Report - hubdrive.fit/file/3707258470

Report Overview

Visited public
2025-05-11 14:12:07
Tags
URL
hubdrive.fit/file/3707258470
Finishing URL
hubdrive.fit/file/3707258470
IP / ASN
172.67.220.154
#13335 CLOUDFLARENET
Title
Access denied | hubdrive.fit used Cloudflare to restrict access

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
hubdrive.fit	unknown	2025-02-26	2025-04-07	2025-05-08	1.6 kB	28 kB	188.114.96.1
performance.radar.cloudflare.com	unknown	2009-02-17	2022-06-29	2025-05-08	395 B	10 kB	104.18.31.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-11 14:11:44	medium	Client IP	188.114.96.1	ET INFO HTTP Request to Suspicious *.fit Domain
2025-05-11 14:11:45	medium	Client IP	188.114.96.1	ET INFO HTTP Request to Suspicious *.fit Domain
2025-05-11 14:11:45	medium	Client IP	188.114.96.1	ET INFO HTTP Request to Suspicious *.fit Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	hubdrive.fit/file/3707258470	ScriptElement	961 B	2025-03-06	2025-05-21
Pretty URL hubdrive.fit/file/3707258470 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-06 15:42 Last Seen2025-05-21 12:05 Times Seen25 Hash bce87e1e77da825c5495a318747f950d dd176282ec5c20145641153ae667660987d716bd 686c7f04864edbba4b56a4e67a99ad7b216fed044313bae60964264b61e50363 Loading...

	hubdrive.fit/file/3707258470	ScriptElement	375 B	2023-03-07	2025-06-05
Pretty URL hubdrive.fit/file/3707258470 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-06-05 19:52 Times Seen104971 Hash 56df91490fa1984fa82b297dcb23c22d 2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9 275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24 Loading...

	performance.radar.cloudflare.com/beacon.js	ScriptElement	9.7 kB	2025-05-11	2025-05-11
Pretty URL performance.radar.cloudflare.com/beacon.js IP 104.18.31.78 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-11 14:12 Last Seen2025-05-11 14:12 Times Seen1 Hash 3a922ded51a30e5c8382f2bb9b41871e 225b74804261f4b1a8ddaafcf8215bbaf0b0f115 b5e6fabe0e086d63d0f18136071d1193dad6594f7b285fb7b23bf8123c0751e4 Loading...

	hubdrive.fit/file/3707258470	ScriptElement	38 B	2023-03-07	2025-06-05
Pretty URL hubdrive.fit/file/3707258470 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-06-05 19:52 Times Seen102904 Hash eb2ee6e4b3d4e81bacdb2474d9b3c2f5 6588855b25c975b224e0fd1b50ca1b3f36cd46ed 3dd83a652b2e60d8dfc699cd2006f70007b826a92b49e61e9194bf422481ac05 Loading...

HTTP Transactions (5)

URL IP Response Size

hubdrive.fit/favicon.ico

188.114.96.1

403 Forbidden

5.4 kB

URL GET
hubdrive.fit/favicon.ico
IP
188.114.96.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://hubdrive.fit/file/3707258470

File type
HTML document, ASCII text, with very long lines (501)
Size
5.4 kB (5396 bytes)
Hash
e33014dc050c857e5131ece21348491c
36437f7c8e44f8693a0d050c544e4b564d0580e1
393a74383f5bd5654f6ee07fa3b7db68baa946281021d4b3267d7ee5a5d8cb49

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to Suspicious *.fit Domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: hubdrive.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://hubdrive.fit/file/3707258470
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Sun, 11 May 2025 14:11:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2BSWbO12zYRc5R7wCOhp463L4o5oxd9ICgncme%2FibkfNixTKlwfy7Ty5MWkgUtv4fQIxOsibejyfOTCsWY%2FPx3P%2BV5zlkOyrRKCPdeMXL85ZX4291niJ3CKSD2nFu6o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93e244709c63f990-PRG
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=25395&min_rtt=24255&rtt_var=3080&sent=8&recv=12&lost=0&retrans=0&sent_bytes=5666&recv_bytes=1145&delivery_rate=235609&cwnd=158&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

hubdrive.fit/file/3707258470

188.114.96.1

403 Forbidden

6.5 kB

URL User Request GET
hubdrive.fit/file/3707258470
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjecthubdrive.fit
Fingerprint34:AB:7C:58:29:F7:D3:47:DC:C1:B4:4A:81:89:1E:EE:B0:2C:90:A5
ValiditySat, 26 Apr 2025 22:02:46 GMT - Fri, 25 Jul 2025 23:01:09 GMT

File type
HTML document, ASCII text, with very long lines (508)
Size
6.5 kB (6452 bytes)
Hash
63cd1e3cb940223bb3bf79188c3c3f15
9c396ab7c0f6e8517d4bb187ecde2bb17c5af546
6be73684f95b1fc72f445c69ac846e6bd3b31b5b931094b34bb3dd162c387392

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to Suspicious *.fit Domain

HTTP Headers

GET /file/3707258470 HTTP/1.1
Host: hubdrive.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Sun, 11 May 2025 14:11:44 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DWgr1ImtogS9zrnRtElaSTnO628p103f8Y3vJXIcYrFuhamJh12IMTGqdXDjeagt%2BNdT99trc8gsIlApf5OpbQgczftmgB%2FIpEDn4iGhmp7p07z1ilk8FEj9WYwvWXk%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93e2446ccf41f996-PRG
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

hubdrive.fit/file/3707258470

188.114.96.1

403 Forbidden

5.4 kB

URL User Request GET
hubdrive.fit/file/3707258470
IP
188.114.96.1:80
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (501)
Size
5.4 kB (5396 bytes)
Hash
b27f53a1bc9bb570749ef203b6840c76
a42fa5eabd0fae96bfee204d17d660d00c18e7a2
53ce9876d9bc075fb7de06af1905d9a097370f76ca7237628c5b606a824c50c6

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to Suspicious *.fit Domain

HTTP Headers

GET /file/3707258470 HTTP/1.1
Host: hubdrive.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Sun, 11 May 2025 14:11:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BvJsdApRIYe3j%2F%2FkCUXs7SdobOuze6W86uVqNH%2FTTD4jnbpiueFz%2FS4ycSrpT1vvRy66o6v8Wbenf6QmMSV%2FQOcpZSQ0k8t4upjh11pa1Pusc6lXQj3iVYt44c1pKzE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93e2446e0ddbf990-PRG
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=26865&min_rtt=26865&rtt_var=13432&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=412&delivery_rate=0&cwnd=151&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

hubdrive.fit/cdn-cgi/styles/main.css

188.114.96.1

200 OK

8.0 kB

URL GET
hubdrive.fit/cdn-cgi/styles/main.css
IP
188.114.96.1:80
ASN
#13335 CLOUDFLARENET

Requested by
http://hubdrive.fit/file/3707258470

File type
ASCII text, with very long lines (8012)
Size
8.0 kB (8013 bytes)
Hash
ff26f59e28a5fe6ea4ab23586415696b
4182675484d175e363cd34b43041b7b1af93d0cd
d30b4ea6f68456672f5abb35e9dcf7d54226372b66e9d60a7ee26b7a52568e74

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to Suspicious *.fit Domain

HTTP Headers

GET /cdn-cgi/styles/main.css HTTP/1.1
Host: hubdrive.fit
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://hubdrive.fit/file/3707258470
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 11 May 2025 14:11:45 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 May 2025 09:55:49 GMT
ETag: W/"6819dca5-1f4d"
Server: cloudflare
CF-RAY: 93e2446f1853f990-PRG
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sun, 11 May 2025 16:11:45 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip

performance.radar.cloudflare.com/beacon.js

104.18.31.78

200 OK

9.7 kB

URL GET
performance.radar.cloudflare.com/beacon.js
IP
104.18.31.78:443
ASN
#13335 CLOUDFLARENET

Requested by
http://hubdrive.fit/file/3707258470
Certificate
IssuerGoogle Trust Services
Subjectradar.cloudflare.com
Fingerprint5B:1E:A5:CE:2E:DD:59:C6:10:BD:7A:4D:D4:F7:39:92:56:3F:1A:2E
ValidityMon, 21 Apr 2025 20:03:54 GMT - Sun, 20 Jul 2025 21:03:44 GMT

File type
JavaScript source, ASCII text, with very long lines (9699)
Size
9.7 kB (9700 bytes)
Hash
3a922ded51a30e5c8382f2bb9b41871e
225b74804261f4b1a8ddaafcf8215bbaf0b0f115
b5e6fabe0e086d63d0f18136071d1193dad6594f7b285fb7b23bf8123c0751e4

HTTP Headers

GET /beacon.js HTTP/1.1
Host: performance.radar.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 11 May 2025 14:11:45 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: no-store, max-age=0
access-control-allow-headers: *
access-control-allow-methods: *
referrer-policy: no-referrer
timing-allow-origin: *
set-cookie: __cf_bm=9D_B0_L6c8NNZFGiEjAaRjAUu4l9GuU_IUo76HfgRgo-1746972705-1.0.1.1-s9ZDytZZf_rLhy91lVSCrPn6a9zryxtM1b5_jJ8OLGoZHvwq34FMfnNgt_Y.9w_jIFaXf5BBC7zxbDpmNkoSkVu.P7sOpA4ZKwCncUfS2hg; path=/; expires=Sun, 11-May-25 14:41:45 GMT; domain=.radar.cloudflare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 93e2446f4f51568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (5)

URL GET

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by