| go.bluelinknow.com/t/clk?id=l7HRkLkUB4HXBdC0&s1=663dbbbb7dedf40001036c94&s2=3099d1f0&s8=guide-du-routard-maroc-2023-24.pdf&rl=v2ryiWXy&redirect-from=qMHYEQETLvuvMGuY&rcode=R02&rseq=R02,R02 |  107.23.36.102 | 302 Found | 0 B |
URL User Request GET HTTP/2go.bluelinknow.com/t/clk?id=l7HRkLkUB4HXBdC0&s1=663dbbbb7dedf40001036c94&s2=3099d1f0&s8=guide-du-routard-maroc-2023-24.pdf&rl=v2ryiWXy&redirect-from=qMHYEQETLvuvMGuY&rcode=R02&rseq=R02,R02 IP107.23.36.102:443
CertificateIssuerAmazon Subject*.redlinknow.com Fingerprint79:82:ED:1B:55:67:44:54:B9:21:32:61:9D:61:C9:1A:2F:AF:97:76 ValiditySun, 17 Dec 2023 00:00:00 GMT - Tue, 14 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/clk?id=l7HRkLkUB4HXBdC0&s1=663dbbbb7dedf40001036c94&s2=3099d1f0&s8=guide-du-routard-maroc-2023-24.pdf&rl=v2ryiWXy&redirect-from=qMHYEQETLvuvMGuY&rcode=R02&rseq=R02,R02 HTTP/1.1
Host: go.bluelinknow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 10 May 2024 06:16:46 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
server: nginx/1.14.2
cache-control: no-transform
x-frame-options: SAMEORIGIN
vary: Accept-Language, Cookie, Origin
content-language: en
set-cookie: uip="[\"MbOIMv\"\054 {\"8GaN\": \"QbKQwx7\"}]:1s5JYk:ZoRza-MAGe5GQW4YE7sxE-ikNfc"; expires=Sun, 09 Jun 2024 06:16:46 GMT; Max-Age=2592000; Path=/
ydt_a31a0322edef4efaa328c3e667d70925="[\"a8b0fab7-e9ed-4b91-9c89-af47a7244944\"]:1s5JYk:bE4SfLQwdQQhVXmdBoKuA7Z-0Ro"; expires=Sun, 09 Jun 2024 08:16:46 GMT; Max-Age=2599200; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-ac0f3d90.js | 172.67.186.1 | 200 OK | 101 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ac0f3d90.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Size101 kB (100550 bytes) Hash4d102cd1e15ec23f2b1c47b6af1b710b 9cd6ad5ff508def0456645570661344c7a8e2fe2 c9a98ea023bff160f34436b43c9c04e7fe5fc54bfa88f322696a68c31b24ff02
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ac0f3d90.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=267708
access-control-allow-origin: *
etag: W/"663b4ae5-415bc"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PmwzkkutEe%2FH6MAi%2B%2F2Yl2Y7OaGeAJtjVWHsTtR6KeNt2rpSb346mn738MX8cV2jgJkJ81UfWzwtBPxP7HzVdYk2nC3V7wTyYq3iEWMfNWqlgkEMBVJglrJQe12C4rlWfsFKswtOTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd701e69b51e-OSL
|
|
| flaredownload.com/assets/hl-de833af9.js | 172.67.186.1 | 200 OK | 75 kB |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash769b0bb8134be6b2f0e2ddadc9042fb8 efe2491ba6a89a26160216d4c313c6749702510f 9f086da7c06bf20c371366f63a086a54a03eec32594549d0a3441692e4d4a23f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663b4ae5-2b3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXG9xPe%2FaK7QB6QyHLtkhD5qE2L%2BbxQDHkhg3k1Mqw%2Bx7yVF20XWFdM2205dMgfdxRWyy2XHbnhAdL3tC%2Bl%2FND7QJsHw2mQnlkQ%2FkgKrHLAkn8teUwq0cM5app6tXMjfocgYDYKLEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd72a98fb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-6ba4f92f.js | 172.67.186.1 | 200 OK | 95 kB |
URL GET HTTP/3flaredownload.com/assets/hl-6ba4f92f.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash9c01d68ee0cbb3584d0c016c3e32d695 cb14c6911722e5649cdc7d6fa18b1c0b35c9c7ac 8293579500fda58eed09becfbc5c726b80351427827a85b67fd93e1f1331b085
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-6ba4f92f.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1286
access-control-allow-origin: *
etag: W/"663b4ae5-506"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9lo1fv%2F%2B2F90EDHdUzdXYxdsUbTQx8dbJwj4CkSEUm2OwttCqVnNTLPwppSXhn6JHzPjABTXcy2TLF42OLxU%2FAvJ6VP6SngSN4iHlKwKBio8eL1Tly7h60qSrkRUsidfj1FxRCY%2Bvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd72a98cb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/visit/get-data?landingId=7748&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource= | 172.67.186.1 | 200 OK | 6.6 kB |
URL GET HTTP/3flaredownload.com/visit/get-data?landingId=7748&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource= IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashdadcd6d047ee26628a788d5c41bf2aa6 1e2d6d9ee6d226f08eff537511fe30a82216e59e c04ceb50f416e35829458061363497575d608f934cd856994a8e5c20e34da78b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /visit/get-data?landingId=7748&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sentry-trace: 739567c987f64a67802aa1dd96d603e9-86300c14a739cdbb-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=739567c987f64a67802aa1dd96d603e9,sentry-sample_rate=0.1,sentry-sampled=false
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/json; charset=UTF-8
set-cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; path=/; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TbpRFyXbJgdr12htoeHFRj9hg7xrVb9fY1zbPchz%2Bx6n6WTC2w92loGcVSBtNEUxi%2BJOPaxShy7x7BRJjy2vTzMRE7%2BnHlUxl6Xpt5QVXBdoVYlY0SPMywPzaP%2By7SA6kFRtPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817cd712fd4b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/a?v=3&t=l&pid=616938509&rv=4580&u=AAAAAAAAAAAAAIAAAAAAAAE&ut=Ag&h=Ag>m=45je4580v9124051649za200&ccid=124051649&cid=G-CK9NSGSVJF&l=L2063.S55.B41.E49.I1528.EC6.TC12.HTC0~gtm.init.S1.V0.TS5ogtgasend.TI16.TE2.TS5ogtreferralexclusion.TI18.TE4.TS5ogtsessiontimeout.TI19.TE1.TS5ogt1pdatav2.TI20.TE3.TS5ccdgalast.TI21.TE0.TS5ccdautoredact.TI22.TE1.TS5ccdconversionmarking.TI23.TE0.TS5ccdgaregscope.TI24.TE3.TS5ogtgooglesignals.TI25.TE1.TS5setproductsettings.TI26.TE1.TS5ccdgafirst.TI27.TE1~gtm.js.S2.V0.TS5gct.TI13.TE0~*~gtm.dom.S1.V1.E10~gtm.load.S0.V0.E9~gtm.init_consent.S2.V0.E46~GA431 | 142.250.74.168 | 200 OK | 0 B |
URL GET HTTP/3www.googletagmanager.com/a?v=3&t=l&pid=616938509&rv=4580&u=AAAAAAAAAAAAAIAAAAAAAAE&ut=Ag&h=Ag>m=45je4580v9124051649za200&ccid=124051649&cid=G-CK9NSGSVJF&l=L2063.S55.B41.E49.I1528.EC6.TC12.HTC0~gtm.init.S1.V0.TS5ogtgasend.TI16.TE2.TS5ogtreferralexclusion.TI18.TE4.TS5ogtsessiontimeout.TI19.TE1.TS5ogt1pdatav2.TI20.TE3.TS5ccdgalast.TI21.TE0.TS5ccdautoredact.TI22.TE1.TS5ccdconversionmarking.TI23.TE0.TS5ccdgaregscope.TI24.TE3.TS5ogtgooglesignals.TI25.TE1.TS5setproductsettings.TI26.TE1.TS5ccdgafirst.TI27.TE1~gtm.js.S2.V0.TS5gct.TI13.TE0~*~gtm.dom.S1.V1.E10~gtm.load.S0.V0.E9~gtm.init_consent.S2.V0.E46~GA431 IP142.250.74.168:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?v=3&t=l&pid=616938509&rv=4580&u=AAAAAAAAAAAAAIAAAAAAAAE&ut=Ag&h=Ag>m=45je4580v9124051649za200&ccid=124051649&cid=G-CK9NSGSVJF&l=L2063.S55.B41.E49.I1528.EC6.TC12.HTC0~gtm.init.S1.V0.TS5ogtgasend.TI16.TE2.TS5ogtreferralexclusion.TI18.TE4.TS5ogtsessiontimeout.TI19.TE1.TS5ogt1pdatav2.TI20.TE3.TS5ccdgalast.TI21.TE0.TS5ccdautoredact.TI22.TE1.TS5ccdconversionmarking.TI23.TE0.TS5ccdgaregscope.TI24.TE3.TS5ogtgooglesignals.TI25.TE1.TS5setproductsettings.TI26.TE1.TS5ccdgafirst.TI27.TE1~gtm.js.S2.V0.TS5gct.TI13.TE0~*~gtm.dom.S1.V1.E10~gtm.load.S0.V0.E9~gtm.init_consent.S2.V0.E46~GA431 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| flaredownload.com/prod/images/18e8c55ad549933e62ee40b8c7adbdd0.png | 172.67.186.1 | 200 OK | 3.2 kB |
URL GET HTTP/3flaredownload.com/prod/images/18e8c55ad549933e62ee40b8c7adbdd0.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hash18e8c55ad549933e62ee40b8c7adbdd0 f7bc824a4c70a4babc07b21fcbd413885128e92e 69bec757694a537e73efba217eaca74df87935a063fe5c6a25f22c7e196f6520
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/18e8c55ad549933e62ee40b8c7adbdd0.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: image/png
content-length: 3235
last-modified: Mon, 24 Apr 2023 09:10:42 GMT
etag: "64464792-ca3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FtW6i1x0eJ6HoreNg7BTITNxk4QdaJFVOgdNKHSWjCrSswvyrssE4H2S4LWrnxOcT0YMNZHDU6MkgUvrdh%2BlpJYW7U2Gp75nqJ9msZ8gZkLoa12Kbeb5LQfBP9mWKmIiWR9xJJa9HA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 8817cd768e06b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-20774a98.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-20774a98.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash149cb7c6105dc0b262ddcf373613d637 8cb9147da52e9d87f848c89e304e01cd5c62955e 438a80df463e8b17e18b5e7222f9429bbe0f70c2103e23b41d39951d6d0af7ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-20774a98.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=386
access-control-allow-origin: *
etag: W/"663b4ae5-182"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ee72%2FOu8xGNzOzBAJmfGWRe1nCsQogKXmdA5EhAdR7psEzGrTMa2KMPXaKw5hgBgH2vNWBHQ0k7XaCYhI%2FSGLKizsnwFRso7Fsw2EPaA2iTpRuVhy0H0ltIt5PTL%2FO%2FzQMRoiHFn2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd751c76b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-e2569f25.js | 172.67.186.1 | 200 OK | 9.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-e2569f25.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashe16b2d29d76d42a97b5bda39051e2292 283a3c483685e4ba3c433cc6f822f67d35fbcf0c c1b40dcc6a1a60dd0cd84cefc486170799173a50e60feac103feb10facb3476a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e2569f25.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-20774a98.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5041
access-control-allow-origin: *
etag: W/"663b4ae5-13b1"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QY3TETq4BhCeWnrzRkysu25rOCUpPEwXbGY0aOs2sdFCdyKIR4Y06fUu5fVW1vduRmEvUfj8nXtro9xTphVVYkddYQ3eW8pMj7mGhwicF810JEDMYmWCKQgSresWzISJA1vG6r%2FyUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd758cfab51e-OSL
|
|
| flaredownload.com/assets/hl-41e46faf.woff2 | 172.67.186.1 | 200 OK | 7.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-41e46faf.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7900, version 1.0 Hash9ed361bba8488aeb2797b82befda20f1 6f80d965a066aff81c0a344d4b7297bd009cc099 41e46faff74c6a77d581689ec35eb040f6c96d17f4d2c5b25dccd42ed498b01c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-41e46faf.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-78f24724.css
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/octet-stream
content-length: 7900
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-1edc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kyOTn%2F10%2B9wD1ve3b4rPWB7sAgnFfniUgQZEY6ej57m4Yba7fqEu9FjjF8PAwQ25XwEYpESpQpCyN7Dy9OYGWtpfCLDl2uijEcdN5hcMEsEBJ%2Bb44kPL7wWOMGrYiu1bJ7rn0xc4uA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8817cd76ce60b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/f4a32eb2e5f203dab4882f7b7581b06e.png | 172.67.186.1 | 200 OK | 9.2 kB |
URL GET HTTP/3flaredownload.com/prod/images/f4a32eb2e5f203dab4882f7b7581b06e.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashf4a32eb2e5f203dab4882f7b7581b06e 8d51933205a3ed27c2c6bd0182142d6f8432d929 83ec91fc25549922aa0f873a3dc6a3e71f83d8b8cd75fb018475762be29a894e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/f4a32eb2e5f203dab4882f7b7581b06e.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: image/png
content-length: 9232
last-modified: Tue, 03 Aug 2021 15:21:51 GMT
etag: "61095f0f-2410"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nkj8Yhzkz80mEqdX7JqkqkHtkIYRw%2F0JtoU106KLZttVyxnHwzIImp07LjV2WrQBzo%2FRQ1ei22AFHo5%2FvuM3gb4FCglWYPUFIjyayFOxkSeBeKyFm8Fj3nK%2B7mMwKDWlmbX03MtuUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 8817cd77bf9fb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| event.secureanalytic.com/register/event_log/v9e179lqez | 172.67.204.164 | 200 OK | 0 B |
URL POST HTTP/2event.secureanalytic.com/register/event_log/v9e179lqez IP172.67.204.164:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/v9e179lqez HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://flaredownload.com/
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-headers: content-type
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
access-control-allow-methods: POST
x-frame-options: SAMEORIGIN
access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U22YhApOkU%2F0knG5PxmirIQoMeGrDzjKbl%2BuJH80I%2BURmfHMiD3hLF4%2FAOMW8Geem0T4H5Y%2BkHl1GJnQ1gua6rIYZm4t%2FW%2Fz8kC%2B8l4njTz0c5Pv%2FdxbMlooaUIoSoJv%2BXXQqGmZkEsaIOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817cd773beb5690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| event.secureanalytic.com/register/event_log/v9e179lqez | 172.67.204.164 | 200 OK | 0 B |
URL POST HTTP/2event.secureanalytic.com/register/event_log/v9e179lqez IP172.67.204.164:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/v9e179lqez HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/
Content-type: application/json
Content-Length: 114
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: SAMEORIGIN
access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Av3zxQCgBwO3DTGygMaEUiewYBoBy6Zx17J2SGUkb5m89zEOX9xdktJrgMoXwTLbwus6qTCVW5foSygL8taC8EmsZD9SoOcBUdUlVkp8d%2B1qLJDNSxCWFXDlFdrHe7J8sesYubzJrE7PBE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817cd780cfa5690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-0a51a8ee.js | 172.67.186.1 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-0a51a8ee.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hash756e1f4fbdec44a4380a0d01cd20dcfe b9a7c52bb65d6b575fec34b3bd65033ed6e0b477 180aa6e98f42d6060cc57fa85309899e8364f4d990ec7c29d9da99d9cdd18e61
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-0a51a8ee.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663b4ae5-1a3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ORmQ%2FOKu5fMezXrqjI6%2BLBaLqUmOshA7eLqzyN4Ef2Lr7ukQdhe94IYVC91veq6RmeC9Jv6qpjOXP1SLyKWWhsjUJwWla%2FQ6MaIKCqjxFe3mh0eT%2FoZsdlsILLUfECPV6Ozy%2FOzkLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd72a97fb51e-OSL
|
|
| flaredownload.com/assets/hl-6ba4f92f.js | 172.67.186.1 | 200 OK | 104 kB |
URL GET HTTP/3flaredownload.com/assets/hl-6ba4f92f.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Size104 kB (103920 bytes) Hashb17df8b1d40e7c59461bf554940deecc 568ae45e8abca668c9cd6966d9782be02b4c033a cd619a160086efc3e667520552e3301781000c650fdbb7394ec808730de1917b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-6ba4f92f.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ac0f3d90.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1286
access-control-allow-origin: *
etag: W/"663b4ae5-506"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9lo1fv%2F%2B2F90EDHdUzdXYxdsUbTQx8dbJwj4CkSEUm2OwttCqVnNTLPwppSXhn6JHzPjABTXcy2TLF42OLxU%2FAvJ6VP6SngSN4iHlKwKBio8eL1Tly7h60qSrkRUsidfj1FxRCY%2Bvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd72a991b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-ca68ddb2.js | 172.67.186.1 | 200 OK | 6.8 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ca68ddb2.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashcb8b5afebef8918ba6672f6bab6d2129 eebf7a31e95452d6ec61a8a1cf98917f382d9632 abec0c4a48894ffda19b9f24d8d3e982ddbaac43bf182043dfeaf6d5ced59368
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ca68ddb2.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ac0f3d90.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663b4ae5-13c2"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UetglSBUEeVzV1EQ6IUVcDHz%2BQoU2DrIyfM1E2zdI0sAGCVEiTjDMnj%2BI5uk2cBLo4DBMu3hS7inrwqnEOhQfGHRR8L35Dt7z4w%2Bb%2FJYiCMA4F0Cvf4K85UtN4V0brWKhb8N192wKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd72a990b51e-OSL
|
|
| flaredownload.com/assets/hl-ca68ddb2.js | 172.67.186.1 | 200 OK | 8.3 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ca68ddb2.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typegzip compressed data, from Unix Hashadbafd133b375681b1cd0bb24ddc8672 712feb9b13e0a8c3360fd8ab0b483a77dc2e3141 a82c21f72d1b0ca257a406c96979c29cd6eb352a20ee95349ef0680d38899775
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ca68ddb2.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663b4ae5-13c2"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UetglSBUEeVzV1EQ6IUVcDHz%2BQoU2DrIyfM1E2zdI0sAGCVEiTjDMnj%2BI5uk2cBLo4DBMu3hS7inrwqnEOhQfGHRR8L35Dt7z4w%2Bb%2FJYiCMA4F0Cvf4K85UtN4V0brWKhb8N192wKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd729974b51e-OSL
|
|
| flaredownload.com/assets/hl-9e26154a.js | 172.67.186.1 | 200 OK | 1.3 kB |
URL GET HTTP/3flaredownload.com/assets/hl-9e26154a.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (1420), with no line terminators Hashb18afcd90b35e5b35c2a11b83b595288 c64437f524f968b12a0199ae01e066174cb4dd3b e5a06add52c56daf4802cf0d7668be609ddeaf30b3e3df808d7676c3737056f9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-9e26154a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1339
access-control-allow-origin: *
etag: W/"663b4ae5-53b"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H2wuD5BjXEF0QuJSbkOVeok5p2R19ncvdcFQZG2BAVwsVR1YHeJGplD0SKW4dBG3LOjPWUHHWlFVGZs9d9jtVdK3iYCz5uWQTmBgRYXQzWhHtBhdpRaEbVaUknaI6a9MRbjyavXyZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd734a88b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-CK9NSGSVJF&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 263 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-CK9NSGSVJF&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size263 kB (263398 bytes) Hash80402d9eba8e4889403a3655e1eca5c8 85a221bd051174c510d94913c018ba99ca692415 73871fc938c9b67f3064ce76d618f1936a568152a2802d20b9dd14e66c55c647
GET /gtag/js?id=G-CK9NSGSVJF&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 06:16:48 GMT
expires: Fri, 10 May 2024 06:16:48 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92855
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| flaredownload.com/lead/prefill | 172.67.186.1 | 200 OK | 64 B |
URL POST HTTP/3flaredownload.com/lead/prefill IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash0a00dc476383c35bcfbc0ea44c3a60ea 36ebdfa0bfa4aa0ec8f4d7417d2112bae7d406db 819bd596583bc3bc638b2fa8d87d80b16551a1d68abb86261795db848cc226d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /lead/prefill HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
sentry-trace: 739567c987f64a67802aa1dd96d603e9-a1516ea5c37381e8-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=739567c987f64a67802aa1dd96d603e9,sentry-sample_rate=0.1,sentry-transaction=LandingHome,sentry-sampled=false
Content-Length: 56
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/json; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4s8J7lyjNK9vNv2yQom6OIZ30dnr4fWFd2K3MIBrnlH%2FZu6Tmu3NmSVQ0zAFEO%2FMIYN1vWHFIx2NFidxfP1d2IS5jgXv2McezjQlPoeR%2BoZpRdgY28RKxoq%2BSPXpylPBlQ%2BiSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817cd766defb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-edb2da2a.js | 172.67.186.1 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-edb2da2a.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1438), with no line terminators Hash862c9cf6fcd7b7f9a63460432c1c4cd4 fd37338a883a89512e82afbc9c5e226b871d4fed cd09ea827717eb9bf6f24164c61f1c8c8fbf4c41d80b4c9bdf48cefede2e3290
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-edb2da2a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ca68ddb2.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1413
access-control-allow-origin: *
etag: W/"663b4ae5-585"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QiBLwKiZCCy4c4L%2FG6ntICB2q8ooeoJ8zAUkCWhRcKZ4PpwY9CqKnaIqlmoeVZYuOUkoRogyWu6SwsrlsTfPYfa425gr7FV8dvFr88H1%2F2c6sTg%2BBXU%2BFZkVisJ4GDlLZsrm3cGbrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd731a20b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-78f24724.css | 172.67.186.1 | 200 OK | 26 kB |
URL GET HTTP/3flaredownload.com/assets/hl-78f24724.css IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (26409), with no line terminators Hashf89cae638a8015aae1089a2222424d0c 2af82acafcc3e922b30bed5dd5516def3003b013 5043dc083072fc72e3ac45b97c961ee95ad1b6ad9d31f5d461dad48e63454371
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-78f24724.css HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=26547
access-control-allow-origin: *
etag: W/"663b4ae5-67b3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8V8r00I6BRR54qIioLG2CPrs5lHUq7KAYzN93zYmK%2FRZezSYJ5qRAMpp52NuAHqOJc1gTRk%2BpezJAo8ZJ26AIjGrGDWet0IWHdA9v%2BmlbUqSPkow4lkEbu54iMAbgxiR27e64ROQWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd750c68b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-cb9a6390.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-cb9a6390.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (2072), with no line terminators Hash51f31e92f763720c04fecc76755abab3 ce11de3fa7d291c4172988471a678aa6c568f3ee 4f539f4f190f247ed6c26bced0c1a6948503215e25ff3fd372be838f25dbbb3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-cb9a6390.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-20774a98.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1903
access-control-allow-origin: *
etag: W/"663b4ae5-76f"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EJ3dqraRLc8En3SYyEHDC%2BYibTrKUDMAthkUM7%2Bba2ddMYOipNiRtJCQNIcuPcQjs2l7PXpcHIxUxWPoMuLHbKsIfRc8pHJal8N7q7qQNcmB9FUz7Dj9pmDAEjHx%2BcnT%2Fyv0IvdEsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd758cf3b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-f1b986bc.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f1b986bc.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1960), with no line terminators Hashb9a5d3c71cb6b2c8002ec1f1bda6c10f 9581c05a6fe65948ae6b6226a25d65fc39e5120d 9fb1766ed9adf4d1d9a8fc90b5cbda3199de9b3a6280e89c5a2b07ac17d21618
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f1b986bc.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1923
access-control-allow-origin: *
etag: W/"663b4ae5-783"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sRjNQvRafvnne2c6EeJ%2FxLC1xDOkya78UGqXNRkmUrgsoHYOiRApU33Oy64WddjlTVnC0J%2F11BFbHd5IG%2Bh9lILJso13yZUPkAYLo3Tdu2gJ%2BwxwsOmb4GBOszpBvAZOg%2FB9Kfo7Nw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd767e04b51e-OSL
|
|
| flaredownload.com/favicon.ico | 172.67.186.1 | 200 OK | 4.3 kB |
URL GET HTTP/3flaredownload.com/favicon.ico IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash1ba2ae710d927f13d483fd5d1e548c9b c0605efed936ee2600284e6480521d06fa64f872 db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: image/x-icon
last-modified: Wed, 13 Sep 2023 08:04:59 GMT
etag: W/"65016d2b-10be"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0qazQE6jhyIDtOwCGVTkhz4Jghv0pzUgii79DtGAw9MrFhZFhxsQ%2Fve45xxMmACZHW0HtzWteOUQ51stw6JhNBC22RskJOjvyfEn8B7EC57Mp1nMNbJI2xlB%2BbzNG1cWslF6RA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817cd71d891b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=UA-195162716-6 | 142.250.74.168 | 200 OK | 208 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-195162716-6 IP142.250.74.168:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Size208 kB (208138 bytes) Hash583d3f7c30f4bf32f5c75d0853939f54 81d88816e993c1071b813da443524ffaf7452ef4 3f7543864d95a20620c8c6e44581fdc9099bbf48fe4c983005570c55eb933bf3
GET /gtag/js?id=UA-195162716-6 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 06:16:47 GMT
expires: Fri, 10 May 2024 06:16:47 GMT
cache-control: private, max-age=900
last-modified: Fri, 10 May 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74920
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-cb9a6390.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-cb9a6390.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (2072), with no line terminators Hash51f31e92f763720c04fecc76755abab3 ce11de3fa7d291c4172988471a678aa6c568f3ee 4f539f4f190f247ed6c26bced0c1a6948503215e25ff3fd372be838f25dbbb3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-cb9a6390.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1903
access-control-allow-origin: *
etag: W/"663b4ae5-76f"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EJ3dqraRLc8En3SYyEHDC%2BYibTrKUDMAthkUM7%2Bba2ddMYOipNiRtJCQNIcuPcQjs2l7PXpcHIxUxWPoMuLHbKsIfRc8pHJal8N7q7qQNcmB9FUz7Dj9pmDAEjHx%2BcnT%2Fyv0IvdEsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd751c78b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-1d2dcd13.js | 172.67.186.1 | 200 OK | 2.8 kB |
URL GET HTTP/3flaredownload.com/assets/hl-1d2dcd13.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (2919), with no line terminators Hasha0b4119f5d5f5a927d4bf34faa0cc405 c8162f155fd84e24b7f5cc022ba275d5e4a2e0eb a9e5adb805319f7fbada26599b83538fd92dc9f64ca557a4ef50e1610f5d10f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-1d2dcd13.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2842
access-control-allow-origin: *
etag: W/"663b4ae5-b1a"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3rr2N%2BGITRNMmgJTrfCtzIwuVsszitI8U4R43Tbk50uEXl%2FrgXsKVDM304DdXaL%2BzRALTF2OJwvyLSgWHn%2F%2BSU2d1P7oQKoRGENerDKh7k8ipf1XXnICUFp5XktDWt%2BL3pC%2FTkBRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd767df7b51e-OSL
|
|
| flaredownload.com/assets/hl-35a77ba0.js | 172.67.186.1 | 200 OK | 72 kB |
URL GET HTTP/3flaredownload.com/assets/hl-35a77ba0.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-35a77ba0.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72018
access-control-allow-origin: *
etag: W/"663b4ae5-11952"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mlsjzSn30JdBHiEPrbWyC8tYkeUnjWL%2BTfP%2B4MUqe5jN%2FX27otGXz9FSG7Ne2NFLYggFa2yGS3O4I59ktW9%2Bw1OK49YGia9ykjUKqehl%2BYaK7R9ssH2w7F%2FfCSioNd0YFr%2BkqbqTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd72a98eb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-9e26154a.js | 172.67.186.1 | 200 OK | 1.3 kB |
URL GET HTTP/3flaredownload.com/assets/hl-9e26154a.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (1420), with no line terminators Hashb18afcd90b35e5b35c2a11b83b595288 c64437f524f968b12a0199ae01e066174cb4dd3b e5a06add52c56daf4802cf0d7668be609ddeaf30b3e3df808d7676c3737056f9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-9e26154a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ca68ddb2.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1339
access-control-allow-origin: *
etag: W/"663b4ae5-53b"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H2wuD5BjXEF0QuJSbkOVeok5p2R19ncvdcFQZG2BAVwsVR1YHeJGplD0SKW4dBG3LOjPWUHHWlFVGZs9d9jtVdK3iYCz5uWQTmBgRYXQzWhHtBhdpRaEbVaUknaI6a9MRbjyavXyZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 8817cd74cc1ab51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-3f88d0c7.js | 172.67.186.1 | 200 OK | 426 B |
URL GET HTTP/3flaredownload.com/assets/hl-3f88d0c7.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (456), with no line terminators Hashe63a8c182717943cf652b3f065d41a83 9dc6349a6c7024394c0bea4b5b565eb6c1c3b8e5 7233fa553cfcb4c80784a931aa84db583075a2c1d5eb4fb3b8dcbdc5ce87334c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3f88d0c7.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=427
access-control-allow-origin: *
etag: W/"663b4ae5-1ab"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zg6RxL1vEYIz29MTaYL1bLuTiOW8t4eNyU77JbKDX63auF8RtqMKGWOLhRXLBMBhW7cBnaVefY4NpjSCexlCLVtCN8z9S8BjlUGLg9g5LklW7YlFlqPPZS6GBoRU3xbPiQfFzFcTtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd752c87b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-174bb060.js | 172.67.186.1 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-174bb060.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash12bcc39d49f0f8ac37fe5e398081fdf1 f158861f98bc6c8dd75fc7b7f6b3b0631e62401b 7a8f91af99ee1390dd9533577681aae34565792e41688822ebe39b9e7a211f6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-174bb060.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663b4ae5-394"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBF41In3%2FakrGcl1umG1XKIHXKYk9Ny2Cb9h3JMyU9HPtVo4ueyra2B6p8JB%2FPPt36q%2FTyf%2BG1xszRnuTlcKU1qv0SPFXBVq6Ukg2IQBhmu6bqWVTLQe57nuZZc31%2FNt2tN0kIVVmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd751c80b51e-OSL
|
|
| flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= | 172.67.186.1 | 200 OK | 417 B |
URL User Request GET HTTP/2flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= IP172.67.186.1:443
CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeHTML document, ASCII text, with very long lines (456), with no line terminators Hash01e6ef88274ac477c37fd233375ae2cc d20657936e7a7fb42fa28e667b77c868c1c0713a 84dad8fa7d46f36052654558f0fdafb5f219df5851593db6b0ca63d506e8e5f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gJ5G7UvhgIEhXwtC8%2BzCx5nCdAHZAfe%2BYTcebRFyd1JyN2e8Lbit%2FFte0v685NIUMDy32O14FplaoREdeNxBdc7TPhAuBlp8v1LC2IC8%2BJuoqC76vnvEiaLM3%2Bz3x2x59%2BjLgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817cd6dcf077127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-e8f6c714.js | 172.67.186.1 | 200 OK | 561 B |
URL GET HTTP/3flaredownload.com/assets/hl-e8f6c714.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (583), with no line terminators Hash4dae65fd7c12b1047898c3bc2e480703 49d61cd294e25f3dc0aeaf08a275bd144f7ad31a cd969cb86a11edc3cd4341030cb195ea31112697eac9127b4c828bff263c1ee3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e8f6c714.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-20774a98.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=562
access-control-allow-origin: *
etag: W/"663b4ae5-232"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hgdB98wf5PM%2FqlKdyFSrcNLMVqHvkmpmJZnSr5geeRn%2B1mRsr4hg%2F18TYx%2F7HVXCRFOw88osQSWffE7comM5jcHxls86uc6URuEvsr%2BfxlePA0X6VOlhbr%2Fxmtgf4jN72270eBjxMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd758cf6b51e-OSL
|
|
| flaredownload.com/assets/hl-b93b9165.woff2 | 172.67.186.1 | 200 OK | 8.0 kB |
URL GET HTTP/3flaredownload.com/assets/hl-b93b9165.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7988, version 1.0 Hash087457026965f98466618a478c4b1b07 00b024ccb35e3694de662d180d6ea7f56de6d654 b93b9165269362989e2855d0bf0ae232d7193a45c43627b2d03b26d7eb98263b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-b93b9165.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-78f24724.css
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/octet-stream
content-length: 7988
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-1f34"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2FIErYmznj2Wmn5R8iqI%2BHVAx0O%2B8pvmNUITGykpDBTIeV1mptPNCxSlx7v8RFRnQvEThAfw6UAMU2EuS6e02m2cmVCbEFu%2FVxOTmDFsGtIZWvHGJ43q7%2BoV5FkX5uSRoE%2B0NQtDug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8817cd769e29b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-f1b986bc.js | 172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f1b986bc.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1960), with no line terminators Hashb9a5d3c71cb6b2c8002ec1f1bda6c10f 9581c05a6fe65948ae6b6226a25d65fc39e5120d 9fb1766ed9adf4d1d9a8fc90b5cbda3199de9b3a6280e89c5a2b07ac17d21618
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f1b986bc.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-3bcd5885.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1923
access-control-allow-origin: *
etag: W/"663b4ae5-783"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sRjNQvRafvnne2c6EeJ%2FxLC1xDOkya78UGqXNRkmUrgsoHYOiRApU33Oy64WddjlTVnC0J%2F11BFbHd5IG%2Bh9lILJso13yZUPkAYLo3Tdu2gJ%2BwxwsOmb4GBOszpBvAZOg%2FB9Kfo7Nw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd76fea9b51e-OSL
|
|
| flaredownload.com/assets/hl-be61e397.js | 172.67.186.1 | 200 OK | 780 B |
URL GET HTTP/3flaredownload.com/assets/hl-be61e397.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (823), with no line terminators Hashdd8f79e0732ee114694864ea0076d284 ac82ff6564a78d607ded72228101bd151ce10820 7cfa3320b8ba9e633a317cb89a1938e15c5fb55a4439c1f6566b9cf631858055
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-be61e397.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-e2569f25.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: W/"663b4ae5-30c"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8s8B5jEOBuUyEI0qdhNhRu11DdAZw7HiQYx7VWf53qCUiRMhSQY%2FS2lXRulXpjpfrOReBnDs84WrcoZeP5%2B1RArNtkzjsCXwr5AZpyT96dS0S%2BpUS2SzYhT6LMbVgdmuO9V6zOBEIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd768e0db51e-OSL
|
|
| flaredownload.com/assets/hl-3bcd5885.js | 172.67.186.1 | 200 OK | 616 B |
URL GET HTTP/3flaredownload.com/assets/hl-3bcd5885.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (636), with no line terminators Hash7c4ce1f0e8d27a6af8edf023e306ada7 744bf9756d970639fb0ecd0326ecaa423a698494 ae107ad4a9e2538139721bc12136d986b6cbcca032bfb115ce0877718128723f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3bcd5885.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-e2569f25.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663b4ae5-269"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fhvm3yzj%2BZnVUxu1uS4YwHxDo%2BxJ00Bd%2BlGomNKpP6iLlEClbPOwyykdB5p1psiLplXb2fScpjeSMHV4SgBhJG3ZEPZbGaMQjxeQ3Qt9JUJpaM6SBoUu6Oiyjq11OylNfcYcJ09pUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd768e10b51e-OSL
|
|
| flaredownload.com/assets/hl-10816a60.js | 172.67.186.1 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-10816a60.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (1423), with no line terminators Hash56d24893184889bc8960d965b5c284a9 f60b6489e9f990e917d4d74bf4ce78b434e2a60f 792bc543b01fd2be05752f95d9c30ecfdccf16e2a3d95365e26f82ebfdd32f67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-10816a60.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-20774a98.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1364
access-control-allow-origin: *
etag: W/"663b4ae5-554"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tA1phAbXndpch9mnQh66hiC%2FWvYzfwIHCuAlqS26%2FH0Nvr16GXr9VFGj1R4RGGWXV1xtJJCqGyzltGqf5N0id6AW%2BgHqjFgsKX7IO5wE8CqnrZu5sqXyXi%2FVOPC2Q4ns382sC1NxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd758cfcb51e-OSL
|
|
| flaredownload.com/prod/images/2f40fa92fce11c340f70807da03ac0b2.png |  0.0.0.0 | | 0 B |
URL GET flaredownload.com/prod/images/2f40fa92fce11c340f70807da03ac0b2.png IP0.0.0.0:0
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/2f40fa92fce11c340f70807da03ac0b2.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| flaredownload.com/assets/hl-3bcd5885.js | 172.67.186.1 | 200 OK | 616 B |
URL GET HTTP/3flaredownload.com/assets/hl-3bcd5885.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (636), with no line terminators Hash7c4ce1f0e8d27a6af8edf023e306ada7 744bf9756d970639fb0ecd0326ecaa423a698494 ae107ad4a9e2538139721bc12136d986b6cbcca032bfb115ce0877718128723f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3bcd5885.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663b4ae5-269"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fhvm3yzj%2BZnVUxu1uS4YwHxDo%2BxJ00Bd%2BlGomNKpP6iLlEClbPOwyykdB5p1psiLplXb2fScpjeSMHV4SgBhJG3ZEPZbGaMQjxeQ3Qt9JUJpaM6SBoUu6Oiyjq11OylNfcYcJ09pUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd767dfeb51e-OSL
|
|
| flaredownload.com/assets/hl-8521ea14.js | 172.67.186.1 | 200 OK | 3.2 kB |
URL GET HTTP/3flaredownload.com/assets/hl-8521ea14.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (3246), with no line terminators Hash96a3967b148d80524d5d53991dfc35e0 8d4475b0517d2e554a51546b705ec7b2f11d53eb 7fdeb56df8bd63925559d0eba00a69509e1326335da3a27e8554d02505e8c4ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8521ea14.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ac0f3d90.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3167
access-control-allow-origin: *
etag: W/"663b4ae5-c5f"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDRRWtA6H8wNp9PbCI9p8fuxLy1H27BPMQ0nlcz8enYA5Sz1MSMR9aAOJh%2BBeCA1H%2Bo87OMG5e7MDBjBgW3ouziuh77ooI5MruNm9td5GS26yZL0vwdOIlmDyjxjVZFiIBWusXrgwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd729966b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700 | 142.250.74.106 | 200 OK | 8.7 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700 IP142.250.74.106:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (8956), with no line terminators Hash91804c0df51e58b0bf469561e1ac2732 cc5a9023e310b49ef8f8ae32bb89ea774fe116ec 8a8aed46bfb9cdec8e34e76343b7e66796cf09926aef42efdfe5fa8a1fdda8aa
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 06:16:48 GMT
date: Fri, 10 May 2024 06:16:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-3f88d0c7.js | 172.67.186.1 | 200 OK | 426 B |
URL GET HTTP/3flaredownload.com/assets/hl-3f88d0c7.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (456), with no line terminators Hashe63a8c182717943cf652b3f065d41a83 9dc6349a6c7024394c0bea4b5b565eb6c1c3b8e5 7233fa553cfcb4c80784a931aa84db583075a2c1d5eb4fb3b8dcbdc5ce87334c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3f88d0c7.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-20774a98.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=427
access-control-allow-origin: *
etag: W/"663b4ae5-1ab"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zg6RxL1vEYIz29MTaYL1bLuTiOW8t4eNyU77JbKDX63auF8RtqMKGWOLhRXLBMBhW7cBnaVefY4NpjSCexlCLVtCN8z9S8BjlUGLg9g5LklW7YlFlqPPZS6GBoRU3xbPiQfFzFcTtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd758cfdb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-e8f6c714.js | 172.67.186.1 | 200 OK | 561 B |
URL GET HTTP/3flaredownload.com/assets/hl-e8f6c714.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (583), with no line terminators Hash4dae65fd7c12b1047898c3bc2e480703 49d61cd294e25f3dc0aeaf08a275bd144f7ad31a cd969cb86a11edc3cd4341030cb195ea31112697eac9127b4c828bff263c1ee3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e8f6c714.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=562
access-control-allow-origin: *
etag: W/"663b4ae5-232"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hgdB98wf5PM%2FqlKdyFSrcNLMVqHvkmpmJZnSr5geeRn%2B1mRsr4hg%2F18TYx%2F7HVXCRFOw88osQSWffE7comM5jcHxls86uc6URuEvsr%2BfxlePA0X6VOlhbr%2Fxmtgf4jN72270eBjxMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd751c7ab51e-OSL
|
|
| flaredownload.com/assets/hl-10816a60.js | 172.67.186.1 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-10816a60.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (1423), with no line terminators Hash56d24893184889bc8960d965b5c284a9 f60b6489e9f990e917d4d74bf4ce78b434e2a60f 792bc543b01fd2be05752f95d9c30ecfdccf16e2a3d95365e26f82ebfdd32f67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-10816a60.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1364
access-control-allow-origin: *
etag: W/"663b4ae5-554"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tA1phAbXndpch9mnQh66hiC%2FWvYzfwIHCuAlqS26%2FH0Nvr16GXr9VFGj1R4RGGWXV1xtJJCqGyzltGqf5N0id6AW%2BgHqjFgsKX7IO5wE8CqnrZu5sqXyXi%2FVOPC2Q4ns382sC1NxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd751c85b51e-OSL
|
|
| flaredownload.com/assets/hl-174bb060.js | 172.67.186.1 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-174bb060.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash12bcc39d49f0f8ac37fe5e398081fdf1 f158861f98bc6c8dd75fc7b7f6b3b0631e62401b 7a8f91af99ee1390dd9533577681aae34565792e41688822ebe39b9e7a211f6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-174bb060.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-20774a98.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663b4ae5-394"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBF41In3%2FakrGcl1umG1XKIHXKYk9Ny2Cb9h3JMyU9HPtVo4ueyra2B6p8JB%2FPPt36q%2FTyf%2BG1xszRnuTlcKU1qv0SPFXBVq6Ukg2IQBhmu6bqWVTLQe57nuZZc31%2FNt2tN0kIVVmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd758cf9b51e-OSL
|
|
| flaredownload.com/assets/hl-be61e397.js | 172.67.186.1 | 200 OK | 780 B |
URL GET HTTP/3flaredownload.com/assets/hl-be61e397.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (823), with no line terminators Hashdd8f79e0732ee114694864ea0076d284 ac82ff6564a78d607ded72228101bd151ce10820 7cfa3320b8ba9e633a317cb89a1938e15c5fb55a4439c1f6566b9cf631858055
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-be61e397.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: W/"663b4ae5-30c"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8s8B5jEOBuUyEI0qdhNhRu11DdAZw7HiQYx7VWf53qCUiRMhSQY%2FS2lXRulXpjpfrOReBnDs84WrcoZeP5%2B1RArNtkzjsCXwr5AZpyT96dS0S%2BpUS2SzYhT6LMbVgdmuO9V6zOBEIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd767df9b51e-OSL
|
|
| flaredownload.com/prod/images/2f40fa92fce11c340f70807da03ac0b2.png | 172.67.186.1 | 200 OK | 971 B |
URL GET HTTP/3flaredownload.com/prod/images/2f40fa92fce11c340f70807da03ac0b2.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 111 x 75, 8-bit colormap, non-interlaced Hash2f40fa92fce11c340f70807da03ac0b2 89ef777357b185dee8937a3da0983f39f156fb10 44990fb54269fdec9302792e2c01543679151dbfb279e63089e28656884b3794
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/2f40fa92fce11c340f70807da03ac0b2.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: image/png
content-length: 971
last-modified: Thu, 13 Jan 2022 13:22:43 GMT
etag: "61e027a3-3cb"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HVXxjRq8LSvj%2FF7sV13cmWWG3O9kt24btWiolaNMOdRIUSYroyhYXzM4mALPZ2Cy3EsZzRBe9M8ISz0xZRUm%2F7EbGQTQTE%2FAIJA58sTZ2KOg5jZPXuMLvUJUOf%2BT4XcQJnMceMKUNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 8817cd768e07b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-1d2dcd13.js | 172.67.186.1 | 200 OK | 2.8 kB |
URL GET HTTP/3flaredownload.com/assets/hl-1d2dcd13.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (2919), with no line terminators Hasha0b4119f5d5f5a927d4bf34faa0cc405 c8162f155fd84e24b7f5cc022ba275d5e4a2e0eb a9e5adb805319f7fbada26599b83538fd92dc9f64ca557a4ef50e1610f5d10f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-1d2dcd13.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-e2569f25.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _ga_CK9NSGSVJF=GS1.1.1715321808.1.0.1715321808.0.0.0; _ga=GA1.1.1677093648.1715321808
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2842
access-control-allow-origin: *
etag: W/"663b4ae5-b1a"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3rr2N%2BGITRNMmgJTrfCtzIwuVsszitI8U4R43Tbk50uEXl%2FrgXsKVDM304DdXaL%2BzRALTF2OJwvyLSgWHn%2F%2BSU2d1P7oQKoRGENerDKh7k8ipf1XXnICUFp5XktDWt%2BL3pC%2FTkBRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd768e0ab51e-OSL
|
|
| flaredownload.com/assets/hl-edb2da2a.js | 172.67.186.1 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-edb2da2a.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1438), with no line terminators Hash862c9cf6fcd7b7f9a63460432c1c4cd4 fd37338a883a89512e82afbc9c5e226b871d4fed cd09ea827717eb9bf6f24164c61f1c8c8fbf4c41d80b4c9bdf48cefede2e3290
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-edb2da2a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1413
access-control-allow-origin: *
etag: W/"663b4ae5-585"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QiBLwKiZCCy4c4L%2FG6ntICB2q8ooeoJ8zAUkCWhRcKZ4PpwY9CqKnaIqlmoeVZYuOUkoRogyWu6SwsrlsTfPYfa425gr7FV8dvFr88H1%2F2c6sTg%2BBXU%2BFZkVisJ4GDlLZsrm3cGbrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd72a987b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com |  188.114.97.1 | 200 OK | 8.1 kB |
URL GET HTTP/2secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com IP188.114.97.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
File typeJavaScript source, ASCII text, with very long lines (8385), with no line terminators Hashb45c7286594795de3b392f6f8942604d 51239b08544394e811b8fdcc3bdc1df3832256e5 d1cfecd1075f9a9eea50304717a1fbd7cf2601c2d2bc80c698d4136846fdbef7
GET /scripts/push/script/02eyoyxdkz?url=flaredownload.com HTTP/1.1
Host: secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:16:48 GMT
content-type: application/javascript;charset=UTF-8
content-length: 2521
content-encoding: gzip
expires: 0
cache-control: max-age=14400, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: EXPIRED
last-modified: Thu, 09 May 2024 20:22:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=35pw6n22u6fNuWPVP7nvB4CYfR0DJqHRzocDisM0ceC%2Fg8NlbhODEQCbB5dcmt67P4SUadr9K9EHa%2Fz1%2F8RZkue1vs%2FxTrroY%2F3qYOweFetkW64h%2FJ5Eniu5c7hgeM9e1DKZKF4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817cd733decb512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-35a77ba0.js | 172.67.186.1 | 200 OK | 72 kB |
URL GET HTTP/3flaredownload.com/assets/hl-35a77ba0.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-35a77ba0.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-6ba4f92f.js
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72018
access-control-allow-origin: *
etag: W/"663b4ae5-11952"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mlsjzSn30JdBHiEPrbWyC8tYkeUnjWL%2BTfP%2B4MUqe5jN%2FX27otGXz9FSG7Ne2NFLYggFa2yGS3O4I59ktW9%2Bw1OK49YGia9ykjUKqehl%2BYaK7R9ssH2w7F%2FfCSioNd0YFr%2BkqbqTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 8817cd731a22b51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-d98910d4.css | 172.67.186.1 | 200 OK | 78 kB |
URL GET HTTP/3flaredownload.com/assets/hl-d98910d4.css IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (65329) Hasha1713c7a8fb53e78bbd5a1c76068791d c15ca4f1e62bde996f9c72fb4a3e3f584b966741 cd7e4b31039bf939306ab3d38291f59e92069a24744e4b359b557aba0eb5b219
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-d98910d4.css HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/unlock-content-now-1?&subid=a8b0fab7-e9ed-4b91-9c89-af47a7244944&networkid=200347&publisher=3099d1f0&isNewTr=1&stream=guide-du-routard-maroc-2023-24.pdf&email=&subsource=&subsource=
Cookie: visitInfo::7748=7104eec7277ecdb45cbf47df67682ff9529f2e6729b274a11b23a57714a6e02ea%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7748%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22b6aa85f56ef5621b11337d2916d49f10%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A8%3A%223099d1f0%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22a8b0fab7-e9ed-4b91-9c89-af47a7244944%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:16:47 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=77791
access-control-allow-origin: *
etag: W/"663b4ae5-12fdf"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JOn7YO4Okl%2FLx03mPgNlhJCA3i3DwNecMNrDESJ3rlOBDDDspAVPSDZRFKEpAZt%2FU789HIoXmwVe5iDREuriidscD3PkX72ZANIZ3ng57kbwMpsx5f7ZULk1Bl6Q306tHpthxqmgYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 8817cd734a7ab51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0