Report - s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB

Report Overview

Visited public
2024-07-21 15:46:27
Tags
URL
s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Finishing URL
s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
IP / ASN
172.67.71.108
#13335 CLOUDFLARENET
Title
Watch Dungeon no Naka no Hito Episode 3

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
api.movcloud.net	45353	2020-04-11	2020-05-05 19:55:01	2024-07-20 18:57:20	418 B	475 B	172.234.222.138
roastoup.com	unknown	2023-10-23	2023-10-23 21:25:57	2024-07-19 21:16:33	393 B	84 kB	139.45.197.242
platform.bidgear.com	30367	2011-08-30	2016-07-27 13:51:48	2024-07-21 12:33:40	435 B	1.2 kB	104.26.2.107
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-20 18:12:19	981 B	2.7 kB	23.36.76.226
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2024-07-21 09:45:26	417 B	104 kB	142.250.74.168
s3taku.com	unknown	2024-06-25	2024-06-28 19:41:58	2024-07-20 18:57:19	3.5 kB	682 kB	172.67.71.108

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-07-21	medium	roastoup.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	s3taku.com/player/js/jquery.min.js?v=10.3	ScriptElement	86 kB	2023-03-07	2025-02-01
Pretty URL s3taku.com/player/js/jquery.min.js?v=10.3 IP 172.67.71.108 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-02-01 17:45 Times Seen496 Hash ed72e2a6ae1afb03eb3e917c2dbe2b50 b23ec2f5041209e5d1d567740fe5ad323688b76a f8e5351fc39356f8f94d7f334b11f9a0f44a67a9461bbd3e8be10cf44acdf780 Loading...

	s3taku.com/js/jw8.33/jwplayer.js?v=10.3	ScriptElement	113 kB	2024-04-21	2025-01-19
Pretty URL s3taku.com/js/jw8.33/jwplayer.js?v=10.3 IP 172.67.71.108 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-21 21:24 Last Seen2025-01-19 23:42 Times Seen285 Hash cab7cf5da3fc07123fcd61fe2c4a83b6 4bf9c9aa46384ca1cd504545752a6a65111bf54c 0b378666f5039ef9de86f5333bab8f76cdb411e9ffe745cf84e123742523938f Loading...

	s3taku.com/js/crypto-js/crypto-js.js?v=10.3	ScriptElement	194 kB	2023-03-07	2025-04-21
Pretty URL s3taku.com/js/crypto-js/crypto-js.js?v=10.3 IP 172.67.71.108 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-04-21 05:14 Times Seen482 Hash eac8c800a39bc533f58390e6c0eef9bf 00ea9620f99ed5d1e0492cf1764e4df4bff7d7a1 bbad393211ce71ebe4a95c3c0c9daadd7ee4653553557a2de0f8f122e70b88c3 Loading...

	s3taku.com/js/player2021.min.js?v=10.3	ScriptElement	204 kB	2024-07-01	2024-10-15
Pretty URL s3taku.com/js/player2021.min.js?v=10.3 IP 172.67.71.108 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-07-01 23:15 Last Seen2024-10-15 06:35 Times Seen63 Hash 9d884412facef81030680b33f2022e07 f1005a7823c29671b343daa3a75760482f2f1611 b6560fbb3cab4f50f37866331c444068dd3657a8aaf5bcb69fe9f937ba356d6a Loading...

	unknown	Function	34 B	2023-04-11	2025-04-23
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16 Last Seen2025-04-23 18:16 Times Seen66989 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

HTTP Transactions (14)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
85a291090b5db764a5b5f1487dcb958f
9dadf7a0a7d6be86e491a10bbbc72c84f798cab9
60c84bb6c568871d3febe1e58c6aedf398fa06f5f7afc3e6087200be0a25ad3f

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "60C84BB6C568871D3FEBE1E58C6AEDF398FA06F5F7AFC3E6087200BE0A25AD3F"
Last-Modified: Sat, 20 Jul 2024 19:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11037
Expires: Sun, 21 Jul 2024 18:49:57 GMT
Date: Sun, 21 Jul 2024 15:46:00 GMT
Connection: keep-alive

www.googletagmanager.com/gtag/js?id=G-PY1M3DS3LQ

142.250.74.168

200 OK

104 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-PY1M3DS3LQ
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintB3:23:88:EF:34:69:5A:0C:81:CE:02:E2:E3:19:FE:95:71:75:A1:14
ValidityMon, 24 Jun 2024 06:35:05 GMT - Mon, 16 Sep 2024 06:35:04 GMT

File type
JavaScript source, ASCII text, with very long lines (5945)
Size
104 kB (103597 bytes)
Hash
8720ab58366f29a78cbb5f2e2e31c7ba
70500cd4020df2feaee60ea83140881d121dbc0a
892f7fcb9fb80f5b123f52a7967bd178ee11fb3455695eaddf38020bd581d62f

HTTP Headers

GET /gtag/js?id=G-PY1M3DS3LQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3taku.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 21 Jul 2024 15:46:01 GMT
expires: Sun, 21 Jul 2024 15:46:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103597
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

s3taku.com/favicon.png

172.67.71.108

200 OK

2.6 kB

URL GET HTTP/2
s3taku.com/favicon.png
IP
172.67.71.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerGoogle Trust Services
Subjects3taku.com
FingerprintC1:0F:F8:CA:1D:72:A3:78:76:B3:99:89:42:EF:A3:FB:59:B8:63:D0
ValidityThu, 27 Jun 2024 03:54:17 GMT - Wed, 25 Sep 2024 04:54:14 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 67x80, components 3
Size
2.6 kB (2636 bytes)
Hash
d6c65bb37c6c6cf1cd13111bbe6d89fa
d0b5912969cc537a0d6caf1b8bbc67a31eaf2b92
a02283c8335094b678f052ae6c4a1284ff61d3af03c3d5fd18628110f5ea84d6

HTTP Headers

GET /favicon.png HTTP/1.1
Host: s3taku.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 21 Jul 2024 15:46:02 GMT
content-type: image/png
content-length: 2636
last-modified: Wed, 28 Feb 2024 17:39:10 GMT
etag: "65df6fbe-a4c"
expires: Sun, 04 Aug 2024 09:13:15 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 1405967
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aqux4Sp%2FsD%2BW4Yf2A3EElnoX6aiXBZEBfobMiMPFzLbpomoO8P7kEAlmf98b1mTLh%2BAVF3BNOBwTHOXaVjheI77vJyL6qFAna2yjDC85T3Y7g6CAlRck9YMWcBY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8a6c524cfd2556b7-OSL
X-Firefox-Spdy: h2

api.movcloud.net/v1/count/anime/en/episode/228130

172.234.222.138

302 Found

142 B

URL GET HTTP/2
api.movcloud.net/v1/count/anime/en/episode/228130
IP
172.234.222.138:443
ASN
#63949 Akamai Connected Cloud

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerLet's Encrypt
Subjectapi.movcloud.net
FingerprintD9:5E:82:EF:45:E3:B7:7B:57:83:EB:F9:87:99:83:83:0E:F3:CA:2C
ValidityTue, 25 Jun 2024 19:34:09 GMT - Mon, 23 Sep 2024 19:34:08 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
142 B (142 bytes)
Hash
82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c

HTTP Headers

GET /v1/count/anime/en/episode/228130 HTTP/1.1
Host: api.movcloud.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3taku.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: openresty
date: Sun, 21 Jul 2024 15:46:02 GMT
content-type: text/html
content-length: 142
location: http://ww99.movcloud.net/v1/count/anime/en/episode/228130
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: no-store, max-age=0
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
abdbb83f974102baaaa6f77ee331d442
053c22e9dce284413f8a2d4433748edbdd91b77b
23a21016e52b76d94858b277e1a729969fc7f0f66b9212013f3b1cd64fc2591c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "23A21016E52B76D94858B277E1A729969FC7F0F66B9212013F3B1CD64FC2591C"
Last-Modified: Sat, 20 Jul 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10173
Expires: Sun, 21 Jul 2024 18:35:35 GMT
Date: Sun, 21 Jul 2024 15:46:02 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
abdbb83f974102baaaa6f77ee331d442
053c22e9dce284413f8a2d4433748edbdd91b77b
23a21016e52b76d94858b277e1a729969fc7f0f66b9212013f3b1cd64fc2591c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "23A21016E52B76D94858B277E1A729969FC7F0F66B9212013F3B1CD64FC2591C"
Last-Modified: Sat, 20 Jul 2024 19:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10173
Expires: Sun, 21 Jul 2024 18:35:35 GMT
Date: Sun, 21 Jul 2024 15:46:02 GMT
Connection: keep-alive

s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB

172.67.71.108

200 OK

75 kB

URL User Request GET HTTP/2
s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
IP
172.67.71.108:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjects3taku.com
FingerprintC1:0F:F8:CA:1D:72:A3:78:76:B3:99:89:42:EF:A3:FB:59:B8:63:D0
ValidityThu, 27 Jun 2024 03:54:17 GMT - Wed, 25 Sep 2024 04:54:14 GMT

File type
HTML document, ASCII text, with very long lines (53890)
Size
75 kB (75122 bytes)
Hash
ed80b9bcbc759177744fba8d04916d9c
b8311f83ab6bdbd9f82ec5beb630c87320e99913
70a3a46d88f6e51b7f9a3259ef2e8ac8906e67bb4c5c5d34732e2371e3cab039

HTTP Headers

GET /abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB HTTP/1.1
Host: s3taku.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 21 Jul 2024 15:46:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
x-powered-by: PHP/5.6.13
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wYf2CuUfwduMuwT97bx%2BXEQHlIW4%2BX8XEIJbAtadT6OBqk25qRQjPhY8Npe49hbdKtr%2FSkodkQHsxeOdCS0k14BLl7z71fWZ8rbshgkBbOap1IbhGmTD4%2FGczfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a6c52407ac056b7-OSL
content-encoding: br
X-Firefox-Spdy: h2

s3taku.com/player/js/jquery.min.js?v=10.3

172.67.71.108

200 OK

86 kB

URL GET HTTP/2
s3taku.com/player/js/jquery.min.js?v=10.3
IP
172.67.71.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerGoogle Trust Services
Subjects3taku.com
FingerprintC1:0F:F8:CA:1D:72:A3:78:76:B3:99:89:42:EF:A3:FB:59:B8:63:D0
ValidityThu, 27 Jun 2024 03:54:17 GMT - Wed, 25 Sep 2024 04:54:14 GMT

File type
JavaScript source, ASCII text, with very long lines (32042)
Size
86 kB (86349 bytes)
Hash
ed72e2a6ae1afb03eb3e917c2dbe2b50
b23ec2f5041209e5d1d567740fe5ad323688b76a
f8e5351fc39356f8f94d7f334b11f9a0f44a67a9461bbd3e8be10cf44acdf780

HTTP Headers

GET /player/js/jquery.min.js?v=10.3 HTTP/1.1
Host: s3taku.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 21 Jul 2024 15:46:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 28 Feb 2024 17:39:10 GMT
etag: W/"65df6fbe-1514d"
expires: Thu, 25 Jul 2024 07:10:56 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
content-encoding: gzip
cf-cache-status: HIT
age: 2277304
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tchmt3wj4rq01%2FWrvo5sB7PRB40WfHXUyLCMFIIUDOtsgm%2BG55W%2FzM0azMzSAOX23SPIfr8i4pasbDqqqEcsZYcBHiC5ef6NDAEOXO9KcKVfsbGtTXIqlYZuLgU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a6c5243ddaa56b7-OSL
X-Firefox-Spdy: h2

s3taku.com/js/jw8.33/jwplayer.js?v=10.3

172.67.71.108

200 OK

113 kB

URL GET HTTP/2
s3taku.com/js/jw8.33/jwplayer.js?v=10.3
IP
172.67.71.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerGoogle Trust Services
Subjects3taku.com
FingerprintC1:0F:F8:CA:1D:72:A3:78:76:B3:99:89:42:EF:A3:FB:59:B8:63:D0
ValidityThu, 27 Jun 2024 03:54:17 GMT - Wed, 25 Sep 2024 04:54:14 GMT

File type

Size
113 kB (112716 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /js/jw8.33/jwplayer.js?v=10.3 HTTP/1.1
Host: s3taku.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 21 Jul 2024 15:46:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 10 Apr 2024 04:50:43 GMT
etag: W/"66161aa3-1b84c"
expires: Thu, 25 Jul 2024 07:10:56 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
content-encoding: gzip
cf-cache-status: HIT
age: 2277304
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NFgqqSODVXiU69LCbcPTpYzANFODftJxidbzIlZD87azXCnhpIv%2BJaZ39kjgVA5IqG%2FcQQdtj9Jp5zj1xDdxJ0fNVeRI9sb1DvcW5yKKSz30VSSHc3s5D%2BXpys%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a6c5243ddb156b7-OSL
X-Firefox-Spdy: h2

roastoup.com/5/5187634

139.45.197.242

200 OK

83 kB

URL GET HTTP/2
roastoup.com/5/5187634
IP
139.45.197.242:443
ASN
#9002 RETN Limited

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerLet's Encrypt
Subjectroastoup.com
FingerprintD2:D9:E1:1E:DB:3C:AA:2B:CA:72:B9:EE:46:D7:92:30:61:A3:69:71
ValidityWed, 19 Jun 2024 04:27:39 GMT - Tue, 17 Sep 2024 04:27:38 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
83 kB (83055 bytes)
Hash
66c484fa9a8186b1df7ab99720467911
eeae03f4e78d2563b1f6cbf3d62d7b39f8e6dac9
f6d068c3278c813f204e6701d6a845430eaefa900187f5ebacb4a5c79a493c69

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /5/5187634 HTTP/1.1
Host: roastoup.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3taku.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 21 Jul 2024 15:46:01 GMT
content-type: application/javascript
x-trace-id: 0795b1f556dd1cc60f0987078a031852
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0080a0f93bb54ce2ed527996574d10b5; expires=Mon, 21 Jul 2025 15:46:01 GMT; path=/; secure; SameSite=None
oaidts=1721576761; expires=Mon, 21 Jul 2025 15:46:01 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2

s3taku.com/player/css/main.css?v=10.3

172.67.71.108

200 OK

1.9 kB

URL GET HTTP/2
s3taku.com/player/css/main.css?v=10.3
IP
172.67.71.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerGoogle Trust Services
Subjects3taku.com
FingerprintC1:0F:F8:CA:1D:72:A3:78:76:B3:99:89:42:EF:A3:FB:59:B8:63:D0
ValidityThu, 27 Jun 2024 03:54:17 GMT - Wed, 25 Sep 2024 04:54:14 GMT

File type
ASCII text, with very long lines (1990), with no line terminators
Size
1.9 kB (1889 bytes)
Hash
7a88db092936fea3076c74d060284245
331b5551a9a7365457a64959f6e5985fc99a293b
0930f15aa9aba32f117625dbec16d6342fdcc0a445a035b76de790d7e35eb697

HTTP Headers

GET /player/css/main.css?v=10.3 HTTP/1.1
Host: s3taku.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 21 Jul 2024 15:46:00 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 28 Feb 2024 17:39:10 GMT
etag: W/"65df6fbe-761"
expires: Sun, 04 Aug 2024 09:06:24 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
content-encoding: gzip
cf-cache-status: HIT
age: 1406376
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eR11KoFs9pxVI1cLL8LgcbFsaK3xHZ%2F%2FRtEtGd25xcqBK31qa5%2BER1j%2BboxhEH4WzUdjUswHUR0Lr2pm2gnuadxedNkYZ4E4dNlgCVroy1P%2F9MX50fV1uMgH8No%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a6c5243dda956b7-OSL
X-Firefox-Spdy: h2

s3taku.com/js/crypto-js/crypto-js.js?v=10.3

172.67.71.108

200 OK

194 kB

URL GET HTTP/2
s3taku.com/js/crypto-js/crypto-js.js?v=10.3
IP
172.67.71.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerGoogle Trust Services
Subjects3taku.com
FingerprintC1:0F:F8:CA:1D:72:A3:78:76:B3:99:89:42:EF:A3:FB:59:B8:63:D0
ValidityThu, 27 Jun 2024 03:54:17 GMT - Wed, 25 Sep 2024 04:54:14 GMT

File type

Size
194 kB (193757 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /js/crypto-js/crypto-js.js?v=10.3 HTTP/1.1
Host: s3taku.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 21 Jul 2024 15:46:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Wed, 28 Feb 2024 17:39:10 GMT
etag: W/"65df6fbe-2f4dd"
expires: Sun, 04 Aug 2024 09:06:25 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
content-encoding: gzip
cf-cache-status: HIT
age: 1406374
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Funq9%2FqGAka7w%2Be%2FfL9dzmCXtIG3lBY%2Fu8FQorHwmJ8OIJETBv%2BbXwv%2BbUn8vfI9b6WC5bDpg2KP3i5MUabyOF%2FGrfW08kuCKy%2BwTvpGbambbt4aDsWW6GVy4W4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a6c5243edb256b7-OSL
X-Firefox-Spdy: h2

s3taku.com/js/player2021.min.js?v=10.3

172.67.71.108

200 OK

204 kB

URL GET HTTP/2
s3taku.com/js/player2021.min.js?v=10.3
IP
172.67.71.108:443
ASN
#13335 CLOUDFLARENET

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerGoogle Trust Services
Subjects3taku.com
FingerprintC1:0F:F8:CA:1D:72:A3:78:76:B3:99:89:42:EF:A3:FB:59:B8:63:D0
ValidityThu, 27 Jun 2024 03:54:17 GMT - Wed, 25 Sep 2024 04:54:14 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
204 kB (204514 bytes)
Hash
9d884412facef81030680b33f2022e07
f1005a7823c29671b343daa3a75760482f2f1611
b6560fbb3cab4f50f37866331c444068dd3657a8aaf5bcb69fe9f937ba356d6a

HTTP Headers

GET /js/player2021.min.js?v=10.3 HTTP/1.1
Host: s3taku.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 21 Jul 2024 15:46:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 25 Jun 2024 07:05:45 GMT
etag: W/"667a6c49-31ee2"
expires: Thu, 25 Jul 2024 07:10:56 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
content-encoding: gzip
cf-cache-status: HIT
age: 2277304
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Xp2BSOgRyLCfRbbIza0GrZuq84bz8OATCmbaGCB572dtm3ONzeP2L4IIUpi4gf6lCrX0WLrcXorco%2By0tmu5FGVx%2FQkaB7KwxyeDE%2Bp2g%2Fw8mzvrWgsU90%2BUQc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a6c5243edba56b7-OSL
X-Firefox-Spdy: h2

platform.bidgear.com/ads.php?domainid=3113&sizeid=17&zoneid=8091

104.26.2.107

200 OK

569 B

URL GET HTTP/2
platform.bidgear.com/ads.php?domainid=3113&sizeid=17&zoneid=8091
IP
104.26.2.107:443
ASN
#13335 CLOUDFLARENET

Requested by
https://s3taku.com/abpl1245?id=MjI4MTMw&title=Dungeon+no+Naka+no+Hito+Episode+3&typesub=SUB
Certificate
IssuerLet's Encrypt
Subjectbidgear.com
Fingerprint76:6C:E3:AB:A0:F7:8A:35:F2:92:10:21:1F:F9:ED:07:7B:B4:4F:B3
ValidityWed, 29 May 2024 02:16:34 GMT - Tue, 27 Aug 2024 02:16:33 GMT

File type
HTML document, ASCII text, with very long lines (596), with no line terminators
Size
569 B (569 bytes)
Hash
a87d5f9d1ad53503feb6067a17a15062
0da1f9da27e999b12f4799ccfe23d35c4f582a81
aa1da81150dcc21b8f6ef046fce3b05a82d7ea189db76c2edefe662dc444ff1a

HTTP Headers

GET /ads.php?domainid=3113&sizeid=17&zoneid=8091 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3taku.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 21 Jul 2024 15:46:01 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nv9XDEbFqyBW5Kd5kh4f01TQwsQQoF42mhvYZQb%2BHY6HtSMwcPp%2BlTmXqjHMvwGN2fn5knUC0WVSciato1H28AdhtH62SblOLSpsBE9jB%2B%2FiLVdg8xXzuebIocVSp9F0mzXtPW2m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8a6c52445b1256c9-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers