Report - cdn01.cdndofu05.store/s3_401704901_g4t

Report Overview

Visited public
2024-12-07 01:05:04
Tags
URL
cdn01.cdndofu05.store/s3_401704901_g4t_Bucks/index.m3u8
Finishing URL
dofustream.com/
IP / ASN
104.21.66.56
#13335 CLOUDFLARENET
Title
DofuStream

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn01.cdndofu05.store	unknown	2024-09-23	2024-12-07	2024-12-07	509 B	815 B	104.21.66.56
dofustream.com	943671	2018-09-27	2018-10-02	2024-10-26	4.6 kB	140 kB	104.21.52.86
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-12-04	905 B	60 kB	104.18.187.31
www.gstatic.com	unknown	2008-02-11	2012-05-29	2024-12-04	439 B	2.8 kB	142.250.74.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-12-07	medium	cdndofu05.store	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js	ScriptElement	81 kB	2023-04-09	2025-06-06
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js IP 104.18.187.31 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-09 07:05 Last Seen2025-06-06 13:39 Times Seen1617 Hash 78c4cd0c84838bea16844c9f9ef24b83 8cd7971318371ab3d16379df6cfb254a5c649fca ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0 Loading...

	www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1	ScriptElement	4.3 kB	2023-03-07	2025-06-06
Pretty URL www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1 IP 142.250.74.35 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06 Last Seen2025-06-06 04:39 Times Seen2952 Hash b427175fa1078775eb792756e7b6d1e7 4c55c0233d3d9002b3449c025f97821f8bb8900d ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f Loading...

	dofustream.com/	ScriptElement	921 B	2024-12-07	2024-12-07
Pretty URL dofustream.com/ IP 104.21.52.86 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-12-07 01:05 Last Seen2024-12-07 01:05 Times Seen1 Hash 1e1a15512059f580b420aac1835bec4d be2a6ef00d03f3112560ec933c1fce14660a91f2 3a7f1874e992c1fa872ff7e0c5e6469a90f63e33c0d69b856e7c00d1ecee2f8b Loading...

	unknown	ScriptElement	236 B	2024-12-07	2024-12-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-07 01:05 Last Seen2024-12-07 01:05 Times Seen1 Hash 1832d1d2f9273118f0495f85816a5eff 5333b73f968693435a28a49aa5c994148dae8ad2 a943f0ba5b2b77346a5f79ba22f56fb0e3eb677d947c4fcabf945bffe8bea8a2 Loading...

	dofustream.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	ScriptElement	8.8 kB	2024-12-07	2024-12-09
Pretty URL dofustream.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.52.86 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-07 01:05 Last Seen2024-12-09 13:22 Times Seen29 Hash 1845223d645f1a14a50739aaafa9ff0c 965068cc9e246ca149a95de9c6edd46871c6ff2b e0c984ea7887ae255261834d48883a0e164a86edb64a9be31c1592c5661dfe02 Loading...

HTTP Transactions (14)

URL IP Response Size

cdn01.cdndofu05.store/s3_401704901_g4t_Bucks/index.m3u8

104.21.66.56

301 Moved Permanently

167 B

URL
cdn01.cdndofu05.store/s3_401704901_g4t_Bucks/index.m3u8
IP
104.21.66.56:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
167 B (167 bytes)
Hash
0104c301c5e02bd6148b8703d19b3a73
7436e0b4b1f8c222c38069890b75fa2baf9ca620
446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /s3_401704901_g4t_Bucks/index.m3u8 HTTP/1.1
Host: cdn01.cdndofu05.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Sat, 07 Dec 2024 01:04:39 GMT
content-type: text/html
content-length: 167
location: https://dofustream.com
cache-control: max-age=3600
expires: Sat, 07 Dec 2024 02:04:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7FM144w1nttMlsC0seyLuwbWUhtR5FEFKnpvfQYXfoO2jxONO%2F5YP6tY3%2BYqX9AqwnC7dsTXI5ARSjymbF9dyin94vRXDW6I1h%2F%2Bq8Pogcyt%2BARzZmRHunY3cpq0g9TVRtE9r4A%2Fk4M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a58bdbab51b-OSL
X-Firefox-Spdy: h2

dofustream.com/assets/images/donate-btn.png

104.21.52.86

200 OK

3.1 kB

URL
dofustream.com/assets/images/donate-btn.png
IP
104.21.52.86:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 171 x 50, 8-bit/color RGBA, non-interlaced
Size
3.1 kB (3052 bytes)
Hash
7fc8ba05382d6a8ad884b398c61e74fa
61bd393964030503a3232f5d60077371d8bd5926
33a9dc16d5ff7e25b93b4fa6b6439b1dbabfd0d9fe259973456f0d30bf67d559

