| pepito.pro:8080/series/belentxu/belentxu/270137.mkv |  104.21.25.35 | 302 Found | 0 B |
URL User Request GET HTTP/1.1pepito.pro:8080/series/belentxu/belentxu/270137.mkv IP104.21.25.35:8080
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /series/belentxu/belentxu/270137.mkv HTTP/1.1
Host: pepito.pro:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Mon, 12 Feb 2024 12:59:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Location: http://23.134.91.177:8080/series/belentxu/belentxu/270137.mkv?token=GUFdAEpcQwwaUAENAl8PWlxfUAVXB1YHAgFVUwRXDFUHAQVUXQZYUlxAFRZBTUUHBAs+W1FECAcGUgYBAk4XExEGRz5QUEMMGlMKAgYbG0ARDwxXF1wDAgFVAAYDUgRUTkFFCF0WWxQKUgsNChsbQAAeFVdHCFNZbgZSRFwBUERYQRdNG1sPaVwHVFVcXRVYR1ZDHhcPQUUTWBVwWQtNRjEMWRRNXQ5YS0AVFlBQQxAEEgQQD0QLAAFRFR4XAVoTDBdHGBsOQ3h3QBUWV0FDBwsVCF1bRAgXXAlBEBlAXBU9EVASTUYEV1UHSxYIGwdASUQMU005UVpfDFJRQQtaCBFBD0MIFk0UVQ1XXUZWRT0VDwUQDwhHWV0f
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XhGca4buNe5Yl0NnG4xDJcDLz1SNSNaXvelN6XxR10jzVNG6LfCfEFgtStGd%2B3KNL83zgZ8Bqys9WJ8hX6XjhGntKw4Xb0WivyjbdqjAM1n6AofzPKyWF5u7d441qyn1MqQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 854502a0bdc8b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
| 23.134.91.177:8080/series/belentxu/belentxu/270137.mkv?token=GUFdAEpcQwwaUAENAl8PWlxfUAVXB1YHAgFVUwRXDFUHAQVUXQZYUlxAFRZBTUUHBAs+W1FECAcGUgYBAk4XExEGRz5QUEMMGlMKAgYbG0ARDwxXF1wDAgFVAAYDUgRUTkFFCF0WWxQKUgsNChsbQAAeFVdHCFNZbgZSRFwBUERYQRdNG1sPaVwHVFVcXRVYR1ZDHhcPQUUTWBVwWQtNRjEMWRRNXQ5YS0AVFlBQQxAEEgQQD0QLAAFRFR4XAVoTDBdHGBsOQ3h3QBUWV0FDBwsVCF1bRAgXXAlBEBlAXBU9EVASTUYEV1UHSxYIGwdASUQMU005UVpfDFJRQQtaCBFBD0MIFk0UVQ1XXUZWRT0VDwUQDwhHWV0f |  23.134.91.177 | 502 Bad Gateway | 150 B |
URL User Request GET HTTP/1.123.134.91.177:8080/series/belentxu/belentxu/270137.mkv?token=GUFdAEpcQwwaUAENAl8PWlxfUAVXB1YHAgFVUwRXDFUHAQVUXQZYUlxAFRZBTUUHBAs+W1FECAcGUgYBAk4XExEGRz5QUEMMGlMKAgYbG0ARDwxXF1wDAgFVAAYDUgRUTkFFCF0WWxQKUgsNChsbQAAeFVdHCFNZbgZSRFwBUERYQRdNG1sPaVwHVFVcXRVYR1ZDHhcPQUUTWBVwWQtNRjEMWRRNXQ5YS0AVFlBQQxAEEgQQD0QLAAFRFR4XAVoTDBdHGBsOQ3h3QBUWV0FDBwsVCF1bRAgXXAlBEBlAXBU9EVASTUYEV1UHSxYIGwdASUQMU005UVpfDFJRQQtaCBFBD0MIFk0UVQ1XXUZWRT0VDwUQDwhHWV0f IP23.134.91.177:8080 ASN#63023 AS-GLOBALTELEHOST
File typeHTML document, ASCII text, with CRLF line terminators Hash2b027182dd680c922c2045072dad573c 56174f4e4b971b7b25f06b65f6c299d028ec3f14 61b30d408583991fd69f3dec694e154cb652471e663328ad9c8482c9021ab5db
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /series/belentxu/belentxu/270137.mkv?token=GUFdAEpcQwwaUAENAl8PWlxfUAVXB1YHAgFVUwRXDFUHAQVUXQZYUlxAFRZBTUUHBAs+W1FECAcGUgYBAk4XExEGRz5QUEMMGlMKAgYbG0ARDwxXF1wDAgFVAAYDUgRUTkFFCF0WWxQKUgsNChsbQAAeFVdHCFNZbgZSRFwBUERYQRdNG1sPaVwHVFVcXRVYR1ZDHhcPQUUTWBVwWQtNRjEMWRRNXQ5YS0AVFlBQQxAEEgQQD0QLAAFRFR4XAVoTDBdHGBsOQ3h3QBUWV0FDBwsVCF1bRAgXXAlBEBlAXBU9EVASTUYEV1UHSxYIGwdASUQMU005UVpfDFJRQQtaCBFBD0MIFk0UVQ1XXUZWRT0VDwUQDwhHWV0f HTTP/1.1
Host: 23.134.91.177:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 502 Bad Gateway
Server: nginx
Date: Mon, 12 Feb 2024 12:59:41 GMT
Content-Type: text/html
Content-Length: 150
Connection: keep-alive
|
| 23.134.91.177:8080/favicon.ico | 23.134.91.177 | 404 Not Found | 146 B |
URL GET HTTP/1.123.134.91.177:8080/favicon.ico IP23.134.91.177:8080 ASN#63023 AS-GLOBALTELEHOST
Requested byhttp://23.134.91.177:8080/series/belentxu/belentxu/270137.mkv?token=GUFdAEpcQwwaUAENAl8PWlxfUAVXB1YHAgFVUwRXDFUHAQVUXQZYUlxAFRZBTUUHBAs+W1FECAcGUgYBAk4XExEGRz5QUEMMGlMKAgYbG0ARDwxXF1wDAgFVAAYDUgRUTkFFCF0WWxQKUgsNChsbQAAeFVdHCFNZbgZSRFwBUERYQRdNG1sPaVwHVFVcXRVYR1ZDHhcPQUUTWBVwWQtNRjEMWRRNXQ5YS0AVFlBQQxAEEgQQD0QLAAFRFR4XAVoTDBdHGBsOQ3h3QBUWV0FDBwsVCF1bRAgXXAlBEBlAXBU9EVASTUYEV1UHSxYIGwdASUQMU005UVpfDFJRQQtaCBFBD0MIFk0UVQ1XXUZWRT0VDwUQDwhHWV0f
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 23.134.91.177:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://23.134.91.177:8080/series/belentxu/belentxu/270137.mkv?token=GUFdAEpcQwwaUAENAl8PWlxfUAVXB1YHAgFVUwRXDFUHAQVUXQZYUlxAFRZBTUUHBAs+W1FECAcGUgYBAk4XExEGRz5QUEMMGlMKAgYbG0ARDwxXF1wDAgFVAAYDUgRUTkFFCF0WWxQKUgsNChsbQAAeFVdHCFNZbgZSRFwBUERYQRdNG1sPaVwHVFVcXRVYR1ZDHhcPQUUTWBVwWQtNRjEMWRRNXQ5YS0AVFlBQQxAEEgQQD0QLAAFRFR4XAVoTDBdHGBsOQ3h3QBUWV0FDBwsVCF1bRAgXXAlBEBlAXBU9EVASTUYEV1UHSxYIGwdASUQMU005UVpfDFJRQQtaCBFBD0MIFk0UVQ1XXUZWRT0VDwUQDwhHWV0f
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 12 Feb 2024 12:59:42 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
|
172.67.222.77