Report - reminderasking.com/qu8nugnpy?rixohm=53&refer=https://pikahd.com/&kw=["pikahd","-","anime","movies","series","hindi","dubbed","+","english","dubbed","subbed","in","japanese","-","japanese","watch","or","download","all","for","free","with","english","subtitles"]&key=690fc7e48c3c552d2ab73d1fab3999f6&scrWidth=424&scrHeight=942&tz=5.5&v=24.8.8162&ship=&psid=pikahd.com,pikahd.com&sub3=invoke_layer&res=14.229&dev=r&uuid=a3493622-aa55-47d1-862c-fd1c38a14e64:1:1

Report Overview

Visitedpublic

2024-10-04 07:13:02

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-02 18:12:28	2.0 kB	5.3 kB	23.36.77.32
www.highcpmgate.com	unknown	2024-04-19	2024-04-23 21:13:36	2024-09-26 18:31:33	2.4 kB	4.1 kB	172.240.253.132
press-continue.2a6rwlv7ew4w.top	unknown	2024-07-27	2024-09-25 14:00:47	2024-09-26 18:44:56	5.6 kB	979 kB	194.63.143.96
loadingscripts.com	unknown	2023-04-27	2023-04-29 06:33:24	2024-09-26 16:06:31	2.4 kB	113 kB	185.246.188.124
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-10-02 18:12:27	1.3 kB	3.6 kB	23.36.77.32
reminderasking.com	unknown	2024-08-12	2024-08-12 13:58:37	2024-10-02 16:33:07	5.1 kB	5.4 kB	192.243.61.227
riflesurfing.xyz	unknown	2024-02-09	2024-02-09 19:20:06	2024-09-26 01:20:25	751 B	529 B	192.64.81.118
o.pki.goog	unknown	2016-06-13	2024-04-24 13:44:57	2024-10-02 18:13:51	650 B	1.4 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-10-02 18:20:41	467 B	3.0 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-10-04	medium	reminderasking.com	Sinkholed
2024-10-04	medium	reminderasking.com	Sinkholed
2024-10-04	medium	reminderasking.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/	ScriptElement	112 B	2023-05-25	2025-07-06
URL press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/ IP / ASN 194.63.143.96 #50113 NTX Technologies s.r.o. Introduced by ScriptElement Embedded true Resource Info First Seen 2023-05-25 Last Seen 2025-07-06 Times Seen 506 Size 112 B (112 bytes) MD5 7b556b5c53e6044f936419f783c82ae8 SHA1 cf28d9e5c2e04442d6aba982caa3ebb601a99ac3 SHA256 7ce041c3470f00f3cfa8146f92a512b45fd1cd480b8cc397e91e30b457ca2bd3 Format Code Loading...

	press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/	ScriptElement	281 B	2023-03-08	2025-07-06
URL press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/ IP / ASN 194.63.143.96 #50113 NTX Technologies s.r.o. Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-08 Last Seen 2025-07-06 Times Seen 264 Size 281 B (281 bytes) MD5 798eedd8ae39afa34b8e105e4a104bc7 SHA1 610297e468632eb07629da7d1271ad63cae51661 SHA256 8aec80ebfc35d71f78311f3f0eccd03d3ab141bb4e7890cba6fe71631c9bacb0 Format Code Loading...

	loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/pwa_custom.js	ScriptElement	1.8 kB	2023-05-25	2025-07-06
URL loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/pwa_custom.js IP / ASN 185.246.188.124 #200651 Flokinet Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-05-25 Last Seen 2025-07-06 Times Seen 512 Size 1.8 kB (1801 bytes) MD5 8dc402b92b1ed0b13627e2ba1b928cc7 SHA1 35d1e71cdea9a15b778c6137baaaac1eda4aabb3 SHA256 b1d3e86c81061bd76770790bf5e2f0ffa7b45f2c4e3fc3400a7142bf9b3a53fb Format Code Loading...

	loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js	ScriptElement	2.8 kB	2023-03-29	2025-07-06
URL loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js IP / ASN 185.246.188.124 #200651 Flokinet Ltd Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-29 Last Seen 2025-07-06 Times Seen 968 Size 2.8 kB (2801 bytes) MD5 01a2c61eb40ce8e341a0801f78da7735 SHA1 1cb39b0674bc20c3208c16c53c131e74704759ed SHA256 03d593cbf7b72d3c70caedac0c0259330ce8b1a45b708e92e3f19245b6ca9929 Format Code Loading...

	press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/	ScriptElement	1.6 kB	2023-03-08	2025-07-06
URL press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/ IP / ASN 194.63.143.96 #50113 NTX Technologies s.r.o. Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-08 Last Seen 2025-07-06 Times Seen 264 Size 1.6 kB (1578 bytes) MD5 c04082450026da68c701a71154753008 SHA1 c24fd70ad744a7667c0bd03afa99ac2962542524 SHA256 e6dbeaee41683943b1c88da7ddb778c9994c56dc4c0620106c21265809e1a4ad Format Code Loading...

HTTP Transactions (34)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-03

Last Seen2024-10-06

Times Seen16204

Size504 B (504 bytes)

MD5291c0bfaa25266d48c16fa38a4a62b7b

SHA1483633beedec01aafe0b11575cc814705cf2c6f5

SHA2569a67108d7b1a75f9e4962d77ecc98677cab1105adb347c1d4c17239027b12af5

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9A67108D7B1A75F9E4962D77ECC98677CAB1105ADB347C1D4C17239027B12AF5"
Last-Modified: Thu, 03 Oct 2024 04:17:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3831
Expires: Fri, 04 Oct 2024 08:16:27 GMT
Date: Fri, 04 Oct 2024 07:12:36 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-04

Last Seen2024-10-06

Times Seen11957

Size504 B (504 bytes)

MD5177d454dd0208d2334d0ea2bf8757116

SHA1879b2d1887fdcfff16a86a06329f5ac388e7c894

SHA2561f8e0abfdc44a19b72e21635726f9c6bf7dbddbaa9b32e69e7a7a33c4481b3a7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1F8E0ABFDC44A19B72E21635726F9C6BF7DBDDBAA9B32E69E7A7A33C4481B3A7"
Last-Modified: Thu, 03 Oct 2024 17:05:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3745
Expires: Fri, 04 Oct 2024 08:15:01 GMT
Date: Fri, 04 Oct 2024 07:12:36 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-03

Last Seen2024-10-06

Times Seen7863

Size504 B (504 bytes)

MD570a94c83902f4fe10d6a333fa61dd9f6

SHA1d88a5f015cb1a8aa43cf9d9c8dff36da164e123a

SHA25627e611631228f6341ece9c9de774f153cb8db20062e6e71b4910316ddfa68e8d

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "27E611631228F6341ECE9C9DE774F153CB8DB20062E6E71B4910316DDFA68E8D"
Last-Modified: Thu, 03 Oct 2024 20:09:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3772
Expires: Fri, 04 Oct 2024 08:15:28 GMT
Date: Fri, 04 Oct 2024 07:12:36 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-03

Last Seen2024-10-04

Times Seen5195

Size504 B (504 bytes)

MD5c2bf1243295953fa31f9b48514d449a0

SHA120c3a59859c63d531a77891c8281c01405d4ca7f

SHA25627aa562f9d2704b5305c2ec26bb6b501e743dbdbb6ef3b27f223b755bff5f7b3

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "27AA562F9D2704B5305C2EC26BB6B501E743DBDBB6EF3B27F223B755BFF5F7B3"
Last-Modified: Thu, 03 Oct 2024 12:05:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3918
Expires: Fri, 04 Oct 2024 08:17:54 GMT
Date: Fri, 04 Oct 2024 07:12:36 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL

r11.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-03

Last Seen2024-10-06

Times Seen62

Size504 B (504 bytes)

MD5f3183cf2209bb37b83c837ec15d21088

SHA164bb0d634d5c5ffa80f0c9cda892c065013c0267

SHA25637a67032dedc39f013099d10d48012ab85d4b005a6f3bbb1f3ec101f0b8fe263

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "37A67032DEDC39F013099D10D48012AB85D4B005A6F3BBB1F3EC101F0B8FE263"
Last-Modified: Thu, 03 Oct 2024 04:09:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19118
Expires: Fri, 04 Oct 2024 12:31:14 GMT
Date: Fri, 04 Oct 2024 07:12:36 GMT
Connection: keep-alive

