| ocsp.r2m03.amazontrust.com/ |  143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash1a6d64080fc97d69b0ada02c992ec696 ffa0b1cf2cd7e4dc9d7809715e44a11a893d9090 5f016be1410503ceb5776e2dca68d1f5d7012a72d2d26cf6e160aec6a9918ab1
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 17:02:24 GMT
Last-Modified: Fri, 10 May 2024 16:51:32 GMT
Server: ECAcc (amb/6AB2)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: u3ekD72JjLPdKenVqLLJxHICu5ff6HaQGtJXRI0t50Gpmg-IZ4iXIA==
Age: 652
|
|
| go.greenlinknow.com/t/clk?id=1wH2vBvuewUA1xIX&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=5yXY&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02 | 34.233.9.147 | 302 Found | 0 B |
URL User Request GET HTTP/2go.greenlinknow.com/t/clk?id=1wH2vBvuewUA1xIX&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=5yXY&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02 IP34.233.9.147:443
CertificateIssuerAmazon Subject*.greenlinknow.com Fingerprint50:1E:2E:70:CB:1C:84:ED:EB:C0:D2:DB:CA:87:BE:1E:66:31:57:19 ValidityMon, 18 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=1wH2vBvuewUA1xIX&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=5yXY&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 10 May 2024 17:02:24 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://go.greenlinknow.com/t/clk?id=rxHwLpLtBYh012iq&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=wpvWTGK6&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5TdY:o9LVOEY1CURERo6ElUOmczkNhCw"; expires=Sun, 09 Jun 2024 19:02:24 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| go.greenlinknow.com/t/clk?id=rxHwLpLtBYh012iq&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=wpvWTGK6&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02 | 34.233.9.147 | 302 Found | 0 B |
URL User Request GET HTTP/2go.greenlinknow.com/t/clk?id=rxHwLpLtBYh012iq&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=wpvWTGK6&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02 IP34.233.9.147:443
CertificateIssuerAmazon Subject*.greenlinknow.com Fingerprint50:1E:2E:70:CB:1C:84:ED:EB:C0:D2:DB:CA:87:BE:1E:66:31:57:19 ValidityMon, 18 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=rxHwLpLtBYh012iq&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=wpvWTGK6&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5TdY:o9LVOEY1CURERo6ElUOmczkNhCw"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 17:02:24 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://go.greenlinknow.com/t/clk?id=bLH31X1s9QIYZjSQ&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=gJNzIA96foPL&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5TdY:o9LVOEY1CURERo6ElUOmczkNhCw"; expires=Sun, 09 Jun 2024 19:02:24 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| go.greenlinknow.com/t/clk?id=bLH31X1s9QIYZjSQ&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=gJNzIA96foPL&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02 | 34.233.9.147 | 302 Found | 0 B |
URL User Request GET HTTP/2go.greenlinknow.com/t/clk?id=bLH31X1s9QIYZjSQ&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=gJNzIA96foPL&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02 IP34.233.9.147:443
CertificateIssuerAmazon Subject*.greenlinknow.com Fingerprint50:1E:2E:70:CB:1C:84:ED:EB:C0:D2:DB:CA:87:BE:1E:66:31:57:19 ValidityMon, 18 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=bLH31X1s9QIYZjSQ&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=gJNzIA96foPL&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5TdY:o9LVOEY1CURERo6ElUOmczkNhCw"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 17:02:24 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://go.greenlinknow.com/t/clk?id=dlHABxBhnetv1Js3&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=8204I613s1gqtN4W&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02,R02
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5TdY:o9LVOEY1CURERo6ElUOmczkNhCw"; expires=Sun, 09 Jun 2024 19:02:24 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| go.greenlinknow.com/t/clk?id=dlHABxBhnetv1Js3&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=8204I613s1gqtN4W&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02,R02 | 34.233.9.147 | 302 Found | 0 B |
URL User Request GET HTTP/2go.greenlinknow.com/t/clk?id=dlHABxBhnetv1Js3&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=8204I613s1gqtN4W&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02,R02 IP34.233.9.147:443
CertificateIssuerAmazon Subject*.greenlinknow.com Fingerprint50:1E:2E:70:CB:1C:84:ED:EB:C0:D2:DB:CA:87:BE:1E:66:31:57:19 ValidityMon, 18 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=dlHABxBhnetv1Js3&s1=663e530a21d9440001f9b732&s2=23e2e47d&rl=8204I613s1gqtN4W&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02,R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5TdY:o9LVOEY1CURERo6ElUOmczkNhCw"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 17:02:24 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: uip="[\"ETY1InL\"\054 {\"ljrB\": \"61L8pbv\"}]:1s5TdY:arjzwzC5ydu8A7c_yvTKrpCbCLk"; expires=Sun, 09 Jun 2024 17:02:24 GMT; Max-Age=2592000; Path=/
ydt_a31a0322edef4efaa328c3e667d70925="[\"e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a\"]:1s5TdY:If5QVKevjVwXfjkbhd5F03xJoZk"; expires=Sun, 09 Jun 2024 19:02:24 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-a61a69c3.js | 172.67.186.1 | 200 OK | 97 kB |
URL GET HTTP/3flaredownload.com/assets/hl-a61a69c3.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash39d6acb30f547d17781bd549b72e693e 498462e89f72d15ce32fbc04154824ca37abd590 ad7032e9ae4d36f3f855ccce8259d977418784a073cee61218787d03aadaa04e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-a61a69c3.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=267744
access-control-allow-origin: *
