Report - flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c

Report Overview

Visited public
2024-12-11 06:46:08
Tags
Submit Tags
URL
flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c
Finishing URL
flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c
IP / ASN
104.26.8.193
#13335 CLOUDFLARENET
Title
flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
flux.li	unknown	unknown	2017-06-27	2024-10-25	4.4 kB	35 kB	104.26.8.193
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20	2024-12-11	2.3 kB	48 kB	104.18.95.41

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (31)

		Size	First Seen	Last Seen
	#1 Eval - 43496590a8be6b9efeb1014cc1a71ee8	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 43496590a8be6b9efeb1014cc1a71ee8 861ed1463e7bcf18b987e578db525cadd0a34b67 1239c945a1984b50ddea71dcc510e3305b7f0d2247bf32940313b291e3c1f4cc Loading...

	#2 Eval - d8c4e933d959db4b9b5029ee136ab89e	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash d8c4e933d959db4b9b5029ee136ab89e d13eb6ea29db584046579f08a44e3361c0861207 0b3b204d90710ca86b008240f9e460fb07acefa4d3841e674ea1dfcd30efad83 Loading...

	#3 Eval - ea65ae136d7b264e5b0e327c70b714d2	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash ea65ae136d7b264e5b0e327c70b714d2 ba4ac628c12a8439e333199ccbdbb47345cf40db 5672682cd498aea415f3bbe8000d9847e73d642ee1b3dc1c9b2a680e80fe4f7e Loading...

	#4 Eval - c7d48b91dd47ed6770d978b25eb32ab9	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash c7d48b91dd47ed6770d978b25eb32ab9 6c8cb0938c68786f3003aff33cc635fe5d4ff662 6eda64e6da27918b4ea577ee5e66a04dc71e7e6c3c83f1841b3e446d5de48ca5 Loading...

	#5 Eval - 17370934de5390dde25b549e4ff56d71	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 17370934de5390dde25b549e4ff56d71 571a4152eb8ec47e51be4ef6f7cac1ce95512118 d6b3490b0c68cdab540581af9e90719776a21e99e0f7f5f5302a4a0d7c6b114f Loading...

	#6 Eval - 2dff80a0a8f386bb12eece6b6746186f	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 2dff80a0a8f386bb12eece6b6746186f 2cec742493bedabf3152d68d84282e3ac88c9c62 8f688a0a06f2550c5ad4d193923fd922bb56b93905fb9cd0b3606b08e1ad2b4a Loading...

	#7 Eval - 4e9c2c2b12189c4070230a00a50a64e3	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 4e9c2c2b12189c4070230a00a50a64e3 64cccc3bb0b917a8486da648e78b063ec5b82645 35237c7bb5379456b0075320f2472eedf45e8b3b6871d9c2f6280a61731f5adf Loading...

	#8 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07 01:03	2025-07-01 06:20
Pretty Observations First Seen2023-03-07 01:03 Last Seen2025-07-01 06:20 Times Seen395470 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

	#9 Eval - 4de1900d970812f130acae35595030ad	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 4de1900d970812f130acae35595030ad 8190aa6f8dbdc7942fa55d6f9f3c52d7d2a4de5a 1f67acccc7727533c8bbf4082f505b06987cbac6d3e7d92d6789444a40be5eb9 Loading...

	#10 Eval - 2253ce97a57a4c2ce96fc47c00e9910e	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 2253ce97a57a4c2ce96fc47c00e9910e 8f3cb0749f8e8c0094821ed60a3771563a67e629 14805244d9bdfd53c8447572e9b5c056745e48904bf1ae0a06e2518ef7221c4d Loading...

	#11 Eval - 0e67e5b688e692272e3c100ad2a37778	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 0e67e5b688e692272e3c100ad2a37778 6a625b73486f2e46ba63b0097962b2cad716f073 21968a0a3efcbc4479c0d0bc15e487dc39a92cb0abbb90038c09a97ffa18c247 Loading...

	#12 Eval - 4b01a18a832cbfa573894db89c814896	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 4b01a18a832cbfa573894db89c814896 b305a0c87977929e986c647099a7f4ee610c9ec1 fec180ab2307b2e1cf43c2c138e880cf29c9fb481287c5beb6b35bfdd743caf2 Loading...

	#13 Eval - 038bc9d4bc6920ff4abcea6d4c29d9a0	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 038bc9d4bc6920ff4abcea6d4c29d9a0 ffd3d1c60ca7a5d9aa464ef6bea0c1d173163bce 263c510cf2aec554f6c4fe3ffc2928d5cc5f1834bf979bf79d86ce4f6091ac9a Loading...

	#14 Eval - 2eeed78bb7f4b3a4705a9ab2fda0cb89	2.8 kB	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 2eeed78bb7f4b3a4705a9ab2fda0cb89 00d474cb1941c35f5731db0986a36ae3691dbbb5 ccc5c2faf1da0b52e5033afd82bfe9441d4986bcf64ba86afd39756ad2241d6d Loading...

	#15 Eval - 79dc6a2cc3edbfa43412217d50e18eb6	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 79dc6a2cc3edbfa43412217d50e18eb6 fdfba9848929dedc332f68b24eb90566995f7a19 93e66c17b474b25251d41a2a51727c58ce4cac8d1099249f516af3b6fbb48c2c Loading...

	#16 Eval - f48e437e43aaa770d8dd12bc0b944b76	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash f48e437e43aaa770d8dd12bc0b944b76 309e799bf416dd30ca36d8ebae5930f5e40cdbff bb92930df86bac539aa9dd1e1ad4959dc433f2273b7ca8b2a4d6c37e5fa965a2 Loading...

	#17 Eval - dff98a14a333efe4ba161bfdc5af7ff0	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash dff98a14a333efe4ba161bfdc5af7ff0 35572e78fd9963553ee80763a363da27b976da25 545dfb84454153fa431277abd7ff6cc7cb9b20b23e261456789379e357dc9db1 Loading...

	#18 Eval - 0c689a24934790d889ca50d8dc8fc150	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 0c689a24934790d889ca50d8dc8fc150 acb989bd71d4a6b5d7d92d54a3a6fb0b7841c1de 622f8625d6cbc199d5cc59494a4acc7308be626d26bdc75d03b5c942a980d50c Loading...

	#19 Eval - df4660d0eb6d6b25f8c8e1c56b85ab13	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash df4660d0eb6d6b25f8c8e1c56b85ab13 44196c624295485dd1d751d58d28c19aeb1ce570 96ae027c31ef201158618bdd4080a6b861d6b4ee4c320b1916ae56907d3558dd Loading...

	#20 Eval - ebffae6c4cdd831ec7980106723e3ce8	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash ebffae6c4cdd831ec7980106723e3ce8 96b625997ca6749de2d40bc66584547384f74ecb e1a4fc8935c6320646ef921f4edd8a93aff0989506fbdad43d493214a3f4e2fc Loading...

	#21 Eval - f4f3911fe30786dca174fb8030e11e8d	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash f4f3911fe30786dca174fb8030e11e8d aa154915e8989358933024dfc02ad914b70f4562 49eb6f0bcc268964d4567d87bbef6220840e5fdb296ca8d1a55571411bcb130f Loading...

	#22 Eval - 6bc34fcb2d92f67f1afcfa82f2e80903	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 6bc34fcb2d92f67f1afcfa82f2e80903 5df8eb5a91de16475a6bdbff2a12ac1881d31df0 c9e8cc293d1f68e479172f79206030e50fecba3340de297e42b7431739712aa7 Loading...

