| cdn.cookielaw.org/scripttemplates/otSDKStub.js |  104.19.177.52 | 200 OK | 6.9 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/otSDKStub.js IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (21229) Hash0cd317a7b9c520801230e944f7d50e41 e3985ff0c2e8b1eaacb617c7c5af5bebfcbceda6 6f08699117c1f15f6d35e7b4380d12d18a1881f075e177b5853b1017a3307544
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript
content-length: 6882
content-encoding: gzip
content-md5: zgTRIDojRJmnmBTwUyI2Vw==
last-modified: Thu, 18 Apr 2024 12:14:40 GMT
etag: 0x8DC5FA11F9DF6DF
x-ms-request-id: 18a0208e-901e-0060-0caa-91451c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 14687
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe601db956c9-OSL
X-Firefox-Spdy: h2
|
|
| cdn.flowcode.com/cdn/RFDewiExtended-Semibold.woff2 |  172.64.145.98 | 200 OK | 41 kB |
URL GET HTTP/2cdn.flowcode.com/cdn/RFDewiExtended-Semibold.woff2 IP172.64.145.98:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectflowcode.com Fingerprint38:55:F4:53:54:85:2A:E5:6A:07:B3:68:51:82:C6:59:A3:03:93:70 ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), CFF, length 41112, version 0.0 Hashe4edaded41a3e10f13b64cd67052e985 ecb4f67c4d72f01f87ebcc1bd10a7155e91791b4 6ec660b1d276d884c988cc0a228f3dd2cb4528c067e9cf3a3840696152548ba8
GET /cdn/RFDewiExtended-Semibold.woff2 HTTP/1.1
Host: cdn.flowcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flow.page/
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/octet-stream
content-length: 41112
content-md5: 5O2t7UGj4Q8TtkzWcFLphQ==
last-modified: Thu, 20 Oct 2022 18:02:14 GMT
etag: 0x8DAB2C537C945AD
x-ms-request-id: d8af7502-d01e-0051-10e3-7a8db8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 2526126
expires: Fri, 18 Apr 2025 22:11:58 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
set-cookie: __cf_bm=BhR1R1iw2GRFjch8ddlkRqF6wVDjWMkbERRKBeQixcA-1713478318-1.0.1.1-X.8oxwF9kb2eYjHcwBi3XzZdEYZvRndTA4_iuxmJR1Spjxc0bFCZ.08MzchGKXN_g6tkPNwrpCPF8sPzdY6NxQ; path=/; expires=Thu, 18-Apr-24 22:41:58 GMT; domain=.flowcode.com; HttpOnly; Secure; SameSite=None
_cfuvid=3cYkAs_UiL_SYbZ1f1gyKIqG3PRralvH.jAYdnYeGKU-1713478318118-0.0.1.1-604800000; path=/; domain=.flowcode.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8767fe602b01b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flow.page/_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F91d9fa16-1f54-4658-9450-134bae6ca35e-profile-picture%3Fm%3D1708355974&w=256&q=75 | 104.18.41.197 | 200 OK | 4.3 kB |
URL GET HTTP/2flow.page/_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F91d9fa16-1f54-4658-9450-134bae6ca35e-profile-picture%3Fm%3D1708355974&w=256&q=75 IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp Hash8406ced12a7dab7805c5248e365ae84c a45e5394a6017d3b1e735d937452e28a433ae795 ea2b28cca98759721c07269201f484dc5086caf127b9a47b65af49af1d84aac7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F91d9fa16-1f54-4658-9450-134bae6ca35e-profile-picture%3Fm%3D1708355974&w=256&q=75 HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: image/webp
content-length: 4320
vary: Accept, Accept-Encoding
cache-control: public, max-age=31536000
etag: 6isozKmHWXIcByaSAfSE3FCGyvEnuaR7Za9Jrx2Eqsc=
content-disposition: inline; filename="91d9fa16-1f54-4658-9450-134bae6ca35e-profile-picture.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
x-nextjs-cache: MISS
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 8767fe601f56569f-OSL
X-Firefox-Spdy: h2
|
|
| flow.page/_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F8dd6cc29-bab8-4d31-8872-339a45805e26-background%3Fm%3D1708356017&w=1920&q=75 | 104.18.41.197 | 200 OK | 12 kB |
URL GET HTTP/2flow.page/_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F8dd6cc29-bab8-4d31-8872-339a45805e26-background%3Fm%3D1708356017&w=1920&q=75 IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp Hashff397941698421662838687b5ecf01da 0ae04a0b3569c39e0ed6403a1c92b81676cfebe5 b22a3afef8ee057ffd672b09c4096e759581ac1ae4ad75b7eb5753c446c1fe4d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F8dd6cc29-bab8-4d31-8872-339a45805e26-background%3Fm%3D1708356017&w=1920&q=75 HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: image/webp
content-length: 11764
vary: Accept, Accept-Encoding
cache-control: public, max-age=31536000
etag: sio6-vjuBX-9ZysJxAludZWBrBrkrXW361dTxEbB-k0=
content-disposition: inline; filename="8dd6cc29-bab8-4d31-8872-339a45805e26-background.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
x-nextjs-cache: MISS
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 8767fe601f55569f-OSL
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/94783-dda4c37b26f24f59.js | 104.18.41.197 | 200 OK | 4.2 kB |
URL GET HTTP/2flow.page/_next/static/chunks/94783-dda4c37b26f24f59.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (11098) Hash8460e3e75303b0c6d6ac220ad9d83a2d e7d4a25e1488be9ff2f1010085bbca07d26600b8 92de91a51d8d7cd513c86a43eb6ea99e862411ceb0e9b1afa83fd5249ee89084
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/94783-dda4c37b26f24f59.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Tue, 12 Mar 2024 18:07:57 GMT
etag: W/"2b8d-18e33d98448"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 3209860
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f42569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/eed4f849-6744-46e9-8b81-04d191129887/eed4f849-6744-46e9-8b81-04d191129887.json | 104.19.177.52 | 200 OK | 1.7 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/eed4f849-6744-46e9-8b81-04d191129887/eed4f849-6744-46e9-8b81-04d191129887.json IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash351bd0790ad627a46597cb19b04a37f2 3d894a9d4c57d947d24ee8bbe936996e239833bc 581fbf429408b9583b4bf0bcfcb0cf06d076175d9d617c6d6a7b95041ce6b657
GET /consent/eed4f849-6744-46e9-8b81-04d191129887/eed4f849-6744-46e9-8b81-04d191129887.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/x-javascript
content-length: 1683
cf-ray: 8767fe624de3b4ed-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 11730
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DB2A21351D033A
expires: Fri, 19 Apr 2024 22:11:58 GMT
last-modified: Tue, 21 Mar 2023 15:30:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: PjvzKxDpVu1k2Et+5Sub5Q==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 4aac90d8-e01e-0037-80d1-31eb2f000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/1267-9589cdc5f3690b05.js | 104.18.41.197 | 200 OK | 134 kB |
