flowhot.cc/wp-content/uploads/2019/11/promo.jpeg
188.114.96.1200 OK 161 kB URL GET HTTP/3 flowhot.cc/wp-content/uploads/2019/11/promo.jpeg
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2019:11:21 20:13:11], progressive, precision 8, 900x250, components 3
- data
Size 161 kB (160863 bytes)
Hash f66cbb86803abd9d9f37a1588f14d5fd
c38f678cea2edc798d223b0c57f3b6c6b4acb008
ee089d909a7461ab0f483151883331e191c18f0a1db138a4bba12d82330287a1
GET /wp-content/uploads/2019/11/promo.jpeg HTTP/1.1
Host: flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: image/jpeg
content-length: 160863
cache-control: public, max-age=31536000
expires: Sun, 07 Jan 2024 23:56:47 GMT
last-modified: Fri, 22 Nov 2019 02:34:58 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 105085
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FjiPfxLuzzYnNfY%2BerJAkMezrQBO%2BVWT0FiWKhu3tszIzc9BZYgEjBKXGDJUVNLY6PiF63NNMvi9nLU6sGzTed%2BrAMsjNMeBEUNUe9cqQ2JW5xVAPtfaK1%2BVvTB9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f7fddf8d5693-OSL
alt-svc: h3=":443"; ma=86400
code.jquery.com/jquery-3.4.1.js
151.101.194.137200 OK 83 kB URL GET HTTP/2 code.jquery.com/jquery-3.4.1.js
IP 151.101.194.137:443
Requested by https://623615.flowhot.cc/
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
Hash 11c05eb286ed576526bf4543760785b9
7faa15a054093f3b5d674e63b6567c835a6fa217
5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55
GET /jquery-3.4.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-4472c"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 10 Dec 2023 05:08:13 GMT
age: 7382692
x-served-by: cache-lga21923-LGA, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 18, 82645
x-timer: S1702184893.141450,VS0,VE0
vary: Accept-Encoding
content-length: 82889
X-Firefox-Spdy: h2
flowhot.cc/wp-content/uploads/2022/05/TINI%20-%20La%20Triple%20T-300x300.webp
188.114.96.1200 OK 20 kB URL GET HTTP/3 flowhot.cc/wp-content/uploads/2022/05/TINI%20-%20La%20Triple%20T-300x300.webp
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp
- data
Hash 3225d31a2143dc1777eeb368a57d00eb
e7743f8b2166f115a1875b614bed433fdac1b578
5cd530f391c65f09bbc1211dcf0bb488aa785ad00fbf064cf451ae3ee3d32d0c
GET /wp-content/uploads/2022/05/TINI%20-%20La%20Triple%20T-300x300.webp HTTP/1.1
Host: flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: image/webp
content-length: 20406
cache-control: public, max-age=31536000
expires: Tue, 09 Jan 2024 05:08:12 GMT
last-modified: Fri, 06 May 2022 00:39:35 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jR6cmp4iljdrRgtDzPFuxR5cE2Bt%2FGsFmcsKHPHdvSN28uC%2Fnm2zMcWc%2BbqETK5PAoaEYUHnd78ryF1gD2RgivenGsiEnPcANUpGeDat3d7HTSpB%2FKU%2Byjaq4GU5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f7fddf8e5693-OSL
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=UA-922266-5
142.250.74.168200 OK 69 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-922266-5
IP 142.250.74.168:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (4179)
Hash c7bd2f499b9b622c76fb6e2ed6fec857
b0cb85415872bfeae6f26fff0eba4bc8fd383640
1fe812d95117ce54ee38f430cd8dafd1571f2ea2fb2b729da6317bfb336fc572
GET /gtag/js?id=UA-922266-5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 10 Dec 2023 05:08:13 GMT
expires: Sun, 10 Dec 2023 05:08:13 GMT
cache-control: private, max-age=900
last-modified: Sun, 10 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68978
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
104.18.10.207200 OK 7.4 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP 104.18.10.207:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9e61a4e37a75208649ae6b63a0cb4f72
cdn-cache: HIT
cf-cache-status: HIT
age: 1125163
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8332f7fe2c70b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-Z7TJ1ZBHKC&l=dataLayer&cx=c
142.250.74.168200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-Z7TJ1ZBHKC&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (5955)
Hash e20b4dc44b2064d693860ac6d42d38f7
7da1e3064163dc9f6127f894cf0f1a64a9267f58
a629a49d0a3e43b54a1a3f2c01b1db043096ba1a4929a4beed5d8aa429bd122f
GET /gtag/js?id=G-Z7TJ1ZBHKC&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 10 Dec 2023 05:08:13 GMT
expires: Sun, 10 Dec 2023 05:08:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81199
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
finallytrained.com/06/33/56/0633569b5e7b7ced877cf02d43663712.js
192.243.61.227200 OK 15 kB URL GET HTTP/1.1 finallytrained.com/06/33/56/0633569b5e7b7ced877cf02d43663712.js
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectfinallytrained.com
Fingerprint8F:A1:2B:2D:3A:32:A7:71:00:73:CC:06:43:01:E1:62:6F:57:F2:4F
ValiditySat, 04 Nov 2023 06:34:02 GMT - Fri, 02 Feb 2024 06:34:01 GMT
File type ASCII text, with very long lines (42333), with no line terminators
Hash 5cde512759c437233dea9b1befa47db3
4656ac7474dec1e24fc06c0ead28bc77086c60d2
fb59f104e904c38e539a7c706f78ecbbe70e66552a92a541ec12e9171726a828
