| proxy7.rule34.dev/proxy?q=https://realbooru.com/images/85/c5/85c50823d7dddfe6da32693cf7229d79.webm |  172.67.134.14 | 200 OK | 19 MB |
URL User Request GET HTTP/2proxy7.rule34.dev/proxy?q=https://realbooru.com/images/85/c5/85c50823d7dddfe6da32693cf7229d79.webm IP172.67.134.14:443
CertificateIssuerGoogle Trust Services LLC Subjectrule34.dev Fingerprint66:D6:8E:67:FD:A1:50:F0:99:6C:E7:7F:26:CE:2D:9C:B4:29:F5:94 ValidityWed, 02 Aug 2023 19:25:52 GMT - Tue, 31 Oct 2023 19:25:51 GMT
File typeWebM\012- EBML file, creator webmB\20\012- data Size19 MB (19084092 bytes) Hash9086fb649ddac0e4841837be65a540a4 add176e67875862ef27dbc12b41c69c21c1bc7dc 09e4396e9efc0f05e4f6943df7ac168c6688797c00f671f77b7a56b20432e348
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /proxy?q=https://realbooru.com/images/85/c5/85c50823d7dddfe6da32693cf7229d79.webm HTTP/1.1
Host: proxy7.rule34.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 14 Sep 2023 04:47:12 GMT
content-type: video/webm
content-length: 19084092
cf-ray: 8065fd921c70b52d-OSL
cf-cache-status: DYNAMIC
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 25 Oct 2022 08:06:22 GMT
vary: Accept-Encoding
via: 1.1 vegur
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VEFLK4SGJzItlg51V9qMAZI5cx5LrieDGU%2Bm03VLZH%2BF%2F1cUv%2B8LrJaJV5ZveoQA78Fam65t8lGhSpYSfyRB%2FUIvInQejHN5QHc%2FCJTSaGH8wQFKbqd3p8550DDfTBObRZMzYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| proxy7.rule34.dev/favicon.ico | 172.67.134.14 | 404 Not Found | 19 B |
URL GET HTTP/3proxy7.rule34.dev/favicon.ico IP172.67.134.14:443
Requested byhttps://proxy7.rule34.dev/proxy?q=https://realbooru.com/images/85/c5/85c50823d7dddfe6da32693cf7229d79.webm CertificateIssuerGoogle Trust Services LLC Subjectrule34.dev Fingerprint66:D6:8E:67:FD:A1:50:F0:99:6C:E7:7F:26:CE:2D:9C:B4:29:F5:94 ValidityWed, 02 Aug 2023 19:25:52 GMT - Tue, 31 Oct 2023 19:25:51 GMT
Hash595e88012a6521aae3e12cbebe76eb9e da3968197e7bf67aa45a77515b52ba2710c5fc34 b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: proxy7.rule34.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://proxy7.rule34.dev/proxy?q=https://realbooru.com/images/85/c5/85c50823d7dddfe6da32693cf7229d79.webm
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Thu, 14 Sep 2023 04:47:14 GMT
content-type: text/plain; charset=utf-8
content-length: 19
cf-ray: 8065fda0d8b1b500-OSL
cf-cache-status: EXPIRED
cache-control: max-age=14400
vary: Accept-Encoding
via: 1.1 vegur
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dqsnWXxDFrF89J48aOh5tio2BQDDQeffnp3Qdi3C5guyIXc3wsva2UDqMLhQjLvn1j8fo%2Fq7njT3nnNnea9QfhEgE7Nd8vZDqhRIjkXbB89Nt8RE9zc54MHZa5Qwy29RaAb%2F2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
104.21.5.246