URL GET HTTP/2flow.page/_next/static/chunks/1267-9589cdc5f3690b05.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size134 kB (134522 bytes) Hash2198b014825cdbb5a0fa5d2f98ed039b 8edffb4acf6b142bce1413c7033e58b74e8edaf1 fb55de9b98376757f004215983dca440f3c7ad1604ca64a3c8831910be8afcfe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1267-9589cdc5f3690b05.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"565d9-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe601f4c569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/alexandria/v3/UMBCrPdDqW66y0Y2usFeQCH18mulUxBvI9r7TpbAFp4.woff2 | 216.58.207.227 | 200 OK | 11 kB |
URL GET HTTP/2fonts.gstatic.com/s/alexandria/v3/UMBCrPdDqW66y0Y2usFeQCH18mulUxBvI9r7TpbAFp4.woff2 IP216.58.207.227:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 10952, version 1.0 Hash94cf16075b5af4ccfef19fa1e2c119d3 c0426647947a276ed9e34da6f933a3cd58c5f52a d94381a6297446453e5f87f767ab1c4a6900766b7d08934a73890872a5e4a136
GET /s/alexandria/v3/UMBCrPdDqW66y0Y2usFeQCH18mulUxBvI9r7TpbAFp4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 20:43:23 GMT
expires: Tue, 15 Apr 2025 20:43:23 GMT
cache-control: public, max-age=31536000
age: 264515
last-modified: Mon, 20 Mar 2023 21:34:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202302.1.0/otBannerSdk.js | 104.19.177.52 | 200 OK | 100 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202302.1.0/otBannerSdk.js IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash9045efc42b2abbf31781d57f8830fa3d 1c06be604586fe79a4e438f1cc455f9f6bfc430d e70be2849f7e7f7f27dc4eb168538ef25474e4799e1a4a4d9aee01f57f4c5a3f
GET /scripttemplates/202302.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript
content-length: 99858
content-encoding: gzip
content-md5: +3NcDg7IRUqn5oCiPaN6Hg==
last-modified: Fri, 10 Mar 2023 03:55:12 GMT
etag: 0x8DB211B3FF3862E
x-ms-request-id: 276d37c8-b01e-0058-5632-0de1dc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 14674
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe64684e56c9-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/eed4f849-6744-46e9-8b81-04d191129887/0fa1c054-c9f1-4c43-b59f-ba8963e34160/en.json | 104.19.177.52 | 200 OK | 15 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/eed4f849-6744-46e9-8b81-04d191129887/0fa1c054-c9f1-4c43-b59f-ba8963e34160/en.json IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash9353f67ef8f6e9d61e0213dfd9d01bad 39b4a596ac068b45171984fe7804725e9669c790 1685b62047a1c5cde5ace3b0ba9f647783e6d6c7605b2e3a43cf6831978303ad
GET /consent/eed4f849-6744-46e9-8b81-04d191129887/0fa1c054-c9f1-4c43-b59f-ba8963e34160/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flow.page/
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/x-javascript
content-length: 14799
cf-ray: 8767fe652f52b4ed-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 11729
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DB2A2136881CBB
expires: Fri, 19 Apr 2024 22:11:58 GMT
last-modified: Tue, 21 Mar 2023 15:30:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: 6zhcm+X7YPY1CnyCqeKfsA==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 82d07f4e-201e-005a-1ad1-315f64000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202302.1.0/assets/otFlat.json | 104.19.177.52 | 200 OK | 3.0 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202302.1.0/assets/otFlat.json IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashe58c1d01601f109335f5c6307b6d9cd4 51643ecced6d8a4d672f9ba3f36d40d43f4a33ea 1df323c03e742ff217794c8ace2c647f3f0cf868c91d4396c166262ca1075acc
GET /scripttemplates/202302.1.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flow.page/
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/json
content-length: 3020
content-encoding: gzip
content-md5: JiPvkoWr8q46ry2my9HtEQ==
last-modified: Fri, 10 Mar 2023 03:55:05 GMT
etag: 0x8DB211B3B953477
x-ms-request-id: d5b47d86-001e-0010-27d1-31fceb000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 11729
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe656f7eb4ed-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202302.1.0/assets/v2/otPcCenter.json | 104.19.177.52 | 200 OK | 12 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202302.1.0/assets/v2/otPcCenter.json IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash41e74cbe9aef15a5ce1a704d0d4be82e 019edb948b551fe3458bce3c78d1bfde388ff02d 70fd7f6ced21739e10103744c72acdfc8e8422502d74d4fad2ddfab3aed0bbc5
GET /scripttemplates/202302.1.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flow.page/
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/json
content-length: 12548
content-encoding: gzip
content-md5: hC2e8A4znyRxkhSTafoeUQ==
last-modified: Fri, 10 Mar 2023 03:55:07 GMT
etag: 0x8DB211B3CE1D180
x-ms-request-id: ed49fed2-601e-0006-3ed1-310a3c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 11729
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe656f82b4ed-OSL
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/media/inter-latin-700-normal.c6bc620d.woff2 | 104.18.41.197 | 200 OK | 37 kB |
URL GET HTTP/2flow.page/_next/static/media/inter-latin-700-normal.c6bc620d.woff2 IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37056, version 1.0 Hashb212a798db3b717b02ca67e3ca5c0bef 8f664bbee4804fedcc4293b697aa191b1f9a166e f6789b1579e3915acc50ce2f56d956c05dc3186238eb4d1a0d4ad1e403a625ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/inter-latin-700-normal.c6bc620d.woff2 HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flow.page/_next/static/css/00e954e346cc97a0.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: font/woff2
content-length: 37056
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"90c0-18d1905ad78"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873797
expires: Fri, 18 Apr 2025 22:11:59 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8767fe65cb12569f-OSL
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/media/inter-latin-600-normal.c6bc620d.woff2 | 104.18.41.197 | 200 OK | 37 kB |
URL GET HTTP/2flow.page/_next/static/media/inter-latin-600-normal.c6bc620d.woff2 IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37056, version 1.0 Hashb212a798db3b717b02ca67e3ca5c0bef 8f664bbee4804fedcc4293b697aa191b1f9a166e f6789b1579e3915acc50ce2f56d956c05dc3186238eb4d1a0d4ad1e403a625ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/inter-latin-600-normal.c6bc620d.woff2 HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flow.page/_next/static/css/00e954e346cc97a0.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: font/woff2
content-length: 37056