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /06/33/56/0633569b5e7b7ced877cf02d43663712.js HTTP/1.1
Host: finallytrained.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 10 Dec 2023 05:08:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 893d696194a796319e1d7a8a2c8509c2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 456d497ddd8bc4b5152a8b7f45cb1349
72edd93200d3aaf3cd3c6f31f74548220edca4e4
b9d310e39ae72d197a8580a9a1a636abef81eb959bd2b08bd82ff10da377ac6b
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 10 Dec 2023 05:08:13 GMT
Last-Modified: Sun, 10 Dec 2023 04:50:17 GMT
Server: ECAcc (ska/F6ED)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Pc0kf4itAo_MXgp-OH4HiIDNGAi1BD5b1ovcVeSf9eioFVYwhs-xBw==
Age: 1076
proftrafficcounter.com/stats
18.157.140.81200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 18.157.140.81:443
Requested by https://623615.flowhot.cc/
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 88a38f88b1e6149b98e2247c94a5c32e
094e09461456d5611dc428ae76377ab9f4846b0b
2802a5e4238b65e85111af451585d489daed1d0ece7471f97ce7bd8c163067c4
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://623615.flowhot.cc
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb:2:1; expires=Wed, 07 Dec 2033 05:08:13 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
104.18.10.207200 OK 77 kB URL GET HTTP/3 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.18.10.207:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:14 GMT
content-type: font/woff2
content-length: 77160
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "af7ae505a9eed503f8b8e6982036873e"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 19:08:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 01b357fbe9f3e3fd2b90ee2713e7d1d1
cdn-cache: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8332f803def55689-OSL
alt-svc: h3=":443"; ma=86400
623615.flowhot.cc/dectector.js
188.114.96.1404 Not Found 19 kB URL GET HTTP/3 623615.flowhot.cc/dectector.js
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash e00762520e4ab4b33624eaa8ad271f53
7a41deabed370ebe3a80f9bca5f7394693495b8a
c36d24216ab2a409590f390838c3950da222f30e6ce7399f009a66446de4e3f2
GET /dectector.js HTTP/1.1
Host: 623615.flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qLxVDBvKWMadEhG%2Fnwo7WqFZ4zCBg2JKsFskq7PVTxFLex5d98ZHU%2BPptLulTRB1ts7bNEk7Gsz6ebZ4xtdzpxmgGogf5qu0rllcY0EWIcHXvXCynREVBbq%2BG2rLIibfAYW%2BJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f802c9d95693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
barelydresstraitor.com/b8/d7/49/b8d74904f6b94ccf8e1a8085aa5d1820.js
173.233.139.164200 OK 25 kB URL GET HTTP/1.1 barelydresstraitor.com/b8/d7/49/b8d74904f6b94ccf8e1a8085aa5d1820.js
IP 173.233.139.164:443
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectbarelydresstraitor.com
Fingerprint25:97:2B:38:9D:41:66:EF:F8:3D:E9:6C:15:38:E1:4F:3F:37:6E:81
ValidityTue, 28 Nov 2023 10:39:06 GMT - Mon, 26 Feb 2024 10:39:05 GMT
File type ASCII text, with very long lines (62398)
Hash 56e6e73de93e5e810bcd52c8416aff3e
9e2d158804c2b1723727378ac2532b8657859ffe
3d180728e1a07dcdc246d13743ef5955af065563d46409f5bdb713d557b9cbc8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /b8/d7/49/b8d74904f6b94ccf8e1a8085aa5d1820.js HTTP/1.1
Host: barelydresstraitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 10 Dec 2023 05:08:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2805_1=0; expires=Wed, 13 Dec 2023 13:08:14 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3df05bedece8ee69bec8026ad95c8c26
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
notix.io/ent/current/enot.min.js
139.45.240.92200 OK 44 kB URL GET HTTP/2 notix.io/ent/current/enot.min.js
IP 139.45.240.92:443
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash 175c7ea6f01a15d6ba106dfc55646c43
b52c4930740d30ef848c8b2a8ae12a72d5899bda
840e06304711b11834231983c9e3c1b3f678e39d876979e69377021d93e2ee74
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 05:08:14 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 09:06:51 GMT
etag: W/"6572dcab-2369a"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
barelydresstraitor.com/sbar.json?key=0633569b5e7b7ced877cf02d43663712&uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb%3A2%3A1
173.233.139.164200 OK 3.8 kB URL GET HTTP/1.1 barelydresstraitor.com/sbar.json?key=0633569b5e7b7ced877cf02d43663712&uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb%3A2%3A1
IP 173.233.139.164:443
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectbarelydresstraitor.com
Fingerprint25:97:2B:38:9D:41:66:EF:F8:3D:E9:6C:15:38:E1:4F:3F:37:6E:81
ValidityTue, 28 Nov 2023 10:39:06 GMT - Mon, 26 Feb 2024 10:39:05 GMT
File type JSON data
- , ASCII text, with very long lines (6558), with no line terminators
Hash 9a7ead9c2894b93d809c5d39c7831a8b
9315840e489e97c2d9b74672da9faf9078280bce
d19ceefa83bc21c82f0de95a2d9c54eed5650908ec77e690abd5fa3ff10cc408