HTTP Headers

GET /assets/images/donate-btn.png HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: image/png
content-length: 3052
last-modified: Tue, 03 Sep 2024 13:51:10 GMT
etag: "66d7144e-bec"
cf-cache-status: HIT
age: 781
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d6GZS30DaN4Q7CdtmT3W%2FALvaTV8po29SVZlwFBPJpdGvzddBN3IEyQxvFHYCiDbGxiptyW4IlnbmzNWRN2ediJ8xdP2fFO1vkoJhSA5cieuZkKwy0XJdXcqCozwyqjRGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a5c887a56a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18804&min_rtt=6872&rtt_var=11100&sent=15&recv=10&lost=0&retrans=0&sent_bytes=4215&recv_bytes=2253&delivery_rate=86432&cwnd=12000&unsent_bytes=0&cid=060e4c652ea498b8&ts=464&x=1", cfExtPri, cfHdrFlush;dur=0

dofustream.com/assets/images/facebook.png

104.21.52.86

200 OK

548 B

URL
dofustream.com/assets/images/facebook.png
IP
104.21.52.86:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Size
548 B (548 bytes)
Hash
df931b54c270884d8bdec5fb2061e085
077eab38a47a2ab28dc544119829a5737b814ccc
66e4b720eb71164c56e8a2a4a5b45cdbc76ab0561849472493cd0455f24ea8b4

HTTP Headers

GET /assets/images/facebook.png HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: image/png
content-length: 548
last-modified: Tue, 03 Sep 2024 13:51:10 GMT
etag: "66d7144e-224"
cf-cache-status: HIT
age: 781
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hom1d61k2YJKGYMtWThs2fPUwPDclf7GURnSG38udWZ5KzOc%2BhqpDDuwpvOVVI6prfFHWWGntv2t2ap6EMwV%2Bp29HEjqU%2FkmM1%2BSatY5XAxvRsNdyvBXHr9TaLmWXHyDuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a5c887c56a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18804&min_rtt=6872&rtt_var=11100&sent=26&recv=11&lost=0&retrans=0&sent_bytes=16215&recv_bytes=2530&delivery_rate=86432&cwnd=12000&unsent_bytes=0&cid=060e4c652ea498b8&ts=465&x=1", cfExtPri, cfHdrFlush;dur=3

dofustream.com/assets/images/app_store.png

104.21.52.86

200 OK

34 kB

URL
dofustream.com/assets/images/app_store.png
IP
104.21.52.86:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Size
34 kB (34160 bytes)
Hash
1b94a031e7d98befb66e92f65483a808
ca1140e7461de02f17aa2d274c14574f70226a37
5c8ce80160f11d5af0da9de19920dabf04e594d8066fd326c16353e721707d0d

HTTP Headers

GET /assets/images/app_store.png HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: image/png
content-length: 34160
last-modified: Tue, 03 Sep 2024 13:51:10 GMT
etag: "66d7144e-8570"
cf-cache-status: HIT
age: 781
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bpiyZpH0%2BdYkO%2FJXquS1NNy8JBQ3arUModuCln%2BUt1XzNF0ElxUGzo4E5oMZsENeB9l44Xh2VUN3uAW98aCrDv9jnOxgzaLiALd7RuPzzCe0KT5nkyUonldywc44UA1ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a5c888256a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18804&min_rtt=6872&rtt_var=11100&sent=26&recv=11&lost=0&retrans=0&sent_bytes=16215&recv_bytes=2530&delivery_rate=86432&cwnd=12000&unsent_bytes=0&cid=060e4c652ea498b8&ts=467&x=1", cfExtPri, cfHdrFlush;dur=8

dofustream.com/assets/images/logo.png

104.21.52.86

200 OK

29 kB

URL
dofustream.com/assets/images/logo.png
IP
104.21.52.86:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
29 kB (29315 bytes)
Hash
f84a1e26d5ff35ff97581de98b835b20
d4580064970c76824d87e232a22a14df27d3b7b3
1d9c477e919da30f5efcf76dbfcca152d23456b9e5458a6fa67d062d609cf78c

HTTP Headers

GET /assets/images/logo.png HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: image/png
content-length: 29315
last-modified: Tue, 03 Sep 2024 13:51:10 GMT
etag: "66d7144e-7283"
cf-cache-status: HIT
age: 781
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UmzcOPZpkKF3pjuiPArKrP2ZDF4aeaW%2FCHjPMsS8Xoz2xGqSJQii%2Fj1RvvbQ9o61%2F5RB28lQW1%2FjXsfupBIw%2FomFdR4Vk4jTF511UCBqPr3BotedLxLs8XImFI1xYxLtmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a5c887756a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18804&min_rtt=6872&rtt_var=11100&sent=19&recv=11&lost=0&retrans=0&sent_bytes=8070&recv_bytes=2530&delivery_rate=86432&cwnd=12000&unsent_bytes=0&cid=060e4c652ea498b8&ts=464&x=1", cfExtPri, cfHdrFlush;dur=0

dofustream.com/assets/images/play_store.png

104.21.52.86

200 OK

26 kB

URL GET HTTP/3
dofustream.com/assets/images/play_store.png
IP
104.21.52.86:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dofustream.com/
Certificate
IssuerGoogle Trust Services
Subjectdofustream.com
Fingerprint69:6B:CA:A8:6B:8E:3D:64:17:AA:9F:4F:AA:A2:4B:64:04:AD:E0:BB
ValidityFri, 29 Nov 2024 02:16:13 GMT - Thu, 27 Feb 2025 02:16:12 GMT

File type
PNG image data, 525 x 601, 8-bit/color RGBA, non-interlaced
Size
26 kB (26416 bytes)
Hash
10d55f0ba056776afe4e555cd36cb029
83b220e2cff0d441275c86d4735617c3044ceeba
77e83999e7099a85f6b54494ab7808f237a8f431649edaae80dbbb885f8e65c9

HTTP Headers

GET /assets/images/play_store.png HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: image/png
content-length: 26416
last-modified: Tue, 03 Sep 2024 13:51:10 GMT
etag: "66d7144e-6730"
cf-cache-status: HIT
age: 781
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2oUWL7M6YHizQFKbv4kXEr5hfjjMfumcX17%2B21KrGllxDThi9fcqyTsU8TKj8BqBzpXxI%2F1TLwEfm3VqCINsb8fomoI40%2F3AuXHB%2BBqj%2BpBF2gpcvPbRLectpWRFFOH4zA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a5c887f56a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18804&min_rtt=6872&rtt_var=11100&sent=26&recv=11&lost=0&retrans=0&sent_bytes=16215&recv_bytes=2530&delivery_rate=86432&cwnd=12000&unsent_bytes=0&cid=060e4c652ea498b8&ts=466&x=1", cfExtPri, cfHdrFlush;dur=2

dofustream.com/assets/images/apk.png

104.21.52.86

200 OK

20 kB

URL
dofustream.com/assets/images/apk.png
IP
104.21.52.86:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 300, 8-bit colormap, non-interlaced
Size
20 kB (19982 bytes)
Hash
d53a485b0106e7c43c314f8c2dbbcd50
f95ea5946f16c574020b9a71c1dcea374fbbb197
247650365dd0f36d0852d1bf34fa7e9e2fc099e041cac463a606e316a30b4cba

HTTP Headers

GET /assets/images/apk.png HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: image/png
content-length: 19982
last-modified: Tue, 03 Sep 2024 13:51:10 GMT
etag: "66d7144e-4e0e"
cf-cache-status: HIT
age: 780
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P2Ag28v0qIskSpKqnSs9rj0BYDhlLbYFHqeqicf%2Fm%2FNCQ4iIebENLm5MLekrhNJjlF4pgFDl8RNEANGvAvbADMZotsfareR%2FZaasdeEpa1%2Bq4s5%2BforUMQSlMivrFbq3VQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a5c988756a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17926&min_rtt=6872&rtt_var=10080&sent=48&recv=12&lost=0&retrans=0&sent_bytes=40215&recv_bytes=2574&delivery_rate=27580&cwnd=24000&unsent_bytes=0&cid=060e4c652ea498b8&ts=472&x=1", cfExtPri, cfHdrFlush;dur=3

cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css

104.18.187.31

200 OK

35 kB

URL
cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css
IP
104.18.187.31:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 text, with very long lines (65335)
Size
35 kB (34794 bytes)
Hash
d603cfa239a34ac65af566681e7aa3e7
4af3d7e15a6a380c6cbabba42e9adf330b49d58f
16ee7f3d53462650bbd32e263c48c0ea759574fcf620c681ad719008912c461a

