732141401-1.1.1.1-TbTSipEkTxFuo0npC5TNXVriqQ1U7vT18_LJOnqU1GkDaJbrZCgBR4ViP1pyNMOW
CF-Chl-RetryAttempt: 0
Content-Length: 2641
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 20 Nov 2024 22:23:21 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: WWMpFq+nqF7+7jwdCcLmIAmwaqDOiPII5t3XKuXYjBGy/gdrLEGVu0LuJwSHN6Via/xahKeIzsAMwugbnMFNmcRPVeCNa/+pdYeIsCHjOPlKdyYFJU2v0HKcewz9XKlBqBFWmjlXkerhAe3Kh0cd6rXrpXgMP6XqiqG8uwZ8N0cUAM90XFvKyRJPdJcX8rx1meYHt+owqU3hpk/yjf0FRsXTXdqfKe8u+ExgPBzAzHgO7yn+wisqcx/lVj+mkHyKxSh4kDChpP6/InBbVaw76870EtyseBzPv4ixMe1PCocXmrxZ4uOn53bzjGw6mCgNT2Q/Af7TZf7DjtQ5q36GPl/MXGNVDllVt4A3j6ZF5M3XiZlnvBxQhkn1IFvizjEk86JFJ2JoTAxiqYw1wPK1n6kXZrHPFRYBYpcrtrkxoIxP13DiL/NSSuNXwnlFQlrsoqc4AzpfFnPtcXXIaw==$E/JFx6OGWMJ+atTJ
server: cloudflare
cf-ray: 8e5bd80eedaeb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8e5bd80cda85b4f3/1732141401443/80ec032fb75b6a7f22dbbd16e408ff7c3fa872e29adeee7d43e59a0c16a65ab7/ebYOkj0Ir-U7eK_

104.18.95.41

401 Unauthorized

1 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8e5bd80cda85b4f3/1732141401443/80ec032fb75b6a7f22dbbd16e408ff7c3fa872e29adeee7d43e59a0c16a65ab7/ebYOkj0Ir-U7eK_
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
ff44570aca8241914870afbc310cdb85
58668e7669fd564d99db5d581fcdb6a5618440b5
6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/pat/8e5bd80cda85b4f3/1732141401443/80ec032fb75b6a7f22dbbd16e408ff7c3fa872e29adeee7d43e59a0c16a65ab7/ebYOkj0Ir-U7eK_ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 401 Unauthorized
date: Wed, 20 Nov 2024 22:23:21 GMT
content-type: text/plain; charset=UTF-8
content-length: 1
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20ggOwDL7dban8i270W5Aj_fD-ocuKa3u59Q-WaDBamWrcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB", max-age=20, PrivateToken challenge="AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIIDsAy-3W2p_Itu9FuQI_3w_qHLimt7ufUPlmgwWplq3ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIIDsAy-3W2p_Itu9FuQI_3w_qHLimt7ufUPlmgwWplq3ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA2ofNYujuBSGe3VokTOshcBYsN3IYqVG1vzSM-oCNQXOis6OMxshBYgGBi7QofI09eX3MiEJXFbY9F5l3e8-_QYq1SaXGxnEUzFLxdxsrqg_HDC1t7FnimSy0L1ex7MmHaWHHFKZvblAZW4u3w1pnvpb9w-jFqacUEW3fpSMZS_Yd7X8ZtgHadv02nmX_vYOfXYz1-xrGqFTGxaoYv67qpr8Z_qEW3JxhCu5bAG07lhyKUQwCjYBaHaw9ts0dop6n4rTO43MDNBGwSB1W3JKJgCrpVXUb1nOd5pPabD8TOMECeRricTImLIJXlsMxbWvR9FO1r0FuE_1vIFSjDDXnaQIDAQAB", max-age=20
server: cloudflare
cf-ray: 8e5bd81249f3b4f3-OSL
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1

