Report - line.ottcst.com/series/GRNPYZVSJQ/JAICBUDULC/542785.mp4

Report Overview

Visited public
2023-08-16 17:55:40
Tags
Submit Tags
URL
line.ottcst.com/series/GRNPYZVSJQ/JAICBUDULC/542785.mp4
Finishing URL
4k.vod-cdn.cc/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525
IP / ASN
104.21.234.136
#13335 CLOUDFLARENET
Title
60929 S01E51.mp4

Detections

urlquery

0

Network Intrusion Detection

4

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
token.logo-cdn.cc	unknown	2023-07-20	2023-08-14 17:11:17	2023-08-14 17:11:17	451 B	736 B	188.114.97.1
4k.vod-cdn.cc	unknown	unknown	No data	No data	1.0 kB	568 kB	195.181.175.16
line.ottcst.com	unknown	2022-09-08	2022-10-23 18:48:26	2023-06-03 03:22:19	513 B	377 kB	104.21.234.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-08-16 17:55:19	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-08-16 17:55:19	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-08-16 17:55:19	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-08-16 17:55:19	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	GET token.logo-cdn.cc/vod2.php?path=/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4	188.114.97.1	302 Found	0 B
URL User Request GET HTTP/1.1 token.logo-cdn.cc/vod2.php?path=/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4 IP 188.114.97.1:80 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /vod2.php?path=/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4 HTTP/1.1 Host: token.logo-cdn.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Date: Wed, 16 Aug 2023 17:55:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Location: http://4k.vod-cdn.cc/56/T.S/1.NF/1KLAAR/12/60929/60929 S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rVyY%2F%2F1eePyGyiu%2Bw9HHH4EWKyH5Rs6jYdaJajenFzy%2Fc359M25Hik1krZNb3arP1oifgJvOqjyE%2FrSIcc5K%2FJePK%2Bb0Pkb7ShE2BsRZGt90RapZDfRwjabmj9pzuw4b%2FyWTnA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 7f7b8c517b01fabc-OSL alt-svc: h2=":443"; ma=60

	GET 4k.vod-cdn.cc/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525	195.181.175.16		566 kB
URL GET 4k.vod-cdn.cc/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525 IP 195.181.175.16:0 ASN #60068 Datacamp Limited Requested by http://4k.vod-cdn.cc/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525 File type data Size 566 kB (566274 bytes) Hash 6a6ab07bbd05a79694006ecf644d51cb bf653b50ab2008b40fc9dcc8474e274214f9617f ac67841cf51c13a273ca39357967f21c30833115170991ff021c52d948df1eed HTTP Headers GET /56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525 HTTP/1.1 Host: 4k.vod-cdn.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: video/webm,video/ogg,video/;q=0.9,application/ogg;q=0.7,audio/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Range: bytes=490274816- DNT: 1 Connection: keep-alive Referer: http://4k.vod-cdn.cc/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525 Accept-Encoding: identity Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 206 Partial Content Date: Wed, 16 Aug 2023 17:55:25 GMT Content-Type: video/mp4 Content-Length: 566274 Connection: keep-alive Last-Modified: Tue, 08 Dec 2020 17:30:27 GMT ETag: "5fcfb833-1d41a402" Access-Control-Allow-Origin: * Content-Range: bytes 490274816-490841089/490841090 Server: CDN77-Turbo X-77-NZT: AcO1rw5TXkeB X-77-NZT-Ray: 90833930246249a78d0ddd64a2bdb126 X-Cache: MISS X-77-POP: frankfurtDE X-77-Cache: MISS`

	GET 4k.vod-cdn.cc/favicon.ico	195.181.175.16	403 Forbidden	864 B
URL GET HTTP/1.1 4k.vod-cdn.cc/favicon.ico IP 195.181.175.16:80 ASN #60068 Datacamp Limited Requested by http://4k.vod-cdn.cc/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525 File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 864 B (864 bytes) Hash 88f2b1380440e219a8a80989bd5b9ddf 1a9ee06eb15e94abede138a52ac71ae55eed6a55 635c3a33f339d097cebd30681e282a75e89be7f5647fa410c69ec74118e3c92a HTTP Headers `GET /favicon.ico HTTP/1.1 Host: 4k.vod-cdn.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://4k.vod-cdn.cc/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4?secure=BdchNovCa2k9hbMVRAnKXQ==,1692226525 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Date: Wed, 16 Aug 2023 17:55:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Server: CDN77-Turbo X-77-NZT: AcO1rw5x2dYA X-77-NZT-Ray: 9083393034500dd18f0ddd6496794d13 X-77-POP: frankfurtDE X-77-Cache: MISS`

	GET line.ottcst.com/series/GRNPYZVSJQ/JAICBUDULC/542785.mp4	104.21.234.137	302 Found	376 kB
URL User Request GET HTTP/2 line.ottcst.com/series/GRNPYZVSJQ/JAICBUDULC/542785.mp4 IP 104.21.234.137:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectottcst.com Fingerprint3B:9E:9E:DE:DD:30:FB:5C:6B:40:BC:23:27:27:ED:F4:74:0C:39:89 ValidityFri, 21 Jul 2023 22:28:52 GMT - Thu, 19 Oct 2023 22:28:51 GMT File type Size 376 kB (376157 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /series/GRNPYZVSJQ/JAICBUDULC/542785.mp4 HTTP/1.1 Host: line.ottcst.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Wed, 16 Aug 2023 17:55:25 GMT content-type: video/mp4 location: http://token.logo-cdn.cc/vod2.php?path=/56/T.S/1.NF/1KLAAR/12/60929/60929%20S01E51.mp4 access-control-allow-origin: * pragma: public cache-control: public, max-age=14400, must-revalidate, proxy-revalidate cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SIsATV0G4hsJc4XEnlbRPixpOqLXRf%2BxspdTYv3bJFbETy%2FjP5lwluN7O1AwZNTBMY9MfErj%2BTI4O%2BeupvaCtbwX1T8mfINqpIgGuqRlPUywyRG3gncopg7Nmr3jBfLLaxQ%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7f7b8c45e83923c3-LHR alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2