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=0633569b5e7b7ced877cf02d43663712&uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb%3A2%3A1 HTTP/1.1
Host: barelydresstraitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 10 Dec 2023 05:08:14 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://623615.flowhot.cc
Access-Control-Allow-Origin: https://623615.flowhot.cc
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=19408177; expires=Mon, 11 Dec 2023 05:08:14 GMT; secure; SameSite=None
uid_id2=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb:2:1; expires=Sun, 17 Dec 2023 05:08:14 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 11 Dec 2023 05:08:14 GMT; secure; SameSite=None
uncs=1; expires=Mon, 11 Dec 2023 05:08:14 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 11 Dec 2023 05:08:14 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 11 Dec 2023 05:08:14 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f529a0a7c178780b5ed48b99a425e4e3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
friendshipmale.com/sfp.js
104.21.234.33200 OK 27 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP 104.21.234.33:443
Requested by https://623615.flowhot.cc/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:14 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: d865613d9d2f0e308c99a10cdb422a60
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 10 Dec 2023 05:08:12 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dbpMoO0G%2FPpU5lcqLFPjBLxLIa7UquJzkSe7KlOx4SY2PkI9iVkfMKfp1CefpCcuwiwi1SLpkGktMi%2BKXlIPU9%2BVlpRAqKHPY16sNv5cq%2Fhu6Wv5ZezmTjh9ahWdDKJzgzhVst4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f8025d1cd947-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
evaporatehorizontally.com/pixel/purst?dl=0&th=0&sc=0&rs=1727&rd=1727&fd=575&bv=23.12.v.2&tmpl=136
173.233.139.164200 OK 0 B URL GET HTTP/1.1 evaporatehorizontally.com/pixel/purst?dl=0&th=0&sc=0&rs=1727&rd=1727&fd=575&bv=23.12.v.2&tmpl=136
IP 173.233.139.164:443
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectevaporatehorizontally.com
Fingerprint82:E3:3C:BD:C9:71:F7:19:3A:57:BA:47:12:FF:35:F5:A0:AD:50:F0
ValidityTue, 28 Nov 2023 08:19:28 GMT - Mon, 26 Feb 2024 08:19:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1727&rd=1727&fd=575&bv=23.12.v.2&tmpl=136 HTTP/1.1
Host: evaporatehorizontally.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 10 Dec 2023 05:08:14 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.cloudimagesb.com/si/53/8c/6d/538c6d14c11465cad60a6fff9f4e66bb/1701651853.png
45.133.44.9200 OK 83 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/53/8c/6d/538c6d14c11465cad60a6fff9f4e66bb/1701651853.png
IP 45.133.44.9:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 360 x 240, 8-bit/color RGBA, non-interlaced
- data
Hash 7310a1b7798db42cef036b303df3c140
d1a4b062d4703ca04d1089393ff1cd7f66aae3f1
668cd1cff2362c9fe27026f23a241deeb005b67b0dd3428713a57435705d1650
GET /si/53/8c/6d/538c6d14c11465cad60a6fff9f4e66bb/1701651853.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:15 GMT
content-type: image/png
content-length: 83188
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:04:22 GMT
etag: "656d2596-144f4"
expires: Tue, 12 Dec 2023 05:08:15 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/d9/00/89/d90089da48b102b32e93dd9b6d740f49/1701651794.png
45.133.44.9200 OK 14 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/d9/00/89/d90089da48b102b32e93dd9b6d740f49/1701651794.png
IP 45.133.44.9:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
- data
Hash 962ac416cce3fad636d4904386c8d3d4
811166fceb971353dc6a9ea3a153367f20b47592
ec6c8e1c030499a846897265d0c1f66dedc6ece17c1ea6006b700faf37e73555
GET /si/d9/00/89/d90089da48b102b32e93dd9b6d740f49/1701651794.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:15 GMT
content-type: image/png
content-length: 14496
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:03:23 GMT
etag: "656d255b-38a0"
expires: Tue, 12 Dec 2023 05:08:15 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/animate.css
172.64.109.10200 OK 5.4 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/animate.css
IP 172.64.109.10:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/ssp/interstitial/center_banner/2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:15 GMT
content-type: text/css
last-modified: Mon, 23 Oct 2023 10:00:35 GMT
etag: W/"65364443-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lY0gtldkQH%2FRkthlrnonAkfMr3H4oluxw57U4btUnY%2Fs3WOQavHaylrvLiZCNIDdLuPI%2B5b40nbh%2Fu3f5%2BPSinukQrevcLgSk1RuC4S8ic5w7h%2BBhHnv2l39GmpSsCIfqV%2FZGDsib43D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f8097bfe2411-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=0633569b5e7b7ced877cf02d43663712&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5
