GET tes.casamar.ru:8080/series/7GF876598V501770B/J48qV3TKwn/91756.mkv
0 B URL User Request GET tes.casamar.ru:8080/series/7GF876598V501770B/J48qV3TKwn/91756.mkv
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /series/7GF876598V501770B/J48qV3TKwn/91756.mkv HTTP/1.1
Host: tes.casamar.ru:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Mon, 11 Dec 2023 01:42:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Location: http://149.62.176.234:8080/series/7GF876598V501770B/J48qV3TKwn/91756.mkv?token=HRVZBRdQF1xDVwcGVAABAgBVU11WUlRfClNUVAFUAlBVVAdWBwFXB1MTGRYRR0BSBA9oDVcTXAAJUwRSHEFHRgNFbg0AGg9EUgEDDVIRHhURC1oBEQtXDghWA1IBVQcCShVBDQAaD0RUAwcMVREeFQAaQwFBXwdVZwBUElkAVxdcFRNIRldbOQVUWFUMVxANR1IVSBFYFUkaXl8RXA8eFwReRRYFTFBEWxMEBFUAABVJQFQLRl8SS0FGC0ZlMBAZRFJJEAFWRg8OXxcOQF5ZQUdOFQ1AbhRcSxBDAVEOV0dEDRNURhQXCwBJalcNXVxSBhZeC11CRAMaVRNIEg5dWw9DXhY7SFwCQwtbQQ5fTw==
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MrvWxGbFMH21wvv62pWPQsBkStmmrCkj0GC6UlXAi1Zcuk1zzxwTeDrzkuCSwnwmdJN8EH98Vz%2FTok7%2FHCq3iaWE7Zh3B2YvmeaXvfNcMDaX538Eo7EA9hHhjdpa0j7AYGnP4vF6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 833a07855bd20b02-OSL
alt-svc: h3=":443"; ma=86400
GET 149.62.176.234:8080/series/7GF876598V501770B/J48qV3TKwn/91756.mkv?token=HRVZBRdQF1xDVwcGVAABAgBVU11WUlRfClNUVAFUAlBVVAdWBwFXB1MTGRYRR0BSBA9oDVcTXAAJUwRSHEFHRgNFbg0AGg9EUgEDDVIRHhURC1oBEQtXDghWA1IBVQcCShVBDQAaD0RUAwcMVREeFQAaQwFBXwdVZwBUElkAVxdcFRNIRldbOQVUWFUMVxANR1IVSBFYFUkaXl8RXA8eFwReRRYFTFBEWxMEBFUAABVJQFQLRl8SS0FGC0ZlMBAZRFJJEAFWRg8OXxcOQF5ZQUdOFQ1AbhRcSxBDAVEOV0dEDRNURhQXCwBJalcNXVxSBhZeC11CRAMaVRNIEg5dWw9DXhY7SFwCQwtbQQ5fTw==
0 B URL User Request GET 149.62.176.234:8080/series/7GF876598V501770B/J48qV3TKwn/91756.mkv?token=HRVZBRdQF1xDVwcGVAABAgBVU11WUlRfClNUVAFUAlBVVAdWBwFXB1MTGRYRR0BSBA9oDVcTXAAJUwRSHEFHRgNFbg0AGg9EUgEDDVIRHhURC1oBEQtXDghWA1IBVQcCShVBDQAaD0RUAwcMVREeFQAaQwFBXwdVZwBUElkAVxdcFRNIRldbOQVUWFUMVxANR1IVSBFYFUkaXl8RXA8eFwReRRYFTFBEWxMEBFUAABVJQFQLRl8SS0FGC0ZlMBAZRFJJEAFWRg8OXxcOQF5ZQUdOFQ1AbhRcSxBDAVEOV0dEDRNURhQXCwBJalcNXVxSBhZeC11CRAMaVRNIEg5dWw9DXhY7SFwCQwtbQQ5fTw==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /series/7GF876598V501770B/J48qV3TKwn/91756.mkv?token=HRVZBRdQF1xDVwcGVAABAgBVU11WUlRfClNUVAFUAlBVVAdWBwFXB1MTGRYRR0BSBA9oDVcTXAAJUwRSHEFHRgNFbg0AGg9EUgEDDVIRHhURC1oBEQtXDghWA1IBVQcCShVBDQAaD0RUAwcMVREeFQAaQwFBXwdVZwBUElkAVxdcFRNIRldbOQVUWFUMVxANR1IVSBFYFUkaXl8RXA8eFwReRRYFTFBEWxMEBFUAABVJQFQLRl8SS0FGC0ZlMBAZRFJJEAFWRg8OXxcOQF5ZQUdOFQ1AbhRcSxBDAVEOV0dEDRNURhQXCwBJalcNXVxSBhZeC11CRAMaVRNIEg5dWw9DXhY7SFwCQwtbQQ5fTw== HTTP/1.1
Host: 149.62.176.234:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 01:42:09 GMT
Content-Type: video/x-matroska
Content-Length: 3659697188
Connection: keep-alive
Accept-Ranges: 0-3659697188
Content-Range: bytes 0-3659697187/3659697188
104.21.52.240
172.67.205.120