reminderasking.com/qu8nugnpy?rixohm=53&refer=https://pikahd.com/&kw=[%22pikahd%22,%22-%22,%22anime%22,%22movies%22,%22series%22,%22hindi%22,%22dubbed%22,%22+%22,%22english%22,%22dubbed%22,%22subbed%22,%22in%22,%22japanese%22,%22-%22,%22japanese%22,%22watch%22,%22or%22,%22download%22,%22all%22,%22for%22,%22free%22,%22with%22,%22english%22,%22subtitles%22]&key=690fc7e48c3c552d2ab73d1fab3999f6&scrWidth=424&scrHeight=942&tz=5.5&v=24.8.8162&ship=&psid=pikahd.com,pikahd.com&sub3=invoke_layer&res=14.229&dev=r&uuid=a3493622-aa55-47d1-862c-fd1c38a14e64:1:1

192.243.61.227

1.6 kB

URL

IP / ASN

192.243.61.227

#39572 DataWeb Global Group B.V.

Requested byN/A

Resource Info

File typeJavaScript source, ASCII text, with very long lines (1052)

First Seen2024-10-04

Last Seen2024-10-04

Times Seen1

Size1.6 kB (1647 bytes)

MD565aab1e0bf96d3cb85fac50524a3ba42

SHA1e473ff40413025e71668fe67abc32625aeb7972e

SHA2563ca3a8fd3f84ea59034fcb2ecd17b9aa18c2549769a63b796a36fb21e9f4ddbc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /qu8nugnpy?rixohm=53&refer=https://pikahd.com/&kw=[%22pikahd%22,%22-%22,%22anime%22,%22movies%22,%22series%22,%22hindi%22,%22dubbed%22,%22+%22,%22english%22,%22dubbed%22,%22subbed%22,%22in%22,%22japanese%22,%22-%22,%22japanese%22,%22watch%22,%22or%22,%22download%22,%22all%22,%22for%22,%22free%22,%22with%22,%22english%22,%22subtitles%22]&key=690fc7e48c3c552d2ab73d1fab3999f6&scrWidth=424&scrHeight=942&tz=5.5&v=24.8.8162&ship=&psid=pikahd.com,pikahd.com&sub3=invoke_layer&res=14.229&dev=r&uuid=a3493622-aa55-47d1-862c-fd1c38a14e64:1:1 HTTP/1.1
Host: reminderasking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=23079524; expires=Sat, 05 Oct 2024 07:12:37 GMT; path=/
uid_id2=a3493622-aa55-47d1-862c-fd1c38a14e64:1:1; expires=Fri, 11 Oct 2024 07:12:37 GMT; path=/
ain=eyJhbGciOiJIUzI1NiJ9.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.o7Q7ElmoRVKB2t0GU2fqRCJt5Wrq5LbwTt79RA2--vY; expires=Fri, 04 Oct 2024 07:13:37 GMT; path=/
Host: reminderasking.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2f029e690fa1a176823e13fdd7388eac
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

reminderasking.com/api/users?token=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&in=false&ship=&uuid=a3493622-aa55-47d1-862c-fd1c38a14e64%3A1%3A1&pii=

192.243.61.227

0 B

URL

IP / ASN

192.243.61.227

#39572 DataWeb Global Group B.V.

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606835

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=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&in=false&ship=&uuid=a3493622-aa55-47d1-862c-fd1c38a14e64%3A1%3A1&pii= HTTP/1.1
Host: reminderasking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reminderasking.com/api/users?token=L3F1OG51Z25weT9rZXk9MGYyMmMxZmQ2MDlmMTNjYjc5NDdjOGNhYmZlMWE5MGQmc3VibWV0cmljPTIzMDc5NTI0
Cookie: u_pl=23079524; uid_id2=a3493622-aa55-47d1-862c-fd1c38a14e64:1:1; ain=eyJhbGciOiJIUzI1NiJ9.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.o7Q7ElmoRVKB2t0GU2fqRCJt5Wrq5LbwTt79RA2--vY; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:37 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: http://riflesurfing.xyz/c9b2l0k.php?key=cgm58mchin7m1crzxgl8&SUB_ID_SHORT=432791b4a65d4e299ee3a63a49a39c15&COST_CPC=&PLACEMENT_ID=23079524&CAMPAIGN_ID=1127882&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=3124965
Set-Cookie: uid_id2=a3493622-aa55-47d1-862c-fd1c38a14e64:1:1; expires=Fri, 11 Oct 2024 07:12:37 GMT; path=/
iprc47429db95c644964b69994ec5a571b9f=5569799; expires=Sat, 05 Oct 2024 07:12:37 GMT; path=/
pdhtkv=true; expires=Sat, 05 Oct 2024 07:12:37 GMT; path=/
uncs=1; expires=Sat, 05 Oct 2024 07:12:37 GMT; path=/
pdhtkv28=true; expires=Sat, 05 Oct 2024 07:12:37 GMT; path=/
uncs28=1; expires=Sat, 05 Oct 2024 07:12:37 GMT; path=/
Host: reminderasking.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0201a9b9c531c3ae02c2eb9ce8f277db
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

reminderasking.com/favicon.ico

172.240.108.68

0 B

URL

reminderasking.com/favicon.ico

IP / ASN

172.240.108.68

#7979 SERVERS-COM

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606835

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: reminderasking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reminderasking.com/api/users?token=L3F1OG51Z25weT9rZXk9MGYyMmMxZmQ2MDlmMTNjYjc5NDdjOGNhYmZlMWE5MGQmc3VibWV0cmljPTIzMDc5NTI0
Cookie: u_pl=23079524; uid_id2=a3493622-aa55-47d1-862c-fd1c38a14e64:1:1; ain=eyJhbGciOiJIUzI1NiJ9.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.o7Q7ElmoRVKB2t0GU2fqRCJt5Wrq5LbwTt79RA2--vY; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:38 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: b380d78c51ea32399e6e841b33c5d8ed
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

r11.o.lencr.org/

23.36.77.32

504 B

URL

r11.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-04

Last Seen2024-10-04

Times Seen3845

Size504 B (504 bytes)

MD56c410e0fe14f406ed7ecac7422abd9f2

SHA190e2a9be8b66acf40080a38ce4f914ac3c971805

SHA256b0aa4ad594cc7f7ed95f71dfd8d0861cb5af6a2f3171c55785e6918eb9bd477a

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B0AA4AD594CC7F7ED95F71DFD8D0861CB5AF6A2F3171C55785E6918EB9BD477A"
Last-Modified: Fri, 04 Oct 2024 01:31:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2217
Expires: Fri, 04 Oct 2024 07:49:35 GMT
Date: Fri, 04 Oct 2024 07:12:38 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.77.32

504 B

URL

r11.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-04

Last Seen2024-10-04

Times Seen3845

Size504 B (504 bytes)

MD56c410e0fe14f406ed7ecac7422abd9f2

SHA190e2a9be8b66acf40080a38ce4f914ac3c971805

SHA256b0aa4ad594cc7f7ed95f71dfd8d0861cb5af6a2f3171c55785e6918eb9bd477a

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B0AA4AD594CC7F7ED95F71DFD8D0861CB5AF6A2F3171C55785E6918EB9BD477A"
Last-Modified: Fri, 04 Oct 2024 01:31:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2217
Expires: Fri, 04 Oct 2024 07:49:35 GMT
Date: Fri, 04 Oct 2024 07:12:38 GMT
Connection: keep-alive

riflesurfing.xyz/c9b2l0k.php?key=cgm58mchin7m1crzxgl8&SUB_ID_SHORT=432791b4a65d4e299ee3a63a49a39c15&COST_CPC=&PLACEMENT_ID=23079524&CAMPAIGN_ID=1127882&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=3124965

192.64.81.118

0 B

URL

IP / ASN

192.64.81.118

#19318 IS-AS-1

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606835

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /c9b2l0k.php?key=cgm58mchin7m1crzxgl8&SUB_ID_SHORT=432791b4a65d4e299ee3a63a49a39c15&COST_CPC=&PLACEMENT_ID=23079524&CAMPAIGN_ID=1127882&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=3124965 HTTP/1.1
Host: riflesurfing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Fri, 04 Oct 2024 07:12:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=xshqhqrnfv; expires=Sat, 05-Oct-2024 07:12:38 GMT; Max-Age=86400; path=/
uclickhash=xshqhqrnfv-xshqhqrnfv-2t9lbl-g646-fnj20-zw15vr-zw15i4-222f68; expires=Sat, 05-Oct-2024 07:12:38 GMT; Max-Age=86400; path=/
Location: https://www.highcpmgate.com/chutansjm?key=af0294e9c0735ff66277d9a6de67aad8
Strict-Transport-Security: max-age=31536000

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-04

Last Seen2024-10-06

Times Seen3

Size504 B (504 bytes)

MD5a15140bcba177bc2f09e1f92f665260b

SHA12c7721ca7b0d88712c9f7a685ba2d434052cb40d

SHA25695ef75cfd17c86765db48e6b9a56f938714758959be4602a5a5ca6f105c9dee0

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "95EF75CFD17C86765DB48E6B9A56F938714758959BE4602A5A5CA6F105C9DEE0"
Last-Modified: Thu, 03 Oct 2024 04:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3745
Expires: Fri, 04 Oct 2024 08:15:03 GMT
Date: Fri, 04 Oct 2024 07:12:38 GMT
Connection: keep-alive

www.highcpmgate.com/chutansjm?key=af0294e9c0735ff66277d9a6de67aad8

172.240.253.132

1.3 kB

URL

www.highcpmgate.com/chutansjm?key=af0294e9c0735ff66277d9a6de67aad8

IP / ASN

172.240.253.132

#7979 SERVERS-COM

Requested byN/A

Resource Info

File typeJavaScript source, ASCII text, with very long lines (388)

First Seen2024-10-04

Last Seen2024-10-04

Times Seen1

Size1.3 kB (1270 bytes)

MD5bf84fbad4fbde40a6a9f0b88a3d911fd

SHA1c943c136a99388315b717b4bb056d19b35d39a6b

SHA2566d4813645a42d27cce6445f29d108bd0ba43848e1febd17571c83a98fe67235f

HTTP Headers

GET /chutansjm?key=af0294e9c0735ff66277d9a6de67aad8 HTTP/1.1
Host: www.highcpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=22932349; expires=Sat, 05 Oct 2024 07:12:39 GMT; path=/
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMjkzMjM0OSwiayI6ImFmMDI5NGU5YzA3MzVmZjY2Mjc3ZDlhNmRlNjdhYWQ4Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozNzQ5NDE1LCJwaWQiOjI0MDE2MywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoxOSwiYWlkIjoyOCwicHQiOjQsInBrIjoiY2h1dGFuc2ptIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjc5OTU0MTk2LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6MTgxMTAsIm9uIjoiTGludXgiLCJvdiI6IlVua25vd24iLCJiaWQiOjExNjY3MCwiYm4iOiJGaXJlZm94IiwiYnYiOiI5Ni4wIiwid3YiOmZhbHNlLCJlIjpmYWxzZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiIiLCJhciI6W119fQ.F7yi6G-W5A6IB5NEFtXZ-6DEvFfP9773fHP_ABdAetw; expires=Fri, 04 Oct 2024 07:13:39 GMT; path=/
Host: www.highcpmgate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 6ff3d936d3273b317203b2a1e8e8e73e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

GET www.highcpmgate.com/api/users?uuid=&pii=&in=false&token=L2NodXRhbnNqbT9rZXk9YWYwMjk0ZTljMDczNWZmNjYyNzdkOWE2ZGU2N2FhZDgmcHN0PTE3MjgwMjYwMTkmcm10Yz10JnNodT1lYjhmNDRhZGVjOTQwMWNmNDAwMWM3MTE1ZTE5OGUzYjE4YTg4MzNkNGNmNTBlNWJkMjZiOTU5YzBiODZjNGJmMjViMDdlNjQ1MzBkZjRkNzExMGFiNzU4NWMyOThiM2RlY2RiNWU0NWFmODJmYjEzNDZlMzRkNzNiNjZkZGQwMGExNmM4YTYyMmM2ZTU0YzczNjViMDRlZGE1ZmQzYmU1ZjViY2E2MjU0OTAyMTQ2Y2UyNTE

