| cdn4521.lop3sdi5dq5.com/stream2/i-arch-400/a33a575e3da128a67ae618876bc8ca5c/MJTMsp1RshGTygnMNRUR2N2MSlnWXZEdMNDZzQWe5MDZzMmdZJTO1R2RWVHZDljekhkSsl1VwYnWtx2cihVT21EVWtmTyYFbORVTx4EVFpnWtVVNNJjVt9ERstmTE1UNOdUW4lFVVdXWUlUP:1748441789:100.27.194.8:d9fbb1cbdaf1ae70f3d5b4069afad00612ddc2c6119bdff34201afd3fccffa9c/index.m3u8 |  50.7.239.82 | 200 OK | 297 B |
URL User Request GET cdn4521.lop3sdi5dq5.com/stream2/i-arch-400/a33a575e3da128a67ae618876bc8ca5c/MJTMsp1RshGTygnMNRUR2N2MSlnWXZEdMNDZzQWe5MDZzMmdZJTO1R2RWVHZDljekhkSsl1VwYnWtx2cihVT21EVWtmTyYFbORVTx4EVFpnWtVVNNJjVt9ERstmTE1UNOdUW4lFVVdXWUlUP:1748441789:100.27.194.8:d9fbb1cbdaf1ae70f3d5b4069afad00612ddc2c6119bdff34201afd3fccffa9c/index.m3u8 IP50.7.239.82:443
CertificateIssuerLet's Encrypt Subject*.lop3sdi5dq5.com FingerprintCB:86:51:0E:45:DA:59:C3:B2:29:60:9F:54:DD:B1:AB:5E:71:12:48 ValidityMon, 26 May 2025 15:55:23 GMT - Sun, 24 Aug 2025 15:55:22 GMT
Hash8c9169ad4448d2dd6850cba2c8bf2ab9 4bf7ac961d50b4377650329db3d787f6708a145b cc7e9516dc7caf9f6c5ab9cc07b69d366da4e28724785afa08624659f70f7985
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stream2/i-arch-400/a33a575e3da128a67ae618876bc8ca5c/MJTMsp1RshGTygnMNRUR2N2MSlnWXZEdMNDZzQWe5MDZzMmdZJTO1R2RWVHZDljekhkSsl1VwYnWtx2cihVT21EVWtmTyYFbORVTx4EVFpnWtVVNNJjVt9ERstmTE1UNOdUW4lFVVdXWUlUP:1748441789:100.27.194.8:d9fbb1cbdaf1ae70f3d5b4069afad00612ddc2c6119bdff34201afd3fccffa9c/index.m3u8 HTTP/1.1
Host: cdn4521.lop3sdi5dq5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 28 May 2025 15:11:28 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
| cdn4521.lop3sdi5dq5.com/favicon.ico | 50.7.239.82 | 200 OK | 1.2 kB |
URL GET cdn4521.lop3sdi5dq5.com/favicon.ico IP50.7.239.82:443
Requested byhttps://cdn4521.lop3sdi5dq5.com/stream2/i-arch-400/a33a575e3da128a67ae618876bc8ca5c/MJTMsp1RshGTygnMNRUR2N2MSlnWXZEdMNDZzQWe5MDZzMmdZJTO1R2RWVHZDljekhkSsl1VwYnWtx2cihVT21EVWtmTyYFbORVTx4EVFpnWtVVNNJjVt9ERstmTE1UNOdUW4lFVVdXWUlUP:1748441789:100.27.194.8:d9fbb1cbdaf1ae70f3d5b4069afad00612ddc2c6119bdff34201afd3fccffa9c/index.m3u8 CertificateIssuerLet's Encrypt Subject*.lop3sdi5dq5.com FingerprintCB:86:51:0E:45:DA:59:C3:B2:29:60:9F:54:DD:B1:AB:5E:71:12:48 ValidityMon, 26 May 2025 15:55:23 GMT - Sun, 24 Aug 2025 15:55:22 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash66badd028a06b99adf2bc1ff6ae9a23d b570207c31c9d5eb7141cecb38089bca3ccacaac f28501fc64f20fb465feeb88d623deb5fc35dc1f542ec230abf995d6e83d1bac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: cdn4521.lop3sdi5dq5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn4521.lop3sdi5dq5.com/stream2/i-arch-400/a33a575e3da128a67ae618876bc8ca5c/MJTMsp1RshGTygnMNRUR2N2MSlnWXZEdMNDZzQWe5MDZzMmdZJTO1R2RWVHZDljekhkSsl1VwYnWtx2cihVT21EVWtmTyYFbORVTx4EVFpnWtVVNNJjVt9ERstmTE1UNOdUW4lFVVdXWUlUP:1748441789:100.27.194.8:d9fbb1cbdaf1ae70f3d5b4069afad00612ddc2c6119bdff34201afd3fccffa9c/index.m3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 28 May 2025 15:11:28 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Mon, 16 Jul 2018 15:38:00 GMT
etag: "5b4cbbd8-47e"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|