192.243.59.20200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=0633569b5e7b7ced877cf02d43663712&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=0633569b5e7b7ced877cf02d43663712&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 10 Dec 2023 05:08:15 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: aeb9ff84a1c59cf595cebcb9f0e7a3b7
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/style.css
172.64.109.10200 OK 988 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/css/style.css
IP 172.64.109.10:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash 939db85365d789e8ef9058077e3b4e57
d920f4ddbdbf3cfa793a66bb85b915c732db7ab1
bbd3674e5782f35dffae41cbfddf485538530a228d3ae199f65b8c0711678db0
GET /sb/ssp/interstitial/center_banner/2/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:15 GMT
content-type: text/css
last-modified: Mon, 23 Oct 2023 10:00:35 GMT
etag: W/"65364443-10b3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zOSaYBDevTlPsAxrab1ouM4Qa4YyELQoiuDJX0sBE0XAIRjXsT55xKKD7JiI9zk0uGKRL84XI0Z%2Bvyvml1oM%2BqpYsjSg9QFS%2F5jhH5FPFqoK1QPby4xGcBt1H47tAK6DLn5%2FzUi8RJHH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f8098c062411-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 04:57:34 GMT
expires: Fri, 06 Dec 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 259841
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
623615.flowhot.cc/favicon.ico
188.114.96.1404 Not Found 16 kB URL GET HTTP/3 623615.flowhot.cc/favicon.ico
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash e00762520e4ab4b33624eaa8ad271f53
7a41deabed370ebe3a80f9bca5f7394693495b8a
c36d24216ab2a409590f390838c3950da222f30e6ce7399f009a66446de4e3f2
GET /favicon.ico HTTP/1.1
Host: 623615.flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Cookie: _ga_Z7TJ1ZBHKC=GS1.1.1702184901.1.0.1702184901.0.0.0; _ga=GA1.1.1716184653.1702184901; dom3ic8zudi28v8lr6fgphwffqoz0j6c=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb%3A2%3A1; sb_main_0633569b5e7b7ced877cf02d43663712=1; sb_count_0633569b5e7b7ced877cf02d43663712=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=barelydresstraitor.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sun, 10 Dec 2023 05:08:15 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mRAOOY%2F9tDf88oFji1YVlpN2Ip8krI7rZwdnikye42xQlymm5HrbOgrLGVVBAi8GHceEQgX%2FCnpg7om3Av1slQNextdEogW5O4Nnne8WmrulArtkMCUS%2BTJO%2FnxVk%2BQb4LLa6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f80a4d115693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
barelydresstraitor.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzsaTIPjjIirMQTGCmXRP90zPuIfFuGYJxiTsRnKurqqelKnuaqq6pydzCi7IHsebx843yQbdRd2roMjEiwSEHQ%2BSg7n4HyjsWSYZGPcd%2Br3X34P6vu%2B9L4%2BKS%2BKhoBfbn%2BqBVIquNOtubWlXplyXtra5U%2FPcunuztivTVnCz1p9%2BTO8Dz23W3fdqdwTb1ysN13Ndz%2FVqa9KIWPdXrlDI7HHHq3fcetCoe80AffN8bwsHljrgvUvyCiSfvLD32xNINkaa%2FHBb2P1cZ%2B9%2FnBSK5tqgx08%2FS%2FdTXaZI5mVsHMTp6Wwa2k4I%2BXoBOj2dKYDuHU8VIJIT4vzpIUpPZzQR9U6umUYKIkXEX0TZG0OoMSQdg%2Bn7kPwpARjH5hbS5OGmNiU9uEbpFJ2QxWf%2FQpYTsvjXa0iT71aV7NfuaVXkUqcW%2FbiC7I8hu2NkxRnygQNZnoHlX0Dy38nKsw2kyfGWVRqSX7wdiqjlRsxf7rTDxnIQx8EypT5dDlpNHrAm9UIRXVkk5RgyHkOJIahdQGEdFNJBETsoMgcJv6jRZid23TCOYt9vB4wx32es2W7xJveDduyiYFMNQ%2BTZEEwNwcwhMnOIfTmEKX6B3atguQObE%2FR4hVIQlJagpASlJChzgrJXnXBlG7Z6yJUtIm%2BWG7PsVyOdd4%2Foic67IiWgZniUXZKXp%2BY5S%2B942BcXNbfl%2B81WJ2qKMAqZ4O0wZLHb4IHfavmh14CVFaRdALUOBnJC3n1zEZl8%2BmqKiJ7BqjMw6YAWb4GWo7Dhgu6NgraLQfqIDjKhpK0znYDrClm%2BiPzAOVKX5PWrDa5vfQ%2FBzm%2F97V8FmKmQmQqfy18JuurB6K4uyfFdXVryZCvLZSIHdLrdeznNxY1vPxEHpTZ8%2FbYdfvMhmwLT8vGOsPkGTblMu5Y8WpWcC7OmDRPkp3W7K6Ltwu6tFiYtso3tj9bWk8wIa6VOx6DTS%2F3HgMkJeemNnavLXfpxE9KMYYoKSXFOZgGpx2DZIWw25281gVHzmShzUBbVyDSi%2BU8lCZSY9zSqYP%2FXR%2FP6yD5A1zig%2BX2kSYWeqdBTFagawhY3Rnlmzm%2F9MXs8Us4oUsY5jpRRX12ba%2BVFrekFoh21Q8Z5JBj3wobf9l23wXkQdoTXQW4norjz838AAAD%2F%2FwEAAP%2F%2FNbpMM5EEAAA%3D
173.233.139.164200 OK 7 B URL GET HTTP/1.1 barelydresstraitor.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzsaTIPjjIirMQTGCmXRP90zPuIfFuGYJxiTsRnKurqqelKnuaqq6pydzCi7IHsebx843yQbdRd2roMjEiwSEHQ%2BSg7n4HyjsWSYZGPcd%2Br3X34P6vu%2B9L4%2BKS%2BKhoBfbn%2BqBVIquNOtubWlXplyXtra5U%2FPcunuztivTVnCz1p9%2BTO8Dz23W3fdqdwTb1ysN13Ndz%2FVqa9KIWPdXrlDI7HHHq3fcetCoe80AffN8bwsHljrgvUvyCiSfvLD32xNINkaa%2FHBb2P1cZ%2B9%2FnBSK5tqgx08%2FS%2FdTXaZI5mVsHMTp6Wwa2k4I%2BXoBOj2dKYDuHU8VIJIT4vzpIUpPZzQR9U6umUYKIkXEX0TZG0OoMSQdg%2Bn7kPwpARjH5hbS5OGmNiU9uEbpFJ2QxWf%2FQpYTsvjXa0iT71aV7NfuaVXkUqcW%2FbiC7I8hu2NkxRnygQNZnoHlX0Dy38nKsw2kyfGWVRqSX7wdiqjlRsxf7rTDxnIQx8EypT5dDlpNHrAm9UIRXVkk5RgyHkOJIahdQGEdFNJBETsoMgcJv6jRZid23TCOYt9vB4wx32es2W7xJveDduyiYFMNQ%2BTZEEwNwcwhMnOIfTmEKX6B3atguQObE%2FR4hVIQlJagpASlJChzgrJXnXBlG7Z6yJUtIm%2BWG7PsVyOdd4%2Foic67IiWgZniUXZKXp%2BY5S%2B942BcXNbfl%2B81WJ2qKMAqZ4O0wZLHb4IHfavmh14CVFaRdALUOBnJC3n1zEZl8%2BmqKiJ7BqjMw6YAWb4GWo7Dhgu6NgraLQfqIDjKhpK0znYDrClm%2BiPzAOVKX5PWrDa5vfQ%2FBzm%2F97V8FmKmQmQqfy18JuurB6K4uyfFdXVryZCvLZSIHdLrdeznNxY1vPxEHpTZ8%2FbYdfvMhmwLT8vGOsPkGTblMu5Y8WpWcC7OmDRPkp3W7K6Ltwu6tFiYtso3tj9bWk8wIa6VOx6DTS%2F3HgMkJeemNnavLXfpxE9KMYYoKSXFOZgGpx2DZIWw25281gVHzmShzUBbVyDSi%2BU8lCZSY9zSqYP%2FXR%2FP6yD5A1zig%2BX2kSYWeqdBTFagawhY3Rnlmzm%2F9MXs8Us4oUsY5jpRRX12ba%2BVFrekFoh21Q8Z5JBj3wobf9l23wXkQdoTXQW4norjz838AAAD%2F%2FwEAAP%2F%2FNbpMM5EEAAA%3D
