| flaredownload.com/assets/hl-e8f6c714.js |  104.21.19.111 | 200 OK | 854 B |
URL GET HTTP/3flaredownload.com/assets/hl-e8f6c714.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (561), with no line terminators Hash08609a6fe6041939e6a3c8c2b08d6cb7 c0798b503bfdf44e70131f4b7b625a7c3ed37087 2d883c786dda057a8e7cd9d10323177d3ff709cd9e179800ecb7c84ef546dc93
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e8f6c714.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiYjVhNjRlNzk5NGJkMTljNCIsInRyIjoiZjYyYWVlNzMyZWMwY2ZiNzM3ODVkZmIwNTE1YmM2NGIiLCJ0aSI6MTcxNTE5MjE2NTgwM319
traceparent: 00-f62aee732ec0cfb73785dfb0515bc64b-b5a64e7994bd19c4-01
tracestate: 2895455@nr=0-1-2895455-535907537-b5a64e7994bd19c4----1715192165803
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=562
access-control-allow-origin: *
etag: W/"663b4ae5-232"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hgdB98wf5PM%2FqlKdyFSrcNLMVqHvkmpmJZnSr5geeRn%2B1mRsr4hg%2F18TYx%2F7HVXCRFOw88osQSWffE7comM5jcHxls86uc6URuEvsr%2BfxlePA0X6VOlhbr%2Fxmtgf4jN72270eBjxMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c49b4b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-6b57f3eb.js | 104.21.19.111 | 200 OK | 23 kB |
URL GET HTTP/3flaredownload.com/assets/hl-6b57f3eb.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (2077), with no line terminators Hashd82fc4545c17e9a4fd5cf23d0fb23ebc d61f71ec9903f3c5d3dbcb691ac4430126e5f02a 9ad6a4f6428e29e2f5b2f89e55d20c8575002987398cd280b5596331ea06d986
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-6b57f3eb.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiYjZiNzAwYTg3YjUzOTNiMSIsInRyIjoiNTU0MGYwMTYxMDFlYTAwNWZiZGNjYzY5Y2M1NGRiNjMiLCJ0aSI6MTcxNTE5MjE2NTcwMX19
traceparent: 00-5540f016101ea005fbdccc69cc54db63-b6b700a87b5393b1-01
tracestate: 2895455@nr=0-1-2895455-535907537-b6b700a87b5393b1----1715192165701
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2078
access-control-allow-origin: *
etag: W/"663b4ae5-81e"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JMIHy%2FViVZ%2BHIIYf8NsR1Jfv6CrEgWzXUO3QfTUpyCeHGGW9iNnkXN%2BrvhTYPek1EwqehfjXITEc4FZLnPBLc7FrM1zIj9XGdwunRXPw3mt%2BY53LCqY9YyF8WGfsPw7W33fNuMmTUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705ba894b50f-OSL
content-encoding: br
|
|
| secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com |  172.67.204.164 | 200 OK | 3.5 kB |
URL GET HTTP/2secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com IP172.67.204.164:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
File typeJavaScript source, ASCII text, with very long lines (8142) Hashf0fab3cc04750bba62119045aad0cca4 c4bac1f34757d7d9553b0f9d23b1d419e908e62e 4590979b3d0fa22e8974e8b9d80124d0f02b6accbb154ff6e9c67b59e9fcf2c6
GET /scripts/push/script/02eyoyxdkz?url=flaredownload.com HTTP/1.1
Host: secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript;charset=UTF-8
expires: 0
cache-control: max-age=14400, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: EXPIRED
last-modified: Wed, 08 May 2024 14:08:05 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2BPlvst3y4nAJ9g1Fby%2FSk2ujMWbRcKLT3%2BqzYXMH19JG1Vl%2BcPcD7jrFWs0hkRMyY3h7DgWClzXZuvnY1sR2t%2BRjMDulhsDYVbT8R3%2Bc9Cdzp4Sb6TnfrPDIXGFRy0HQ7Jatco%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b705b5c19b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png | 104.21.19.111 | 200 OK | 5.4 kB |
URL GET HTTP/3flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 646 x 116, 8-bit colormap, non-interlaced Hashb169e30ad5cb8b0b613ae6c3006afbe0 b0f804da985ec024b15155f33084ee796d1abc0d 7f474dce0f1f49839379e2c6c1130a4a399ccfc5b173eb89dbbc28c83d75a803
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 5415
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1527"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZj%2BIA0UrpDDafJhRFQeF%2BSjBvGW%2FYl1UWXtdTMxWnvYpvpk3cmNxn3S5dakrz5PdremR7Uz%2FdVCfPzImgkX%2F8XVxQbt73yF01cGvJEeJJQ60rCRuJLU%2BxsapUle6YjRlo6DxRk37g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705e6ddeb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png | 104.21.19.111 | 200 OK | 4.8 kB |
URL GET HTTP/3flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 190 x 108, 8-bit/color RGBA, non-interlaced Hash12e2bcc7cae9c2211a695df886e28e9b 0e31a94632d7efa8ca00b3d84b90f3e61fcc7322 cdebbfd2ef3531023cb60b657445e188a0e76824338edc4ada292ac7ab1e164f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/58294b522e31bd664bc6d1dd76cec438.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 4792
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-12b8"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5BsXSQaqY7Vblj8A2d0QKC22fFKzkjRqsai%2F%2BG6EzA31uLW%2BWK8VZaKuc17U6FiUXbLvyXUa6Pbu%2Bcsn%2FAgvlD8zrfDCQUEZq5jzJCfA2KKkDX9nTAxfZmkSnwgn%2F4l01vCp03TGzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705e6de5b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-e8f6c714.js | 104.21.19.111 | 200 OK | 1.5 kB |
URL GET HTTP/3flaredownload.com/assets/hl-e8f6c714.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (561), with no line terminators Hash08609a6fe6041939e6a3c8c2b08d6cb7 c0798b503bfdf44e70131f4b7b625a7c3ed37087 2d883c786dda057a8e7cd9d10323177d3ff709cd9e179800ecb7c84ef546dc93
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e8f6c714.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=562
access-control-allow-origin: *
etag: W/"663b4ae5-232"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hgdB98wf5PM%2FqlKdyFSrcNLMVqHvkmpmJZnSr5geeRn%2B1mRsr4hg%2F18TYx%2F7HVXCRFOw88osQSWffE7comM5jcHxls86uc6URuEvsr%2BfxlePA0X6VOlhbr%2Fxmtgf4jN72270eBjxMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 880b705ddcefb50f-OSL
content-encoding: br
|
|
| flaredownload.com/favicon.ico | 104.21.19.111 | 200 OK | 6.5 kB |
URL GET HTTP/3flaredownload.com/favicon.ico IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash1ba2ae710d927f13d483fd5d1e548c9b c0605efed936ee2600284e6480521d06fa64f872 db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: image/x-icon
last-modified: Wed, 13 Sep 2023 08:04:59 GMT
etag: W/"65016d2b-10be"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O4itw9R8XnuxzEm0bj7wvY9aPvq17h0V4p1k0ChAQAC475aK5a%2BjNpKk3bz8EsMtG6GNoemxecmTYNXpVEpJyu4xX0njwvugiutuGxCA418nkBhIw%2Bf7tajrvMvA8Ss0pZ65jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b7059edb5b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-ca68ddb2.js | 104.21.19.111 | 200 OK | 2.2 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ca68ddb2.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5057), with no line terminators Hashe0b467d48e3bf86c07aa3095520e3c60 b70a69375b927464b619a61e95a03430b1d1ef36 06e1b571b8ea2b758f4bd81f25188eaecbdda1029501a978f3930152d21717c4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ca68ddb2.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiZTc4N2M5MGFlMTg0NmQxYSIsInRyIjoiMzI3N2Q3ZjAwZGM5ZWE3YjYyOWY4YWQ1NjUyYTlmNTgiLCJ0aSI6MTcxNTE5MjE2NTUzMn19
traceparent: 00-3277d7f00dc9ea7b629f8ad5652a9f58-e787c90ae1846d1a-01
tracestate: 2895455@nr=0-1-2895455-535907537-e787c90ae1846d1a----1715192165532
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663b4ae5-13c2"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UetglSBUEeVzV1EQ6IUVcDHz%2BQoU2DrIyfM1E2zdI0sAGCVEiTjDMnj%2BI5uk2cBLo4DBMu3hS7inrwqnEOhQfGHRR8L35Dt7z4w%2Bb%2FJYiCMA4F0Cvf4K85UtN4V0brWKhb8N192wKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705a9ecab50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-0a51a8ee.js | 104.21.19.111 | 200 OK | 986 B |
URL GET HTTP/3flaredownload.com/assets/hl-0a51a8ee.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (418), with no line terminators Hasha9059598c68fa422e736795b4a8fe6be 32907bd711b42f18c0792ca8d4eaeb7f1a6ee51f 70018ec9ec28a9001d60b38cdfaa94dfb0f69f1990d83ce6e248df41606024b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-0a51a8ee.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiOTUyN2JhZDlmMTMyYjEzZCIsInRyIjoiOTJiMDlhMDdjMGViMjdlMDA1NDIxMDdiODhmZmE2ZjciLCJ0aSI6MTcxNTE5MjE2NTUzNH19
traceparent: 00-92b09a07c0eb27e00542107b88ffa6f7-9527bad9f132b13d-01
tracestate: 2895455@nr=0-1-2895455-535907537-9527bad9f132b13d----1715192165534
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663b4ae5-1a3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ORmQ%2FOKu5fMezXrqjI6%2BLBaLqUmOshA7eLqzyN4Ef2Lr7ukQdhe94IYVC91veq6RmeC9Jv6qpjOXP1SLyKWWhsjUJwWla%2FQ6MaIKCqjxFe3mh0eT%2FoZsdlsILLUfECPV6Ozy%2FOzkLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705a9ed2b50f-OSL
content-encoding: br
|
|
| flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png | 104.21.19.111 | 200 OK | 5.4 kB |
URL GET HTTP/3flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 646 x 116, 8-bit colormap, non-interlaced Hashb169e30ad5cb8b0b613ae6c3006afbe0 b0f804da985ec024b15155f33084ee796d1abc0d 7f474dce0f1f49839379e2c6c1130a4a399ccfc5b173eb89dbbc28c83d75a803
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 5415
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1527"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZj%2BIA0UrpDDafJhRFQeF%2BSjBvGW%2FYl1UWXtdTMxWnvYpvpk3cmNxn3S5dakrz5PdremR7Uz%2FdVCfPzImgkX%2F8XVxQbt73yF01cGvJEeJJQ60rCRuJLU%2BxsapUle6YjRlo6DxRk37g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705eeee6b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png | 104.21.19.111 | | 110 B |
URL GET flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png IP104.21.19.111:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 48 x 48, 1-bit colormap, non-interlaced Hash09d6a9ebc45af5c5367f0a216e6234d7 357bb5d08644fbe599d34d165652dc19afe0df9c 5fda2ac54507259375f4107937b24a9c42302725c816cfd1620e84a526c734b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/a032b8243950801928214bc5092e9764.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 110
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-6e"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d8%2FKASo2%2FfzVvmX5AcdhTjFhvcu6%2FcmQZpl6CH80cUd4Me3V6IFdcXP3PrCoE8CToHvZjZQtKmZid2drJQyZkeGQ%2FQJuSgPVWV4gLDUu66uiloOigoEDQny1doS%2FCj3EZvTXfrYdNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705eff09b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png | 104.21.19.111 | 200 OK | 736 B |
URL GET HTTP/3flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash3e81792d1c3c845ca714ccb6d622a5cb 370d33f46430e85060c11f8d0d325b963743e738 039b1d9bc03573a402798799c1d0dbef6f03979e51ccf3576d2cfb07112b4145
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 736
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2e0"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DuH63%2BKyapLzr0OOcHoTaDP1qFuQUKxJI%2F6Zb5xLvvjWo8FfJaFVV0SaoD%2BJCJWRaiGl4XQcGuXbcy71B5D5WftJBugpv0Ud%2FPcbTGH6yS3JZJr%2FBNuXcC2qpjZgJL0HV8ogWcRjrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f0f13b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/f1239f7cb9bbbfc719d60b288619d7de.png | 104.21.19.111 | 200 OK | 113 kB |
URL GET HTTP/3flaredownload.com/prod/images/f1239f7cb9bbbfc719d60b288619d7de.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 993 x 546, 8-bit colormap, non-interlaced Size113 kB (113379 bytes) Hashd8d5a5e33a87b192a74126bbaf431726 febdcfef57d6d6d8a7b81c46f30d47a065d7e0df f09f3901c52fc5ec1650f763efcd1f2b41694db31a6d3e135a1c5cf020e1e490
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/f1239f7cb9bbbfc719d60b288619d7de.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 113379
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1bae3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iSCRfAon74RKU8e0LIGKJCqOvnrKN1%2F8M9%2F8eHIaLQDaHm%2FIPq9l6TMCNT%2BdKsekQHRVecWpDfXQqrSV3HoUIveoOVA9QMjRIQ4uz3sz4jJ4w9ygluFYbKn0yDEyqBdnYRuzJggOug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f0f20b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png | 104.21.19.111 | | 220 B |
URL GET flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png IP104.21.19.111:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 72 x 48, 4-bit colormap, non-interlaced Hashf1063acb225b213d5fa9b231ee16cd25 e549decdc41f5ee29e75387f32470d90ee772787 4ee13f508c5a43754521cc34fd490bfb72daa996baaa558fa8638586371b1752
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/db126da1b71e69a76e54d2f4139a347c.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 220
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYUJV8thoNmGTeyKXV10e70sqH1UWLBso%2BS6u0UnDveOCJV%2BToZUgZuv8BHZhMsv1mvKoxyTr0qw2tRLx0%2F%2B41ilnCrxxwQbkJQuYYEpgUCFm8q%2FB6XUm6R3zNmZCjEUpcTq9GVShQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f0f11b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-28a0afe6.png | 104.21.19.111 | 200 OK | 132 kB |
URL GET HTTP/3flaredownload.com/assets/hl-28a0afe6.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 490 x 310, 8-bit/color RGBA, non-interlaced Size132 kB (132079 bytes) Hash663a088b73ce519c38adbad79e82d659 39ef28b09af2fdcf7f683c58efc18a43bd9e121f 28a0afe680833c1a10601e37f8a86a59b13f0e10aa03b9f5a5c53848639f77ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-28a0afe6.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 132079
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-203ef"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2wQyEB0CKBQagBhv63wdgXc6J%2FXui1%2Btc2LpjjFCHPIWz77TNO3JqsDwD9aOuPMeWEWJmt9CkjuNgE3t4nvkRjAqKvNWEdu5FvJ8%2FMu2OkzYWRlEDmp4m8TKaDJG8z2kj8quRQwdHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f5fa1b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-3638d339.woff2 | 104.21.19.111 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-3638d339.woff2 IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16860, version 1.0 Hash13049c7a16af3e830b7668f15f8e668a f9eca560164be1be239e42c43cf8bb07aa7d8f14 3638d33930adfd35323251395221e7b9e1f2a641e6a1ead6e9d18d09588a2cfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3638d339.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/octet-stream
content-length: 16860
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-41dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cQiDr4TGyNrqeIrzwleXWnP7pyyJ96XO19WmBWBuOcRW%2B8omUTDJeqsV6cVglM%2F8ZalR5bsIQJiF%2FeJln2da9w45FbyQqG%2B2hG8uYTGgv3aAVnS1YId8N6uumBFiI9NBpnzK3d%2FqkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f5fa4b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg | 104.21.19.111 | 200 OK | 607 kB |
URL GET HTTP/3flaredownload.com/prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1258, components 3 Size607 kB (606551 bytes) Hash2296953043efaeb814b4ac9aa91b1edd 9947df98a24084f16562735b335d14d574f84d82 25d11bd085d802574f8fc54f57abea5572f97b91b0d0c89429736e7d5ba6567c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/jpeg
content-length: 606551
cf-bgj: h2pri
access-control-allow-origin: *
etag: "662b9304-94157"
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FoLlIWg8aPmmh8rrxYvZZvjeFkvPq%2FgDxPA6xTnTDilLuSHKiwNulLxaw0TrfQUlYkFsZa4%2FV5z4eDjPt4XB7L0b7npoCzz3YLFBv9EdhoZUczQtXdxu1wnDtxNJrN9YnoLq5TrHcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f5f9cb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-8d3ca80f.woff2 | 104.21.19.111 | 200 OK | 23 kB |
URL GET HTTP/3flaredownload.com/assets/hl-8d3ca80f.woff2 IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22992, version 1.0 Hash1efbd38aa76ddae2580fedf378276333 8a49976f2470ba2a1db6144245355d3b889312e4 8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8d3ca80f.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/octet-stream
content-length: 22992
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-59d0"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jAPT2Jv4uDF69MDzQhNYT6qw5iMMxRLUTdndjThtmHlxIl8x2jEupv%2FNQxZUYprbKgYlfNPQ1eVXE9BWwk7jJvbBkC8ghAi%2B0udmwjyAT0EERc5mkKGqo%2BM2H3bJbEvgIxwgeKFtaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f8ffbb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-6b57f3eb.js | 104.21.19.111 | 200 OK | 18 kB |
URL GET HTTP/3flaredownload.com/assets/hl-6b57f3eb.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (2077), with no line terminators Hashd82fc4545c17e9a4fd5cf23d0fb23ebc d61f71ec9903f3c5d3dbcb691ac4430126e5f02a 9ad6a4f6428e29e2f5b2f89e55d20c8575002987398cd280b5596331ea06d986
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-6b57f3eb.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ca68ddb2.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2078
access-control-allow-origin: *
etag: W/"663b4ae5-81e"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JMIHy%2FViVZ%2BHIIYf8NsR1Jfv6CrEgWzXUO3QfTUpyCeHGGW9iNnkXN%2BrvhTYPek1EwqehfjXITEc4FZLnPBLc7FrM1zIj9XGdwunRXPw3mt%2BY53LCqY9YyF8WGfsPw7W33fNuMmTUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880b705ba8a2b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-c3c0d3f4.woff2 | 104.21.19.111 | 200 OK | 24 kB |
URL GET HTTP/3flaredownload.com/assets/hl-c3c0d3f4.woff2 IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23484, version 1.0 Hashb4d2c4c39853ee244272c04999b230ba c82e22dde9716c40ba20e6c7ed03a1b66556de15 c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-c3c0d3f4.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/octet-stream
content-length: 23484
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-5bbc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HWpbYvETh%2F7LsTGx7%2FCQfGQQUdM3keMTgf%2Bk4MwLMNumQgTLeQ9OlMOjNGGpKB3asCzOjdWTSxbfF1eFJBm7tOi4J7oGJQ0SyWH40GbdHijN8zlmJxu54TUe9eKSll%2BZtPTVSvoCvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f5fa7b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| event.secureanalytic.com/register/event_log/v9e179lqez | 104.21.77.48 | 200 OK | 0 B |
URL OPTIONS HTTP/2event.secureanalytic.com/register/event_log/v9e179lqez IP104.21.77.48:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/v9e179lqez HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://flaredownload.com/
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-headers: content-type
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
access-control-allow-methods: POST
x-frame-options: SAMEORIGIN
access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q9OFc4uK6wour6QvUkjg2nnxypOXW4M%2FUpEKtBsdJacaq7ESwRlZwdBKtudruLuB1vwQSdeiZLyqRGS8gG77ps4PWM9OSlA6B%2FHvzqg0aV%2FWTrgqx2yTmQCTRricvto8XWzEiyJKtpu7so0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b70610ef95699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-f1b986bc.js | 104.21.19.111 | 200 OK | 1.5 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f1b986bc.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1922), with no line terminators Hash2513dcb5ea3631b78496d56a1c8d7e9b c27b476069f6e67d22486fc20bd0f9fe841525d9 50ccfdf72d808f79166a95f190508636d3f5846abd39deb2ef6f05143421b2ee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f1b986bc.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-3bcd5885.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1923
access-control-allow-origin: *
etag: W/"663b4ae5-783"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sRjNQvRafvnne2c6EeJ%2FxLC1xDOkya78UGqXNRkmUrgsoHYOiRApU33Oy64WddjlTVnC0J%2F11BFbHd5IG%2Bh9lILJso13yZUPkAYLo3Tdu2gJ%2BwxwsOmb4GBOszpBvAZOg%2FB9Kfo7Nw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880b705fe8a3b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-1d2dcd13.js | 104.21.19.111 | 200 OK | 8.0 kB |
URL GET HTTP/3flaredownload.com/assets/hl-1d2dcd13.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (2841), with no line terminators Hashfde45abc6a6bb5d05caae33f6f5e1fd6 40bbf887a3ac624c4f0f59f77a95323b396ac50a 1c0416b4d6eeb452dac84a3f093336d5f6309c33cd23092f5643cd7ac22d4872
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-1d2dcd13.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiZjgyMzY2OTdkYzVjYWFjMiIsInRyIjoiNjBjM2QxMzEzMzI1MWIwYTg1ZDVmM2FiYjAxNzg3M2IiLCJ0aSI6MTcxNTE5MjE2NjIwN319
traceparent: 00-60c3d13133251b0a85d5f3abb017873b-f8236697dc5caac2-01
tracestate: 2895455@nr=0-1-2895455-535907537-f8236697dc5caac2----1715192166207
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2842
access-control-allow-origin: *
etag: W/"663b4ae5-b1a"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3rr2N%2BGITRNMmgJTrfCtzIwuVsszitI8U4R43Tbk50uEXl%2FrgXsKVDM304DdXaL%2BzRALTF2OJwvyLSgWHn%2F%2BSU2d1P7oQKoRGENerDKh7k8ipf1XXnICUFp5XktDWt%2BL3pC%2FTkBRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705edeafb50f-OSL
content-encoding: br
|
|
| event.secureanalytic.com/register/event_log/v9e179lqez | 104.21.77.48 | 200 OK | 0 B |
URL OPTIONS HTTP/2event.secureanalytic.com/register/event_log/v9e179lqez IP104.21.77.48:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/v9e179lqez HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/
Content-type: application/json
Content-Length: 103
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: SAMEORIGIN
access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sw0TESJRYJW3JARCSTyVqpTetUBDiumP4b2h5HdbcCXJxbNU6VElxfNDlbGSe89BAOdEsH8fWIPC0CqKjq5QxdERHZPS0eBH7YSoxGyrTPddcnFuRVeVMz6cOrVTnf1qsLw8u7aBqVrQE50%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b7061d8655699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-be61e397.js | 104.21.19.111 | 200 OK | 3.8 kB |
URL GET HTTP/3flaredownload.com/assets/hl-be61e397.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJava source, ASCII text, with very long lines (779) Hashbfa9cb2394b197ac7142712649a4e204 211a5a893b499a01ca584cc4e5ba6757046e963a 563c18159bfd480bd4501243a05bc0bb7de0faef6222174bc59401110ab9a856
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-be61e397.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-e2569f25.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: W/"663b4ae5-30c"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8s8B5jEOBuUyEI0qdhNhRu11DdAZw7HiQYx7VWf53qCUiRMhSQY%2FS2lXRulXpjpfrOReBnDs84WrcoZeP5%2B1RArNtkzjsCXwr5AZpyT96dS0S%2BpUS2SzYhT6LMbVgdmuO9V6zOBEIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880b705f2f51b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-edb2da2a.js | 104.21.19.111 | 200 OK | 9.5 kB |
URL GET HTTP/3flaredownload.com/assets/hl-edb2da2a.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1410), with no line terminators Hash0fb9d8a5fba7f6a569da52896f965ea3 6e57202028341c2674083acf9e428817c6725c6c 30137b4b0317a40d0c195fff2b2cd054bb39adf2fb94d357f269cb36e3c11581
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-edb2da2a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiYTVkZDNjYzY3OGE4ZDc5MiIsInRyIjoiOGU4MjdhODZiM2FmOTlkYmViMGM0OGQxMDdkYWYzMjEiLCJ0aSI6MTcxNTE5MjE2NTUzNH19
traceparent: 00-8e827a86b3af99dbeb0c48d107daf321-a5dd3cc678a8d792-01
tracestate: 2895455@nr=0-1-2895455-535907537-a5dd3cc678a8d792----1715192165534
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1413
access-control-allow-origin: *
etag: W/"663b4ae5-585"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QiBLwKiZCCy4c4L%2FG6ntICB2q8ooeoJ8zAUkCWhRcKZ4PpwY9CqKnaIqlmoeVZYuOUkoRogyWu6SwsrlsTfPYfa425gr7FV8dvFr88H1%2F2c6sTg%2BBXU%2BFZkVisJ4GDlLZsrm3cGbrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 586
server: cloudflare
cf-ray: 880b705a9ed6b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-0a51a8ee.js | 104.21.19.111 | 200 OK | 7.0 kB |
URL GET HTTP/3flaredownload.com/assets/hl-0a51a8ee.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (418), with no line terminators Hasha9059598c68fa422e736795b4a8fe6be 32907bd711b42f18c0792ca8d4eaeb7f1a6ee51f 70018ec9ec28a9001d60b38cdfaa94dfb0f69f1990d83ce6e248df41606024b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-0a51a8ee.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ca68ddb2.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663b4ae5-1a3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ORmQ%2FOKu5fMezXrqjI6%2BLBaLqUmOshA7eLqzyN4Ef2Lr7ukQdhe94IYVC91veq6RmeC9Jv6qpjOXP1SLyKWWhsjUJwWla%2FQ6MaIKCqjxFe3mh0eT%2FoZsdlsILLUfECPV6Ozy%2FOzkLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880b705b682bb50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-35a77ba0.js | 104.21.19.111 | 200 OK | 36 kB |
URL GET HTTP/3flaredownload.com/assets/hl-35a77ba0.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (37102) Hashf87da472e47dc575b6cb8dc377d18916 bff262654ae71f3be0a658cfbe5a53c787c05d55 5c38207c92f3650eaef6616521c8b1e0a03ceb384030f1c2b67cb75e25925ca8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-35a77ba0.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiZGQwY2I1ZTYxOTEyZjU4MSIsInRyIjoiMDdkOTA1NzdjZTY2ZDI2OTA0MWY3MWFiYmEyZjg0ZmQiLCJ0aSI6MTcxNTE5MjE2NTgwNn19
traceparent: 00-07d90577ce66d269041f71abba2f84fd-dd0cb5e61912f581-01
tracestate: 2895455@nr=0-1-2895455-535907537-dd0cb5e61912f581----1715192165806
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72018
access-control-allow-origin: *
etag: W/"663b4ae5-11952"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mlsjzSn30JdBHiEPrbWyC8tYkeUnjWL%2BTfP%2B4MUqe5jN%2FX27otGXz9FSG7Ne2NFLYggFa2yGS3O4I59ktW9%2Bw1OK49YGia9ykjUKqehl%2BYaK7R9ssH2w7F%2FfCSioNd0YFr%2BkqbqTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c59d1b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-9cba352e.js | 104.21.19.111 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-9cba352e.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (687), with no line terminators Hash18b3295430e62d055f6cd64b6122076a 081bb8260ca16f2e092ff9a87d12edbc00e0b863 0d1e255bf2be97a37cbf0c31b45d874fd2fccaa56d9aa78257fd9dd1b6511260
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-9cba352e.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiOTdhMmI3NTU2MWRiMGI2ZSIsInRyIjoiNmIwMzI5ZWU1NjNlYmZhZTBlOTI4MDJjYTQ3MzJlOTQiLCJ0aSI6MTcxNTE5MjE2NTgwNH19
traceparent: 00-6b0329ee563ebfae0e92802ca4732e94-97a2b75561db0b6e-01
tracestate: 2895455@nr=0-1-2895455-535907537-97a2b75561db0b6e----1715192165804
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=688
access-control-allow-origin: *
etag: W/"663b4ae5-2b0"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iHtWE8qrqE9KRXfy4IRd2aDVvH5ibj095zoecInDfHkvBmfIXdN6NSF8ouopmAkwlFAlRlph39vr014S05G3G0UgHruLo0k2TX7Y2P08qiJj98kgMm%2Fv56Dl%2FavXJWFvL5PHy1GUAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c59bdb50f-OSL
content-encoding: br
|
|
| flaredownload.com/prod/images/b8951ec12fcbc404228c41b98bf7dc05.png | 104.21.19.111 | 200 OK | 917 B |
URL GET HTTP/3flaredownload.com/prod/images/b8951ec12fcbc404228c41b98bf7dc05.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashae126dcdf8581afd4f5287e47a865c4b 467a70ace4e8ba22c6d060de9a51041158c93d0f 584e53768bb90991e7b60eb7ecc2c5d9c26dd9a4f782a104030348c9b82cf473
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/b8951ec12fcbc404228c41b98bf7dc05.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 917
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-395"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZG8gN5SOeskEqQm8M5OkCdEzsZwFy0MuPZQvR%2FjOGaR82eOtXs7iAm%2Bf5Gja6Sotn93EkhP1%2FarH6gMKOKfhT%2Fzu14czwakYuTq2JeCBxV7xYbat70EK2ILXaP6qWFiQX34ouNQyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705e5dcab50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png | 104.21.19.111 | 200 OK | 723 B |
URL GET HTTP/3flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hashba8f10079cf5a5f5cffd4312e047db3d 2864af04fbdb64a20c8e1c2615a0401fca4bc956 e157263323db5ea8e56113a9119f4733b0a8130563d87e20e1b3575f4f22620c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/8cc59accec24f33766b15adf267e9641.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 723
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2d3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9XlrCcJw3P08JTRoUky75%2FDWHUQAH0faUK8fye%2FSWn9AYhXJTahN0ck%2FMjD1pE6CdjiDdRFsdBpGC2T4SwZ34FzaCFBcPWyfzfKFKTvn4idQSiKdifzBNCdqeWro%2FJ%2Bth6eXl%2BaSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705efefab50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-10816a60.js | 104.21.19.111 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-10816a60.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (1423), with no line terminators Hash56d24893184889bc8960d965b5c284a9 f60b6489e9f990e917d4d74bf4ce78b434e2a60f 792bc543b01fd2be05752f95d9c30ecfdccf16e2a3d95365e26f82ebfdd32f67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-10816a60.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiZTc4OGMzMDRjMGE2MTFhZCIsInRyIjoiMDgzZTIwODY5YmUwM2M1ZTRlZWM2MzBmZjdkYzc4NGUiLCJ0aSI6MTcxNTE5MjE2NTgwOH19
traceparent: 00-083e20869be03c5e4eec630ff7dc784e-e788c304c0a611ad-01
tracestate: 2895455@nr=0-1-2895455-535907537-e788c304c0a611ad----1715192165808
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1364
access-control-allow-origin: *
etag: W/"663b4ae5-554"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tA1phAbXndpch9mnQh66hiC%2FWvYzfwIHCuAlqS26%2FH0Nvr16GXr9VFGj1R4RGGWXV1xtJJCqGyzltGqf5N0id6AW%2BgHqjFgsKX7IO5wE8CqnrZu5sqXyXi%2FVOPC2Q4ns382sC1NxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c69d9b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-3bcd5885.js | 104.21.19.111 | 200 OK | 616 B |
URL GET HTTP/3flaredownload.com/assets/hl-3bcd5885.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (636), with no line terminators Hash7c4ce1f0e8d27a6af8edf023e306ada7 744bf9756d970639fb0ecd0326ecaa423a698494 ae107ad4a9e2538139721bc12136d986b6cbcca032bfb115ce0877718128723f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3bcd5885.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiYWU3OGNhMjA0MWJjYjY4ZCIsInRyIjoiNDQ0MmQ3YjRhOWE0ZWRiYzM1ZDUyY2Q4YzM4NDc3N2MiLCJ0aSI6MTcxNTE5MjE2NjIxMH19
traceparent: 00-4442d7b4a9a4edbc35d52cd8c384777c-ae78ca2041bcb68d-01
tracestate: 2895455@nr=0-1-2895455-535907537-ae78ca2041bcb68d----1715192166210
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663b4ae5-269"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fhvm3yzj%2BZnVUxu1uS4YwHxDo%2BxJ00Bd%2BlGomNKpP6iLlEClbPOwyykdB5p1psiLplXb2fScpjeSMHV4SgBhJG3ZEPZbGaMQjxeQ3Qt9JUJpaM6SBoUu6Oiyjq11OylNfcYcJ09pUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705eeed8b50f-OSL
content-encoding: br
|
|
| flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png | 104.21.19.111 | 200 OK | 1.1 kB |
URL GET HTTP/3flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 142 x 116, 8-bit colormap, non-interlaced Hashcf1125dc9e8565471095b2315121607f 4587708c5f5abb1f9e5edfa01df0db5231dc6384 b6834940fa7f64a908522d2f88d6487b2da1580f6ae729e7cb8f7088c9b9204e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 1089
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-441"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5O2dz2jsF5%2B92QiiWR6BhHu1kxduQ5mSWcYIAoNzUxy5xjFWFhLG%2Fl4VSrO%2FthPxeuTKmjVblI4cyR5eHXYlrSWE0betP4SqRRJOuOq6RrL0AtXDQPRPXAE2aNArF3Vma15MG73abw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705efef0b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-8e006de9.js | 104.21.19.111 | 200 OK | 529 B |
URL GET HTTP/3flaredownload.com/assets/hl-8e006de9.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (555), with no line terminators Hash74bc761cff0b4741c8b14654c2937ddc 5b5685ce47e3eaf74e9881513ae1c860ce0fb7f1 270d6c614d45f6dd85cfcc23df458348b44a2ada9617ae3c5e592d3d9a7ce91c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8e006de9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiZmMwMWVlYzZiODdiYjhhZCIsInRyIjoiMDQ3YWY4ZjBhZjg3YzU1NDJkY2M0Y2Y5NDFkNzg0YWMiLCJ0aSI6MTcxNTE5MjE2NTgwMH19
traceparent: 00-047af8f0af87c5542dcc4cf941d784ac-fc01eec6b87bb8ad-01
tracestate: 2895455@nr=0-1-2895455-535907537-fc01eec6b87bb8ad----1715192165800
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=530
access-control-allow-origin: *
etag: W/"663b4ae5-212"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VKcJ1f2t%2BPt0rTip5b07yjtcChWHk2rhxFOThqO6oSaD1%2Fz2FAu5wAjTSJbuW1tMJ5ySBXdBPt2dCyA2eTXR04x9hGZsayGEXJ37M2iMjqfJtWoM4WudkM%2BdgyHnMApwkKXejV66Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c49a8b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-d7856d82.js | 104.21.19.111 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-d7856d82.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (7803), with no line terminators Hashdcddd9b1beb76e9abad1be7ea5f5b465 55f2ccb1efb1ff4592821a30b600eb3ad6151b14 3eccfda7f500f621c0f40744f0657594f34a3847471a3eea4abbec19556f5aca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-d7856d82.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiMjEzOTBhMGRiNjE4MDcxOCIsInRyIjoiYjQ5YzRiYjlmM2I4ZWI0YjdiMjRiZjJkY2NkYzliY2UiLCJ0aSI6MTcxNTE5MjE2NTc5OX19
traceparent: 00-b49c4bb9f3b8eb4b7b24bf2dccdc9bce-21390a0db6180718-01
tracestate: 2895455@nr=0-1-2895455-535907537-21390a0db6180718----1715192165799
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7114
access-control-allow-origin: *
etag: W/"663b4ae5-1bca"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C0Xree4E6KLz19GwyO0c%2BJDdyzkZkE0u2PXd43wwOvr4qfZvF3I%2BkwqgGgBvYGXtQWWfdUo3z4mxDFAYwinainB%2B5ZauFQh7v5jfnKHFxplxr6kn0XwsL%2FuOBUWxK5RZ4wNlfmtFCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c499cb50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-e2569f25.js | 104.21.19.111 | 200 OK | 5.0 kB |
URL GET HTTP/3flaredownload.com/assets/hl-e2569f25.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5314), with no line terminators Hash75995ffd262ce54106bfcaa9219ef58f 0fc40318b1be1006bb9b1f22bdeda06630846285 210c9da4173ce271dedd66be785bf44a93966d92faccc6307a40161c91d1fd85
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e2569f25.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiMDk5YjYyNjViMzhhODNlNyIsInRyIjoiODQ1MzQwMjk3YmRhMjVhODI1NmQxZjIxMTJhZTIxZjAiLCJ0aSI6MTcxNTE5MjE2NTgwNX19
traceparent: 00-845340297bda25a8256d1f2112ae21f0-099b6265b38a83e7-01
tracestate: 2895455@nr=0-1-2895455-535907537-099b6265b38a83e7----1715192165805
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5041
access-control-allow-origin: *
etag: W/"663b4ae5-13b1"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QY3TETq4BhCeWnrzRkysu25rOCUpPEwXbGY0aOs2sdFCdyKIR4Y06fUu5fVW1vduRmEvUfj8nXtro9xTphVVYkddYQ3eW8pMj7mGhwicF810JEDMYmWCKQgSresWzISJA1vG6r%2FyUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c59c5b50f-OSL
content-encoding: br
|
|
| flaredownload.com/lead/prefill | 104.21.19.111 | 200 OK | 64 B |
URL POST HTTP/3flaredownload.com/lead/prefill IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0a00dc476383c35bcfbc0ea44c3a60ea 36ebdfa0bfa4aa0ec8f4d7417d2112bae7d406db 819bd596583bc3bc638b2fa8d87d80b16551a1d68abb86261795db848cc226d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /lead/prefill HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg4OVFJWDRAFVFRTAQEHUFc=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiNDVhMDQ2YzRmOTBhNGQwNCIsInRyIjoiOTU3NDE5YzZiYWNmNWEyZjgyZDEzMTEyNzBiMDY0NWIiLCJ0aSI6MTcxNTE5MjE2NjIwMX19
traceparent: 00-957419c6bacf5a2f82d1311270b0645b-45a046c4f90a4d04-01
tracestate: 2895455@nr=0-1-2895455-535907537-45a046c4f90a4d04----1715192166201
Content-Type: application/json
sentry-trace: 9ebbab3d0089443e9053e8b95ce0966d-afe962f000a54480-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=9ebbab3d0089443e9053e8b95ce0966d,sentry-sample_rate=0.1,sentry-transaction=LandingHome,sentry-sampled=false
Content-Length: 56
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/json; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AHCSlClv5%2Biz2Uju0ZbS532rgwws06tH99D7GIewjc0EyrqDmO%2F8RXslVe%2FtV6jghxhWc1zpjJ1dGWDAGJ0fHweYSy%2FM%2FqUbxHQAlIrzdcEsJqize9fMaCQXZrXzUlvQeZ1QUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b705ece88b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= | 104.21.19.111 | 200 OK | 61 kB |
URL User Request GET HTTP/2flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= IP104.21.19.111:443
CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeHTML document, ASCII text, with very long lines (59335) Hasha6c7fe055985dc777ef4576a92e99aae bfbfd5a164c73fa05e11d9ced70c95c85b18b09b 1b6b308e965ea58738d86c85167adab21e192d5f6efc7f622c33c886c5cb9875
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 18:16:04 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SWH1wrB9i6dwoD1oXWirJP6A7mGJCz0kpTNiAO0ELbZvdr9YUQMgO6LBMTzddWLbn1e0jjg8uYjceA96FcoKXd6VpV62KahoFgsfvZLEEekQ4dRxScWTqIZRIBTyMhGBO9YxIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b7054dda4b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-ac0f3d90.js | 104.21.19.111 | 200 OK | 268 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ac0f3d90.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size268 kB (267685 bytes) Hash144400b2159179d446f86490a79c7be9 a756e385940bb142be7c6d54ac37565dd245d82a 46a6e9359ddb1f887d8c865e0caf2037c83aec329aeca13d504aeb81e17d49e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ac0f3d90.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=267708
access-control-allow-origin: *
etag: W/"663b4ae5-415bc"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PmwzkkutEe%2FH6MAi%2B%2F2Yl2Y7OaGeAJtjVWHsTtR6KeNt2rpSb346mn738MX8cV2jgJkJ81UfWzwtBPxP7HzVdYk2nC3V7wTyYq3iEWMfNWqlgkEMBVJglrJQe12C4rlWfsFKswtOTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b7057b9ddb50f-OSL
content-encoding: br
|
|
| flaredownload.com/visit/get-data?landingId=7867&subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource= | 104.21.19.111 | 200 OK | 14 kB |
URL GET HTTP/3flaredownload.com/visit/get-data?landingId=7867&subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource= IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /visit/get-data?landingId=7867&subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: Vg4OVFJWDRAFVFRTAQEHUFc=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiMDgzNDVjMjViMGNmNDk3MiIsInRyIjoiZjJhMGFhOGI5ZGI1MGFmN2E3YWU5ZTExOTc5NmFjMDciLCJ0aSI6MTcxNTE5MjE2NTI1Nn19
traceparent: 00-f2a0aa8b9db50af7a7ae9e119796ac07-08345c25b0cf4972-01
tracestate: 2895455@nr=0-1-2895455-535907537-08345c25b0cf4972----1715192165256
sentry-trace: 9ebbab3d0089443e9053e8b95ce0966d-b28303f913271ddb-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=9ebbab3d0089443e9053e8b95ce0966d,sentry-sample_rate=0.1,sentry-sampled=false
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/json; charset=UTF-8
set-cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; path=/; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W0RVVkiBmv%2B0l2hcQFJLWQ%2F1d5qc9JrUtQcX7L5uQxfm0PHBjAufaq1ReO2BDzbiyYpUYpEfWJDo2IKgUw4uhxg04178RAs8Y1nF%2FiKVrA94fD9OEZNiKWraZHvvqVa52fwIww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b7058ebf2b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-174bb060.js | 104.21.19.111 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-174bb060.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash12bcc39d49f0f8ac37fe5e398081fdf1 f158861f98bc6c8dd75fc7b7f6b3b0631e62401b 7a8f91af99ee1390dd9533577681aae34565792e41688822ebe39b9e7a211f6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-174bb060.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiNDljNTgyZDFkZjg0Yjg1ZiIsInRyIjoiNGZkNjEwZjhlNjJhMDdjODI3NjI2MTI2Y2E0NTYwYzQiLCJ0aSI6MTcxNTE5MjE2NTgwMn19
traceparent: 00-4fd610f8e62a07c827626126ca4560c4-49c582d1df84b85f-01
tracestate: 2895455@nr=0-1-2895455-535907537-49c582d1df84b85f----1715192165802
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663b4ae5-394"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBF41In3%2FakrGcl1umG1XKIHXKYk9Ny2Cb9h3JMyU9HPtVo4ueyra2B6p8JB%2FPPt36q%2FTyf%2BG1xszRnuTlcKU1qv0SPFXBVq6Ukg2IQBhmu6bqWVTLQe57nuZZc31%2FNt2tN0kIVVmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c49adb50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-174bb060.js | 104.21.19.111 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-174bb060.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash12bcc39d49f0f8ac37fe5e398081fdf1 f158861f98bc6c8dd75fc7b7f6b3b0631e62401b 7a8f91af99ee1390dd9533577681aae34565792e41688822ebe39b9e7a211f6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-174bb060.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663b4ae5-394"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBF41In3%2FakrGcl1umG1XKIHXKYk9Ny2Cb9h3JMyU9HPtVo4ueyra2B6p8JB%2FPPt36q%2FTyf%2BG1xszRnuTlcKU1qv0SPFXBVq6Ukg2IQBhmu6bqWVTLQe57nuZZc31%2FNt2tN0kIVVmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 880b705ddce8b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-ac0f3d90.js | 104.21.19.111 | 200 OK | 268 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ac0f3d90.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size268 kB (267685 bytes) Hash144400b2159179d446f86490a79c7be9 a756e385940bb142be7c6d54ac37565dd245d82a 46a6e9359ddb1f887d8c865e0caf2037c83aec329aeca13d504aeb81e17d49e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ac0f3d90.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiMTkyNmIxZDgwN2NmYWQ3NSIsInRyIjoiMzQzMzlmNDE5ZDVkMmQ1YzRlYzg3ZDNmZjg0YzFjNGEiLCJ0aSI6MTcxNTE5MjE2NTcwM319
traceparent: 00-34339f419d5d2d5c4ec87d3ff84c1c4a-1926b1d807cfad75-01
tracestate: 2895455@nr=0-1-2895455-535907537-1926b1d807cfad75----1715192165703
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=267708
access-control-allow-origin: *
etag: W/"663b4ae5-415bc"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PmwzkkutEe%2FH6MAi%2B%2F2Yl2Y7OaGeAJtjVWHsTtR6KeNt2rpSb346mn738MX8cV2jgJkJ81UfWzwtBPxP7HzVdYk2nC3V7wTyYq3iEWMfNWqlgkEMBVJglrJQe12C4rlWfsFKswtOTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880b705ba8a0b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-10816a60.js | 104.21.19.111 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-10816a60.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (1423), with no line terminators Hash56d24893184889bc8960d965b5c284a9 f60b6489e9f990e917d4d74bf4ce78b434e2a60f 792bc543b01fd2be05752f95d9c30ecfdccf16e2a3d95365e26f82ebfdd32f67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-10816a60.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1364
access-control-allow-origin: *
etag: W/"663b4ae5-554"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tA1phAbXndpch9mnQh66hiC%2FWvYzfwIHCuAlqS26%2FH0Nvr16GXr9VFGj1R4RGGWXV1xtJJCqGyzltGqf5N0id6AW%2BgHqjFgsKX7IO5wE8CqnrZu5sqXyXi%2FVOPC2Q4ns382sC1NxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 880b705ded1bb50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-de833af9.js | 104.21.19.111 | 200 OK | 690 B |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (704), with no line terminators Hash25a523c7c0658e2bf768f0e26f59fbd8 fdae37e60c01daf3551830ba3639873e313e6495 37c6c8ba37235a274a7739b7021a9ea8104d57dd951ede499d1691f28175fb59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663b4ae5-2b3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXG9xPe%2FaK7QB6QyHLtkhD5qE2L%2BbxQDHkhg3k1Mqw%2Bx7yVF20XWFdM2205dMgfdxRWyy2XHbnhAdL3tC%2Bl%2FND7QJsHw2mQnlkQ%2FkgKrHLAkn8teUwq0cM5app6tXMjfocgYDYKLEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 880b705dfd32b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-3bcd5885.js | 104.21.19.111 | 200 OK | 616 B |
URL GET HTTP/3flaredownload.com/assets/hl-3bcd5885.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (636), with no line terminators Hash7c4ce1f0e8d27a6af8edf023e306ada7 744bf9756d970639fb0ecd0326ecaa423a698494 ae107ad4a9e2538139721bc12136d986b6cbcca032bfb115ce0877718128723f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3bcd5885.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-e2569f25.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663b4ae5-269"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fhvm3yzj%2BZnVUxu1uS4YwHxDo%2BxJ00Bd%2BlGomNKpP6iLlEClbPOwyykdB5p1psiLplXb2fScpjeSMHV4SgBhJG3ZEPZbGaMQjxeQ3Qt9JUJpaM6SBoUu6Oiyjq11OylNfcYcJ09pUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705f2f55b50f-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-8e006de9.js | 104.21.19.111 | 200 OK | 529 B |
URL GET HTTP/3flaredownload.com/assets/hl-8e006de9.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (555), with no line terminators Hash74bc761cff0b4741c8b14654c2937ddc 5b5685ce47e3eaf74e9881513ae1c860ce0fb7f1 270d6c614d45f6dd85cfcc23df458348b44a2ada9617ae3c5e592d3d9a7ce91c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8e006de9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=530
access-control-allow-origin: *
etag: W/"663b4ae5-212"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VKcJ1f2t%2BPt0rTip5b07yjtcChWHk2rhxFOThqO6oSaD1%2Fz2FAu5wAjTSJbuW1tMJ5ySBXdBPt2dCyA2eTXR04x9hGZsayGEXJ37M2iMjqfJtWoM4WudkM%2BdgyHnMApwkKXejV66Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 880b705ddce0b50f-OSL
content-encoding: br
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700 | 142.250.74.106 | 200 OK | 8.7 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700 IP142.250.74.106:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (8956), with no line terminators Hash91804c0df51e58b0bf469561e1ac2732 cc5a9023e310b49ef8f8ae32bb89ea774fe116ec 8a8aed46bfb9cdec8e34e76343b7e66796cf09926aef42efdfe5fa8a1fdda8aa
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 18:16:05 GMT
date: Wed, 08 May 2024 18:16:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-70789bd7.woff2 | 104.21.19.111 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-70789bd7.woff2 IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17372, version 1.0 Hashc02fb7419b8629666bf2ccc0a5177e3d b70b21a3e6e55fbcbae137a3cbb4e05371c2bab6 70789bd70be9b6d68acd51063e499d6fe5e7fe53a654dab4fb00a8cf5bfe3637
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-70789bd7.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/octet-stream
content-length: 17372
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-43dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UnZXDE0o6%2FeK3Q8egn0UvoiO160h%2BGamcMIiJqBi46cXyYG%2Bu4QZzNG5WOvSnGULteTdjeIb36N%2FwJVy5KwIMQIvWYzDdKNXmCSUMmeKUCttT5x55RgKXrgxxuftV8vW8Ge1cu7PfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705f8ffcb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-04d68de7.css | 104.21.19.111 | 200 OK | 114 kB |
URL GET HTTP/3flaredownload.com/assets/hl-04d68de7.css IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (65329) Size114 kB (114023 bytes) Hash038b389697202a86001d7cb8b113803c c031ffb6795766b1babac743602c2d386b4e8d03 232cf36617bb2fd98321cbcd5fd0eb0cfbcf9b69c85a4d6e7d5134fc549436ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-04d68de7.css HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=114555
access-control-allow-origin: *
etag: W/"663b4ae5-1bf7b"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=10VAOjjlidy%2FAPAu0gPbrpCnAeRvqsISnOztetgbRyyWymdHoFsCj7shnf%2B0z5tNlZwovssmXkvWMVyb%2FihNhVFgsCglBgzsyPJYP%2B3LF%2B%2FzgoHY%2FCupxuQ0V3YhAVahMuTxT9PnJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c398ab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png | 0.0.0.0 | | 0 B |
URL GET flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png IP0.0.0.0:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/8cc59accec24f33766b15adf267e9641.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| flaredownload.com/assets/hl-de833af9.js | 104.21.19.111 | 200 OK | 690 B |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (704), with no line terminators Hash25a523c7c0658e2bf768f0e26f59fbd8 fdae37e60c01daf3551830ba3639873e313e6495 37c6c8ba37235a274a7739b7021a9ea8104d57dd951ede499d1691f28175fb59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjI4OTU0NTUiLCJhcCI6IjUzNTkwNzUzNyIsImlkIjoiZDk1YjNmZjg5Y2MxNjEwYyIsInRyIjoiYzQxMzE0ODk1ZjVlMDYwYTQ5ZTIxNjUwMGZlOTNhMDEiLCJ0aSI6MTcxNTE5MjE2NTgwN319
traceparent: 00-c41314895f5e060a49e216500fe93a01-d95b3ff89cc1610c-01
tracestate: 2895455@nr=0-1-2895455-535907537-d95b3ff89cc1610c----1715192165807
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663b4ae5-2b3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXG9xPe%2FaK7QB6QyHLtkhD5qE2L%2BbxQDHkhg3k1Mqw%2Bx7yVF20XWFdM2205dMgfdxRWyy2XHbnhAdL3tC%2Bl%2FND7QJsHw2mQnlkQ%2FkgKrHLAkn8teUwq0cM5app6tXMjfocgYDYKLEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880b705c59d4b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-8521ea14.js | 104.21.19.111 | 200 OK | 3.2 kB |
URL GET HTTP/3flaredownload.com/assets/hl-8521ea14.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (3246), with no line terminators Hash96a3967b148d80524d5d53991dfc35e0 8d4475b0517d2e554a51546b705ec7b2f11d53eb 7fdeb56df8bd63925559d0eba00a69509e1326335da3a27e8554d02505e8c4ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8521ea14.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ac0f3d90.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3167
access-control-allow-origin: *
etag: W/"663b4ae5-c5f"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDRRWtA6H8wNp9PbCI9p8fuxLy1H27BPMQ0nlcz8enYA5Sz1MSMR9aAOJh%2BBeCA1H%2Bo87OMG5e7MDBjBgW3ouziuh77ooI5MruNm9td5GS26yZL0vwdOIlmDyjxjVZFiIBWusXrgwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 880b705a8ebeb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-e2569f25.js | 104.21.19.111 | 200 OK | 5.0 kB |
URL GET HTTP/3flaredownload.com/assets/hl-e2569f25.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5314), with no line terminators Hash75995ffd262ce54106bfcaa9219ef58f 0fc40318b1be1006bb9b1f22bdeda06630846285 210c9da4173ce271dedd66be785bf44a93966d92faccc6307a40161c91d1fd85
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e2569f25.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5041
access-control-allow-origin: *
etag: W/"663b4ae5-13b1"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QY3TETq4BhCeWnrzRkysu25rOCUpPEwXbGY0aOs2sdFCdyKIR4Y06fUu5fVW1vduRmEvUfj8nXtro9xTphVVYkddYQ3eW8pMj7mGhwicF810JEDMYmWCKQgSresWzISJA1vG6r%2FyUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 880b705ded16b50f-OSL
content-encoding: br
|
|
| flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png | 104.21.19.111 | 200 OK | 1.1 kB |
URL GET HTTP/3flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 142 x 116, 8-bit colormap, non-interlaced Hashcf1125dc9e8565471095b2315121607f 4587708c5f5abb1f9e5edfa01df0db5231dc6384 b6834940fa7f64a908522d2f88d6487b2da1580f6ae729e7cb8f7088c9b9204e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: image/png
content-length: 1089
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-441"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5O2dz2jsF5%2B92QiiWR6BhHu1kxduQ5mSWcYIAoNzUxy5xjFWFhLG%2Fl4VSrO%2FthPxeuTKmjVblI4cyR5eHXYlrSWE0betP4SqRRJOuOq6RrL0AtXDQPRPXAE2aNArF3Vma15MG73abw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880b705e7deeb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-d7856d82.js | 104.21.19.111 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-d7856d82.js IP104.21.19.111:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=c0f8c34f-fd15-4fa0-862f-ad11e01d2d36&networkid=200347&publisher=a88a0870&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (7803), with no line terminators Hashdcddd9b1beb76e9abad1be7ea5f5b465 55f2ccb1efb1ff4592821a30b600eb3ad6151b14 3eccfda7f500f621c0f40744f0657594f34a3847471a3eea4abbec19556f5aca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-d7856d82.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-6b57f3eb.js
Cookie: visitInfo::7867=7c299b282ee996363f71e05f53f2ab12e5d50d9182f1477f91dadeaaefd74b6aa%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22ba54bd3e246fa98a60e3079fd390263c%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%22a88a0870%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22c0f8c34f-fd15-4fa0-862f-ad11e01d2d36%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 18:16:06 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7114
access-control-allow-origin: *
etag: W/"663b4ae5-1bca"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C0Xree4E6KLz19GwyO0c%2BJDdyzkZkE0u2PXd43wwOvr4qfZvF3I%2BkwqgGgBvYGXtQWWfdUo3z4mxDFAYwinainB%2B5ZauFQh7v5jfnKHFxplxr6kn0XwsL%2FuOBUWxK5RZ4wNlfmtFCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 880b705dac81b50f-OSL
content-encoding: br
|
|