104.18.95.41

200 OK

61 B

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Size
61 B (61 bytes)
Hash
9246cca8fc3c00f50035f28e9f6b7f7d
3aa538440f70873b574f40cd793060f53ec17a5d
c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 20 Nov 2024 22:23:21 GMT
content-type: image/png
content-length: 61
cache-control: max-age=2629800, public
server: cloudflare
cf-ray: 8e5bd80d4b1fb4f3-OSL
alt-svc: h3=":443"; ma=86400

znv.ubinexkhl.com/TyAyE/

188.114.96.1

200 OK

20 kB

URL User Request GET HTTP/2
znv.ubinexkhl.com/TyAyE/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectubinexkhl.com
Fingerprint23:08:D5:FA:5E:E7:08:46:78:A3:0E:28:84:62:DD:F3:69:44:57:7D
ValidityThu, 31 Oct 2024 19:48:58 GMT - Wed, 29 Jan 2025 19:48:57 GMT

File type
HTML document, ASCII text, with very long lines (7745), with CRLF line terminators
Size
20 kB (20399 bytes)
Hash
9dfbcfaf734b94c095e02daff35f71c6
2032d9fdfec172972460299c3ce0fe05d04ae8c4
fd44fa1c193b83d86f490befaf8933e58e4c946c3627ad206dc0fe5b0e84bc44

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /TyAyE/ HTTP/1.1
Host: znv.ubinexkhl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 20 Nov 2024 22:23:20 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kQG659Pnixwt6t3k2qKvzg84ungg5gfxBlhwH7%2BgifHnAAaLM1TWbVBHQCK7UnkZfIQd9m4FJ4zEandoXvTn5KwHExLr4fOKazK2yHCqbQoOVAH4aKqMVzHmYWrrZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
set-cookie: XSRF-TOKEN=eyJpdiI6ImZybUVIVFhPNzRsNjZHeTVZaWV4THc9PSIsInZhbHVlIjoiamxtT2g5NU5TK3ZJOGt1dTZJRkpub2dFUzlWdmxia1JPTCtKWmU0VHYybW9uQWQrOER3RjNDWVFOWGcxWUZnY3ZRMWVQTmk2Vm5YQ2Vwazl3ejN1UTBIRU51OWNTeUNkZUpjM0h1SXpFLzNXYUVMN29TTkRrT0pVWmsyTCtHSTciLCJtYWMiOiJjNmQwMTk1YjJiNmI3MTlhYTkxMzAxM2JlOTQwNTA4NjMxMzczZjZhYWQyYjIxZGQxODRjMTE0Y2QyZTZmZjdhIiwidGFnIjoiIn0%3D; expires=Thu, 21-Nov-2024 00:23:20 GMT; Max-Age=7200; path=/; secure; samesite=none
laravel_session=eyJpdiI6ImNiSGRFdnNEeHBHbEtoRUNmalpLYUE9PSIsInZhbHVlIjoibE9OVlpKY3NaRjJ1WHJPdmRLbTZLdWNCa0hmYXNoVFNQTWIwZzF3R3VzOTNsRzdGTTBDU2N0MmJVRG1pVlhJR2Q5cWRUMXgzbWU2U3pkbFVPc21WYXdoMGhBUDJhZzhyeWZtbWpFNW9rWWdHRm13L21TMmpTTmZqMWNWUG5aMnkiLCJtYWMiOiI0MjJlNTQ2MTdiMTEzNDA1N2M3YjQyZTU5N2MxNDk0OWZkYzg5YWM2ZmNhYTRkZWIzYjNjNTIwNDMxNjBhY2I2IiwidGFnIjoiIn0%3D; expires=Thu, 21-Nov-2024 00:23:20 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none
server: cloudflare
cf-ray: 8e5bd805e912569b-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=35833&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1386&delivery_rate=79462&cwnd=236&unsent_bytes=0&cid=cbf1e02915fd73a7&ts=370&x=0", cfL4;desc="?proto=TCP&rtt=22513&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3276&recv_bytes=1254&delivery_rate=261639&cwnd=254&unsent_bytes=0&cid=22a91fac16b4fd45&ts=766&x=0"
X-Firefox-Spdy: h2

104.18.95.41

200 OK

26 kB

URL POST HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1723327922:1732137284:x2-F2sfmzFTDMPwNvJIbQYkN1RTuAZs05uXqQu_Ntz8/8e5bd80cda85b4f3/6KPVFJLzjd.MvPV2xOv1z2SLtPhUIWcUvoKiEgInr5s-1732141401-1.1.1.1-TbTSipEkTxFuo0npC5TNXVriqQ1U7vT18_LJOnqU1GkDaJbrZCgBR4ViP1pyNMOW
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type
ASCII text, with very long lines (26320), with no line terminators
Size
26 kB (26320 bytes)
Hash
3d7f66dc499a46859181707a37c09545
462b0d2ac1ad872f3e10841cc695565d6403e082
0f3b3571f58d3a95b09fd87cab5956adeae83b3c41ef5e20d6afab92d7f746c2

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1723327922:1732137284:x2-F2sfmzFTDMPwNvJIbQYkN1RTuAZs05uXqQu_Ntz8/8e5bd80cda85b4f3/6KPVFJLzjd.MvPV2xOv1z2SLtPhUIWcUvoKiEgInr5s-1732141401-1.1.1.1-TbTSipEkTxFuo0npC5TNXVriqQ1U7vT18_LJOnqU1GkDaJbrZCgBR4ViP1pyNMOW HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
Content-type: application/x-www-form-urlencoded
CF-Challenge: 6KPVFJLzjd.MvPV2xOv1z2SLtPhUIWcUvoKiEgInr5s-1732141401-1.1.1.1-TbTSipEkTxFuo0npC5TNXVriqQ1U7vT18_LJOnqU1GkDaJbrZCgBR4ViP1pyNMOW
CF-Chl-RetryAttempt: 0
Content-Length: 28113
Origin: https://challenges.cloudflare.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 20 Nov 2024 22:23:23 GMT
content-type: text/plain; charset=UTF-8
cf-chl-gen: /RLHQj+w4hXuYXzAJ9zTNK+M/FIo/P/McQ/Bb4iaGIc8BE0XN2KGyOZA8ggt53S3Fmsjpfy+8uw1gI8P$IQMfdeetDrHd6M3R
server: cloudflare
cf-ray: 8e5bd81a4c13b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/

104.18.95.41

200 OK

26 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://znv.ubinexkhl.com/TyAyE/#Mjasonh@slurpmail.net
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type
HTML document, ASCII text, with very long lines (22074)
Size
26 kB (26246 bytes)
Hash
9d72f24a6efb8799d40fe8e3f37cbadf
2f57460e06b1bb816483169ca08a82d293542e72
07a9e9b30bdf9d7eebc319cecf8713c14338515804668360b3cfd9ea745315c1

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/ HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://znv.ubinexkhl.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 20 Nov 2024 22:23:21 GMT
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
referrer-policy: same-origin
document-policy: js-profiling
server: cloudflare
cf-ray: 8e5bd80cda85b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8e5bd80cda85b4f3&lang=auto

104.18.95.41

200 OK

118 kB

URL GET HTTP/3
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8e5bd80cda85b4f3&lang=auto
IP
104.18.95.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
Certificate
IssuerGoogle Trust Services
Subjectchallenges.cloudflare.com
FingerprintC1:16:CA:AE:53:D5:B8:63:59:BB:EB:73:AB:F0:98:7E:EE:7F:E3:EB
ValiditySun, 03 Nov 2024 16:27:50 GMT - Sat, 01 Feb 2025 17:27:46 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
118 kB (118462 bytes)
Hash
ada9970aa07be026ece140be11ea51bc
b6f2b54135c448fd00a29bcd1b0f109091d41e49
7f51fb686c54713c65fc005bf3c907146990e16a37e0a32ae6986a2ec3e4bd0a

HTTP Headers

GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8e5bd80cda85b4f3&lang=auto HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/pj3pw/0x4AAAAAAAzBG2DCl0k9WO21/auto/fbE/normal/auto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 20 Nov 2024 22:23:21 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 8e5bd80d5b25b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (50)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations