| mag2.yo-ott.com/play/movie.php?mac=00:1A:79:FA:EC:10&stream=1390447.mp4&play_token=BNr3jk1K4h&type=movie |  185.235.165.5 | 302 Found | 0 B |
URL User Request GET HTTP/1.1mag2.yo-ott.com/play/movie.php?mac=00:1A:79:FA:EC:10&stream=1390447.mp4&play_token=BNr3jk1K4h&type=movie IP185.235.165.5:80 ASN#213030 SkyLink Data Center BV
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /play/movie.php?mac=00:1A:79:FA:EC:10&stream=1390447.mp4&play_token=BNr3jk1K4h&type=movie HTTP/1.1
Host: mag2.yo-ott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: PROXY DDOS PROTECTION
Date: Sat, 23 Dec 2023 21:51:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Location: http://82.115.12.248:80/live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447
Pragma: public
Cache-Control: public, must-revalidate, proxy-revalidate
|
| 82.115.12.248/favicon.ico |  82.115.12.248 | 404 Not Found | 150 B |
URL GET HTTP/1.182.115.12.248/favicon.ico IP82.115.12.248:80
Requested byhttp://82.115.12.248/live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447
File typeHTML document, ASCII text, with CRLF line terminators Hash597ba0d4396e9c906225140ce907092c 28ae2ba65ccdb583d79f85b8cc9509fae697493b ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 82.115.12.248
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://82.115.12.248/live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sat, 23 Dec 2023 21:52:03 GMT
Content-Type: text/html
Content-Length: 150
Connection: keep-alive
|
| 82.115.12.248/live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447 |  0.0.0.0 | | 0 B |
URL User Request GET 82.115.12.248/live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447 IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447 HTTP/1.1
Host: 82.115.12.248
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
| 82.115.12.248/live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447 | 82.115.12.248 | 200 OK | 195 kB |
URL User Request GET HTTP/1.182.115.12.248/live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447 IP82.115.12.248:80
File typeMPEG transport stream data Size195 kB (195240 bytes) Hashf3b56f6989c0b92ed6a158f5b1ab889a 519284442709fdac3767b27de7ce52e4b9fc8292 32af50cf3dc06fe95a9eaf2d66b2a8136f34ea84dba5fc2d49ed709c51f198d9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /live/play/YkUxUUsySm9UMm81YVZFcmFVbERjblphVEU1SmFuSmpabFpQYUdSaU5HMWlSamMxYTJKVlN6ZHpZejA9/1390447 HTTP/1.1
Host: 82.115.12.248
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Dec 2023 21:52:02 GMT
Content-Type: video/mp4
Content-Length: 1138566728
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: 0-1138566728
Content-Range: bytes 0-1138566727/1138566728
|