| flaredownload.com/assets/hl-e2569f25.js |  172.67.186.1 | 200 OK | 1.9 kB |
URL GET HTTP/3flaredownload.com/assets/hl-e2569f25.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5040), with no line terminators Hash62f7b5943cadd0ff69005e709ff9f991 cc981680bdb61f0873d91f269cebae11d0313c5b 2ed09085a6412312c65ce9a455f47e4ff786d31b9d13acb553e829dfa9a12c61
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e2569f25.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5041
access-control-allow-origin: *
etag: W/"663b4ae5-13b1"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QY3TETq4BhCeWnrzRkysu25rOCUpPEwXbGY0aOs2sdFCdyKIR4Y06fUu5fVW1vduRmEvUfj8nXtro9xTphVVYkddYQ3eW8pMj7mGhwicF810JEDMYmWCKQgSresWzISJA1vG6r%2FyUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d603098a1569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-8e006de9.js | 172.67.186.1 | 200 OK | 1.6 kB |
URL GET HTTP/3flaredownload.com/assets/hl-8e006de9.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (529), with no line terminators Hash27645e26254038ae28c1232255337cbe 7232377ba89d35dd17144da7c0787f0caed21046 5f345600eee551cdbe9658b397c3bdaa2afd6687af98e6843305ae8cd5f22436
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8e006de9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=530
access-control-allow-origin: *
etag: W/"663b4ae5-212"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VKcJ1f2t%2BPt0rTip5b07yjtcChWHk2rhxFOThqO6oSaD1%2Fz2FAu5wAjTSJbuW1tMJ5ySBXdBPt2dCyA2eTXR04x9hGZsayGEXJ37M2iMjqfJtWoM4WudkM%2BdgyHnMApwkKXejV66Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d60308899569d-OSL
content-encoding: br
|
|
| flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png | 172.67.186.1 | 200 OK | 5.4 kB |
URL GET HTTP/3flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 646 x 116, 8-bit colormap, non-interlaced Hashb169e30ad5cb8b0b613ae6c3006afbe0 b0f804da985ec024b15155f33084ee796d1abc0d 7f474dce0f1f49839379e2c6c1130a4a399ccfc5b173eb89dbbc28c83d75a803
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 5415
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1527"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZj%2BIA0UrpDDafJhRFQeF%2BSjBvGW%2FYl1UWXtdTMxWnvYpvpk3cmNxn3S5dakrz5PdremR7Uz%2FdVCfPzImgkX%2F8XVxQbt73yF01cGvJEeJJQ60rCRuJLU%2BxsapUle6YjRlo6DxRk37g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d60328980569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-35a77ba0.js | 172.67.186.1 | 200 OK | 32 kB |
URL GET HTTP/3flaredownload.com/assets/hl-35a77ba0.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (37102) Hashf87da472e47dc575b6cb8dc377d18916 bff262654ae71f3be0a658cfbe5a53c787c05d55 5c38207c92f3650eaef6616521c8b1e0a03ceb384030f1c2b67cb75e25925ca8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-35a77ba0.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72018
access-control-allow-origin: *
etag: W/"663b4ae5-11952"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mlsjzSn30JdBHiEPrbWyC8tYkeUnjWL%2BTfP%2B4MUqe5jN%2FX27otGXz9FSG7Ne2NFLYggFa2yGS3O4I59ktW9%2Bw1OK49YGia9ykjUKqehl%2BYaK7R9ssH2w7F%2FfCSioNd0YFr%2BkqbqTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 880d603098a3569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/visit/get-data?landingId=7867&subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource= | 172.67.186.1 | 200 OK | 7.0 kB |
URL GET HTTP/3flaredownload.com/visit/get-data?landingId=7867&subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource= IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hashc67de772ae6e7a8e47cfda1980648ee3 6396eb876df034053c24914a31f47c33a9822392 1be1614fc609537592f78626a20506abb28dd681eb6c0733f9b382c3c2b563a0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /visit/get-data?landingId=7867&subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sentry-trace: 5342dfc8aebc4f64a3fb1080950f151e-9f7f00e56c22ecbd-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=5342dfc8aebc4f64a3fb1080950f151e,sentry-sample_rate=0.1,sentry-sampled=false
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/json; charset=UTF-8
set-cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; path=/; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dbRF5hteaVc1nAOYW0w1lBUHv2dlErEIUTzk0onDBtq7pQKZDw3vI%2BZN26KauavoC2oXOzO%2BKODcYrcUAhZhQy07VGxL3kE7HyeskNCrbWsWkC3OUReYGc5Ciw9%2FCNrRq%2BD%2FLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880d602dcef6569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png | 172.67.186.1 | 200 OK | 5.4 kB |
URL GET HTTP/3flaredownload.com/prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 646 x 116, 8-bit colormap, non-interlaced Hashb169e30ad5cb8b0b613ae6c3006afbe0 b0f804da985ec024b15155f33084ee796d1abc0d 7f474dce0f1f49839379e2c6c1130a4a399ccfc5b173eb89dbbc28c83d75a803
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/1f98d63b3bd5b60546b0fe5159d1b7b8.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 5415
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1527"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZj%2BIA0UrpDDafJhRFQeF%2BSjBvGW%2FYl1UWXtdTMxWnvYpvpk3cmNxn3S5dakrz5PdremR7Uz%2FdVCfPzImgkX%2F8XVxQbt73yF01cGvJEeJJQ60rCRuJLU%2BxsapUle6YjRlo6DxRk37g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603319d3569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png | 172.67.186.1 | 200 OK | 4.8 kB |
URL GET HTTP/3flaredownload.com/prod/images/58294b522e31bd664bc6d1dd76cec438.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 190 x 108, 8-bit/color RGBA, non-interlaced Hash12e2bcc7cae9c2211a695df886e28e9b 0e31a94632d7efa8ca00b3d84b90f3e61fcc7322 cdebbfd2ef3531023cb60b657445e188a0e76824338edc4ada292ac7ab1e164f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/58294b522e31bd664bc6d1dd76cec438.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 4792
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-12b8"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5BsXSQaqY7Vblj8A2d0QKC22fFKzkjRqsai%2F%2BG6EzA31uLW%2BWK8VZaKuc17U6FiUXbLvyXUa6Pbu%2Bcsn%2FAgvlD8zrfDCQUEZq5jzJCfA2KKkDX9nTAxfZmkSnwgn%2F4l01vCp03TGzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603319d5569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png | 172.67.186.1 | 200 OK | 1.1 kB |