HTTP Headers

GET /npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: text/css; charset=utf-8
content-length: 34794
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.3.0-alpha3
x-jsd-version-type: version
etag: W/"38cf3-SvPX4VpqOAxsurukLprfMwtJ1Y8"
content-encoding: br
x-served-by: cache-fra-eddf8230067-FRA, cache-lga21924-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 6013694
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nv6WhX%2BTX%2FJoDycK45rZx%2BfcfZ1c1djJWVxnbHiP5TpSqYjKoRLMGQC81a16RiqJXHg5ZmHtMauJDkIHaqCj4kp9RYi5S0xsAfX6ZNXReh8LxGCi1OiPMsG85S5%2Fb8kq18c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee09a5ce94256b9-OSL
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js

104.18.187.31

200 OK

23 kB

URL
cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js
IP
104.18.187.31:0
ASN
#13335 CLOUDFLARENET

File type
JavaScript source, ASCII text, with very long lines (65292)
Size
23 kB (23387 bytes)
Hash
78c4cd0c84838bea16844c9f9ef24b83
8cd7971318371ab3d16379df6cfb254a5c649fca
ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0

HTTP Headers

GET /npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 23387
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.3.0-alpha3
x-jsd-version-type: version
etag: W/"13ac2-jNeXExg3GrPRY3nfbPslSlxkn8o"
content-encoding: gzip
x-served-by: cache-fra-eddf8230059-FRA, cache-lga21974-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3617564
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L3uvUjT55YWADwJojhAeOiTcLEr%2BfbrGrDeEFOkK3V5fU8H9SdibZ7%2BvIpIMpFPJo8KTnGr4EibSR5PyseUB6wO%2FCT4LfxAfN3sd26%2BZ9pwefmNvAZLeR%2BQ1qrRqfehfGl4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee09a5ce95056b9-OSL
X-Firefox-Spdy: h2

dofustream.com/assets/images/donate.png

104.21.52.86

200 OK

3.1 kB

URL
dofustream.com/assets/images/donate.png
IP
104.21.52.86:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 171 x 50, 8-bit/color RGBA, non-interlaced
Size
3.1 kB (3052 bytes)
Hash
7fc8ba05382d6a8ad884b398c61e74fa
61bd393964030503a3232f5d60077371d8bd5926
33a9dc16d5ff7e25b93b4fa6b6439b1dbabfd0d9fe259973456f0d30bf67d559

HTTP Headers

GET /assets/images/donate.png HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 01:04:40 GMT
content-type: image/png
content-length: 3052
last-modified: Tue, 03 Sep 2024 13:51:10 GMT
etag: "66d7144e-bec"
cf-cache-status: HIT
age: 781
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iZ%2FkDc4HiiqtgBOUrZneCO0ZluHaGcYMlJ8hDwA0PUNLTYB44f5MzyoxvVtaxkEKgg7g7PY5fxDFcwoa%2BSloJgtzHhG%2BqBPopVlUEQJI4wwc3Q5hTgXC3JpjyyZ7QosrhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a5e39de56a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14261&min_rtt=5707&rtt_var=9621&sent=122&recv=16&lost=0&retrans=0&sent_bytes=124704&recv_bytes=2988&delivery_rate=1286942&cwnd=96000&unsent_bytes=0&cid=060e4c652ea498b8&ts=736&x=1", cfExtPri, cfHdrFlush;dur=0

www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1

142.250.74.35

200 OK

2.0 kB

URL
www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
JavaScript source, ASCII text, with very long lines (1143)
Size
2.0 kB (2007 bytes)
Hash
b427175fa1078775eb792756e7b6d1e7
4c55c0233d3d9002b3449c025f97821f8bb8900d
ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f

HTTP Headers

GET /cv/js/sender/v1/cast_sender.js?loadCastFramework=1 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cloudview
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="cloudview"
report-to: {"group":"cloudview","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cloudview"}]}
content-length: 2007
date: Sat, 07 Dec 2024 01:04:40 GMT
expires: Sat, 07 Dec 2024 01:04:40 GMT
cache-control: private, max-age=3000
last-modified: Tue, 16 Feb 2021 23:57:06 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

dofustream.com/cdn-cgi/challenge-platform/scripts/jsd/main.js

104.21.52.86

302 Found

0 B

URL
dofustream.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
104.21.52.86:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 302 Found
date: Sat, 07 Dec 2024 01:04:40 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f9063374b04d/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dIm%2BFTULUXDhmEVfFeEKmXp3owrJpx4FgrnetCB14dzbLUbRS2nUZgtT2kWDMfAttXlgELIC%2F2jsUFtJplBm7s4vsji%2Ff8YYbpXYi7dpm52TQaqzahdBLeKOBnd8a%2F%2BXXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a5f8adb56a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12851&min_rtt=2987&rtt_var=10034&sent=128&recv=19&lost=0&retrans=0&sent_bytes=128581&recv_bytes=3548&delivery_rate=361115&cwnd=96000&unsent_bytes=0&cid=060e4c652ea498b8&ts=939&x=1", cfExtPri, cfHdrFlush;dur=0

