| ocsp.r2m03.amazontrust.com/ |  143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash1a6d64080fc97d69b0ada02c992ec696 ffa0b1cf2cd7e4dc9d7809715e44a11a893d9090 5f016be1410503ceb5776e2dca68d1f5d7012a72d2d26cf6e160aec6a9918ab1
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 17:02:35 GMT
Last-Modified: Fri, 10 May 2024 15:50:01 GMT
Server: ECAcc (ska/F756)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _UaIfAQjei5Xtfbg3Mul0AuKwuhNsP_CDIKVejh24RSwgdIV307H2w==
Age: 4355
|
|
| go.greenlinknow.com/t/clk?id=1wH2vBvuewUA1xIX&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=5yXY&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02 | 34.199.31.32 | 302 Found | 0 B |
URL User Request GET HTTP/2go.greenlinknow.com/t/clk?id=1wH2vBvuewUA1xIX&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=5yXY&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02 IP34.199.31.32:443
CertificateIssuerAmazon Subject*.greenlinknow.com Fingerprint50:1E:2E:70:CB:1C:84:ED:EB:C0:D2:DB:CA:87:BE:1E:66:31:57:19 ValidityMon, 18 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=1wH2vBvuewUA1xIX&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=5yXY&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 10 May 2024 17:02:36 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://go.greenlinknow.com/t/clk?id=rxHwLpLtBYh012iq&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=wpvWTGK6&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5Tdk:yYaxzK3jlHOEx4mJd17UKcPSXPo"; expires=Sun, 09 Jun 2024 19:02:36 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| go.greenlinknow.com/t/clk?id=rxHwLpLtBYh012iq&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=wpvWTGK6&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02 | 34.199.31.32 | 302 Found | 0 B |
URL User Request GET HTTP/2go.greenlinknow.com/t/clk?id=rxHwLpLtBYh012iq&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=wpvWTGK6&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02 IP34.199.31.32:443
CertificateIssuerAmazon Subject*.greenlinknow.com Fingerprint50:1E:2E:70:CB:1C:84:ED:EB:C0:D2:DB:CA:87:BE:1E:66:31:57:19 ValidityMon, 18 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=rxHwLpLtBYh012iq&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=wpvWTGK6&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5Tdk:yYaxzK3jlHOEx4mJd17UKcPSXPo"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 17:02:36 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://go.greenlinknow.com/t/clk?id=bLH31X1s9QIYZjSQ&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=gJNzIA96foPL&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5Tdk:yYaxzK3jlHOEx4mJd17UKcPSXPo"; expires=Sun, 09 Jun 2024 19:02:36 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| go.greenlinknow.com/t/clk?id=bLH31X1s9QIYZjSQ&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=gJNzIA96foPL&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02 | 34.199.31.32 | 302 Found | 0 B |
URL User Request GET HTTP/2go.greenlinknow.com/t/clk?id=bLH31X1s9QIYZjSQ&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=gJNzIA96foPL&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02 IP34.199.31.32:443
CertificateIssuerAmazon Subject*.greenlinknow.com Fingerprint50:1E:2E:70:CB:1C:84:ED:EB:C0:D2:DB:CA:87:BE:1E:66:31:57:19 ValidityMon, 18 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=bLH31X1s9QIYZjSQ&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=gJNzIA96foPL&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5Tdk:yYaxzK3jlHOEx4mJd17UKcPSXPo"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 17:02:36 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://go.greenlinknow.com/t/clk?id=dlHABxBhnetv1Js3&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=8204I613s1gqtN4W&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02,R02
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5Tdk:yYaxzK3jlHOEx4mJd17UKcPSXPo"; expires=Sun, 09 Jun 2024 19:02:36 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| go.greenlinknow.com/t/clk?id=dlHABxBhnetv1Js3&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=8204I613s1gqtN4W&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02,R02 | 34.199.31.32 | 302 Found | 0 B |
URL User Request GET HTTP/2go.greenlinknow.com/t/clk?id=dlHABxBhnetv1Js3&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=8204I613s1gqtN4W&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02,R02 IP34.199.31.32:443
CertificateIssuerAmazon Subject*.greenlinknow.com Fingerprint50:1E:2E:70:CB:1C:84:ED:EB:C0:D2:DB:CA:87:BE:1E:66:31:57:19 ValidityMon, 18 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=dlHABxBhnetv1Js3&s1=663e53178070e1000126ef5b&s2=23e2e47d&rl=8204I613s1gqtN4W&redirect-from=0MHezmzuL7cMALfZ&rcode=R02&rseq=R02,R02,R02,R02 HTTP/1.1
Host: go.greenlinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ydt_a31a0322edef4efaa328c3e667d70925="[]:1s5Tdk:yYaxzK3jlHOEx4mJd17UKcPSXPo"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 17:02:36 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: uip="[\"sGRxIh8\"\054 {\"K5xk\": \"64D59EV\"}]:1s5Tdk:zvXuec_VhJPiJKXZkM9pNQcaRuk"; expires=Sun, 09 Jun 2024 17:02:36 GMT; Max-Age=2592000; Path=/
ydt_a31a0322edef4efaa328c3e667d70925="[\"0b00fe3f-8d5a-4267-b0c7-76c2582dee7a\"]:1s5Tdk:_f40neIdnmGL0b-zHfZ8V_KsXlM"; expires=Sun, 09 Jun 2024 19:02:36 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-bc49037c.js | 172.67.186.1 | 200 OK | 3.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-bc49037c.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (8142) Hash2cca07fd78f9c6bf99848bec7783d95f dbf74be7b76bfe35471d6cd774817c8ca55a2c16 5949da6abf48707427dad11941bcfe9095b6f7e6d188f48dd5a1de8abb48c4c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-bc49037c.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-a61a69c3.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: W/"663e1dab-c5f"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=02Yr3yB%2FsfN6D75fk2Ghjp5lBYt2oKE0WAoToCReMzzrDCTdj%2BSatR82J4IkeWYPdLXSISNzkGqLyAUlVy2z8ilaVFDdu8muTk4uaeINkQxolAso4W5QUU%2FupvS0bzxQcE7WAfLorw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f7c1b1156bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-49fdde2e.js | 172.67.186.1 | 200 OK | 999 B |
URL GET HTTP/3flaredownload.com/assets/hl-49fdde2e.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash71f822407fe1a15a9c51884ba0c5d707 697607ab527e1eabcc2d9014bcca701388179648 1804eb8f935d2db5dfd60681d538424a2b44b217cd3ba3d4b9a707b7f8b5b046
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-49fdde2e.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2078
access-control-allow-origin: *
etag: W/"663e1dab-81e"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SngX5sDDrEMu7uu%2BfSCgF6xIPow1X4bJvZ5vF3u5qPEBMSV5pcKYW%2B2mbjX4G0qEcWNFT3IUiywx%2ByM69Ib%2BakyrEtZzvicDcTLWgmY4q8iNqv6KKfAzbTr2ftCWzntNnJfZHyQrug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7ccbe856bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-81b37d5e.js | 172.67.186.1 | 200 OK | 840 B |
URL GET HTTP/3flaredownload.com/assets/hl-81b37d5e.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash30e672aaa22de9ca80289826d089b957 2c89b74d1bd07015dbce711151c86adddd3e009a ba0127f7dcd0b018b777b7a7dcb84ec0adeeeb74988ac944ab2d9f54f742debf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-81b37d5e.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=530
access-control-allow-origin: *
etag: W/"663e1dab-212"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OKG9EaHtvIGekMFxrAxYaWng1pLvzXeN33TIRu6GHQyCTXvCl3vXrWWwM6FmCH%2BtHDljEji%2BwWRHrwTttNAAM6S4mD5tTTjS0uHkvErB6P6eIDGSKFFFkkpJ%2B7SPl9WV5fV9kwExFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7d7caf56bb-OSL
|
|
| event.secureanalytic.com/register/event_log/v9e179lqez |  104.21.77.48 | 200 OK | 0 B |
URL POST HTTP/2event.secureanalytic.com/register/event_log/v9e179lqez IP104.21.77.48:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/v9e179lqez HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://flaredownload.com/
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-headers: content-type
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
access-control-allow-methods: POST
x-frame-options: SAMEORIGIN
access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ftX6VJXDU8C3yHqyE38ekhcSTjYvQOsN3mgtBcobrpfbNMCmdp3cK%2BqEFjEGq9ORmd6QUoQd%2BADZg2nnlTJG9x0ooEXPvGZTNcWDSntDrbQG%2FAL%2Bpvw9N9hA6paPFmKrRClV1TAMstj57Xs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f7dbe7cb517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-35a77ba0.js | 172.67.186.1 | 200 OK | 26 kB |
URL GET HTTP/3flaredownload.com/assets/hl-35a77ba0.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (37102) Hashf87da472e47dc575b6cb8dc377d18916 bff262654ae71f3be0a658cfbe5a53c787c05d55 5c38207c92f3650eaef6616521c8b1e0a03ceb384030f1c2b67cb75e25925ca8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-35a77ba0.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72018
access-control-allow-origin: *
etag: W/"663e1dab-11952"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y55ii%2BKFKY98j%2F%2BcSjB3ARdLne9Sq%2Bra3JKFImvoNur1xBF7JKhEmW6VB%2BhrbBVDIuF2n5QTmEFk6VUaHT47CzoR%2F%2BpZvpEEhzsz2%2BNuRXQPhM1bwdPrY%2Fqtyw1TFMZkNVMZNL70bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7d9cf556bb-OSL
|
|
| flaredownload.com/assets/hl-d7413dd4.js | 172.67.186.1 | 200 OK | 2.7 kB |
URL GET HTTP/3flaredownload.com/assets/hl-d7413dd4.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashde8688b4a52958c0d0ceeecf9b8bbd6d 17017f5343810b933c5059f688470ebe65894be7 3b077805e28620e67f36ca99938f69f80676faa07b8ffc45a10dd2599fb0c58a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-d7413dd4.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5041
access-control-allow-origin: *
etag: W/"663e1dab-13b1"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4v%2B0oAE9NKXhwA6Rb7yoxNXFCX%2BuhUx1KvZxYh09T3ejCduMBYcgUXXNAIBnuZsluXyZ%2B9Yiwmf09CwAMjMlizOsnOabtiFgaY8sWXZ%2B91bxpPS8VT3ZErs6xT9okpLPey5F%2BWVzNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7d9cf356bb-OSL
|
|
| flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png | 172.67.186.1 | 200 OK | 5.4 kB |
URL GET HTTP/3flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 646 x 116, 8-bit colormap, non-interlaced Hashb169e30ad5cb8b0b613ae6c3006afbe0 b0f804da985ec024b15155f33084ee796d1abc0d 7f474dce0f1f49839379e2c6c1130a4a399ccfc5b173eb89dbbc28c83d75a803
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 5415
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1527"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZj%2BIA0UrpDDafJhRFQeF%2BSjBvGW%2FYl1UWXtdTMxWnvYpvpk3cmNxn3S5dakrz5PdremR7Uz%2FdVCfPzImgkX%2F8XVxQbt73yF01cGvJEeJJQ60rCRuJLU%2BxsapUle6YjRlo6DxRk37g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f7f9fa656bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-403ae525.js | 172.67.186.1 | 200 OK | 5.2 kB |
URL GET HTTP/3flaredownload.com/assets/hl-403ae525.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashf2001b4b99be5822def06cc573d9f326 79bb65682a0d599f645ba171ba53d09f84ec299c 9c66e5739c86e283878874b45f3618f183198763e3c593e5509f72229c823bb5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-403ae525.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=688
access-control-allow-origin: *
etag: W/"663e1dab-2b0"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ULlQi7irXf7X16QoHcU8LXFEOVd4Hu51f5u2bYef130EcorZnzm71XUG4HomO4g%2B7TkNfYdBOKBfkZJN%2FZ%2BiiA0TKhSYWLS%2BL7x4uhtOFRmcC7Z8HvX62JD9NI8%2BR2Fe5l6F9iC%2Fag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7d9cdf56bb-OSL
|
|
| flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png | 172.67.186.1 | 200 OK | 1.1 kB |
URL GET HTTP/3flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 142 x 116, 8-bit colormap, non-interlaced Hashcf1125dc9e8565471095b2315121607f 4587708c5f5abb1f9e5edfa01df0db5231dc6384 b6834940fa7f64a908522d2f88d6487b2da1580f6ae729e7cb8f7088c9b9204e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 1089
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-441"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5O2dz2jsF5%2B92QiiWR6BhHu1kxduQ5mSWcYIAoNzUxy5xjFWFhLG%2Fl4VSrO%2FthPxeuTKmjVblI4cyR5eHXYlrSWE0betP4SqRRJOuOq6RrL0AtXDQPRPXAE2aNArF3Vma15MG73abw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f7fafc356bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png | 172.67.186.1 | 200 OK | 723 B |
URL GET HTTP/3flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hashba8f10079cf5a5f5cffd4312e047db3d 2864af04fbdb64a20c8e1c2615a0401fca4bc956 e157263323db5ea8e56113a9119f4733b0a8130563d87e20e1b3575f4f22620c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/8cc59accec24f33766b15adf267e9641.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 723
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2d3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9XlrCcJw3P08JTRoUky75%2FDWHUQAH0faUK8fye%2FSWn9AYhXJTahN0ck%2FMjD1pE6CdjiDdRFsdBpGC2T4SwZ34FzaCFBcPWyfzfKFKTvn4idQSiKdifzBNCdqeWro%2FJ%2Bth6eXl%2BaSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f7fd80956bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png | 172.67.186.1 | 200 OK | 110 B |
URL GET HTTP/3flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 48 x 48, 1-bit colormap, non-interlaced Hash09d6a9ebc45af5c5367f0a216e6234d7 357bb5d08644fbe599d34d165652dc19afe0df9c 5fda2ac54507259375f4107937b24a9c42302725c816cfd1620e84a526c734b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/a032b8243950801928214bc5092e9764.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 110
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-6e"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d8%2FKASo2%2FfzVvmX5AcdhTjFhvcu6%2FcmQZpl6CH80cUd4Me3V6IFdcXP3PrCoE8CToHvZjZQtKmZid2drJQyZkeGQ%2FQJuSgPVWV4gLDUu66uiloOigoEDQny1doS%2FCj3EZvTXfrYdNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f7fe81056bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png | 172.67.186.1 | 200 OK | 220 B |
URL GET HTTP/3flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 72 x 48, 4-bit colormap, non-interlaced Hashf1063acb225b213d5fa9b231ee16cd25 e549decdc41f5ee29e75387f32470d90ee772787 4ee13f508c5a43754521cc34fd490bfb72daa996baaa558fa8638586371b1752
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/db126da1b71e69a76e54d2f4139a347c.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 220
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYUJV8thoNmGTeyKXV10e70sqH1UWLBso%2BS6u0UnDveOCJV%2BToZUgZuv8BHZhMsv1mvKoxyTr0qw2tRLx0%2F%2B41ilnCrxxwQbkJQuYYEpgUCFm8q%2FB6XUm6R3zNmZCjEUpcTq9GVShQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f7fe81956bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-f5b35e57.js | 172.67.186.1 | 200 OK | 1.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f5b35e57.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash2fa97bfc0a61d92fc06aa45c8c4e075c 105886758c47ca7176a25d77aebd7d7f068f8e10 19e28f751ba14022dadda303d2173bb48e48cc995532aac28089b45763f582d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f5b35e57.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=562
access-control-allow-origin: *
etag: W/"663e1dab-232"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BjmlHBeNS5%2B%2BXD3yu2nsFHK4QVE5nZCmvsZCAOwzDQMLuTXKd3UjgxqMjhsIunX5pkjgmQQ3XgyRHi1GefJc2aFRWvXmTSGTIyv%2B5240lV%2Fd2YcHV9zGwZlt%2Fh80%2Fhskw8mCWNQUNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7f0eb056bb-OSL
|
|
| flaredownload.com/assets/hl-477fd99d.js | 172.67.186.1 | 200 OK | 6.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-477fd99d.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash3dae6df083311e6e96aa212ee998fed6 76cb17ef637b7b446d5af868564a41e176b11566 1326a35b543779ca03dfaba96ab8dec22714178372c09aacaea3a1ec22a47b83
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-477fd99d.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1364
access-control-allow-origin: *
etag: W/"663e1dab-554"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NQeKS38662BWB5xEA1InHeoJgG0FXHnwQcMjoRxnHVH0qjY%2B8uvTBG6stfqcI9HLvml4oVeFttE%2F%2B0HpUGAMU75pAGOe97E8mgtSWGmnpyFHZUFjD84oXvMD4km7a7FhUZGducWysg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7f0ebf56bb-OSL
|
|
| flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png | 172.67.186.1 | 200 OK | 4.8 kB |
URL GET HTTP/3flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 190 x 108, 8-bit/color RGBA, non-interlaced Hash12e2bcc7cae9c2211a695df886e28e9b 0e31a94632d7efa8ca00b3d84b90f3e61fcc7322 cdebbfd2ef3531023cb60b657445e188a0e76824338edc4ada292ac7ab1e164f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/58294b522e31bd664bc6d1dd76cec438.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 4792
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-12b8"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5BsXSQaqY7Vblj8A2d0QKC22fFKzkjRqsai%2F%2BG6EzA31uLW%2BWK8VZaKuc17U6FiUXbLvyXUa6Pbu%2Bcsn%2FAgvlD8zrfDCQUEZq5jzJCfA2KKkDX9nTAxfZmkSnwgn%2F4l01vCp03TGzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f8068c756bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-edb2da2a.js | 172.67.186.1 | 200 OK | 2.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-edb2da2a.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash595751a12f2f2c094ca596e765eaa864 44f87ebd4cabc636f68c88190df3852baac0a713 2625b38cc38abf6327526f6fd4923b6e2150fa45c3a3334e44667ce649f7c812
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-edb2da2a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1413
access-control-allow-origin: *
etag: W/"663e1dab-585"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtBj%2BBObUNBy5G9z80yhrQZ4qvbmn0orXKHPaJfIDPCvmXoonV0BDx6mGl7dYpSnB4BPlbOhBHbk4TCV4wNYQmwPz6JwQBbl%2BBG0Wge2hFs2KQYTmjdDiPDvrfCnH4iXT%2FQ30ByOCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f7c2b2256bb-OSL
|
|
| flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png | 172.67.186.1 | 200 OK | 723 B |
URL GET HTTP/3flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hashba8f10079cf5a5f5cffd4312e047db3d 2864af04fbdb64a20c8e1c2615a0401fca4bc956 e157263323db5ea8e56113a9119f4733b0a8130563d87e20e1b3575f4f22620c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/8cc59accec24f33766b15adf267e9641.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 723
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2d3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9XlrCcJw3P08JTRoUky75%2FDWHUQAH0faUK8fye%2FSWn9AYhXJTahN0ck%2FMjD1pE6CdjiDdRFsdBpGC2T4SwZ34FzaCFBcPWyfzfKFKTvn4idQSiKdifzBNCdqeWro%2FJ%2Bth6eXl%2BaSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f8068d156bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png | 172.67.186.1 | 200 OK | 220 B |
URL GET HTTP/3flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 72 x 48, 4-bit colormap, non-interlaced Hashf1063acb225b213d5fa9b231ee16cd25 e549decdc41f5ee29e75387f32470d90ee772787 4ee13f508c5a43754521cc34fd490bfb72daa996baaa558fa8638586371b1752
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/db126da1b71e69a76e54d2f4139a347c.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 220