URL GET HTTP/3flaredownload.com/prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 142 x 116, 8-bit colormap, non-interlaced Hashcf1125dc9e8565471095b2315121607f 4587708c5f5abb1f9e5edfa01df0db5231dc6384 b6834940fa7f64a908522d2f88d6487b2da1580f6ae729e7cb8f7088c9b9204e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/d6f1a49d2bef9aed973072b6061b3cbc.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 1089
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-441"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5O2dz2jsF5%2B92QiiWR6BhHu1kxduQ5mSWcYIAoNzUxy5xjFWFhLG%2Fl4VSrO%2FthPxeuTKmjVblI4cyR5eHXYlrSWE0betP4SqRRJOuOq6RrL0AtXDQPRPXAE2aNArF3Vma15MG73abw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603319d8569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png | 172.67.186.1 | | 723 B |
URL GET flaredownload.com/prod/images/8cc59accec24f33766b15adf267e9641.png IP172.67.186.1:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hashba8f10079cf5a5f5cffd4312e047db3d 2864af04fbdb64a20c8e1c2615a0401fca4bc956 e157263323db5ea8e56113a9119f4733b0a8130563d87e20e1b3575f4f22620c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/8cc59accec24f33766b15adf267e9641.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 723
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2d3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9XlrCcJw3P08JTRoUky75%2FDWHUQAH0faUK8fye%2FSWn9AYhXJTahN0ck%2FMjD1pE6CdjiDdRFsdBpGC2T4SwZ34FzaCFBcPWyfzfKFKTvn4idQSiKdifzBNCdqeWro%2FJ%2Bth6eXl%2BaSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603329de569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png | 172.67.186.1 | | 110 B |
URL GET flaredownload.com/prod/images/a032b8243950801928214bc5092e9764.png IP172.67.186.1:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 48 x 48, 1-bit colormap, non-interlaced Hash09d6a9ebc45af5c5367f0a216e6234d7 357bb5d08644fbe599d34d165652dc19afe0df9c 5fda2ac54507259375f4107937b24a9c42302725c816cfd1620e84a526c734b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/a032b8243950801928214bc5092e9764.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 110
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-6e"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d8%2FKASo2%2FfzVvmX5AcdhTjFhvcu6%2FcmQZpl6CH80cUd4Me3V6IFdcXP3PrCoE8CToHvZjZQtKmZid2drJQyZkeGQ%2FQJuSgPVWV4gLDUu66uiloOigoEDQny1doS%2FCj3EZvTXfrYdNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603329df569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png | 172.67.186.1 | | 220 B |
URL GET flaredownload.com/prod/images/db126da1b71e69a76e54d2f4139a347c.png IP172.67.186.1:0
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 72 x 48, 4-bit colormap, non-interlaced Hashf1063acb225b213d5fa9b231ee16cd25 e549decdc41f5ee29e75387f32470d90ee772787 4ee13f508c5a43754521cc34fd490bfb72daa996baaa558fa8638586371b1752
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/db126da1b71e69a76e54d2f4139a347c.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 220
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GYUJV8thoNmGTeyKXV10e70sqH1UWLBso%2BS6u0UnDveOCJV%2BToZUgZuv8BHZhMsv1mvKoxyTr0qw2tRLx0%2F%2B41ilnCrxxwQbkJQuYYEpgUCFm8q%2FB6XUm6R3zNmZCjEUpcTq9GVShQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603329e0569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png | 172.67.186.1 | 200 OK | 736 B |
URL GET HTTP/3flaredownload.com/prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 60 x 60, 8-bit colormap, non-interlaced Hash3e81792d1c3c845ca714ccb6d622a5cb 370d33f46430e85060c11f8d0d325b963743e738 039b1d9bc03573a402798799c1d0dbef6f03979e51ccf3576d2cfb07112b4145
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/0a0c25c3671252ddad1a0a2c61b4aa3e.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 736
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-2e0"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DuH63%2BKyapLzr0OOcHoTaDP1qFuQUKxJI%2F6Zb5xLvvjWo8FfJaFVV0SaoD%2BJCJWRaiGl4XQcGuXbcy71B5D5WftJBugpv0Ud%2FPcbTGH6yS3JZJr%2FBNuXcC2qpjZgJL0HV8ogWcRjrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603329e1569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/f1239f7cb9bbbfc719d60b288619d7de.png | 172.67.186.1 | 200 OK | 113 kB |
URL GET HTTP/3flaredownload.com/prod/images/f1239f7cb9bbbfc719d60b288619d7de.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 993 x 546, 8-bit colormap, non-interlaced Size113 kB (113379 bytes) Hashd8d5a5e33a87b192a74126bbaf431726 febdcfef57d6d6d8a7b81c46f30d47a065d7e0df f09f3901c52fc5ec1650f763efcd1f2b41694db31a6d3e135a1c5cf020e1e490
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/f1239f7cb9bbbfc719d60b288619d7de.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 113379
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-1bae3"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iSCRfAon74RKU8e0LIGKJCqOvnrKN1%2F8M9%2F8eHIaLQDaHm%2FIPq9l6TMCNT%2BdKsekQHRVecWpDfXQqrSV3HoUIveoOVA9QMjRIQ4uz3sz4jJ4w9ygluFYbKn0yDEyqBdnYRuzJggOug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603329e2569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg | 172.67.186.1 | 200 OK | 607 kB |
URL GET HTTP/3flaredownload.com/prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1258, components 3 Size607 kB (606551 bytes) Hash2296953043efaeb814b4ac9aa91b1edd 9947df98a24084f16562735b335d14d574f84d82 25d11bd085d802574f8fc54f57abea5572f97b91b0d0c89429736e7d5ba6567c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/fab0ca77292b4d30dbf253d27c664fb3.jpg HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/jpeg
content-length: 606551
cf-bgj: h2pri
access-control-allow-origin: *
etag: "662b9304-94157"
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FoLlIWg8aPmmh8rrxYvZZvjeFkvPq%2FgDxPA6xTnTDilLuSHKiwNulLxaw0TrfQUlYkFsZa4%2FV5z4eDjPt4XB7L0b7npoCzz3YLFBv9EdhoZUczQtXdxu1wnDtxNJrN9YnoLq5TrHcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603349ed569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-28a0afe6.png | 172.67.186.1 | 200 OK | 132 kB |