etag: W/"663e1dab-415e0"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R015q3S16uZXw2uHbyG19V4FyqIYdrqKIZaOKM62xVvDSpsBzDCLsGJ3airo72kY%2F%2BuOIo3KMGC9V%2FgX2Rd300HK8rEVcEJ8mzBNHp7Aj%2F0A59uAV328CUcXi3Kh6gUiWB6u8q2EFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 881b7f3138f656a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-bc49037c.js | 172.67.186.1 | 200 OK | 3.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-bc49037c.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (8142) Hash2cca07fd78f9c6bf99848bec7783d95f dbf74be7b76bfe35471d6cd774817c8ca55a2c16 5949da6abf48707427dad11941bcfe9095b6f7e6d188f48dd5a1de8abb48c4c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-bc49037c.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-a61a69c3.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: W/"663e1dab-c5f"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=02Yr3yB%2FsfN6D75fk2Ghjp5lBYt2oKE0WAoToCReMzzrDCTdj%2BSatR82J4IkeWYPdLXSISNzkGqLyAUlVy2z8ilaVFDdu8muTk4uaeINkQxolAso4W5QUU%2FupvS0bzxQcE7WAfLorw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 881b7f338d3756a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-f5b35e57.js | 172.67.186.1 | 200 OK | 854 B |
URL GET HTTP/3flaredownload.com/assets/hl-f5b35e57.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashcec9648c229d3096badfe6e96f6821aa 50a99a37fb0db5d197d346fa65b3267ed03166ee 3d638faeb640db8b71f929f13d4a28d3c53a2a6e9eabd3ab1c8360403a7dbb98
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f5b35e57.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=562
access-control-allow-origin: *
etag: W/"663e1dab-232"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BjmlHBeNS5%2B%2BXD3yu2nsFHK4QVE5nZCmvsZCAOwzDQMLuTXKd3UjgxqMjhsIunX5pkjgmQQ3XgyRHi1GefJc2aFRWvXmTSGTIyv%2B5240lV%2Fd2YcHV9zGwZlt%2Fh80%2Fhskw8mCWNQUNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 881b7f351f7b56a2-OSL
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700 | 142.250.74.106 | 200 OK | 2.6 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700 IP142.250.74.106:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash68bc9a1a7a3c88e99ef9442d95d9fa78 f455339284344a5213459bc0dadd85961ebc3ca9 f04ab5ed3f5fdb4aac9b9decbaad00d0405397f0b0c3fd1987477dee14c18774
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 17:02:26 GMT
date: Fri, 10 May 2024 17:02:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| flaredownload.com/favicon.ico | 172.67.186.1 | 200 OK | 1.0 kB |
URL GET HTTP/3flaredownload.com/favicon.ico IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash1ba2ae710d927f13d483fd5d1e548c9b c0605efed936ee2600284e6480521d06fa64f872 db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: image/x-icon
last-modified: Wed, 13 Sep 2023 08:04:59 GMT
etag: W/"65016d2b-10be"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OGbFt9I4jdSlEpIQgWg24%2FzUVxQetpW24EppkHi0EivKx7otVUfC99E1Hqgi99LBWoEEa%2B2hjnIPmqYufn31A%2BxfX51Ps1UXtOI80kqf3ffyjeEYHO3eeo1liHPZ5V2V5bBDDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b7f32cc2656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-d7413dd4.js | 172.67.186.1 | 200 OK | 6.8 kB |
URL GET HTTP/3flaredownload.com/assets/hl-d7413dd4.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash932e3df1d99ac1dbe9aa9b8e81fb49d0 251402867f02de8f5f0bd8eb89e911cdee50326a 8fdfd27613faab3f2e13a5164e17cfee639689e67730028ee1039a74b15f69aa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-d7413dd4.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5041
access-control-allow-origin: *
etag: W/"663e1dab-13b1"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4v%2B0oAE9NKXhwA6Rb7yoxNXFCX%2BuhUx1KvZxYh09T3ejCduMBYcgUXXNAIBnuZsluXyZ%2B9Yiwmf09CwAMjMlizOsnOabtiFgaY8sWXZ%2B91bxpPS8VT3ZErs6xT9okpLPey5F%2BWVzNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f36c9b356a2-OSL
|
|
| flaredownload.com/assets/hl-477fd99d.js | 172.67.186.1 | 200 OK | 5.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-477fd99d.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash0c6edb33fa2ae8515e0eae5890ede70b a0a46acaa46dd7b115b37879f348d9c654ae11e3 39e5b6654b39c00c13249be527a83c00fa14ad9dde17ccf1359bfcbb83664b59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-477fd99d.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1364
access-control-allow-origin: *
etag: W/"663e1dab-554"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NQeKS38662BWB5xEA1InHeoJgG0FXHnwQcMjoRxnHVH0qjY%2B8uvTBG6stfqcI9HLvml4oVeFttE%2F%2B0HpUGAMU75pAGOe97E8mgtSWGmnpyFHZUFjD84oXvMD4km7a7FhUZGducWysg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f36c9b656a2-OSL
|
|
| flaredownload.com/assets/hl-35a77ba0.js | 172.67.186.1 | 200 OK | 28 kB |
URL GET HTTP/3flaredownload.com/assets/hl-35a77ba0.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash6d2708424d8e3e8a01a075a667682319 fb75cf17ccb14011d82b5e81b3daf12fb20a9dca 7e74780eb2d44f798a3e2932e1cafe98c7fec93235c113695bad5b970192e553
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-35a77ba0.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72018
access-control-allow-origin: *
etag: W/"663e1dab-11952"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y55ii%2BKFKY98j%2F%2BcSjB3ARdLne9Sq%2Bra3JKFImvoNur1xBF7JKhEmW6VB%2BhrbBVDIuF2n5QTmEFk6VUaHT47CzoR%2F%2BpZvpEEhzsz2%2BNuRXQPhM1bwdPrY%2Fqtyw1TFMZkNVMZNL70bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f36c9b856a2-OSL
|
|
| flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png | 172.67.186.1 | | 723 B |
URL GET flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png IP172.67.186.1:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hashba8f10079cf5a5f5cffd4312e047db3d 2864af04fbdb64a20c8e1c2615a0401fca4bc956 e157263323db5ea8e56113a9119f4733b0a8130563d87e20e1b3575f4f22620c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/8cc59accec24f33766b15adf267e9641.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 723
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2d3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9XlrCcJw3P08JTRoUky75%2FDWHUQAH0faUK8fye%2FSWn9AYhXJTahN0ck%2FMjD1pE6CdjiDdRFsdBpGC2T4SwZ34FzaCFBcPWyfzfKFKTvn4idQSiKdifzBNCdqeWro%2FJ%2Bth6eXl%2BaSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f379abc56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png | 172.67.186.1 | | 110 B |
