WEBSITE ANALYSIS REPORT

http://fir3.net/BALATROMOBILEV07

10 Feb 2026 · 12:49:58.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:49:35.397 GET 200 document 10.9 KB 551 ms 1 alerts

12:49:36.069 GET 200 stylesheet 16.7 KB 334 ms —

12:49:36.071 GET 200 stylesheet 118.6 KB 21 ms 1 alerts

12:49:36.074 GET 200 stylesheet 30.2 KB 395 ms 1 alerts

12:49:36.076 GET 200 stylesheet 88.2 KB 523 ms 1 alerts

12:49:36.078 GET 200 stylesheet 39.8 KB 403 ms 1 alerts

12:49:36.080 GET 200 stylesheet 5.4 KB 11 ms 1 alerts

12:49:36.081 GET 200 script 208.4 KB 80 ms —

12:49:36.082 GET 200 img 19.3 KB 460 ms —

12:49:36.084 GET 200 img 20.1 KB 142 ms —

12:49:36.085 GET 200 img 6.6 KB 458 ms —

12:49:36.087 GET 200 img 10.3 KB 534 ms —

12:49:36.089 GET 200 script 191 B 8 ms 1 alerts

12:49:36.091 GET 200 script 83.6 KB 531 ms 1 alerts

12:49:36.092 GET 200 script 38.8 KB 10 ms 1 alerts

12:49:36.094 GET 200 script 10.5 KB 13 ms 1 alerts

Transaction #48

Request / response

URL

GET HTTPS

https://fir3.net/vendor/clipboard.min.js?ver=6.4.0

IP / ASN

104.21.90.231

AS13335 · CLOUDFLARENET

Requested by: https://fir3.net/BALATROMOBILEV07

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (10644)
MIME type: text/javascript
First seen (UTC): 07 Apr 2023 · 12:42:17.000 UTC
Last seen (UTC): 11 Oct 2026 · 20:23:29.747 UTC
Times seen: 305

Size: 10.5 KB (10753 bytes)
MD5: 440d9349a6bc8eb0fb35317588148985
SHA1: 1f4b462a38a5657298ef2e8ac8c98f4060178bbd
SHA256: 4979e7fea71c2707c8078550d5d03bbe69bfce3b415e7ce4faec7ada9d3a358a

Certificate information

Issuer: Google Trust Services · WE1
Subject: fir3.net
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 86:E1:10:67:37:52:54:A8:FC:9B:E9:2B:2D:7A:E2:F9:A6:93:C4:9B
Valid from: Sat, 10 Jan 2026 10:22:27 GMT
Valid until: Fri, 10 Apr 2026 11:20:06 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /vendor/clipboard.min.js?ver=6.4.0 HTTP/1.1
Host: fir3.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fir3.net/BALATROMOBILEV07
Cookie: lang=en_US; AppSession=51ac1a6c83cd14fad7f8b450d149d478; csrfToken=0db61f1dacc8b8e340f7b6e892001e19757ca67d4448cf3c0c4fb9131defd70ca1f908e5634183c02c128b39b9b674d8c99e11e1d4b8644c8f07a9b2df560e2d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
date: Tue, 10 Feb 2026 12:49:36 GMT
server: cloudflare
x-frame-options: SAMEORIGIN
last-modified: Fri, 20 Dec 2019 07:51:30 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Sun, 08 Mar 2026 23:47:16 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
priority: u=3,i=?0
content-length: 3356
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-type: text/javascript
age: 306139
cf-cache-status: HIT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=oZNTcMFKG4eJP4CkrMYVwX9uIVZNgdlELqAtnSP089sFPiit0VVK18RrPIvHqRX7ZzdpDHN0Tr9AmIiib6ZYigDM%2FZbawA%3D%3D"}]}
cf-ray: 9cbbba387d610b4d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

12:49:36.095 GET 200 script 28.6 KB 386 ms 1 alerts

12:49:36.096 GET 200 script 9.7 KB 13 ms 1 alerts

12:49:36.098 GET 200 script 1.1 KB 299 ms —

12:49:36.233 GET 200 script 1.0 KB 149 ms —

12:49:36.235 GET 204 xhr 0 B 856 ms —

12:49:36.737 GET 200 font 14.5 KB 123 ms —

12:49:36.739 GET 200 font 75.4 KB 671 ms 1 alerts

12:49:36.747 GET 200 font 14.4 KB 147 ms —

12:49:36.754 GET 200 fetch 96 B 460 ms —

12:49:36.761 GET 200 script 839.7 KB 231 ms —

12:49:36.769 GET 200 xhr 82 B 79 ms —

12:49:36.961 GET 200 img 301 B 172 ms —

12:49:36.963 GET 200 img 368 B 172 ms —

12:49:36.964 GET 200 img 456 B 176 ms —

12:49:36.965 GET 200 img 565 B 180 ms —

12:49:36.966 GET 200 img 565 B 158 ms —

12:49:36.967 GET 200 script 144 B 305 ms —

12:49:37.220 GET 200 subdocument 91.4 KB 103 ms —

12:49:37.350 GET 200 img 198 B 9 ms 1 alerts

12:49:37.393 GET 200 stylesheet 81.4 KB 20 ms —

12:49:37.396 GET 200 script 839.7 KB 50 ms —

12:49:37.720 GET 200 img 2.2 KB 10 ms —

12:49:37.741 GET 200 font 39.2 KB 16 ms —

12:49:37.743 GET 200 font 39.2 KB 20 ms —

12:49:37.773 GET 200 script 102 B 34 ms —

12:49:37.815 GET 200 script 839.7 KB 36 ms —

12:49:38.800 GET 200 subdocument 16.6 KB 37 ms —

12:49:38.860 GET 200 stylesheet 81.4 KB 10 ms —

12:49:38.861 GET 200 script 839.7 KB 27 ms —

12:49:39.180 POST 200 xhr 42.7 KB 107 ms —

12:49:39.312 GET 200 img 600 B 10 ms —

12:49:39.313 GET 200 img 530 B 10 ms —

12:49:39.315 GET 200 img 665 B 10 ms —

12:49:39.317 GET 200 font 39.2 KB 46 ms —

http://fir3.net/BALATROMOBILEV07

Domain graph

Hostnames

Connections

Network requests

Transaction #48

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://fir3.net/BALATROMOBILEV07

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #48

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://fir3.net/BALATROMOBILEV07

Domain graph

Network requests