| launcherleaks.net/applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0 |  172.67.190.32 | 200 OK | 77 kB |
URL GET HTTP/3launcherleaks.net/applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/octet-stream
content-length: 77160
last-modified: Thu, 04 Apr 2024 02:57:28 GMT
etag: "660e1718-12d68"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 115
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMYHJ9ewg0TFq29ek8BpO1FFy1XOT9bIG7Q0avE5w8Bgz8EtSUDb1%2Bpwve0SZEKtIrZbmk8f2o%2FPGZC8%2F5jh2caJNxa1wlORavD8YnLJxNTx8%2FqqfAtguFq%2FA5zS8cbrCN5c3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca4a395691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/cq9aTZx.png.c8fa2de155b3501a586e838cc5e8168d.png | 172.67.190.32 | 200 OK | 6.6 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/cq9aTZx.png.c8fa2de155b3501a586e838cc5e8168d.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 214 x 200, 8-bit/color RGBA, non-interlaced Hash2fc19a8bacd5d0e4d73a306fab8166e0 0f2fce7d0bf503da891f81231fd00aebe7a1d970 49b78f2f11c1bac3763b0131923b05101f20693a46765374d1b193ef86132b25
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/cq9aTZx.png.c8fa2de155b3501a586e838cc5e8168d.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: image/png
content-length: 6596
last-modified: Thu, 11 Apr 2024 12:53:45 GMT
etag: "6617dd59-19c4"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TnUj4xww5HaTlaW2mjOVs%2FSJTDnuIX8e4HrgFo%2Bw0td2izdzAHWFHSA6fXVeqJPYsFBegfgU1Iu2OJ9tSz8A36Sr90oNSe%2F5%2Bspc2PjjFIOi9AgdQGktmG%2Fbm66GNIi7BdlA3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca7a515691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/whats_good.png.7a69ecec6247d8d13d02c05581db0b6b.png | 172.67.190.32 | 200 OK | 551 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/whats_good.png.7a69ecec6247d8d13d02c05581db0b6b.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced Size551 kB (551370 bytes) Hashbd6e64a379de435c2abc2d7946bbfad1 4b24ed6d44f368df35c1d5829579346ae242a770 150df326b0b235af1a0a736475a8809ec47d7a04165180f30519e9ffa2e295e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/whats_good.png.7a69ecec6247d8d13d02c05581db0b6b.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: image/png
content-length: 551370
last-modified: Thu, 11 Apr 2024 06:32:35 GMT
etag: "66178403-869ca"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JT3HgcO0hQB8HUjicqllsgf5k4NPA8XncvhVKw4k9H2QySpHdw5PKDDM4TWTB94C0lFFVchC16IWaGnlKDVQrylVXdYBwpqS2iE6JNClRnCRgH5O0fxQzfKy5NKz2Ha3ywaefw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca8a605691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/adad.png.e52979bb8e22af2923bdefb76ba81178.png | 172.67.190.32 | 200 OK | 295 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/adad.png.e52979bb8e22af2923bdefb76ba81178.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced Size295 kB (295333 bytes) Hash18ef5cd95531bb3dd64d9e06e29e8626 5b94f1bdfa2b1f235349d37ff7cb386671cb8a83 0b827376ee9a9be1006489f2900bf7f67edab2f0e2ea939a8bf5615af9620c33
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/adad.png.e52979bb8e22af2923bdefb76ba81178.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: image/png
content-length: 295333
last-modified: Thu, 11 Apr 2024 06:34:25 GMT
etag: "66178471-481a5"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AX6vj%2BnuPT2H9QKpr3nGv%2FGPMLXAzHmGkSKAiBb4qs%2BfUmYgR%2FZ%2FwP%2FqTRT26lU2FZDacczeehQ0MWKlMue%2B6cb%2B3kDvfj3S3fGwTgpGyeh%2B7Keh2B6YKxWWzqaS7ExPAfuV%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca8a615691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/applications/core/interface/js/spacer.png | 172.67.190.32 | 200 OK | 137 B |
URL GET HTTP/3launcherleaks.net/applications/core/interface/js/spacer.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 1 x 1, 8-bit colormap, non-interlaced Hasha41d6e3396dc05c78cc77b2d2466534d 0ed5c70f6c2012837adc192b1570cdc8551defbe dc1b146a3d93548cfd8893783085c4d22a389d361f6b0816643b67f19233000d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /applications/core/interface/js/spacer.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: image/png
content-length: 137
last-modified: Thu, 04 Apr 2024 02:57:28 GMT
etag: "660e1718-89"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=73bIZzqtDYcB7HAFjBWUesc8v08c29fp8HxzXPQw61Da5mx7fI5KRGjGjwLXGgwzArysmgptrk4S98mbAwF7746nLdgV9c1pgf%2BEFnqxEw4QgpdHkEHBYCX2DMapH5MzMtSE%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca8a635691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/sweetalert2@11 | 151.101.193.229 | 200 OK | 21 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/sweetalert2@11 IP151.101.193.229:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (52172) Hash230c939d3b3fc96a5cf7fec7d22891c0 5c664950c68e5630583db458390152ad0e1c64d9 ef7aceda0ec9484ac6f22b195c2b1edfd29fe721ae78f823cafa2dffc71108d4
GET /npm/sweetalert2@11 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 11.10.8
x-jsd-version-type: version
etag: W/"129b5-XGZJUMaOVjBYPbRYOQFSrQ4cZNk"
content-encoding: br
accept-ranges: bytes
date: Thu, 09 May 2024 02:27:54 GMT
age: 40689
x-served-by: cache-fra-eddf8230029-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21319
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.5.1.min.js | 151.101.66.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.5.1.min.js IP151.101.66.137:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d84"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 09 May 2024 02:27:54 GMT
age: 1077847
x-served-by: cache-lga21981-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 64, 27189
x-timer: S1715221675.884596,VS0,VE0
vary: Accept-Encoding
content-length: 30879
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/monthly_2024_04/image(19).png.2aa78230b74798e345b60e3f00462916.png.4e336bf7c14fbdc1f4db64c294c8c35e.png | 172.67.190.32 | 200 OK | 2.1 MB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/image(19).png.2aa78230b74798e345b60e3f00462916.png.4e336bf7c14fbdc1f4db64c294c8c35e.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 1607 x 1080, 8-bit/color RGBA, non-interlaced Size2.1 MB (2100356 bytes) Hashf8f3bbfe615b3811bc862cc33fd85dba 45c1dad753241f8ff93afb7f5215175a880624c5 2be690f365c2de1f783be2d1d635d1684d9f7ee0c20e4cfaadfb6fbd92c1a64d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/image(19).png.2aa78230b74798e345b60e3f00462916.png.4e336bf7c14fbdc1f4db64c294c8c35e.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: image/png
content-length: 2100356
last-modified: Thu, 11 Apr 2024 06:36:43 GMT
etag: "661784fb-200c84"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xwtv3xb8BN4tDDn6EvpFPVqbdriQUtWCGMsoT28O64OkDB8xlsfQ3y9wuOXM%2F4exEfpb4qIpHckXIjjlRI24fOxDD0mPdikzA3bS4zNjZp295CIJk46rYsY9G%2F1nVeeHISuYMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca8a625691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/file/12754-bmw-m2/main_script.js | 172.67.190.32 | 301 Moved Permanently | 0 B |
URL GET HTTP/3launcherleaks.net/file/12754-bmw-m2/main_script.js IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /file/12754-bmw-m2/main_script.js HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Thu, 09 May 2024 02:27:55 GMT
content-type: ;charset=UTF-8
content-length: 0
location: https://launcherleaks.net/file/12754-bmw-m2/
x-ips-loggedin: 0
vary: Cookie, Accept-Encoding
x-xss-protection: 0, 1; mode=block
x-frame-options: sameorigin, SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-content-security-policy: frame-ancestors 'self'
referrer-policy: strict-origin-when-cross-origin
expires: 0
cache-control: no-cache, no-store, must-revalidate, max-age=0, s-maxage=0
strict-transport-security: max-age=15768000; includeSubDomains;
x-content-type-options: nosniff
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UTkn1DaUaHlav3O3sDgtGoOzir2q3ywZ26m8TBe16gWFzSnE7SsP7F06pLLb4w4lG7eN1sNU%2FWkVuXmQn%2BhPgsENyQLUhYvrP64C7%2FIJ41i8VOa4klB%2BA7Fs%2BNUYw%2FdCQI55rA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40ca8a5f5691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 6.8 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Hashe15e5ec5fab87f46db8f073278466f9f 7085fba9b3d56e14cee5265a6844784f47d1c270 7a102b138a2c0b02f9e24eecbc4af0878dc0d2690c201f242f6c1cb817dd1a30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-5c9d"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UiNh98OCnCNnCWoMTGjL7PpxdEo06i7X4ObquVqOmjHdxlWfp0%2BuLIbC0Kt27EochBqTa7sIb%2Fws3dixvg1XPj%2FQCWw5mHihDtoCpP7IkeyEpK1TkEJD%2FQ7Vpw487K1LNNyeoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca6a4d5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 | 172.67.142.245 | 200 OK | 110 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 109808, version 772.1280 Size110 kB (109808 bytes) Hash005c9aa92b564b73b7582cc4f1fa49cb 373361ed756b1fe68ce2f5968d467826b6973bb5 faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1
GET /releases/v6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:55 GMT
content-type: font/woff2
content-length: 109808
access-control-allow-origin: *
etag: "005c9aa92b564b73b7582cc4f1fa49cb"
last-modified: Fri, 22 Sep 2023 01:46:37 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 712886
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OsRiiyU%2BjX%2F%2Fl9MAiwYfLRJ24s2m%2B9FJL21ymzxsecAjRT2m5QDHM%2F7XJ2RTva1ZoB4FolteU6CpQOM%2B4zEgNao2VRSTf%2FsaJy9vrTyljMYp3v22HcBbWgLcDdAfVR0PWap8zmZ1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40cedb61b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-solid-900.woff2 | 172.67.142.245 | 200 OK | 150 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-solid-900.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 150020, version 772.1280 Size150 kB (150020 bytes) Hashd5e647388e2415268b700d3df2e30a0d 97f0942c6627ddd89fb62170e5cac9a2cbd6c98c 886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9
GET /releases/v6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:55 GMT
content-type: font/woff2
content-length: 150020
access-control-allow-origin: *
etag: "d5e647388e2415268b700d3df2e30a0d"
last-modified: Fri, 22 Sep 2023 01:46:37 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 722863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cyYrFcW6ukHbk5%2B3RblZoQBf0yA7%2BSy6PCYe5l%2F97s7Gl6%2FPD7NEaQRCJ5UwYjQbpd4txR8CdLaxOHe8C26p0w%2F70IgovAo3Dzb2C4ge6ZtbtQdd6ylPSg7Vk3xGgLySEdA6YRpl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40cf3ba3b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v6.4.2/css/v4-shims.css | 172.67.142.245 | 200 OK | 4.8 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/css/v4-shims.css IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeASCII text, with very long lines (27374) Hash665de85010641f678f0178a9d330a7af bf1ec2791cd06922f4a1b67480f75209d85e6deb 0e0a27c105caf20bd4cc76fe58f222d856ab8f626447846842dddca8ce7509ef
GET /releases/v6.4.2/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:55 GMT
content-type: text/css
etag: W/"665de85010641f678f0178a9d330a7af"
last-modified: Fri, 22 Sep 2023 01:46:32 GMT
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 727793
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jPt0L6g1v%2BPczTSoc37Q2yuzSgoobODCDFinmMJ82GnM9rFeIbm5Xeq71cMhyjXfp8QlTdEzN3cD0DrAjZ5Tu7xjNT5x16gXy9P8McaMfrODkabN9Mjm6F%2FZsZfZGgVTpZirFhjU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40cd3a5eb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-solid-900.woff2 | 172.67.142.245 | 200 OK | 150 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-solid-900.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 150020, version 772.1280 Size150 kB (150020 bytes) Hashd5e647388e2415268b700d3df2e30a0d 97f0942c6627ddd89fb62170e5cac9a2cbd6c98c 886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9
GET /releases/v6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:55 GMT
content-type: font/woff2
content-length: 150020
access-control-allow-origin: *
etag: "d5e647388e2415268b700d3df2e30a0d"
last-modified: Fri, 22 Sep 2023 01:46:37 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 722863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Re6al6b%2B2zByzFgscN%2BSDikEmPnY9f4twdLsj0FCaGv4SU19yOH9KDpiIDbo08U%2FMnSwa4PzJjW3xmPfpf584%2B1JDENUbzKEYLndivCSSubzQh1RGnSF71NRMTQjORSfRIFiS9dq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40cf8bf5b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 142.250.74.99 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP142.250.74.99:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 14:44:38 GMT
expires: Fri, 02 May 2025 14:44:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 560597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 142.250.74.99 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP142.250.74.99:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 14:44:38 GMT
expires: Fri, 02 May 2025 14:44:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 560597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 142.250.74.99 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP142.250.74.99:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 14:44:38 GMT
expires: Fri, 02 May 2025 14:44:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 560597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 142.250.74.99 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP142.250.74.99:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 14:44:38 GMT
expires: Fri, 02 May 2025 14:44:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 560597
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/javascript_global/root_library.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 118 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_library.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size118 kB (117604 bytes) Hashfc2ffafc308a654aa226141786cb0ec8 d638aef8e9366903e26807162c2487faa21ae3b9 5ef2fa9df485d9dd7029389f6de116e58a372aad0aad5882f62ae51ea167536b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_library.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-567ce"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KAfvczh6Kq3EoiUD0ETIKRDnG8q1xWdt%2Btluy9KKs6pPY9Zu4zD1q6q3E%2FgNniK7ZlpHqG9klHqA3WpKFUwMw3rrK5jBLr%2BYV2pd9XAVZqteZoulcx29smjb2%2FYieiLU%2F24aCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca8a645691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_global/root_framework.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 103 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_framework.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size103 kB (103058 bytes) Hashaba0208eb93d48525ec4f8d54a3c9331 1ee5d54516d74ee9949a8b8cabe61788054c16b6 6f02224751051510b6d7ad1ae26e1d548832dc5da0a0b824a1bf7d9dda1f3a78
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_framework.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-6d379"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kXwbOvh%2BVT87yPZpjo6aVf3R2k57Y08TBZMnOSk5%2BjHF4Ll1jj8DjhFrIJZAi1DNS3MLWu7sZv08%2F%2Bt4WW4PaIzx85APLKMpm31qGWpjOzVjUpKMZEZ5BljrWBPlSDeR4Z8nhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca9a675691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.js | 172.67.190.32 | 200 OK | 43 kB |
URL GET HTTP/3launcherleaks.net/uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.js IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Hasha60d6403d19a78e63b87bd6302903c3b 9042f73bf6a3716be90b36c2907706b44a4aa9a1 2d16ad828aaadd5303a02781477d95964df2e54c82a483d6530b9211ff4ba64e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.js HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-20e7b"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6186
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rxlO%2F%2BQQBilPiP61vecBkPBbO590LXdJiNFlJHDk5ThuofOTvna3jdFI4zZOIgkC4CYpMhegsxPsKgXINiJwrARy4LKllUVuvO29eWpmhU5LslaEnrJ0XFgNjpfvytaSTmNQ9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40caca825691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-regular-400.woff2 | 172.67.142.245 | 200 OK | 24 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-regular-400.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24488, version 772.1280 Hash747442fa76f1d9a31f9a54a2e8a4b448 07fc0ae14bb3187839082aed3bca11dfb1e04524 9169d8be7a8177e5a92a4d04b6de7f6504b938573bf4da5889871c4f376d3849
GET /releases/v6.4.2/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: font/woff2
content-length: 24488
access-control-allow-origin: *
etag: "747442fa76f1d9a31f9a54a2e8a4b448"
last-modified: Fri, 22 Sep 2023 01:46:36 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 722864
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B2Oj4BCJZlen3Dy0NuhAOiBYsxzzw5u%2FCn99ZRhsw5GZoN%2BgpI2LWd%2BKaVCNWJ8pRRkdEUYvO4djTFtt%2Fbzs%2BrfK%2BC7YDMTlX15jbeMqhLOlfFf6Ka1UyQmgQM%2BHgEY8dewRe6fh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40d44e63b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/monthly_2023_06/Screenshot2023-06-24231322.thumb.png.e46eca2b5a1540d9e47d4ac06f38b4ef.png | 172.67.190.32 | 200 OK | 174 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2023_06/Screenshot2023-06-24231322.thumb.png.e46eca2b5a1540d9e47d4ac06f38b4ef.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 430, 8-bit/color RGBA, non-interlaced Size174 kB (173939 bytes) Hash87dada0953eb59beaa79c774c06e08c6 bb81f511a6ceaa260bf36ae388e72e06c06239ba 3b04624e966826cb8fbb98f294b86d0c9cbcbf449d263b5815b5b4288b087420
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2023_06/Screenshot2023-06-24231322.thumb.png.e46eca2b5a1540d9e47d4ac06f38b4ef.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 173939
last-modified: Mon, 05 Feb 2024 06:15:31 GMT
etag: "65c07d03-2a773"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3751
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HM5yVSojuVQFru87JWQnm9GxE4TNtufq%2Foi1nJ4jCFxI%2BlCi2imUzLbH6sDSZpB%2BVKn8wPprl6hz35cOGNkHI%2Frh3CwM1TTm%2FPsdLChld4CYnJvtiB7SU8rW6kiH1ml61LrY5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d59fbe5691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.css | 172.67.190.32 | 200 OK | 177 kB |
URL GET HTTP/3launcherleaks.net/uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.css IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size177 kB (176696 bytes) Hash33c2a9a1870a4526f1d105f41c51232e a3237d21c63a338bf27c6d164df42c812fb7ad7d 209ff7b1e754937d8fbd10186cd3150203e6af10509badcf8b000d039a53e0bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.css HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-3b4c"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6186
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JnlxOn42AvdJIOTWZQT3yqk0BuD%2BxVLletYhlkYg52G6kKwnsxWWBlBw3c96qE5G9WA0VLatjtuB0%2BDF1hwmcNDj912hyOEL%2FNpuVmxbYcFXoezKRhAJbk2jdKI9m2Lrip8Ssw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca6a4e5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2023_07/GABZ.thumb.png.01040cd3d4e5949cbb6c11a35aef72ba.png | 172.67.190.32 | 200 OK | 111 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2023_07/GABZ.thumb.png.01040cd3d4e5949cbb6c11a35aef72ba.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 244, 8-bit/color RGBA, non-interlaced Size111 kB (111050 bytes) Hash0a353c2beadfe58fbca87e98d9440755 0f9a01cac0ff93981d44b1ce212688fd58bcbd8c 29156be7b5e145a22ca03e8fec0cc2ba5270ac8d7452b4e4482eb2e0740b5f2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2023_07/GABZ.thumb.png.01040cd3d4e5949cbb6c11a35aef72ba.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 111050
last-modified: Mon, 05 Feb 2024 07:07:54 GMT
etag: "65c0894a-1b1ca"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6187
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVvyqVhqLRm3arpDOd%2FJezeKp5WnA5qn2t0PlfsyE6fGwQHKZY%2Fw9p2lpyB%2BAVjcOnEOzk%2B9AeMYmpuIuvRweiTWFP%2FspamOJFOVw9WNBBIEuFlxQIVugqCmHwwbJudurt0S3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d5ffd35691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 | 172.67.142.245 | 200 OK | 110 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 109808, version 772.1280 Size110 kB (109808 bytes) Hash005c9aa92b564b73b7582cc4f1fa49cb 373361ed756b1fe68ce2f5968d467826b6973bb5 faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1
GET /releases/v6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: font/woff2
content-length: 109808
access-control-allow-origin: *
etag: "005c9aa92b564b73b7582cc4f1fa49cb"
last-modified: Fri, 22 Sep 2023 01:46:37 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 712887
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nogq2T2CC6AwTC80C6cIvCgAajh6JJLhPRdMBnju%2FYK6ZcPcDeIvGvZ6CzEcweNc4FW093XSCm7mMqn1hgr6MiNDmooFvcsjOiTZKpv2YDwTOc2qWU8UhzNEtMdgSwSerA8XixNA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40d6afa7b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.gyazo.com/cf48240e1a5908853bf7c7444351a6de.png |  104.18.24.163 | 200 OK | 157 kB |
URL GET HTTP/2i.gyazo.com/cf48240e1a5908853bf7c7444351a6de.png IP104.18.24.163:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerLet's Encrypt Subjectgyazo.com FingerprintB1:88:95:2F:E3:8B:92:D7:5A:FA:0F:4B:8C:CB:22:9F:DF:EA:DB:F8 ValidityWed, 03 Apr 2024 02:09:12 GMT - Tue, 02 Jul 2024 02:09:11 GMT
File typePNG image data, 1046 x 646, 8-bit/color RGBA, non-interlaced Size157 kB (157231 bytes) Hashcf48240e1a5908853bf7c7444351a6de 8ac4058e3f5c321e9201c344081a68a59cb79e32 7941c1300641e6d3729686a430e0c4248168d69fb4243214d128fbe6a936d8dd
GET /cf48240e1a5908853bf7c7444351a6de.png HTTP/1.1
Host: i.gyazo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 157231
cf-ray: 880e40d6a86c7127-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://gyazo.com
age: 511730
cache-control: public, max-age=31536000
etag: "cf48"
expires: Fri, 09 May 2025 02:27:56 GMT
set-cookie: Gyazo_cfwoker=i; Secure; HttpOnly; SameSite=None; Expires=Tue, 01 Jan 2030 00:00:00 GMT
vary: Accept-Encoding
via: 1.1 google
access-control-allow-credentials: true
content-dpr: 1.000000
x-cache-level: ZS
server: cloudflare
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/javascript_global/root_front.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 194 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_front.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size194 kB (193562 bytes) Hash73eb4f55b965d6bb24483b945c7ed139 73fed4f7c2b57b8c5bef8fa3b9182fac6af6bb62 d5092dad8ae432ad1b4d2a8912e96aa91eb769b8c98f3a42f00a6163b69bbefa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_front.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-19bce"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PCHBmylG9I0TTbkvtZNRcdxjumn8jpctsTcM1fEklbWy5yQuOdGvYEmJtJy7mlVInU7t2lOpgJxXm89u7fNcQ0pTfYgF%2FJ5AwTqsxzA2gPJxNqlPp5rPlWCgdmO%2F91Xv%2FcjytQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca9a6b5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/GTA5_2024-03-05_16-50-53.thumb.png.4a46a79390de4789bbe47f99a5060a55.png | 172.67.190.32 | 200 OK | 262 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/GTA5_2024-03-05_16-50-53.thumb.png.4a46a79390de4789bbe47f99a5060a55.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size262 kB (262399 bytes) Hash1643bc44ff885f59509b80d480e1a22f 1cfef5386597cffd88dfae3c8f498eb4bac1c4f7 0c23461fa3052f24516a166dc5781412d793759aaaf27fd9b258acb8956e4115
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/GTA5_2024-03-05_16-50-53.thumb.png.4a46a79390de4789bbe47f99a5060a55.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 262399
last-modified: Wed, 03 Apr 2024 03:05:36 GMT
etag: "660cc780-400ff"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3751
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YuPJNN6auYlhTrIfozcKNr0mffMVuhuRayg0pGUnTpB8hU6fEKO9%2B4LqFlrTJ9c4AZRtJLDrxHio%2Fr3zC8fGPc70VHxPYGoTZBmtVEjqDrPvA%2FG6Li567GKJF029SwtJny4FGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d5ffdd5691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_core/front_front_core.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 313 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_core/front_front_core.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size313 kB (312929 bytes) Hash6aee8f30778db50fdbf148feaa51eb99 e29f6e7e7933f8da9c3a9c61c437ca32f4150bf4 169354458aa8ca9e2cdbf8356c68bedf962b43b0cd5a1063e321942a27f33b31
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_core/front_front_core.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-952f"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FnIsPFlceHLWKohEkbcmlIcZc7iZU5szCVmWVTtfo0ZE7hQdd9wq3idF87vdr86Q91gKZMKHeCx6qL2aIHqXDF91t4Q0K2mQglxlg%2F3eun6H2%2BJJPWuiTgDqRxdNeT4F0ETpvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca9a6c5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_01/63024853_maxresdefault(7).thumb.jpg.7e9e3d00918758b08374931a8c9a123d.jpg | 172.67.190.32 | 200 OK | 45 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_01/63024853_maxresdefault(7).thumb.jpg.7e9e3d00918758b08374931a8c9a123d.jpg IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 500x282, components 3 Hashbbe0ab7d965c381cbd07e190fc11edde f75d098033aaeaac06da7bbff82d35f8a1358ef1 7888d217792f159b086f459180d7156e3e038f4300f11819896f4116f11f8e5e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_01/63024853_maxresdefault(7).thumb.jpg.7e9e3d00918758b08374931a8c9a123d.jpg HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/jpeg
content-length: 44823
last-modified: Mon, 05 Feb 2024 06:10:50 GMT
etag: "65c07bea-af17"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6188
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTFVShUfiKtzRQOOBU3EG7IN%2FnQjZMpGTlTxwE5fhvpSyfQJFaZhUvtIRowL9bAUqov94HP2bI1SRyCwpK12F711tIscPM3PnT6QQmsDZNGfngXj6gMd5B1HvDfVjAXtwFgBug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d62ff55691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.imgur.com/G9K4tiK.jpeg |  151.101.244.193 | 200 OK | 1.5 MB |
IP151.101.244.193:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerSectigo Limited Subject*.imgur.com Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 5120x2160, components 3 Size1.5 MB (1538268 bytes) Hash802b9c8b0ffb98bc3e0581d5d82cd10e a71d3b1ce13cfa3fd68909e0ced09310dde3721d 9095029baa33ade2b062e31d9f9acf7ab15cc3229d8566304a2b9ebeb0f9269a
GET /G9K4tiK.jpeg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Fri, 03 May 2024 17:39:51 GMT
etag: "802b9c8b0ffb98bc3e0581d5d82cd10e"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: JFK52-P4
x-amz-cf-id: Ca1MeoQ412LDupaS_om-dLT5rLuDQZ1aOQBeIzhu6Cb8AL8w2jUmtg==
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 463684
date: Thu, 09 May 2024 02:27:56 GMT
x-served-by: cache-iad-kjyo7100048-IAD, cache-hel1410031-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 30, 0
x-timer: S1715221677.606069,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 1538268
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/monthly_2024_04/86594cd2864fc6a0de7a78960d88c122fdd70094.thumb.gif.15b70b2fb4dcc87a452c80cc95ab93ff.gif | 172.67.190.32 | 200 OK | 3.9 MB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/86594cd2864fc6a0de7a78960d88c122fdd70094.thumb.gif.15b70b2fb4dcc87a452c80cc95ab93ff.gif IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeGIF image data, version 89a, 500 x 281 Size3.9 MB (3945875 bytes) Hashbfa48b762cbdb39a1a8c8cf05455ed4e 86594cd2864fc6a0de7a78960d88c122fdd70094 ef4babc80e53446725ef0f4ea6db0546742fb1aa90a1890be972736aa71f1dd4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/86594cd2864fc6a0de7a78960d88c122fdd70094.thumb.gif.15b70b2fb4dcc87a452c80cc95ab93ff.gif HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/gif
content-length: 3945875
last-modified: Wed, 17 Apr 2024 18:24:23 GMT
etag: "662013d7-3c3593"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3751
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rKRDBIOc3xQaff6ZcFYw6picrx%2FS6NxnYIwN%2BcdaXt9CPRagtzLAW8ES1XOZYPTmGa3gRNDUGaCbKUsproUHFL8qE23F80rp5oF7nmODNV1ldylQ9f5Lc1CGFHoavrNa7FyOOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d5ffd65691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2021_11/feat-P7bpT5uwtA1DIajkJRqhNXK9F.thumb.png.8c51ee5b4146aaed194fc5971b0ad1d4.png | 172.67.190.32 | 200 OK | 208 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2021_11/feat-P7bpT5uwtA1DIajkJRqhNXK9F.thumb.png.8c51ee5b4146aaed194fc5971b0ad1d4.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size208 kB (208437 bytes) Hash54ba4b4d294ee1f75709a00b260e85f5 ecd2056322e27097f61e0b831a70a594c6dd1b19 7202ef1fc16f209eb888bd2073532f3506ebf50e83bb18fecf48bd3ac5a72c14
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2021_11/feat-P7bpT5uwtA1DIajkJRqhNXK9F.thumb.png.8c51ee5b4146aaed194fc5971b0ad1d4.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 208437
last-modified: Mon, 05 Feb 2024 04:10:11 GMT
etag: "65c05fa3-32e35"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6188
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uckkOOf1AUNB7aGmJE7dFru3sQGrupc9kk8vdBLUfxVpE83pMk3We9X9m87I266x8wk%2BdO%2BWBnioMF%2BwgZdYFhwAG2lNMQkJvmOnOPEB%2Fr4z0aynKnHePFX4Nt6%2FzipY%2F%2BXSqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d62ff65691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_07/maxresdefault.thumb.jpg.42531b6a467eb06c2d99fb40de2e7a2b.jpg | 172.67.190.32 | 200 OK | 230 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_07/maxresdefault.thumb.jpg.42531b6a467eb06c2d99fb40de2e7a2b.jpg IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 500x282, components 3 Size230 kB (229988 bytes) Hash9f29d7efa15fddffe81bdb3120e71e04 017da9d3a2d15be18f70d24236eabcabfb78fe50 faf62a491715142b89a693e5d081b33e9372254be674adcf7b858e189bcdc1ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_07/maxresdefault.thumb.jpg.42531b6a467eb06c2d99fb40de2e7a2b.jpg HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/jpeg
content-length: 229988
last-modified: Mon, 05 Feb 2024 05:47:17 GMT
etag: "65c07665-38264"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6188
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OX0D3XZ7nmpcCE9OeNLef5SnwXW35szu31eWVsT6D4EJWwpDwehGMnlfrrCC2blpypADLSXio9XRDv1DM5Y8MHENINIVZwBEa0Z0ZD7NjfZ%2Bm3XQ9CzLhQ503TcDI9Oez8qhXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d62ff75691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_09/WinRAR-logo.thumb.png.712705727354baba71b104a792cefd63.png | 172.67.190.32 | 200 OK | 231 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_09/WinRAR-logo.thumb.png.712705727354baba71b104a792cefd63.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 424, 8-bit/color RGBA, non-interlaced Size231 kB (230689 bytes) Hash675d24d4429664d2b8933941e2035911 5e7826a9b7777ff7240d9824dca1c4d5751e3401 bedb27d2055906aa2dd8ea6ab9260fd67d66fe589a0f86a7f598d4bed22f3494
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_09/WinRAR-logo.thumb.png.712705727354baba71b104a792cefd63.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 230689
last-modified: Mon, 05 Feb 2024 07:21:25 GMT
etag: "65c08c75-38521"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6188
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2A90hNUjXfDOOTUFN6OQiAIy7ku%2F3SCDDaKwi31wGfXU%2BKh0KqROfAvDCTKytBHevvqC9PBZdf9L29NTebNaReLr392u8pm8mXu12Q3BHK3TLavzQgJ30Bgc31oU%2FqEQKOIiwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d648085691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2023_03/Glock_Quad_a323ec42-66cc-45c8-ae6f-52fcd45f2f0a_1800x1800_result.thumb.png.997f58c133dcb299d8fe1b18de6b4e19.png | 172.67.190.32 | 200 OK | 168 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2023_03/Glock_Quad_a323ec42-66cc-45c8-ae6f-52fcd45f2f0a_1800x1800_result.thumb.png.997f58c133dcb299d8fe1b18de6b4e19.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 475 x 500, 8-bit/color RGBA, non-interlaced Size168 kB (168461 bytes) Hash7a5d9be31cd29be40a6c3b8430e7c444 41e3170594dd57b4d171d51742d76c55045d1006 d154114095070f4b1b5e1c9ae923b18842302262977ddcfb9db7c895564734e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2023_03/Glock_Quad_a323ec42-66cc-45c8-ae6f-52fcd45f2f0a_1800x1800_result.thumb.png.997f58c133dcb299d8fe1b18de6b4e19.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 168461
last-modified: Mon, 05 Feb 2024 05:39:34 GMT
etag: "65c07496-2920d"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3751
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vZD3MjHM8kzZTIJyQ7EAuY7HUOqbNoSxdJKEoJ0NiPCwozIURcFltv6SzafQqmqboggGmx280xOI9W8QGDZjNq%2FDAB%2BhMjvusRlwTiX5JM2mf9NeDrR2oVotP1iH%2Bu983X8vEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d648105691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/341e4a57816af3ba440d891ca87450ff_framework.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 331 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/341e4a57816af3ba440d891ca87450ff_framework.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size331 kB (330727 bytes) Hash64e42bb0a69b09287e940046e4637551 5ffffb53b199f8bde49dba387255ccbae083e3a4 309eb3bb236e3c2a655e3d927a890d2914a6342b908f377c0b1e73c80245ac68
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/341e4a57816af3ba440d891ca87450ff_framework.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-50ce0"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJ2mFUCpgRF1DcJ30d8TvGOdM62w36nn9s7Hna5PBXl7DmsKkVWGnGvookBETMth8QO5YbikgK4Vq4EPnF8eawY0bOKIjrKSugL3j36LRCxS4tzULIAFTQRGwhAdyoqNS0CJiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca5a3c5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/49037c9bdbc019a877c9a3ae069caf24_v4-font-face.min.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 69 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/49037c9bdbc019a877c9a3ae069caf24_v4-font-face.min.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Hash1a69247fd67267665eba3cf9e2de7252 8544992dd2901326ab4ba10cdb82a466478c3d23 88e27c39a485596aa626888097198c00a3bf56991a366b92bf147d486e9f32ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/49037c9bdbc019a877c9a3ae069caf24_v4-font-face.min.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-82e"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B0ao86PcNBirpv3q5jcXZaKE6obwmmtjoA5OviEIQNFRp5UC9xOmuVOCQbtsKRKw9jXA3sH%2FvfOam%2F89OWJegW%2FsaNWjZOwGLyCHIpa1xyiGKKv8yNsM5Gz%2BPqr1Nc6QxW7Y4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca6a465691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2023_03/imported-photo-183738.thumb.jpeg.4105cc0ef605c828d8f952f7c1022fcd.jpeg | 172.67.190.32 | 200 OK | 7.0 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2023_03/imported-photo-183738.thumb.jpeg.4105cc0ef605c828d8f952f7c1022fcd.jpeg IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 96x96, components 3 Hashb427a9a005ddf0646a1c7f760775734e bfcb7858839f4d0d8aefc8e29afea4be993c11b4 e9a7b109ff7e8cfd661d96e2902644483d29cac7feff8de05da54310b71f6496
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2023_03/imported-photo-183738.thumb.jpeg.4105cc0ef605c828d8f952f7c1022fcd.jpeg HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/jpeg
content-length: 6955
last-modified: Mon, 05 Feb 2024 05:29:02 GMT
etag: "65c0721e-1b2b"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 115
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IRTU6FUFxd1hdElupeON7AvcAYO8O6bT9CCzOBmDgu3Y6Ryr%2BYfRMflEzdN51J5rwL7oU2PW0D8xfWi0MCpu3tfxR321cE72mVRkfT2vQM4FRM1xWMoByW3pdoljaByg%2FmpanQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d6d8525691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/cdn-cgi/challenge-platform/scripts/jsd/main.js | 172.67.190.32 | 302 Found | 0 B |
URL GET HTTP/3launcherleaks.net/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 09 May 2024 02:27:56 GMT
content-length: 0
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=brlcdlsoPMQlOzA%2BfePpWjcOAGvBf2pzwuFkubJVv8%2Fw1Dm84zPqFXlpJxrRPLqag4V5pCQQ7MdsPTOTq0jw%2BOZlmR8VV7ypDP8tbQVQUWY6INMjESrpY0cE3tUJs0RgTdi2sA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d7e8b85691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_core/front_front_widgets.js?v=f71abd72281715218813&csrfKey=&antiCache=f71abd72281715218813 | 172.67.190.32 | 200 OK | 53 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_core/front_front_widgets.js?v=f71abd72281715218813&csrfKey=&antiCache=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Hash9a6295e669a6fb947f05f08ebdbf454b 437174101cf00daaa45f501c50b6951a9de4af76 24370b47819be138a76067b7d79edb1606cc8b71d662b362f3891a68b3d1cc79
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_core/front_front_widgets.js?v=f71abd72281715218813&csrfKey=&antiCache=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:57 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:22:22 GMT
etag: W/"663c092e-40b1"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 683
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ASbCbvVaRLvz2fW6%2FkqwIdZ7AO%2F1tgNjoi8rbPZg4nQBlVLccGJZUW8OSfEiwKC745FJGNjSXDk1YmX9oF5Ujl3uoSdyyNOYdQuFdCL%2BYGzP%2BN2cDm7vMkQwsZZpLg5wIR14g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40df4bab5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_02/android-chrome-36x36.png?v=1712605004 | 172.67.190.32 | 200 OK | 1.3 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_02/android-chrome-36x36.png?v=1712605004 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced Hash6643840bd35c7cddf0811e8969b64875 886f7f812fda1694e4184083e178c8b8c6b08be3 ee3561daab5ce98f4859fc704e7584e53d0858ac073fd02569fb96b5cdc59209
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_02/android-chrome-36x36.png?v=1712605004 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:58 GMT
content-type: image/png
content-length: 1282
last-modified: Tue, 06 Feb 2024 04:19:31 GMT
etag: "65c1b353-502"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3751
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bxYUMdzD45q40w%2B%2FqVFkp0J7mLYAQqViHPwDcAgS2uAL7b8ZGtLVZt5or9BbMDercaYfcxN9S%2By11MYkvAKVS6FUPinrV12T0pyOZ0ZM6azscyU71R7W1veyTBibGa5smfs%2BuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40e10c545691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| i.gifer.com/4bXG.webp |  51.68.36.8 | | 107 kB |
IP51.68.36.8:0
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerLet's Encrypt Subjectgifer.com Fingerprint97:0F:D7:9D:0C:22:57:27:95:17:B5:9B:EF:86:BD:14:D6:D8:8E:57 ValidityFri, 26 Apr 2024 20:03:56 GMT - Thu, 25 Jul 2024 20:03:55 GMT
File typeRIFF (little-endian) data, Web/P image Size107 kB (106720 bytes) Hash2be260102d42b52894fe701ca461dbf5 44ef941c438dc1bc1f33b0cb0023da48f6ed560e 7a343acfbeceade52e22b816e4d731dbde02768c099eb0b17853f3bfacdbf261
GET /4bXG.webp HTTP/1.1
Host: i.gifer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:27:56 GMT
content-type: text/plain; charset=utf-8
last-modified: Mon, 06 Sep 2021 09:36:14 GMT
vary: Accept-Encoding
etag: W/"6135e10e-19566"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/monthly_2024_05/image_2024-05-08_164502077.thumb.png.f549f0d078c9c93125bc7434af608130.png | 172.67.190.32 | 200 OK | 217 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_05/image_2024-05-08_164502077.thumb.png.f549f0d078c9c93125bc7434af608130.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 210, 8-bit/color RGBA, non-interlaced Size217 kB (216816 bytes) Hasha1fa7f0399a57ef7c81df8d8dc2e60fc 256f7396e68842acbf390d281651359744e9065c 89b1db6da427eb4f4e2a0d9489ecd2b1c4f9798a87c30c3f41cea2f784fe34f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_05/image_2024-05-08_164502077.thumb.png.f549f0d078c9c93125bc7434af608130.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:58 GMT
content-type: image/png
content-length: 216816
last-modified: Wed, 08 May 2024 20:45:12 GMT
etag: "663be458-34ef0"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mRXyNRLtpKyeAaqqcyW8IDetr1MWRDYm2XEBAODA3Kz2MTMaI42A2gY5TLDg8qhi7OxvN%2FhfiKxnh6cven8ANZi01r8wr408G%2B5gWTQdNYagr6u4oMtLMdo696HPCt%2Bb%2B0gZYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40df4baa5691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_core/plugins_plugins.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 1.1 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_core/plugins_plugins.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJavaScript source, ASCII text, with very long lines (1085), with no line terminators Hasha3a3b439d522bbb2006fcebe7b4258dc e6afd992d4ffeba64c6ce056d394c130014856eb ca1aecb3a408053150bdbfa325c0c8c19b7a9f2fac2e51a88c82748de03e0989
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_core/plugins_plugins.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-42e"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FE1Bcz6YHraZ3Pgdi4xUCV7poHuLQ%2BDIkO0TGL%2BUn9rQb7R%2FoRlB%2F3mN3HjSre7US1%2F%2BxyRDKbNtQZNADkNMo1JhHmvtol2sqTXryw3qndXpHPRwQh01%2BmqtQt4lnMjTg8AVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca9a695691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/cdn-cgi/challenge-platform/h/b/jsd/r/880e40c5abc30b61 | 172.67.190.32 | 200 OK | 0 B |
URL POST HTTP/3launcherleaks.net/cdn-cgi/challenge-platform/h/b/jsd/r/880e40c5abc30b61 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/b/jsd/r/880e40c5abc30b61 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12182
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://launcherleaks.net/file/12754-bmw-m2/
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:58 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=RJLgjUyok4hX2QGFZ3DCCi3JsGFAK68vyOACvosOVgs-1715221678-1.0.1.1-XjN2WinZ_zNyukfgRqA5TkcPxsk2Yk1tknszOk833uzjurMAe5a.MZuXGH.r4oCwnq4vKv7oUOTKRnoE6QM.fg; Path=/; Expires=Fri, 09-May-25 02:27:58 GMT; Domain=.launcherleaks.net; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gLpKbQ4ZwZ1MsR%2BNm8HHRSqgfApU%2FHnZ%2FVqVzT0Jbl5exxi%2BIYhfCk%2F5a%2B8MMISy10I6Dq7Cw70AwgHv2X8%2FMhbqrnrRkeqrznTv8mqhIQOMAB8ES2G6rIC%2BRAmDnb8xSaPNfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40e1ccba5691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/223ae211f0236ea36ac9f7bf920a797a_all.min.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 104 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/223ae211f0236ea36ac9f7bf920a797a_all.min.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size104 kB (104228 bytes) Hash8f831a00b4c0f816068ef1775065eab2 87e4fae3b70ecc397b6470db7058d8b9eb44f5eb 12b099a71039ac4e7c5dec4d9cb9f715649e1eecfd5131f11a7a8d91e170de81
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/223ae211f0236ea36ac9f7bf920a797a_all.min.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-19724"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m4wzhO%2FZEyLlHEXlSHby0newfFDbQGLh%2FJVDaId0aT9WMn6cqA0qp07L87hi66TrN4ZaZbh0JnxGFonTefD7UZzRsJ59v2fr7w842ROzs%2F2nBJCxt184zROLkBSiEZgqBtxiXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca5a3e5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| use.fontawesome.com/releases/v6.4.2/css/all.css | 172.67.142.245 | 200 OK | 102 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/css/all.css IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Size102 kB (102217 bytes) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /releases/v6.4.2/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:55 GMT
content-type: text/css
etag: W/"5222e06b77a1692fa2520a219840e6be"
last-modified: Fri, 22 Sep 2023 01:46:33 GMT
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 723668
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qm4klRixJjX7Sjfy9VktDrH6sYJDi9Rz4ETO3qwbOAF5kb7X57k%2BNIzJubuIWuVR%2FLhyoCGsRAn8rnPryPHU9ZcjQR4Cp701mNbCIlvkNR7by6Q5kq%2FffZh%2BzKZ15NvZhjQw5mE1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40cd2a56b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap | 142.250.74.138 | 200 OK | 12 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap IP142.250.74.138:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hashfa399c57b8f59144c0b18302c33dfea5 6d420f186305a23da0e971a03d14d76d988bb56c 00008d2a6bb44551ff155148e5fedbcc0fdf8d710d908581fdf04dd96dfb31ca
GET /css2?family=Inter:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 May 2024 02:27:55 GMT
date: Thu, 09 May 2024 02:27:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/javascript_global/root_js_lang_1.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 108 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_js_lang_1.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size108 kB (108259 bytes) Hashdfb4f4a37cacac558a02e348876805dc a3c9316578d617bd8869a2a234b2216586b27a45 8a21a5cc24b20509a317b3fb30c4a0feabc3eed7d754d402ccdb07e07341e8af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_js_lang_1.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-1a6e3"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ai9B%2BoIzMMhALhcATSdWox1Hv%2FUioTFBC5%2BTqX6D%2Bclp4w8A%2BHdyYWBaxjcvm7MlvfN4OfOaPrNMVxIwR4ezbLI9NQWSsl4pr9o1HNQ99viO2HaO0mg5Zm8cUt1oOZNYj3vyAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca9a655691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/file/12754-bmw-m2/ | 172.67.190.32 | 200 OK | 144 kB |
URL User Request GET HTTP/2launcherleaks.net/file/12754-bmw-m2/ IP172.67.190.32:443
CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Size144 kB (143908 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /file/12754-bmw-m2/ HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/html;charset=UTF-8
set-cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3; path=/; secure; HttpOnly
x-ips-loggedin: 0
vary: Cookie, Accept-Encoding
x-xss-protection: 0, 1; mode=block
x-frame-options: sameorigin, SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-content-security-policy: frame-ancestors 'self'
referrer-policy: strict-origin-when-cross-origin
last-modified: Thu, 09 May 2024 02:27:54 GMT
expires: Thu, 09 May 2024 02:42:54 GMT
cache-control: no-cache="Set-Cookie", max-age=900, public, s-maxage=900, stale-while-revalidate, stale-if-error
strict-transport-security: max-age=15768000; includeSubDomains;
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LsDJhZR8guMzyOtvhKf%2FNGWcQV6uKA%2FHgyg%2BuWIV9aJ62BmzSuoDsOaH%2BVemeh6aTKrUwm2Gnt07SlBV9p5OjnIrewCv2zA%2B%2BKZzYHYwne573J8yFieNEr8dQ0jdbdj9AgdHQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40c5abc30b61-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/css_built_27/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 934 B |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (944), with no line terminators Hashfe5ac1a4ab4caea663a65254c9c964cf f47bb77e21cc6cc7f5ac57f69ea00f1d3a59fcfc d306fddb662c56c73a09b45ffd3abaea135ed7312932c422817ce3aeb36706b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-3a6"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YQ8w2INxMyzZ78giBgYu7WSEYUME2TdtLSGpvqfpW1AvhEAgRLpBlkXb7eBxOMAPoIKOKHqfme8kiG0GuVA95n0X3b%2BKBjmlpOZAPe6Hg8%2Bwlj0Qnp%2BHgK6GGJjAH0rYIg99Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca6a4a5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_downloads/front_front_view.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 4.4 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_downloads/front_front_view.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJavaScript source, ASCII text, with very long lines (4427), with no line terminators Hashb21f7fe12f63c3f9e923ddf4b50318f6 fa6bbcc23164efc154682bdb588f51d711c0dcdd 3be7ba667b5c819266511385294c565527c129a904cee55a7128915211b2212c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_downloads/front_front_view.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:32 GMT
etag: W/"663c0884-111e"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 627
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u0XTl%2BmgCRE%2FA7C%2FJajOXD4hqWtYjXwSGQu9pgOylJi7XHgbXiRtssHSDpvKocWNQJVtEuADwfIOBg4uGLnktJFbeOBkGfNf0BIXVu5t5yAWcBnmqKtHGhX8lcAvAk%2BQyEbeQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca9a6e5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_11/271590_20221123180635_1_1296x.thumb.webp.166a2c2dbac4e4c4f2268cea650e863b.webp | 172.67.190.32 | 200 OK | 69 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_11/271590_20221123180635_1_1296x.thumb.webp.166a2c2dbac4e4c4f2268cea650e863b.webp IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x282, Scaling: [none]x[none], YUV color, decoders should clamp Hasha5cafec497475164eaaa1cff49c62d0d efdf9c2d9471d73826ef40789fa53629bea5ff37 f0ef030362846f7c6fb69ae372a67d149d91324668c43d5067de956eaf09a0ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_11/271590_20221123180635_1_1296x.thumb.webp.166a2c2dbac4e4c4f2268cea650e863b.webp HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/webp
content-length: 68628
last-modified: Mon, 05 Feb 2024 07:25:03 GMT
etag: "65c08d4f-10c14"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6188
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ten9P%2BtMQugM4SpBlTxmSQrIfuUqEQkQEvnq98OeN2gTbz2i1DspBXVb5%2FuFerd9naALN4Eo95ewCVNgwv4VBoCLymVdu9khNmmlw6O3wUzabc1JIbt3%2FCWd0ahLjjqhaq83nw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d658175691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_core/global_global_core.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 39 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_core/global_global_core.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJavaScript source, ASCII text, with very long lines (1619) Hash5ff684590fec461dcdd6b828227c33fa e744b611415ea7633f726fc192bcc329ac9098cc a51566d963014d0e21f963bf48131950fd463ff1e234c31ebc9b346a775db42d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_core/global_global_core.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-9734"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rABqzziNUjYDVyV4NIDP1ywK%2FAPHtYqDU5pu7Ke4BxElwzOyIhlV2%2BxCD14Nlge6q%2FTWsWzyzDEQOwHwvzgHzHLNv2GzojCUkVH8ZDCTY5W9SMib%2BmwU3EXhXsntD8HhoXlyqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca9a685691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| i.imgur.com/gbpa60N.jpeg | 151.101.244.193 | 200 OK | 304 kB |
IP151.101.244.193:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerSectigo Limited Subject*.imgur.com Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 1920x1080, components 3 Size304 kB (303975 bytes) Hash6b3624509dd2b21b8bf528630202d2f3 c9b6b7e104447c635688ea35f6d6741a3f66a1ad aa10e0dd5636ed336e58dfd065e3e5ccb5acddcae04b2489faee68dfe18101a0
GET /gbpa60N.jpeg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 25 Apr 2024 15:47:33 GMT
etag: "6b3624509dd2b21b8bf528630202d2f3"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: JFK50-P6
x-amz-cf-id: wKhO_yk60BpzX-zrtbJacWkksGcxEaOtlu9VPpPE3Y_IWnNxys-m_A==
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 1161623
date: Thu, 09 May 2024 02:27:56 GMT
x-served-by: cache-iad-kjyo7100161-IAD, cache-hel1410031-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 3480, 0
x-timer: S1715221677.622230,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 303975
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/css_built_27/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 36 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (36086), with no line terminators Hash6a6abd6eb83fe08b498b0fdcd470b9e6 cc38a66f61f7cb0c0bf4bcfb2067c34d0410b5d0 5008d5e9bd10eea3c48217fc3a797895a56aadb808b04dda8381dd35e6544f22
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-8cf6"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sNQuV3qfg1AaYobzkxcscu7K%2FrbV1L8%2BaRti2NDQvWhB%2FS3jlq5q4h7e27moUQyEyOYJdwwy13gdXVYYeRMZCp9mB2JO3wYe3xi4cX%2FQ3J0Crfeqp%2BUhxVp%2BFqOLM5cv6Q9MPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca5a3d5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 5.1 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (5154), with no line terminators Hash13e9ca6da01b78cd4c466c067987386d 30f8913376f38cae8f022acdb5fa59cb1e01c350 a0574e732d420fe0518d65f9b289403deababc7fe421793cb8e68fc81e5e169c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-13c8"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y7Qyfy7B8d8PkqYFT0IZ37AKDRtGobRoBJRdBj5m3P%2FeEGdCK7kvfmFHcBs8zRkxCurP8jxoiZvxUvCZIkzJ3MLZCnbVuQ%2F1gSOeBOaB8IoyYHMN88uutU1aTEf5Df9u1sshag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca6a485691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/63225940445060c5a9f21d31e95bf58e_downloads.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 2.8 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/63225940445060c5a9f21d31e95bf58e_downloads.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (2792), with no line terminators Hashfe0bd138756a85503456321e52e02699 fc9b793c3c1f3d6d5696d087c9903adbf17d790c 7b5f5a1d668712f681d05f1e19d93d4a46ba9c7dbee3f4e68121edbe5eb77ddc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/63225940445060c5a9f21d31e95bf58e_downloads.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-adc"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3d5AFbDkfltYjg9zKmVVR3JHavqyQPn6G3uBewqj7NItflDkDKrTbIln9TiRQ1wkUEQ7G4Md0lZnI6Qo5T3pIZUn4E91NsHPoZsfmhW4lD1E9DLwAhBxhmppfo3KEJFrlWjfWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca6a495691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_02/android-chrome-512x512.png?v=1712605004 | 172.67.190.32 | 200 OK | 49 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_02/android-chrome-512x512.png?v=1712605004 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hash390058981d8c33cf7f7ac83df7289560 853f6dd48c10c41a4dc288b8fe6d8987ae14f136 ab56bf944922cd6347a06f5de4cb913f823cd8ba96f6d1b2ce31edf10d62e789
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_02/android-chrome-512x512.png?v=1712605004 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:58 GMT
content-type: image/png
content-length: 49186
last-modified: Tue, 06 Feb 2024 04:19:31 GMT
etag: "65c1b353-c022"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 652
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=agFkJwGFl2O8Ixw9jAKdZKieIdMf6DXSYb4JAm2cECnFHIELK%2Bm8u3e6zW8M%2FowN8%2F4jqFi3djHxTXbDQk7yS1kMdnmQPNyuzbVLa1NtfeANBNGYEO7NKX4pSKD%2FYghNO1tI9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40e10c515691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/ecf8cbf597c675f333fa61d7fe877660_widgets.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 277 B |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/ecf8cbf597c675f333fa61d7fe877660_widgets.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with no line terminators Hasha375b3f0fae08440f22bcf1bfc025cba a18d88403675ec7a8dd71a48eee37f4e245dbdff cf35a9b2bbe2737ba157dd24de9e11e7a4e2216ed2c2f4542f2d3f83d0bee7d0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/ecf8cbf597c675f333fa61d7fe877660_widgets.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-115"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9JXH%2FpBK2NcklPJlp284UlRlgZhP%2B4vxFpk6mndHsbw7Xp1hGr8INgh21WkYR5v%2FIZbu4xrjyUFtLpWXBEWvN3XqDhaDPlF4ZI%2BZJxmfbz5e3oEOb4BtSwapiRpd4q0nSRiFtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca6a4b5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_07/4b830b-JPC2.thumb.png.c36755574da3a12a95dd13d061728c79.png | 172.67.190.32 | 200 OK | 270 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_07/4b830b-JPC2.thumb.png.c36755574da3a12a95dd13d061728c79.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size270 kB (270042 bytes) Hasha84983e7de83ac79a074337d38f30315 d073b42584d4d7605ff292de9603796654d2d3e8 3554e1bf917ec7d6cd136f8f7cca4614a0082ae9dae39045dac38f36aae93e21
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_07/4b830b-JPC2.thumb.png.c36755574da3a12a95dd13d061728c79.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 270042
last-modified: Mon, 05 Feb 2024 05:48:32 GMT
etag: "65c076b0-41eda"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6188
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0fU8gmxdnWqon59KMAMP7rqq8M4OaTuUCXAIpQuXSyqR1jrLA49WRmphC3mPgL%2FEnjnpe7NDskDSArJBaEDPH4fs9GfdzrxJJ2agXY%2BfospOHPzLQDq%2BWCC9E9cPpDAYsdLYhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d648115691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_05/Desktop_Screenshot_2023_11.09_-_20_05_56_61.thumb.png.137bae1e69f392a401f2b72204d30ef1.png | 172.67.190.32 | 200 OK | 172 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_05/Desktop_Screenshot_2023_11.09_-_20_05_56_61.thumb.png.137bae1e69f392a401f2b72204d30ef1.png IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size172 kB (172311 bytes) Hashf1afed96017903c38e0c7d626ebb97e8 5c484b964246cc8694290da55640c5e4db8d8d3b 0c83a790c6a275887b5edb9e2de7c9f0232bace471eecac419b72f80b62d2765
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_05/Desktop_Screenshot_2023_11.09_-_20_05_56_61.thumb.png.137bae1e69f392a401f2b72204d30ef1.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/png
content-length: 172311
last-modified: Sun, 05 May 2024 12:28:23 GMT
etag: "66377b67-2a117"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3751
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2AUAgAZy7uwmN6locwmm0jZ0rOsGtJua2vapdoQ9leq7cDx5TFdyPydtrYkSB5Qq82iY69yAi%2BMoiGSosCsZWg%2Fi%2FCRUvHcXyVUlR6xP62ce1IdSIvBy0zGuYqONOtaEyXuNKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d5afc35691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_global/root_map.js?v=f71abd72281715218813 | 172.67.190.32 | 200 OK | 2.5 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_map.js?v=f71abd72281715218813 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (2569), with no line terminators Hashe6d0aee7eb24ef7aac3cf4c9da1d8afa 6874b2f9de97ec3e2c78d5529bd2210d80d85c8c c6469f0ea80a6d013b28135b13447cb77b3edf7d586fc2fd1400c74398086bcf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_map.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: application/javascript
last-modified: Thu, 09 May 2024 01:40:13 GMT
etag: W/"663c297d-997"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y7%2F4iWcKPedcvlj9ngEm7J3duH55T%2Bya29ZL5aoo%2FwNacr0BeR1mJqQfi7S8vcIHv9cR%2BmtiA4XjdoubsMJ42u79oiJXQKjm2ZYnn%2BU5ayKHNJv0h735RdGNmgURUboWI1gu8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca9a6f5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/file/12754-bmw-m2/ | 172.67.190.32 | 200 OK | 0 B |
URL GET HTTP/3launcherleaks.net/file/12754-bmw-m2/ IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /file/12754-bmw-m2/ HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: text/html;charset=UTF-8
x-ips-loggedin: 0
vary: Cookie, Accept-Encoding
x-xss-protection: 0, 1; mode=block
x-frame-options: sameorigin, SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-content-security-policy: frame-ancestors 'self'
referrer-policy: strict-origin-when-cross-origin
last-modified: Thu, 09 May 2024 02:27:55 GMT
expires: Thu, 09 May 2024 02:42:55 GMT
cache-control: no-cache="Set-Cookie", max-age=900, public, s-maxage=900, stale-while-revalidate, stale-if-error
strict-transport-security: max-age=15768000; includeSubDomains;
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dCVni9TYyPI%2BMZLL%2FMY4lJp24JTZqyltDwPO9Q%2F8mnXAOEr%2FgaWycX5qqcpi7NoKH%2Bz0yj4DeDe7Jrt2vt%2BhH8xeC0AamLGh6qjv79bV583kHiAiupPmPnEOLCAjHsj%2BuKHvyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e40cf6ccc5691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js | 172.67.190.32 | 200 OK | 7.9 kB |
URL GET HTTP/3launcherleaks.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJavaScript source, ASCII text, with very long lines (7884), with no line terminators Hash3ea5fc54fdf1a56b793fe593ce2f13f5 42462561d897b1ee14fcef5b480d0d39f7d1bcec acd1036edd2ecbfa0564a1cb1fdfbab141772380bccb24fa78d7953f80683fbd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:58 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SCb4G3rYJlLE18NvK2Wqli4Z6z8edKo0%2F4XKGK1OTS%2FYaOoNCimZ6QTN1XD5ccXEvJ3WrGsbHSuMpuKBcgQ%2FTvfC0lhVqYHiUBGJMj4J4iaGYgkvnAdL5ssv9vbrvYOA5LtUQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40e07c205691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_07/143702555_MaleVariant2Front.thumb.jpeg.b5982b752eea7439919b52fa2572a282.jpeg | 172.67.190.32 | 200 OK | 151 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_07/143702555_MaleVariant2Front.thumb.jpeg.b5982b752eea7439919b52fa2572a282.jpeg IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 500x282, components 3 Size151 kB (150903 bytes) Hashbca70d083201c503e48a3a8e6bae1ce9 4b3b57ab166e81cc24e792267ce6bcf06ebcdb3c 737b339118181c22f8a500aa0eacf3599c0d8bc8c9b11b5bff7780d1cb54a508
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_07/143702555_MaleVariant2Front.thumb.jpeg.b5982b752eea7439919b52fa2572a282.jpeg HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:56 GMT
content-type: image/jpeg
content-length: 150903
last-modified: Mon, 05 Feb 2024 05:47:16 GMT
etag: "65c07664-24d77"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6188
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gzs8Nn20DgvkxnKchaizwryJzHb8WHxMxe%2B6E6gFc9dN2h%2F32ligWpqiBeOoebPKIoO%2FjxL3knz8Isjy1HPa0w0JyGSVf0EVl%2FgYnY4lh87DEIPoysqMurtKsUpuoekc9eOBOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40d5ffd85691-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/29bd99919d9bcfd58c5a255c6957b8a6_convert.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 6.0 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/29bd99919d9bcfd58c5a255c6957b8a6_convert.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (5974), with no line terminators Hash3122f113533bcd072b07afac347b2ecf b58b3ac9baebafdab1aaccb741abd76417c7084d 677dcf4790d3a2bb8446ca28e4e0f209bc643bd1eb17a1bdf6910129ee4a65df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/29bd99919d9bcfd58c5a255c6957b8a6_convert.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-1755"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6bg3CMQZDOTLDsYiRziU19D1JnQQxXesBky%2BQFBGzIZLfXIZQswNG3P2kj80JH6WVbnRhAf3l9ThrvbJ5gCvmo4GRFinyy9k7Sh%2F7iKQJF1IOawN6vsoavG0ywjxtq4fZBbavw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca5a415691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=f71abd72281715210371 | 172.67.190.32 | 200 OK | 24 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=f71abd72281715210371 IP172.67.190.32:443
Requested byhttps://launcherleaks.net/file/12754-bmw-m2/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (24436), with no line terminators Hashb4a8b5b1d6079fd5b2bdb2a11e2ef329 1f4c5ad63df6a7b3dadfd6801e87d43356055e9e 52847b98c3ef06e9ea71a5f4e713bc5ca92ec1d59233c37663d00d9f16b21194
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12754-bmw-m2/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=1jf112gp4g1naphkhp9due82j3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:27:54 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-5f74"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TH6Kqp%2Fhdm7bCy%2FSzlh98rDJ56k62H4fGwxpG6M3mkdrVxCIp1z9O1HZH3CmFQAsw5ZNl9wkAUS4PFrsPwyqSZq2DTBaVFbeboEicSmkXIBWpsRSow7tojx8Oz7I5Lt6MXpqgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e40ca6a475691-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|