URL GET flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png IP172.67.186.1:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 48 x 48, 1-bit colormap, non-interlaced Hash09d6a9ebc45af5c5367f0a216e6234d7 357bb5d08644fbe599d34d165652dc19afe0df9c 5fda2ac54507259375f4107937b24a9c42302725c816cfd1620e84a526c734b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/a032b8243950801928214bc5092e9764.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 110
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-6e"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d8%2FKASo2%2FfzVvmX5AcdhTjFhvcu6%2FcmQZpl6CH80cUd4Me3V6IFdcXP3PrCoE8CToHvZjZQtKmZid2drJQyZkeGQ%2FQJuSgPVWV4gLDUu66uiloOigoEDQny1doS%2FCj3EZvTXfrYdNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f379ad556a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png | 172.67.186.1 | 200 OK | 220 B |
URL GET HTTP/3flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 72 x 48, 4-bit colormap, non-interlaced Hashf1063acb225b213d5fa9b231ee16cd25 e549decdc41f5ee29e75387f32470d90ee772787 4ee13f508c5a43754521cc34fd490bfb72daa996baaa558fa8638586371b1752
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/db126da1b71e69a76e54d2f4139a347c.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 220
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYUJV8thoNmGTeyKXV10e70sqH1UWLBso%2BS6u0UnDveOCJV%2BToZUgZuv8BHZhMsv1mvKoxyTr0qw2tRLx0%2F%2B41ilnCrxxwQbkJQuYYEpgUCFm8q%2FB6XUm6R3zNmZCjEUpcTq9GVShQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37aadd56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-35a77ba0.js | 172.67.186.1 | 200 OK | 27 kB |
URL GET HTTP/3flaredownload.com/assets/hl-35a77ba0.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash1367d568f17482574b648d57843494d8 25f1d74a29c2af53d1baa8492c0498f065539765 6737eb86eba80ac9da7c9b447a1dd003bb7883cd07983ffb8fb7a156b1e624e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-35a77ba0.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72018
access-control-allow-origin: *
etag: W/"663e1dab-11952"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y55ii%2BKFKY98j%2F%2BcSjB3ARdLne9Sq%2Bra3JKFImvoNur1xBF7JKhEmW6VB%2BhrbBVDIuF2n5QTmEFk6VUaHT47CzoR%2F%2BpZvpEEhzsz2%2BNuRXQPhM1bwdPrY%2Fqtyw1TFMZkNVMZNL70bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 881b7f352f8456a2-OSL
|
|
| flaredownload.com/prod/images/f1239f7cb9bbbfc719d60b288619d7de.png | 172.67.186.1 | | 113 kB |
URL GET flaredownload.com/prod/images/f1239f7cb9bbbfc719d60b288619d7de.png IP172.67.186.1:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 993 x 546, 8-bit colormap, non-interlaced Size113 kB (113379 bytes) Hashd8d5a5e33a87b192a74126bbaf431726 febdcfef57d6d6d8a7b81c46f30d47a065d7e0df f09f3901c52fc5ec1650f763efcd1f2b41694db31a6d3e135a1c5cf020e1e490
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/f1239f7cb9bbbfc719d60b288619d7de.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 113379
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1bae3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iSCRfAon74RKU8e0LIGKJCqOvnrKN1%2F8M9%2F8eHIaLQDaHm%2FIPq9l6TMCNT%2BdKsekQHRVecWpDfXQqrSV3HoUIveoOVA9QMjRIQ4uz3sz4jJ4w9ygluFYbKn0yDEyqBdnYRuzJggOug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37aadf56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg | 172.67.186.1 | 200 OK | 607 kB |
URL GET HTTP/3flaredownload.com/prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1258, components 3 Size607 kB (606551 bytes) Hash2296953043efaeb814b4ac9aa91b1edd 9947df98a24084f16562735b335d14d574f84d82 25d11bd085d802574f8fc54f57abea5572f97b91b0d0c89429736e7d5ba6567c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/jpeg
content-length: 606551
cf-bgj: h2pri
access-control-allow-origin: *
etag: "662b9304-94157"
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FoLlIWg8aPmmh8rrxYvZZvjeFkvPq%2FgDxPA6xTnTDilLuSHKiwNulLxaw0TrfQUlYkFsZa4%2FV5z4eDjPt4XB7L0b7npoCzz3YLFBv9EdhoZUczQtXdxu1wnDtxNJrN9YnoLq5TrHcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37cafe56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-28a0afe6.png | 172.67.186.1 | 200 OK | 132 kB |
URL GET HTTP/3flaredownload.com/assets/hl-28a0afe6.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 490 x 310, 8-bit/color RGBA, non-interlaced Size132 kB (132079 bytes) Hash663a088b73ce519c38adbad79e82d659 39ef28b09af2fdcf7f683c58efc18a43bd9e121f 28a0afe680833c1a10601e37f8a86a59b13f0e10aa03b9f5a5c53848639f77ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-28a0afe6.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 132079
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-203ef"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dhj5WgVU8LGjMi0gUNa0hkDml6nSvOk67qJUFzqWU5NUCBchw5Ir%2FZcNfwNP%2BpjWlOw17J%2B8IhZDXlHiMlPdbECGHSWzaoaO9ss8E5HsqlEo4IymHZo579ggtZPR1LHNDZcKdvN6Jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37db1e56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-c3c0d3f4.woff2 | 172.67.186.1 | 200 OK | 24 kB |
URL GET HTTP/3flaredownload.com/assets/hl-c3c0d3f4.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23484, version 1.0 Hashb4d2c4c39853ee244272c04999b230ba c82e22dde9716c40ba20e6c7ed03a1b66556de15 c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-c3c0d3f4.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/octet-stream
content-length: 23484
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-5bbc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BHwSgtDe84D9pK3FCbSBLhi70%2Fgg03%2BhgdrewIUqfVQvi7nByRvojGaOQQCPk1eicP9XhTGSAnaAbK6HFBiPe8QljALkccSidD%2BIX3i6jGWycmVJMh%2Fcjh0BPomTLBRx0tdp%2BRVDTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37db2256a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-8d3ca80f.woff2 | 172.67.186.1 | 200 OK | 23 kB |
URL GET HTTP/3flaredownload.com/assets/hl-8d3ca80f.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22992, version 1.0 Hash1efbd38aa76ddae2580fedf378276333 8a49976f2470ba2a1db6144245355d3b889312e4 8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8d3ca80f.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/octet-stream
content-length: 22992
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-59d0"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZhYfBPLBwYedlWXiQ0FdZPBDpI5ccGqYyGIkBIdbeMT6hwmw5HDl9j46wr5vJuISLsdgVCF%2FLKPnRyrkoxzmxGa9WKqlEY1nPnSfGdhBqAxVFdtw%2BMeXKFEf1FOsyHNTIY3Sq5JA%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37db2356a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-70789bd7.woff2 | 172.67.186.1 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-70789bd7.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17372, version 1.0 Hashc02fb7419b8629666bf2ccc0a5177e3d b70b21a3e6e55fbcbae137a3cbb4e05371c2bab6 70789bd70be9b6d68acd51063e499d6fe5e7fe53a654dab4fb00a8cf5bfe3637
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-70789bd7.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/octet-stream
content-length: 17372
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-43dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YnjsAQlPKI5d9gsolAg7q74j%2FQQCCldjoTcerxacFkjo0Dwe4o8yR9Q0NEkpe%2B2eefxnfcXAK7CoomU%2BncLzgv%2BHFatGvsLfkHSJDRb1pepDwlVZSJ67zwsZAGObKtVl5YMX7giZDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37db2956a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-3638d339.woff2 | 172.67.186.1 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-3638d339.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16860, version 1.0 Hash13049c7a16af3e830b7668f15f8e668a f9eca560164be1be239e42c43cf8bb07aa7d8f14 3638d33930adfd35323251395221e7b9e1f2a641e6a1ead6e9d18d09588a2cfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3638d339.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/octet-stream
content-length: 16860
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-41dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WtDqN%2F011wrWVLebij2Cn%2Fh00KsBeVXukWJ7muFW6%2FaGzdyvHB9m%2BGqBk7yjt9L1tzbxUIYbeQOlFh0UNO%2B9PTYjXs%2FZLQLmwW9ZvWOorJKi%2FpEYUiLjhHjK8eUzb%2BK6WKJx0oEtsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37db2156a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| event.secureanalytic.com/register/event_log/v9e179lqez |  104.21.77.48 | 200 OK | 0 B |
URL POST HTTP/2event.secureanalytic.com/register/event_log/v9e179lqez IP104.21.77.48:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/v9e179lqez HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/
Content-type: application/json
Content-Length: 103
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: SAMEORIGIN
access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iSwRQdl5%2FedhGDS5epYLPIEJOe2sym47uG3P9CdkjtM9330kEwKoAGuuSOuCXdPenS9pl3Nxp%2FWqysVNXor%2BWPwqNjpC%2FY4ZOylH7wjOTCSJ55hpCndzBSDFuSKOSJY0W8SqXC45Enf3%2F6c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f378a960b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-403ae525.js | 172.67.186.1 | 200 OK | 1.8 kB |
URL GET HTTP/3flaredownload.com/assets/hl-403ae525.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash5c7f783c0837ee9b55027e93f10bc343 96120104ed934e3ab34340f72ebcc2123b843228 3fd1f0eb3bbc9e96c00e8c140bda0f754c636c46d6a7da87881d83a9e802b443
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-403ae525.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=688
access-control-allow-origin: *
etag: W/"663e1dab-2b0"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ULlQi7irXf7X16QoHcU8LXFEOVd4Hu51f5u2bYef130EcorZnzm71XUG4HomO4g%2B7TkNfYdBOKBfkZJN%2FZ%2BiiA0TKhSYWLS%2BL7x4uhtOFRmcC7Z8HvX62JD9NI8%2BR2Fe5l6F9iC%2Fag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f36b9ad56a2-OSL
|
|
| flaredownload.com/assets/hl-f7944c84.js | 172.67.186.1 | 200 OK | 4.5 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f7944c84.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash803f83b0d6fc7560dc2bc47a0abbbc0b a0a0c66249e3c4de93fa88a1f99061d6941172a5 e5195e236c3351ff4eb1a2835a5c56f43dcd3e89ec1147f93a86ab47cbcdb4e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f7944c84.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2842
access-control-allow-origin: *
etag: W/"663e1dab-b1a"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g9eDlCaAgbDRlKKK8bEm7UzofQamoBg1LAhWkNwH2BFGHgmhPM2Zy5WATjRDYqjAU9ewJTVanb586qwisQG3xnBkneg6X6qgDRl8G%2BJoe93m9MgW8FlJYZCo4uaqDY0siiuKxrliSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 881b7f377a9756a2-OSL
|
|
| flaredownload.com/visit/get-data?landingId=7867&subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource= | 172.67.186.1 | 200 OK | 12 kB |
URL GET HTTP/3flaredownload.com/visit/get-data?landingId=7867&subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource= IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashe3fd4d225496c49f6bd4c02e561327a5 2424538524f1a832ebc6bd2c218a27980361caea 51d2646ec87d402a118d5afcbcf4ffcf9ab87ddfa2d91f6dabfaa70513cffe18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /visit/get-data?landingId=7867&subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sentry-trace: 5c1d2e958d0745eb9c0aa744751371f4-9c934b38a7e221e9-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=5c1d2e958d0745eb9c0aa744751371f4,sentry-sample_rate=0.1,sentry-sampled=false
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/json; charset=UTF-8
set-cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; path=/; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SXjruD5%2BAYij79OqHt1Rpf1PV%2BxNsGBpiX86qeXoOQ1qVdpxj71EJlwQx7nau8VVlHp6U8ZsWUIU6Ok2BeyfJbnggGudxOR3sL%2BmEI%2BtY1NsKvnANZKsyOrCH0j1sp%2F7B87tYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f322adc56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-edb2da2a.js | 172.67.186.1 | 200 OK | 11 kB |
URL GET HTTP/3flaredownload.com/assets/hl-edb2da2a.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash60dd5c2850fc832bfea5db8974ec64b4 00f881582014cee29c5c01125d22bc589e207a59 c39c131076cdf17e8040652c7c3c8796ea7e0606619f0fccb18697d0263d6f19
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-edb2da2a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1413
access-control-allow-origin: *
etag: W/"663e1dab-585"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtBj%2BBObUNBy5G9z80yhrQZ4qvbmn0orXKHPaJfIDPCvmXoonV0BDx6mGl7dYpSnB4BPlbOhBHbk4TCV4wNYQmwPz6JwQBbl%2BBG0Wge2hFs2KQYTmjdDiPDvrfCnH4iXT%2FQ30ByOCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 881b7f339d5356a2-OSL
|
|
| flaredownload.com/assets/hl-49fdde2e.js | 172.67.186.1 | 200 OK | 11 kB |
URL GET HTTP/3flaredownload.com/assets/hl-49fdde2e.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hasha577bcbeabab8fd3adf0f84dd2109d09 b613942d6a8cf5b5aa78e58898eae954f452a2d3 c78c98c21671b645aab134d272e3cc66b0f27b3731b4f631a627f61127159138
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-49fdde2e.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-f93eab01.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2078
access-control-allow-origin: *
etag: W/"663e1dab-81e"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SngX5sDDrEMu7uu%2BfSCgF6xIPow1X4bJvZ5vF3u5qPEBMSV5pcKYW%2B2mbjX4G0qEcWNFT3IUiywx%2ByM69Ib%2BakyrEtZzvicDcTLWgmY4q8iNqv6KKfAzbTr2ftCWzntNnJfZHyQrug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f349ed156a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png | 172.67.186.1 | 200 OK | 1.1 kB |
URL GET HTTP/3flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 142 x 116, 8-bit colormap, non-interlaced Hashcf1125dc9e8565471095b2315121607f 4587708c5f5abb1f9e5edfa01df0db5231dc6384 b6834940fa7f64a908522d2f88d6487b2da1580f6ae729e7cb8f7088c9b9204e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 1089
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-441"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5O2dz2jsF5%2B92QiiWR6BhHu1kxduQ5mSWcYIAoNzUxy5xjFWFhLG%2Fl4VSrO%2FthPxeuTKmjVblI4cyR5eHXYlrSWE0betP4SqRRJOuOq6RrL0AtXDQPRPXAE2aNArF3Vma15MG73abw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f378ab256a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png | 172.67.186.1 | 200 OK | 736 B |
URL GET HTTP/3flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash3e81792d1c3c845ca714ccb6d622a5cb 370d33f46430e85060c11f8d0d325b963743e738 039b1d9bc03573a402798799c1d0dbef6f03979e51ccf3576d2cfb07112b4145
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 736
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2e0"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DuH63%2BKyapLzr0OOcHoTaDP1qFuQUKxJI%2F6Zb5xLvvjWo8FfJaFVV0SaoD%2BJCJWRaiGl4XQcGuXbcy71B5D5WftJBugpv0Ud%2FPcbTGH6yS3JZJr%2FBNuXcC2qpjZgJL0HV8ogWcRjrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f37aade56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-496efccd.js | 172.67.186.1 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-496efccd.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash201d2c9e10aef47f2c60adb088eddbca 3b51d623b713e3073e64554691514acb1b26b3d4 f0400932289b6c0f0bd6463f83ee79758ddf69bde7076580a3e4a7be8dc9df5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-496efccd.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663e1dab-394"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g6RxvtTKLGp0j5bZi%2FZdC0BTkMtVu%2Bq%2B2ZDqVlvWN9HqcnDYQZNXPgoeSXnV%2FK6LVq8cQ0WmFPiPIwiV1sw0m2NANs%2F2PwezlWGb4F%2FSMVLcMaTm9epP807t9E6h6McY%2BKnFFKVI5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 881b7f351f7956a2-OSL
|
|
| flaredownload.com/assets/hl-496efccd.js | 172.67.186.1 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-496efccd.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash201d2c9e10aef47f2c60adb088eddbca 3b51d623b713e3073e64554691514acb1b26b3d4 f0400932289b6c0f0bd6463f83ee79758ddf69bde7076580a3e4a7be8dc9df5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-496efccd.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663e1dab-394"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g6RxvtTKLGp0j5bZi%2FZdC0BTkMtVu%2Bq%2B2ZDqVlvWN9HqcnDYQZNXPgoeSXnV%2FK6LVq8cQ0WmFPiPIwiV1sw0m2NANs%2F2PwezlWGb4F%2FSMVLcMaTm9epP807t9E6h6McY%2BKnFFKVI5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f36b9aa56a2-OSL
|
|
| flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png | 0.0.0.0 | | 0 B |
URL GET flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png IP0.0.0.0:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| flaredownload.com/lead/prefill | 172.67.186.1 | 200 OK | 64 B |
URL POST HTTP/3flaredownload.com/lead/prefill IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0a00dc476383c35bcfbc0ea44c3a60ea 36ebdfa0bfa4aa0ec8f4d7417d2112bae7d406db 819bd596583bc3bc638b2fa8d87d80b16551a1d68abb86261795db848cc226d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /lead/prefill HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
sentry-trace: 5c1d2e958d0745eb9c0aa744751371f4-a16148845344c252-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=5c1d2e958d0745eb9c0aa744751371f4,sentry-sample_rate=0.1,sentry-transaction=LandingHome,sentry-sampled=false
Content-Length: 56
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/json; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GKPmMuWQKGwdv9HubfM6cSlvKgUOier3GRIJeQ7rs4wFAXvW5seqeZxlj%2FXDxGi54XblIjqBqoJyTj4rOEYH2UFD2zP5rH%2B2ati7mC1E5NQ%2B9RSfs%2FalwAX4FOUjES1p%2B6sJ%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f376a8856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-04d68de7.css | 172.67.186.1 | 200 OK | 114 kB |
URL GET HTTP/3flaredownload.com/assets/hl-04d68de7.css IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (65329) Size114 kB (114023 bytes) Hash038b389697202a86001d7cb8b113803c c031ffb6795766b1babac743602c2d386b4e8d03 232cf36617bb2fd98321cbcd5fd0eb0cfbcf9b69c85a4d6e7d5134fc549436ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-04d68de7.css HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=114555
access-control-allow-origin: *