	#23 Eval - 7ac1cf6570a3197ed1685bcc080cc77b	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 7ac1cf6570a3197ed1685bcc080cc77b 280d0650128d2abea73701c32804f6330e5da34e e137807381d35628cd6101dae1b1727b10cf01542cfb6763d44a00710ad1d360 Loading...

	#24 Eval - 0940d7f77f48bf5abe03c51f8cdf1140	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 0940d7f77f48bf5abe03c51f8cdf1140 497e0214f197270d254ab8bea5c7328cdf9c4091 8ac955d22c141958887cc0cd9385e66f822978d8220cb069e918c1ebb5de0b64 Loading...

	#25 Eval - 38758ebd9dfacecef62d28d71e34e417	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 38758ebd9dfacecef62d28d71e34e417 c812226f8f42daf9e5f19b6ad37d2bf9f781ce4e 2beef60e87d09431c5202d444d6d5d932476ecd450399b241eb88eb2bd5c9529 Loading...

	#26 Eval - bc62eb3d197d796dbec683314450d33b	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash bc62eb3d197d796dbec683314450d33b 55e816a2c602a171cfc877b9133ee1b0e3097b43 eca822859aaf9e2fe76d7222df8891c7b2d583cb1cfce39f14752c86f12db4c2 Loading...

	#27 Eval - d05ead6ce069462fb1aeb0429164a804	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash d05ead6ce069462fb1aeb0429164a804 9ca64757eca0d7a7990e59ccc739a6acf1a4d027 1035b15eb39b9de77639148bfb67a8dbc29f916b5b6b6256783e63383ffd2d5d Loading...

	#28 Eval - 50a0cff9abc01a8180347b6d708f8442	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 50a0cff9abc01a8180347b6d708f8442 b5d74356ef405eab9341e9a9dd00418ff2d689a2 4a43e678b117acec8399d8ff668aa9b9f94224979696d95a915c40732e740369 Loading...

	#29 Eval - 008893f658186517577bd93781884152	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash 008893f658186517577bd93781884152 8a541b19145140f15e11294be3b2a1c3f192a7cc 51be304c29b4851928c2021ba82fb69240cd29a03ebc44bcf2d0a830b16921ca Loading...

	#30 Eval - 7cb57495020ba2c238250cf345ee32f8	61 B	2024-12-05 14:49	2024-12-17 09:29
Pretty Observations First Seen2024-12-05 14:49 Last Seen2024-12-17 09:29 Times Seen1172 Hash 7cb57495020ba2c238250cf345ee32f8 dbf7983c96b89d75809d45441ab238ef5970cbb4 d6c551ec8360fd854728938d9827d63a1d2b058d0ca0facd60e7e17f066b65c6 Loading...

	#31 Eval - e497a7a132181dd2fd2606b9e6e1a72a	28 B	2024-12-11 06:46	2024-12-11 06:46
Pretty Observations First Seen2024-12-11 06:46 Last Seen2024-12-11 06:46 Times Seen1 Hash e497a7a132181dd2fd2606b9e6e1a72a a2bedfadcca43e216c6d06f272deac6fb0a5ecd6 fc61c4351e60d0171bcb5f6a9b33f68f7f49654370e3890c6246700bf1a532b7 Loading...

HTTP Transactions (8)