URL GET HTTP/3flaredownload.com/assets/hl-28a0afe6.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 490 x 310, 8-bit/color RGBA, non-interlaced Size132 kB (132079 bytes) Hash663a088b73ce519c38adbad79e82d659 39ef28b09af2fdcf7f683c58efc18a43bd9e121f 28a0afe680833c1a10601e37f8a86a59b13f0e10aa03b9f5a5c53848639f77ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-28a0afe6.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 132079
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-203ef"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2wQyEB0CKBQagBhv63wdgXc6J%2FXui1%2Btc2LpjjFCHPIWz77TNO3JqsDwD9aOuPMeWEWJmt9CkjuNgE3t4nvkRjAqKvNWEdu5FvJ8%2FMu2OkzYWRlEDmp4m8TKaDJG8z2kj8quRQwdHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603349f2569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-3638d339.woff2 | 172.67.186.1 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-3638d339.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16860, version 1.0 Hash13049c7a16af3e830b7668f15f8e668a f9eca560164be1be239e42c43cf8bb07aa7d8f14 3638d33930adfd35323251395221e7b9e1f2a641e6a1ead6e9d18d09588a2cfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3638d339.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/octet-stream
content-length: 16860
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-41dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cQiDr4TGyNrqeIrzwleXWnP7pyyJ96XO19WmBWBuOcRW%2B8omUTDJeqsV6cVglM%2F8ZalR5bsIQJiF%2FeJln2da9w45FbyQqG%2B2hG8uYTGgv3aAVnS1YId8N6uumBFiI9NBpnzK3d%2FqkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d603369fe569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-c3c0d3f4.woff2 | 172.67.186.1 | 200 OK | 24 kB |
URL GET HTTP/3flaredownload.com/assets/hl-c3c0d3f4.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23484, version 1.0 Hashb4d2c4c39853ee244272c04999b230ba c82e22dde9716c40ba20e6c7ed03a1b66556de15 c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-c3c0d3f4.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/octet-stream
content-length: 23484
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-5bbc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HWpbYvETh%2F7LsTGx7%2FCQfGQQUdM3keMTgf%2Bk4MwLMNumQgTLeQ9OlMOjNGGpKB3asCzOjdWTSxbfF1eFJBm7tOi4J7oGJQ0SyWH40GbdHijN8zlmJxu54TUe9eKSll%2BZtPTVSvoCvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d60336a01569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-8d3ca80f.woff2 | 172.67.186.1 | 200 OK | 23 kB |
URL GET HTTP/3flaredownload.com/assets/hl-8d3ca80f.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22992, version 1.0 Hash1efbd38aa76ddae2580fedf378276333 8a49976f2470ba2a1db6144245355d3b889312e4 8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8d3ca80f.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/octet-stream
content-length: 22992
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-59d0"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jAPT2Jv4uDF69MDzQhNYT6qw5iMMxRLUTdndjThtmHlxIl8x2jEupv%2FNQxZUYprbKgYlfNPQ1eVXE9BWwk7jJvbBkC8ghAi%2B0udmwjyAT0EERc5mkKGqo%2BM2H3bJbEvgIxwgeKFtaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d60336a06569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-70789bd7.woff2 | 172.67.186.1 | 200 OK | 17 kB |
URL GET HTTP/3flaredownload.com/assets/hl-70789bd7.woff2 IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17372, version 1.0 Hashc02fb7419b8629666bf2ccc0a5177e3d b70b21a3e6e55fbcbae137a3cbb4e05371c2bab6 70789bd70be9b6d68acd51063e499d6fe5e7fe53a654dab4fb00a8cf5bfe3637
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-70789bd7.woff2 HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-04d68de7.css
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/octet-stream
content-length: 17372
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: "663b4ae5-43dc"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UnZXDE0o6%2FeK3Q8egn0UvoiO160h%2BGamcMIiJqBi46cXyYG%2Bu4QZzNG5WOvSnGULteTdjeIb36N%2FwJVy5KwIMQIvWYzDdKNXmCSUMmeKUCttT5x55RgKXrgxxuftV8vW8Ge1cu7PfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d60337a0c569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-1d2dcd13.js | 172.67.186.1 | 200 OK | 2.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-1d2dcd13.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (2841), with no line terminators Hashfde45abc6a6bb5d05caae33f6f5e1fd6 40bbf887a3ac624c4f0f59f77a95323b396ac50a 1c0416b4d6eeb452dac84a3f093336d5f6309c33cd23092f5643cd7ac22d4872
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-1d2dcd13.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2842
access-control-allow-origin: *
etag: W/"663b4ae5-b1a"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3rr2N%2BGITRNMmgJTrfCtzIwuVsszitI8U4R43Tbk50uEXl%2FrgXsKVDM304DdXaL%2BzRALTF2OJwvyLSgWHn%2F%2BSU2d1P7oQKoRGENerDKh7k8ipf1XXnICUFp5XktDWt%2BL3pC%2FTkBRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d603319cd569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-ac0f3d90.js | 172.67.186.1 | 200 OK | 95 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ac0f3d90.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash144400b2159179d446f86490a79c7be9 a756e385940bb142be7c6d54ac37565dd245d82a 46a6e9359ddb1f887d8c865e0caf2037c83aec329aeca13d504aeb81e17d49e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ac0f3d90.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=267708
access-control-allow-origin: *
etag: W/"663b4ae5-415bc"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PmwzkkutEe%2FH6MAi%2B%2F2Yl2Y7OaGeAJtjVWHsTtR6KeNt2rpSb346mn738MX8cV2jgJkJ81UfWzwtBPxP7HzVdYk2nC3V7wTyYq3iEWMfNWqlgkEMBVJglrJQe12C4rlWfsFKswtOTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d6030084d569d-OSL
content-encoding: br
|
|
| event.secureanalytic.com/register/event_log/v9e179lqez |  188.114.96.1 | 200 OK | 0 B |