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"90c0-18d1905ad78"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873797
expires: Fri, 18 Apr 2025 22:11:59 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8767fe65db15569f-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/0e527a1c-8152-4627-9e19-bc1acc6db10b/e1ce8411-0cdd-4d7e-a3b0-b3cf47de3f05/bea699a3-9e48-485f-9b4b-459ca3586099/flowcode-black-nav-logo.png | 104.19.177.52 | 200 OK | 2.3 kB |
URL GET HTTP/2cdn.cookielaw.org/logos/0e527a1c-8152-4627-9e19-bc1acc6db10b/e1ce8411-0cdd-4d7e-a3b0-b3cf47de3f05/bea699a3-9e48-485f-9b4b-459ca3586099/flowcode-black-nav-logo.png IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 144 x 22, 8-bit colormap, non-interlaced Hash1233238db38a1e866b0c6c6e285088e6 79fca3d0ac5ced9bda149612d13446bdb7e7dccd cfd584ba275d2bb93b49ac6e3e256fabcccabbc54a0ef0d04403e251321830d5
GET /logos/0e527a1c-8152-4627-9e19-bc1acc6db10b/e1ce8411-0cdd-4d7e-a3b0-b3cf47de3f05/bea699a3-9e48-485f-9b4b-459ca3586099/flowcode-black-nav-logo.png HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: image/png
content-length: 2255
content-md5: EjMjjbOKHoZrDGxuKFCI5g==
last-modified: Tue, 23 Nov 2021 15:16:45 GMT
etag: 0x8D9AE944312748A
x-ms-request-id: 6b40c300-601e-0074-74db-120d73000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 6477
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe65f98456c9-OSL
X-Firefox-Spdy: h2
|
|
| flow.page/covertnarrative | 104.18.41.197 | 200 OK | 123 kB |
URL User Request GET HTTP/2flow.page/covertnarrative IP104.18.41.197:443
CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (37612) Size123 kB (123344 bytes) Hash0dcad6df287167f13bd181057cf97c36 812f160b4ca11dd58ccb976620e17f9f2f80a986 a308992fcf90877805a745fac7f93dd692f4bf950746aa4c60251b1b2e32f22e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /covertnarrative HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:57 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-powered-by: Next.js
cache-control: public, max-age=60
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Thu, 18 Apr 2024 22:12:57 GMT
server: cloudflare
cf-ray: 8767fe5d9d8a569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202302.1.0/assets/otCommonStyles.css | 104.19.177.52 | 200 OK | 11 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202302.1.0/assets/otCommonStyles.css IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash4715f5e515716f7c68866d5241bea3c9 35875bdd3131239f2609ec80f9e40b2e6ad2d6e9 00e5c644598964a3125a2d2eb250f125c5336e36b030934cb1534038b3291ac7
GET /scripttemplates/202302.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flow.page/
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: text/css
content-md5: XcxlleAcPGO2n5kTZrHH2Q==
last-modified: Fri, 10 Mar 2023 03:55:17 GMT
x-ms-request-id: 38faaacb-c01e-006d-70d1-318dc8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 11729
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe656f85b4ed-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| flow.page/_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F4ca00f32-2aa1-4545-8eb7-25fd3456fee1-thumbnail-picture%3Fm%3D1707322479&w=96&q=75 | 104.18.41.197 | 200 OK | 1.7 kB |
URL GET HTTP/2flow.page/_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F4ca00f32-2aa1-4545-8eb7-25fd3456fee1-thumbnail-picture%3Fm%3D1707322479&w=96&q=75 IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeRIFF (little-endian) data, Web/P image Hashc9394de8c9c4ca47243d559e4958047f bdd1020b05b9dd716806afd94aaec129aae42275 35dfe34ea8f3eb8a12a92e9ae881cf7d0cdc742a23e52d25ec97cc24c327f411
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F4ca00f32-2aa1-4545-8eb7-25fd3456fee1-thumbnail-picture%3Fm%3D1707322479&w=96&q=75 HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Cookie: countryCode=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: image/webp
content-length: 1650
vary: Accept, Accept-Encoding
cache-control: public, max-age=31536000
etag: Nd-jTqjz64oSqS6a6IHPfQzcdCoj5S0l7JfMJMMn9BE=
content-disposition: inline; filename="4ca00f32-2aa1-4545-8eb7-25fd3456fee1-thumbnail-picture.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
x-nextjs-cache: MISS
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:59 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 8767fe698dcc569f-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/static/ot_close.svg | 104.19.177.52 | 200 OK | 12 kB |
URL GET HTTP/2cdn.cookielaw.org/logos/static/ot_close.svg IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash9be3a123d4a7779c6ed030c49d28720e c6f66ee9266e7954402b1b22c807f06050ddc76e db34ced72cbd6dbef43ddac21a944bb7550e281bbebd1a8a5499693eeddd615a
GET /logos/static/ot_close.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: image/svg+xml
content-md5: pcXWFGpuVeSg/jVnYCseRg==
last-modified: Wed, 17 Apr 2024 06:40:30 GMT
x-ms-request-id: bcb244ef-a01e-0044-7e3f-91b3bc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 14688
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe65c96756c9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| flow.page/cdn-cgi/rum? | 104.18.41.197 | 204 No Content | 0 B |
IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/rum? HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1063
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Cookie: countryCode=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 22:11:59 GMT
access-control-allow-origin: https://flow.page
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8767fe6a6eab569f-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| flow.page/favicon/apple-touch-icon.png | 104.18.41.197 | 200 OK | 5.5 kB |
URL GET HTTP/2flow.page/favicon/apple-touch-icon.png IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeRIFF (little-endian) data, Web/P image Hash8dfc51bfea60aaa21e16321a73fb92f2 33a87365fdd3b42e9a7e4321790e77a415f7f4e3 a9a6232ae35fb6773825f5f09d67b5d28c513a7cae73596d55b6bf5429e0e312
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon/apple-touch-icon.png HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Cookie: countryCode=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: image/webp
content-length: 5528
cache-control: public, max-age=60
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=11369
content-disposition: inline; filename="apple-touch-icon.webp"
vary: Accept
etag: W/"2c69-18ef26c32e8"
last-modified: Thu, 18 Apr 2024 18:16:01 GMT
strict-transport-security: max-age=15724800; includeSubDomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
expires: Thu, 18 Apr 2024 22:12:59 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 8767fe6a4e77569f-OSL
X-Firefox-Spdy: h2
|
|
| analytics-collector.flowcode.com/flowpage | 172.64.145.98 | 200 OK | 2 B |
URL POST HTTP/3analytics-collector.flowcode.com/flowpage IP172.64.145.98:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectflowcode.com Fingerprint38:55:F4:53:54:85:2A:E5:6A:07:B3:68:51:82:C6:59:A3:03:93:70 ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /flowpage HTTP/1.1
Host: analytics-collector.flowcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 1464
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 22:12:00 GMT
content-type: text/plain; charset=utf-8
content-length: 2
strict-transport-security: max-age=15552000; includeSubDomains; preload
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=fnELDPo9TBN4fX3vxlzH1lRF39U5vPGYhS717pT4K4Y-1713478320-1.0.1.1-7Zmn7Qu.vN7CHVuF6z8bsWxveS9OOiCnANNmbi1wLDkamF95PpdAyWs1sIDx9yt5odT2gSQApJX2EStAftQDHQ; path=/; expires=Thu, 18-Apr-24 22:42:00 GMT; domain=.flowcode.com; HttpOnly; Secure; SameSite=None
_cfuvid=kYF.KprRARIJmFKETXc8_n6geR3o7tPVV7Kv660ry_Q-1713478320126-0.0.1.1-604800000; path=/; domain=.flowcode.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8767fe6a2e0e56b1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flow.page/_next/static/chunks/63346.4b89e74a8b77b055.js | 104.18.41.197 | 200 OK | 10 kB |
URL GET HTTP/2flow.page/_next/static/chunks/63346.4b89e74a8b77b055.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5460) Hash99e5207cea7602716d6f8ab5ff6e2c3f d5c11dd65a69bb2732aefeaf97b9cc0a4fa33a58 dba2132752bf108134057126fd965e6581c05df032f4474bda0186ecc4be8cf1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/63346.4b89e74a8b77b055.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:40 GMT
etag: W/"1587-18d1905b160"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 3087792
expires: Fri, 18 Apr 2025 22:11:59 GMT
server: cloudflare
cf-ray: 8767fe68dd27569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/79010-72313640bf462dcd.js | 104.18.41.197 | 200 OK | 98 kB |
URL GET HTTP/2flow.page/_next/static/chunks/79010-72313640bf462dcd.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashf951ffcc3ecf9c94661f273eb8f1b996 e8fb919d500216bb7b4c5e7caaa2a1aac5a83ca7 7fe8c070edbc626ee2a8a3e2e9e25988c1f933885e32bbef87c146fb79c8014f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/79010-72313640bf462dcd.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"17e79-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f35569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/81272-12e59c366a2d344a.js | 104.18.41.197 | 200 OK | 39 kB |
URL GET HTTP/2flow.page/_next/static/chunks/81272-12e59c366a2d344a.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (39360) Hash25b21f13d21c3226c10676f159633354 c08d38482ebff2d81b056d7ebfd69fd19a0a203f e0d7e241be01b9beb831df3f5fd8d1a13fc59030ec2d4b619dfd23f9b1722bb9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/81272-12e59c366a2d344a.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"99f3-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f3a569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/35170-c5b61bcec1cdf757.js | 104.18.41.197 | 200 OK | 96 kB |
URL GET HTTP/2flow.page/_next/static/chunks/35170-c5b61bcec1cdf757.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash0693c4544d32b327863fa147b539bcd1 9f10eeaaa3bcb524eb82c8ed56a8797a44e829cf 91d6499a33be9927f6487014405aef545a42e5c1798417314d5437f61d42e8e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/35170-c5b61bcec1cdf757.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"177c9-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:59 GMT
server: cloudflare
cf-ray: 8767fe68dd24569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/178-a99191091a50dc6d.js | 104.18.41.197 | 200 OK | 7.4 kB |
URL GET HTTP/2flow.page/_next/static/chunks/178-a99191091a50dc6d.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7665), with no line terminators Hashb13a6b8aaaa1b5caf7d5f62d8f20ad6e 2e860b845d0462296bbd07f4113ff753b6fb2e12 df2aa3dd58c2c54d193949030fd9d100b262cdc94ca278721b238cd834e77451
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/178-a99191091a50dc6d.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"1cee-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff22569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/99179-66b131284e3960d2.js | 104.18.41.197 | 200 OK | 60 kB |
URL GET HTTP/2flow.page/_next/static/chunks/99179-66b131284e3960d2.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (60107) Hash384d609c492bec07e13e35b31387385c b4703470e8253893e099908217160d924b14410f b884becb66d600c52b0fa9efc41d55eca0763e2e7edcc572c742c4e529d45027
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/99179-66b131284e3960d2.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"eafe-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff28569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/74570-14b89fa9b14391f9.js | 104.18.41.197 | 200 OK | 24 kB |
URL GET HTTP/2flow.page/_next/static/chunks/74570-14b89fa9b14391f9.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (24223) Hashb61e4d6c5f2bda4f557ad4840358fb96 935ad5357156c0e8c3a74e8e62966696ec099708 d7b68a2feb17d83e23f77bcc44e4767b25e33f99620ae2d6e6896cb5bb01b7fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/74570-14b89fa9b14391f9.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"5ed2-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f38569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/static/powered_by_logo.svg | 104.19.177.52 | 200 OK | 5.2 kB |
URL GET HTTP/2cdn.cookielaw.org/logos/static/powered_by_logo.svg IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash38b5388f36f8f885deb26afdac0e3116 112eccab1891a3a7cab1c5602ba72c9e127136e0 a8562f11c5a80a5c1c4ab388cfa2a69598203a57a5c67d1f80512bddd80d09ef
GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Wed, 17 Apr 2024 06:40:30 GMT
x-ms-request-id: 3bc77349-c01e-006d-2ffa-908dc8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 14688
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe65f98556c9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/52768-64be3e123e7b18de.js | 104.18.41.197 | 200 OK | 23 kB |
URL GET HTTP/2flow.page/_next/static/chunks/52768-64be3e123e7b18de.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (22508) Hash1cd8a8d0612fb3fe2c4f4617e25b4c38 22e2c5a46b3a319b30fb81b4f2859e843ba923a7 19a3f94f9aca6899625b0e5e301345ffaf97f19b6f50389b1590d9d5b3b4074c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/52768-64be3e123e7b18de.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"581f-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff2e569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/4343-7320eb120116c4be.js | 104.18.41.197 | 200 OK | 57 kB |
URL GET HTTP/2flow.page/_next/static/chunks/4343-7320eb120116c4be.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (57176) Hasha8eb4e25fe2bc72e9c6086f71e66ba58 956567f5b6530da9f1eda981f60b6630dd313944 7f817ecfe0ec0a6e8f3e592bf56b26b649b11d83df314ca53df36d0d64d9bb70
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4343-7320eb120116c4be.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"df8a-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe601f49569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/69314-b614db3df9b0c1b3.js | 104.18.41.197 | 200 OK | 25 kB |
URL GET HTTP/2flow.page/_next/static/chunks/69314-b614db3df9b0c1b3.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (25187) Hashfa6fa7675231fac9b05594f4e9a8c454 97be49fcc43418c5db5c97bbe769222142698979 88092e147ca8cd9e73281c13b9b4edb2da7a147f6215b45e91e52982d22ad874
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/69314-b614db3df9b0c1b3.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"6296-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe601f4f569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/favicon/favicon-black.svg | 104.18.41.197 | 200 OK | 3.5 kB |
URL GET HTTP/2flow.page/favicon/favicon-black.svg IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeSVG Scalable Vector Graphics image Hashbefffa6d589069d497d62c5c77db7afb 65547b6151a8bcf7932c68656c7ad8c032dbddf8 492c5905042a19508229cb83d43fe45c0d222b514bace7d5ebc9c0720e964aef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon/favicon-black.svg HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Cookie: countryCode=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: image/svg+xml
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: public, max-age=60
last-modified: Thu, 18 Apr 2024 18:16:01 GMT
etag: W/"da1-18ef26c32e8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Thu, 18 Apr 2024 22:12:59 GMT
server: cloudflare
cf-ray: 8767fe6a4e7b569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/16603.eadd97a632d38955.js | 104.18.41.197 | 200 OK | 104 kB |
URL GET HTTP/2flow.page/_next/static/chunks/16603.eadd97a632d38955.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Size104 kB (104011 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/16603.eadd97a632d38955.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"1964b-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef15569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/framework-9bf262a507aaca62.js | 104.18.41.197 | 200 OK | 142 kB |
URL GET HTTP/2flow.page/_next/static/chunks/framework-9bf262a507aaca62.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65199) Size142 kB (141524 bytes) Hashdc1b6b17d81148d0dfd676b5ec82d515 5eb81d67d3d8bbd48f60eed99c37903fecb13a05 0e752972b430eedefcd79548fdbc13b7f6045b22fd7507ede52bef17c725db30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-9bf262a507aaca62.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"228d4-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef18569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/44781-db2bf152f99155df.js | 104.18.41.197 | 200 OK | 7.8 kB |
URL GET HTTP/2flow.page/_next/static/chunks/44781-db2bf152f99155df.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7960), with no line terminators Hash77cac08d5beb3e73793180f0bd20177b 84ee9597a2e0695e0a8075eceae133db9ed610e9 eaa452004e7367daba73d677d09715a7583a59fa6189c1d6dfdbe3e8c605e38f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/44781-db2bf152f99155df.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"1e79-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff25569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/28ed76fe3ba4758f4eaabfa7f75dffb41d78b518/_buildManifest.js | 104.18.41.197 | 200 OK | 25 kB |
URL GET HTTP/2flow.page/_next/static/28ed76fe3ba4758f4eaabfa7f75dffb41d78b518/_buildManifest.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeASCII text, with very long lines (25185), with no line terminators Hashb0bf2bd272b74b187832eb2e3a1ceaa2 feb6e92b333e36bbda80fb235d3a5b9a96a34d1f 93ab29159bd9cefefc9b5487795098e4b14afc9eac5d9591617671afad1f0e1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/28ed76fe3ba4758f4eaabfa7f75dffb41d78b518/_buildManifest.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"6261-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe601f53569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/69294.90f0524e12de5215.js | 104.18.41.197 | 200 OK | 38 kB |
URL GET HTTP/2flow.page/_next/static/chunks/69294.90f0524e12de5215.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5806), with CRLF, LF line terminators Hashec3b49e1803276d06abf8cb52f45d1da 8b9f3320ff95d69fcc5a625414f77d4a59dd3194 66867acbe0ecd265e57b726e7036193f0c782f038c65b21f7521ef19ddeee749
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/69294.90f0524e12de5215.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:13:19 GMT
etag: W/"968f-18e2eb81218"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 3295699
expires: Fri, 18 Apr 2025 22:11:59 GMT
server: cloudflare
cf-ray: 8767fe68cd16569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/78366-47c78a8949f5f5f4.js | 104.18.41.197 | 200 OK | 12 kB |
URL GET HTTP/2flow.page/_next/static/chunks/78366-47c78a8949f5f5f4.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/78366-47c78a8949f5f5f4.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"2feb-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 3124210
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff23569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/83648-f0f9ac881a623143.js | 104.18.41.197 | 200 OK | 9.0 kB |
URL GET HTTP/2flow.page/_next/static/chunks/83648-f0f9ac881a623143.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (9112), with no line terminators Hash8a266ce7d7667d8abbee2b665d8cf230 452f0e5b60f86b814967a602213bd0d8bfd470e2 c19f822a5aae85a405604e270203d75cc4aa45e28e41c311b53e1ca67cd51ca7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/83648-f0f9ac881a623143.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"2354-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff30569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/media/inter-latin-400-normal.c6bc620d.woff2 | 104.18.41.197 | 200 OK | 37 kB |
URL GET HTTP/2flow.page/_next/static/media/inter-latin-400-normal.c6bc620d.woff2 IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37056, version 1.0 Hashb212a798db3b717b02ca67e3ca5c0bef 8f664bbee4804fedcc4293b697aa191b1f9a166e f6789b1579e3915acc50ce2f56d956c05dc3186238eb4d1a0d4ad1e403a625ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/inter-latin-400-normal.c6bc620d.woff2 HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flow.page/_next/static/css/00e954e346cc97a0.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: font/woff2
content-length: 37056
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"90c0-18d1905ad78"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8767fe63292f569f-OSL
X-Firefox-Spdy: h2
|
|
| flow.page/icons/verified-checkmark.svg | 104.18.41.197 | 200 OK | 1.0 kB |
URL GET HTTP/2flow.page/icons/verified-checkmark.svg IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeSVG Scalable Vector Graphics image Hash16a904d3c65cdd4a0d98baf94cb2f741 9d13a0c7d70251540b17f8cbf1be8c8013cd9e13 e03d0f012a00716a1eeecd8c285488e86da8e8a275d65f0a76f4d70a2b1d15fa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /icons/verified-checkmark.svg HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: image/svg+xml
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: public, max-age=60
last-modified: Thu, 18 Apr 2024 18:16:01 GMT
etag: W/"416-18ef26c32e8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Thu, 18 Apr 2024 22:12:58 GMT
server: cloudflare
cf-ray: 8767fe601f57569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| geolocation.onetrust.com/cookieconsentpub/v1/geo/location/geofeed | 172.64.155.119 | 200 OK | 81 B |
URL GET HTTP/2geolocation.onetrust.com/cookieconsentpub/v1/geo/location/geofeed IP172.64.155.119:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectonetrust.com Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47 ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashaeac38260893a273eb6303c765c95059 1e35f05b5e04b1bffb6b1ea0892440a29e9139e4 1a0de81c8a79a713ba0ebd4fa6c19915b8b84b87e33a5a9a44fc4ea29b26d0ac
GET /cookieconsentpub/v1/geo/location/geofeed HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: text/javascript
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8767fe68db2d0afe-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/6510-76acdad48e575a33.js | 104.18.41.197 | 200 OK | 32 kB |
URL GET HTTP/2flow.page/_next/static/chunks/6510-76acdad48e575a33.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (31685) Hasheb0886b4cec025ef7dde1f0c8369cacf b16cd3e6567ef5a54c59c13e32544805141927b8 4c1ae563002c9e48b04e4250b6d4f5d533da94f5a90f050ba8456f9a07f05635
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6510-76acdad48e575a33.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"7bf7-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff21569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/2031-30b0eeb0595fdd2d.js | 104.18.41.197 | 200 OK | 25 kB |
URL GET HTTP/2flow.page/_next/static/chunks/2031-30b0eeb0595fdd2d.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (24799) Hasha95b401929aacf0652e907ce72232b64 e907b46ff5b9890fe9c0f3b9a0002a308aac775b b450f3ff48a9751179109ce242721d58498490c9bdf82ba09d226a2b8931a218
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2031-30b0eeb0595fdd2d.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"6111-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f41569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 | 104.16.80.73 | 200 OK | 19 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 IP104.16.80.73:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectcloudflareinsights.com Fingerprint73:92:5A:16:97:55:FC:A5:32:7C:F3:9D:0C:84:EF:F3:2F:AA:B5:00 ValiditySun, 10 Mar 2024 02:33:42 GMT - Sat, 08 Jun 2024 02:33:41 GMT
File typeJavaScript source, ASCII text, with very long lines (19261), with no line terminators Hash3be93fd15d2f7dee2fc0c8981c6fa5c6 8cd88c36fad3e96641dbc4d781f5ddbe5123312f 17106bf803d42bcf2f2bdf778ece084d3f91c68e7ea41dae7bff61fefa573dee
GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.4.0"
last-modified: Mon, 15 Apr 2024 22:09:58 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8767fe603b0c568f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| flow.page/covertnarrative/ | 104.18.41.197 | 308 Permanent Redirect | 900 kB |
URL User Request GET HTTP/2flow.page/covertnarrative/ IP104.18.41.197:443
CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Size900 kB (900166 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /covertnarrative/ HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 308 Permanent Redirect
date: Thu, 18 Apr 2024 22:11:57 GMT
location: /covertnarrative
refresh: 0;url=/covertnarrative
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 8767fe5c8cd5569f-OSL
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/css/00e954e346cc97a0.css | 104.18.41.197 | 200 OK | 12 kB |
URL GET HTTP/2flow.page/_next/static/css/00e954e346cc97a0.css IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeASCII text, with very long lines (12070) Hashe48bf9262531ce4cf6aa24ca08ccafed f9f9d25ced2e5790d0fdf93ed18e3dbd28c815b0 1c41d6094cb8d858534390d302149ebd9876a7d9922d80bcc2a1df2a3a633368
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/00e954e346cc97a0.css HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:40 GMT
etag: W/"2f56-18d1905b160"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef14569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/60055-5dcc5499ce68cf22.js | 104.18.41.197 | 200 OK | 26 kB |
URL GET HTTP/2flow.page/_next/static/chunks/60055-5dcc5499ce68cf22.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (25611) Hash628e41919f8f23d1000ed195927ad1af 93cf742e96c0229e71b8798396aa244b7f6afff4 05e811083ea89790bb2cc30724cf5cf38bca0229d2350aee1375240ddda3f322
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/60055-5dcc5499ce68cf22.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"643e-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff31569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/pages/page/%5Bslug%5D-e51c188557f0042b.js | 104.18.41.197 | 200 OK | 100 kB |