IP 173.233.139.164:443
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectbarelydresstraitor.com
Fingerprint25:97:2B:38:9D:41:66:EF:F8:3D:E9:6C:15:38:E1:4F:3F:37:6E:81
ValidityTue, 28 Nov 2023 10:39:06 GMT - Mon, 26 Feb 2024 10:39:05 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzsaTIPjjIirMQTGCmXRP90zPuIfFuGYJxiTsRnKurqqelKnuaqq6pydzCi7IHsebx843yQbdRd2roMjEiwSEHQ%2BSg7n4HyjsWSYZGPcd%2Br3X34P6vu%2B9L4%2BKS%2BKhoBfbn%2BqBVIquNOtubWlXplyXtra5U%2FPcunuztivTVnCz1p9%2BTO8Dz23W3fdqdwTb1ysN13Ndz%2FVqa9KIWPdXrlDI7HHHq3fcetCoe80AffN8bwsHljrgvUvyCiSfvLD32xNINkaa%2FHBb2P1cZ%2B9%2FnBSK5tqgx08%2FS%2FdTXaZI5mVsHMTp6Wwa2k4I%2BXoBOj2dKYDuHU8VIJIT4vzpIUpPZzQR9U6umUYKIkXEX0TZG0OoMSQdg%2Bn7kPwpARjH5hbS5OGmNiU9uEbpFJ2QxWf%2FQpYTsvjXa0iT71aV7NfuaVXkUqcW%2FbiC7I8hu2NkxRnygQNZnoHlX0Dy38nKsw2kyfGWVRqSX7wdiqjlRsxf7rTDxnIQx8EypT5dDlpNHrAm9UIRXVkk5RgyHkOJIahdQGEdFNJBETsoMgcJv6jRZid23TCOYt9vB4wx32es2W7xJveDduyiYFMNQ%2BTZEEwNwcwhMnOIfTmEKX6B3atguQObE%2FR4hVIQlJagpASlJChzgrJXnXBlG7Z6yJUtIm%2BWG7PsVyOdd4%2Foic67IiWgZniUXZKXp%2BY5S%2B942BcXNbfl%2B81WJ2qKMAqZ4O0wZLHb4IHfavmh14CVFaRdALUOBnJC3n1zEZl8%2BmqKiJ7BqjMw6YAWb4GWo7Dhgu6NgraLQfqIDjKhpK0znYDrClm%2BiPzAOVKX5PWrDa5vfQ%2FBzm%2F97V8FmKmQmQqfy18JuurB6K4uyfFdXVryZCvLZSIHdLrdeznNxY1vPxEHpTZ8%2FbYdfvMhmwLT8vGOsPkGTblMu5Y8WpWcC7OmDRPkp3W7K6Ltwu6tFiYtso3tj9bWk8wIa6VOx6DTS%2F3HgMkJeemNnavLXfpxE9KMYYoKSXFOZgGpx2DZIWw25281gVHzmShzUBbVyDSi%2BU8lCZSY9zSqYP%2FXR%2FP6yD5A1zig%2BX2kSYWeqdBTFagawhY3Rnlmzm%2F9MXs8Us4oUsY5jpRRX12ba%2BVFrekFoh21Q8Z5JBj3wobf9l23wXkQdoTXQW4norjz838AAAD%2F%2FwEAAP%2F%2FNbpMM5EEAAA%3D HTTP/1.1
Host: barelydresstraitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Cookie: u_pl=19408177; uid_id2=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 10 Dec 2023 05:08:15 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2a9fa091ec3712b422e8e9f9e53c114d
Strict-Transport-Security: max-age=0; includeSubdomains
barelydresstraitor.com/pixel/sbs?c=1
192.243.61.227200 OK 0 B URL GET HTTP/1.1 barelydresstraitor.com/pixel/sbs?c=1
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectbarelydresstraitor.com
Fingerprint25:97:2B:38:9D:41:66:EF:F8:3D:E9:6C:15:38:E1:4F:3F:37:6E:81
ValidityTue, 28 Nov 2023 10:39:06 GMT - Mon, 26 Feb 2024 10:39:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: barelydresstraitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Cookie: u_pl=19408177; uid_id2=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 10 Dec 2023 05:08:15 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
flowhot.cc/wp-content/themes/flowhot/style.css?ver=1702184551
188.114.96.1200 OK 20 kB URL GET HTTP/3 flowhot.cc/wp-content/themes/flowhot/style.css?ver=1702184551
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
File type ASCII text, with very long lines (4468)
Hash 4c1717ce0a000bdbf8af2b620be2b465
9398d9ac4a1f37374cc187f5a1e3d6dc69f2a208
25f469c98011ebbf04fe876c4a5732b88c74bf48dfc6b03f8fa7d68b34657404
GET /wp-content/themes/flowhot/style.css?ver=1702184551 HTTP/1.1
Host: flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: text/css
cache-control: public, max-age=31536000
expires: Tue, 09 Jan 2024 05:08:12 GMT
last-modified: Fri, 19 Jun 2020 18:37:30 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ffP9dt%2B8o0nNkdAwZW%2Bm%2B0MiiYFevq1xA0%2Bfl4BruqP01GMLrJTecqj4Xx6jYcyyN0RntUGfqaP509rWEnkVGDbbxMYs9lMMH499oMSuYHXZz6sHzYQ8HWlRg%2F5T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8332f7fddf8c5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
623615.flowhot.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
188.114.96.1200 OK 1.2 kB URL GET HTTP/3 623615.flowhot.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: 623615.flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: application/javascript
last-modified: Fri, 01 Dec 2023 15:04:24 GMT
etag: W/"6569f5f8-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aCtkTOGS%2B5Ff4u15rDg2WW0t4NESSzRkEZzEgWP03xGCvUQGUaZvrTAL0vqLKRu25tRZfyivbo2phMCT39hNN74Cm3Uu0EKcO26EhiLZATgTeQaaUGVTBIbycQLL63pAYMRqCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f7fdef935693-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 12 Dec 2023 05:08:13 GMT
cache-control: max-age=172800, public
content-encoding: gzip
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
104.18.10.207200 OK 18 kB URL GET HTTP/3 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2
IP 104.18.10.207:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 18028, version 1.589
- data
Hash 448c34a56d699c29117adc64c43affeb
ca35b697d99cae4d1b60f2d60fcd37771987eb07
fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c
GET /bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:14 GMT
content-type: font/woff2
content-length: 18028
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "448c34a56d699c29117adc64c43affeb"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 09/21/2023 16:48:19
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: ac753497afec1949063fecdaa3088508
cdn-cache: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8332f803ff015689-OSL
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/script.js
172.64.109.10200 OK 975 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/script.js
IP 172.64.109.10:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (1026), with no line terminators
Hash 56f5217ee29771ce2ae4c86ff026496c
9b3780593c5dce75b397078fcc2005b4d81aaf25
00233eef52d4b6024e389215842798af314a85d0e50ca433ee4cfd472cdf15ca
GET /sb/ssp/interstitial/center_banner/2/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:15 GMT
content-type: application/javascript
last-modified: Mon, 23 Oct 2023 10:00:33 GMT
etag: W/"65364441-3cf"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UwHsDh%2FpxZVuN3yaGtzjshfFbgj%2BqHfHM9XFZ%2Bnej6fa5HYDmS5pa3DI%2F0gNbbWczqVlNCmWRGIwQEXKEsMaFLGK2lBFwz32CoUlaOZg30IvV17mfEbqx3tp6RFTr4DHXy9YV5%2BdrXNJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f80b7d442411-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:46:25 GMT
expires: Fri, 06 Dec 2024 15:46:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 220910
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
flowhot.cc/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2
188.114.96.1200 OK 110 kB URL GET HTTP/3 flowhot.cc/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
Size 110 kB (110035 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.2 HTTP/1.1
Host: flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: text/css
cache-control: public, max-age=31536000
expires: Sat, 06 Jan 2024 00:13:36 GMT
last-modified: Wed, 08 Nov 2023 14:55:17 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 276877
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pOSU0P4A2UTYgGc2F%2BGi7LFj9Xj%2B8O2K5H%2FMMqcAqRCShsP4EoIGFunhkNgXd8BPDbtNu6pa6NxF74S79uFZUYFBbKFHLWSeBbR7NqyCeqRipcr7BWbZ2wKSGIGN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8332f7fddf895693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/img/close.svg
172.64.109.10200 OK 2.5 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/img/close.svg
IP 172.64.109.10:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type SVG Scalable Vector Graphics image
- HTML document, ASCII text, with very long lines (2573), with no line terminators
Hash d05ebade4b5acd19668c0e26c2252d14
ced1fb92de4c6e06f54946dbf03349d7e8337150
0538059a2b31e76581ee1c105ef9c138a6a6c02a6f44363fad6650be18587fea
GET /sb/ssp/interstitial/center_banner/2/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:15 GMT
content-type: image/svg+xml
last-modified: Mon, 23 Oct 2023 10:00:32 GMT
etag: W/"65364440-9c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 987664
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CgNN4dPlEmVtuoQvg%2FzGEx%2FaVqjpOlPTzgZ6%2FmY%2BflBg41QZNx8NFClaSxlrXLjrjFB2Jxlb%2Bk3hNmecLPtpsyhdjA2Me0U5hXaBP69Gl8qijwl4DLXWxhmvSLU0osiTOcXOaoY%2FigkI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f80a1c5a2411-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=b8d74904f6b94ccf8e1a8085aa5d1820&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5
192.243.59.20200 OK 0 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=b8d74904f6b94ccf8e1a8085aa5d1820&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=b8d74904f6b94ccf8e1a8085aa5d1820&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 10 Dec 2023 05:08:15 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ef37ba3aa062126cf584034d1c1b5d93
Strict-Transport-Security: max-age=0; includeSubdomains
flowhot.cc/wp-content/themes/flowhot/views.php?id=623615
188.114.96.1200 OK 5 B URL GET HTTP/3 flowhot.cc/wp-content/themes/flowhot/views.php?id=623615
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
File type ASCII text, with no line terminators
Hash c1aece8bd282fdcf9653fd10cedf376f
ff6e5940471664ee9b0e894324f1b5b2881d7132
ec8e320213d28a0fc5aeedd852021e0b80c4b103b58d3678ab1640a8837a65be
GET /wp-content/themes/flowhot/views.php?id=623615 HTTP/1.1
Host: flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:14 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JdRAS6Vm7Q7c2V90W%2B6IfbXfn6rzYoZT7jZOsnABZt8G8ARIaive0luaIksmTB7qAdSFhuQkO761YxeZQEZOoMh6diLeNx8TwAv3b1l1PxcAYOcyO2Qle2XYjTTY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8332f8045a4a5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
notix.io/settings?appId=1004ce02062614f98c25893fe046136&ver=0.16.0
139.45.240.92200 OK 318 B URL GET HTTP/2 notix.io/settings?appId=1004ce02062614f98c25893fe046136&ver=0.16.0
IP 139.45.240.92:443
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectnotix.io
Fingerprint68:78:0C:AA:A6:75:6F:E2:65:2D:3B:7E:5B:8A:2B:6B:F6:1A:BF:1D
ValidityFri, 15 Sep 2023 11:38:16 GMT - Thu, 14 Dec 2023 11:38:15 GMT
