| www.kool.to/assets/index-6e34d182.css | 172.67.205.192 | 200 OK | 16 kB |
URL GET HTTP/3www.kool.to/assets/index-6e34d182.css IP 172.67.205.192:443
CertificateIssuerGoogle Trust Services Subjectkool.to Fingerprint8A:06:75:E9:C7:C5:21:6F:2F:97:39:6C:F0:01:7A:AA:CB:FE:E6:38 ValiditySat, 04 Jan 2025 10:50:36 GMT - Fri, 04 Apr 2025 11:42:11 GMT
File typegzip compressed data, from Unix Hashb6d4bac6e7c28c774d756394ec6dc70f fafe2882f62e3104d34ed9a1baf75a7d5624b5ee f2936540862389b5348ab10ff40050c5f191f6f6b51916fde53a3a0ec4ce7b2f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/index-6e34d182.css HTTP/1.1
Host: www.kool.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kool.to/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 19 Jan 2025 17:45:38 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 28 Mar 2024 18:36:09 GMT
etag: W/"6605b899-b183"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 4002
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EZ32ZUs15ToUIZ6kAMkNghd2yKlaVPOCXYjIWx4g0vi%2BQuW49kQmU3%2FnWYXEIguidqYkUIjOH2vYl%2FHTW%2Fg6z%2F6m%2FAcXhpK%2FcB%2BPSaZSsBixlVp1ioPVCk7hImx7lQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9048a3bf4fd2568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18509&min_rtt=13620&rtt_var=7136&sent=16&recv=11&lost=0&retrans=0&sent_bytes=5215&recv_bytes=1771&delivery_rate=7420&cwnd=12000&unsent_bytes=0&cid=b35284a90343b2d4&ts=405&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| www.kool.to/play/263339334/index.m3u8 | 172.67.205.192 | 302 Found | 0 B |
URL GET HTTP/3www.kool.to/play/263339334/index.m3u8 IP 172.67.205.192:443
CertificateIssuerGoogle Trust Services Subjectkool.to Fingerprint8A:06:75:E9:C7:C5:21:6F:2F:97:39:6C:F0:01:7A:AA:CB:FE:E6:38 ValiditySat, 04 Jan 2025 10:50:36 GMT - Fri, 04 Apr 2025 11:42:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /play/263339334/index.m3u8 HTTP/1.1
Host: www.kool.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kool.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Sun, 19 Jan 2025 17:45:42 GMT
content-type: application/x-mpegURL
content-length: 0
location: http://45.143.220.208:8008/sunshine/4fBsUJEtQ_f0Yesy4_Yn_WEtawQ4gNV8HLqCiw3deEQi8449c6Isd1gxfVm2vGcazsByE3WOu6OUp68zjpVYpxDXi4li87uqmlrN4Ukbwm2nJhkYmi4QqGlIMLd2ZYfK20lfpckvSEyxfrDtLG9v16kLpkQaHtUbLRF1AuW2GMg/hls/index.m3u8
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cC8KKQEHeFRaUxni8ivklTeyGk6ktUVJgB6fOceIJP%2BIMpfy9UKuc0FGPreKslZzcQpcF3lv3oJ5HS2WZW6VjZZ0RSA4USF6nX3gZtNxG5ikcMwawbuvkE3yWH4Cdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9048a3d9e8a5568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2609&min_rtt=849&rtt_var=2479&sent=447&recv=36&lost=0&retrans=0&sent_bytes=513409&recv_bytes=3514&delivery_rate=12606705&cwnd=228000&unsent_bytes=0&cid=b35284a90343b2d4&ts=4762&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| | 172.67.205.192 | 200 OK | 483 B |
URL User Request GET HTTP/3IP 172.67.205.192:443
CertificateIssuerGoogle Trust Services Subjectkool.to Fingerprint8A:06:75:E9:C7:C5:21:6F:2F:97:39:6C:F0:01:7A:AA:CB:FE:E6:38 ValiditySat, 04 Jan 2025 10:50:36 GMT - Fri, 04 Apr 2025 11:42:11 GMT
File typeHTML document, ASCII text, with very long lines (523), with no line terminators Hash0c37237782e2c9b601da1b2a4d9e24d3 85bf0377827973fb0a6b6c4ab993b692eb51c07e 5e2932106ec30e4e73f88940d534b36363618db923ddaef1ee5abd94f3ffcb9b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.kool.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Jan 2025 17:45:38 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Thu, 28 Mar 2024 18:36:09 GMT
mediahubmx-endpoint: /kool/mediahubmx.json
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7TtUxeX0Nhp8kZVTeQjMqJE4K6ZdDTRWAKry6Kn7v8TYb59Oyb3XP5pIrWlC8%2BKtLiC1HnocNbLzQCTl6mcCtoQq35GFKusWBCHMU%2F%2FSoMA5ZhN94WNTkbz0xalvGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9048a3bd1cea568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18040&min_rtt=13620&rtt_var=8265&sent=14&recv=8&lost=0&retrans=0&sent_bytes=4158&recv_bytes=1214&delivery_rate=43242&cwnd=12000&unsent_bytes=0&cid=b35284a90343b2d4&ts=147&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| www.kool.to/assets/index-c946299a.js | 172.67.205.192 | 200 OK | 902 kB |
URL GET HTTP/3www.kool.to/assets/index-c946299a.js IP 172.67.205.192:443
CertificateIssuerGoogle Trust Services Subjectkool.to Fingerprint8A:06:75:E9:C7:C5:21:6F:2F:97:39:6C:F0:01:7A:AA:CB:FE:E6:38 ValiditySat, 04 Jan 2025 10:50:36 GMT - Fri, 04 Apr 2025 11:42:11 GMT
Size902 kB (901811 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/index-c946299a.js HTTP/1.1
Host: www.kool.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kool.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Jan 2025 17:45:38 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 28 Mar 2024 18:36:09 GMT
etag: W/"6605b899-dc2b3"
mediahubmx-endpoint: /kool/mediahubmx.json
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WamS0hdfmITcpCkr1V%2F%2Fw71l3uoh4xBaRzJYHSDYply4DX%2FJGn%2BJsEpiuDwMKAf2himgXwCFe2sfKLh4BVjdOIqgYinfgfyIg7AJ9nzjR2bbyec%2BHiBzieUcrfLfJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9048a3bf4fd0568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15873&min_rtt=849&rtt_var=9041&sent=28&recv=13&lost=0&retrans=0&sent_bytes=18659&recv_bytes=1858&delivery_rate=1699433&cwnd=24000&unsent_bytes=0&cid=b35284a90343b2d4&ts=595&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| www.kool.to/channels | 172.67.205.192 | 200 OK | 661 kB |
IP 172.67.205.192:443
CertificateIssuerGoogle Trust Services Subjectkool.to Fingerprint8A:06:75:E9:C7:C5:21:6F:2F:97:39:6C:F0:01:7A:AA:CB:FE:E6:38 ValiditySat, 04 Jan 2025 10:50:36 GMT - Fri, 04 Apr 2025 11:42:11 GMT
Size661 kB (660706 bytes) Hashc31edb9bb1fbf9744922486e6c38d354 ee3d03abc6f61c434487749462f4be45ae790ebf e691264a989ba592fee12c1df1c25c85896cdea9fb0b99199f2680cbc658c6f0
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /channels HTTP/1.1
Host: www.kool.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.kool.to/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Jan 2025 17:45:39 GMT
content-type: application/json
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=385qd6kbuz%2B74RB%2BihgS%2Bpd2frreyLztjwsOVMz7ryOh9QsTQrwNpAUyb2pXEZ%2Fq1UzUyi22yQqsUM0znhWkStubBYtp5PLQBvPvxdlV6c%2Fq64%2Bl7N3g829uA1HWzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9048a3c18b1f568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5952&min_rtt=849&rtt_var=7356&sent=302&recv=24&lost=0&retrans=0&sent_bytes=342909&recv_bytes=2772&delivery_rate=238859&cwnd=228000&unsent_bytes=0&cid=b35284a90343b2d4&ts=1067&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| www.kool.to/favicon.ico | 172.67.205.192 | 200 OK | 28 kB |
IP 172.67.205.192:443
CertificateIssuerGoogle Trust Services Subjectkool.to Fingerprint8A:06:75:E9:C7:C5:21:6F:2F:97:39:6C:F0:01:7A:AA:CB:FE:E6:38 ValiditySat, 04 Jan 2025 10:50:36 GMT - Fri, 04 Apr 2025 11:42:11 GMT
File typeMS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel Hash7478f8023bbbcea7779ddd45efd0cdf3 84fb3474dad1b2c425e0124192bbcf26dbb3492f 3997988052c569bcacc6ad871dd2abbc5fc4ff3a1afee387f967b7bc865176ec
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.kool.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.kool.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 19 Jan 2025 17:45:38 GMT
content-type: image/x-icon
vary: Accept-Encoding
last-modified: Thu, 28 Mar 2024 18:36:08 GMT
etag: W/"6605b898-6e13"
mediahubmx-endpoint: /kool/mediahubmx.json
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 4002
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dh2FDU1LjZsuyrz6nLm0o%2BRvH1350V3cpzZJ1VBMj%2FRb%2FZD8oNd740MnvU70AIo1cGPQI%2FwtcP0NSK8s8UimuOP1DG5ZdprTPFob%2BsmfS%2BiZ3buW7hnHXNvPr%2Fmnpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9048a3c23be9568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6619&min_rtt=849&rtt_var=8029&sent=277&recv=23&lost=0&retrans=0&sent_bytes=313185&recv_bytes=2726&delivery_rate=35501449&cwnd=228000&unsent_bytes=0&cid=b35284a90343b2d4&ts=880&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| | 172.67.205.192 | 308 Permanent Redirect | 483 B |
URL User Request GET HTTP/2IP 172.67.205.192:443
CertificateIssuerGoogle Trust Services Subjectkool.to Fingerprint8A:06:75:E9:C7:C5:21:6F:2F:97:39:6C:F0:01:7A:AA:CB:FE:E6:38 ValiditySat, 04 Jan 2025 10:50:36 GMT - Fri, 04 Apr 2025 11:42:11 GMT
File typeHTML document, ASCII text, with very long lines (523), with no line terminators Hash0c37237782e2c9b601da1b2a4d9e24d3 85bf0377827973fb0a6b6c4ab993b692eb51c07e 5e2932106ec30e4e73f88940d534b36363618db923ddaef1ee5abd94f3ffcb9b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: kool.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 308 Permanent Redirect
date: Sun, 19 Jan 2025 17:45:38 GMT
content-type: text/html
location: https://www.kool.to/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HVaPL5L1PAEPyXsyiLYgsXCTvOQSseYMr1AUXFMOqYx3glSxPVcUFvommpx%2BlRNAPRxCSrkiVd0kXIbENqzNEK3VlTzYdq26ASqfGyECzZfH%2Fub9gBelwJby"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9048a3bb5bb1712b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6266&min_rtt=485&rtt_var=11592&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3261&recv_bytes=1231&delivery_rate=7567944&cwnd=254&unsent_bytes=0&cid=d667a266fcfec3f8&ts=215&x=0"
X-Firefox-Spdy: h2
|
|