etag: W/"663e1dab-1bf7b"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m1JvYZPncLYQ6sIiSz6bD51EYK7mPaZ1XA0Aln%2B24%2FDaanRy19ploOsUjX8JBUlTBKlPs4cslEAy%2BqvZsYiHE8cIEooLCjDC5xDaAl0W%2FFnDHYQcbHUWpLhOpYMHrvIYFdTemyvQ0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 881b7f350f7056a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-7899f489.js | 172.67.186.1 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-7899f489.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (7803), with no line terminators Hasha7f21f940847a7851be6ea8dfcd1798f 3c8337b90d2705482190060e4753ba47e542b101 654d4cfb510abbc4fd095349a78188acf1e0f002f05206058df65f8befabb5f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-7899f489.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7114
access-control-allow-origin: *
etag: W/"663e1dab-1bca"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5oy%2FYX603VH%2Fm1YYd3Fa%2BOGMr1npdlQebYluemFdnw2lbk8eJz0foP4vjlgLqI6yfQiVeVdbarfNkLCa9PyV6WoznKpQoylq8KIPud6N8FPp0EE1XNEaFbGepZgSeo7R5%2Fx28vQ2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 881b7f351f7556a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-de833af9.js | 172.67.186.1 | 200 OK | 690 B |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (704), with no line terminators Hash25a523c7c0658e2bf768f0e26f59fbd8 fdae37e60c01daf3551830ba3639873e313e6495 37c6c8ba37235a274a7739b7021a9ea8104d57dd951ede499d1691f28175fb59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663e1dab-2b3"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbLO4f%2BBFgX2lcUYFYAmF6fTAhIwUIrB24uyEHibXFRkb2Wksrb7FMEQ8FtT72EpTujmaGiVm2kxtOHufpFSd%2BQMrrN9FcYM0VmRTzplrXqBnkITXJ8bGDBvlpWE6WCluW2gMFiI0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 881b7f352f8556a2-OSL
|
|
| flaredownload.com/assets/hl-1ae908b8.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-1ae908b8.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1960), with no line terminators Hashb2de30e038bbe44532129fabeb5af605 92e6c97c44f4ab23285feef3a3bc8220d7204630 13ba2512fbbae7576598cf3b7b90803da70bbaa2e9d0e5d0079f91027cdcca8c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-1ae908b8.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-cf3f4bed.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1923
access-control-allow-origin: *
etag: W/"663e1dab-783"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2e1K63n7ButpJl%2FcSoepEHLtzHt%2FNblHOKVdwU5FGhQkArEEXhwKr8Z17jxUsNw0tkVYkQ0ET8elXaRF48smsdSSJdLPdfh4XXuxeDPhCldCNxQBhPnL9VcrB6HZeXYGx9BDLodfYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f390d6b56a2-OSL
|
|
| flaredownload.com/assets/hl-81b37d5e.js | 172.67.186.1 | 200 OK | 529 B |
URL GET HTTP/3flaredownload.com/assets/hl-81b37d5e.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (555), with no line terminators Hash00fb63ed3ef673c11ed5213f256032f0 aa273441fea62b8ccbb24b3af16375b139e71012 4376026fce97606b231266947b0620cb5ea16d2f0ec2d49a6f0c9f783e808293
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-81b37d5e.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=530
access-control-allow-origin: *
etag: W/"663e1dab-212"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OKG9EaHtvIGekMFxrAxYaWng1pLvzXeN33TIRu6GHQyCTXvCl3vXrWWwM6FmCH%2BtHDljEji%2BwWRHrwTttNAAM6S4mD5tTTjS0uHkvErB6P6eIDGSKFFFkkpJ%2B7SPl9WV5fV9kwExFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f36b9a556a2-OSL
|
|
| flaredownload.com/assets/hl-1ae908b8.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-1ae908b8.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1960), with no line terminators Hashb2de30e038bbe44532129fabeb5af605 92e6c97c44f4ab23285feef3a3bc8220d7204630 13ba2512fbbae7576598cf3b7b90803da70bbaa2e9d0e5d0079f91027cdcca8c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-1ae908b8.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1923
access-control-allow-origin: *
etag: W/"663e1dab-783"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2e1K63n7ButpJl%2FcSoepEHLtzHt%2FNblHOKVdwU5FGhQkArEEXhwKr8Z17jxUsNw0tkVYkQ0ET8elXaRF48smsdSSJdLPdfh4XXuxeDPhCldCNxQBhPnL9VcrB6HZeXYGx9BDLodfYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 881b7f378aa656a2-OSL
|
|
| flaredownload.com/assets/hl-3e162dba.js | 172.67.186.1 | 200 OK | 779 B |
URL GET HTTP/3flaredownload.com/assets/hl-3e162dba.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (821), with no line terminators Hasha415038413732ca8bafa840d844b16c2 3c82a81c4665f1031324203c2a671db6fe676d17 4f740eec88a396a619211cfb88522cbfa71e73b77c1f3527b8d1843401a64531
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3e162dba.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7413dd4.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=780
access-control-allow-origin: *
etag: W/"663e1dab-30c"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2u2R%2BpfW9jq6vrHVe%2BgENsonEBJihQv7gukpTjCPPuYnGU7k%2B5py%2BTE5P223syGtXDVp6Aj6WrbsjQkP4uhrfVDjjPo%2FyW%2FKsR09w7w9Yf3tD9SLY%2BDYlIx1i637Mbbb%2F3YY9gZYSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f37aae356a2-OSL
|
|
| secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com | 172.67.204.164 | 200 OK | 8.1 kB |
URL GET HTTP/2secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com IP172.67.204.164:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
File typeJavaScript source, ASCII text, with very long lines (8385), with no line terminators Hashb45c7286594795de3b392f6f8942604d 51239b08544394e811b8fdcc3bdc1df3832256e5 d1cfecd1075f9a9eea50304717a1fbd7cf2601c2d2bc80c698d4136846fdbef7
GET /scripts/push/script/02eyoyxdkz?url=flaredownload.com HTTP/1.1
Host: secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/javascript;charset=UTF-8
content-length: 2521
content-encoding: gzip
expires: 0
cache-control: max-age=14400, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: HIT
age: 890
last-modified: Fri, 10 May 2024 16:47:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BG8CX0%2FSbUQBuTaekABBNGTmPfPZgc%2BWuz8kX5umhJNWC9TWTs3%2BGrWEbpFq5zMye2T9jvojbWAcers58kysNPc92%2B7NnvLr5NgzVqwURpNPDHnZK8b5CNLuCIge2nGlFcSGmfc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f340e9b7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-81b37d5e.js | 172.67.186.1 | 200 OK | 529 B |
URL GET HTTP/3flaredownload.com/assets/hl-81b37d5e.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (555), with no line terminators Hash00fb63ed3ef673c11ed5213f256032f0 aa273441fea62b8ccbb24b3af16375b139e71012 4376026fce97606b231266947b0620cb5ea16d2f0ec2d49a6f0c9f783e808293
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-81b37d5e.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=530
access-control-allow-origin: *
etag: W/"663e1dab-212"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OKG9EaHtvIGekMFxrAxYaWng1pLvzXeN33TIRu6GHQyCTXvCl3vXrWWwM6FmCH%2BtHDljEji%2BwWRHrwTttNAAM6S4mD5tTTjS0uHkvErB6P6eIDGSKFFFkkpJ%2B7SPl9WV5fV9kwExFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 881b7f351f7656a2-OSL
|
|
| flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png | 0.0.0.0 | | 0 B |
URL GET flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png IP0.0.0.0:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png | 0.0.0.0 | | 0 B |
URL GET flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png IP0.0.0.0:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/58294b522e31bd664bc6d1dd76cec438.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| flaredownload.com/assets/hl-cf3f4bed.js | 172.67.186.1 | 200 OK | 616 B |
URL GET HTTP/3flaredownload.com/assets/hl-cf3f4bed.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (636), with no line terminators Hash2a3bbe6510e64eb71330aa25b6f34bbf 163f7e9cbccc12d1e821ce09603c9bf19967347a 66931426516ecefdb38150e24f6e804d2ca8449c8bd0fb95e6cfc6f4ce5fdf63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-cf3f4bed.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7413dd4.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663e1dab-269"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zn%2BK%2BoaOqlFTid69iHr0WWuFmt1uGcNa9a9C689F5HD%2FHyHmD0es%2FOyptyOWJK2sdXxr7Z9A4NgTyQQRSadLHjGw6unq2trj%2B4ac8RZgIx0NP8gUvJE9ujN79Ht9OdK1p0F6oyn%2Bxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f37aae556a2-OSL
|
|
| flaredownload.com/prod/images/b8951ec12fcbc404228c41b98bf7dc05.png | 172.67.186.1 | 200 OK | 917 B |
URL GET HTTP/3flaredownload.com/prod/images/b8951ec12fcbc404228c41b98bf7dc05.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashae126dcdf8581afd4f5287e47a865c4b 467a70ace4e8ba22c6d060de9a51041158c93d0f 584e53768bb90991e7b60eb7ecc2c5d9c26dd9a4f782a104030348c9b82cf473
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/b8951ec12fcbc404228c41b98bf7dc05.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 917
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-395"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZG8gN5SOeskEqQm8M5OkCdEzsZwFy0MuPZQvR%2FjOGaR82eOtXs7iAm%2Bf5Gja6Sotn93EkhP1%2FarH6gMKOKfhT%2Fzu14czwakYuTq2JeCBxV7xYbat70EK2ILXaP6qWFiQX34ouNQyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f393dc656a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-cf3f4bed.js | 172.67.186.1 | 200 OK | 616 B |
URL GET HTTP/3flaredownload.com/assets/hl-cf3f4bed.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (636), with no line terminators Hash2a3bbe6510e64eb71330aa25b6f34bbf 163f7e9cbccc12d1e821ce09603c9bf19967347a 66931426516ecefdb38150e24f6e804d2ca8449c8bd0fb95e6cfc6f4ce5fdf63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-cf3f4bed.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663e1dab-269"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zn%2BK%2BoaOqlFTid69iHr0WWuFmt1uGcNa9a9C689F5HD%2FHyHmD0es%2FOyptyOWJK2sdXxr7Z9A4NgTyQQRSadLHjGw6unq2trj%2B4ac8RZgIx0NP8gUvJE9ujN79Ht9OdK1p0F6oyn%2Bxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 881b7f378aa356a2-OSL
|
|
| flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png | 172.67.186.1 | 200 OK | 4.8 kB |
URL GET HTTP/3flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 190 x 108, 8-bit/color RGBA, non-interlaced Hash12e2bcc7cae9c2211a695df886e28e9b 0e31a94632d7efa8ca00b3d84b90f3e61fcc7322 cdebbfd2ef3531023cb60b657445e188a0e76824338edc4ada292ac7ab1e164f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/58294b522e31bd664bc6d1dd76cec438.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 4792
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-12b8"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5BsXSQaqY7Vblj8A2d0QKC22fFKzkjRqsai%2F%2BG6EzA31uLW%2BWK8VZaKuc17U6FiUXbLvyXUa6Pbu%2Bcsn%2FAgvlD8zrfDCQUEZq5jzJCfA2KKkDX9nTAxfZmkSnwgn%2F4l01vCp03TGzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f378aac56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-06c5bc34.js | 172.67.186.1 | 200 OK | 418 B |
URL GET HTTP/3flaredownload.com/assets/hl-06c5bc34.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (440), with no line terminators Hashf337bbc143b59ab9ade9e12ee268a4c6 41e5f6efb8b4120e0f3cea55996b91cc989a973f c1a982f0f0250be07ac8c2baf85042557bb2a9a026bd6c3856319ae40abfcf31
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-06c5bc34.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663e1dab-1a3"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=APcuaSduoKTA2n8nJxTfuYlxBaGt0GAXfY4ie1AYG6qRkz3UmafRCDA%2B4P5oa%2FTw6YZADFFcky3aeB%2FX7ckdN%2Bs1sbOIL9t6AzkVQ8VbSTpFWZ5PVguC5yQHU%2FyP2CaKjzuqN9EJEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 881b7f339d4f56a2-OSL
|
|
| flaredownload.com/assets/hl-06c5bc34.js | 172.67.186.1 | 200 OK | 418 B |
URL GET HTTP/3flaredownload.com/assets/hl-06c5bc34.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (440), with no line terminators Hashf337bbc143b59ab9ade9e12ee268a4c6 41e5f6efb8b4120e0f3cea55996b91cc989a973f c1a982f0f0250be07ac8c2baf85042557bb2a9a026bd6c3856319ae40abfcf31
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-06c5bc34.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-f93eab01.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663e1dab-1a3"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=APcuaSduoKTA2n8nJxTfuYlxBaGt0GAXfY4ie1AYG6qRkz3UmafRCDA%2B4P5oa%2FTw6YZADFFcky3aeB%2FX7ckdN%2Bs1sbOIL9t6AzkVQ8VbSTpFWZ5PVguC5yQHU%2FyP2CaKjzuqN9EJEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f344e6556a2-OSL
|
|
| flaredownload.com/assets/hl-de833af9.js | 172.67.186.1 | 200 OK | 690 B |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (704), with no line terminators Hash25a523c7c0658e2bf768f0e26f59fbd8 fdae37e60c01daf3551830ba3639873e313e6495 37c6c8ba37235a274a7739b7021a9ea8104d57dd951ede499d1691f28175fb59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663e1dab-2b3"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbLO4f%2BBFgX2lcUYFYAmF6fTAhIwUIrB24uyEHibXFRkb2Wksrb7FMEQ8FtT72EpTujmaGiVm2kxtOHufpFSd%2BQMrrN9FcYM0VmRTzplrXqBnkITXJ8bGDBvlpWE6WCluW2gMFiI0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f36c9b956a2-OSL
|
|
| flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png | 172.67.186.1 | 200 OK | 5.4 kB |
URL GET HTTP/3flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 646 x 116, 8-bit colormap, non-interlaced Hashb169e30ad5cb8b0b613ae6c3006afbe0 b0f804da985ec024b15155f33084ee796d1abc0d 7f474dce0f1f49839379e2c6c1130a4a399ccfc5b173eb89dbbc28c83d75a803
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: image/png
content-length: 5415
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1527"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZj%2BIA0UrpDDafJhRFQeF%2BSjBvGW%2FYl1UWXtdTMxWnvYpvpk3cmNxn3S5dakrz5PdremR7Uz%2FdVCfPzImgkX%2F8XVxQbt73yF01cGvJEeJJQ60rCRuJLU%2BxsapUle6YjRlo6DxRk37g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f378aa856a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= | 172.67.186.1 | 200 OK | 417 B |
URL User Request GET HTTP/2flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= IP172.67.186.1:443
CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeHTML document, ASCII text, with very long lines (456), with no line terminators Hashf4b1b13cfac0ef257175a471507f9568 670e119712eabb3d72b52f8ca4d5c07598488cd5 79d0bafc8ab07f259876416bbbb4b386ce4934c871cf764790031e4c3cf180df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T28L3Xy78XpCda63UIGBE6hqYtsrbWNn46YQ4Bv65HsQT77xOrEyBTdnLn3TznPw3Zf6WKXJ8YNK3qunnOsJKHiIdijOuHPvGkekuYxROFZYOvdH5%2FrQtjfqNvC6MPqPf%2Bo%2FGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f2ec979b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-f93eab01.js | 172.67.186.1 | 200 OK | 5.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f93eab01.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5349), with no line terminators Hashf17f382b29a6610b8e82222383751bcd 11f196f6c512d368f5ebed5a795f3bcca017a757 028f8085e2b4738395bc0410e3dfdeb72aa681e8f7c15ed76a040b16b78965c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f93eab01.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663e1dab-13c2"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2K6H99%2FJ9qXGKHCbz9qzYyxKPLOHLeRRchUuWvym7b4Aab5v1MxOez%2FOB3w14hgcrY20YCcQvnKF8zQViQPrQhI61eeuVL%2BenDpxlXWECUCYY0fiaDJf28542TUYq2ST%2BNh8KRXgmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 881b7f338d4356a2-OSL
|
|
| flaredownload.com/assets/hl-7899f489.js | 172.67.186.1 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-7899f489.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (7803), with no line terminators Hasha7f21f940847a7851be6ea8dfcd1798f 3c8337b90d2705482190060e4753ba47e542b101 654d4cfb510abbc4fd095349a78188acf1e0f002f05206058df65f8befabb5f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-7899f489.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-49fdde2e.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7114
access-control-allow-origin: *
etag: W/"663e1dab-1bca"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5oy%2FYX603VH%2Fm1YYd3Fa%2BOGMr1npdlQebYluemFdnw2lbk8eJz0foP4vjlgLqI6yfQiVeVdbarfNkLCa9PyV6WoznKpQoylq8KIPud6N8FPp0EE1XNEaFbGepZgSeo7R5%2Fx28vQ2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f36996956a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png | 0.0.0.0 | | 0 B |
URL GET flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png IP0.0.0.0:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| flaredownload.com/assets/hl-3e162dba.js | 172.67.186.1 | 200 OK | 779 B |
URL GET HTTP/3flaredownload.com/assets/hl-3e162dba.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (821), with no line terminators Hasha415038413732ca8bafa840d844b16c2 3c82a81c4665f1031324203c2a671db6fe676d17 4f740eec88a396a619211cfb88522cbfa71e73b77c1f3527b8d1843401a64531
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3e162dba.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:26 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=780
access-control-allow-origin: *
etag: W/"663e1dab-30c"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2u2R%2BpfW9jq6vrHVe%2BgENsonEBJihQv7gukpTjCPPuYnGU7k%2B5py%2BTE5P223syGtXDVp6Aj6WrbsjQkP4uhrfVDjjPo%2FyW%2FKsR09w7w9Yf3tD9SLY%2BDYlIx1i637Mbbb%2F3YY9gZYSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 881b7f377a9b56a2-OSL
|
|
| flaredownload.com/assets/hl-f93eab01.js | 172.67.186.1 | 200 OK | 5.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f93eab01.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5349), with no line terminators Hashf17f382b29a6610b8e82222383751bcd 11f196f6c512d368f5ebed5a795f3bcca017a757 028f8085e2b4738395bc0410e3dfdeb72aa681e8f7c15ed76a040b16b78965c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f93eab01.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-a61a69c3.js
Cookie: visitInfo::7867=0f96dcc9a54fd18001b4b56a9eea8d6de7e815f6e0fafd2849141147fd2e73eca%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%222504ebba2a817f8a157d5d9acf86a6cb%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e5dd56cc-37b7-4e0d-9e12-d5ba71f8392a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663e1dab-13c2"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2K6H99%2FJ9qXGKHCbz9qzYyxKPLOHLeRRchUuWvym7b4Aab5v1MxOez%2FOB3w14hgcrY20YCcQvnKF8zQViQPrQhI61eeuVL%2BenDpxlXWECUCYY0fiaDJf28542TUYq2ST%2BNh8KRXgmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 881b7f33ad5c56a2-OSL
|
|