File type troff or preprocessor input, ASCII text, with very long lines (358), with no line terminators
Hash e4eca3944e50640b652edd2758160079
d5f785a8effb3fb04a6af6c42365da013afe6cef
6298b3913a578c409d9d2b5e256d762cf77761aa4703b1c8b32e0f5b99a1baa0
GET /settings?appId=1004ce02062614f98c25893fe046136&ver=0.16.0 HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://623615.flowhot.cc/
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 05:08:14 GMT
content-type: application/json; charset=utf-8
content-length: 318
access-control-allow-origin: https://623615.flowhot.cc
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
barelydresstraitor.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9lcxv9QPBj42o0AvFCE5PVVdVV7dZBGNMGIwzIYlk%2Fb6q5zmv6hXvVXV1ehUMSJbtzmXN6UkGTVCzFRTpcSMDQtqFzMLZ%2BB8oZC0909B6F3XvrXPhnXPu%2FXyvOiEBKnp842MzVlrTjbjtty7cUbkwtWtt3W4Fftu%2F2Lqj8m50sTVafOzwvcCP2%2F47rWuS75qNjh%2F4fuAHravKytSMNk5RqOJJP2j3%2FXbUaQdxhJH9b%2B8qD456EMMT8hKUmP9v55enUHyGPPvuinS7pSne%2FTCrNC2NxVAcfJLv5qbOka3K1HpI84PlNIybE%2FLlOZj8YKkAZri%2FUACm5sT7PQDLD5Y0wYYPz5gyDZmDif%2BjHs4g9QyKzsDNfSjxjABcYGsbefZoy9ia3j1D6QKdk7Xnf0PVc7L2xyvIs28uazVq3TK6KpXJHUZpAzWaQQ1mKKpDlGMPqj4ELz%2BDEr%2BSjefXkWf7204bKHH8ZiJZ12c8XO%2F3ks56lKbROqUhXY%2B6sYh4TINEslOLlJpBpTNoOQF151A5D5XyUKUeqsJDJo5bNO6nvp%2BkLA3DXsQ5D0PO415XxCKMeqmPii80TFAWE3A9Abf3UNh72FUT2OonuJ0GTnhwJcFQNKglQe0IakpQK4K6JKiHzUOhXcc1j4R2FQuWubPMYTM15WCPPjTlQOYE1E72ihPy4sI878JbAXblccvvhmHc7bNYJizhUvSShKd%2BR0RhtxsmQQdONVDuHKjzMFZz8vbrayjUs5dzMHoIpw%2FBlQdavQFaT5OOD7ozjXo%2BxvljOi6kVq7NTQZhGhTlGsq73p4%2BIa%2BebnBz%2B1tIfnTpz%2FA0wG2Dwjb4VP1MMNAPpjdNTfZvmtqRp9tFqTI1povt3ippKc9%2F%2FZG8WxsrNq%2B4yVfv8wWwKJ%2Fclq68TnOh8oEjjy8rIaS9aiyX5IdNd0eyG5XbuVzZvCqu3%2Fjg6mZWWOmcMvkMdHGpf1lwNScvvHb79HIvfL8FZWewVYOsOiLLgDIz8OIeXLHi7wyB1asZVnioq2ZqO2z1UysCLVc9ZQ3cv3q2qvfcAwysB1reR541GNoGQ92A6glcdX5aFvbo0m%2FLx5n2pkxbb59pq784M9ep45aMUz%2BVfkeytM%2FShPqin0Z9RvuBTFhMA5RuLqtrP%2F4DAAD%2F%2FwEAAP%2F%2FIbLC1ZEEAAA%3D
173.233.139.164200 OK 0 B URL GET HTTP/1.1 barelydresstraitor.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9lcxv9QPBj42o0AvFCE5PVVdVV7dZBGNMGIwzIYlk%2Fb6q5zmv6hXvVXV1ehUMSJbtzmXN6UkGTVCzFRTpcSMDQtqFzMLZ%2BB8oZC0909B6F3XvrXPhnXPu%2FXyvOiEBKnp842MzVlrTjbjtty7cUbkwtWtt3W4Fftu%2F2Lqj8m50sTVafOzwvcCP2%2F47rWuS75qNjh%2F4fuAHravKytSMNk5RqOJJP2j3%2FXbUaQdxhJH9b%2B8qD456EMMT8hKUmP9v55enUHyGPPvuinS7pSne%2FTCrNC2NxVAcfJLv5qbOka3K1HpI84PlNIybE%2FLlOZj8YKkAZri%2FUACm5sT7PQDLD5Y0wYYPz5gyDZmDif%2BjHs4g9QyKzsDNfSjxjABcYGsbefZoy9ia3j1D6QKdk7Xnf0PVc7L2xyvIs28uazVq3TK6KpXJHUZpAzWaQQ1mKKpDlGMPqj4ELz%2BDEr%2BSjefXkWf7204bKHH8ZiJZ12c8XO%2F3ks56lKbROqUhXY%2B6sYh4TINEslOLlJpBpTNoOQF151A5D5XyUKUeqsJDJo5bNO6nvp%2BkLA3DXsQ5D0PO415XxCKMeqmPii80TFAWE3A9Abf3UNh72FUT2OonuJ0GTnhwJcFQNKglQe0IakpQK4K6JKiHzUOhXcc1j4R2FQuWubPMYTM15WCPPjTlQOYE1E72ihPy4sI878JbAXblccvvhmHc7bNYJizhUvSShKd%2BR0RhtxsmQQdONVDuHKjzMFZz8vbrayjUs5dzMHoIpw%2FBlQdavQFaT5OOD7ozjXo%2BxvljOi6kVq7NTQZhGhTlGsq73p4%2BIa%2BebnBz%2B1tIfnTpz%2FA0wG2Dwjb4VP1MMNAPpjdNTfZvmtqRp9tFqTI1povt3ippKc9%2F%2FZG8WxsrNq%2B4yVfv8wWwKJ%2Fclq68TnOh8oEjjy8rIaS9aiyX5IdNd0eyG5XbuVzZvCqu3%2Fjg6mZWWOmcMvkMdHGpf1lwNScvvHb79HIvfL8FZWewVYOsOiLLgDIz8OIeXLHi7wyB1asZVnioq2ZqO2z1UysCLVc9ZQ3cv3q2qvfcAwysB1reR541GNoGQ92A6glcdX5aFvbo0m%2FLx5n2pkxbb59pq784M9ep45aMUz%2BVfkeytM%2FShPqin0Z9RvuBTFhMA5RuLqtrP%2F4DAAD%2F%2FwEAAP%2F%2FIbLC1ZEEAAA%3D
IP 173.233.139.164:443
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectbarelydresstraitor.com
Fingerprint25:97:2B:38:9D:41:66:EF:F8:3D:E9:6C:15:38:E1:4F:3F:37:6E:81
ValidityTue, 28 Nov 2023 10:39:06 GMT - Mon, 26 Feb 2024 10:39:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9lcxv9QPBj42o0AvFCE5PVVdVV7dZBGNMGIwzIYlk%2Fb6q5zmv6hXvVXV1ehUMSJbtzmXN6UkGTVCzFRTpcSMDQtqFzMLZ%2BB8oZC0909B6F3XvrXPhnXPu%2FXyvOiEBKnp842MzVlrTjbjtty7cUbkwtWtt3W4Fftu%2F2Lqj8m50sTVafOzwvcCP2%2F47rWuS75qNjh%2F4fuAHravKytSMNk5RqOJJP2j3%2FXbUaQdxhJH9b%2B8qD456EMMT8hKUmP9v55enUHyGPPvuinS7pSne%2FTCrNC2NxVAcfJLv5qbOka3K1HpI84PlNIybE%2FLlOZj8YKkAZri%2FUACm5sT7PQDLD5Y0wYYPz5gyDZmDif%2BjHs4g9QyKzsDNfSjxjABcYGsbefZoy9ia3j1D6QKdk7Xnf0PVc7L2xyvIs28uazVq3TK6KpXJHUZpAzWaQQ1mKKpDlGMPqj4ELz%2BDEr%2BSjefXkWf7204bKHH8ZiJZ12c8XO%2F3ks56lKbROqUhXY%2B6sYh4TINEslOLlJpBpTNoOQF151A5D5XyUKUeqsJDJo5bNO6nvp%2BkLA3DXsQ5D0PO415XxCKMeqmPii80TFAWE3A9Abf3UNh72FUT2OonuJ0GTnhwJcFQNKglQe0IakpQK4K6JKiHzUOhXcc1j4R2FQuWubPMYTM15WCPPjTlQOYE1E72ihPy4sI878JbAXblccvvhmHc7bNYJizhUvSShKd%2BR0RhtxsmQQdONVDuHKjzMFZz8vbrayjUs5dzMHoIpw%2FBlQdavQFaT5OOD7ozjXo%2BxvljOi6kVq7NTQZhGhTlGsq73p4%2BIa%2BebnBz%2B1tIfnTpz%2FA0wG2Dwjb4VP1MMNAPpjdNTfZvmtqRp9tFqTI1povt3ippKc9%2F%2FZG8WxsrNq%2B4yVfv8wWwKJ%2Fclq68TnOh8oEjjy8rIaS9aiyX5IdNd0eyG5XbuVzZvCqu3%2Fjg6mZWWOmcMvkMdHGpf1lwNScvvHb79HIvfL8FZWewVYOsOiLLgDIz8OIeXLHi7wyB1asZVnioq2ZqO2z1UysCLVc9ZQ3cv3q2qvfcAwysB1reR541GNoGQ92A6glcdX5aFvbo0m%2FLx5n2pkxbb59pq784M9ep45aMUz%2BVfkeytM%2FShPqin0Z9RvuBTFhMA5RuLqtrP%2F4DAAD%2F%2FwEAAP%2F%2FIbLC1ZEEAAA%3D HTTP/1.1
Host: barelydresstraitor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Cookie: u_pl=19408177; uid_id2=7eb60bc3-9872-4ff4-aa3a-465d4c5a17eb:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 10 Dec 2023 05:08:14 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cfdd64f02afda4c6c39e0be24b405650
Strict-Transport-Security: max-age=0; includeSubdomains
188.114.96.1200 OK 532 kB URL User Request GET HTTP/2 IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
Size 532 kB (531924 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 623615.flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:12 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-litespeed-cache: hit
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wnbnx59oBi1gseBdDMWTo1Bx%2FZ3z8Zxpsqh3WTGwnOHw6G0xvhWEIiF%2FOirZ3DFf89RmapB22R0EAKTyrZVO2FYx9AjxLIaqjYytyXCye%2FqvdATDm3Ue%2BjcZ0yrfBhiP83wxRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8332f7fb2d98569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html
45.133.44.4200 OK 1.8 kB URL GET HTTP/2 cdn.barscreative1.com/sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html
IP 45.133.44.4:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://623615.flowhot.cc/
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
Fingerprint55:06:B7:F1:EF:E9:55:FB:7C:8C:4F:5D:DB:05:C9:15:19:90:9B:2F
ValiditySat, 11 Nov 2023 03:00:51 GMT - Fri, 09 Feb 2024 03:00:50 GMT
File type HTML document text
- HTML document, ASCII text, with very long lines (1879), with no line terminators
Hash 9c074ba628a488033b36166778e610b5
5a612f81115838990e3b8741943f900c97bd3f8f
b18c3b575c2be7aa1ee3d73301c049cd4862a206e38ee5eb7651c0026d8cf8b3
GET /sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://623615.flowhot.cc
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:14 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Sun, 29 Oct 2023 10:17:36 GMT
etag: W/"653e3140-6f1"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sun, 10 Dec 2023 06:08:14 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
623615.flowhot.cc/cdn-cgi/apps/head/hWKZRCl_p5W3AeulawGLi1ghRvM.js
188.114.96.1200 OK 6.4 kB URL GET HTTP/3 623615.flowhot.cc/cdn-cgi/apps/head/hWKZRCl_p5W3AeulawGLi1ghRvM.js
IP 188.114.96.1:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectflowhot.cc
FingerprintCD:8B:0B:C8:A6:57:11:77:4E:2E:BE:0E:93:82:51:03:F4:15:BE:C7
ValidityFri, 20 Oct 2023 08:03:26 GMT - Thu, 18 Jan 2024 08:03:25 GMT
File type ASCII text, with very long lines (6543), with no line terminators
Hash e3adfa7305baa9b772b751a386ab07cb
dd4ca881327917117a02882f9cb9bd10d3afb859
3840f06ccbae438e3bff75651db3d99affb440fb3932e69036da9290317815ef
GET /cdn-cgi/apps/head/hWKZRCl_p5W3AeulawGLi1ghRvM.js HTTP/1.1
Host: 623615.flowhot.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://623615.flowhot.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Dec 2023 05:08:13 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: mptLYgu0DcuUO76bTlBk+KH+5OmqkrQOMzb9kAJofHqGSRl1CVV4ly7ls/WI3Hxen9Mqwn2YdiE=
x-amz-request-id: 4G963R903MJ4XC4A
cache-control: public, max-age=31536000
last-modified: Wed, 11 Dec 2019 13:31:58 GMT
x-amz-version-id: ESUrlvQQwNmPgiI2n2eMDNt6te85sX_N
etag: W/"ceb291a94a4e29bc8fe20512e46d29e3"
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZuWxJMLj2P6S7g6nYoRJwZH8%2BIzP3l3UeDwb2a7ukvE92h6UmT6OaTDaNeJuUseKdb7pU%2BzAE7DVsrh7Y4ExoftKbtrTfnRvZe8MFJ%2FpMn8IJKGSOcyIJ0NA1U45OyOcDil4kQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f7fdcf885693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.106200 OK 6.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.74.106:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint10:D0:ED:9A:F4:53:C8:99:DE:B6:5E:5C:04:E6:20:0B:68:7D:46:EC
ValidityMon, 20 Nov 2023 08:08:50 GMT - Mon, 12 Feb 2024 08:08:49 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 10 Dec 2023 05:08:15 GMT
date: Sun, 10 Dec 2023 05:08:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/jquery.min.js
172.64.109.10200 OK 84 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/interstitial/center_banner/2/js/jquery.min.js
IP 172.64.109.10:443
Requested by https://623615.flowhot.cc/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (32025), with CRLF line terminators
Hash 6326c600df01e3bfb9b40e1aa08176f8
6b4fb754d29b297b539bf62ba9b4eaf0f33f314a
df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3
GET /sb/ssp/interstitial/center_banner/2/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 05:08:15 GMT
content-type: application/javascript
last-modified: Mon, 23 Oct 2023 10:00:34 GMT
etag: W/"65364442-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 842886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0DM%2BtFUCfYhPHLIh06oj13E2n03h7%2B3zDu3XUktolmlsrGzFagv6pR%2FK%2Fo8ww5PLJLSWwO6xht1nAPxOtUaYU5Kq4tlAOVQv8LRaoc3diRbwm%2FkAA61Wx%2FlvQfzrqA5MpdHrp6Z008kz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8332f80a2c6b2411-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2