dofustream.com/cdn-cgi/challenge-platform/h/g/jsd/r/8ee09a599ac556ca

104.21.52.86

200 OK

0 B

URL POST HTTP/3
dofustream.com/cdn-cgi/challenge-platform/h/g/jsd/r/8ee09a599ac556ca
IP
104.21.52.86:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dofustream.com/
Certificate
IssuerGoogle Trust Services
Subjectdofustream.com
Fingerprint69:6B:CA:A8:6B:8E:3D:64:17:AA:9F:4F:AA:A2:4B:64:04:AD:E0:BB
ValidityFri, 29 Nov 2024 02:16:13 GMT - Thu, 27 Feb 2025 02:16:12 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/challenge-platform/h/g/jsd/r/8ee09a599ac556ca HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12133
Origin: https://dofustream.com
DNT: 1
Connection: keep-alive
Referer: https://dofustream.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 07 Dec 2024 01:04:41 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.dofustream.com; Priority=High; HttpOnly; Secure; SameSite=None
cf_clearance=LpvD1TCJ_U.U4rdM5mB3GbUTjyaYY.sFCyD6qJrKGnc-1733533481-1.2.1.1-gHIzkQa5Ew9iaNp9gEMR5o.Z.2ewQtQye04FYL.WbQ_tiwunxkmhqAgyrGPeu8IR5_hOqLpZ85vOWZTRD3ZvdO5_ZW806q2fFMKwLH6iDswY8S6pQYvKgJmOqRNhoxVQykDjPZC9yrN9TBJ5F.07pIaXrwb_Jux8OFfaNu8t464s1FSFslJTyf3w5lehNjoyGtckkMgVIKOzEHkmGkfYqCnuXBF_Ois81yJCBS1t4sNc08oga0ZVkcWj3g281lWA7735HsBBDF9DHHUeY3xQSrmhxlqznNZHVlMmmdOo4irEO.XqSejyWzxuDNNSNdEuXateuUc6PGB.32kcpf0ImQ; Path=/; Expires=Sun, 07-Dec-25 01:04:41 GMT; Domain=.dofustream.com; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NKu%2B2pTGj%2F%2F4eByhsfUN0ZL5QefqDamkbFfYMO9xfe02Sd5NqQIr3T8YJlE9LCZzswjMdjhYyzMq2gSfux9atxjR%2BAyuVgd8iYp7BpPmM2D1tKh64dDXawjbwt6pThA2Rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ee09a618c6d56a4-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10183&min_rtt=2397&rtt_var=8071&sent=148&recv=33&lost=0&retrans=0&sent_bytes=143398&recv_bytes=16748&delivery_rate=1034468&cwnd=96000&unsent_bytes=0&cid=060e4c652ea498b8&ts=1268&x=1", cfExtPri, cfHdrFlush;dur=0

dofustream.com/

104.21.52.86

200 OK

14 kB

URL User Request GET HTTP/2
dofustream.com/
IP
104.21.52.86:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectdofustream.com
Fingerprint69:6B:CA:A8:6B:8E:3D:64:17:AA:9F:4F:AA:A2:4B:64:04:AD:E0:BB
ValidityFri, 29 Nov 2024 02:16:13 GMT - Thu, 27 Feb 2025 02:16:12 GMT

File type

Size
14 kB (14162 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: dofustream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 07 Dec 2024 01:04:39 GMT
content-type: text/html
last-modified: Tue, 03 Sep 2024 13:51:10 GMT
cf-cache-status: HIT
age: 780
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7PqOyHwy0luiQgf3EuWri4J44trvXs4Zee8rM3gn1CasxH8CHqfD0x9saADO1LuEXiTSCeBjxY6Ux2sWQtjh%2Fl1dr1k2bMQCZEW0ENkWZTnXnfM3Beu%2FrUb7NiJy00GSXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ee09a599ac556ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=552&min_rtt=513&rtt_var=134&sent=6&recv=10&lost=0&retrans=0&sent_bytes=3282&recv_bytes=1243&delivery_rate=6972712&cwnd=253&unsent_bytes=0&cid=32efa904a593a78e&ts=48&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash