| cdn.cookielaw.org/scripttemplates/otSDKStub.js |  104.19.177.52 | 200 OK | 6.9 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/otSDKStub.js IP104.19.177.52:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (21229) Hash0cd317a7b9c520801230e944f7d50e41 e3985ff0c2e8b1eaacb617c7c5af5bebfcbceda6 6f08699117c1f15f6d35e7b4380d12d18a1881f075e177b5853b1017a3307544
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript
content-length: 6882
content-encoding: gzip
content-md5: zgTRIDojRJmnmBTwUyI2Vw==
last-modified: Wed, 24 Apr 2024 02:34:14 GMT
etag: 0x8DC64070814D9A8
x-ms-request-id: 91415424-301e-0069-1b61-9600cf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 81505
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879fce158cee5697-OSL
X-Firefox-Spdy: h2
|
|
| cdn.flowcode.com/cdn/RFDewiExtended-Semibold.woff2 | 104.18.1.248 | 200 OK | 41 kB |
URL GET HTTP/2cdn.flowcode.com/cdn/RFDewiExtended-Semibold.woff2 IP104.18.1.248:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectflowcode.com Fingerprint38:55:F4:53:54:85:2A:E5:6A:07:B3:68:51:82:C6:59:A3:03:93:70 ValidityFri, 26 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), CFF, length 41112, version 0.0 Hashe4edaded41a3e10f13b64cd67052e985 ecb4f67c4d72f01f87ebcc1bd10a7155e91791b4 6ec660b1d276d884c988cc0a228f3dd2cb4528c067e9cf3a3840696152548ba8
GET /cdn/RFDewiExtended-Semibold.woff2 HTTP/1.1
Host: cdn.flowcode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flow.page/
Origin: https://www.flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/octet-stream
content-length: 41112
content-md5: 5O2t7UGj4Q8TtkzWcFLphQ==
last-modified: Thu, 20 Oct 2022 18:02:14 GMT
etag: 0x8DAB2C537C945AD
x-ms-request-id: d8af7817-d01e-0051-73e3-7a8db8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 1134986
expires: Fri, 25 Apr 2025 16:45:42 GMT
cache-control: public, max-age=31536000
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-robots-tag: noindex
set-cookie: __cf_bm=X_7rGWo2nciSrcVGxv4GMLokOzD7klap_QGaXTP3IJ8-1714063542-1.0.1.1-V85pIy93T2jhjB5XHEkEFxbxUfjAOv9aKgnfPyOsZtqPgMa9twE1EyeiQZgLS1wezECoWe4r3T_kgfn2Es80bA; path=/; expires=Thu, 25-Apr-24 17:15:42 GMT; domain=.flowcode.com; HttpOnly; Secure; SameSite=None
_cfuvid=MnYXHU23hGf3HFAJKSa4YOjP7XmZzZngiuYo1Cv4UjM-1714063542704-0.0.1.1-604800000; path=/; domain=.flowcode.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 879fce15ca6156c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/c28a0bd03e5047852be7a191bc6087a091e2e3be/_ssgManifest.js | 104.18.29.25 | 200 OK | 1.8 kB |
URL GET HTTP/2www.flow.page/_next/static/c28a0bd03e5047852be7a191bc6087a091e2e3be/_ssgManifest.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeASCII text, with no line terminators Hashb404e23d62d95bafd03ad7747cc0e88b 011268d6627898dc2caac8b9678086cd9b9a7dfe 678f6ce2cb80b1fe72fc67e7412be6e2ab6ada083111b64f7c40d35e3cba5e00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/c28a0bd03e5047852be7a191bc6087a091e2e3be/_ssgManifest.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:39:13 GMT
etag: W/"50-18f11d57568"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce15cf3eb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/media/inter-latin-400-normal.c6bc620d.woff2 | 104.18.29.25 | 200 OK | 37 kB |
URL GET HTTP/2www.flow.page/_next/static/media/inter-latin-400-normal.c6bc620d.woff2 IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37056, version 1.0 Hashb212a798db3b717b02ca67e3ca5c0bef 8f664bbee4804fedcc4293b697aa191b1f9a166e f6789b1579e3915acc50ce2f56d956c05dc3186238eb4d1a0d4ad1e403a625ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/inter-latin-400-normal.c6bc620d.woff2 HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/_next/static/css/00e954e346cc97a0.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: font/woff2
content-length: 37056
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"90c0-18f11d47398"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fce17e993b50c-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202403.2.0/otBannerSdk.js | 104.19.177.52 | 200 OK | 111 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202403.2.0/otBannerSdk.js IP104.19.177.52:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Size111 kB (110887 bytes) Hashfa5c95d8306a66b4eb13eef3a634f8e1 534157a808dc08f7cabfbd36967566f03dbabf3d 7e90effe2c4b60df553e50c5e65bcf113ad7a2ddf3d5e7a594f2b8a9ccfd4523
GET /scripttemplates/202403.2.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/javascript
content-length: 110887
content-encoding: gzip
content-md5: NaqcG2ILVJmSrG/q1ZpJ7w==
last-modified: Mon, 22 Apr 2024 06:06:18 GMT
etag: 0x8DC62925356D668
x-ms-request-id: c839b996-c01e-001f-188e-948a87000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 64781
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879fce1979555697-OSL
X-Firefox-Spdy: h2
|
|
| www.flow.page/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 104.18.29.25 | 200 OK | 19 kB |
URL GET HTTP/2www.flow.page/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (64283) Hash5c9e3ee438210282da6f91aeee060113 224ee2ee8254d90db04910ae15afa3091a356f4c 25165ab9ff8abe4a76880f6fd210e9cec99469ee8eb86cc82b4a7c617e869d8b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 20:54:07 GMT
etag: W/"6622d9ef-4d7"
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fce15cf46b50c-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 27 Apr 2024 16:45:42 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otFlat.json | 104.19.177.52 | 200 OK | 3.0 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otFlat.json IP104.19.177.52:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash9b1f8ddf85fb0cbfd926faacb1fc0405 ade7f952c70f07fd3497cd3e8656ca1f28c78633 f4aaa18c55c90588c5e828e56dcc6b2cb0acf9a4280494c7d1a53fc5e3669112
GET /scripttemplates/202403.2.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flow.page/
Origin: https://www.flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/json
content-length: 3041
content-encoding: gzip
content-md5: wV78mAWw6KBtzfNUzHQTew==
last-modified: Mon, 22 Apr 2024 06:06:11 GMT
etag: 0x8DC62924F52ADA5
x-ms-request-id: 951ae173-001e-0000-0be1-943983000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 71959
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879fce1a5a9856b7-OSL
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/1d90eb00.eb248845497ffa25.js | 104.18.29.25 | 200 OK | 61 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/1d90eb00.eb248845497ffa25.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (9468), with CRLF line terminators Hash073442c187da57d9af282fda20638c27 fb41bf1eadda9f3891cde84b50fbedc603df3beb 65db8bc4034c27ff557a7495be843573b78be4e3e7b174690cd03b152461b257
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1d90eb00.eb248845497ffa25.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:13:18 GMT
etag: W/"1eeae-18e2eb80e30"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 3881733
expires: Fri, 25 Apr 2025 16:45:43 GMT
server: cloudflare
cf-ray: 879fce1c9dbdb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/c28a0bd03e5047852be7a191bc6087a091e2e3be/_buildManifest.js | 104.18.29.25 | 200 OK | 45 kB |
URL GET HTTP/2www.flow.page/_next/static/c28a0bd03e5047852be7a191bc6087a091e2e3be/_buildManifest.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeASCII text, with very long lines (25147), with no line terminators Hash47a27f583319cf31e57a44b478a8d9ce 2ee927eeab11dc30a268f3e371eb505603eb9bb3 7d10fa3a29fb19f6db7cb952b6f2f976552f8a77a2e4f7c270e6ad717b6eb029
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/c28a0bd03e5047852be7a191bc6087a091e2e3be/_buildManifest.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"623b-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce15bf35b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/12404-1549055700393f5f.js | 104.18.29.25 | 200 OK | 7.7 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/12404-1549055700393f5f.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (18580) Hash4efcef5b54b82415678b7368140d0835 98fed6ec3c9c5e6766dba2d78160e4d7a27817b5 e45a251dea10a1bd8f4a6f2edd78534852c79585debe31b61d1260d685cda94c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/12404-1549055700393f5f.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"50e0-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce159efbb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/69314-b614db3df9b0c1b3.js | 104.18.29.25 | 200 OK | 16 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/69314-b614db3df9b0c1b3.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (25187) Hashfa6fa7675231fac9b05594f4e9a8c454 97be49fcc43418c5db5c97bbe769222142698979 88092e147ca8cd9e73281c13b9b4edb2da7a147f6215b45e91e52982d22ad874
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/69314-b614db3df9b0c1b3.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"6296-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce15bf2db50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/178-a99191091a50dc6d.js | 104.18.29.25 | 200 OK | 44 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/178-a99191091a50dc6d.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7357) Hash14c51c081b16cdcf64967c37bb258fdc d2b51997a942b3fd5aaf230fa4778fabcb14972e 02a3a8e4d50bdb7e57400987fb3c61470358d26e91e6ac1e7751b487612ac4fa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/178-a99191091a50dc6d.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"1cee-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce158ee6b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/44781-db2bf152f99155df.js | 104.18.29.25 | 200 OK | 13 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/44781-db2bf152f99155df.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7750) Hash18b706bfbf32e7162ddd26d1ef1d258d d0cd609659af56c470903d188228447f20955c01 f4f0a5d5a172b3d0262395d7c5c5c88ad45b14049d29390abc6047fa9da3362f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/44781-db2bf152f99155df.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"1e79-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444094
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce158eeab50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/52768-64be3e123e7b18de.js | 104.18.29.25 | 200 OK | 19 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/52768-64be3e123e7b18de.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (22508) Hash1cd8a8d0612fb3fe2c4f4617e25b4c38 22e2c5a46b3a319b30fb81b4f2859e843ba923a7 19a3f94f9aca6899625b0e5e301345ffaf97f19b6f50389b1590d9d5b3b4074c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/52768-64be3e123e7b18de.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"581f-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444094
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce158ef2b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/74570-14b89fa9b14391f9.js | 104.18.29.25 | 200 OK | 14 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/74570-14b89fa9b14391f9.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (24223) Hashb61e4d6c5f2bda4f557ad4840358fb96 935ad5357156c0e8c3a74e8e62966696ec099708 d7b68a2feb17d83e23f77bcc44e4767b25e33f99620ae2d6e6896cb5bb01b7fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/74570-14b89fa9b14391f9.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"5ed2-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce159f09b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/80307-29fde9d85071b065.js | 104.18.29.25 | 200 OK | 20 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/80307-29fde9d85071b065.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (32621) Hash48e61ed506ee7def92d53c2dd4b9b755 e1836fe3171278e83e1e25c2e262a9345b4a9fbf a6328cc8f419a5da3106d53ee5228eb8c28b93c9df2760a050852aa8b4c2d190
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/80307-29fde9d85071b065.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"7fa0-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce159effb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/static/ot_close.svg | 104.19.177.52 | 200 OK | 5.9 kB |
URL GET HTTP/2cdn.cookielaw.org/logos/static/ot_close.svg IP104.19.177.52:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash304dde48c386607e04c65613a04772d8 21ef811531847939873e97a5a0c8046894a0f7e6 04fd4e522be7af89a10e0d8cfb6a328141405bd638cd9674834a9de1a861d175
GET /logos/static/ot_close.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: image/svg+xml
content-md5: pcXWFGpuVeSg/jVnYCseRg==
last-modified: Wed, 24 Apr 2024 02:34:16 GMT
x-ms-request-id: 2f9f5987-101e-008a-59f6-956232000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 81506
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879fce1d4cac5697-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/2031-30b0eeb0595fdd2d.js | 104.18.29.25 | 200 OK | 12 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/2031-30b0eeb0595fdd2d.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (24799) Hasha95b401929aacf0652e907ce72232b64 e907b46ff5b9890fe9c0f3b9a0002a308aac775b b450f3ff48a9751179109ce242721d58498490c9bdf82ba09d226a2b8931a218
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2031-30b0eeb0595fdd2d.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"6111-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce159f0db50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/81272-12e59c366a2d344a.js | 104.18.29.25 | 200 OK | 23 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/81272-12e59c366a2d344a.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (39360) Hash25b21f13d21c3226c10676f159633354 c08d38482ebff2d81b056d7ebfd69fd19a0a203f e0d7e241be01b9beb831df3f5fd8d1a13fc59030ec2d4b619dfd23f9b1722bb9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/81272-12e59c366a2d344a.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"99f3-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce159f0bb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/firebase.98862f5a22e6ec1f.js | 104.18.29.25 | 200 OK | 1.9 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/firebase.98862f5a22e6ec1f.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1863), with no line terminators Hash3d7ca68c5552d1dbe288a0b6a2b46ee4 48b52fec239a5324042eb09e8630d37dcc19bf9f 347361e06961993bd1808f6f80a1cef5cd4df83a8998a807d814797cdd98d7b0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/firebase.98862f5a22e6ec1f.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Mon, 11 Mar 2024 18:13:18 GMT
etag: W/"73c-18e2eb80e30"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 3881733
expires: Fri, 25 Apr 2025 16:45:43 GMT
server: cloudflare
cf-ray: 879fce1cadc7b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/1cc2734a-8dfd9412a1ccb9a2.js | 104.18.29.25 | 200 OK | 100 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/1cc2734a-8dfd9412a1ccb9a2.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size100 kB (100166 bytes) Hash739259f3431328613584607afcbbaeab ca04caa8d48adee786c8c93f1d0f65a6034c6f22 b7737938b1b2c661c5dcaa4712dfca802b028f78c6ec307ad92557f311700848
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1cc2734a-8dfd9412a1ccb9a2.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"18746-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444094
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157edeb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/logos/flowcodeTM_horizontal_white.svg | 104.18.29.25 | 200 OK | 3.9 kB |
URL GET HTTP/2www.flow.page/logos/flowcodeTM_horizontal_white.svg IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeSVG Scalable Vector Graphics image Hash7c1c9bad57907af0d324acc6d3562d61 c25f7ebd53b7db18e3067eac553ecbaaf629f974 7d01021946ba925a114372d329fdbe8c743f38a5aaf14bf2b4c801e1174b34e8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /logos/flowcodeTM_horizontal_white.svg HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: image/svg+xml
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: public, max-age=60
last-modified: Wed, 24 Apr 2024 20:41:54 GMT
etag: W/"f18-18f11d7ea50"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: EXPIRED
expires: Thu, 25 Apr 2024 16:46:43 GMT
server: cloudflare
cf-ray: 879fce1829b9b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/22561-f3a1e077ce0d90ed.js | 104.18.29.25 | 200 OK | 7.4 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/22561-f3a1e077ce0d90ed.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7581), with no line terminators Hash20be7158da498282ad3557d0a9ab31a4 7560d63b5aaa58c3ce2f2a2520eaf8986f989bcc 370fc6420b3da1308ae757040470aec2faa9abe5321a87373f487c6894375f54
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/22561-f3a1e077ce0d90ed.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"1d02-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157ee1b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/media/inter-latin-700-normal.c6bc620d.woff2 | 104.18.29.25 | 200 OK | 37 kB |
URL GET HTTP/2www.flow.page/_next/static/media/inter-latin-700-normal.c6bc620d.woff2 IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37056, version 1.0 Hashb212a798db3b717b02ca67e3ca5c0bef 8f664bbee4804fedcc4293b697aa191b1f9a166e f6789b1579e3915acc50ce2f56d956c05dc3186238eb4d1a0d4ad1e403a625ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/inter-latin-700-normal.c6bc620d.woff2 HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/_next/static/css/00e954e346cc97a0.css
Cookie: countryCode=NO
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:44 GMT
content-type: font/woff2
content-length: 37056
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"90c0-18f11d47398"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: EXPIRED
expires: Fri, 25 Apr 2025 16:45:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fce1d5e6fb50c-OSL
X-Firefox-Spdy: h2
|
|
| | 104.18.29.25 | 404 Not Found | 934 kB |
URL User Request GET HTTP/2IP104.18.29.25:443
CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Size934 kB (933894 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /yghbuyjhm HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-powered-by: Next.js
cache-control: public, max-age=60
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Thu, 25 Apr 2024 16:46:42 GMT
server: cloudflare
cf-ray: 879fce11fbf2b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/main-d459f983bba9ecde.js | 104.18.29.25 | 200 OK | 135 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/main-d459f983bba9ecde.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (63850) Size135 kB (135219 bytes) Hash04b90e9f5ae0c24d1cc6b3be58ccb4e1 b15d93711a0b86352cf6f890afb45f932ad39d3e 8a049834fda94e5ba4d7161f02264cceb041df8ee76acb5da496d73d6489de9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-d459f983bba9ecde.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"21033-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444095
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157edbb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/favicon/apple-touch-icon.png | 104.18.29.25 | 200 OK | 5.5 kB |
URL GET HTTP/2www.flow.page/favicon/apple-touch-icon.png IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeRIFF (little-endian) data, Web/P image Hash8dfc51bfea60aaa21e16321a73fb92f2 33a87365fdd3b42e9a7e4321790e77a415f7f4e3 a9a6232ae35fb6773825f5f09d67b5d28c513a7cae73596d55b6bf5429e0e312
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon/apple-touch-icon.png HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Cookie: countryCode=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:44 GMT
content-type: image/webp
content-length: 5528
cache-control: public, max-age=60
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=11369
content-disposition: inline; filename="apple-touch-icon.webp"
vary: Accept
etag: W/"2c69-18f11d7ea50"
last-modified: Wed, 24 Apr 2024 20:41:54 GMT
strict-transport-security: max-age=15724800; includeSubDomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: EXPIRED
expires: Thu, 25 Apr 2024 16:46:44 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 879fce1e3f56b50c-OSL
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/83648-f0f9ac881a623143.js | 104.18.29.25 | 200 OK | 9.0 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/83648-f0f9ac881a623143.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (9112), with no line terminators Hash8a266ce7d7667d8abbee2b665d8cf230 452f0e5b60f86b814967a602213bd0d8bfd470e2 c19f822a5aae85a405604e270203d75cc4aa45e28e41c311b53e1ca67cd51ca7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/83648-f0f9ac881a623143.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"2354-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce158ef5b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/79010-72313640bf462dcd.js | 104.18.29.25 | 200 OK | 98 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/79010-72313640bf462dcd.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashf951ffcc3ecf9c94661f273eb8f1b996 e8fb919d500216bb7b4c5e7caaa2a1aac5a83ca7 7fe8c070edbc626ee2a8a3e2e9e25988c1f933885e32bbef87c146fb79c8014f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/79010-72313640bf462dcd.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"17e79-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce159f01b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/eed4f849-6744-46e9-8b81-04d191129887/0fa1c054-c9f1-4c43-b59f-ba8963e34160/en.json | 104.19.177.52 | 200 OK | 74 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/eed4f849-6744-46e9-8b81-04d191129887/0fa1c054-c9f1-4c43-b59f-ba8963e34160/en.json IP104.19.177.52:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /consent/eed4f849-6744-46e9-8b81-04d191129887/0fa1c054-c9f1-4c43-b59f-ba8963e34160/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flow.page/
Origin: https://www.flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/x-javascript
content-length: 18226
cf-ray: 879fce1a1a4256b7-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 71959
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DC609CC5BEDD34
expires: Fri, 26 Apr 2024 16:45:43 GMT
last-modified: Fri, 19 Apr 2024 18:16:02 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: LDD/j/AJT2wwe8po3+u0gA==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 85fc1c20-f01e-0059-3885-92be00000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/60055-5dcc5499ce68cf22.js | 104.18.29.25 | 200 OK | 26 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/60055-5dcc5499ce68cf22.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (25611) Hash628e41919f8f23d1000ed195927ad1af 93cf742e96c0229e71b8798396aa244b7f6afff4 05e811083ea89790bb2cc30724cf5cf38bca0229d2350aee1375240ddda3f322
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/60055-5dcc5499ce68cf22.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"643e-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce159ef8b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/4343-84e524edcb823a6e.js | 104.18.29.25 | 200 OK | 57 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/4343-84e524edcb823a6e.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (57064) Hash8e755877acec6daafdb6a0d216644c75 5de04d2c544075fba0a6ab2cc5f39a3f4e788d29 295c8b2e234a9226a80455eaa3dd45c54d1b17a3703e4db512985559b84e2c89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4343-84e524edcb823a6e.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"df1a-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce15bf1bb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/1267-d1b8f890b8b2e653.js | 104.18.29.25 | 200 OK | 354 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/1267-d1b8f890b8b2e653.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Size354 kB (353751 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1267-d1b8f890b8b2e653.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"565d7-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce15bf1db50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/78366-47c78a8949f5f5f4.js | 104.18.29.25 | 200 OK | 12 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/78366-47c78a8949f5f5f4.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/78366-47c78a8949f5f5f4.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"2feb-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444094
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce158ee8b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/155-dd9c8cbdc9e739f6.js | 104.18.29.25 | 200 OK | 8.7 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/155-dd9c8cbdc9e739f6.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (9016), with no line terminators Hasha2c2c291392e6dc2bea4b11fff4d0493 11c381e04635767d62d519d090343b5d40f997dd 6e43b1a961aec540a615c4385823ffaece4c1e327af1ff4a5b5f3592e20c8003
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/155-dd9c8cbdc9e739f6.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"2205-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444094
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce158ee9b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/32801-43c7e99a78908c16.js | 104.18.29.25 | 200 OK | 13 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/32801-43c7e99a78908c16.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (12644) Hashc80c5e09c2879c0ba7631ead3c1c564f 0dba6a7d205be9283f0f9cde39c165184a6fe7b5 4bc7a142788b4738bd53952569f172a04350ff48b1690b9446e64fd29f29341d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/32801-43c7e99a78908c16.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"3197-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce159f03b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| geolocation.onetrust.com/cookieconsentpub/v1/geo/location/geofeed | 104.18.32.137 | 200 OK | 81 B |
URL GET HTTP/2geolocation.onetrust.com/cookieconsentpub/v1/geo/location/geofeed IP104.18.32.137:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectonetrust.com Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47 ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashaeac38260893a273eb6303c765c95059 1e35f05b5e04b1bffb6b1ea0892440a29e9139e4 1a0de81c8a79a713ba0ebd4fa6c19915b8b84b87e33a5a9a44fc4ea29b26d0ac
GET /cookieconsentpub/v1/geo/location/geofeed HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: text/javascript
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 879fce1cbe0056a9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 104.18.29.25 | 308 Permanent Redirect | 934 kB |
URL User Request GET HTTP/2IP104.18.29.25:443
CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Size934 kB (933894 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | BT Group plc | | Quad9 DNS | malicious | Sinkholed |
GET /yghbuyjhm/ HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 308 Permanent Redirect
date: Thu, 25 Apr 2024 16:45:42 GMT
location: /yghbuyjhm
refresh: 0;url=/yghbuyjhm
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fce10fb05b50c-OSL
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/framework-9bf262a507aaca62.js | 104.18.29.25 | 200 OK | 142 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/framework-9bf262a507aaca62.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65199) Size142 kB (141524 bytes) Hashdc1b6b17d81148d0dfd676b5ec82d515 5eb81d67d3d8bbd48f60eed99c37903fecb13a05 0e752972b430eedefcd79548fdbc13b7f6045b22fd7507ede52bef17c725db30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-9bf262a507aaca62.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"228d4-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157ed7b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/69294.90f0524e12de5215.js | 104.18.29.25 | 200 OK | 38 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/69294.90f0524e12de5215.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5806), with CRLF, LF line terminators Hashec3b49e1803276d06abf8cb52f45d1da 8b9f3320ff95d69fcc5a625414f77d4a59dd3194 66867acbe0ecd265e57b726e7036193f0c782f038c65b21f7521ef19ddeee749
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/69294.90f0524e12de5215.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:09 GMT
etag: W/"968f-18f11d47b68"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:43 GMT
server: cloudflare
cf-ray: 879fce1c9dbeb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/35170-c5b61bcec1cdf757.js | 104.18.29.25 | 200 OK | 96 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/35170-c5b61bcec1cdf757.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash0693c4544d32b327863fa147b539bcd1 9f10eeaaa3bcb524eb82c8ed56a8797a44e829cf 91d6499a33be9927f6487014405aef545a42e5c1798417314d5437f61d42e8e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/35170-c5b61bcec1cdf757.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"177c9-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444093
expires: Fri, 25 Apr 2025 16:45:43 GMT
server: cloudflare
cf-ray: 879fce1cadcfb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/favicon/favicon-black.svg | 104.18.29.25 | 200 OK | 3.5 kB |
URL GET HTTP/2www.flow.page/favicon/favicon-black.svg IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeSVG Scalable Vector Graphics image Hashbefffa6d589069d497d62c5c77db7afb 65547b6151a8bcf7932c68656c7ad8c032dbddf8 492c5905042a19508229cb83d43fe45c0d222b514bace7d5ebc9c0720e964aef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon/favicon-black.svg HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Cookie: countryCode=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:44 GMT
content-type: image/svg+xml
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: public, max-age=60
last-modified: Wed, 24 Apr 2024 20:41:54 GMT
etag: W/"da1-18f11d7ea50"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: EXPIRED
expires: Thu, 25 Apr 2024 16:46:44 GMT
server: cloudflare
cf-ray: 879fce1e3f58b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/cdn-cgi/rum? | 104.18.29.25 | 204 No Content | 0 B |
URL POST HTTP/2www.flow.page/cdn-cgi/rum? IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/rum? HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1058
Origin: https://www.flow.page
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Cookie: countryCode=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 25 Apr 2024 16:45:44 GMT
access-control-allow-origin: https://www.flow.page
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 879fce1e6f8eb50c-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/pages/_app-4b84f3d4beb47983.js | 104.18.29.25 | 200 OK | 2.7 MB |
URL GET HTTP/2www.flow.page/_next/static/chunks/pages/_app-4b84f3d4beb47983.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Size2.7 MB (2650367 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-4b84f3d4beb47983.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"2870ff-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157eddb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/39318-d7846cf91633567b.js | 104.18.29.25 | 200 OK | 16 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/39318-d7846cf91633567b.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (15499) Hashcec88bb3ac07dc2cda29f9417b321665 56eeb4ad7c23e0933b2de59c8aa0ad1a781fe5e1 3d06cfdc813f79422f48557dd5a08697364b4d9236473741a59b5f9412903a73
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/39318-d7846cf91633567b.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"3cbe-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157ee4b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/94783-dda4c37b26f24f59.js | 104.18.29.25 | 200 OK | 11 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/94783-dda4c37b26f24f59.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (11098) Hash8460e3e75303b0c6d6ac220ad9d83a2d e7d4a25e1488be9ff2f1010085bbca07d26600b8 92de91a51d8d7cd513c86a43eb6ea99e862411ceb0e9b1afa83fd5249ee89084
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/94783-dda4c37b26f24f59.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"2b8d-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce15af15b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/52296-34fc93ac44899cbf.js | 104.18.29.25 | 200 OK | 37 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/52296-34fc93ac44899cbf.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (36624) Hash94e139cf8eda81abcc2665632c397b57 22a01b08f040301e3665934bddcfc7036963482b d5b46ee8c73c5ea02f3f36d0e2666c34919d8f7ad1e505a8f7773af0338d55a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/52296-34fc93ac44899cbf.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"8f43-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce15af19b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/44666-62766aadb22bc4f0.js | 104.18.29.25 | 200 OK | 19 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/44666-62766aadb22bc4f0.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (18941) Hash5159f9a3da660f5c015b5decde2225af b79d035e1f5e79a4f463913a798bca6d051ff4d6 c1a2ecfeb037687dd5c2d50a8b75a9a525d667df1118f3a2e8050e085abbe0ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/44666-62766aadb22bc4f0.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"4a30-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 6159328
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce158eecb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| | 104.18.29.25 | 404 Not Found | 934 kB |
URL User Request GET HTTP/2IP104.18.29.25:443
CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
Size934 kB (933894 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /yghbuyjhm HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-powered-by: Next.js
cache-control: public, max-age=60
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 0
expires: Thu, 25 Apr 2024 16:46:42 GMT
server: cloudflare
cf-ray: 879fce141dcab50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/css/00e954e346cc97a0.css | 104.18.29.25 | 200 OK | 12 kB |
URL GET HTTP/2www.flow.page/_next/static/css/00e954e346cc97a0.css IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeASCII text, with very long lines (12070) Hashe48bf9262531ce4cf6aa24ca08ccafed f9f9d25ced2e5790d0fdf93ed18e3dbd28c815b0 1c41d6094cb8d858534390d302149ebd9876a7d9922d80bcc2a1df2a3a633368
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/00e954e346cc97a0.css HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:40 GMT
etag: W/"2f56-18d1905b160"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444096
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157ed3b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/6510-76acdad48e575a33.js | 104.18.29.25 | 200 OK | 32 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/6510-76acdad48e575a33.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (31685) Hasheb0886b4cec025ef7dde1f0c8369cacf b16cd3e6567ef5a54c59c13e32544805141927b8 4c1ae563002c9e48b04e4250b6d4f5d533da94f5a90f050ba8456f9a07f05635
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6510-76acdad48e575a33.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"7bf7-18d1905ad78"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444094
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157ee5b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css | 104.19.177.52 | 200 OK | 25 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css IP104.19.177.52:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (24823), with no line terminators Hashe04ad89975c535b30bae773d0eb0d3b2 0c72555d0fd844150b6ec407a57da2d29bf380e2 06c0edbfc1b871fb45195265f5faad3e23191305f6ff2125557a9fbc287c8992
GET /scripttemplates/202403.2.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.flow.page/
Origin: https://www.flow.page
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: text/css
content-md5: 4ErYmXXFNbMLrnc9DrDTsg==
last-modified: Mon, 22 Apr 2024 06:06:21 GMT
x-ms-request-id: c3b057aa-301e-00a2-22e1-94039a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 71959
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879fce1a5a9956b7-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/webpack-f2c96d5f8e0f4307.js | 104.18.29.25 | 200 OK | 24 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/webpack-f2c96d5f8e0f4307.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (23527) Hash60c5ed54a76a45fd1ec78fe75f941157 d910e446ec24ebaf3b69b47d35e8d77500899f3f 31dc83941d6f3d94e4249a9c32f8ea4d291f6414bb2f27bfb0be5882330b9036
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-f2c96d5f8e0f4307.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"5c1c-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce157ed5b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/99179-66b131284e3960d2.js | 104.18.29.25 | 200 OK | 60 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/99179-66b131284e3960d2.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (60107) Hash384d609c492bec07e13e35b31387385c b4703470e8253893e099908217160d924b14410f b884becb66d600c52b0fa9efc41d55eca0763e2e7edcc572c742c4e529d45027
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/99179-66b131284e3960d2.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"eafe-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce158eeeb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/pages/page/%5Bslug%5D-7b676f480728b348.js | 104.18.29.25 | 200 OK | 100 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/pages/page/%5Bslug%5D-7b676f480728b348.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash36076ddc968ba05bd35bca7d7fd67913 b0413803984a47091f1013d5be67833d9ba942a8 54faef34b74f866000799d3569b3c0263f0052bdc458989924b17f1829ab859d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/page/%5Bslug%5D-7b676f480728b348.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 20:38:07 GMT
etag: W/"1859d-18f11d47398"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
expires: Fri, 25 Apr 2025 16:45:42 GMT
server: cloudflare
cf-ray: 879fce15bf34b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 | 104.16.80.73 | 200 OK | 19 kB |
URL GET HTTP/2static.cloudflareinsights.com/beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 IP104.16.80.73:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectcloudflareinsights.com Fingerprint73:92:5A:16:97:55:FC:A5:32:7C:F3:9D:0C:84:EF:F3:2F:AA:B5:00 ValiditySun, 10 Mar 2024 02:33:42 GMT - Sat, 08 Jun 2024 02:33:41 GMT