	URL	IP	Response	Size
	GET flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c	104.26.8.193	403 Forbidden	6.4 kB
URL User Request GET HTTP/1.1 flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c IP 104.26.8.193:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (9555) Size 6.4 kB (6354 bytes) Hash b02d7f8208789e4eff7ef90c6ec79b7d 3487eaba91625bd6df02f469319ab6419bae98ee 25bcf5697354143741f7bfd9511628d745a0cb9c7ddc8bdea8983046b9a6c2c1 HTTP Headers GET /android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c HTTP/1.1 Host: flux.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 403 Forbidden date: Wed, 11 Dec 2024 06:45:44 GMT content-type: text/html; charset=UTF-8 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-content-options: nosniff x-frame-options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: 8O06Cg37itVJlbVKidOTGPddHxLEbukAbgds+jFK4uTNW1F/eINdyNZIa2qMiyKpc+w63IvQFTKwYJ4MeFdCLy4IJFaFoPSE16n4uhtHv61hDNNmPBN1ZOvZtwfI486vi8Qd83y1HpcD/FdZMcC/QQ==$2UAOk/rE56833AHXtxRYrg== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yVs%2FETp5uGHeLWu3NmHwP8zpHFN2Tcsjie8FVIu376G%2FHd%2B4xPoMD51CXb0Gf0Cr4t06E5hUjUv%2BwpS%2BBa3rtIhRQV9MvtE67RxAgHJMTdqQ0dRNDnM1cEY%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8f0383787ca956ca-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=795&min_rtt=725&rtt_var=211&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3259&recv_bytes=1324&delivery_rate=4125356&cwnd=252&unsent_bytes=0&cid=eff674cbbd6922b7&ts=29&x=0" X-Firefox-Spdy: h2

	flux.li/cdn-cgi/rum?	104.26.8.193	204 No Content	0 B
URL flux.li/cdn-cgi/rum? IP 104.26.8.193:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /cdn-cgi/rum? HTTP/1.1 Host: flux.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c content-type: application/json Content-Length: 1484 Origin: https://flux.li DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 204 No Content date: Wed, 11 Dec 2024 06:45:44 GMT access-control-allow-origin: https://flux.li access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true server: cloudflare cf-ray: 8f03837c2aa056a5-OSL x-frame-options: DENY x-content-type-options: nosniff`

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	104.18.95.41	200 OK	61 B
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1 IP 104.18.95.41:0 ASN #13335 CLOUDFLARENET File type PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced Size 61 B (61 bytes) Hash 9246cca8fc3c00f50035f28e9f6b7f7d 3aa538440f70873b574f40cd793060f53ec17a5d c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84 HTTP Headers GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/l617e/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/normal/auto/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK date: Wed, 11 Dec 2024 06:45:45 GMT content-type: image/png content-length: 61 cache-control: max-age=2629800, public priority: u=4,i=?0 server: cloudflare cf-ray: 8f03837dea80b527-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri`

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1064775927:1733898460:TmNtMXC4z2GFusG-uows28g5GJs4etr5xvWSPPJFT1M/8f03837cc980b527/SKtrAO8rqHYuwTac53cITY5C2_z.MkKbEE8xT6BVSPQ-1733899545-1.1.1.1-9nhSsn3Xs_zMygwt_c.iY0__To4SRpZdv2we4YlnTOIqN63rkvEmBZKTxKReigjL	104.18.95.41	200 OK	47 kB
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1064775927:1733898460:TmNtMXC4z2GFusG-uows28g5GJs4etr5xvWSPPJFT1M/8f03837cc980b527/SKtrAO8rqHYuwTac53cITY5C2_z.MkKbEE8xT6BVSPQ-1733899545-1.1.1.1-9nhSsn3Xs_zMygwt_c.iY0__To4SRpZdv2we4YlnTOIqN63rkvEmBZKTxKReigjL IP 104.18.95.41:0 ASN #13335 CLOUDFLARENET File type ASCII text, with very long lines (65536), with no line terminators Size 47 kB (46963 bytes) Hash 984001c3187cd825d32084e11523fb98 4a43371e08d0476cd36aa402a4ca75dca823eee5 31997087e2ac9e8331417fe2d5d3a1c3da0a84b6102da3d2ecf197a150e69c94 HTTP Headers POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1064775927:1733898460:TmNtMXC4z2GFusG-uows28g5GJs4etr5xvWSPPJFT1M/8f03837cc980b527/SKtrAO8rqHYuwTac53cITY5C2_z.MkKbEE8xT6BVSPQ-1733899545-1.1.1.1-9nhSsn3Xs_zMygwt_c.iY0__To4SRpZdv2we4YlnTOIqN63rkvEmBZKTxKReigjL HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/l617e/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/normal/auto/ Content-type: application/x-www-form-urlencoded CF-Challenge: SKtrAO8rqHYuwTac53cITY5C2_z.MkKbEE8xT6BVSPQ-1733899545-1.1.1.1-9nhSsn3Xs_zMygwt_c.iY0__To4SRpZdv2we4YlnTOIqN63rkvEmBZKTxKReigjL CF-Chl-RetryAttempt: 0 Content-Length: 3825 Origin: https://challenges.cloudflare.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Wed, 11 Dec 2024 06:45:45 GMT content-type: text/plain; charset=UTF-8 cf-chl-gen: RPaeFiya5sAwgnRZCA3L71BgAlUE/XRn0eDKPhwDtAtoT00xzOBJyv/tr2tEsb6e4dg6v47nSEu6WJquWyps7RQZ3fTlIleKbO5Wi1aX816oNDMfEwXGdtsOZAduIe95T7LDREJ+4FdXvEd8h2osI4Pvjynet67pfToEKnnWlikJDz0gltqqV/j7kKN9kYT86im5/ej2So0A9WyyCVA7VkaUE9cD0Mk7S5Z7AannzTAJmM3BDnXikH+ZPPP6JRpBejVd7uOiTXyLT9XkU6jG8xLBgC+Chc0DTWIDWPVXVw2/+rFrQqpnYBgDIhOEIQh9dqpvUrXVSJPfu6vAsit6ZJyehdbv/XGkZ2vJ/H2Pt6ytAULbg7d5rCLxREm90aM26LojYBgRVxWFNcqYTI1BP73n7qw1YcIXK2gW+L6eRns8Tumx2vE=$GlPJogLrZbFJSyq4 priority: u=3,i=?0 server: cloudflare cf-ray: 8f03837f8c49b527-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri

	challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8f03837cc980b527/1733899545539/_EhWfl3wqoPL92a	104.18.95.41	200 OK	61 B
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8f03837cc980b527/1733899545539/_EhWfl3wqoPL92a IP 104.18.95.41:0 ASN #13335 CLOUDFLARENET File type PNG image data, 99 x 70, 8-bit/color RGB, non-interlaced Size 61 B (61 bytes) Hash 8a8492b7935cb6661543d4a814758202 60b4aa5b2bb62a60385c370df80fc78240e872a7 5dc449fc8ed51693bb748d388d704112311b209eb5ee78aff3ff069da8f02042 HTTP Headers GET /cdn-cgi/challenge-platform/h/g/i/8f03837cc980b527/1733899545539/_EhWfl3wqoPL92a HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/l617e/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/normal/auto/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK date: Wed, 11 Dec 2024 06:45:45 GMT content-type: image/png content-length: 61 priority: u=4,i=?0 server: cloudflare cf-ray: 8f038381cec4b527-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri`

	flux.li/cdn-cgi/challenge-platform/h/g/flow/ov1/1755984854:1733898306:Z5TOwAnwVXzU1iM9kDtEF129xdx8hQi2Tnj2YPgiiLc/8f0383795f7456a5/zt92G_24EkP17Y5JkL32GAzJEncnzYPLL.eMqs7lKMU-1733899544-1.2.1.1-I9wPGoNPZIF5palvMAvp4OTdfc_XgD03.plG_VEy0.5yTAksmr8efuHZWbFzVZvO	104.26.8.193	200 OK	22 kB
URL flux.li/cdn-cgi/challenge-platform/h/g/flow/ov1/1755984854:1733898306:Z5TOwAnwVXzU1iM9kDtEF129xdx8hQi2Tnj2YPgiiLc/8f0383795f7456a5/zt92G_24EkP17Y5JkL32GAzJEncnzYPLL.eMqs7lKMU-1733899544-1.2.1.1-I9wPGoNPZIF5palvMAvp4OTdfc_XgD03.plG_VEy0.5yTAksmr8efuHZWbFzVZvO IP 104.26.8.193:0 ASN #13335 CLOUDFLARENET File type ASCII text, with very long lines (13580), with no line terminators Size 22 kB (22394 bytes) Hash d77e04a5eb26cf6aa41d847cc08af02e 157edda100a5d1a9fefe652186b4cd486aa312f6 d94ebc5a2326e44d5dce6d0535297b811b7eb53037ab243fbe12a897c7ba9778 HTTP Headers POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1755984854:1733898306:Z5TOwAnwVXzU1iM9kDtEF129xdx8hQi2Tnj2YPgiiLc/8f0383795f7456a5/zt92G_24EkP17Y5JkL32GAzJEncnzYPLL.eMqs7lKMU-1733899544-1.2.1.1-I9wPGoNPZIF5palvMAvp4OTdfc_XgD03.plG_VEy0.5yTAksmr8efuHZWbFzVZvO HTTP/1.1 Host: flux.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c Content-type: application/x-www-form-urlencoded CF-Challenge: zt92G_24EkP17Y5JkL32GAzJEncnzYPLL.eMqs7lKMU-1733899544-1.2.1.1-I9wPGoNPZIF5palvMAvp4OTdfc_XgD03.plG_VEy0.5yTAksmr8efuHZWbFzVZvO CF-Chl-RetryAttempt: 0 Content-Length: 3613 Origin: https://flux.li DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Wed, 11 Dec 2024 06:45:45 GMT content-type: text/plain; charset=UTF-8 cf-chl-gen: dgttiYfIX+WgB7ji9I29MscJ1uDWDZ8331WF5xJ5DoaxZMGUhS8UTQ8PSKQ9laZNY26KHzmnr58=$bix4dC7lkowTktn2 priority: u=3,i=?0 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S6mRhwV0ElEkey1Vlzwwz1Kh3wn8Why84HQqSaZoWcZUMMFFop%2BPZqCZ0i%2Bqu%2BU3X9YnS%2B9ZoMaNYclIzcMHj12R1MnOY%2Fc4QUJGw12%2Fts%2BMwtd8odorCNQ%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 8f03837c4aba56a5-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2885&min_rtt=1016&rtt_var=1757&sent=63&recv=23&lost=0&retrans=0&sent_bytes=53995&recv_bytes=9091&delivery_rate=4160&cwnd=48000&unsent_bytes=0&cid=017b37d957ecfdbd&ts=602&x=1", cfExtPri, cfHdrFlush;dur=0

	flux.li/cdn-cgi/rum?	104.26.8.193	204 No Content	0 B
URL flux.li/cdn-cgi/rum? IP 104.26.8.193:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /cdn-cgi/rum? HTTP/1.1 Host: flux.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c&__cf_chl_tk=14DnMXW70oBiOK0PzpLLdwE4bdyW5O7PiBuZL9E42ME-1733899544-1.0.1.1-Te69.FHVkZelIuT6ScxGPwq8Gh51gr_be0EeHqPIn6E Content-Type: application/json Content-Length: 882 Origin: https://flux.li DNT: 1 Connection: keep-alive Cookie: cf_clearance=hlUJjdj8kTeS8UntHCkFBFNgke5skji1cUcFRHCPRRU-1733899544-1.2.1.1-P6E7JjgaS8QJZL2P_u03bRHP_27e_Wj80f_UbDf_Z9sX6a.H7M9Z32h_vcJEWl4mZ4DXTN2zbwAAsqvsHKOpsmbaGgXJLdJ3Jj6xGhIU6Iv9x3xY.YAFi9lWHirwGaIseJYR6DujJtmS48fXePL8Z1bFfB33qpBKOYj8Rg3bnaBAiXBPotk4wHfokk7SkauLLu43QYaHxj0EzNLLPdvEdLMI..HbRsPOgNtlDWz7ONeEjqkLs5mHgX8hQijoT5n4QlLOYCrfcFpYpCID356NaO2t9f6Sq7B.s55Y8jgRBjuth7fq6x00o5mQKSvYO8sgYCGB5Sc.MkD_ZAaGjEcs1827yAj2R8bLTHZEfQLzbpWetrPy2q3jtMp3tH4Qi0vp Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/3 204 No Content date: Wed, 11 Dec 2024 06:45:53 GMT access-control-allow-origin: https://flux.li access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true server: cloudflare cf-ray: 8f0383ae597f56a5-OSL x-frame-options: DENY x-content-type-options: nosniff`

	GET flux.li/favicon.ico	104.26.8.193	404 Not Found	1.2 kB
URL GET HTTP/3 flux.li/favicon.ico IP 104.26.8.193:443 ASN #13335 CLOUDFLARENET Requested by https://flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c Certificate IssuerGoogle Trust Services Subjectflux.li Fingerprint1D:25:73:79:E2:B6:9E:3B:AE:6C:F9:76:7C:30:F3:E7:7D:75:45:32 ValidityTue, 19 Nov 2024 21:02:51 GMT - Mon, 17 Feb 2025 21:02:50 GMT File type HTML document, ASCII text, with very long lines (1283), with no line terminators Size 1.2 kB (1249 bytes) Hash dcddf426f9d09f77c12c34b869c42d73 b0caa71704baa29fc984413c481fa5432ee4915d 58c86cced35917d6496e6f0fdf1e35e1690dd7a13cfcfacd5f1240c5f9ca818a HTTP Headers GET /favicon.ico HTTP/1.1 Host: flux.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://flux.li/android/external/start.php?HWID=401bcfd1b668bb7c46d6e4fa075d094c24f6b4296415ff874c7a8989791c3f090858c1d8942c2c4c7c8add03bc3cd55c Cookie: cf_clearance=hlUJjdj8kTeS8UntHCkFBFNgke5skji1cUcFRHCPRRU-1733899544-1.2.1.1-P6E7JjgaS8QJZL2P_u03bRHP_27e_Wj80f_UbDf_Z9sX6a.H7M9Z32h_vcJEWl4mZ4DXTN2zbwAAsqvsHKOpsmbaGgXJLdJ3Jj6xGhIU6Iv9x3xY.YAFi9lWHirwGaIseJYR6DujJtmS48fXePL8Z1bFfB33qpBKOYj8Rg3bnaBAiXBPotk4wHfokk7SkauLLu43QYaHxj0EzNLLPdvEdLMI..HbRsPOgNtlDWz7ONeEjqkLs5mHgX8hQijoT5n4QlLOYCrfcFpYpCID356NaO2t9f6Sq7B.s55Y8jgRBjuth7fq6x00o5mQKSvYO8sgYCGB5Sc.MkD_ZAaGjEcs1827yAj2R8bLTHZEfQLzbpWetrPy2q3jtMp3tH4Qi0vp Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 404 Not Found date: Wed, 11 Dec 2024 06:45:53 GMT content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache vary: Accept-Encoding cf-cache-status: BYPASS priority: u=6,i=?0 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PynaPPQTEUlkICp9V7CuivAC0u032vFYPutRTZrNUytBhlaETaMUHD6EcZSGDEPq4vVYvjlipjtlz3kMMbvxeOsd3EjvmmdiC0VNBum6bs%2FD8GudBHEPguk%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 8f0383af2a2256a5-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=2156&min_rtt=1016&rtt_var=1206&sent=87&recv=41&lost=0&retrans=0&sent_bytes=71449&recv_bytes=24069&delivery_rate=6461&cwnd=48000&unsent_bytes=0&cid=017b37d957ecfdbd&ts=8828&x=1", cfExtPri, cfHdrFlush;dur=0

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (31)

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size