URL POST HTTP/2event.secureanalytic.com/register/event_log/v9e179lqez IP188.114.96.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/v9e179lqez HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://flaredownload.com/
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 23:54:36 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
access-control-allow-headers: content-type
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
access-control-allow-methods: POST
x-frame-options: SAMEORIGIN
access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YGsIqFwu84rOtsPvKdfFcCPPBuXx3vdwB5O8LNub1R4o7zmRYBBKaFLdK3SUdj%2FjqoY2%2BqUww3drltO03JETq2jxzdx%2B%2BNmfBh3hVjaR%2FXe9dOaC0uglEMt7pGjcY%2FlVRixlBPkzkiyat54%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880d60349d2156bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-be61e397.js | 172.67.186.1 | 200 OK | 14 kB |
URL GET HTTP/3flaredownload.com/assets/hl-be61e397.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJava source, ASCII text, with very long lines (779) Hashbfa9cb2394b197ac7142712649a4e204 211a5a893b499a01ca584cc4e5ba6757046e963a 563c18159bfd480bd4501243a05bc0bb7de0faef6222174bc59401110ab9a856
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-be61e397.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-e2569f25.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: W/"663b4ae5-30c"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8s8B5jEOBuUyEI0qdhNhRu11DdAZw7HiQYx7VWf53qCUiRMhSQY%2FS2lXRulXpjpfrOReBnDs84WrcoZeP5%2B1RArNtkzjsCXwr5AZpyT96dS0S%2BpUS2SzYhT6LMbVgdmuO9V6zOBEIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d603329e5569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-be61e397.js | 172.67.186.1 | 200 OK | 5.2 kB |
URL GET HTTP/3flaredownload.com/assets/hl-be61e397.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJava source, ASCII text, with very long lines (779) Hashbfa9cb2394b197ac7142712649a4e204 211a5a893b499a01ca584cc4e5ba6757046e963a 563c18159bfd480bd4501243a05bc0bb7de0faef6222174bc59401110ab9a856
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-be61e397.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
last-modified: Wed, 08 May 2024 09:50:29 GMT
etag: W/"663b4ae5-30c"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8s8B5jEOBuUyEI0qdhNhRu11DdAZw7HiQYx7VWf53qCUiRMhSQY%2FS2lXRulXpjpfrOReBnDs84WrcoZeP5%2B1RArNtkzjsCXwr5AZpyT96dS0S%2BpUS2SzYhT6LMbVgdmuO9V6zOBEIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d603319ce569d-OSL
content-encoding: br
|
|
| flaredownload.com/lead/prefill | 172.67.186.1 | 200 OK | 5.2 kB |
URL POST HTTP/3flaredownload.com/lead/prefill IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
Hash469b4dc67eee4f13496c7ba2715efb9f 96bd09b7e53a9fea666b2e54004cf249d4bd4e17 58a8c78e450324ab7e738926547a4fefe1a2d59801c07d7c96ba6e48c53d248b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /lead/prefill HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
sentry-trace: 5342dfc8aebc4f64a3fb1080950f151e-8a67da3c39cce9f2-0
baggage: sentry-environment=production,sentry-public_key=9056b383582c444792eb65c1726488d9,sentry-trace_id=5342dfc8aebc4f64a3fb1080950f151e,sentry-sample_rate=0.1,sentry-transaction=LandingHome,sentry-sampled=false
Content-Length: 56
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/json; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=45aK6MaxN8XjxB4pCDHsRPCbLjYQwz%2BbQ434Zb3ErOEO8JXHenSuqFL8HBmTqLOqojxUXfTiuS2ySIyIThTCRqHO1vXmYohzE4TO3NGnICFD4HAHPVAi10mvaB3IW10p0VRprQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880d603309c2569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-f1b986bc.js | 172.67.186.1 | 200 OK | 7.6 kB |
URL GET HTTP/3flaredownload.com/assets/hl-f1b986bc.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1922), with no line terminators Hash2513dcb5ea3631b78496d56a1c8d7e9b c27b476069f6e67d22486fc20bd0f9fe841525d9 50ccfdf72d808f79166a95f190508636d3f5846abd39deb2ef6f05143421b2ee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-f1b986bc.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1923
access-control-allow-origin: *
etag: W/"663b4ae5-783"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sRjNQvRafvnne2c6EeJ%2FxLC1xDOkya78UGqXNRkmUrgsoHYOiRApU33Oy64WddjlTVnC0J%2F11BFbHd5IG%2Bh9lILJso13yZUPkAYLo3Tdu2gJ%2BwxwsOmb4GBOszpBvAZOg%2FB9Kfo7Nw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d603319d1569d-OSL
content-encoding: br
|
|
| event.secureanalytic.com/register/event_log/v9e179lqez | 188.114.96.1 | 200 OK | 0 B |
URL POST HTTP/2event.secureanalytic.com/register/event_log/v9e179lqez IP188.114.96.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/v9e179lqez HTTP/1.1
Host: event.secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/
Content-type: application/json
Content-Length: 103
Origin: https://flaredownload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 08 May 2024 23:54:36 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: SAMEORIGIN
access-control-expose-headers: Authorization, Link, X-Total-Count, X-pushPlatformApp-alert, X-pushPlatformApp-error, X-pushPlatformApp-params
access-control-allow-origin: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JtmZWSP9xLQIGhSKjkyO0afpEcE7jFTbt%2BeKACFxH76h%2BbZ6uNdUUdo6uyA4WMDH%2Fmfprv29buQVmfgW1dEOqcmh2F0WtBMHeZ5BYzCi3WBM7CLnGv3kbULkV7QB9UUAVCI%2BxYZck8QFAyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880d6037cf7456bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-3bcd5885.js | 172.67.186.1 | 200 OK | 10 kB |
URL GET HTTP/3flaredownload.com/assets/hl-3bcd5885.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (616), with no line terminators Hash91f13034f53da0ac54e4b46fba314d39 cdbad13d71a203f387a5e4f463efde8b8bce07a5 3893253c45fcd3d259dfded23a81852bc8adac040cd6e4478649510e09cff1a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-3bcd5885.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-e2569f25.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=617
access-control-allow-origin: *
etag: W/"663b4ae5-269"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fhvm3yzj%2BZnVUxu1uS4YwHxDo%2BxJ00Bd%2BlGomNKpP6iLlEClbPOwyykdB5p1psiLplXb2fScpjeSMHV4SgBhJG3ZEPZbGaMQjxeQ3Qt9JUJpaM6SBoUu6Oiyjq11OylNfcYcJ09pUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d603339e6569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-8521ea14.js | 172.67.186.1 | 200 OK | 3.2 kB |
URL GET HTTP/3flaredownload.com/assets/hl-8521ea14.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (3246), with no line terminators Hash96a3967b148d80524d5d53991dfc35e0 8d4475b0517d2e554a51546b705ec7b2f11d53eb 7fdeb56df8bd63925559d0eba00a69509e1326335da3a27e8554d02505e8c4ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-8521ea14.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ac0f3d90.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3167
access-control-allow-origin: *
etag: W/"663b4ae5-c5f"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDRRWtA6H8wNp9PbCI9p8fuxLy1H27BPMQ0nlcz8enYA5Sz1MSMR9aAOJh%2BBeCA1H%2Bo87OMG5e7MDBjBgW3ouziuh77ooI5MruNm9td5GS26yZL0vwdOIlmDyjxjVZFiIBWusXrgwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d602f3fed569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com | 188.114.97.1 | 200 OK | 8.1 kB |
URL GET HTTP/2secureanalytic.com/scripts/push/script/02eyoyxdkz?url=flaredownload.com IP188.114.97.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerLet's Encrypt Subjectsecureanalytic.com FingerprintE8:56:22:9E:5D:B8:81:BD:9C:20:0E:24:64:BE:C4:CA:4E:D6:C9:63 ValidityFri, 29 Mar 2024 10:27:40 GMT - Thu, 27 Jun 2024 10:27:39 GMT
File typeJavaScript source, ASCII text, with very long lines (8385), with no line terminators Hashb45c7286594795de3b392f6f8942604d 51239b08544394e811b8fdcc3bdc1df3832256e5 d1cfecd1075f9a9eea50304717a1fbd7cf2601c2d2bc80c698d4136846fdbef7
GET /scripts/push/script/02eyoyxdkz?url=flaredownload.com HTTP/1.1
Host: secureanalytic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript;charset=UTF-8
expires: 0
cache-control: max-age=14400, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src * 'self' https://* blob: data:; font-src 'self' data:
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-content-type-options: nosniff
permissions-policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
cf-cache-status: EXPIRED
last-modified: Wed, 08 May 2024 18:16:06 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xtiDtOmK2m8ZJkAcsfGVDidwD6vNVhM1gtL%2B%2FxIA1%2F0tfI8zuDwgSqRpJUlim2ivfHYL9Z8E1AflCXHAnFvc%2BYEfhNxoQ%2BMpn4pSjxVZ0jv2kVEqYCKKBwEKZjUwdzI8nJz%2FAFU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880d602fcec85691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-174bb060.js | 172.67.186.1 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-174bb060.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash12bcc39d49f0f8ac37fe5e398081fdf1 f158861f98bc6c8dd75fc7b7f6b3b0631e62401b 7a8f91af99ee1390dd9533577681aae34565792e41688822ebe39b9e7a211f6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-174bb060.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663b4ae5-394"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBF41In3%2FakrGcl1umG1XKIHXKYk9Ny2Cb9h3JMyU9HPtVo4ueyra2B6p8JB%2FPPt36q%2FTyf%2BG1xszRnuTlcKU1qv0SPFXBVq6Ukg2IQBhmu6bqWVTLQe57nuZZc31%2FNt2tN0kIVVmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d6030989d569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-9cba352e.js | 172.67.186.1 | 200 OK | 687 B |
URL GET HTTP/3flaredownload.com/assets/hl-9cba352e.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (707), with no line terminators Hashbc701f7dfd58958fcdd75298f5d8d1f3 abd85d09742b52a3b111fc198a72f1df7eb25e68 d10a429f4a8e8f1894720d8062ac1004567e4967704416b24dca1bb3c8f0d0f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-9cba352e.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=688
access-control-allow-origin: *
etag: W/"663b4ae5-2b0"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iHtWE8qrqE9KRXfy4IRd2aDVvH5ibj095zoecInDfHkvBmfIXdN6NSF8ouopmAkwlFAlRlph39vr014S05G3G0UgHruLo0k2TX7Y2P08qiJj98kgMm%2Fv56Dl%2FavXJWFvL5PHy1GUAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d603098a0569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-04d68de7.css | 172.67.186.1 | 200 OK | 114 kB |
URL GET HTTP/3flaredownload.com/assets/hl-04d68de7.css IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (65329) Size114 kB (114023 bytes) Hash038b389697202a86001d7cb8b113803c c031ffb6795766b1babac743602c2d386b4e8d03 232cf36617bb2fd98321cbcd5fd0eb0cfbcf9b69c85a4d6e7d5134fc549436ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-04d68de7.css HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=114555
access-control-allow-origin: *
etag: W/"663b4ae5-1bf7b"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=10VAOjjlidy%2FAPAu0gPbrpCnAeRvqsISnOztetgbRyyWymdHoFsCj7shnf%2B0z5tNlZwovssmXkvWMVyb%2FihNhVFgsCglBgzsyPJYP%2B3LF%2B%2FzgoHY%2FCupxuQ0V3YhAVahMuTxT9PnJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d60308895569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-d7856d82.js | 172.67.186.1 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-d7856d82.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (7803), with no line terminators Hashdcddd9b1beb76e9abad1be7ea5f5b465 55f2ccb1efb1ff4592821a30b600eb3ad6151b14 3eccfda7f500f621c0f40744f0657594f34a3847471a3eea4abbec19556f5aca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-d7856d82.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7114
access-control-allow-origin: *
etag: W/"663b4ae5-1bca"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C0Xree4E6KLz19GwyO0c%2BJDdyzkZkE0u2PXd43wwOvr4qfZvF3I%2BkwqgGgBvYGXtQWWfdUo3z4mxDFAYwinainB%2B5ZauFQh7v5jfnKHFxplxr6kn0XwsL%2FuOBUWxK5RZ4wNlfmtFCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d60308898569d-OSL
content-encoding: br
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700 | 142.250.74.74 | 200 OK | 8.7 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700 IP142.250.74.74:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (8956), with no line terminators Hash91804c0df51e58b0bf469561e1ac2732 cc5a9023e310b49ef8f8ae32bb89ea774fe116ec 8a8aed46bfb9cdec8e34e76343b7e66796cf09926aef42efdfe5fa8a1fdda8aa
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 23:54:35 GMT
date: Wed, 08 May 2024 23:54:35 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| flaredownload.com/prod/images/b8951ec12fcbc404228c41b98bf7dc05.png | 172.67.186.1 | 200 OK | 917 B |
URL GET HTTP/3flaredownload.com/prod/images/b8951ec12fcbc404228c41b98bf7dc05.png IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashae126dcdf8581afd4f5287e47a865c4b 467a70ace4e8ba22c6d060de9a51041158c93d0f 584e53768bb90991e7b60eb7ecc2c5d9c26dd9a4f782a104030348c9b82cf473
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /prod/images/b8951ec12fcbc404228c41b98bf7dc05.png HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: image/png
content-length: 917
last-modified: Fri, 26 Apr 2024 11:41:56 GMT
etag: "662b9304-395"
access-control-allow-origin: *
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZG8gN5SOeskEqQm8M5OkCdEzsZwFy0MuPZQvR%2FjOGaR82eOtXs7iAm%2Bf5Gja6Sotn93EkhP1%2FarH6gMKOKfhT%2Fzu14czwakYuTq2JeCBxV7xYbat70EK2ILXaP6qWFiQX34ouNQyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 880d60353b03569d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-edb2da2a.js | 172.67.186.1 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-edb2da2a.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1438), with no line terminators Hash862c9cf6fcd7b7f9a63460432c1c4cd4 fd37338a883a89512e82afbc9c5e226b871d4fed cd09ea827717eb9bf6f24164c61f1c8c8fbf4c41d80b4c9bdf48cefede2e3290
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-edb2da2a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ca68ddb2.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1413
access-control-allow-origin: *
etag: W/"663b4ae5-585"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QiBLwKiZCCy4c4L%2FG6ntICB2q8ooeoJ8zAUkCWhRcKZ4PpwY9CqKnaIqlmoeVZYuOUkoRogyWu6SwsrlsTfPYfa425gr7FV8dvFr88H1%2F2c6sTg%2BBXU%2BFZkVisJ4GDlLZsrm3cGbrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d602fc834569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-e8f6c714.js | 172.67.186.1 | 200 OK | 561 B |
URL GET HTTP/3flaredownload.com/assets/hl-e8f6c714.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (583), with no line terminators Hash4dae65fd7c12b1047898c3bc2e480703 49d61cd294e25f3dc0aeaf08a275bd144f7ad31a cd969cb86a11edc3cd4341030cb195ea31112697eac9127b4c828bff263c1ee3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e8f6c714.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=562
access-control-allow-origin: *
etag: W/"663b4ae5-232"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hgdB98wf5PM%2FqlKdyFSrcNLMVqHvkmpmJZnSr5geeRn%2B1mRsr4hg%2F18TYx%2F7HVXCRFOw88osQSWffE7comM5jcHxls86uc6URuEvsr%2BfxlePA0X6VOlhbr%2Fxmtgf4jN72270eBjxMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d6032093a569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-ca68ddb2.js | 172.67.186.1 | 200 OK | 5.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ca68ddb2.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5349), with no line terminators Hash20251415039fc8647b996c6077080eb9 0d67038d9449aa3bae7223f07044582331314436 5d77c91ed616d6e9acc516c87d865e5f6f6a566e215af4771110261f5b8dfef5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ca68ddb2.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ac0f3d90.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663b4ae5-13c2"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UetglSBUEeVzV1EQ6IUVcDHz%2BQoU2DrIyfM1E2zdI0sAGCVEiTjDMnj%2BI5uk2cBLo4DBMu3hS7inrwqnEOhQfGHRR8L35Dt7z4w%2Bb%2FJYiCMA4F0Cvf4K85UtN4V0brWKhb8N192wKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 880d602f4ff3569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-de833af9.js | 172.67.186.1 | 200 OK | 690 B |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (704), with no line terminators Hash25a523c7c0658e2bf768f0e26f59fbd8 fdae37e60c01daf3551830ba3639873e313e6495 37c6c8ba37235a274a7739b7021a9ea8104d57dd951ede499d1691f28175fb59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663b4ae5-2b3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXG9xPe%2FaK7QB6QyHLtkhD5qE2L%2BbxQDHkhg3k1Mqw%2Bx7yVF20XWFdM2205dMgfdxRWyy2XHbnhAdL3tC%2Bl%2FND7QJsHw2mQnlkQ%2FkgKrHLAkn8teUwq0cM5app6tXMjfocgYDYKLEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 880d6030a8a6569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-e8f6c714.js | 172.67.186.1 | 200 OK | 561 B |
URL GET HTTP/3flaredownload.com/assets/hl-e8f6c714.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (583), with no line terminators Hash4dae65fd7c12b1047898c3bc2e480703 49d61cd294e25f3dc0aeaf08a275bd144f7ad31a cd969cb86a11edc3cd4341030cb195ea31112697eac9127b4c828bff263c1ee3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-e8f6c714.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=562
access-control-allow-origin: *
etag: W/"663b4ae5-232"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hgdB98wf5PM%2FqlKdyFSrcNLMVqHvkmpmJZnSr5geeRn%2B1mRsr4hg%2F18TYx%2F7HVXCRFOw88osQSWffE7comM5jcHxls86uc6URuEvsr%2BfxlePA0X6VOlhbr%2Fxmtgf4jN72270eBjxMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d6030989e569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-9cba352e.js | 172.67.186.1 | 200 OK | 687 B |
URL GET HTTP/3flaredownload.com/assets/hl-9cba352e.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (707), with no line terminators Hashbc701f7dfd58958fcdd75298f5d8d1f3 abd85d09742b52a3b111fc198a72f1df7eb25e68 d10a429f4a8e8f1894720d8062ac1004567e4967704416b24dca1bb3c8f0d0f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-9cba352e.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=688
access-control-allow-origin: *
etag: W/"663b4ae5-2b0"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iHtWE8qrqE9KRXfy4IRd2aDVvH5ibj095zoecInDfHkvBmfIXdN6NSF8ouopmAkwlFAlRlph39vr014S05G3G0UgHruLo0k2TX7Y2P08qiJj98kgMm%2Fv56Dl%2FavXJWFvL5PHy1GUAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d6032193d569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-edb2da2a.js | 172.67.186.1 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-edb2da2a.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (1438), with no line terminators Hash862c9cf6fcd7b7f9a63460432c1c4cd4 fd37338a883a89512e82afbc9c5e226b871d4fed cd09ea827717eb9bf6f24164c61f1c8c8fbf4c41d80b4c9bdf48cefede2e3290
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-edb2da2a.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1413
access-control-allow-origin: *
etag: W/"663b4ae5-585"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QiBLwKiZCCy4c4L%2FG6ntICB2q8ooeoJ8zAUkCWhRcKZ4PpwY9CqKnaIqlmoeVZYuOUkoRogyWu6SwsrlsTfPYfa425gr7FV8dvFr88H1%2F2c6sTg%2BBXU%2BFZkVisJ4GDlLZsrm3cGbrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d602f4ff1569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-de833af9.js | 172.67.186.1 | 200 OK | 690 B |
URL GET HTTP/3flaredownload.com/assets/hl-de833af9.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeJavaScript source, ASCII text, with very long lines (704), with no line terminators Hash25a523c7c0658e2bf768f0e26f59fbd8 fdae37e60c01daf3551830ba3639873e313e6495 37c6c8ba37235a274a7739b7021a9ea8104d57dd951ede499d1691f28175fb59
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-de833af9.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=691
access-control-allow-origin: *
etag: W/"663b4ae5-2b3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXG9xPe%2FaK7QB6QyHLtkhD5qE2L%2BbxQDHkhg3k1Mqw%2Bx7yVF20XWFdM2205dMgfdxRWyy2XHbnhAdL3tC%2Bl%2FND7QJsHw2mQnlkQ%2FkgKrHLAkn8teUwq0cM5app6tXMjfocgYDYKLEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d60321943569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= | 172.67.186.1 | 200 OK | 417 B |
URL User Request GET HTTP/2flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= IP172.67.186.1:443
CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeHTML document, ASCII text, with very long lines (456), with no line terminators Hash39ce52b2fcecf0358758e13125fc5f06 42af26d1c5a4aabc773f3a736bb2ae4d64329512 2251a785b30dbee8a2bc13df5ba2d85f0ed8c0e3842f0edc93405560fe5fc2d0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1E1a%2FDXhEpk5UE5wLgUvH%2Fzu7nCOh3lwaKsQw%2BVDMyAlZGtDOAC4bXT4a5fUe%2Fga98gEx7RdqQsW5s81jTRbwsOuFKVdjEQxPi3wmWlAw8e6miXTs1tkosHVI%2FDNxd3O1ckZmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880d6029fd7c56ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| flaredownload.com/assets/hl-ca68ddb2.js | 172.67.186.1 | 200 OK | 5.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-ca68ddb2.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (5349), with no line terminators Hash20251415039fc8647b996c6077080eb9 0d67038d9449aa3bae7223f07044582331314436 5d77c91ed616d6e9acc516c87d865e5f6f6a566e215af4771110261f5b8dfef5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-ca68ddb2.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5058
access-control-allow-origin: *
etag: W/"663b4ae5-13c2"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UetglSBUEeVzV1EQ6IUVcDHz%2BQoU2DrIyfM1E2zdI0sAGCVEiTjDMnj%2BI5uk2cBLo4DBMu3hS7inrwqnEOhQfGHRR8L35Dt7z4w%2Bb%2FJYiCMA4F0Cvf4K85UtN4V0brWKhb8N192wKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 880d602f4fef569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-0a51a8ee.js | 172.67.186.1 | 200 OK | 418 B |
URL GET HTTP/3flaredownload.com/assets/hl-0a51a8ee.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (440), with no line terminators Hash4638b452af7468399ccc117abfa660bb e01a5fd946ba14d7d1c5e133aaaa41c7ccfc13a9 2ac7ff78bc463d8a1c0af8e28bba852ba709c26c6dfee3b0f740593475bec529
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-0a51a8ee.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663b4ae5-1a3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ORmQ%2FOKu5fMezXrqjI6%2BLBaLqUmOshA7eLqzyN4Ef2Lr7ukQdhe94IYVC91veq6RmeC9Jv6qpjOXP1SLyKWWhsjUJwWla%2FQ6MaIKCqjxFe3mh0eT%2FoZsdlsILLUfECPV6Ozy%2FOzkLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 880d602f4ff0569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-0a51a8ee.js | 172.67.186.1 | 200 OK | 418 B |
URL GET HTTP/3flaredownload.com/assets/hl-0a51a8ee.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (440), with no line terminators Hash4638b452af7468399ccc117abfa660bb e01a5fd946ba14d7d1c5e133aaaa41c7ccfc13a9 2ac7ff78bc463d8a1c0af8e28bba852ba709c26c6dfee3b0f740593475bec529
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-0a51a8ee.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ca68ddb2.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=419
access-control-allow-origin: *
etag: W/"663b4ae5-1a3"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ORmQ%2FOKu5fMezXrqjI6%2BLBaLqUmOshA7eLqzyN4Ef2Lr7ukQdhe94IYVC91veq6RmeC9Jv6qpjOXP1SLyKWWhsjUJwWla%2FQ6MaIKCqjxFe3mh0eT%2FoZsdlsILLUfECPV6Ozy%2FOzkLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d602fc830569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-10816a60.js | 172.67.186.1 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-10816a60.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (1423), with no line terminators Hash56d24893184889bc8960d965b5c284a9 f60b6489e9f990e917d4d74bf4ce78b434e2a60f 792bc543b01fd2be05752f95d9c30ecfdccf16e2a3d95365e26f82ebfdd32f67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-10816a60.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1364
access-control-allow-origin: *
etag: W/"663b4ae5-554"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tA1phAbXndpch9mnQh66hiC%2FWvYzfwIHCuAlqS26%2FH0Nvr16GXr9VFGj1R4RGGWXV1xtJJCqGyzltGqf5N0id6AW%2BgHqjFgsKX7IO5wE8CqnrZu5sqXyXi%2FVOPC2Q4ns382sC1NxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d60321940569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-174bb060.js | 172.67.186.1 | 200 OK | 915 B |
URL GET HTTP/3flaredownload.com/assets/hl-174bb060.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (943), with no line terminators Hash12bcc39d49f0f8ac37fe5e398081fdf1 f158861f98bc6c8dd75fc7b7f6b3b0631e62401b 7a8f91af99ee1390dd9533577681aae34565792e41688822ebe39b9e7a211f6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-174bb060.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-d7856d82.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=916
access-control-allow-origin: *
etag: W/"663b4ae5-394"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBF41In3%2FakrGcl1umG1XKIHXKYk9Ny2Cb9h3JMyU9HPtVo4ueyra2B6p8JB%2FPPt36q%2FTyf%2BG1xszRnuTlcKU1qv0SPFXBVq6Ukg2IQBhmu6bqWVTLQe57nuZZc31%2FNt2tN0kIVVmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d60320938569d-OSL
content-encoding: br
|
|
| flaredownload.com/favicon.ico | 172.67.186.1 | 200 OK | 4.3 kB |
URL GET HTTP/3flaredownload.com/favicon.ico IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash1ba2ae710d927f13d483fd5d1e548c9b c0605efed936ee2600284e6480521d06fa64f872 db74ab0b78338c1f778f8398c45f4103c99aea0e845a3118a7750b4eeafd3445
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: image/x-icon
last-modified: Wed, 13 Sep 2023 08:04:59 GMT
etag: W/"65016d2b-10be"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yWUaxeEFcyP5zDGXbKiYW2PBDX0G8aZ%2BGnaLsoy6CcJgse1tgxjbh2iQML1HHLoDOPuom3yFZ12GU82Bf06kuHOidynV2qj5WBP9sTfVnNRhogXgq4netFklX5cRQHHaO4YqQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880d602e8f71569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| flaredownload.com/assets/hl-6b57f3eb.js | 172.67.186.1 | 200 OK | 2.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-6b57f3eb.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (2213), with no line terminators Hash1a829ca4206a9041f8ea979ff287e105 45ed682685076d0cb5e74a4291297a5d7cff0609 e8d0ea88e385cb7a12c44163d46b07443081db5b0b29b75e8a1417657a633c58
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-6b57f3eb.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2078
access-control-allow-origin: *
etag: W/"663b4ae5-81e"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JMIHy%2FViVZ%2BHIIYf8NsR1Jfv6CrEgWzXUO3QfTUpyCeHGGW9iNnkXN%2BrvhTYPek1EwqehfjXITEc4FZLnPBLc7FrM1zIj9XGdwunRXPw3mt%2BY53LCqY9YyF8WGfsPw7W33fNuMmTUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 880d602ff847569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-10816a60.js | 172.67.186.1 | 200 OK | 1.4 kB |
URL GET HTTP/3flaredownload.com/assets/hl-10816a60.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (1423), with no line terminators Hash56d24893184889bc8960d965b5c284a9 f60b6489e9f990e917d4d74bf4ce78b434e2a60f 792bc543b01fd2be05752f95d9c30ecfdccf16e2a3d95365e26f82ebfdd32f67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-10816a60.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource=
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1364
access-control-allow-origin: *
etag: W/"663b4ae5-554"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tA1phAbXndpch9mnQh66hiC%2FWvYzfwIHCuAlqS26%2FH0Nvr16GXr9VFGj1R4RGGWXV1xtJJCqGyzltGqf5N0id6AW%2BgHqjFgsKX7IO5wE8CqnrZu5sqXyXi%2FVOPC2Q4ns382sC1NxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
server: cloudflare
cf-ray: 880d6030a8aa569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-d7856d82.js | 172.67.186.1 | 200 OK | 7.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-d7856d82.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (7803), with no line terminators Hashdcddd9b1beb76e9abad1be7ea5f5b465 55f2ccb1efb1ff4592821a30b600eb3ad6151b14 3eccfda7f500f621c0f40744f0657594f34a3847471a3eea4abbec19556f5aca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-d7856d82.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-6b57f3eb.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:35 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7114
access-control-allow-origin: *
etag: W/"663b4ae5-1bca"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C0Xree4E6KLz19GwyO0c%2BJDdyzkZkE0u2PXd43wwOvr4qfZvF3I%2BkwqgGgBvYGXtQWWfdUo3z4mxDFAYwinainB%2B5ZauFQh7v5jfnKHFxplxr6kn0XwsL%2FuOBUWxK5RZ4wNlfmtFCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 0
server: cloudflare
cf-ray: 880d6031f92c569d-OSL
content-encoding: br
|
|
| flaredownload.com/assets/hl-6b57f3eb.js | 172.67.186.1 | 200 OK | 2.1 kB |
URL GET HTTP/3flaredownload.com/assets/hl-6b57f3eb.js IP172.67.186.1:443
Requested byhttps://flaredownload.com/en_us/streaming-club-1?subid=4c745f63-0d25-4d5f-acd8-4ea83f839b14&networkid=200347&publisher=154527659609a3189c0518324ac14aea2&isNewTr=1&stream=&subsource=&subsource= CertificateIssuerGoogle Trust Services LLC Subjectflaredownload.com FingerprintA7:68:A0:75:94:62:A1:45:DE:7D:F0:07:04:B4:D1:B8:96:E1:C2:50 ValidityMon, 18 Mar 2024 15:26:29 GMT - Sun, 16 Jun 2024 15:26:28 GMT
File typeASCII text, with very long lines (2213), with no line terminators Hash1a829ca4206a9041f8ea979ff287e105 45ed682685076d0cb5e74a4291297a5d7cff0609 e8d0ea88e385cb7a12c44163d46b07443081db5b0b29b75e8a1417657a633c58
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/hl-6b57f3eb.js HTTP/1.1
Host: flaredownload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flaredownload.com/assets/hl-ca68ddb2.js
Cookie: visitInfo::7867=beb8062a959361cee4faaa8058bf6a9c161a61132d249e381eff54f87316a6dba%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A7867%22%3Bi%3A1%3Ba%3A5%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%227dc3b65babda5e7fde8663511243039b%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200347%22%3Bs%3A9%3A%22publisher%22%3Bs%3A33%3A%22154527659609a3189c0518324ac14aea2%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%224c745f63-0d25-4d5f-acd8-4ea83f839b14%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 23:54:34 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2078
access-control-allow-origin: *
etag: W/"663b4ae5-81e"
last-modified: Wed, 08 May 2024 09:50:29 GMT
cache-control: max-age=1800
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JMIHy%2FViVZ%2BHIIYf8NsR1Jfv6CrEgWzXUO3QfTUpyCeHGGW9iNnkXN%2BrvhTYPek1EwqehfjXITEc4FZLnPBLc7FrM1zIj9XGdwunRXPw3mt%2BY53LCqY9YyF8WGfsPw7W33fNuMmTUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 880d6030084f569d-OSL
content-encoding: br
|
|