URL GET HTTP/2flow.page/_next/static/chunks/pages/page/%5Bslug%5D-e51c188557f0042b.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash32ea0d4b20fffe7dff21a8d6797df71c 0dc26a7fab56d90ae1d08675b09b582bc37c051f ee35690069ce1e4ed90f9d88138fe69c0e8ea4c9bca302bedcabe6ad9476ac5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/page/%5Bslug%5D-e51c188557f0042b.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"1865d-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe601f51569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/12404-1549055700393f5f.js | 104.18.41.197 | 200 OK | 21 kB |
URL GET HTTP/2flow.page/_next/static/chunks/12404-1549055700393f5f.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/12404-1549055700393f5f.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"50e0-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f32569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/80307-2433fba22f9cdd44.js | 104.18.41.197 | 200 OK | 33 kB |
URL GET HTTP/2flow.page/_next/static/chunks/80307-2433fba22f9cdd44.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (32621) Hash07863d00701fe80db725eed18e0f4dc4 1e61b7d26571cf602c921db9b8b93f9282dc7c83 d9bbd6e174ce088067dea19a1f72d83435db2f4adc420bb6f8c3d62260235785
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/80307-2433fba22f9cdd44.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"7fa0-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f33569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Alexandria&display=swap | 142.250.74.106 | 200 OK | 2.1 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Alexandria&display=swap IP142.250.74.106:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (2170), with no line terminators Hashfbeeb3c75b3e8ea8605568f18a3b41c2 3bb9233bce60475e2344da634effde298eabdba7 83fca5924443ed845647fbb494cf54f187d821d1cc3db018a9c2fe2650769b3b
GET /css2?family=Alexandria&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 22:11:58 GMT
date: Thu, 18 Apr 2024 22:11:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/firebase.98862f5a22e6ec1f.js | 104.18.41.197 | 200 OK | 1.9 kB |
URL GET HTTP/2flow.page/_next/static/chunks/firebase.98862f5a22e6ec1f.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1863), with no line terminators Hash3d7ca68c5552d1dbe288a0b6a2b46ee4 48b52fec239a5324042eb09e8630d37dcc19bf9f 347361e06961993bd1808f6f80a1cef5cd4df83a8998a807d814797cdd98d7b0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/firebase.98862f5a22e6ec1f.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:13:18 GMT
etag: W/"73c-18e2eb80e30"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 3295699
expires: Fri, 18 Apr 2025 22:11:59 GMT
server: cloudflare
cf-ray: 8767fe68cd17569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/main-d459f983bba9ecde.js | 104.18.41.197 | 200 OK | 135 kB |
URL GET HTTP/2flow.page/_next/static/chunks/main-d459f983bba9ecde.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (63850) Size135 kB (135219 bytes) Hash04b90e9f5ae0c24d1cc6b3be58ccb4e1 b15d93711a0b86352cf6f890afb45f932ad39d3e 8a049834fda94e5ba4d7161f02264cceb041df8ee76acb5da496d73d6489de9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-d459f983bba9ecde.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"21033-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef19569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/1cc2734a-8dfd9412a1ccb9a2.js | 104.18.41.197 | 200 OK | 100 kB |
URL GET HTTP/2flow.page/_next/static/chunks/1cc2734a-8dfd9412a1ccb9a2.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size100 kB (100166 bytes) Hash739259f3431328613584607afcbbaeab ca04caa8d48adee786c8c93f1d0f65a6034c6f22 b7737938b1b2c661c5dcaa4712dfca802b028f78c6ec307ad92557f311700848
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1cc2734a-8dfd9412a1ccb9a2.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"18746-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef1c569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| geolocation.onetrust.com/cookieconsentpub/v1/geo/location | 172.64.155.119 | 200 OK | 72 B |
URL GET HTTP/2geolocation.onetrust.com/cookieconsentpub/v1/geo/location IP172.64.155.119:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectonetrust.com Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47 ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashadf75b99dbbf416c627dfc5de30f9ad1 699f3845f7dfb3fa9968c2117b44c3f3eb728fff a0e4a8f457272bd17d07ae2e1e09731df6cc6fdc3ea9e32e713ef4a8a012fc27
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Referer: https://flow.page/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8767fe63ac8eb4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/1d90eb00.eb248845497ffa25.js | 104.18.41.197 | 200 OK | 127 kB |
URL GET HTTP/2flow.page/_next/static/chunks/1d90eb00.eb248845497ffa25.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (9468), with CRLF line terminators Size127 kB (126638 bytes) Hash073442c187da57d9af282fda20638c27 fb41bf1eadda9f3891cde84b50fbedc603df3beb 65db8bc4034c27ff557a7495be843573b78be4e3e7b174690cd03b152461b257
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1d90eb00.eb248845497ffa25.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:13:18 GMT
etag: W/"1eeae-18e2eb80e30"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 3295699
expires: Fri, 18 Apr 2025 22:11:59 GMT
server: cloudflare
cf-ray: 8767fe68cd15569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/pages/_app-363b83a57b3bc4e9.js | 104.18.41.197 | 200 OK | 2.6 MB |
URL GET HTTP/2flow.page/_next/static/chunks/pages/_app-363b83a57b3bc4e9.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Size2.6 MB (2649860 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-363b83a57b3bc4e9.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"286f04-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef1a569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/22561-f3a1e077ce0d90ed.js | 104.18.41.197 | 200 OK | 7.4 kB |
URL GET HTTP/2flow.page/_next/static/chunks/22561-f3a1e077ce0d90ed.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7581), with no line terminators Hash20be7158da498282ad3557d0a9ab31a4 7560d63b5aaa58c3ce2f2a2520eaf8986f989bcc 370fc6420b3da1308ae757040470aec2faa9abe5321a87373f487c6894375f54
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/22561-f3a1e077ce0d90ed.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"1d02-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef1d569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/155-dd9c8cbdc9e739f6.js | 104.18.41.197 | 200 OK | 8.7 kB |
URL GET HTTP/2flow.page/_next/static/chunks/155-dd9c8cbdc9e739f6.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (9016), with no line terminators Hasha2c2c291392e6dc2bea4b11fff4d0493 11c381e04635767d62d519d090343b5d40f997dd 6e43b1a961aec540a615c4385823ffaece4c1e327af1ff4a5b5f3592e20c8003
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/155-dd9c8cbdc9e739f6.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"2205-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff24569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/32801-43c7e99a78908c16.js | 104.18.41.197 | 200 OK | 13 kB |
URL GET HTTP/2flow.page/_next/static/chunks/32801-43c7e99a78908c16.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (12644) Hashc80c5e09c2879c0ba7631ead3c1c564f 0dba6a7d205be9283f0f9cde39c165184a6fe7b5 4bc7a142788b4738bd53952569f172a04350ff48b1690b9446e64fd29f29341d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/32801-43c7e99a78908c16.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"3197-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f37569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/44666-62766aadb22bc4f0.js | 104.18.41.197 | 200 OK | 19 kB |
URL GET HTTP/2flow.page/_next/static/chunks/44666-62766aadb22bc4f0.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (18941) Hash5159f9a3da660f5c015b5decde2225af b79d035e1f5e79a4f463913a798bca6d051ff4d6 c1a2ecfeb037687dd5c2d50a8b75a9a525d667df1118f3a2e8050e085abbe0ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/44666-62766aadb22bc4f0.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"4a30-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 7873796
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fff26569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/28ed76fe3ba4758f4eaabfa7f75dffb41d78b518/_ssgManifest.js | 104.18.41.197 | 200 OK | 80 B |
URL GET HTTP/2flow.page/_next/static/28ed76fe3ba4758f4eaabfa7f75dffb41d78b518/_ssgManifest.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeASCII text, with no line terminators Hashb404e23d62d95bafd03ad7747cc0e88b 011268d6627898dc2caac8b9678086cd9b9a7dfe 678f6ce2cb80b1fe72fc67e7412be6e2ab6ada083111b64f7c40d35e3cba5e00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/28ed76fe3ba4758f4eaabfa7f75dffb41d78b518/_ssgManifest.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:13:29 GMT
etag: W/"50-18ef269e128"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe601f54569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F7151c9e8-623e-41ef-a940-2b6799e734bc-thumbnail-picture%3Fm%3D1707336078&w=96&q=75 | 104.18.41.197 | 200 OK | 2.2 kB |
URL GET HTTP/2flow.page/_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F7151c9e8-623e-41ef-a940-2b6799e734bc-thumbnail-picture%3Fm%3D1707336078&w=96&q=75 IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeRIFF (little-endian) data, Web/P image Hash048349333838ce882e809ebe13e42930 12c7d5a0c365a18bdbb727b93f018f2443d1c1c9 d7a31d30ab730396b78485cb6293b36e2be432d00e7ee5319e0e8e4b70d43e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=https%3A%2F%2Fcdn.flowpage.com%2Fimages%2F7151c9e8-623e-41ef-a940-2b6799e734bc-thumbnail-picture%3Fm%3D1707336078&w=96&q=75 HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Cookie: countryCode=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: image/webp
content-length: 2150
vary: Accept, Accept-Encoding
cache-control: public, max-age=31536000
etag: 16MdMKtzA5a3hIXLYpOzbivkMtAOfuUxng6OS3DUPkk=
content-disposition: inline; filename="7151c9e8-623e-41ef-a940-2b6799e734bc-thumbnail-picture.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
x-nextjs-cache: MISS
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:59 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 8767fe698dcf569f-OSL
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/webpack-1d019126c7558f8b.js | 104.18.41.197 | 200 OK | 24 kB |
URL GET HTTP/2flow.page/_next/static/chunks/webpack-1d019126c7558f8b.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (23482) Hash1b5633b307e75d9806c23144711915d2 89b1945ee263b479a892a4f66794976666745a43 281038e8fda80581b4ccea661108d629571ff96efb762118d518c201a2fb82dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-1d019126c7558f8b.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"5bef-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef17569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/39318-d7846cf91633567b.js | 104.18.41.197 | 200 OK | 16 kB |
URL GET HTTP/2flow.page/_next/static/chunks/39318-d7846cf91633567b.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (15499) Hashcec88bb3ac07dc2cda29f9417b321665 56eeb4ad7c23e0933b2de59c8aa0ad1a781fe5e1 3d06cfdc813f79422f48557dd5a08697364b4d9236473741a59b5f9412903a73
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/39318-d7846cf91633567b.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"3cbe-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe5fef1e569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| flow.page/_next/static/chunks/52296-34fc93ac44899cbf.js | 104.18.41.197 | 200 OK | 37 kB |
URL GET HTTP/2flow.page/_next/static/chunks/52296-34fc93ac44899cbf.js IP104.18.41.197:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (36624) Hash94e139cf8eda81abcc2665632c397b57 22a01b08f040301e3665934bddcfc7036963482b d5b46ee8c73c5ea02f3f36d0e2666c34919d8f7ad1e505a8f7773af0338d55a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/52296-34fc93ac44899cbf.js HTTP/1.1
Host: flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flow.page/covertnarrative
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:58 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 18 Apr 2024 18:12:29 GMT
etag: W/"8f43-18ef268f6c8"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 18 Apr 2025 22:11:58 GMT
server: cloudflare
cf-ray: 8767fe600f43569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/static/ot_guard_logo.svg | 104.19.177.52 | 200 OK | 497 B |
URL GET HTTP/2cdn.cookielaw.org/logos/static/ot_guard_logo.svg IP104.19.177.52:443
Requested byhttps://flow.page/covertnarrative CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4cefeea2da1f500b581d4842d6454a50 9939dd4c1394641f53655e558bfdca7499480c52 220f235f0188ff469b92b56eb86adf4e828b8a90c587ebfa073383b8583aaeb2
GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flow.page/
Origin: https://flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 22:11:59 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Wed, 17 Apr 2024 02:07:28 GMT
x-ms-request-id: fabdd7f6-101e-0033-3e7a-906628000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 77539
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8767fe65fff5b4ed-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|