File typeJavaScript source, ASCII text, with very long lines (19261), with no line terminators Hash3be93fd15d2f7dee2fc0c8981c6fa5c6 8cd88c36fad3e96641dbc4d781f5ddbe5123312f 17106bf803d42bcf2f2bdf778ece084d3f91c68e7ea41dae7bff61fefa573dee
GET /beacon.min.js/v55bfa2fee65d44688e90c00735ed189a1713218998793 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.flow.page
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.4.0"
last-modified: Tue, 23 Apr 2024 12:12:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fce160881712e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| geolocation.onetrust.com/cookieconsentpub/v1/geo/location | 104.18.32.137 | 200 OK | 72 B |
URL GET HTTP/2geolocation.onetrust.com/cookieconsentpub/v1/geo/location IP104.18.32.137:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectonetrust.com Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47 ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashadf75b99dbbf416c627dfc5de30f9ad1 699f3845f7dfb3fa9968c2117b44c3f3eb728fff a0e4a8f457272bd17d07ae2e1e09731df6cc6fdc3ea9e32e713ef4a8a012fc27
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.flow.page
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 879fce18ac4d712a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/chunks/63346.4b89e74a8b77b055.js | 104.18.29.25 | 200 OK | 5.5 kB |
URL GET HTTP/2www.flow.page/_next/static/chunks/63346.4b89e74a8b77b055.js IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5530), with no line terminators Hash359a1bc514279fed79d6289947f618f3 99e27fb72bf0fb2b7c933195165935712e7e51cf d855a897a0f41201b02dadd5e8b39ece509871094eea6de3632c117f55d0a721
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/63346.4b89e74a8b77b055.js HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:40 GMT
etag: W/"1587-18d1905b160"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8444093
expires: Fri, 25 Apr 2025 16:45:43 GMT
server: cloudflare
cf-ray: 879fce1cbdd1b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.flow.page/_next/static/media/inter-latin-600-normal.c6bc620d.woff2 | 104.18.29.25 | 200 OK | 37 kB |
URL GET HTTP/2www.flow.page/_next/static/media/inter-latin-600-normal.c6bc620d.woff2 IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 37056, version 1.0 Hashb212a798db3b717b02ca67e3ca5c0bef 8f664bbee4804fedcc4293b697aa191b1f9a166e f6789b1579e3915acc50ce2f56d956c05dc3186238eb4d1a0d4ad1e403a625ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/inter-latin-600-normal.c6bc620d.woff2 HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/_next/static/css/00e954e346cc97a0.css
Cookie: countryCode=NO
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: font/woff2
content-length: 37056
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 20:03:39 GMT
etag: W/"90c0-18d1905ad78"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 8421823
expires: Fri, 25 Apr 2025 16:45:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879fce1d5e71b50c-OSL
X-Firefox-Spdy: h2
|
|
| www.flow.page/static/404-cloud.svg | 104.18.29.25 | 200 OK | 12 kB |
URL GET HTTP/2www.flow.page/static/404-cloud.svg IP104.18.29.25:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerGoogle Trust Services LLC Subjectflow.page Fingerprint72:CC:9C:5F:B8:7A:96:3E:4C:BD:F0:8D:D7:0B:07:C6:08:89:EC:43 ValidityThu, 04 Apr 2024 00:00:30 GMT - Wed, 03 Jul 2024 00:00:29 GMT
File typeSVG Scalable Vector Graphics image Hashf99d14855ddf352c914f64e8d4f5e767 6fe4eec2c3f3f40f9df47961fc4b4de0acb07f75 e79aeda569af77c0b6ca0399809e52d4edf58313c7acce5dadaaaa3d243b75ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/404-cloud.svg HTTP/1.1
Host: www.flow.page
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/yghbuyjhm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:42 GMT
content-type: image/svg+xml
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: public, max-age=60
last-modified: Wed, 24 Apr 2024 20:41:54 GMT
etag: W/"2d4c-18f11d7ea50"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: EXPIRED
expires: Thu, 25 Apr 2024 16:46:42 GMT
server: cloudflare
cf-ray: 879fce15cf42b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/eed4f849-6744-46e9-8b81-04d191129887/eed4f849-6744-46e9-8b81-04d191129887.json | 104.19.177.52 | 200 OK | 5.2 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/eed4f849-6744-46e9-8b81-04d191129887/eed4f849-6744-46e9-8b81-04d191129887.json IP104.19.177.52:443
Requested byhttps://www.flow.page/yghbuyjhm CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (6149), with no line terminators Hashf5aa28f82b51826bff427492bee1b04a a6fa72fb9f6c943bb31030636a75bff7caf42b09 41b97cb2af3da2114d8d2a82c6bf7ffd31da46deee500dc8eff0e7f290bd8946
GET /consent/eed4f849-6744-46e9-8b81-04d191129887/eed4f849-6744-46e9-8b81-04d191129887.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.flow.page
DNT: 1
Connection: keep-alive
Referer: https://www.flow.page/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 16:45:43 GMT
content-type: application/x-javascript
content-length: 1756
cf-ray: 879fce184fac56b7-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 71959
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DC609CC19FB4DC
expires: Fri, 26 Apr 2024 16:45:43 GMT
last-modified: Fri, 19 Apr 2024 18:15:55 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: So+wteNQx2bbdfDbdf5TPg==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 1f79029a-a01e-008f-5485-92b0e9000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|