| launcherleaks.net/uploads/monthly_2024_04/cq9aTZx.png.c8fa2de155b3501a586e838cc5e8168d.png |  104.21.10.110 | 200 OK | 6.6 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/cq9aTZx.png.c8fa2de155b3501a586e838cc5e8168d.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 214 x 200, 8-bit/color RGBA, non-interlaced Hash2fc19a8bacd5d0e4d73a306fab8166e0 0f2fce7d0bf503da891f81231fd00aebe7a1d970 49b78f2f11c1bac3763b0131923b05101f20693a46765374d1b193ef86132b25
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/cq9aTZx.png.c8fa2de155b3501a586e838cc5e8168d.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: image/png
content-length: 6596
last-modified: Thu, 11 Apr 2024 12:53:45 GMT
etag: "6617dd59-19c4"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6071
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t9SgRS%2FqPHrZVKRTVcQ1Ftuf8RMf2cEnA1zP8fz0kWwJDlZX%2BRcubjVshDNPZvMULwJ%2Bqdbavlt1EJiUNm2bILfDDoZ8KSBVpP9cOp%2BiYHAvzmw%2FtjO89zAOoIQatRLX6LhTvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaabb6b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/whats_good.png.7a69ecec6247d8d13d02c05581db0b6b.png | 104.21.10.110 | 200 OK | 551 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/whats_good.png.7a69ecec6247d8d13d02c05581db0b6b.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced Size551 kB (551370 bytes) Hashbd6e64a379de435c2abc2d7946bbfad1 4b24ed6d44f368df35c1d5829579346ae242a770 150df326b0b235af1a0a736475a8809ec47d7a04165180f30519e9ffa2e295e5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/whats_good.png.7a69ecec6247d8d13d02c05581db0b6b.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: image/png
content-length: 551370
last-modified: Thu, 11 Apr 2024 06:32:35 GMT
etag: "66178403-869ca"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6071
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKBHxNWHShXFdwK%2BQH8IpI80NHjwQoRDVAswF%2FfFyG728ggVix9dGCP1Z3Ojo2SU8K%2FabI3nib28XOlh%2F31DJ8CiDi6oqjJfqmdnlmdNCmNBJv8mPbB2sxTp0fekLZll17pa1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaabb8b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/adad.png.e52979bb8e22af2923bdefb76ba81178.png | 104.21.10.110 | 200 OK | 295 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/adad.png.e52979bb8e22af2923bdefb76ba81178.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced Size295 kB (295333 bytes) Hash18ef5cd95531bb3dd64d9e06e29e8626 5b94f1bdfa2b1f235349d37ff7cb386671cb8a83 0b827376ee9a9be1006489f2900bf7f67edab2f0e2ea939a8bf5615af9620c33
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/adad.png.e52979bb8e22af2923bdefb76ba81178.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: image/png
content-length: 295333
last-modified: Thu, 11 Apr 2024 06:34:25 GMT
etag: "66178471-481a5"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6071
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VPRBgKxSFPJrnZzBfsmKYFmRpR1r6V5p3p7pujbzINh8an6K32VGG2BPN7hrzw1deESZWKbq1dZqpzJ6DMCO%2FhD5JC7DCHDACo8tc7lThVOuZN%2B1IejHGZE9JZCpn3P0%2Bq5v%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaabb9b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/image(19).png.2aa78230b74798e345b60e3f00462916.png.4e336bf7c14fbdc1f4db64c294c8c35e.png | 104.21.10.110 | 200 OK | 2.1 MB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/image(19).png.2aa78230b74798e345b60e3f00462916.png.4e336bf7c14fbdc1f4db64c294c8c35e.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 1607 x 1080, 8-bit/color RGBA, non-interlaced Size2.1 MB (2100356 bytes) Hashf8f3bbfe615b3811bc862cc33fd85dba 45c1dad753241f8ff93afb7f5215175a880624c5 2be690f365c2de1f783be2d1d635d1684d9f7ee0c20e4cfaadfb6fbd92c1a64d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/image(19).png.2aa78230b74798e345b60e3f00462916.png.4e336bf7c14fbdc1f4db64c294c8c35e.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: image/png
content-length: 2100356
last-modified: Thu, 11 Apr 2024 06:36:43 GMT
etag: "661784fb-200c84"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6071
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=00UjKMzzXI5%2Fkus9Hcctg4oB9qi5dbG1nMSBUO5dU%2BGemHg0xspUy6HdMrq35T1FHJCFRWuiRy%2FZZNnN1q%2BbIFJfXe0QOrm7eOM3tQOV6jJUE1IsN0QzfjRbl%2By%2BUMbbUYh7mA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaabbab511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/applications/core/interface/js/spacer.png | 104.21.10.110 | 200 OK | 137 B |
URL GET HTTP/3launcherleaks.net/applications/core/interface/js/spacer.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 1 x 1, 8-bit colormap, non-interlaced Hasha41d6e3396dc05c78cc77b2d2466534d 0ed5c70f6c2012837adc192b1570cdc8551defbe dc1b146a3d93548cfd8893783085c4d22a389d361f6b0816643b67f19233000d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /applications/core/interface/js/spacer.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: image/png
content-length: 137
last-modified: Thu, 04 Apr 2024 02:57:28 GMT
etag: "660e1718-89"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6071
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pjnZ9eA31B8FGl7z0yYXruJWkdA6FGBTNd36%2F1N4JlhXzRn8qdD1FIOrZeHksNF9dggfGWEIpPsfzuSkdaajsVYwkaisR8v5YcptvJYudLkoYc0UYjCF4Oug3qFo9qXoqOARlw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfadbc9b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/file/12769-mustang-gt-wafflez/main_script.js | 104.21.10.110 | 301 Moved Permanently | 0 B |
URL GET HTTP/3launcherleaks.net/file/12769-mustang-gt-wafflez/main_script.js IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /file/12769-mustang-gt-wafflez/main_script.js HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Thu, 09 May 2024 02:25:59 GMT
content-type: ;charset=UTF-8
content-length: 0
location: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
x-ips-loggedin: 0
vary: Cookie, Accept-Encoding
x-xss-protection: 0, 1; mode=block
x-frame-options: sameorigin, SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-content-security-policy: frame-ancestors 'self'
referrer-policy: strict-origin-when-cross-origin
expires: 0
cache-control: no-cache, no-store, must-revalidate, max-age=0, s-maxage=0
strict-transport-security: max-age=15768000; includeSubDomains;
x-content-type-options: nosniff
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZcuTLlPE%2Fw1mz35ZNleU9SonLeC3S%2BX4yq1JKvc9cZDRjVUx23qgPj5p%2BW374FSanRMeBt%2BYjGTGCg1UerymLniaqpOAuEbCxKRmHqTa7gwPFJ8JhRvnRVhUM%2FnTnlgdNKpwkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3dfaabb7b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/sweetalert2@11 |  151.101.65.229 | 200 OK | 21 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/sweetalert2@11 IP151.101.65.229:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (52172) Hash230c939d3b3fc96a5cf7fec7d22891c0 5c664950c68e5630583db458390152ad0e1c64d9 ef7aceda0ec9484ac6f22b195c2b1edfd29fe721ae78f823cafa2dffc71108d4
GET /npm/sweetalert2@11 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 11.10.8
x-jsd-version-type: version
etag: W/"129b5-XGZJUMaOVjBYPbRYOQFSrQ4cZNk"
content-encoding: br
accept-ranges: bytes
date: Thu, 09 May 2024 02:25:59 GMT
age: 40573
x-served-by: cache-fra-eddf8230029-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 21319
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.5.1.min.js | 151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.5.1.min.js IP151.101.2.137:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d84"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 09 May 2024 02:25:59 GMT
age: 1077731
x-served-by: cache-lga21981-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 64, 56692
x-timer: S1715221560.695639,VS0,VE0
vary: Accept-Encoding
content-length: 30879
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0 | 104.21.10.110 | 200 OK | 77 kB |
URL GET HTTP/3launcherleaks.net/applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /applications/core/interface/font/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: application/octet-stream
content-length: 77160
last-modified: Thu, 04 Apr 2024 02:57:28 GMT
etag: "660e1718-12d68"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ov%2FBncTnNQUthvlRWGK4SjlewdRVVDBO1964oodisYW4ya%2BSAfY%2FANSk7StKRolbTRcnAjk%2FGFMlP68hNLp0tL%2BAo2zA41DCGYfhj0Df7HX1n2n8UmtdWmYXD4%2BAvF046ND6ZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa8b99b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_global/root_library.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 118 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_library.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size118 kB (117572 bytes) Hash9c9b1c53736ee439d444ff6d4a01a29a 2849d296c7de488a6e729b502b110bedb942836e 17c9e92513fe1affe30eb6edf302b133663028f1d3acfc63d9aebeb7e0eae0e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_library.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-567ce"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FDZicnCT6yN4Ywq9PkHlQA2nF7RoFsKcwZODVnzN%2F0RC6bmuVqOH7%2FNRa0pc09BhZerhYVN4sOOOZKdAefNyWLfRIuvPgwfrP%2BmDM0qrjoZSM8Fvdim1ypbY%2BcdtD0FmhkrJgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfadbcab511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 | 172.67.142.245 | 200 OK | 110 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 109808, version 772.1280 Size110 kB (109808 bytes) Hash005c9aa92b564b73b7582cc4f1fa49cb 373361ed756b1fe68ce2f5968d467826b6973bb5 faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1
GET /releases/v6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: font/woff2
content-length: 109808
access-control-allow-origin: *
etag: "005c9aa92b564b73b7582cc4f1fa49cb"
last-modified: Fri, 22 Sep 2023 01:46:37 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 712771
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zP%2BIB%2Bbfd6CwKYU4QOs8ezs0V6XqUXZacw4LXqh0Az4pt%2B4htnr66prlvfiryeXIFau90TSePqIrJxxdD%2B7RaX7E7TR9lgtGfbTlxy5scKvDnu1ZVFHlzsSDInObT6UKYP1dk9S6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3e000fc056ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-solid-900.woff2 | 172.67.142.245 | 200 OK | 150 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-solid-900.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 150020, version 772.1280 Size150 kB (150020 bytes) Hashd5e647388e2415268b700d3df2e30a0d 97f0942c6627ddd89fb62170e5cac9a2cbd6c98c 886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9
GET /releases/v6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: font/woff2
content-length: 150020
access-control-allow-origin: *
etag: "d5e647388e2415268b700d3df2e30a0d"
last-modified: Fri, 22 Sep 2023 01:46:37 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 722748
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NsiSxugccokDsr26Iy0Nq5Ph7xBqGqFzo9cfIJ0lD5Emd%2FT%2BCdi7psFrBdSAxhpOOtq4v%2Fn9GpJwIrzxE14aZUdMb9JlCKoARRKR%2FVb932QJMrjmbKr3gVWGmlrB%2FSqrV59FfotI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3e000fc656ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/javascript_global/root_front.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 173 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_front.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size173 kB (173052 bytes) Hashe2dfbb0c0d10fcf1a7585b24ca1e9710 9428d0fb6f74cb8147677d20fcb45e37abb4df22 7e6ef86b4fa71d8b1cb11a7362235aeeeb5712206d186bad52c3ebe46b837196
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_front.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-19bce"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h0YzwYhzUmRUHulI%2B%2Fgu%2BoPUCRNGFgaTXKJA65HQmaEJBiMAhd8%2BsQ%2BsiNbC3egYLTEavGBNGrp2bY%2FgTl4h00aViiBooDGuG3vGDfKOmTZF%2BpScjm8SyOChhROGGV%2Fcw%2B8gyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaebd2b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_core/global_global_core.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 10 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_core/global_global_core.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Hashf881f99df95dc86bc015ebca2cdc5830 a4acff6fdfd27f0aa1a9bc1f6c3a871833e99ac8 bcc7b42e0b72866de174f4256e2eb2d7d18d6b9aa8be76cce970d65b8188dfc2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_core/global_global_core.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-9734"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fBCHQn%2FEMhE6HxBgYThGp0XFpzPWBsS%2B6nMMfS1SAJHvbok4hz37do7UJMYAQ1hNUPaSqHqOdjjREMYAMjjEK12fAmhP%2FJ4pRjIB6pmeDOfWjN9LuRkVq5v4dTPCU0BokLY3tA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfadbcdb511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_core/front_front_core.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 9.4 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_core/front_front_core.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Hasha757ffd8e74b6a52a056a3891d90d28c bf2b662913443a042fcab00ade026bcebe73017b 5321c7050a426b7b751a9b42414471dcd0d9b992ad47956c17f007cf751ddfd7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_core/front_front_core.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-952f"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BWMg8ubQJLYQ%2FqZ%2FqGN%2FVB6W%2Be7qZg84Dl0UdxeiBgmp7J4yRMtHdGuY6jAxSS2%2BZ2UJFjz2ytOxNgBp0a3JQkFKzH5B3XxtzCagbhQx8ig8oqQpYKdhzhM827oXnw2ys3iqFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaebd3b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 10:54:17 GMT
expires: Tue, 06 May 2025 10:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 228703
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 10:54:17 GMT
expires: Tue, 06 May 2025 10:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 228703
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 10:54:17 GMT
expires: Tue, 06 May 2025 10:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 228703
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 216.58.207.227 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP216.58.207.227:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 May 2024 10:54:17 GMT
expires: Tue, 06 May 2025 10:54:17 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 228703
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/javascript_global/root_framework.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 113 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_framework.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size113 kB (112593 bytes) Hash14ae9ec70406dc39d6f5420647d85ba1 738f865dbf967e33e5e6fafd81f06ac2a11bef32 aa101c496f080fe7dd3cb06579ddcac6d53a0885d6292596ca4ff9dfe95c01df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_framework.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-6d379"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NTfLJ3mi%2BR%2BpE9FSvSFti%2B2wvjF6qvNSuAFCFFtbdjgQIWJL57wM%2BfLoCet3AqdjqVP91SRnuf0mm7Ys20pqA%2FRmhe1bVhME8qQoqkDjNzZEIH11cs8Uw7pQjSXRd8tZSgnyuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfadbccb511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.js | 104.21.10.110 | 200 OK | 212 kB |
URL GET HTTP/3launcherleaks.net/uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.js IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size212 kB (211455 bytes) Hash8e112ca3605c56b1aff20435434c8139 b892fbbfaaedc21d3976bdce12582f88ab1a5c9c 1a86dc2a1db4bdf2fec83f492d7bf521f6e7e518dc7dd7bcd6705150cc616932
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.js HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-20e7b"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6071
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q2b4etmy2wtpydhGd44h%2F45BkiRGjuKhQlBSp3OAKrNIy%2FOI641DoBTdrSZdJaSLOTjJ3kev9KqXppRAqI%2BI0%2FzcGzwwEN99G4eYmGCyM6vU%2Bb4qiFqKC8XK2h77xqikhhR6Tw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaebd7b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_05/Desktop_Screenshot_2023_11.09_-_20_05_56_61.thumb.png.137bae1e69f392a401f2b72204d30ef1.png | 104.21.10.110 | 200 OK | 172 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_05/Desktop_Screenshot_2023_11.09_-_20_05_56_61.thumb.png.137bae1e69f392a401f2b72204d30ef1.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size172 kB (172311 bytes) Hashf1afed96017903c38e0c7d626ebb97e8 5c484b964246cc8694290da55640c5e4db8d8d3b 0c83a790c6a275887b5edb9e2de7c9f0232bace471eecac419b72f80b62d2765
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_05/Desktop_Screenshot_2023_11.09_-_20_05_56_61.thumb.png.137bae1e69f392a401f2b72204d30ef1.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/png
content-length: 172311
last-modified: Sun, 05 May 2024 12:28:23 GMT
etag: "66377b67-2a117"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cvj618Q7Y5uPqs9eCDyAyObh8gY1wehUBZQ21vDP%2BimSjFDGXGFa7PL0PxN8EH6nGUNf810MnSi1AZP8xWUchh1ph6pWixCcNJkdueOgKq1muqGHhp7mxXAHSHGANF%2FdQwNrjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e033f0ab511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| use.fontawesome.com/releases/v6.4.2/css/v4-shims.css | 172.67.142.245 | 200 OK | 115 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/css/v4-shims.css IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeASCII text, with very long lines (27374) Size115 kB (115387 bytes) Hash665de85010641f678f0178a9d330a7af bf1ec2791cd06922f4a1b67480f75209d85e6deb 0e0a27c105caf20bd4cc76fe58f222d856ab8f626447846842dddca8ce7509ef
GET /releases/v6.4.2/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: text/css
etag: W/"665de85010641f678f0178a9d330a7af"
last-modified: Fri, 22 Sep 2023 01:46:32 GMT
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 727678
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0z%2Fvyyoq6iu4OUXG4XEZ4YiOKdzN7ndxOpR671pMm1rhFIjHRFHmDmLN48PvNnDNiDpfyfv16sMJu1TzZSdpNEEg7NvpjQk84rwSrY6zW87mNTFIkkbt%2F0PsNcCBV%2FUfmhi%2F%2B5lb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3dfe9f7356ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-regular-400.woff2 | 172.67.142.245 | 200 OK | 24 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-regular-400.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24488, version 772.1280 Hash747442fa76f1d9a31f9a54a2e8a4b448 07fc0ae14bb3187839082aed3bca11dfb1e04524 9169d8be7a8177e5a92a4d04b6de7f6504b938573bf4da5889871c4f376d3849
GET /releases/v6.4.2/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: font/woff2
content-length: 24488
access-control-allow-origin: *
etag: "747442fa76f1d9a31f9a54a2e8a4b448"
last-modified: Fri, 22 Sep 2023 01:46:36 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 722748
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zOo%2F4qQdA2fOiY8aTxrJT8eZKye46gPnO0ZzTe%2BzqEiruwA3FCciccBhdrZqLI%2BwTRmqYR5RN3fxzffEL30VF%2Firup1sIIz7TRWy4QGIYM7D%2BmUzKH2NrbPUI%2Fj8TUF%2BRAxeFQe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3e03c88856ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/file/12769-mustang-gt-wafflez/ | 104.21.10.110 | 200 OK | 1.6 MB |
URL GET HTTP/3launcherleaks.net/file/12769-mustang-gt-wafflez/ IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size1.6 MB (1558038 bytes) Hashd1b0d7f82c8c5efc1aa5b759b42dc05f d5f05a638e182d31691e4c7aa20a35f560f7307d d375016b8a32494492b79d77f4b375b647d2d15ff7fb5973327fcd1dabb44d4c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /file/12769-mustang-gt-wafflez/ HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: text/html;charset=UTF-8
x-ips-loggedin: 0
vary: Cookie, Accept-Encoding
x-xss-protection: 0, 1; mode=block
x-frame-options: sameorigin, SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-content-security-policy: frame-ancestors 'self'
referrer-policy: strict-origin-when-cross-origin
last-modified: Thu, 09 May 2024 02:26:00 GMT
expires: Thu, 09 May 2024 02:41:00 GMT
cache-control: no-cache="Set-Cookie", max-age=900, public, s-maxage=900, stale-while-revalidate, stale-if-error
strict-transport-security: max-age=15768000; includeSubDomains;
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R9WPGHNFzRSdkjV5PfMhGaNHIbkO0mVmWn%2FClPVN0OGeOx647ShzWiXpoxZmygps62fV5cOoe%2BwgnJonKDyXiQl6kykXMVhev7ovDnbgBxvh%2FtJNqwfoEPuwl8hGwBARXTygIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3dff8d85b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| i.imgur.com/gbpa60N.jpeg |  151.101.236.193 | 200 OK | 304 kB |
IP151.101.236.193:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerSectigo Limited Subject*.imgur.com Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 1920x1080, components 3 Size304 kB (303975 bytes) Hash6b3624509dd2b21b8bf528630202d2f3 c9b6b7e104447c635688ea35f6d6741a3f66a1ad aa10e0dd5636ed336e58dfd065e3e5ccb5acddcae04b2489faee68dfe18101a0
GET /gbpa60N.jpeg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 25 Apr 2024 15:47:33 GMT
etag: "6b3624509dd2b21b8bf528630202d2f3"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: JFK50-P6
x-amz-cf-id: wKhO_yk60BpzX-zrtbJacWkksGcxEaOtlu9VPpPE3Y_IWnNxys-m_A==
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 1161508
date: Thu, 09 May 2024 02:26:01 GMT
x-served-by: cache-iad-kjyo7100161-IAD, cache-osl6524-OSL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 33, 0
x-timer: S1715221561.039159,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 303975
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 | 172.67.142.245 | 200 OK | 110 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 109808, version 772.1280 Size110 kB (109808 bytes) Hash005c9aa92b564b73b7582cc4f1fa49cb 373361ed756b1fe68ce2f5968d467826b6973bb5 faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1
GET /releases/v6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 09 May 2024 02:26:01 GMT
content-type: font/woff2
content-length: 109808
access-control-allow-origin: *
etag: "005c9aa92b564b73b7582cc4f1fa49cb"
last-modified: Fri, 22 Sep 2023 01:46:37 GMT
vary: Origin, Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 712772
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JPSSxvkDX9R4zrz1X5xCjcxluQXeQByFRclOM3AZkjpvEXO6MjfaBEAya1DjZQXsWbZJ%2BaGuvrsK4Nf1uFTq5EmWyuiWdP2%2F7S5XDH8tQmVa271jE2jgQH70f%2F6%2FybizFoAPGgAn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3e05f8ff56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.gyazo.com/cf48240e1a5908853bf7c7444351a6de.png | 104.18.24.163 | 200 OK | 157 kB |
URL GET HTTP/2i.gyazo.com/cf48240e1a5908853bf7c7444351a6de.png IP104.18.24.163:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerLet's Encrypt Subjectgyazo.com FingerprintB1:88:95:2F:E3:8B:92:D7:5A:FA:0F:4B:8C:CB:22:9F:DF:EA:DB:F8 ValidityWed, 03 Apr 2024 02:09:12 GMT - Tue, 02 Jul 2024 02:09:11 GMT
File typePNG image data, 1046 x 646, 8-bit/color RGBA, non-interlaced Size157 kB (157231 bytes) Hashcf48240e1a5908853bf7c7444351a6de 8ac4058e3f5c321e9201c344081a68a59cb79e32 7941c1300641e6d3729686a430e0c4248168d69fb4243214d128fbe6a936d8dd
GET /cf48240e1a5908853bf7c7444351a6de.png HTTP/1.1
Host: i.gyazo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 May 2024 02:26:01 GMT
content-type: image/png
content-length: 157231
cf-ray: 880e3e060f8ab50b-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://gyazo.com
age: 511615
cache-control: public, max-age=31536000
etag: "cf48"
expires: Fri, 09 May 2025 02:26:01 GMT
set-cookie: Gyazo_cfwoker=i; Secure; HttpOnly; SameSite=None; Expires=Tue, 01 Jan 2030 00:00:00 GMT
vary: Accept-Encoding
via: 1.1 google
access-control-allow-credentials: true
content-dpr: 1.000000
x-cache-level: ZS
server: cloudflare
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/monthly_2022_07/143702555_MaleVariant2Front.thumb.jpeg.b5982b752eea7439919b52fa2572a282.jpeg | 104.21.10.110 | 200 OK | 151 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_07/143702555_MaleVariant2Front.thumb.jpeg.b5982b752eea7439919b52fa2572a282.jpeg IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 500x282, components 3 Size151 kB (150903 bytes) Hashbca70d083201c503e48a3a8e6bae1ce9 4b3b57ab166e81cc24e792267ce6bcf06ebcdb3c 737b339118181c22f8a500aa0eacf3599c0d8bc8c9b11b5bff7780d1cb54a508
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_07/143702555_MaleVariant2Front.thumb.jpeg.b5982b752eea7439919b52fa2572a282.jpeg HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/jpeg
content-length: 150903
last-modified: Mon, 05 Feb 2024 05:47:16 GMT
etag: "65c07664-24d77"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FW8%2F%2FKgNxXPAB0o4whwW8JY3lhLPHr1eLVHxZjAZsT2rXpYqgFLpiqtmZUnNCy%2BkKLi9zMf3Oa1L99a6tdE7ChNpKbX4yM%2BmBfWWKKOwXyjQC0MjGsypb1oJfiT2KGctSxeIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f2ab511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/GTA5_2024-03-05_16-50-53.thumb.png.4a46a79390de4789bbe47f99a5060a55.png | 104.21.10.110 | 200 OK | 262 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/GTA5_2024-03-05_16-50-53.thumb.png.4a46a79390de4789bbe47f99a5060a55.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size262 kB (262399 bytes) Hash1643bc44ff885f59509b80d480e1a22f 1cfef5386597cffd88dfae3c8f498eb4bac1c4f7 0c23461fa3052f24516a166dc5781412d793759aaaf27fd9b258acb8956e4115
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/GTA5_2024-03-05_16-50-53.thumb.png.4a46a79390de4789bbe47f99a5060a55.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/png
content-length: 262399
last-modified: Wed, 03 Apr 2024 03:05:36 GMT
etag: "660cc780-400ff"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M8ZjDZDhSgsGmsXRQfeCuo%2BT8CDnR2WCi9epXpG19DvtR186N2rNGnd%2BmMl6wigpj7pSlXFOr1DhJCWP4BFj2sJsS3EjNQcNRKFQ8VxKIRiCJLITf2c3AjVG5uU1FmeG69T4zA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f2bb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_01/63024853_maxresdefault(7).thumb.jpg.7e9e3d00918758b08374931a8c9a123d.jpg | 104.21.10.110 | 200 OK | 45 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_01/63024853_maxresdefault(7).thumb.jpg.7e9e3d00918758b08374931a8c9a123d.jpg IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85", baseline, precision 8, 500x282, components 3 Hashbbe0ab7d965c381cbd07e190fc11edde f75d098033aaeaac06da7bbff82d35f8a1358ef1 7888d217792f159b086f459180d7156e3e038f4300f11819896f4116f11f8e5e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_01/63024853_maxresdefault(7).thumb.jpg.7e9e3d00918758b08374931a8c9a123d.jpg HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/jpeg
content-length: 44823
last-modified: Mon, 05 Feb 2024 06:10:50 GMT
etag: "65c07bea-af17"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VkkcgAL%2F1EQa5yxTA2k0eu4O4UsCDanKGFDahxCdslBA6dG1XsY3VWdt3kjo4eU9cggqo%2BUH2j2INRF86yiYJBEJxK3Uff%2B3Eoyu7vE%2FdVPNGLMN4ZKYa52YAU35HjNLNvqGVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f2cb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2021_11/feat-P7bpT5uwtA1DIajkJRqhNXK9F.thumb.png.8c51ee5b4146aaed194fc5971b0ad1d4.png | 104.21.10.110 | 200 OK | 208 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2021_11/feat-P7bpT5uwtA1DIajkJRqhNXK9F.thumb.png.8c51ee5b4146aaed194fc5971b0ad1d4.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size208 kB (208437 bytes) Hash54ba4b4d294ee1f75709a00b260e85f5 ecd2056322e27097f61e0b831a70a594c6dd1b19 7202ef1fc16f209eb888bd2073532f3506ebf50e83bb18fecf48bd3ac5a72c14
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2021_11/feat-P7bpT5uwtA1DIajkJRqhNXK9F.thumb.png.8c51ee5b4146aaed194fc5971b0ad1d4.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/png
content-length: 208437
last-modified: Mon, 05 Feb 2024 04:10:11 GMT
etag: "65c05fa3-32e35"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nhYnIvv%2F63KpL700I%2FpRMT%2FKw%2Fmv3ZRzpF%2B1oncSLhRxZjPF040yXYnhaFtXaD6BrsgH2jsem5MVUU5QqD9%2FRMW9vaw7V%2FFxmNH1jYIurJmVlrYBMo%2B6ejwHRcmIVIlflfmjWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f2db511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_07/maxresdefault.thumb.jpg.42531b6a467eb06c2d99fb40de2e7a2b.jpg | 104.21.10.110 | 200 OK | 230 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_07/maxresdefault.thumb.jpg.42531b6a467eb06c2d99fb40de2e7a2b.jpg IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 500x282, components 3 Size230 kB (229988 bytes) Hash9f29d7efa15fddffe81bdb3120e71e04 017da9d3a2d15be18f70d24236eabcabfb78fe50 faf62a491715142b89a693e5d081b33e9372254be674adcf7b858e189bcdc1ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_07/maxresdefault.thumb.jpg.42531b6a467eb06c2d99fb40de2e7a2b.jpg HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/jpeg
content-length: 229988
last-modified: Mon, 05 Feb 2024 05:47:17 GMT
etag: "65c07665-38264"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lu1jktEq72zl1rUpwA1pyuF74%2BphPU089aA3hOWTsyvpbJOI%2BOhuavmvNF99Pi8i2RGOUWP2a5H4X3ESZ074ilZ2lhovQoQ6hKyWIzN1aJscEUzxXtR11O9wYTCbT%2BlmM9SoBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f2eb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_04/86594cd2864fc6a0de7a78960d88c122fdd70094.thumb.gif.15b70b2fb4dcc87a452c80cc95ab93ff.gif | 104.21.10.110 | 200 OK | 3.9 MB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_04/86594cd2864fc6a0de7a78960d88c122fdd70094.thumb.gif.15b70b2fb4dcc87a452c80cc95ab93ff.gif IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeGIF image data, version 89a, 500 x 281 Size3.9 MB (3945875 bytes) Hashbfa48b762cbdb39a1a8c8cf05455ed4e 86594cd2864fc6a0de7a78960d88c122fdd70094 ef4babc80e53446725ef0f4ea6db0546742fb1aa90a1890be972736aa71f1dd4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_04/86594cd2864fc6a0de7a78960d88c122fdd70094.thumb.gif.15b70b2fb4dcc87a452c80cc95ab93ff.gif HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/gif
content-length: 3945875
last-modified: Wed, 17 Apr 2024 18:24:23 GMT
etag: "662013d7-3c3593"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NB5zG%2FTpskPi1CBRtKSejZ9R0e5uwMxpRoaJ8jlJZxDd1tFj%2FoffoUUD430NJyEtBlNwZoOvCOTEgEDMfnDPXf5UaF2fSSQEgympgqercxYZu7E0Kvh%2Bd3LpFcRjLWB%2BvPN14w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f29b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_09/WinRAR-logo.thumb.png.712705727354baba71b104a792cefd63.png | 104.21.10.110 | 200 OK | 231 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_09/WinRAR-logo.thumb.png.712705727354baba71b104a792cefd63.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 424, 8-bit/color RGBA, non-interlaced Size231 kB (230689 bytes) Hash675d24d4429664d2b8933941e2035911 5e7826a9b7777ff7240d9824dca1c4d5751e3401 bedb27d2055906aa2dd8ea6ab9260fd67d66fe589a0f86a7f598d4bed22f3494
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_09/WinRAR-logo.thumb.png.712705727354baba71b104a792cefd63.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/png
content-length: 230689
last-modified: Mon, 05 Feb 2024 07:21:25 GMT
etag: "65c08c75-38521"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u7%2F18afUSaHlnYa03G1oLvcwYcGHZlG7noWpnKFJhl5qB2JND%2FeymxO95zAeEM1helbeqdoNtPQ6n688mBRDxZ3dm5n5ta8nXSWGVuoLAJfvoPamA5fVcm2hUyP4yJ%2B1yrkwNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f2fb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_global/root_js_lang_1.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 202 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_js_lang_1.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size202 kB (201898 bytes) Hash494787c57d160e9649ca96843e0dcae1 23b98cbc22746716db8766800946d2a00244437c a8248dff887525df51bd1bdf113a82c490fdcd21b4f99ac4030b14839fabd91c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_js_lang_1.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-1a6e3"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZdQDSzHx6J3bQf0Sdd1PkniQAnvkPkn0zUZEzWy%2F9TkZEvJaaR1UKNicHXdvW05DQxx0UtbsO7mvvXRS48WZUYUvNuaIg7hpzNIHtDUGm0U%2F6XyVUxtzOFjafUvMzX0b1%2F%2BVeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfadbcbb511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/29bd99919d9bcfd58c5a255c6957b8a6_convert.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 272 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/29bd99919d9bcfd58c5a255c6957b8a6_convert.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typegzip compressed data, from Unix Size272 kB (271671 bytes) Hash328d6f5c3f2507c259f6f57d64981868 69356038184adea31665f26edb666c0a3e57ef51 7948c7ea25bea01f324af50fa04c3486cb5345544a13ff54e8c1ff644fc380e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/29bd99919d9bcfd58c5a255c6957b8a6_convert.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-1755"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zvNSQPk5zSWgRWKKQdZjJsMg9MSGrH6N9G%2BW49iW8qlj4LI9ijISclHdZCuTalrTw439SW2xtsDcijblWsPEwQ%2FMljXdAi4qJuYNiE13xTsNs14vPzwC5Q9FDyq7JDbhxC3r8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa9ba4b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2022_11/271590_20221123180635_1_1296x.thumb.webp.166a2c2dbac4e4c4f2268cea650e863b.webp | 104.21.10.110 | 200 OK | 69 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_11/271590_20221123180635_1_1296x.thumb.webp.166a2c2dbac4e4c4f2268cea650e863b.webp IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 500x282, Scaling: [none]x[none], YUV color, decoders should clamp Hasha5cafec497475164eaaa1cff49c62d0d efdf9c2d9471d73826ef40789fa53629bea5ff37 f0ef030362846f7c6fb69ae372a67d149d91324668c43d5067de956eaf09a0ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_11/271590_20221123180635_1_1296x.thumb.webp.166a2c2dbac4e4c4f2268cea650e863b.webp HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/webp
content-length: 68628
last-modified: Mon, 05 Feb 2024 07:25:03 GMT
etag: "65c08d4f-10c14"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=10JR1XIaDypz1sp6fFH6HaaJJnVKav85P021kFk3MioHI%2FPT%2F310nNcR06rwf6zI8U6VBafjNV27AiZ7ONjJdwJDkxF%2FamOEqHt5scQZ8%2FZLpeEI2cXquLmZE54i1QtafqnYWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e03cf5bb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2023_03/imported-photo-183738.thumb.jpeg.4105cc0ef605c828d8f952f7c1022fcd.jpeg | 104.21.10.110 | 200 OK | 7.0 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2023_03/imported-photo-183738.thumb.jpeg.4105cc0ef605c828d8f952f7c1022fcd.jpeg IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 96x96, components 3 Hashb427a9a005ddf0646a1c7f760775734e bfcb7858839f4d0d8aefc8e29afea4be993c11b4 e9a7b109ff7e8cfd661d96e2902644483d29cac7feff8de05da54310b71f6496
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2023_03/imported-photo-183738.thumb.jpeg.4105cc0ef605c828d8f952f7c1022fcd.jpeg HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:01 GMT
content-type: image/jpeg
content-length: 6955
last-modified: Mon, 05 Feb 2024 05:29:02 GMT
etag: "65c0721e-1b2b"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uqXuU0D3ihwImDcMLOcPYl7QgYI58YhyCGsg0kW5FIvDgE0d8D44Qi1YnDByTqHaDdpvHMQiQXl10R7F7hzvWUsquazA27IZ056PPjM0XyRQFDrcSvrCMW671UJ3PEyR6UHzVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e0608e8b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.10.110 | 302 Found | 0 B |
URL GET HTTP/3launcherleaks.net/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 09 May 2024 02:26:01 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V8hhL14C1KsGIH7mXgJxui%2F0aHsvv%2BMIaxWAMm7zNMxb5dBWheDDWc9dHJY5HW0wCgD3RQVuv3W0w0jYlNqJ1NiLvv4dyXfcEr6QjeyWsOxWn5AMm01PhGilGqDqA5YjAsmGCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e0608eab511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_05/image_2024-05-08_165747356.thumb.png.258954aa9a02510639e6396fe51ebc07.png | 104.21.10.110 | 200 OK | 263 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_05/image_2024-05-08_165747356.thumb.png.258954aa9a02510639e6396fe51ebc07.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size263 kB (263099 bytes) Hashd33de9fa511023bc3de16abbf8ae90a6 7776caf661e273d66872633088afaee75bf10ce8 27dbb4b4a889ce1562f2ed105637a14ea3ddb34cca82ddc9a09694d8ef716332
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_05/image_2024-05-08_165747356.thumb.png.258954aa9a02510639e6396fe51ebc07.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:02 GMT
content-type: image/png
content-length: 263099
last-modified: Wed, 08 May 2024 20:58:08 GMT
etag: "663be760-403bb"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 557
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4wS6eBPCWX510xdbf5P4oDJ2zMOkl4psczN%2FvORtnyBmTNrScNXooyA3hIiZ65gBhogysQMLU%2FFEswkrmV5vvF%2Bjw6zN2s33qSgi7z21HA2d9FbQfPFBmWJBnZ%2B941JNwX1J7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e0ccccbb511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_02/android-chrome-512x512.png?v=1712605004 | 104.21.10.110 | 200 OK | 49 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_02/android-chrome-512x512.png?v=1712605004 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hash390058981d8c33cf7f7ac83df7289560 853f6dd48c10c41a4dc288b8fe6d8987ae14f136 ab56bf944922cd6347a06f5de4cb913f823cd8ba96f6d1b2ce31edf10d62e789
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_02/android-chrome-512x512.png?v=1712605004 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:02 GMT
content-type: image/png
content-length: 49186
last-modified: Tue, 06 Feb 2024 04:19:31 GMT
etag: "65c1b353-c022"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 536
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mWdR%2FTnJVt%2Bozkaj8haD2wO%2FUVstdtDq7Kjbq04eZYm62RlZ1NUHOpaNxOtNBMbrjkyTHo02lig%2F5sixJ3MRS%2F3wgXbtSOeZTD9PTDH3gISWStbtD%2B6HpnGm409N4E53N35UqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e0dcd22b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2024_02/android-chrome-36x36.png?v=1712605004 | 104.21.10.110 | 200 OK | 1.3 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2024_02/android-chrome-36x36.png?v=1712605004 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced Hash6643840bd35c7cddf0811e8969b64875 886f7f812fda1694e4184083e178c8b8c6b08be3 ee3561daab5ce98f4859fc704e7584e53d0858ac073fd02569fb96b5cdc59209
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2024_02/android-chrome-36x36.png?v=1712605004 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:02 GMT
content-type: image/png
content-length: 1282
last-modified: Tue, 06 Feb 2024 04:19:31 GMT
etag: "65c1b353-502"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IP%2BYQMskVIP%2FayF7%2BGFBpUiGHvXIO2QoOEK%2BodBbnpxq3GhDsOdtxEcsWwMgdodZjivIzbQQR9TOj7he5QVfi6uBymfTAHwORg8fHLrB7Amc0AdrMFIcZ4%2FimjDYjkr%2F2jv3mQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e0dcd23b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/cdn-cgi/challenge-platform/h/b/jsd/r/880e3df4bcf8b512 | 104.21.10.110 | 200 OK | 0 B |
URL POST HTTP/3launcherleaks.net/cdn-cgi/challenge-platform/h/b/jsd/r/880e3df4bcf8b512 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/b/jsd/r/880e3df4bcf8b512 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12192
Origin: https://launcherleaks.net
DNT: 1
Connection: keep-alive
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:02 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=bITQqgfbAZK4M83iXF9xg0VOImdjO1GqvFn7G_Cjck0-1715221562-1.0.1.1-4T9erwBbmuPvKKaX7yIJGuqNNHpysMwhhh_xt7Fhj86Pcgq216GXMKmGFQxogqN7BFXI4YoJrtX9JApNSwpi4Q; Path=/; Expires=Fri, 09-May-25 02:26:02 GMT; Domain=.launcherleaks.net; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wUlLT%2FB8kSdpzm3fKis7MKKFHcib9b98addwaVUnFaPms5un3XKlUxTQtO%2Fz97VZ%2BD%2F9fyiIvp0DL1RAfE2Pbgk8c1IlqPT1BXOve2Q19TfQ1OoMFJqxyyNGRqxE4zLP5icSJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3e0eed87b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_global/root_map.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 2.5 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_global/root_map.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (2569), with no line terminators Hashe6d0aee7eb24ef7aac3cf4c9da1d8afa 6874b2f9de97ec3e2c78d5529bd2210d80d85c8c c6469f0ea80a6d013b28135b13447cb77b3edf7d586fc2fd1400c74398086bcf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_global/root_map.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Thu, 09 May 2024 01:40:13 GMT
etag: W/"663c297d-997"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=118%2FPrtbRM8v%2FSU%2FJ%2Fy74RzjSrIJG12vbSULDsVurwf9CZEPTlOmeTsTx%2FpXQntPooD4JaedEcrhNPLQqBPz3AL5SWe%2BLRO0aMHFgubRQ3vWhN0VWoqPGelcdv30mRc%2BPoZOHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaebd5b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2023_06/Screenshot2023-06-24231322.thumb.png.e46eca2b5a1540d9e47d4ac06f38b4ef.png | 104.21.10.110 | 200 OK | 174 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2023_06/Screenshot2023-06-24231322.thumb.png.e46eca2b5a1540d9e47d4ac06f38b4ef.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 430, 8-bit/color RGBA, non-interlaced Size174 kB (173939 bytes) Hash87dada0953eb59beaa79c774c06e08c6 bb81f511a6ceaa260bf36ae388e72e06c06239ba 3b04624e966826cb8fbb98f294b86d0c9cbcbf449d263b5815b5b4288b087420
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2023_06/Screenshot2023-06-24231322.thumb.png.e46eca2b5a1540d9e47d4ac06f38b4ef.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/png
content-length: 173939
last-modified: Mon, 05 Feb 2024 06:15:31 GMT
etag: "65c07d03-2a773"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wQ%2B0VtlMk6h6C%2BnqF2137jHJrGTtLE6dX73xzSO4a%2Bc9I2DgHptelqTts9NY3nZv5glnz3ZxcVmQ9royBGxjMHUPScJmSA3JApp6WV6w6%2FBbwiwHpfwF1%2FbDMhB06tAZVxsycg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e033f05b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/341e4a57816af3ba440d891ca87450ff_framework.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 331 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/341e4a57816af3ba440d891ca87450ff_framework.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
Size331 kB (330976 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/341e4a57816af3ba440d891ca87450ff_framework.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-50ce0"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3vQtIdq%2BuzztL8cdupB8hQMJhLikSmvyOkX2MS9DlBPf%2BNlW7jE3296P4LG6GlWxiGUAVdzQ7Y2TbJvpbvjDNai0fchYSG7llmwjtAGRSNDs8RATKzPa5JhWUpSradfyP3pRRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa8b9fb511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/63225940445060c5a9f21d31e95bf58e_downloads.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 2.8 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/63225940445060c5a9f21d31e95bf58e_downloads.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (2792), with no line terminators Hashfe0bd138756a85503456321e52e02699 fc9b793c3c1f3d6d5696d087c9903adbf17d790c 7b5f5a1d668712f681d05f1e19d93d4a46ba9c7dbee3f4e68121edbe5eb77ddc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/63225940445060c5a9f21d31e95bf58e_downloads.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-adc"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Whs6ZfRGslTgghN6Cf17kCG1EXCvLpAHQg9u1sY0QxZd9iP1uR9h3X6Hkz17o5jVr9UNIqR8urQYXecFBN1ZoRCVy16g2yB6Ain%2F6oHEst89fwb77TsFvgd%2ByDOLlqUfjNsZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa9babb511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_core/front_front_widgets.js?v=f71abd72281715218813&csrfKey=&antiCache=f71abd72281715218813 | 104.21.10.110 | 200 OK | 17 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_core/front_front_widgets.js?v=f71abd72281715218813&csrfKey=&antiCache=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJavaScript source, ASCII text, with very long lines (1733) Hash9e272c457e8ec0e369564c580ef9f882 007f62cf572d4c263b245ce6174989675fb5a9fc a4156775c0f3a08ac4489f72566dd73853c7566c3e75e083d2d0acbf72acdbae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_core/front_front_widgets.js?v=f71abd72281715218813&csrfKey=&antiCache=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:02 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:22:22 GMT
etag: W/"663c092e-40b1"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 568
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eqQY2PO%2BXQ5lMGWJ9HnEubeNDSubUgfvM23B4rbNNZmdc1aYBl%2B7B7Wu5SaCFIWvMq6u4RIMdd4zcyTCSgITsywP8AKl773ihWrB74RALRZzsdBRigUBpPMVXsxf5wzapt0LtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e0cccccb511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| use.fontawesome.com/releases/v6.4.2/css/all.css | 172.67.142.245 | 200 OK | 102 kB |
URL GET HTTP/2use.fontawesome.com/releases/v6.4.2/css/all.css IP172.67.142.245:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Size102 kB (102217 bytes) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /releases/v6.4.2/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: text/css
etag: W/"5222e06b77a1692fa2520a219840e6be"
last-modified: Fri, 22 Sep 2023 01:46:33 GMT
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 723553
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VSp6H7YYua94Kfzd5qmBwDkKo4rRW3acwpcM3Bkz00fntArHDcw6MMzUFFVYCeRAYhcPpk9NuPq%2Ft1PN77x0zvxHRvSwkfGkOqvkM9Yk6eCOWBltDdt6FVAmD7MNrKVwgBuonB3x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880e3dfeef8556ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/monthly_2023_07/GABZ.thumb.png.01040cd3d4e5949cbb6c11a35aef72ba.png | 104.21.10.110 | 200 OK | 111 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2023_07/GABZ.thumb.png.01040cd3d4e5949cbb6c11a35aef72ba.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 244, 8-bit/color RGBA, non-interlaced Size111 kB (111050 bytes) Hash0a353c2beadfe58fbca87e98d9440755 0f9a01cac0ff93981d44b1ce212688fd58bcbd8c 29156be7b5e145a22ca03e8fec0cc2ba5270ac8d7452b4e4482eb2e0740b5f2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2023_07/GABZ.thumb.png.01040cd3d4e5949cbb6c11a35aef72ba.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/png
content-length: 111050
last-modified: Mon, 05 Feb 2024 07:07:54 GMT
etag: "65c0894a-1b1ca"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6071
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fVs%2B0RWF0M1RqdfIQEhilID5c0nNSU8jb2yW9l9QYPfwr8Gk6n9hm7VLs5SjO6vw4JCpnT0VrWl9QU%2B2zgG9s4wuK4sBVtq6vhETLixwzEHfE4LgTLIMlEFBrBtncmHoa6z0fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f27b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 36 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (36086), with no line terminators Hash6a6abd6eb83fe08b498b0fdcd470b9e6 cc38a66f61f7cb0c0bf4bcfb2067c34d0410b5d0 5008d5e9bd10eea3c48217fc3a797895a56aadb808b04dda8381dd35e6544f22
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/05e81b71abe4f22d6eb8d1a929494829_responsive.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-8cf6"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BIsaEQhGWkPqZ5IDSOMOX74u20GBHxYra6bUi7sE0Az0V%2BQF%2FRgLhQzM1AxNn0vT2XN97lCPcH0qm2twyE7RB1%2BbKD8PdEnoY1dmFcMOfKg54zkLVSWnrUz73dgx0yxHEDVXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa8ba2b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 5.1 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (5154), with no line terminators Hash13e9ca6da01b78cd4c466c067987386d 30f8913376f38cae8f022acdb5fa59cb1e01c350 a0574e732d420fe0518d65f9b289403deababc7fe421793cb8e68fc81e5e169c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/5a0da001ccc2200dc5625c3f3934497d_core_responsive.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-13c8"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOJsHo7Cs8pn5R8ix87vWjGEQfkkCiRxqZnpd2zDoa4nU9ddKmRyAK3pBq8IH%2FZS%2B0x4u17P068RNPosBt9wQZDtVTqtoGq2ZkJWp3mSrf5LGveU8qjL5HCLVTvdAY2fzyqEWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa9baab511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/ecf8cbf597c675f333fa61d7fe877660_widgets.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 277 B |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/ecf8cbf597c675f333fa61d7fe877660_widgets.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with no line terminators Hasha375b3f0fae08440f22bcf1bfc025cba a18d88403675ec7a8dd71a48eee37f4e245dbdff cf35a9b2bbe2737ba157dd24de9e11e7a4e2216ed2c2f4542f2d3f83d0bee7d0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/ecf8cbf597c675f333fa61d7fe877660_widgets.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-115"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kKVvDIuc66DTAY6tuQ%2F4pUuQKYrab8I1KKjZEqeeewQmHSR7sfP%2FhbTwbOTms8bDVD6AvV0Oeq681bKyLFOj7eMTXquXuo2kn%2FR5%2Bi1QeOLWI5WaTTgl%2FhYBIJbS96BQoTW2KA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaabb3b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.css | 104.21.10.110 | 200 OK | 15 kB |
URL GET HTTP/3launcherleaks.net/uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.css IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (14925) Hasha695c6b6c6a2d0e245136a61110d64ce 2b3d7aa150054e72098c83f6fe6dcad72944defb 172381b5313c5d1c2c9972f45e7e4c12f1a59c2f185cca365a8750dcea48acf6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/set_resources_27/d3c5465b682b402f2e7fe6b8c4409085_swiper-bundle.min.css HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-3b4c"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6071
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fRHXo8TUSPPDHpwW0MEahh4TOiw5ktfv0D1YjNW163nWpKklq7Ekz5fzstWLVcVeJTbv47Q4v6g37DEG8VHWPIWvDgY3G4qLHE3E3Ei%2FDGd4kBUvDwYx3oNKV9AvyhS4kQ7v6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaabb5b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_downloads/front_front_view.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 4.4 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_downloads/front_front_view.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJavaScript source, ASCII text, with very long lines (4427), with no line terminators Hashb21f7fe12f63c3f9e923ddf4b50318f6 fa6bbcc23164efc154682bdb588f51d711c0dcdd 3be7ba667b5c819266511385294c565527c129a904cee55a7128915211b2212c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_downloads/front_front_view.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:32 GMT
etag: W/"663c0884-111e"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 512
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qnI0kYHALHmFWtc9I11EvHk6aIz%2FUoHgdOGBuOCkea9dwZt0u8SqaN4RRMFAe6LnQILOCLzVSxUgtTzDfZS2Ua9LYVO6kxM7Pw0XZqnWh8OYfINSqaV77d%2BSajjr%2BAlz9QQ30w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaebd4b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| i.gifer.com/4bXG.webp | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerLet's Encrypt Subjectgifer.com Fingerprint97:0F:D7:9D:0C:22:57:27:95:17:B5:9B:EF:86:BD:14:D6:D8:8E:57 ValidityFri, 26 Apr 2024 20:03:56 GMT - Thu, 25 Jul 2024 20:03:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /4bXG.webp HTTP/1.1
Host: i.gifer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:26:01 GMT
content-type: text/plain; charset=utf-8
last-modified: Mon, 06 Sep 2021 09:36:14 GMT
vary: Accept-Encoding
etag: W/"6135e10e-19566"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js | 104.21.10.110 | 200 OK | 7.9 kB |
URL GET HTTP/3launcherleaks.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJavaScript source, ASCII text, with very long lines (7857), with no line terminators Hash17fb3c8eea7c6639268d36b67cb947c5 4fbdcb321b6a2b14caf4b38d5f8e7ad6d5b4f6a9 488c8245b7cef7f4d16a1727a7716641fa1f3876561bededbc8739ebc9346875
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/ce7818f50e39/main.js HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06; ips4_ipsTimezone=UTC; ips4_hasJS=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:02 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l0hh%2BdctxoPKawhK9fD5zt65Za3fOnQkvnVANSmnJp0UYrFfH8pa0DSj3OiS95rWY2zvuTXjwgYgnyCv6JB3BPXPGIzi%2B3Pb5gt2YMeeySy%2BmN9LLchTvxKw97HaCq%2BfokUHOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e0dfd37b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/49037c9bdbc019a877c9a3ae069caf24_v4-font-face.min.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 2.1 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/49037c9bdbc019a877c9a3ae069caf24_v4-font-face.min.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (2118), with no line terminators Hash576d53e0821a4e4ca4ba6d10b34b39b1 37e395bc57aec465aab5d090b299566729cfc5b8 98b84137f060eebba72caea7bcec7a1e3b8e2b27fe712114200056fc2aed0fe6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/49037c9bdbc019a877c9a3ae069caf24_v4-font-face.min.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-82e"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x1LtlmjvOUi5Wf1kgkcjvptqnlGj0HmDkeLrJdOfuujv8sE39cyl2SHTHYnca8OVGukx7Zoy6jbvyqf%2Bfgq1e8eKVCCTIU7hUqvxdNFHEz4PwOTb8OYCpVqFEW8odHxTVtozvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa9ba6b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| i.imgur.com/G9K4tiK.jpeg | 151.101.236.193 | 200 OK | 1.5 MB |
IP151.101.236.193:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerSectigo Limited Subject*.imgur.com Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT
Size1.5 MB (1538268 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /G9K4tiK.jpeg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Fri, 03 May 2024 17:39:51 GMT
etag: "802b9c8b0ffb98bc3e0581d5d82cd10e"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: JFK52-P4
x-amz-cf-id: Ca1MeoQ412LDupaS_om-dLT5rLuDQZ1aOQBeIzhu6Cb8AL8w2jUmtg==
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 463569
date: Thu, 09 May 2024 02:26:00 GMT
x-served-by: cache-iad-kjyo7100048-IAD, cache-osl6524-OSL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 43, 0
x-timer: S1715221561.933127,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 1538268
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/css_built_27/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 24 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (24436), with no line terminators Hashb4a8b5b1d6079fd5b2bdb2a11e2ef329 1f4c5ad63df6a7b3dadfd6801e87d43356055e9e 52847b98c3ef06e9ea71a5f4e713bc5ca92ec1d59233c37663d00d9f16b21194
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/90eb5adf50a8c640f633d47fd7eb1778_core.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-5f74"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GLE5Jalks4DkrsMU3C9Irve7sP8c9YqzqP0OPJA1S9G7MiOMHwnuWu%2BvdVDQm248WzvJmEJJbGDUci4RJIxzkfIC73X9igL2rHC1wwa2%2F2P606BKnGUTxhcRl%2F911pnQYETlyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa9ba9b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/javascript_core/plugins_plugins.js?v=f71abd72281715218813 | 104.21.10.110 | 200 OK | 1.1 kB |
URL GET HTTP/3launcherleaks.net/uploads/javascript_core/plugins_plugins.js?v=f71abd72281715218813 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeJavaScript source, ASCII text, with very long lines (1085), with no line terminators Hasha3a3b439d522bbb2006fcebe7b4258dc e6afd992d4ffeba64c6ce056d394c130014856eb ca1aecb3a408053150bdbfa325c0c8c19b7a9f2fac2e51a88c82748de03e0989
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/javascript_core/plugins_plugins.js?v=f71abd72281715218813 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-42e"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4mKbqbTQaYDgysoCtlc3bvN0p7uHMMw71DNKtB%2Bi%2FvOiqPSh9g%2FvNPgFGbRzybrsUU3Rd2PcQV43yg2tE0blKA9xqMX8NCHwdkQBi8qWNxqVIZ5c7mQxkTIO9Y6RSrH4iWH2pQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfadbceb511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap | 142.250.74.106 | 200 OK | 12 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap IP142.250.74.106:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hashfa399c57b8f59144c0b18302c33dfea5 6d420f186305a23da0e971a03d14d76d988bb56c 00008d2a6bb44551ff155148e5fedbcc0fdf8d710d908581fdf04dd96dfb31ca
GET /css2?family=Inter:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 May 2024 02:26:00 GMT
date: Thu, 09 May 2024 02:26:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| launcherleaks.net/uploads/monthly_2022_07/4b830b-JPC2.thumb.png.c36755574da3a12a95dd13d061728c79.png | 104.21.10.110 | 200 OK | 270 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2022_07/4b830b-JPC2.thumb.png.c36755574da3a12a95dd13d061728c79.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced Size270 kB (270042 bytes) Hasha84983e7de83ac79a074337d38f30315 d073b42584d4d7605ff292de9603796654d2d3e8 3554e1bf917ec7d6cd136f8f7cca4614a0082ae9dae39045dac38f36aae93e21
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2022_07/4b830b-JPC2.thumb.png.c36755574da3a12a95dd13d061728c79.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/png
content-length: 270042
last-modified: Mon, 05 Feb 2024 05:48:32 GMT
etag: "65c076b0-41eda"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6072
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hl1DkQs0aZy4rkVoaeIt7zP6Sz4OFzwB%2FRnCzQ5H%2BD8yoRD8LcxtLYI6xUs4BcantlmSc8Jgj4PBKV3lnmPuxxLHDxtxYz4%2Fn0YkUS4GS7AWfUgHRLcVuO%2BiFV67dRLclRT0Eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f34b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 934 B |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (944), with no line terminators Hashfe5ac1a4ab4caea663a65254c9c964cf f47bb77e21cc6cc7f5ac57f69ea00f1d3a59fcfc d306fddb662c56c73a09b45ffd3abaea135ed7312932c422817ce3aeb36706b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/20e9fb241d987e07d4fc702c601c3ed8_downloads_responsive.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:31 GMT
etag: W/"663c0883-3a6"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bXt2bzizIGURTkBe6ec%2BeQ5ATc81oNyfQfgb1DLie012sAImK7oXYK1MfpKU9mXJugOlbBNi0NZqzRYvZW9fld0qkTFgSEsIthpPWYIXKqfQAjiXhuDqHh8WUPdgGISgRfZD3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaabb2b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/monthly_2023_03/Glock_Quad_a323ec42-66cc-45c8-ae6f-52fcd45f2f0a_1800x1800_result.thumb.png.997f58c133dcb299d8fe1b18de6b4e19.png | 104.21.10.110 | 200 OK | 168 kB |
URL GET HTTP/3launcherleaks.net/uploads/monthly_2023_03/Glock_Quad_a323ec42-66cc-45c8-ae6f-52fcd45f2f0a_1800x1800_result.thumb.png.997f58c133dcb299d8fe1b18de6b4e19.png IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typePNG image data, 475 x 500, 8-bit/color RGBA, non-interlaced Size168 kB (168461 bytes) Hash7a5d9be31cd29be40a6c3b8430e7c444 41e3170594dd57b4d171d51742d76c55045d1006 d154114095070f4b1b5e1c9ae923b18842302262977ddcfb9db7c895564734e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/monthly_2023_03/Glock_Quad_a323ec42-66cc-45c8-ae6f-52fcd45f2f0a_1800x1800_result.thumb.png.997f58c133dcb299d8fe1b18de6b4e19.png HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:26:00 GMT
content-type: image/png
content-length: 168461
last-modified: Mon, 05 Feb 2024 05:39:34 GMT
etag: "65c07496-2920d"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QVCvcYRUz54Rbeoabm2Vc8GKtSOVz1QOKAgMzmfH6fr%2FdZqYCXYyuiHRblxJ77OJd%2FSpVIvWtYT2mf2lsj7NBkWZ3uOKWA%2BhgdVkC%2FvnQtksZoJ5bDf3P1hBZw9gCdLOktq0yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3e038f31b511-OSL
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/223ae211f0236ea36ac9f7bf920a797a_all.min.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 104 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/223ae211f0236ea36ac9f7bf920a797a_all.min.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size104 kB (104228 bytes) Hash8f831a00b4c0f816068ef1775065eab2 87e4fae3b70ecc397b6470db7058d8b9eb44f5eb 12b099a71039ac4e7c5dec4d9cb9f715649e1eecfd5131f11a7a8d91e170de81
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/223ae211f0236ea36ac9f7bf920a797a_all.min.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-19724"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3635
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YnRy8ucHEm2eXusqPA1dXMdrx5Ld7V5hvPRILSzgcJFrlaEDXgqY0K%2FuOcnYM0K%2BFBjtfHLn9y83zYcUu9vVdr%2FU27GFEs3kq2X%2FRuBSv0e3gklu4pLaUh4BsOeomZM3A30%2FWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfa8ba3b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|
| launcherleaks.net/uploads/css_built_27/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=f71abd72281715210371 | 104.21.10.110 | 200 OK | 24 kB |
URL GET HTTP/3launcherleaks.net/uploads/css_built_27/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=f71abd72281715210371 IP104.21.10.110:443
Requested byhttps://launcherleaks.net/file/12769-mustang-gt-wafflez/ CertificateIssuerGoogle Trust Services LLC Subjectlauncherleaks.net FingerprintC8:F4:AA:45:F3:C7:2D:87:DA:73:E8:DD:0F:EF:6E:D9:A4:31:C3:5E ValidityMon, 06 May 2024 19:16:17 GMT - Sun, 04 Aug 2024 19:16:16 GMT
File typeASCII text, with very long lines (23709), with no line terminators Hashbf28efbd565f583f0153cdfa20ccfcb6 a722574c1dcc18700be4f17289a4cd5c206ef63d 0629f57c0d3c375834b1828df484e0853afd113c4863d62cd5ab34b2f2e0e116
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uploads/css_built_27/258adbb6e4f3e83cd3b355f84e3fa002_custom.css?v=f71abd72281715210371 HTTP/1.1
Host: launcherleaks.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://launcherleaks.net/file/12769-mustang-gt-wafflez/
DNT: 1
Connection: keep-alive
Cookie: ips4_IPSSessionFront=tq1i2c8ev2ao8sp1ccutqjua06
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 09 May 2024 02:25:59 GMT
content-type: text/css
last-modified: Wed, 08 May 2024 23:19:33 GMT
etag: W/"663c0885-5c9d"
strict-transport-security: max-age=15768000; includeSubDomains;
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 569
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QZsa9IQWkYPhm0%2FyfMdfMftcRWN7Ff3RLSDKVUTtbBOSzkrVJPWvTjhVjWmIv1Ix%2BDYIwahsJnTnK%2BJ1ythty5Ay7agyqC0kcNiVJ%2B8A9BFENqt1zc3GGIWoeprUGqnrz%2FeZog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880e3dfaabb4b511-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|
|