| gh.ddlc.top/https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk |  172.67.150.35 | 429 Too Many Requests | 5.5 kB |
URL User Request GET gh.ddlc.top/https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk IP172.67.150.35:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5814), with no line terminators Hash328c7d1b0ae8398c1299ff52ed658a77 e348d18c009e9590f6cd348e247bd4dbd63a78f2 528fde03488fe186e1447c7dee114d88ebee6400ea388baf6999333a610b6194
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.top domain |
GET /https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk HTTP/1.1
Host: gh.ddlc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 429 Too Many Requests
Date: Fri, 21 Mar 2025 11:35:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JK2prEqMrIDNpVdDy09Ke73K9A6cruIJWLvuaB6VTeXHekSKS8pREIKhssmUfqtO7M%2BAZuFmCqFO1fTUQtwmiDh0rPbdoNJadawPim8jFXveAykDtCsG1raqOJ57Ag%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 923d2538ff0fe6d0-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=23414&min_rtt=23414&rtt_var=11707&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=487&delivery_rate=0&cwnd=77&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
| gh.ddlc.top/cdn-cgi/styles/cf.errors.css | 172.67.150.35 | 200 OK | 24 kB |
URL GET gh.ddlc.top/cdn-cgi/styles/cf.errors.css IP172.67.150.35:80
Requested byhttp://gh.ddlc.top/https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk
File typeASCII text, with very long lines (24050) Hash5e8c69a459a691b5d1b9be442332c87d f24dd1ad7c9080575d92a9a9a2c42620725ef836 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: gh.ddlc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gh.ddlc.top/https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 21 Mar 2025 11:35:21 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 14 Mar 2025 21:23:45 GMT
ETag: W/"67d49e61-5df3"
Server: cloudflare
CF-RAY: 923d253a1955e6d0-AMS
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Fri, 21 Mar 2025 13:35:21 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
|
IP172.67.150.35:80
Requested byhttp://gh.ddlc.top/https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5814), with no line terminators Hasha1cc1dd1ce6ace88de92f0329e364d26 79953aab9a1a613fb70a1dceb22e77dff82967bd 526dbe923be65c3b688c2449a1276ea41ddbca61419cf0f2e7c899c93f505c4a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: gh.ddlc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gh.ddlc.top/https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 429 Too Many Requests
Date: Fri, 21 Mar 2025 11:35:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MnNBayq%2Fhv%2B7g2qewLdCRYtQXtI4oSd01EVBDpY8vMK5m1rvIYD4UT7L1Yb%2F6pThsoNEHwgRpzNSQG%2BGlM8JdsnjSGnh6tb7yjIht05rOZV0dsz%2F1djagqulamQy4g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 923d253aba6ee6d0-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=23456&min_rtt=23267&rtt_var=553&sent=12&recv=16&lost=0&retrans=0&sent_bytes=11506&recv_bytes=1373&delivery_rate=349322&cwnd=85&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
| gh.ddlc.top/https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk | 104.21.81.252 | 429 Too Many Requests | 5.5 kB |
URL User Request GET gh.ddlc.top/https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk IP104.21.81.252:443
CertificateIssuerGoogle Trust Services Subjectgh.ddlc.top FingerprintCF:F3:B7:43:D9:7C:B4:82:5B:0C:85:0B:C3:00:DF:8F:1D:B5:C3:EF ValidityWed, 19 Mar 2025 19:58:03 GMT - Tue, 17 Jun 2025 20:58:01 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5814), with no line terminators Hash8052ca94aa79e7f02af2999e0c1d50a8 b01247e0d70c490f6b19e8f7863c458338110d9c b759d4ffd87d5b79891c23159a639c67b86d574ad8ad90c046267bc498e6541d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.top domain |
GET /https:/github.com/deniscerri/ytdlnis/releases/download/v1.7.9/YTDLnis-1.7.9-x86-release.apk HTTP/1.1
Host: gh.ddlc.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
date: Fri, 21 Mar 2025 11:35:21 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JYscp0EMd4jl3uIsAf6JraecYZEgKgtTEfenboci7xypWDmR8A%2FtrpV0t85POIxXLYsEtl2FqkgA2uOKMpJLmKbijDeCMiBvGKLevA7lTzIKPLIPFcyzrcgTJ4QQ4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 923d2537dfb2a86c-RIX
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=15547&min_rtt=15520&rtt_var=3317&sent=7&recv=9&lost=0&retrans=0&sent_bytes=3257&recv_bytes=1280&delivery_rate=278194&cwnd=252&unsent_bytes=0&cid=1750991f8ee85103&ts=49&x=0"
X-Firefox-Spdy: h2
|