| gustvplay.com:8080/series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4 |  172.67.132.160 | | 0 B |
URL gustvplay.com:8080/series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4 IP172.67.132.160:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4 HTTP/1.1
Host: gustvplay.com:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 09 May 2024 14:39:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Location: http://169.197.142.61:8080/series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4?token=HUNQAkVfEw5EBANWVwBQW1YOUAIIAAdbBwMHUQUDBwUEBA4FU1QGB18SGREWRRRdU1s7Cl0RCAsCCw8BABgQQhUESjxfUxMORAEFA1EHXhoeFBAKVFYQAwMFBgYAAgsGU1YUQUZeVRZcEgYCVgReGh4UARtNVkBXU15oV1dCW1QDQwJBFBsTWwhvUVYIUAhcEAxGUxsfEFBBQhUJEHZeXh5BawxaQkVdCV5GEUkTBFFGRAUXXBEIGwADAwoQGBBUCRRWF0ROEw5EfnoRSRMDQEZTChBQXFwbCBBaQwYWHhUPEmcRU0RFRgNRWFYXE1waAxRIQVRSSmZRXVldV1dGXgkPS0EMFQMBVhIZEQheCFFGWRY8SVpWGwhcQl9eSQ==
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iNLWm2LCjA4OIzCQurh0sJiVTU0oHcW0D%2FIdKW2oS64g8yV994uYja9S4gqDT4Iq%2FRhV5cDE93Xo%2FNHRyleOTxZnrz8DOQct8LF2jReb8YH4xjmGD9MKA4uAEyuwt%2FFPYEr8TD8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8812710e2b305694-OSL
alt-svc: h3=":443"; ma=86400
|
| 169.197.142.61:8080/series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4?token=HUNQAkVfEw5EBANWVwBQW1YOUAIIAAdbBwMHUQUDBwUEBA4FU1QGB18SGREWRRRdU1s7Cl0RCAsCCw8BABgQQhUESjxfUxMORAEFA1EHXhoeFBAKVFYQAwMFBgYAAgsGU1YUQUZeVRZcEgYCVgReGh4UARtNVkBXU15oV1dCW1QDQwJBFBsTWwhvUVYIUAhcEAxGUxsfEFBBQhUJEHZeXh5BawxaQkVdCV5GEUkTBFFGRAUXXBEIGwADAwoQGBBUCRRWF0ROEw5EfnoRSRMDQEZTChBQXFwbCBBaQwYWHhUPEmcRU0RFRgNRWFYXE1waAxRIQVRSSmZRXVldV1dGXgkPS0EMFQMBVhIZEQheCFFGWRY8SVpWGwhcQl9eSQ== | 169.197.142.61 | 200 OK | 162 B |
URL User Request GET HTTP/1.1169.197.142.61:8080/series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4?token=HUNQAkVfEw5EBANWVwBQW1YOUAIIAAdbBwMHUQUDBwUEBA4FU1QGB18SGREWRRRdU1s7Cl0RCAsCCw8BABgQQhUESjxfUxMORAEFA1EHXhoeFBAKVFYQAwMFBgYAAgsGU1YUQUZeVRZcEgYCVgReGh4UARtNVkBXU15oV1dCW1QDQwJBFBsTWwhvUVYIUAhcEAxGUxsfEFBBQhUJEHZeXh5BawxaQkVdCV5GEUkTBFFGRAUXXBEIGwADAwoQGBBUCRRWF0ROEw5EfnoRSRMDQEZTChBQXFwbCBBaQwYWHhUPEmcRU0RFRgNRWFYXE1waAxRIQVRSSmZRXVldV1dGXgkPS0EMFQMBVhIZEQheCFFGWRY8SVpWGwhcQl9eSQ== IP169.197.142.61:8080 ASN#63023 AS-GLOBALTELEHOST
File typeHTML document, ASCII text, with CRLF line terminators Hash70461da8b94c6ca5d2fda3260c5a8c3b 994bc667720c21257500e29038c1a5f61e25da1e f33c27745f2bd87344be790465ef984a972fd539dc83bd4f61d4242c607ef1ee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4?token=HUNQAkVfEw5EBANWVwBQW1YOUAIIAAdbBwMHUQUDBwUEBA4FU1QGB18SGREWRRRdU1s7Cl0RCAsCCw8BABgQQhUESjxfUxMORAEFA1EHXhoeFBAKVFYQAwMFBgYAAgsGU1YUQUZeVRZcEgYCVgReGh4UARtNVkBXU15oV1dCW1QDQwJBFBsTWwhvUVYIUAhcEAxGUxsfEFBBQhUJEHZeXh5BawxaQkVdCV5GEUkTBFFGRAUXXBEIGwADAwoQGBBUCRRWF0ROEw5EfnoRSRMDQEZTChBQXFwbCBBaQwYWHhUPEmcRU0RFRgNRWFYXE1waAxRIQVRSSmZRXVldV1dGXgkPS0EMFQMBVhIZEQheCFFGWRY8SVpWGwhcQl9eSQ== HTTP/1.1
Host: 169.197.142.61:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 14:39:57 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
|
| 169.197.142.61:8080/favicon.ico | 169.197.142.61 | 404 Not Found | 162 B |
URL GET HTTP/1.1169.197.142.61:8080/favicon.ico IP169.197.142.61:8080 ASN#63023 AS-GLOBALTELEHOST
Requested byhttp://169.197.142.61:8080/series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4?token=HUNQAkVfEw5EBANWVwBQW1YOUAIIAAdbBwMHUQUDBwUEBA4FU1QGB18SGREWRRRdU1s7Cl0RCAsCCw8BABgQQhUESjxfUxMORAEFA1EHXhoeFBAKVFYQAwMFBgYAAgsGU1YUQUZeVRZcEgYCVgReGh4UARtNVkBXU15oV1dCW1QDQwJBFBsTWwhvUVYIUAhcEAxGUxsfEFBBQhUJEHZeXh5BawxaQkVdCV5GEUkTBFFGRAUXXBEIGwADAwoQGBBUCRRWF0ROEw5EfnoRSRMDQEZTChBQXFwbCBBaQwYWHhUPEmcRU0RFRgNRWFYXE1waAxRIQVRSSmZRXVldV1dGXgkPS0EMFQMBVhIZEQheCFFGWRY8SVpWGwhcQl9eSQ==
File typeHTML document, ASCII text, with no line terminators Hash42b7c03ebcddafdb2aa3078e3a9ceb69 57570cf4712b36bce96f68228e6c72137c2156dd a225bf8186e767cfb73fec2ac55678c083a3c2abd042bc1cf85f820bced5ec9f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 169.197.142.61:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://169.197.142.61:8080/series/CwcspkjCgzeZ/m5mknNRdkmc9/209822.mp4?token=HUNQAkVfEw5EBANWVwBQW1YOUAIIAAdbBwMHUQUDBwUEBA4FU1QGB18SGREWRRRdU1s7Cl0RCAsCCw8BABgQQhUESjxfUxMORAEFA1EHXhoeFBAKVFYQAwMFBgYAAgsGU1YUQUZeVRZcEgYCVgReGh4UARtNVkBXU15oV1dCW1QDQwJBFBsTWwhvUVYIUAhcEAxGUxsfEFBBQhUJEHZeXh5BawxaQkVdCV5GEUkTBFFGRAUXXBEIGwADAwoQGBBUCRRWF0ROEw5EfnoRSRMDQEZTChBQXFwbCBBaQwYWHhUPEmcRU0RFRgNRWFYXE1waAxRIQVRSSmZRXVldV1dGXgkPS0EMFQMBVhIZEQheCFFGWRY8SVpWGwhcQl9eSQ==
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 09 May 2024 14:39:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
|