www.googletagmanager.com/gtag/js?id=G-BL9163LYG1
200 OK 92 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-BL9163LYG1
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 5190b47aaeb4d8d33cc98b904e7dc35e
e37f63df204fb6dd140079b23c9e463d239f642a
f3a604abd843b8aa0b56dc889a8823e9d195cdc0ae3358b07075934c8506cc94
GET /gtag/js?id=G-BL9163LYG1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 05:18:03 GMT
expires: Tue, 28 Nov 2023 05:18:03 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91749
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.depositfiles.com/images/speed_small_gold.gif
200 OK 14 kB URL GET HTTP/2 static.depositfiles.com/images/speed_small_gold.gif
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Hash c5f8f0e9ecd16637e267912376c24bed
324567a641d318ecfafe6374dfba86ccb2f90dd7
13678b229b6c4224bcb9578a2f29bc3686958f4bea73af7645eb39af4246e6a9
GET /images/speed_small_gold.gif HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=432000
content-type: image/gif
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-389c"
expires: Sun, 03 Dec 2023 05:18:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 14492
X-Firefox-Spdy: h2
static.depositfiles.com/images/speed_small.gif
200 OK 24 kB URL GET HTTP/2 static.depositfiles.com/images/speed_small.gif
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Hash 5cbc96bbb7230dd17ed38b5dd6e3271c
6ee1f0b9e29ac3e824cccd6e5135d51c8d3aaea1
01edcbb65e514def555b1e999d3a72f118f67e572f628293b91893b3758c6991
GET /images/speed_small.gif HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=432000
content-type: image/gif
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-5dac"
expires: Sun, 03 Dec 2023 05:18:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 23980
X-Firefox-Spdy: h2
static.depositfiles.com/images/no.png
200 OK 3.1 kB URL GET HTTP/2 static.depositfiles.com/images/no.png
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 1724ae7b4437c460dafe40dfe9f96d41
8dc80d5b802f180254a8ee1bf1edf0b843205f1e
9b95b8f24b2b0808d611f4fd9bf5f3c548b352ae6100ab7b298b99a86905db79
GET /images/no.png HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-c4a"
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 3146
X-Firefox-Spdy: h2
static.depositfiles.com/images/yes.png
200 OK 3.3 kB URL GET HTTP/2 static.depositfiles.com/images/yes.png
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 3055b8489aeb385fb40b27f0bf0a5ae7
4cfbe45a0ba393ab8ad535cc04af30debef0a1ab
b325d6cb153b02050e59230e2abfb01e05f4bda708ad54bd8f6d9693fa9c2dac
GET /images/yes.png HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-ccb"
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 3275
X-Firefox-Spdy: h2
static.depositfiles.com/js/jquery.validate.js
200 OK 38 kB URL GET HTTP/2 static.depositfiles.com/js/jquery.validate.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type Unicode text, UTF-8 text, with very long lines (1238)
Hash d5231b6378847ebdb55f64c77d5a234f
eed97aa0b2aa9486b6f6831ed8a85dc729ad6b9c
95434a8a2568a6481a1fbcf5808a75dd58e77348ed6d70b4f7aeda8842e8f0c7
GET /js/jquery.validate.js HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=300
content-type: application/javascript
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-957d"
expires: Tue, 28 Nov 2023 05:23:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 38269
X-Firefox-Spdy: h2
static.depositfiles.com/js/function.js
200 OK 35 kB URL GET HTTP/2 static.depositfiles.com/js/function.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type ASCII text, with very long lines (4240)
Hash a5779d2f560cd50376dbba372b0fd15b
07b08e35b9254288c1372e37577db8b9e4da01b4
51d26403861d61a7842bc73f518d4a4351a7027c40c9f0347f61421226950b84
GET /js/function.js HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=300
content-type: application/javascript
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-8863"
expires: Tue, 28 Nov 2023 05:23:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 34915
X-Firefox-Spdy: h2
dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
200 OK 16 kB URL User Request GET HTTP/2 dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
IP
Certificate IssuerLet's Encrypt
Subjectdfiles.eu
FingerprintCC:57:A8:99:82:65:9E:AE:6B:7C:68:C0:CE:7C:F7:6F:A8:6B:23:E0
ValiditySun, 05 Nov 2023 13:34:41 GMT - Sat, 03 Feb 2024 13:34:40 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a7a53de646f33c2ea2aa6cfcd21343b5
af234e8f05de502cba206ecdeba8a5ec4b338ccf
e6c29b0acc1e36657f32240c59efc8e08b7d3bcb1357dbe68be2263a9ef7a8db
GET /files/vym7ludmf/FarCry4-patch-FIX.exe HTTP/1.1
Host: dfiles.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-store, no-cache, must-revalidate
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 28 Nov 2023 05:18:03 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
server: nginx
set-cookie: PHPSESSID=7337b7b401e85e7b8d0bddbaff9f7016; path=/
last_file=vym7ludmf; path=/; domain=.dfiles.eu
lang_current=en; expires=Wed, 27-Nov-2024 05:18:03 GMT; Max-Age=31536000; path=/; domain=.dfiles.eu; secure
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
static.depositfiles.com/js/download_utils.js
200 OK 13 kB URL GET HTTP/2 static.depositfiles.com/js/download_utils.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type ASCII text, with very long lines (2250)
Hash 90a706006bc709cdc974ff3e0e01b34f
89585d2c7cac44c9c03c118bbb38aefba1d8a1e4
16f1515b9938fc7de086c504fe214484d97e237647a5d7fa2cb742a93f00c1ea
GET /js/download_utils.js HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=300
content-type: application/javascript
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-3447"
expires: Tue, 28 Nov 2023 05:23:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 13383
X-Firefox-Spdy: h2
static.depositfiles.com/js/base2.js
200 OK 399 kB URL GET HTTP/2 static.depositfiles.com/js/base2.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type Unicode text, UTF-8 text, with very long lines (65481)
Size 399 kB (398927 bytes)
Hash 2fcae8126c3fd9a626370a701f0bd887
f3496fb7bbe122a9774d7dcfcd68da03a24dc285
d29ab86f64b4fcfbc45b9ef806c147f1e42e37e37d44a559147232288063badc
GET /js/base2.js HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=300
content-type: application/javascript
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-6164f"
expires: Tue, 28 Nov 2023 05:23:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 398927
X-Firefox-Spdy: h2
relationbeehive.com/22/4a/d4/224ad4a14b4b15c1726ff705ec672ea6.js
200 OK 15 kB URL GET HTTP/1.1 relationbeehive.com/22/4a/d4/224ad4a14b4b15c1726ff705ec672ea6.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectrelationbeehive.com
Fingerprint8F:A4:74:72:DF:C0:37:EB:1D:51:03:5E:2E:D7:FC:35:D1:D8:7F:3B
ValidityTue, 14 Nov 2023 16:07:25 GMT - Mon, 12 Feb 2024 16:07:24 GMT
File type ASCII text, with very long lines (42911), with no line terminators
Hash 1c252b2ec2b7b3be5302f7b39bfb3349
61df84adaafc6d676d9130727c07ce5e3745c78c
5cd13225dcb1a015647308c94293299bb73aacff65318f59a8bf96c3bcbfc144
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /22/4a/d4/224ad4a14b4b15c1726ff705ec672ea6.js HTTP/1.1
Host: relationbeehive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 05:18:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: db0837fbe273da1d00abb17e4c6b0e4d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
static.depositfiles.com/images/upload_btn_bg.gif
200 OK 9.0 kB URL GET HTTP/2 static.depositfiles.com/images/upload_btn_bg.gif
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type GIF image data, version 89a, 209 x 75\012- data
Hash 6f312f0f4ff138758bae76420f6efd78
b40a28f162140fedff9ee5ce0d687868b1f73d17
c667d75c7f916bf8b140b0e1f7ab0c996f76d4642faed85bd9fef3c738f0912b
GET /images/upload_btn_bg.gif HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.depositfiles.com/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=432000
content-type: image/gif
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-2332"
expires: Sun, 03 Dec 2023 05:18:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 9010
X-Firefox-Spdy: h2
static.depositfiles.com/images/sprite.png
200 OK 37 kB URL GET HTTP/2 static.depositfiles.com/images/sprite.png
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type PNG image data, 102 x 630, 8-bit/color RGBA, non-interlaced\012- data
Hash 2333675d7e431d5313c6dbb5230a14cd
93c4032e5b8b85793a9cda7167804445d950dd96
b287134a60667ce8e2c3fa1603e3a8f2ffa59c64e746d026d1a13ef19f3f38a0
GET /images/sprite.png HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.depositfiles.com/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-8fc2"
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 36802
X-Firefox-Spdy: h2
static.depositfiles.com/images/member_menu_bg.gif
200 OK 78 B URL GET HTTP/2 static.depositfiles.com/images/member_menu_bg.gif
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type GIF image data, version 89a, 1 x 48\012- data
Hash 20a24b56dcedf6a71a71ebec771e1f7d
d7bed493d5d4eeaed5dbbf7d30d45107840790a0
6f57f29224d8e9e51ed0839e329055426fba7dcd97ef31e93ed495f93a6063df
GET /images/member_menu_bg.gif HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.depositfiles.com/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=432000
content-type: image/gif
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-4e"
expires: Sun, 03 Dec 2023 05:18:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 78
X-Firefox-Spdy: h2
static.depositfiles.com/images/logo.png
200 OK 3.6 kB URL GET HTTP/2 static.depositfiles.com/images/logo.png
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type PNG image data, 176 x 43, 8-bit/color RGBA, non-interlaced\012- data
Hash c41fdd84b04e45a91cb17cfdeccb1b38
fec7fffe104c7e169aeb159032078c4b71ff2cdc
7f89eb8ab03684f4db282ca30eb231b1e254bca10c7b511950df5e0eab0a68a0
GET /images/logo.png HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.depositfiles.com/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-e27"
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 3623
X-Firefox-Spdy: h2
static.depositfiles.com/images/sprite64.png
200 OK 29 kB URL GET HTTP/2 static.depositfiles.com/images/sprite64.png
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type PNG image data, 64 x 1088, 8-bit/color RGBA, non-interlaced\012- data
Hash e50649ecf6a2094c25da755ea0ea7bd1
e1c3e229a62f049442fa16cf43ec07f384b27362
a9ed59ab3bbcfdf66224664aeb14fa0f0e8f034d8472a58dadcf65cfff17685d
GET /images/sprite64.png HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.depositfiles.com/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-704b"
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 28747
X-Firefox-Spdy: h2
static.depositfiles.com/images/flags/lang24.png
200 OK 9.2 kB URL GET HTTP/2 static.depositfiles.com/images/flags/lang24.png
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type PNG image data, 24 x 552, 8-bit/color RGBA, non-interlaced\012- data
Hash efdcd1ca23d564ddd811f41152a2b83c
0b5aa064e7f8f241363c55fa17eb448f42a5f8df
ce23be242e34c5b420f8ba0390aef20fa50ffc69f700091029616eff524e8f9b
GET /images/flags/lang24.png HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.depositfiles.com/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-23d4"
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 9172
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash be558b34fdcd1351a04f194e5486f3e3
98b47187bc7d76e663b3e28d342d0c7577de5b65
6eb9561c9ffbdc905a4e723de1a31451ec1a6469eba2e1769d5b0fa738ce0c49
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:04 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dfiles.eu
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6:1:1; expires=Fri, 25 Nov 2033 05:18:04 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
static.depositfiles.com/images/sprite16.png
200 OK 28 kB URL GET HTTP/2 static.depositfiles.com/images/sprite16.png
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type PNG image data, 32 x 1072, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e86fe2d2c2650c5f4663f0fc135ebc1
ba86e14a9abcff0581eda84a307594ef1288b982
604187f8828381a47ae70249f55f21c78c53ab1401d20a5f2230a0d6c9ae50d1
GET /images/sprite16.png HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.depositfiles.com/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
date: Tue, 28 Nov 2023 05:18:05 GMT
etag: "651c240d-6f55"
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 28501
X-Firefox-Spdy: h2
loader.unblockia.com/c/dfiles.eu/config.json
200 OK 47 kB URL GET HTTP/2 loader.unblockia.com/c/dfiles.eu/config.json
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subject*.unblockia.com
FingerprintF2:6F:03:00:E3:4A:B1:87:3C:4D:28:BB:E6:CE:8F:F1:2A:6E:1B:5D
ValidityTue, 21 Feb 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (46747), with no line terminators
Hash f365c1e4619a90bbadadacf55598fe90
1623c939b72aecd3831e1da35e4c0a5229383e91
23e2e4d868bb2652b97e9e13d36df1dfeeba338d4e9c4d1d737fba6b2b2b2d52
GET /c/dfiles.eu/config.json HTTP/1.1
Host: loader.unblockia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfiles.eu/
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 46747
last-modified: Fri, 09 Jun 2023 09:20:17 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: trENJHq0I9QxpCJnwtrkDFWJYsxIhjKV
accept-ranges: bytes
server: AmazonS3
date: Mon, 27 Nov 2023 21:17:37 GMT
etag: "f365c1e4619a90bbadadacf55598fe90"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: skkXUt8DcH3dDKSZnHkwKkol59nL61QIKtRFIfUSNFHd4huyhR8oDQ==
age: 28829
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
js.capndr.com/advertising.js
200 OK 0 B URL GET HTTP/2 js.capndr.com/advertising.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectjs.capndr.com
FingerprintD9:9C:A9:BD:64:40:4E:C3:80:FB:C1:63:4D:D6:8F:A9:F7:83:AC:F4
ValidityTue, 24 Oct 2023 01:02:38 GMT - Mon, 22 Jan 2024 01:02:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertising.js HTTP/1.1
Host: js.capndr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 14 Jul 2023 08:23:25 GMT
etag: "64b105fd-0"
expires: Tue, 28 Nov 2023 05:23:05 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
na.nawpush.com/tags/46445?version_name=b
200 OK 579 B URL GET HTTP/2 na.nawpush.com/tags/46445?version_name=b
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectna.nawpush.com
Fingerprint8C:2E:22:07:AE:F4:F7:8F:AD:5A:46:5B:78:EB:DA:1F:3A:20:F9:72
ValiditySat, 30 Sep 2023 23:02:10 GMT - Fri, 29 Dec 2023 23:02:09 GMT
File type JSON data\012- , ASCII text, with very long lines (579), with no line terminators
Hash 0bb9c6e874901156bf0a0dbcf7f36553
836c18d0d2422f34857133d976d3a5001b0c5f65
761dd4e9b4acfa5254039af128e2581badd9568fc8a2558ade0ca36893c602fd
GET /tags/46445?version_name=b HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:05 GMT
content-type: application/json
content-length: 579
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: EXPIRED
access-control-allow-origin: *
X-Firefox-Spdy: h2
adsbb.dfiles.eu/static/js/jquery-1.5.1.min.js
85 kB URL adsbb.dfiles.eu/static/js/jquery-1.5.1.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65168)
Hash b04a3bccd23ddeb7982143707a63ccf9
4a5dc1389aad050a44ee5e81408238a317ab3413
764b9e9f3ad386aaa5cdeae9368353994de61c0bede087c8f7e3579cb443de3b
GET /static/js/jquery-1.5.1.min.js HTTP/1.1
Host: adsbb.dfiles.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adsbb.dfiles.eu/upload/2112/ad27582685f5c72c.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
Cookie: last_file=vym7ludmf; lang_current=en; _ga_BL9163LYG1=GS1.1.1701148688.1.0.1701148688.0.0.0; _ga=GA1.1.1627381501.1701148688; _nf56=1; _nf58=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: no-cache, private, no-cache, no-store, must-revalidate
content-type: application/javascript
date: Tue, 28 Nov 2023 05:18:05 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
pragma: no-cache
server: nginx
content-length: 85260
X-Firefox-Spdy: h2
js.wpadmngr.com/static/adManager.m.js
200 OK 137 kB URL GET HTTP/2 js.wpadmngr.com/static/adManager.m.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectjs.wpadmngr.com
FingerprintAC:C2:DC:B6:95:8A:52:42:68:CB:0F:19:3F:56:A9:E9:1F:E6:04:8C
ValiditySun, 12 Nov 2023 03:01:15 GMT - Sat, 10 Feb 2024 03:01:14 GMT
File type gzip compressed data, from Unix\012- data
Size 137 kB (136601 bytes)
Hash aca41a4224cc0ef29354646634c2d40f
6437ed8509ecc1a42f97f8b5062710bf153a7f23
8e068fc74219e577a896cf8f7f018e5d7e0e9f81f68b18654448f098080d95a2
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Mon, 27 Nov 2023 15:25:28 GMT
etag: W/"6564b4e8-288c0"
content-encoding: gzip
expires: Tue, 28 Nov 2023 05:23:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
adsbb.dfiles.eu/view.gif?c=2685&z=56&b=2758&u=65657755952bf37889990195151946
43 B URL adsbb.dfiles.eu/view.gif?c=2685&z=56&b=2758&u=65657755952bf37889990195151946
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /view.gif?c=2685&z=56&b=2758&u=65657755952bf37889990195151946 HTTP/1.1
Host: adsbb.dfiles.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://adsbb.dfiles.eu/upload/2112/ad27582685f5c72c.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
Cookie: last_file=vym7ludmf; lang_current=en; _ga_BL9163LYG1=GS1.1.1701148688.1.0.1701148688.0.0.0; _ga=GA1.1.1627381501.1701148688; _nf56=1; _nf58=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: no-cache, private, no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 28 Nov 2023 05:18:05 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
pragma: no-cache
server: nginx
content-length: 43
X-Firefox-Spdy: h2
adsbb.dfiles.eu/view.gif?c=2973&z=58&b=2775&u=65657755a5afa3470860514521573
43 B URL adsbb.dfiles.eu/view.gif?c=2973&z=58&b=2775&u=65657755a5afa3470860514521573
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /view.gif?c=2973&z=58&b=2775&u=65657755a5afa3470860514521573 HTTP/1.1
Host: adsbb.dfiles.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://adsbb.dfiles.eu/upload/2303/ad2775297311915a.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
Cookie: last_file=vym7ludmf; lang_current=en; _ga_BL9163LYG1=GS1.1.1701148688.1.0.1701148688.0.0.0; _ga=GA1.1.1627381501.1701148688; _nf56=1; _nf58=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: no-cache, private, no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 28 Nov 2023 05:18:05 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
pragma: no-cache
server: nginx
content-length: 43
X-Firefox-Spdy: h2
static.depositfiles.com/images/favicon.ico
200 OK 318 B URL GET HTTP/2 static.depositfiles.com/images/favicon.ico
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data
Hash 0f0b975ee529197ec75780ebc2de5907
59688c6aafca5606e388ba9a44fc9dc25fc32cd3
28a0b52229f05b66354ca38b6b813d2281af3efb7e8b0a424ef8b4c68b9e583c
GET /images/favicon.ico HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/x-icon
date: Tue, 28 Nov 2023 05:18:05 GMT
etag: "651c240d-13e"
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 318
X-Firefox-Spdy: h2
jsc.mgid.com/d/e/depositfiles.com.7998.es6.js
286 kB URL jsc.mgid.com/d/e/depositfiles.com.7998.es6.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (50989)
Size 286 kB (286014 bytes)
Hash 36c6c206f2313835fabd7c92f1137f61
1d0308af91f57894afd21d6b03be1ca6f57d380f
9ce6a060afe42e6925e0d38d12e46609dbfa97bcfa7533404345182405af5794
GET /d/e/depositfiles.com.7998.es6.js HTTP/1.1
Host: jsc.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://adsbb.dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://adsbb.dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 05:18:05 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=321140
etag: W/"100374332c021cf08c28c88627e1c279"
last-modified: Thu, 23 Nov 2023 14:12:59 GMT
x-amz-id-2: n2vNa7rYcxrfW+OEusYSc4aF5mYqWblNovVHzADBw0YArlJr1lpeRVGp1UQjTZB3Z18a0gY/8Oc=
x-amz-request-id: PMV7EK6CJ258PBBE
x-amz-server-side-encryption: AES256
x-amz-version-id: IA0wWGQE5kHL8rSI0DK4szkoHwP1V9Xv
cf-cache-status: HIT
age: 393
expires: Tue, 28 Nov 2023 08:18:05 GMT
cache-control: public, max-age=10800
set-cookie: __cf_bm=FfkRGnt6Y6hBPV8YYP8WyoagClVnsGadnS2xRMHOc_0-1701148685-0-AVezjVlzvuk53JFpsaal3e2djUotvb7THjc177reFAtpTmiWXQrwxHIcrNM0ZBDR7+zY9BnpbWXgjAEmyf4n3n0=; path=/; expires=Tue, 28-Nov-23 05:48:05 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
server: cloudflare
cf-ray: 82d025f428c5b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c.mgid.com/pv/?lu=https%3A%2F%2Fdfiles.eu%2Ffiles%2Fvym7ludmf%2FFarCry4-patch-FIX.exe&cbuster=1701148689434921942257&pvid=18c145d0419a802686c&implVersion=11&cxurl=https%3A%2F%2Fdfiles.eu%2Ffiles%2Fvym7ludmf%2FFarCry4-patch-FIX.exe&site=437&i=1
43 B URL c.mgid.com/pv/?lu=https%3A%2F%2Fdfiles.eu%2Ffiles%2Fvym7ludmf%2FFarCry4-patch-FIX.exe&cbuster=1701148689434921942257&pvid=18c145d0419a802686c&implVersion=11&cxurl=https%3A%2F%2Fdfiles.eu%2Ffiles%2Fvym7ludmf%2FFarCry4-patch-FIX.exe&site=437&i=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /pv/?lu=https%3A%2F%2Fdfiles.eu%2Ffiles%2Fvym7ludmf%2FFarCry4-patch-FIX.exe&cbuster=1701148689434921942257&pvid=18c145d0419a802686c&implVersion=11&cxurl=https%3A%2F%2Fdfiles.eu%2Ffiles%2Fvym7ludmf%2FFarCry4-patch-FIX.exe&site=437&i=1 HTTP/1.1
Host: c.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://adsbb.dfiles.eu/
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=h_wb3Ad6V3aoaHHPELNz.TdGgn7u0l8LohxZVfJpDR0-1701148685-0-AZ80pF7faGRyVAFCJE37ZtJ8lime+NGdHd0z991aX9B+58a666zJSeRcXPg+sOcD06YpkUhL/lOnn0LM3yLxafQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 05:18:05 GMT
content-type: image/gif
content-length: 43
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 82d025f52f7156c4-OSL
alt-svc: h3=":443"; ma=86400
stalerestaurant.com/c2/2d/c5/c22dc50dc2bbe4422c7f68d26ab95eb9.js
200 OK 25 kB URL GET HTTP/1.1 stalerestaurant.com/c2/2d/c5/c22dc50dc2bbe4422c7f68d26ab95eb9.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectstalerestaurant.com
FingerprintE7:83:A0:D8:9E:3B:62:0F:2B:95:DA:66:E1:B6:CD:20:EB:7A:B8:B3
ValidityTue, 07 Nov 2023 07:44:19 GMT - Mon, 05 Feb 2024 07:44:18 GMT
File type ASCII text, with very long lines (62451), with no line terminators
Hash 1b2f60576a8987a1367e5e7942ce09c3
ec9a486838ed71676a26de69104e7d1c27e30864
77780d5bf7f6a4b156abfe507bf3f83e46817e202ce9516990ae9ae012ac1a31
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /c2/2d/c5/c22dc50dc2bbe4422c7f68d26ab95eb9.js HTTP/1.1
Host: stalerestaurant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 05:18:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2c08e358074c3bbb7ae6f282d0822eaf
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash be558b34fdcd1351a04f194e5486f3e3
98b47187bc7d76e663b3e28d342d0c7577de5b65
6eb9561c9ffbdc905a4e723de1a31451ec1a6469eba2e1769d5b0fa738ce0c49
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Cookie: uid_id2=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:05 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dfiles.eu
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
stalerestaurant.com/sbar.json?key=224ad4a14b4b15c1726ff705ec672ea6
200 OK 3.2 kB URL GET HTTP/1.1 stalerestaurant.com/sbar.json?key=224ad4a14b4b15c1726ff705ec672ea6
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectstalerestaurant.com
FingerprintE7:83:A0:D8:9E:3B:62:0F:2B:95:DA:66:E1:B6:CD:20:EB:7A:B8:B3
ValidityTue, 07 Nov 2023 07:44:19 GMT - Mon, 05 Feb 2024 07:44:18 GMT
File type JSON data\012- , ASCII text, with very long lines (5814), with no line terminators
Hash f9e04e1f9a1098a0bec7a490a2007092
f349b42b996f182d648ba519e6f891f8513153bc
46dbea4b984bba50f6fd0fdf26b5348f143045b63b5c51f1dfc3e8f7b2b6e499
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=224ad4a14b4b15c1726ff705ec672ea6 HTTP/1.1
Host: stalerestaurant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 05:18:05 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://dfiles.eu
Access-Control-Allow-Origin: https://dfiles.eu
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16004719; expires=Wed, 29 Nov 2023 05:18:05 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 05:18:05 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 05:18:05 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 29 Nov 2023 05:18:05 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 29 Nov 2023 05:18:05 GMT; secure; SameSite=None
slec224ad4a14b4b15c1726ff705ec672ea6=[4766299]; expires=Tue, 28 Nov 2023 05:18:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 856c78252e3382390a5e6b726127b4e9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cousinscostsalready.com/pixel/purst?dl=0&th=0&sc=0&rs=2327&rd=2327&fd=949&bv=23.11.v.8&tmpl=136
200 OK 0 B URL GET HTTP/1.1 cousinscostsalready.com/pixel/purst?dl=0&th=0&sc=0&rs=2327&rd=2327&fd=949&bv=23.11.v.8&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectcousinscostsalready.com
Fingerprint47:76:E8:2B:BB:A7:7C:89:F2:C7:27:B7:F5:F3:60:61:15:94:83:37
ValiditySat, 25 Nov 2023 07:53:32 GMT - Fri, 23 Feb 2024 07:53:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2327&rd=2327&fd=949&bv=23.11.v.8&tmpl=136 HTTP/1.1
Host: cousinscostsalready.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 05:18:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash be558b34fdcd1351a04f194e5486f3e3
98b47187bc7d76e663b3e28d342d0c7577de5b65
6eb9561c9ffbdc905a4e723de1a31451ec1a6469eba2e1769d5b0fa738ce0c49
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Cookie: uid_id2=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:06 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dfiles.eu
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash be558b34fdcd1351a04f194e5486f3e3
98b47187bc7d76e663b3e28d342d0c7577de5b65
6eb9561c9ffbdc905a4e723de1a31451ec1a6469eba2e1769d5b0fa738ce0c49
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Cookie: uid_id2=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:06 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://dfiles.eu
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
cdn.unblockia.com/autopromos/unicef2.jpg?unblockia=true
200 OK 37 kB URL GET HTTP/2 cdn.unblockia.com/autopromos/unicef2.jpg?unblockia=true
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subject*.unblockia.com
FingerprintF2:6F:03:00:E3:4A:B1:87:3C:4D:28:BB:E6:CE:8F:F1:2A:6E:1B:5D
ValidityTue, 21 Feb 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 728x90, components 3\012- data
Hash 58fbb6ffe72ac0c1aa468de39ee18e13
d25230f1ef89aecc6048b0ceb09dd0af609ee7b6
e8ff7f3a8926e5b5497d2ab7a1bf47c5655e287a51045f11846f426ac6c7d180
GET /autopromos/unicef2.jpg?unblockia=true HTTP/1.1
Host: cdn.unblockia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 36773
last-modified: Tue, 12 Apr 2022 08:41:28 GMT
x-amz-version-id: xUurxjfnscsyJn430NFsrgfbabIFowSl
accept-ranges: bytes
server: AmazonS3
date: Mon, 27 Nov 2023 21:41:11 GMT
etag: "58fbb6ffe72ac0c1aa468de39ee18e13"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H3QhrZs784Enr0JOb3pP9lnSpRmjIEmxVBIk1YV9CKF_Sb6d6nqeWw==
age: 36109
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.unblockia.com/autopromos/unicef3.jpg?unblockia=true
200 OK 54 kB URL GET HTTP/2 cdn.unblockia.com/autopromos/unicef3.jpg?unblockia=true
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subject*.unblockia.com
FingerprintF2:6F:03:00:E3:4A:B1:87:3C:4D:28:BB:E6:CE:8F:F1:2A:6E:1B:5D
ValidityTue, 21 Feb 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 160x600, components 3\012- data
Hash 5dcf47442fc7fbb8d0263bbf4869537e
2c8232ac93448bbc06b5464f1839a5cdb2ed3e07
81804a1b2b20350ec009ba6429a4f58124c16ca30683af0af255544cd98c8fa6
GET /autopromos/unicef3.jpg?unblockia=true HTTP/1.1
Host: cdn.unblockia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 54292
last-modified: Tue, 12 Apr 2022 08:41:27 GMT
x-amz-version-id: iA22.ytP0i4dmuIhnc0eyNVgJlt2K4fl
accept-ranges: bytes
server: AmazonS3
date: Mon, 27 Nov 2023 06:42:55 GMT
etag: "5dcf47442fc7fbb8d0263bbf4869537e"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kUrPAxo1sfWYDi42vZCjV8VaJsRIlUUCU8mhVM2RuVQX_qrO1-C8cA==
age: 81312
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
stalerestaurant.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3o0n3cPqXgSFOa4gk%2B6ZnpmMe1iMa9ZgTOL%2BkIOn%2ButJmequpqp7ejJegguyxxE8eOy8STaoy7LrURBk4kUCQsaD5GBAvO9F2bPMZGD0g%2B7vve%2FV4b2v6ov9%2FJz4yOnZ5kemr7Smi42qX7m%2BpRJhCldZv1cJ%2FKp%2Fo7KlkmZ4o9Kb%2FGz3ncBvVP23Krcl3zGLNT%2Fw%2FcAPKivKysj0FqcqVPq4HVTbfjWsVYNGiJ79P3e5B0c9iO45eRVKjF%2Fa%2FuUZFB8hiZ%2Fekm4nM%2Bnb78e5ppmx6Iqj%2B8lOYooE8RxG1kOUHM1Ow7gxIV9fgkmOZglgugeTBGBqTLzfA7DkaGYTrHt44ZRpyARMvIyiO4LUIyg6AjcPoMQpAbjA%2BgaS%2BNG6sQXdvVDpRB2ThRd%2FQxVjsvDHNSTxk2WtepW7RueZMolDLyqheiOozghpfoys70EVx%2BDZ51DiV7L4Yg1JfLDhtIES5TS9UiOoaAQtB6DOQz75lIc88pCnHmJxVqGNduT7rYhF9fpSyDmv1zlvLDVFQ9TDpchHzif2BsjSAbgegNs9pHYPO2oAm%2F8Et13CCQ8uGxPv4z10RYlCEhSOoKAEhSIoMoKiWx4K7WqufCS0y1kw67VZr5dDk3X26aHJOjIh%2B%2Bk5uTrdyz9Ngx15VqnVQipCGoQsZEGDB61aM4pafkPyZqsmaRNOlVDu0jRqX52%2BliJVp6%2B8AUaP4fQxuLoKmr8JWgxbNR90exgu%2BegnT4VMjVNZpLR0VW5iCFMizRaQ7Xr7%2Bpy8PvXxwQ%2BfQPKTm1%2F1%2F7z95Npn4LZEakt8qn4m6OiHwzumIAd3TOHIs400U7Hq08nd3c1oJi9%2F%2B6HcLYwVq7fc4Jt3%2BUSYwMf3pMvWaCJU0nHku2UlhLQrxnJJflx1W5Jt5m57ObdJnq5tvreyGqdWOqdMMgJVY0Kefw%2BuxuTKczd9l9fv%2FwVlR7B5iTg%2FIbOCMsfg6R5cOp85Q2D1nLPUQ5GXQ1tj86FWBFrOOWUl3H84m%2BN99xAd64FmD5DEJbq2RFeXoHoAl18eZqk9uflbfVpg2hsybb0Dpq3%2B8mK5Tp1VZCPyI%2BnXJIvaLGpRX7SjsM1oO5At1qABMjeWsnflXwAAAP%2F%2FAQAA%2F%2F%2BuLsoCbwQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 stalerestaurant.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3o0n3cPqXgSFOa4gk%2B6ZnpmMe1iMa9ZgTOL%2BkIOn%2ButJmequpqp7ejJegguyxxE8eOy8STaoy7LrURBk4kUCQsaD5GBAvO9F2bPMZGD0g%2B7vve%2FV4b2v6ov9%2FJz4yOnZ5kemr7Smi42qX7m%2BpRJhCldZv1cJ%2FKp%2Fo7KlkmZ4o9Kb%2FGz3ncBvVP23Krcl3zGLNT%2Fw%2FcAPKivKysj0FqcqVPq4HVTbfjWsVYNGiJ79P3e5B0c9iO45eRVKjF%2Fa%2FuUZFB8hiZ%2Fekm4nM%2Bnb78e5ppmx6Iqj%2B8lOYooE8RxG1kOUHM1Ow7gxIV9fgkmOZglgugeTBGBqTLzfA7DkaGYTrHt44ZRpyARMvIyiO4LUIyg6AjcPoMQpAbjA%2BgaS%2BNG6sQXdvVDpRB2ThRd%2FQxVjsvDHNSTxk2WtepW7RueZMolDLyqheiOozghpfoys70EVx%2BDZ51DiV7L4Yg1JfLDhtIES5TS9UiOoaAQtB6DOQz75lIc88pCnHmJxVqGNduT7rYhF9fpSyDmv1zlvLDVFQ9TDpchHzif2BsjSAbgegNs9pHYPO2oAm%2F8Et13CCQ8uGxPv4z10RYlCEhSOoKAEhSIoMoKiWx4K7WqufCS0y1kw67VZr5dDk3X26aHJOjIh%2B%2Bk5uTrdyz9Ngx15VqnVQipCGoQsZEGDB61aM4pafkPyZqsmaRNOlVDu0jRqX52%2BliJVp6%2B8AUaP4fQxuLoKmr8JWgxbNR90exgu%2BegnT4VMjVNZpLR0VW5iCFMizRaQ7Xr7%2Bpy8PvXxwQ%2BfQPKTm1%2F1%2F7z95Npn4LZEakt8qn4m6OiHwzumIAd3TOHIs400U7Hq08nd3c1oJi9%2F%2B6HcLYwVq7fc4Jt3%2BUSYwMf3pMvWaCJU0nHku2UlhLQrxnJJflx1W5Jt5m57ObdJnq5tvreyGqdWOqdMMgJVY0Kefw%2BuxuTKczd9l9fv%2FwVlR7B5iTg%2FIbOCMsfg6R5cOp85Q2D1nLPUQ5GXQ1tj86FWBFrOOWUl3H84m%2BN99xAd64FmD5DEJbq2RFeXoHoAl18eZqk9uflbfVpg2hsybb0Dpq3%2B8mK5Tp1VZCPyI%2BnXJIvaLGpRX7SjsM1oO5At1qABMjeWsnflXwAAAP%2F%2FAQAA%2F%2F%2BuLsoCbwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectstalerestaurant.com
FingerprintE7:83:A0:D8:9E:3B:62:0F:2B:95:DA:66:E1:B6:CD:20:EB:7A:B8:B3
ValidityTue, 07 Nov 2023 07:44:19 GMT - Mon, 05 Feb 2024 07:44:18 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3o0n3cPqXgSFOa4gk%2B6ZnpmMe1iMa9ZgTOL%2BkIOn%2ButJmequpqp7ejJegguyxxE8eOy8STaoy7LrURBk4kUCQsaD5GBAvO9F2bPMZGD0g%2B7vve%2FV4b2v6ov9%2FJz4yOnZ5kemr7Smi42qX7m%2BpRJhCldZv1cJ%2FKp%2Fo7KlkmZ4o9Kb%2FGz3ncBvVP23Krcl3zGLNT%2Fw%2FcAPKivKysj0FqcqVPq4HVTbfjWsVYNGiJ79P3e5B0c9iO45eRVKjF%2Fa%2FuUZFB8hiZ%2Fekm4nM%2Bnb78e5ppmx6Iqj%2B8lOYooE8RxG1kOUHM1Ow7gxIV9fgkmOZglgugeTBGBqTLzfA7DkaGYTrHt44ZRpyARMvIyiO4LUIyg6AjcPoMQpAbjA%2BgaS%2BNG6sQXdvVDpRB2ThRd%2FQxVjsvDHNSTxk2WtepW7RueZMolDLyqheiOozghpfoys70EVx%2BDZ51DiV7L4Yg1JfLDhtIES5TS9UiOoaAQtB6DOQz75lIc88pCnHmJxVqGNduT7rYhF9fpSyDmv1zlvLDVFQ9TDpchHzif2BsjSAbgegNs9pHYPO2oAm%2F8Et13CCQ8uGxPv4z10RYlCEhSOoKAEhSIoMoKiWx4K7WqufCS0y1kw67VZr5dDk3X26aHJOjIh%2B%2Bk5uTrdyz9Ngx15VqnVQipCGoQsZEGDB61aM4pafkPyZqsmaRNOlVDu0jRqX52%2BliJVp6%2B8AUaP4fQxuLoKmr8JWgxbNR90exgu%2BegnT4VMjVNZpLR0VW5iCFMizRaQ7Xr7%2Bpy8PvXxwQ%2BfQPKTm1%2F1%2F7z95Npn4LZEakt8qn4m6OiHwzumIAd3TOHIs400U7Hq08nd3c1oJi9%2F%2B6HcLYwVq7fc4Jt3%2BUSYwMf3pMvWaCJU0nHku2UlhLQrxnJJflx1W5Jt5m57ObdJnq5tvreyGqdWOqdMMgJVY0Kefw%2BuxuTKczd9l9fv%2FwVlR7B5iTg%2FIbOCMsfg6R5cOp85Q2D1nLPUQ5GXQ1tj86FWBFrOOWUl3H84m%2BN99xAd64FmD5DEJbq2RFeXoHoAl18eZqk9uflbfVpg2hsybb0Dpq3%2B8mK5Tp1VZCPyI%2BnXJIvaLGpRX7SjsM1oO5At1qABMjeWsnflXwAAAP%2F%2FAQAA%2F%2F%2BuLsoCbwQAAA%3D%3D HTTP/1.1
Host: stalerestaurant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Cookie: u_pl=16004719; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 05:18:06 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 37f2cbd6de9b35f920835b8b34303e8f
Strict-Transport-Security: max-age=0; includeSubdomains
t.unblockia.com/?sid=140&o=1&b=2&p=1&t=1
200 OK 0 B URL POST HTTP/2 t.unblockia.com/?sid=140&o=1&b=2&p=1&t=1
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subject*.unblockia.com
FingerprintF2:6F:03:00:E3:4A:B1:87:3C:4D:28:BB:E6:CE:8F:F1:2A:6E:1B:5D
ValidityTue, 21 Feb 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?sid=140&o=1&b=2&p=1&t=1 HTTP/1.1
Host: t.unblockia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
content-type: application/json
content-length: 0
server: nginx/1.20.0
date: Tue, 28 Nov 2023 05:18:06 GMT
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ik-imYxUts8sbdT5C0eNZsppx3RHjjmg-cF0Ql7qnSyKpU2jTuctBw==
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
81e98c5a38.aac585e70c.com/in/track?data=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
200 OK 0 B URL GET HTTP/2 81e98c5a38.aac585e70c.com/in/track?data=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
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subject81e98c5a38.aac585e70c.com
FingerprintEA:A3:A3:F4:67:13:C0:3C:DE:06:1B:0A:FA:48:CF:D7:18:CF:46:0E
ValiditySat, 25 Nov 2023 02:50:26 GMT - Fri, 23 Feb 2024 02:50:25 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /in/track?data=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 HTTP/1.1
Host: 81e98c5a38.aac585e70c.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:06 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=46445
200 OK 0 B URL POST HTTP/1.1 fp.metricswpsh.com/fp?tag_id=46445
IP
ASN #24940 Hetzner Online GmbH
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3
ValidityThu, 09 Nov 2023 09:29:43 GMT - Wed, 07 Feb 2024 09:29:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=46445 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://dfiles.eu/
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Tue, 28 Nov 2023 05:18:06 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://dfiles.eu
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
ntvpforever.com/keywords
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3
ValidityThu, 09 Nov 2023 09:29:43 GMT - Wed, 07 Feb 2024 09:29:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /keywords HTTP/1.1
Host: ntvpforever.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://dfiles.eu/
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.20.1
date: Tue, 28 Nov 2023 05:18:06 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
ntvpforever.com/keywords
200 OK 15 B IP
ASN #24940 Hetzner Online GmbH
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3
ValidityThu, 09 Nov 2023 09:29:43 GMT - Wed, 07 Feb 2024 09:29:42 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 32323194b8b07fd0aa9b6f7fc79a7b30
ea248c45722bff267b55a453dc794bc42171cef6
080040b4937f3f423f32cd7f19b2a79ba1e1e213f1d9f4f4db4f609d4ad778d8
POST /keywords HTTP/1.1
Host: ntvpforever.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 340
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 28 Nov 2023 05:18:06 GMT
content-type: application/json
content-length: 15
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
fp.metricswpsh.com/fp?tag_id=46445
200 OK 58 B URL POST HTTP/1.1 fp.metricswpsh.com/fp?tag_id=46445
IP
ASN #24940 Hetzner Online GmbH
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectnotification.tubecup.net
Fingerprint0D:7A:7C:53:DB:15:35:28:E9:E6:2B:90:43:BB:EF:E5:AB:BE:DA:E3
ValidityThu, 09 Nov 2023 09:29:43 GMT - Wed, 07 Feb 2024 09:29:42 GMT
File type JSON data\012- , ASCII text
Hash 49cb75c0da6be8cc97daea0ae2498649
1dd230c3f22a2308b9c091fe1e952b5e8d44bc88
3f61f6927c8c29196e623750a164dcd6895cc2dc3a592ccc5d755b3d4d407841
POST /fp?tag_id=46445 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 23170
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 28 Nov 2023 05:18:07 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://dfiles.eu
Set-Cookie: id=4968001215794938832; Expires=Wed, 27 Nov 2024 05:18:07 GMT; Secure; SameSite=None
Vary: Origin
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
200 OK 591 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:07 GMT
content-type: image/png
content-length: 591
last-modified: Mon, 21 Feb 2022 10:06:44 GMT
etag: "62136434-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1291007
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ODwg3Dguqg%2BAyIbkBTfM7Dfiw6SBe%2FRL2TlrTCEiqdWbXN%2F4iaFb0ocq9aig822KdKkioahUpQA2sZ5u8kgN%2FV0E927wcvkpufJmK9wHjTu4D38dp1jZJ5dG625fIJa8c%2FIvDPpodYNB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d025fe58e560fa-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
200 OK 9.0 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a56f06ca83ee06488a213b352e00bd90
aec437b74eb6f1143683872fb2d664286da4a664
7144c526762a9d91bdde1939194c2835f2cb1afe0ebac298bbdf1e9239b539ec
GET /si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:07 GMT
content-type: image/png
content-length: 9016
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:51:52 GMT
etag: "655b7288-2338"
expires: Thu, 30 Nov 2023 05:18:07 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
200 OK 20 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash ea31001ce8fa95eb2ac1617515105332
d505ca04808c25cfa33a555c96886f421ddbbde7
0267f5cd21fe5609405724c20d6f021b8932a696ada766b8e86e42c670000ab3
GET /si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:07 GMT
content-type: image/png
content-length: 20001
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:52:40 GMT
etag: "655b72b8-4e21"
expires: Thu, 30 Nov 2023 05:18:07 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=224ad4a14b4b15c1726ff705ec672ea6&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=224ad4a14b4b15c1726ff705ec672ea6&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=224ad4a14b4b15c1726ff705ec672ea6&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 05:18:07 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a8faa0934ad4316eb80107da493b9b01
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=c22dc50dc2bbe4422c7f68d26ab95eb9&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=c22dc50dc2bbe4422c7f68d26ab95eb9&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=b4fc37b2-2250-4fc1-9e03-cbdf4ac530e6&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=c22dc50dc2bbe4422c7f68d26ab95eb9&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=5 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 05:18:07 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7f17ee28469690f0907c1ac0fb989144
Strict-Transport-Security: max-age=0; includeSubdomains
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:53:27 GMT
expires: Fri, 22 Nov 2024 04:53:27 GMT
cache-control: public, max-age=31536000
age: 433480
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:57:34 GMT
expires: Fri, 22 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 433233
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css
200 OK 4.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/animate.css
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/ssp/vpn/classic-push/big1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:07 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:06:42 GMT
etag: W/"62136432-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RkBMjLNNHHvJPJIU%2FOXsQA68%2F3twmkDOrQBZvlcK6rg6aR6NIm8ahHpN86EvLsYiHNIcsh1NYyRwGrmYHdR%2BuUeTkvrAw40l8efInGSQqTZKgv75mpdKTEluZj7vVVvWQ3TNPqihvfvb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d025fe18c360fa-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
stalerestaurant.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 stalerestaurant.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectstalerestaurant.com
FingerprintE7:83:A0:D8:9E:3B:62:0F:2B:95:DA:66:E1:B6:CD:20:EB:7A:B8:B3
ValidityTue, 07 Nov 2023 07:44:19 GMT - Mon, 05 Feb 2024 07:44:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: stalerestaurant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Cookie: u_pl=16004719; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 05:18:07 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
adsbb.dfiles.eu//ad.php?z=58&c=NO&g=gateway
303 See Other 1.5 kB URL GET HTTP/2 adsbb.dfiles.eu//ad.php?z=58&c=NO&g=gateway
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdfiles.eu
FingerprintCC:57:A8:99:82:65:9E:AE:6B:7C:68:C0:CE:7C:F7:6F:A8:6B:23:E0
ValiditySun, 05 Nov 2023 13:34:41 GMT - Sat, 03 Feb 2024 13:34:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //ad.php?z=58&c=NO&g=gateway HTTP/1.1
Host: adsbb.dfiles.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Cookie: last_file=vym7ludmf; lang_current=en; _ga_BL9163LYG1=GS1.1.1701148688.1.0.1701148688.0.0.0; _ga=GA1.1.1627381501.1701148688
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
content-security-policy: frame-ancestors depositfiles.com depositfiles.org dfiles.eu dfiles.com
content-type: text/html; charset=UTF-8
date: Tue, 28 Nov 2023 05:18:05 GMT
location: /upload/2303/ad2775297311915a.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
server: nginx
set-cookie: _nf58=1; expires=Wed, 29-Nov-2023 05:18:04 GMT; Max-Age=86400
x-powered-by: PHP/5.6.30-0+deb8u1
X-Firefox-Spdy: h2
static.depositfiles.com/css/main.css
200 OK 194 kB URL GET HTTP/2 static.depositfiles.com/css/main.css
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
Size 194 kB (194436 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/main.css HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=300
content-encoding: gzip
content-type: text/css
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: W/"6545effd-2f784"
expires: Tue, 28 Nov 2023 05:23:04 GMT
last-modified: Sat, 04 Nov 2023 07:17:17 GMT
server: nginx
X-Firefox-Spdy: h2
static.depositfiles.com/js/gold_offer.js
200 OK 9.9 kB URL GET HTTP/2 static.depositfiles.com/js/gold_offer.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdepositfiles.com
FingerprintCC:58:6C:73:8E:64:B8:52:23:86:28:DD:7F:A1:B4:56:B5:95:D2:EF
ValiditySun, 05 Nov 2023 13:35:24 GMT - Sat, 03 Feb 2024 13:35:23 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (10800), with no line terminators
Hash 50fb5af30b8fb94919c36fbf187b3bcd
a25216d9e1eab6a8aabab541d46dbd475f5094f2
555130316db9cbcd301622a984bca9165123a541e34b0e6ba274d37703103bdf
GET /js/gold_offer.js HTTP/1.1
Host: static.depositfiles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=300
content-type: application/javascript
date: Tue, 28 Nov 2023 05:18:04 GMT
etag: "651c240d-269f"
expires: Tue, 28 Nov 2023 05:23:04 GMT
last-modified: Tue, 03 Oct 2023 14:24:13 GMT
server: nginx
content-length: 9887
X-Firefox-Spdy: h2
storage.multstorage.com/log/count.html
200 OK 882 B URL GET HTTP/2 storage.multstorage.com/log/count.html
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subjectmultstorage.com
Fingerprint1F:90:8C:BB:6B:B0:99:41:3A:23:DF:A4:57:1A:25:0F:88:BA:C6:DE
ValidityMon, 20 Nov 2023 10:07:51 GMT - Sun, 18 Feb 2024 10:07:50 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (919), with no line terminators
Hash 053b1fe641da8057571d40ebaf1624ab
09b2648b7d08c84621298f0b939cea5170a65022
6606334874a3edb8295831f41d3684433e4553ffe0a72e58c90926e00f39c6a4
GET /log/count.html HTTP/1.1
Host: storage.multstorage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:06 GMT
content-type: text/html
last-modified: Mon, 18 Sep 2023 14:39:06 GMT
vary: Accept-Encoding
x-request-id: 8d3b3b9aaf2b95808f45ca5e39824cca
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fHOb2a0shWITv8hvtPf5whfZIT%2FngqXh2QhNwitgpOfaCrQ4GGo%2F3LiKMje3N164fORGbVXth6XdSxFp6Q2o%2Ff9i38aB1dNDNqSh2j70AFhGN%2BzbjOYH%2BEfUlNt3wPJqz3nR6DkGSCB%2FRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d025fb09acb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Nov 2023 05:18:05 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: dab4a5fff34f451b55bbd0f0e48bc764
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 05:18:05 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YXfyCE408PYVun00xmViDonbL%2BJZ2q5Y6FszyfsDzg%2BRIcPfjQyCLQc93jst7Hxovpdri4KCeonUAh4L3n1UkLUkwHcXhvtZLe7m9SK8mXMEPhemhCZjgu7MApVjsfTtBGCPX8o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d025f69defd912-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/script.js
200 OK 958 B URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/script.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (1009), with no line terminators
Hash 04835fd7dd7f8cfbad901bee8cff2170
38e9ed1e93f8f0beba9447a99afe3995e63b6f3e
be63bbd38c66ca9a9ee1c8abfed042fd5fc090c40b91ad561e922744ece47c41
GET /sb/ssp/vpn/classic-push/big1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:07 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 10:06:46 GMT
etag: W/"62136436-3be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HAA9oMJzTWY2PlGY1fgiVpu5huUpKnmtJ0Ea0Qq4saGQKmnLJ4bo%2Be5ceaCliirEmSlZ62RafiL7RJWqcjG0UmpmHVnleFukC0B0ys2LaCNTJHezlZJBdoUZSfXId6QMTvsROx0M9ZYF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d025fef94260fa-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:05 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 21d0747452fa5913e0e314c3b2efc8be
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 05:18:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mEmna7jCLKAJDdb39PAD7XgZs65Cw7jMo7iEZ%2F2XxYZ%2FHUmxR2uXH%2BEb9BbjyRUKfVCgejWK%2FMTEgwFktG8csmiMJQAbfgp9DQF%2BVgYNKE6jR2McRp4bIfYV0g5Aa9masT%2B1v7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d025f0abf3d98d-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
200 OK 850 B URL GET HTTP/2 www.google.com/recaptcha/api.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (850), with no line terminators
Hash 57e10dcd72dd2953878092014eae522b
95ba7e48825c26c5d9395ef2edb73e790bce6fa7
c7b54326365940d062bce26ed41579eebcb4946a86ba280790b603926692bd59
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Tue, 28 Nov 2023 05:18:04 GMT
date: Tue, 28 Nov 2023 05:18:04 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 6.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (7013), with no line terminators
Hash 49475c425d6c00477bb339179326c49b
bd97deeb753f44f43a21feafa92d98239fa511bd
598841a98ad357d2896d2f093ea3e4e1d44e24b3351268ffd45e61ff8c1d0e09
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 28 Nov 2023 05:18:07 GMT
date: Tue, 28 Nov 2023 05:18:07 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html
200 OK 1.5 kB URL GET HTTP/2 cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectcdn.barscreative1.com
Fingerprint55:06:B7:F1:EF:E9:55:FB:7C:8C:4F:5D:DB:05:C9:15:19:90:9B:2F
ValiditySat, 11 Nov 2023 03:00:51 GMT - Fri, 09 Feb 2024 03:00:50 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1639), with no line terminators
Hash 97b357c624104a8e915d01424dfe16ce
6bd7fcedfb7986b149601b1bc840f525b67a8f06
8d010e7163298acf3671bb429a2e0b1d69033a5adc314fa4bddebf74b9775e6e
GET /sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:06 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:10 GMT
etag: W/"6242c2de-602"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 28 Nov 2023 06:18:06 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
js.wpshsdk.com/npc/sdk/push.m.js?v=1
200 OK 35 kB URL GET HTTP/2 js.wpshsdk.com/npc/sdk/push.m.js?v=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectjs.wpshsdk.com
Fingerprint07:CF:9F:F6:6F:EC:12:8A:E5:15:45:BE:7A:31:00:17:EB:A4:EC:D8
ValidityTue, 21 Nov 2023 14:00:56 GMT - Mon, 19 Feb 2024 14:00:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/push.m.js?v=1 HTTP/1.1
Host: js.wpshsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:06 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 22 Nov 2023 11:58:43 GMT
etag: W/"655decf3-87a8"
content-encoding: gzip
expires: Tue, 28 Nov 2023 05:23:06 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.unblockia.com/h.js
200 OK 168 kB IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerAmazon
Subject*.unblockia.com
FingerprintF2:6F:03:00:E3:4A:B1:87:3C:4D:28:BB:E6:CE:8F:F1:2A:6E:1B:5D
ValidityTue, 21 Feb 2023 00:00:00 GMT - Fri, 22 Mar 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Size 168 kB (168079 bytes)
Hash bc5af0220c4116294c4e9c72ae4e244c
f03f6753bcdfdedf4475b83022003b01a02fbde0
b7d2974070cf9f476d97e4401209a440e8fee787781d9084655cca366dad4d21
GET /h.js HTTP/1.1
Host: cdn.unblockia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Tue, 20 Jun 2023 10:06:46 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: 02f1ef29ead1d705cce351046cded37a79615ae12624547bfa0e8307765c8765
x-amz-version-id: m8vKRZ4OANVjVfMIKL3cKYiXKt6EM9QQ
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:eu-west-1:987257285531:build/unblockia-loader-codebuild-project:4e52eb3f-761b-4c10-a85a-162fb4fa3980
x-amz-meta-codebuild-content-md5: fb4d4b7b1d35720e2d2481016ef4369b
server: AmazonS3
content-encoding: br
date: Mon, 27 Nov 2023 19:58:00 GMT
etag: W/"bc5af0220c4116294c4e9c72ae4e244c"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JM-afW0gHeMQlEYJytpPmMNqFbiKwbUAJjTQ6TdTRHbbePxVePBPYw==
age: 33606
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
200 OK 476 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 476 kB (476095 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Nov 2023 17:15:26 GMT
expires: Sun, 24 Nov 2024 17:15:26 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 216159
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.wpadmngr.com/static/adManager.js
200 OK 1.7 kB URL GET HTTP/2 js.wpadmngr.com/static/adManager.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectjs.wpadmngr.com
FingerprintAC:C2:DC:B6:95:8A:52:42:68:CB:0F:19:3F:56:A9:E9:1F:E6:04:8C
ValiditySun, 12 Nov 2023 03:01:15 GMT - Sat, 10 Feb 2024 03:01:14 GMT
File type ASCII text, with very long lines (1800), with no line terminators
Hash 2114bce7361d62a391a3b7d07dbac394
2df10c4712eeed15dc20903380c27b731f5dc324
818d3cabe06b6af4f69a9181ebe0dd90832b479281c4423aa2fbbd09d0bf7495
GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:04 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 15 Nov 2023 14:07:32 GMT
etag: W/"6554d0a4-67a"
content-encoding: gzip
expires: Tue, 28 Nov 2023 05:23:04 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
200 OK 4.2 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (4404), with no line terminators
Hash 68b1992666e9738c9fe476446c9554c6
7ed918e75115fd3be8bd1df1f6106d3f53129c78
c3ca1c3bc15dfab20c6c3733049214afc18b2deaba8d9685c57cc3f238b687d8
GET /sb/ssp/vpn/classic-push/big1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfiles.eu
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:07 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:59:09 GMT
etag: W/"6213707d-1048"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1388926
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oJ5QTZdzXCNECPzwwH93L0Ugn1auJXr4SGn6qtYNJ2G529DSSWA%2F2Pq4MCCupY%2BcNv39%2B49tPBru3UyQxBMQSlUO6ksVDEF8KS3HmfJ4JW5vAjJlGrm58r1N7Rr9BsvyC5XhE0B8E%2BQp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d025fe28c760fa-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
adsbb.dfiles.eu/upload/2112/ad27582685f5c72c.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
200 OK 1.5 kB URL GET HTTP/2 adsbb.dfiles.eu/upload/2112/ad27582685f5c72c.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdfiles.eu
FingerprintCC:57:A8:99:82:65:9E:AE:6B:7C:68:C0:CE:7C:F7:6F:A8:6B:23:E0
ValiditySun, 05 Nov 2023 13:34:41 GMT - Sat, 03 Feb 2024 13:34:40 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1534), with no line terminators
Hash 2902174678e3ef42728fda8c53a7738a
234c054ea354720698cc4839717990c3b991cd67
bf73ecd8575755bc1495ce0fa395d727dba53eaae10a2dfe93f8696bc44b5db6
GET /upload/2112/ad27582685f5c72c.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752 HTTP/1.1
Host: adsbb.dfiles.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfiles.eu/
DNT: 1
Connection: keep-alive
Cookie: last_file=vym7ludmf; lang_current=en; _ga_BL9163LYG1=GS1.1.1701148688.1.0.1701148688.0.0.0; _ga=GA1.1.1627381501.1701148688; _nf56=1; _nf58=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
content-security-policy: frame-ancestors depositfiles.com depositfiles.org dfiles.eu dfiles.com
content-type: text/html
date: Tue, 28 Nov 2023 05:18:05 GMT
last-modified: Tue, 28 Nov 2023 05:15:01 GMT
server: nginx
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js
200 OK 84 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (32025)
Hash 4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /sb/ssp/vpn/classic-push/big1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 05:18:07 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 10:06:46 GMT
etag: W/"62136436-1499c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1480480
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QeogVhMQlPA4qr3d89gbXz9V%2B6ItKAfilnki1LpLsHWBQQ8kt1BOoS3g%2FHjhRpkFLQSiKTeiW2k7pbMSFwfFXtvES8rSJ0RqkAh229%2BUVBApoXFUEO0dcnyWpSFT7ZZx3FTMpmEzmfPF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d025fe68e960fa-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
adsbb.dfiles.eu//ad.php?z=56&c=NO
303 See Other 1.5 kB URL GET HTTP/2 adsbb.dfiles.eu//ad.php?z=56&c=NO
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdfiles.eu
FingerprintCC:57:A8:99:82:65:9E:AE:6B:7C:68:C0:CE:7C:F7:6F:A8:6B:23:E0
ValiditySun, 05 Nov 2023 13:34:41 GMT - Sat, 03 Feb 2024 13:34:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET //ad.php?z=56&c=NO HTTP/1.1
Host: adsbb.dfiles.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Cookie: last_file=vym7ludmf; lang_current=en; _ga_BL9163LYG1=GS1.1.1701148688.1.0.1701148688.0.0.0; _ga=GA1.1.1627381501.1701148688
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
content-security-policy: frame-ancestors depositfiles.com depositfiles.org dfiles.eu dfiles.com
content-type: text/html; charset=UTF-8
date: Tue, 28 Nov 2023 05:18:05 GMT
location: /upload/2112/ad27582685f5c72c.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
server: nginx
set-cookie: _nf56=1; expires=Wed, 29-Nov-2023 05:18:04 GMT; Max-Age=86400
x-powered-by: PHP/5.6.30-0+deb8u1
X-Firefox-Spdy: h2
adsbb.dfiles.eu/upload/2303/ad2775297311915a.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
200 OK 1.5 kB URL GET HTTP/2 adsbb.dfiles.eu/upload/2303/ad2775297311915a.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752
IP
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectdfiles.eu
FingerprintCC:57:A8:99:82:65:9E:AE:6B:7C:68:C0:CE:7C:F7:6F:A8:6B:23:E0
ValiditySun, 05 Nov 2023 13:34:41 GMT - Sat, 03 Feb 2024 13:34:40 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1549), with no line terminators
Hash f52b2d61e8c24c84a63743178f517953
d62b959b1a786c51a9ca6e37bb5c85c3dfb71d1a
7daf1084657fe356cb619916555f05990b98e5eddb6a854fdebbaf9f0b286899
GET /upload/2303/ad2775297311915a.htm?canp=adv_73b411c406ca38ecadcf742fe6ade752 HTTP/1.1
Host: adsbb.dfiles.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dfiles.eu/
DNT: 1
Connection: keep-alive
Cookie: last_file=vym7ludmf; lang_current=en; _ga_BL9163LYG1=GS1.1.1701148688.1.0.1701148688.0.0.0; _ga=GA1.1.1627381501.1701148688; _nf56=1; _nf58=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
content-security-policy: frame-ancestors depositfiles.com depositfiles.org dfiles.eu dfiles.com
content-type: text/html
date: Tue, 28 Nov 2023 05:18:05 GMT
last-modified: Tue, 28 Nov 2023 05:15:01 GMT
server: nginx
X-Firefox-Spdy: h2
stalerestaurant.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3o0n3cPqXgSFPq4gk%2B6enp%2B4h8W4Zg3GJO4POXiqrqqelKnuaqq6pyfjJbggexzBg8fOm2SDuiy7HgVBJl4kIGQ8SA4GxPtelD3LTAZGP%2Bj%2B3vteHd77qr7YL86Jh4KebX6k%2B1Iputioee71LZlyXVp3%2FZ7rezXvhrsl02Z4w%2B1Nfqb7ju81at5b7m3BdvRi4Pme53u%2BuyKNiHVvcapCZo%2BX%2FNqSVwuDmt8I0TP%2F57ZwYKkD3j0nr0Ly8UvbvzyDZCOkydNbwu7kOnv7%2FaRQNNcGXX50P91JdZkimcPYOIjTo9lpaDsm5OtL0OnRLAF092CSAJEcE%2Bd3H1F6NLOJqHt44TRSECki%2FjLK7ghCjSDpCEw%2FgOSnBGAc6xtIk0fr2pR090KlE3VMFl78DVmOycIf15AmT5aV7Ll3tSpyqVOLXlxB9kaQnRGy4hh534Esj8HyzyH5r2TxxRrS5GDDKg3Jq2l6KUeQ8QhKDECtg2LySQdF7KDIHCT8zKWNpdjzWnEU1%2BvtkDFWrzPWaDd5g9fDduyhYBN7A%2BTZAEwNwMweMrOHHTmAKX6C3a5guQObj4nz8R66vEIpCEpLUFKCUhKUOUHZrQ65soGtHnFli8if9WDW69VQ5519eqjzjkjJfnZOrk738k9TY0ecuUEQUh5SP4zCyG8wvxU047jlNQRrtgJBm7CygrSXplH78vS1DJk8feUNRPQYVh2DyaugxZug5bAVeKDbw7DtoZ8%2B5SLTVuaxVMLWmE7AdYUsX0C%2B6%2Byrc%2FL61McHP3wCwU5uftX%2F8%2FaTa5%2BBmQqZqfCp%2FJmgox4O7%2BiSHNzRpSXPNrJcJrJPJ3d3N6e5uPzth2K31Iav3rKDb95lE2ECH98TNl%2BjKZdpx5LvliXnwqxowwT5cdVuiWizsNvLhUmLbG3zvZXVJDPCWqnTEagcE%2FL8ezA5Jlee2%2Bm7vH7%2FL0gzgikqJMUJmRWkPgbL9mCz%2BcxqAqPmPMoclEU1NEE0HypJoMSc06iC%2FQ%2BP5njfPkTHOKD5A6RJha6p0FUVqBrAFpeHeWZObv5WnxYi5QwjZZyDSBn15cVyrTxzG34o2lG7xTiPBON%2BK6i3654XcB62loS%2FhNyOhehd%2BRcAAP%2F%2FAQAA%2F%2F%2B6JkTkbwQAAA%3D%3D
200 OK 0 B URL GET HTTP/1.1 stalerestaurant.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3o0n3cPqXgSFPq4gk%2B6enp%2B4h8W4Zg3GJO4POXiqrqqelKnuaqq6pyfjJbggexzBg8fOm2SDuiy7HgVBJl4kIGQ8SA4GxPtelD3LTAZGP%2Bj%2B3vteHd77qr7YL86Jh4KebX6k%2B1Iputioee71LZlyXVp3%2FZ7rezXvhrsl02Z4w%2B1Nfqb7ju81at5b7m3BdvRi4Pme53u%2BuyKNiHVvcapCZo%2BX%2FNqSVwuDmt8I0TP%2F57ZwYKkD3j0nr0Ly8UvbvzyDZCOkydNbwu7kOnv7%2FaRQNNcGXX50P91JdZkimcPYOIjTo9lpaDsm5OtL0OnRLAF092CSAJEcE%2Bd3H1F6NLOJqHt44TRSECki%2FjLK7ghCjSDpCEw%2FgOSnBGAc6xtIk0fr2pR090KlE3VMFl78DVmOycIf15AmT5aV7Ll3tSpyqVOLXlxB9kaQnRGy4hh534Esj8HyzyH5r2TxxRrS5GDDKg3Jq2l6KUeQ8QhKDECtg2LySQdF7KDIHCT8zKWNpdjzWnEU1%2BvtkDFWrzPWaDd5g9fDduyhYBN7A%2BTZAEwNwMweMrOHHTmAKX6C3a5guQObj4nz8R66vEIpCEpLUFKCUhKUOUHZrQ65soGtHnFli8if9WDW69VQ5519eqjzjkjJfnZOrk738k9TY0ecuUEQUh5SP4zCyG8wvxU047jlNQRrtgJBm7CygrSXplH78vS1DJk8feUNRPQYVh2DyaugxZug5bAVeKDbw7DtoZ8%2B5SLTVuaxVMLWmE7AdYUsX0C%2B6%2Byrc%2FL61McHP3wCwU5uftX%2F8%2FaTa5%2BBmQqZqfCp%2FJmgox4O7%2BiSHNzRpSXPNrJcJrJPJ3d3N6e5uPzth2K31Iav3rKDb95lE2ECH98TNl%2BjKZdpx5LvliXnwqxowwT5cdVuiWizsNvLhUmLbG3zvZXVJDPCWqnTEagcE%2FL8ezA5Jlee2%2Bm7vH7%2FL0gzgikqJMUJmRWkPgbL9mCz%2BcxqAqPmPMoclEU1NEE0HypJoMSc06iC%2FQ%2BP5njfPkTHOKD5A6RJha6p0FUVqBrAFpeHeWZObv5WnxYi5QwjZZyDSBn15cVyrTxzG34o2lG7xTiPBON%2BK6i3654XcB62loS%2FhNyOhehd%2BRcAAP%2F%2FAQAA%2F%2F%2B6JkTkbwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://dfiles.eu/files/vym7ludmf/FarCry4-patch-FIX.exe
Certificate IssuerLet's Encrypt
Subjectstalerestaurant.com
FingerprintE7:83:A0:D8:9E:3B:62:0F:2B:95:DA:66:E1:B6:CD:20:EB:7A:B8:B3
ValidityTue, 07 Nov 2023 07:44:19 GMT - Mon, 05 Feb 2024 07:44:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3o0n3cPqXgSFPq4gk%2B6enp%2B4h8W4Zg3GJO4POXiqrqqelKnuaqq6pyfjJbggexzBg8fOm2SDuiy7HgVBJl4kIGQ8SA4GxPtelD3LTAZGP%2Bj%2B3vteHd77qr7YL86Jh4KebX6k%2B1Iputioee71LZlyXVp3%2FZ7rezXvhrsl02Z4w%2B1Nfqb7ju81at5b7m3BdvRi4Pme53u%2BuyKNiHVvcapCZo%2BX%2FNqSVwuDmt8I0TP%2F57ZwYKkD3j0nr0Ly8UvbvzyDZCOkydNbwu7kOnv7%2FaRQNNcGXX50P91JdZkimcPYOIjTo9lpaDsm5OtL0OnRLAF092CSAJEcE%2Bd3H1F6NLOJqHt44TRSECki%2FjLK7ghCjSDpCEw%2FgOSnBGAc6xtIk0fr2pR090KlE3VMFl78DVmOycIf15AmT5aV7Ll3tSpyqVOLXlxB9kaQnRGy4hh534Esj8HyzyH5r2TxxRrS5GDDKg3Jq2l6KUeQ8QhKDECtg2LySQdF7KDIHCT8zKWNpdjzWnEU1%2BvtkDFWrzPWaDd5g9fDduyhYBN7A%2BTZAEwNwMweMrOHHTmAKX6C3a5guQObj4nz8R66vEIpCEpLUFKCUhKUOUHZrQ65soGtHnFli8if9WDW69VQ5519eqjzjkjJfnZOrk738k9TY0ecuUEQUh5SP4zCyG8wvxU047jlNQRrtgJBm7CygrSXplH78vS1DJk8feUNRPQYVh2DyaugxZug5bAVeKDbw7DtoZ8%2B5SLTVuaxVMLWmE7AdYUsX0C%2B6%2Byrc%2FL61McHP3wCwU5uftX%2F8%2FaTa5%2BBmQqZqfCp%2FJmgox4O7%2BiSHNzRpSXPNrJcJrJPJ3d3N6e5uPzth2K31Iav3rKDb95lE2ECH98TNl%2BjKZdpx5LvliXnwqxowwT5cdVuiWizsNvLhUmLbG3zvZXVJDPCWqnTEagcE%2FL8ezA5Jlee2%2Bm7vH7%2FL0gzgikqJMUJmRWkPgbL9mCz%2BcxqAqPmPMoclEU1NEE0HypJoMSc06iC%2FQ%2BP5njfPkTHOKD5A6RJha6p0FUVqBrAFpeHeWZObv5WnxYi5QwjZZyDSBn15cVyrTxzG34o2lG7xTiPBON%2BK6i3654XcB62loS%2FhNyOhehd%2BRcAAP%2F%2FAQAA%2F%2F%2B6JkTkbwQAAA%3D%3D HTTP/1.1
Host: stalerestaurant.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfiles.eu/
Cookie: u_pl=16004719; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 05:18:07 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 306a0f6a7cb61b08f9f4d95d0688e2ef
Strict-Transport-Security: max-age=0; includeSubdomains
91.226.124.125
143.204.55.34
104.21.234.32
157.90.84.246