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYUJV8thoNmGTeyKXV10e70sqH1UWLBso%2BS6u0UnDveOCJV%2BToZUgZuv8BHZhMsv1mvKoxyTr0qw2tRLx0%2F%2B41ilnCrxxwQbkJQuYYEpgUCFm8q%2FB6XUm6R3zNmZCjEUpcTq9GVShQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f8068d456bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png | 172.67.186.1 | 200 OK | 736 B |
URL GET HTTP/3flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash3e81792d1c3c845ca714ccb6d622a5cb 370d33f46430e85060c11f8d0d325b963743e738 039b1d9bc03573a402798799c1d0dbef6f03979e51ccf3576d2cfb07112b4145
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 736
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2e0"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DuH63%2BKyapLzr0OOcHoTaDP1qFuQUKxJI%2F6Zb5xLvvjWo8FfJaFVV0SaoD%2BJCJWRaiGl4XQcGuXbcy71B5D5WftJBugpv0Ud%2FPcbTGH6yS3JZJr%2FBNuXcC2qpjZgJL0HV8ogWcRjrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f8068d556bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/f1239f7cb9bbbfc719d60b288619d7de.png | 172.67.186.1 | 200 OK | 113 kB |
URL GET HTTP/3flaredownload.com/prod/images/f1239f7cb9bbbfc719d60b288619d7de.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 993 x 546, 8-bit colormap, non-interlaced Size113 kB (113379 bytes) Hashd8d5a5e33a87b192a74126bbaf431726 febdcfef57d6d6d8a7b81c46f30d47a065d7e0df f09f3901c52fc5ec1650f763efcd1f2b41694db31a6d3e135a1c5cf020e1e490
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/f1239f7cb9bbbfc719d60b288619d7de.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 113379
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1bae3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iSCRfAon74RKU8e0LIGKJCqOvnrKN1%2F8M9%2F8eHIaLQDaHm%2FIPq9l6TMCNT%2BdKsekQHRVecWpDfXQqrSV3HoUIveoOVA9QMjRIQ4uz3sz4jJ4w9ygluFYbKn0yDEyqBdnYRuzJggOug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f8068d756bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png | 172.67.186.1 | 200 OK | 110 B |
URL GET HTTP/3flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 48 x 48, 1-bit colormap, non-interlaced Hash09d6a9ebc45af5c5367f0a216e6234d7 357bb5d08644fbe599d34d165652dc19afe0df9c 5fda2ac54507259375f4107937b24a9c42302725c816cfd1620e84a526c734b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/a032b8243950801928214bc5092e9764.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 110
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-6e"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d8%2FKASo2%2FfzVvmX5AcdhTjFhvcu6%2FcmQZpl6CH80cUd4Me3V6IFdcXP3PrCoE8CToHvZjZQtKmZid2drJQyZkeGQ%2FQJuSgPVWV4gLDUu66uiloOigoEDQny1doS%2FCj3EZvTXfrYdNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f8068d356bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg | 172.67.186.1 | 200 OK | 607 kB |
URL GET HTTP/3flaredownload.com/prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1258, components 3 Size607 kB (606551 bytes) Hash2296953043efaeb814b4ac9aa91b1edd 9947df98a24084f16562735b335d14d574f84d82 25d11bd085d802574f8fc54f57abea5572f97b91b0d0c89429736e7d5ba6567c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/jpeg
content-length: 606551
cf-bgj: h2pri
access-control-allow-origin: *
etag: "662b9304-94157"
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FoLlIWg8aPmmh8rrxYvZZvjeFkvPq%2FgDxPA6xTnTDilLuSHKiwNulLxaw0TrfQUlYkFsZa4%2FV5z4eDjPt4XB7L0b7npoCzz3YLFBv9EdhoZUczQtXdxu1wnDtxNJrN9YnoLq5TrHcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f80990c56bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-f7944c84.js | 172.67.186.1 | 200 OK | 134 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f7944c84.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Size134 kB (133535 bytes) Hash8f67005e19aa6960621c7cbd5d112e2f 80df32ad5e226ee5feb30f80af96ac97edc1bbf4 5630db96eaba97c09a2b1567e445356396e06aca2fa7cc988ce858055f0b182b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f7944c84.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2842
access-control-allow-origin: *
etag: W/"663e1dab-b1a"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g9eDlCaAgbDRlKKK8bEm7UzofQamoBg1LAhWkNwH2BFGHgmhPM2Zy5WATjRDYqjAU9ewJTVanb586qwisQG3xnBkneg6X6qgDRl8G%2BJoe93m9MgW8FlJYZCo4uaqDY0siiuKxrliSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f80389456bb-OSL
|
|
| flaredownload.com/assets/hl-d7413dd4.js | 172.67.186.1 | 200 OK | 19 kB |
URL GET HTTP/3flaredownload.com/assets/hl-d7413dd4.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashd1886b578ac49c4d76be946b1530abdb e53df4108e63faa654af34c67374680642f23395 63f184fc8bf2ce2cdb191d5ea7daf24c6922e62f2d3f07e799d7f1cfc967cfd2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-d7413dd4.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5041
access-control-allow-origin: *
etag: W/"663e1dab-13b1"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4v%2B0oAE9NKXhwA6Rb7yoxNXFCX%2BuhUx1KvZxYh09T3ejCduMBYcgUXXNAIBnuZsluXyZ%2B9Yiwmf09CwAMjMlizOsnOabtiFgaY8sWXZ%2B91bxpPS8VT3ZErs6xT9okpLPey5F%2BWVzNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7f0ebc56bb-OSL
|
|
| flaredownload.com/assets/hl-3e162dba.js | 172.67.186.1 | 200 OK | 24 kB |
URL GET HTTP/3flaredownload.com/assets/hl-3e162dba.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash1dc3593c55f75c27c53fc90ea15df483 b200653bfd35c50a4bbc10348025049361c03329 c9e50c7ea481337af75b9d23d0e8304fa0a585f5f21d1dc495eaf46b53338ff2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3e162dba.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=780
access-control-allow-origin: *
etag: W/"663e1dab-30c"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2u2R%2BpfW9jq6vrHVe%2BgENsonEBJihQv7gukpTjCPPuYnGU7k%2B5py%2BTE5P223syGtXDVp6Aj6WrbsjQkP4uhrfVDjjPo%2FyW%2FKsR09w7w9Yf3tD9SLY%2BDYlIx1i637Mbbb%2F3YY9gZYSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f80389556bb-OSL
|
|
| flaredownload.com/assets/hl-403ae525.js | 172.67.186.1 | 200 OK | 24 kB |
URL GET HTTP/3flaredownload.com/assets/hl-403ae525.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash78908684a44ded2fbbb6daf2084f584d 6bc69bc08aff879df4d902a4f4291e46f159dedc cb5a9f4648055c7af544951bb833004944516904ed6379d2de253e9613b85f08
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-403ae525.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=688
access-control-allow-origin: *
etag: W/"663e1dab-2b0"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ULlQi7irXf7X16QoHcU8LXFEOVd4Hu51f5u2bYef130EcorZnzm71XUG4HomO4g%2B7TkNfYdBOKBfkZJN%2FZ%2BiiA0TKhSYWLS%2BL7x4uhtOFRmcC7Z8HvX62JD9NI8%2BR2Fe5l6F9iC%2Fag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7f0eb656bb-OSL
|
|
| flaredownload.com/assets/hl-3e162dba.js | 172.67.186.1 | 200 OK | 18 kB |
URL GET HTTP/3flaredownload.com/assets/hl-3e162dba.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashf54c23e715819a40c63ed3bd408d2c48 45fe4aa56a21968380a9b920af935e5c4c8458ac 1837c47d13224bb726dd04161e43020d3ade538abaf02aaa8efd4895f8bc55fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3e162dba.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7413dd4.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=780
access-control-allow-origin: *
etag: W/"663e1dab-30c"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2u2R%2BpfW9jq6vrHVe%2BgENsonEBJihQv7gukpTjCPPuYnGU7k%2B5py%2BTE5P223syGtXDVp6Aj6WrbsjQkP4uhrfVDjjPo%2FyW%2FKsR09w7w9Yf3tD9SLY%2BDYlIx1i637Mbbb%2F3YY9gZYSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f8078de56bb-OSL
|
|
| flaredownload.com/assets/hl-35a77ba0.js | 172.67.186.1 | 200 OK | 36 kB |
URL GET HTTP/3flaredownload.com/assets/hl-35a77ba0.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashd0fe69b677f348cfc29cc20beca52dcd 0be2ae77343b562609cd64867366570ea37bf1ee 4eb248810ee33eb5fbabeef1df43ff11d62b97d4e8ca7273968d8864dd0b8fdf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-35a77ba0.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72018
access-control-allow-origin: *
etag: W/"663e1dab-11952"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y55ii%2BKFKY98j%2F%2BcSjB3ARdLne9Sq%2Bra3JKFImvoNur1xBF7JKhEmW6VB%2BhrbBVDIuF2n5QTmEFk6VUaHT47CzoR%2F%2BpZvpEEhzsz2%2BNuRXQPhM1bwdPrY%2Fqtyw1TFMZkNVMZNL70bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7f1ecd56bb-OSL
|
|
| flaredownload.com/assets/hl-7899f489.js | 172.67.186.1 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-7899f489.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (7803), with no line terminators Hasha7f21f940847a7851be6ea8dfcd1798f 3c8337b90d2705482190060e4753ba47e542b101 654d4cfb510abbc4fd095349a78188acf1e0f002f05206058df65f8befabb5f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-7899f489.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7114
access-control-allow-origin: *
etag: W/"663e1dab-1bca"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5oy%2FYX603VH%2Fm1YYd3Fa%2BOGMr1npdlQebYluemFdnw2lbk8eJz0foP4vjlgLqI6yfQiVeVdbarfNkLCa9PyV6WoznKpQoylq8KIPud6N8FPp0EE1XNEaFbGepZgSeo7R5%2Fx28vQ2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7d7ca956bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-70789bd7.woff2 | 172.67.186.1 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-70789bd7.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17372, version 1.0 Hashc02fb7419b8629666bf2ccc0a5177e3d b70b21a3e6e55fbcbae137a3cbb4e05371c2bab6 70789bd70be9b6d68acd51063e499d6fe5e7fe53a654dab4fb00a8cf5bfe3637
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-70789bd7.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/octet-stream
content-length: 17372
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-43dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YnjsAQlPKI5d9gsolAg7q74j%2FQQCCldjoTcerxacFkjo0Dwe4o8yR9Q0NEkpe%2B2eefxnfcXAK7CoomU%2BncLzgv%2BHFatGvsLfkHSJDRb1pepDwlVZSJ67zwsZAGObKtVl5YMX7giZDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f819a7256bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/b8951ec12fcbc404228c41b98bf7dc05.png | 172.67.186.1 | 200 OK | 917 B |
URL GET HTTP/3flaredownload.com/prod/images/b8951ec12fcbc404228c41b98bf7dc05.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashae126dcdf8581afd4f5287e47a865c4b 467a70ace4e8ba22c6d060de9a51041158c93d0f 584e53768bb90991e7b60eb7ecc2c5d9c26dd9a4f782a104030348c9b82cf473
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/b8951ec12fcbc404228c41b98bf7dc05.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: image/png
content-length: 917
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-395"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZG8gN5SOeskEqQm8M5OkCdEzsZwFy0MuPZQvR%2FjOGaR82eOtXs7iAm%2Bf5Gja6Sotn93EkhP1%2FarH6gMKOKfhT%2Fzu14czwakYuTq2JeCBxV7xYbat70EK2ILXaP6qWFiQX34ouNQyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f7f5f4b56bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-cf3f4bed.js | 172.67.186.1 | 200 OK | 616 B |
URL GET HTTP/3flaredownload.com/assets/hl-cf3f4bed.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (636), with no line terminators Hash2a3bbe6510e64eb71330aa25b6f34bbf 163f7e9cbccc12d1e821ce09603c9bf19967347a 66931426516ecefdb38150e24f6e804d2ca8449c8bd0fb95e6cfc6f4ce5fdf63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-cf3f4bed.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663e1dab-269"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zn%2BK%2BoaOqlFTid69iHr0WWuFmt1uGcNa9a9C689F5HD%2FHyHmD0es%2FOyptyOWJK2sdXxr7Z9A4NgTyQQRSadLHjGw6unq2trj%2B4ac8RZgIx0NP8gUvJE9ujN79Ht9OdK1p0F6oyn%2Bxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f80389956bb-OSL
|
|
| flaredownload.com/assets/hl-f93eab01.js | 172.67.186.1 | 200 OK | 5.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f93eab01.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5349), with no line terminators Hashf17f382b29a6610b8e82222383751bcd 11f196f6c512d368f5ebed5a795f3bcca017a757 028f8085e2b4738395bc0410e3dfdeb72aa681e8f7c15ed76a040b16b78965c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f93eab01.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-a61a69c3.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663e1dab-13c2"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2K6H99%2FJ9qXGKHCbz9qzYyxKPLOHLeRRchUuWvym7b4Aab5v1MxOez%2FOB3w14hgcrY20YCcQvnKF8zQViQPrQhI61eeuVL%2BenDpxlXWECUCYY0fiaDJf28542TUYq2ST%2BNh8KRXgmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f7c4b4256bb-OSL
|
|
| flaredownload.com/assets/hl-06c5bc34.js | 172.67.186.1 | 200 OK | 418 B |
URL GET HTTP/3flaredownload.com/assets/hl-06c5bc34.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (440), with no line terminators Hashf337bbc143b59ab9ade9e12ee268a4c6 41e5f6efb8b4120e0f3cea55996b91cc989a973f c1a982f0f0250be07ac8c2baf85042557bb2a9a026bd6c3856319ae40abfcf31
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-06c5bc34.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-f93eab01.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663e1dab-1a3"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=APcuaSduoKTA2n8nJxTfuYlxBaGt0GAXfY4ie1AYG6qRkz3UmafRCDA%2B4P5oa%2FTw6YZADFFcky3aeB%2FX7ckdN%2Bs1sbOIL9t6AzkVQ8VbSTpFWZ5PVguC5yQHU%2FyP2CaKjzuqN9EJEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f7c9b9b56bb-OSL
|
|
| flaredownload.com/assets/hl-cf3f4bed.js | 172.67.186.1 | 200 OK | 616 B |
URL GET HTTP/3flaredownload.com/assets/hl-cf3f4bed.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (636), with no line terminators Hash2a3bbe6510e64eb71330aa25b6f34bbf 163f7e9cbccc12d1e821ce09603c9bf19967347a 66931426516ecefdb38150e24f6e804d2ca8449c8bd0fb95e6cfc6f4ce5fdf63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-cf3f4bed.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7413dd4.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663e1dab-269"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zn%2BK%2BoaOqlFTid69iHr0WWuFmt1uGcNa9a9C689F5HD%2FHyHmD0es%2FOyptyOWJK2sdXxr7Z9A4NgTyQQRSadLHjGw6unq2trj%2B4ac8RZgIx0NP8gUvJE9ujN79Ht9OdK1p0F6oyn%2Bxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f8078e156bb-OSL
|
|
| secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com | 104.21.77.48 | 200 OK | 8.1 kB |
URL GET HTTP/2secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com IP104.21.77.48:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
File typeJavaScript source, ASCII text, with very long lines (8385), with no line terminators Hashb45c7286594795de3b392f6f8942604d 51239b08544394e811b8fdcc3bdc1df3832256e5 d1cfecd1075f9a9eea50304717a1fbd7cf2601c2d2bc80c698d4136846fdbef7
GET /scripts/push/script/02eyoyxdkz?url=flaredownload.com HTTP/1.1
Host: secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript;charset=UTF-8
content-length: 2521
content-encoding: gzip
expires: 0
cache-control: max-age=14400, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: HIT
age: 902
last-modified: Fri, 10 May 2024 16:47:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BYbMOFXsa10gL9kVAx0kl82QSj3dXkb9u3WDZdAet8kw9qZlJb17%2Fwi%2B0HoJGXZJY1DfR6LjXTHoAwJJH%2Fq5P2rsizAF9VtsMtXZDqFo0BmVWRxv2LNCdVwtz4oreUtWfD88rXI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f7cc83c568f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-04d68de7.css | 172.67.186.1 | 200 OK | 114 kB |
URL GET HTTP/3flaredownload.com/assets/hl-04d68de7.css IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (65329) Size114 kB (114023 bytes) Hash038b389697202a86001d7cb8b113803c c031ffb6795766b1babac743602c2d386b4e8d03 232cf36617bb2fd98321cbcd5fd0eb0cfbcf9b69c85a4d6e7d5134fc549436ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-04d68de7.css HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=114555
access-control-allow-origin: *
etag: W/"663e1dab-1bf7b"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m1JvYZPncLYQ6sIiSz6bD51EYK7mPaZ1XA0Aln%2B24%2FDaanRy19ploOsUjX8JBUlTBKlPs4cslEAy%2BqvZsYiHE8cIEooLCjDC5xDaAl0W%2FFnDHYQcbHUWpLhOpYMHrvIYFdTemyvQ0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7d7ca756bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-496efccd.js | 172.67.186.1 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-496efccd.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash201d2c9e10aef47f2c60adb088eddbca 3b51d623b713e3073e64554691514acb1b26b3d4 f0400932289b6c0f0bd6463f83ee79758ddf69bde7076580a3e4a7be8dc9df5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-496efccd.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663e1dab-394"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g6RxvtTKLGp0j5bZi%2FZdC0BTkMtVu%2Bq%2B2ZDqVlvWN9HqcnDYQZNXPgoeSXnV%2FK6LVq8cQ0WmFPiPIwiV1sw0m2NANs%2F2PwezlWGb4F%2FSMVLcMaTm9epP807t9E6h6McY%2BKnFFKVI5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7d7cb456bb-OSL
|
|
| flaredownload.com/assets/hl-de833af9.js | 172.67.186.1 | 200 OK | 690 B |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (704), with no line terminators Hash25a523c7c0658e2bf768f0e26f59fbd8 fdae37e60c01daf3551830ba3639873e313e6495 37c6c8ba37235a274a7739b7021a9ea8104d57dd951ede499d1691f28175fb59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663e1dab-2b3"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbLO4f%2BBFgX2lcUYFYAmF6fTAhIwUIrB24uyEHibXFRkb2Wksrb7FMEQ8FtT72EpTujmaGiVm2kxtOHufpFSd%2BQMrrN9FcYM0VmRTzplrXqBnkITXJ8bGDBvlpWE6WCluW2gMFiI0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7d9cf756bb-OSL
|
|
| flaredownload.com/favicon.ico | 172.67.186.1 | 200 OK | 4.3 kB |
URL GET HTTP/3flaredownload.com/favicon.ico IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash1ba2ae710d927f13d483fd5d1e548c9b c0605efed936ee2600284e6480521d06fa64f872 db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: image/x-icon
last-modified: Wed, 13 Sep 2023 08:04:59 GMT
etag: W/"65016d2b-10be"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8CPF%2Bcjbuk7CfWhkVyYhU4zQF4tbpvgAaR09cyFow1M%2BE7E5vLRVHpdqJ8f32EtvaCwBNEBbFM90x6YY5%2FAoxanReKZDdesvJvLlSyq7w0nADcmeijcZ9rtW6byOmYoEC0PscQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b7f7b9a6456bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-7899f489.js | 172.67.186.1 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-7899f489.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (7803), with no line terminators Hasha7f21f940847a7851be6ea8dfcd1798f 3c8337b90d2705482190060e4753ba47e542b101 654d4cfb510abbc4fd095349a78188acf1e0f002f05206058df65f8befabb5f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-7899f489.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-49fdde2e.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7114
access-control-allow-origin: *
etag: W/"663e1dab-1bca"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5oy%2FYX603VH%2Fm1YYd3Fa%2BOGMr1npdlQebYluemFdnw2lbk8eJz0foP4vjlgLqI6yfQiVeVdbarfNkLCa9PyV6WoznKpQoylq8KIPud6N8FPp0EE1XNEaFbGepZgSeo7R5%2Fx28vQ2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7ede6256bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-1ae908b8.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-1ae908b8.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1960), with no line terminators Hashb2de30e038bbe44532129fabeb5af605 92e6c97c44f4ab23285feef3a3bc8220d7204630 13ba2512fbbae7576598cf3b7b90803da70bbaa2e9d0e5d0079f91027cdcca8c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-1ae908b8.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-cf3f4bed.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1923
access-control-allow-origin: *
etag: W/"663e1dab-783"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2e1K63n7ButpJl%2FcSoepEHLtzHt%2FNblHOKVdwU5FGhQkArEEXhwKr8Z17jxUsNw0tkVYkQ0ET8elXaRF48smsdSSJdLPdfh4XXuxeDPhCldCNxQBhPnL9VcrB6HZeXYGx9BDLodfYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f81fae956bb-OSL
|
|
| flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= | 172.67.186.1 | 200 OK | 417 B |
URL User Request GET HTTP/2flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= IP172.67.186.1:443
CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeHTML document, ASCII text, with very long lines (456), with no line terminators Hashf4b1b13cfac0ef257175a471507f9568 670e119712eabb3d72b52f8ca4d5c07598488cd5 79d0bafc8ab07f259876416bbbb4b386ce4934c871cf764790031e4c3cf180df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 17:02:36 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CNMrOFhNXDrOcEvGlMX3ZJ9Q%2FV7BQOqHG%2FdpV5WN7jXzX%2FCuSghGvQIFZOO3NSDsHHbnFu9oSkm%2Br9qYtEogTK99xcQQC1zjcyU1ZrmnbWkh4IoWwHTiwvhmrFj%2F49IxiFM1FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f77097356a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/visit/get-data?landingId=7867&subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource= | 172.67.186.1 | 200 OK | 14 kB |
URL GET HTTP/3flaredownload.com/visit/get-data?landingId=7867&subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource= IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /visit/get-data?landingId=7867&subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sentry-trace: e71a87d7b9ce4ef59d3f8c5dead98fde-8665f2ca27ab65a4-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=e71a87d7b9ce4ef59d3f8c5dead98fde,sentry-sample_rate=0.1,sentry-sampled=false
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/json; charset=UTF-8
set-cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; path=/; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nTmc5IGsfdspxnSYDhOmU9%2FziafA9Fiye8I8L4cFV1cxSs%2BVn309a0ji%2BcDN0j5cKZTNA2M%2BfY%2BTwir2XZRO59MnxMBMg1t8VvGtOaSWYAJ1fLM7nYyEZdzTw4FWDICZKJ6HNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f7ae91a56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700 | 142.250.74.106 | 200 OK | 8.7 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700 IP142.250.74.106:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (8956), with no line terminators Hash91804c0df51e58b0bf469561e1ac2732 cc5a9023e310b49ef8f8ae32bb89ea774fe116ec 8a8aed46bfb9cdec8e34e76343b7e66796cf09926aef42efdfe5fa8a1fdda8aa
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 17:02:37 GMT
date: Fri, 10 May 2024 17:02:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-c3c0d3f4.woff2 | 172.67.186.1 | 200 OK | 24 kB |
URL GET HTTP/3flaredownload.com/assets/hl-c3c0d3f4.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23484, version 1.0 Hashb4d2c4c39853ee244272c04999b230ba c82e22dde9716c40ba20e6c7ed03a1b66556de15 c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-c3c0d3f4.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/octet-stream
content-length: 23484
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-5bbc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BHwSgtDe84D9pK3FCbSBLhi70%2Fgg03%2BhgdrewIUqfVQvi7nByRvojGaOQQCPk1eicP9XhTGSAnaAbK6HFBiPe8QljALkccSidD%2BIX3i6jGWycmVJMh%2Fcjh0BPomTLBRx0tdp%2BRVDTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f80e97956bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-a61a69c3.js | 172.67.186.1 | 200 OK | 268 kB |
URL GET HTTP/3flaredownload.com/assets/hl-a61a69c3.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size268 kB (267721 bytes) Hash7098d9d54596a85e29ba4fb43d7adb65 a00378fee4d268b6c0013e6dc628dc190a6ed99f f3331b5213a71df12356649e86b5f89b7f1e5ff0280fdecfbae3e56271a73c30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-a61a69c3.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=267744
access-control-allow-origin: *
etag: W/"663e1dab-415e0"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R015q3S16uZXw2uHbyG19V4FyqIYdrqKIZaOKM62xVvDSpsBzDCLsGJ3airo72kY%2F%2BuOIo3KMGC9V%2FgX2Rd300HK8rEVcEJ8mzBNHp7Aj%2F0A59uAV328CUcXi3Kh6gUiWB6u8q2EFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f7a2ffc56bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-f93eab01.js | 172.67.186.1 | 200 OK | 5.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f93eab01.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5349), with no line terminators Hashf17f382b29a6610b8e82222383751bcd 11f196f6c512d368f5ebed5a795f3bcca017a757 028f8085e2b4738395bc0410e3dfdeb72aa681e8f7c15ed76a040b16b78965c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f93eab01.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663e1dab-13c2"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2K6H99%2FJ9qXGKHCbz9qzYyxKPLOHLeRRchUuWvym7b4Aab5v1MxOez%2FOB3w14hgcrY20YCcQvnKF8zQViQPrQhI61eeuVL%2BenDpxlXWECUCYY0fiaDJf28542TUYq2ST%2BNh8KRXgmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f7c2b1b56bb-OSL
|
|
| flaredownload.com/assets/hl-a61a69c3.js | 172.67.186.1 | 200 OK | 268 kB |
URL GET HTTP/3flaredownload.com/assets/hl-a61a69c3.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size268 kB (267721 bytes) Hash7098d9d54596a85e29ba4fb43d7adb65 a00378fee4d268b6c0013e6dc628dc190a6ed99f f3331b5213a71df12356649e86b5f89b7f1e5ff0280fdecfbae3e56271a73c30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-a61a69c3.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=267744
access-control-allow-origin: *
etag: W/"663e1dab-415e0"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R015q3S16uZXw2uHbyG19V4FyqIYdrqKIZaOKM62xVvDSpsBzDCLsGJ3airo72kY%2F%2BuOIo3KMGC9V%2FgX2Rd300HK8rEVcEJ8mzBNHp7Aj%2F0A59uAV328CUcXi3Kh6gUiWB6u8q2EFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f7cec0056bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/lead/prefill | 172.67.186.1 | 200 OK | 64 B |
URL POST HTTP/3flaredownload.com/lead/prefill IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0a00dc476383c35bcfbc0ea44c3a60ea 36ebdfa0bfa4aa0ec8f4d7417d2112bae7d406db 819bd596583bc3bc638b2fa8d87d80b16551a1d68abb86261795db848cc226d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /lead/prefill HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
sentry-trace: e71a87d7b9ce4ef59d3f8c5dead98fde-9c8dae48e617d4e2-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=e71a87d7b9ce4ef59d3f8c5dead98fde,sentry-sample_rate=0.1,sentry-transaction=LandingHome,sentry-sampled=false
Content-Length: 56
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/json; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AgQUgRFlcDmDAWedH9GqZKAah243XHwgJjKKor9cx7ehCmIl3gPdO9BjfTji6wGYME1BjznAX5vyPuFyfr8xvRC9Ny2AVjEhH%2FOdzT5rtv8T7bqffn6a5ZX7igsiO8TnrDoKfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b7f80388d56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-3638d339.woff2 | 172.67.186.1 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-3638d339.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16860, version 1.0 Hash13049c7a16af3e830b7668f15f8e668a f9eca560164be1be239e42c43cf8bb07aa7d8f14 3638d33930adfd35323251395221e7b9e1f2a641e6a1ead6e9d18d09588a2cfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3638d339.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/octet-stream
content-length: 16860
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-41dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WtDqN%2F011wrWVLebij2Cn%2Fh00KsBeVXukWJ7muFW6%2FaGzdyvHB9m%2BGqBk7yjt9L1tzbxUIYbeQOlFh0UNO%2B9PTYjXs%2FZLQLmwW9ZvWOorJKi%2FpEYUiLjhHjK8eUzb%2BK6WKJx0oEtsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f80e97556bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-de833af9.js | 172.67.186.1 | 200 OK | 690 B |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (704), with no line terminators Hash25a523c7c0658e2bf768f0e26f59fbd8 fdae37e60c01daf3551830ba3639873e313e6495 37c6c8ba37235a274a7739b7021a9ea8104d57dd951ede499d1691f28175fb59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663e1dab-2b3"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbLO4f%2BBFgX2lcUYFYAmF6fTAhIwUIrB24uyEHibXFRkb2Wksrb7FMEQ8FtT72EpTujmaGiVm2kxtOHufpFSd%2BQMrrN9FcYM0VmRTzplrXqBnkITXJ8bGDBvlpWE6WCluW2gMFiI0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7f1eda56bb-OSL
|
|
| flaredownload.com/assets/hl-06c5bc34.js | 172.67.186.1 | 200 OK | 418 B |
URL GET HTTP/3flaredownload.com/assets/hl-06c5bc34.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (440), with no line terminators Hashf337bbc143b59ab9ade9e12ee268a4c6 41e5f6efb8b4120e0f3cea55996b91cc989a973f c1a982f0f0250be07ac8c2baf85042557bb2a9a026bd6c3856319ae40abfcf31
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-06c5bc34.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663e1dab-1a3"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=APcuaSduoKTA2n8nJxTfuYlxBaGt0GAXfY4ie1AYG6qRkz3UmafRCDA%2B4P5oa%2FTw6YZADFFcky3aeB%2FX7ckdN%2Bs1sbOIL9t6AzkVQ8VbSTpFWZ5PVguC5yQHU%2FyP2CaKjzuqN9EJEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f7c2b2156bb-OSL
|
|
| flaredownload.com/assets/hl-496efccd.js | 172.67.186.1 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-496efccd.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash201d2c9e10aef47f2c60adb088eddbca 3b51d623b713e3073e64554691514acb1b26b3d4 f0400932289b6c0f0bd6463f83ee79758ddf69bde7076580a3e4a7be8dc9df5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-496efccd.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-7899f489.js
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:37 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663e1dab-394"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g6RxvtTKLGp0j5bZi%2FZdC0BTkMtVu%2Bq%2B2ZDqVlvWN9HqcnDYQZNXPgoeSXnV%2FK6LVq8cQ0WmFPiPIwiV1sw0m2NANs%2F2PwezlWGb4F%2FSMVLcMaTm9epP807t9E6h6McY%2BKnFFKVI5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 11
server: cloudflare
cf-ray: 881b7f7f0eab56bb-OSL
|
|
| flaredownload.com/assets/hl-1ae908b8.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-1ae908b8.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1960), with no line terminators Hashb2de30e038bbe44532129fabeb5af605 92e6c97c44f4ab23285feef3a3bc8220d7204630 13ba2512fbbae7576598cf3b7b90803da70bbaa2e9d0e5d0079f91027cdcca8c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-1ae908b8.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1923
access-control-allow-origin: *
etag: W/"663e1dab-783"
last-modified: Fri, 10 May 2024 13:14:19 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2e1K63n7ButpJl%2FcSoepEHLtzHt%2FNblHOKVdwU5FGhQkArEEXhwKr8Z17jxUsNw0tkVYkQ0ET8elXaRF48smsdSSJdLPdfh4XXuxeDPhCldCNxQBhPnL9VcrB6HZeXYGx9BDLodfYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
server: cloudflare
cf-ray: 881b7f80389d56bb-OSL
|
|
| flaredownload.com/assets/hl-28a0afe6.png | 172.67.186.1 | 200 OK | 132 kB |
URL GET HTTP/3flaredownload.com/assets/hl-28a0afe6.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 490 x 310, 8-bit/color RGBA, non-interlaced Size132 kB (132079 bytes) Hash663a088b73ce519c38adbad79e82d659 39ef28b09af2fdcf7f683c58efc18a43bd9e121f 28a0afe680833c1a10601e37f8a86a59b13f0e10aa03b9f5a5c53848639f77ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-28a0afe6.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: image/png
content-length: 132079
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-203ef"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dhj5WgVU8LGjMi0gUNa0hkDml6nSvOk67qJUFzqWU5NUCBchw5Ir%2FZcNfwNP%2BpjWlOw17J%2B8IhZDXlHiMlPdbECGHSWzaoaO9ss8E5HsqlEo4IymHZo579ggtZPR1LHNDZcKdvN6Jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f80b93056bb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-8d3ca80f.woff2 | 172.67.186.1 | 200 OK | 23 kB |
URL GET HTTP/3flaredownload.com/assets/hl-8d3ca80f.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=0b00fe3f-8d5a-4267-b0c7-76c2582dee7a&networkid=200347&publisher=23e2e47d&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22992, version 1.0 Hash1efbd38aa76ddae2580fedf378276333 8a49976f2470ba2a1db6144245355d3b889312e4 8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8d3ca80f.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7a7f6a4af73954d4a24d639d2b39e98a7c8daa809209e8d66cdd7ebbd732838ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%225ca3a9b2a6a7606c416f55c136ab5fbc%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%2223e2e47d%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%220b00fe3f-8d5a-4267-b0c7-76c2582dee7a%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 17:02:38 GMT
content-type: application/octet-stream
content-length: 22992
last-modified: Fri, 10 May 2024 13:14:19 GMT
etag: "663e1dab-59d0"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZhYfBPLBwYedlWXiQ0FdZPBDpI5ccGqYyGIkBIdbeMT6hwmw5HDl9j46wr5vJuISLsdgVCF%2FLKPnRyrkoxzmxGa9WKqlEY1nPnSfGdhBqAxVFdtw%2BMeXKFEf1FOsyHNTIY3Sq5JA%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 12
accept-ranges: bytes
server: cloudflare
cf-ray: 881b7f818a5f56bb-OSL
alt-svc: h3=":443"; ma=86400
|
|