192.243.59.13

302 Found

0 B

URL

www.highcpmgate.com/api/users?uuid=&pii=&in=false&token=L2NodXRhbnNqbT9rZXk9YWYwMjk0ZTljMDczNWZmNjYyNzdkOWE2ZGU2N2FhZDgmcHN0PTE3MjgwMjYwMTkmcm10Yz10JnNodT1lYjhmNDRhZGVjOTQwMWNmNDAwMWM3MTE1ZTE5OGUzYjE4YTg4MzNkNGNmNTBlNWJkMjZiOTU5YzBiODZjNGJmMjViMDdlNjQ1MzBkZjRkNzExMGFiNzU4NWMyOThiM2RlY2RiNWU0NWFmODJmYjEzNDZlMzRkNzNiNjZkZGQwMGExNmM4YTYyMmM2ZTU0YzczNjViMDRlZGE1ZmQzYmU1ZjViY2E2MjU0OTAyMTQ2Y2UyNTE

IP / ASN

192.243.59.13

#39572 DataWeb Global Group B.V.

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606835

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjecthighcpmgate.com

Fingerprint67:4C:F3:04:0C:C5:69:B0:00:B7:6D:DF:F5:A1:EB:41:AA:79:74:AB

ValidityWed, 21 Aug 2024 04:20:13 GMT - Tue, 19 Nov 2024 04:20:12 GMT

HTTP Headers

GET /api/users?uuid=&pii=&in=false&token=L2NodXRhbnNqbT9rZXk9YWYwMjk0ZTljMDczNWZmNjYyNzdkOWE2ZGU2N2FhZDgmcHN0PTE3MjgwMjYwMTkmcm10Yz10JnNodT1lYjhmNDRhZGVjOTQwMWNmNDAwMWM3MTE1ZTE5OGUzYjE4YTg4MzNkNGNmNTBlNWJkMjZiOTU5YzBiODZjNGJmMjViMDdlNjQ1MzBkZjRkNzExMGFiNzU4NWMyOThiM2RlY2RiNWU0NWFmODJmYjEzNDZlMzRkNzNiNjZkZGQwMGExNmM4YTYyMmM2ZTU0YzczNjViMDRlZGE1ZmQzYmU1ZjViY2E2MjU0OTAyMTQ2Y2UyNTE HTTP/1.1
Host: www.highcpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.highcpmgate.com/api/users?token=L2NodXRhbnNqbT9rZXk9MGYyMmMxZmQ2MDlmMTNjYjc5NDdjOGNhYmZlMWE5MGQmc3VibWV0cmljPTIyOTMyMzQ5
Cookie: u_pl=22932349; ain=eyJhbGciOiJIUzI1NiJ9.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.F7yi6G-W5A6IB5NEFtXZ-6DEvFfP9773fHP_ABdAetw; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1
Set-Cookie: pdhtkv=true; expires=Sat, 05 Oct 2024 07:12:40 GMT; path=/
uncs=1; expires=Sat, 05 Oct 2024 07:12:40 GMT; path=/
pdhtkv28=true; expires=Sat, 05 Oct 2024 07:12:40 GMT; path=/
uncs28=1; expires=Sat, 05 Oct 2024 07:12:40 GMT; path=/
Host: www.highcpmgate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 24fd66d5ef72b0d8e2254132ea4d201d
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

r11.o.lencr.org/

23.36.77.32

504 B

URL

r11.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-04

Last Seen2024-10-04

Times Seen1

Size504 B (504 bytes)

MD5d28f84151779c6740411b3f413ad75b8

SHA1ce5db2dae5db12a787fe3c0c8b29156d8072ac9c

SHA256b954364287fb1bb8a2c9f1ba86cbe0d36d93962b8141cc6a5e841686f84ad3f4

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B954364287FB1BB8A2C9F1BA86CBE0D36D93962B8141CC6A5E841686F84AD3F4"
Last-Modified: Thu, 03 Oct 2024 04:25:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20901
Expires: Fri, 04 Oct 2024 13:01:01 GMT
Date: Fri, 04 Oct 2024 07:12:40 GMT
Connection: keep-alive

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1

194.63.143.96

301 Moved Permanently

169 B

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1

IP / ASN

194.63.143.96

#50113 NTX Technologies s.r.o.

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-07

Last Seen2025-03-01

Times Seen3157

Size169 B (169 bytes)

MD5ff3438f1699724c1ce3d071d2ca210c2

SHA18784ddfff3a51e608dd34fce5942bc8c91af8b11

SHA25698d367d32108a25ed28048a4f17b2504e610249dd0bf2dcf368c7f922b300997

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1 HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.highcpmgate.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: text/html
Content-Length: 169
Location: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Connection: keep-alive
Keep-Alive: timeout=10

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

194.63.143.96

200 OK

5.8 kB

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

IP / ASN

194.63.143.96

#50113 NTX Technologies s.r.o.

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (1849)

First Seen2023-05-25

Last Seen2025-07-06

Times Seen265

Size5.8 kB (5763 bytes)

MD503277e8bff4782de05f2267fc761775d

SHA17ed2779735fe3f6f1e54677634827027c9e724cb

SHA2566e0ba1505692b64b38399a6f247f7b50c44c5f8ed925741ea1e196c49874a00b

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/ HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.highcpmgate.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: text/html
Last-Modified: Mon, 15 Jul 2024 09:36:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
ETag: W/"6694ed94-5b25"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/animate.css

194.63.143.96

200 OK

4.9 kB

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/animate.css

IP / ASN

194.63.143.96

#50113 NTX Technologies s.r.o.

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeASCII text

First Seen2023-04-05

Last Seen2025-07-06

Times Seen2009

Size4.9 kB (4894 bytes)

MD597d64faca1f1a0422ecf3ae998026899

SHA161bc4cbfc9fc6e0db503aa67ba92c7c768a4c7e1

SHA256d1413e8c95a61b36e4ea9441e9ead3cce29089e85043b0706453597016c01fdb

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/animate.css HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: text/css
Last-Modified: Mon, 15 Jul 2024 09:36:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
ETag: W/"6694ed97-1361f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-10-04

Last Seen2024-10-04

Times Seen1

Size504 B (504 bytes)

MD527861f0831553840cb70f7e2d0a8fcda

SHA18d3fe1f3b9bdf15959e05396416cd98250830a48

SHA2566e1fb3ecaf1e5e9dae4be795168696882c8dfb250669ed7f2605fd20ccdca8ca

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6E1FB3ECAF1E5E9DAE4BE795168696882C8DFB250669ED7F2605FD20CCDCA8CA"
Last-Modified: Thu, 03 Oct 2024 04:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2121
Expires: Fri, 04 Oct 2024 07:48:01 GMT
Date: Fri, 04 Oct 2024 07:12:40 GMT
Connection: keep-alive

GET loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js

185.246.188.124

200 OK

2.8 kB

URL

loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (2801), with no line terminators

First Seen2023-03-29

Last Seen2025-07-06

Times Seen968

Size2.8 kB (2801 bytes)

MD501a2c61eb40ce8e341a0801f78da7735

SHA11cb39b0674bc20c3208c16c53c131e74704759ed

SHA25603d593cbf7b72d3c70caedac0c0259330ce8b1a45b708e92e3f19245b6ca9929

Certificate Info

IssuerLet's Encrypt

Subjectloadingscripts.com

FingerprintBB:33:30:CB:FF:8D:E5:D7:F0:FA:90:BB:39:8C:4B:25:7C:B8:57:1A

ValidityWed, 21 Aug 2024 05:44:18 GMT - Tue, 19 Nov 2024 05:44:17 GMT

HTTP Headers

GET /progress_p/pwa_links/default_scripts/notification.js HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: application/javascript
Content-Length: 2801
Last-Modified: Fri, 24 Mar 2023 17:31:52 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "641dde88-af1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

GET loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/style.css

185.246.188.124

200 OK

1.1 kB

URL

loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/style.css

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeASCII text, with CRLF line terminators

First Seen2023-05-25

Last Seen2025-07-06

Times Seen506

Size1.1 kB (1085 bytes)

MD579d9dfa9f91948462f9069fd3e5f61ae

SHA16c8c5a83d3c8180a16dd7e6c3065c81ad38bcc94

SHA2568c8549291722875346b6e050a092cdda6088d579aba282a66304299616c55871

Certificate Info

IssuerLet's Encrypt

Subjectloadingscripts.com

FingerprintBB:33:30:CB:FF:8D:E5:D7:F0:FA:90:BB:39:8C:4B:25:7C:B8:57:1A

ValidityWed, 21 Aug 2024 05:44:18 GMT - Tue, 19 Nov 2024 05:44:17 GMT

HTTP Headers

GET /progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/style.css HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: text/css
Last-Modified: Thu, 25 May 2023 12:41:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
ETag: W/"646f577b-fe7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip

GET loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/pwa_custom.js

185.246.188.124

200 OK

1.8 kB

URL

loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/pwa_custom.js

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeASCII text, with CRLF line terminators

First Seen2023-05-25

Last Seen2025-07-06

Times Seen512

Size1.8 kB (1801 bytes)

MD58dc402b92b1ed0b13627e2ba1b928cc7

SHA135d1e71cdea9a15b778c6137baaaac1eda4aabb3

SHA256b1d3e86c81061bd76770790bf5e2f0ffa7b45f2c4e3fc3400a7142bf9b3a53fb

Certificate Info

IssuerLet's Encrypt

Subjectloadingscripts.com

FingerprintBB:33:30:CB:FF:8D:E5:D7:F0:FA:90:BB:39:8C:4B:25:7C:B8:57:1A

ValidityWed, 21 Aug 2024 05:44:18 GMT - Tue, 19 Nov 2024 05:44:17 GMT

HTTP Headers

GET /progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/pwa_custom.js HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: application/javascript
Content-Length: 1801
Last-Modified: Thu, 25 May 2023 12:47:54 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "646f58fa-709"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/new_free.svg

185.246.188.124

200 OK

1.5 kB

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/new_free.svg

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeSVG Scalable Vector Graphics image

First Seen2023-04-07

Last Seen2025-07-06

Times Seen2013

Size1.5 kB (1545 bytes)

MD5add28f2b5b2a568a5d5b49bd7b40ec03

SHA166ad7a5ce73b4f84f2f54e5e6150cd5cc923d25e

SHA25689bcc9a26f3ed7fb196ca1d744395e6fb79f4561ced17605eb27105a9f67e56e

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/new_free.svg HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: image/svg+xml
Content-Length: 1545
Last-Modified: Mon, 15 Jul 2024 09:36:25 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed99-609"
Accept-Ranges: bytes

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/loading.svg

185.246.188.124

200 OK

386 B

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/loading.svg

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeSVG Scalable Vector Graphics image

First Seen2023-04-07

Last Seen2025-07-16

Times Seen2143

Size386 B (386 bytes)

MD5484f8bcb59050331f28ec35ae84c3ef0

SHA1e083f687af91382e8485515369daffde1899a12a

SHA256d4d917c84ef07493d6dc83306cb754ddddc1cdb4fc879e09f5b54a0b6f11d451

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/loading.svg HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: image/svg+xml
Content-Length: 386
Last-Modified: Mon, 15 Jul 2024 09:36:24 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed98-182"
Accept-Ranges: bytes

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/qr2.png

194.63.143.96

200 OK

7.2 kB

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/qr2.png

IP / ASN

194.63.143.96

#50113 NTX Technologies s.r.o.

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typePNG image data, 1160 x 1160, 8-bit/color RGB, non-interlaced

First Seen2023-08-23

Last Seen2025-07-06

Times Seen259

Size7.2 kB (7190 bytes)

MD5d697f8240f634a6bf3c59af9fada4fd4

SHA1703d294b81b2ff5a5f47dc4279c837a6aa8cead5

SHA256f18af212bbafbb0b86b7aff29d1d0b217e341e564041dabbed3563b8d692b2db

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/qr2.png HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: image/png
Content-Length: 7190
Last-Modified: Mon, 15 Jul 2024 09:36:25 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed99-1c16"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/1.png

185.246.188.124

200 OK

50 kB

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/1.png

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typePNG image data, 980 x 980, 8-bit/color RGBA, non-interlaced

First Seen2023-04-07

Last Seen2025-07-06

Times Seen695

Size50 kB (49867 bytes)

MD51143a7b3bc5051147099facc8dc1432e

SHA13a01609fb60f785d3233a788dff4351a1d79d4c9

SHA256ff708dfd7d816c51832a47cebfaf051422ddd0ab0d96588b55a1a2b89c1f3f73

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/1.png HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: image/png
Content-Length: 49867
Last-Modified: Mon, 15 Jul 2024 09:36:23 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed97-c2cb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

o.pki.goog/wr2

142.250.74.131

471 B

URL

o.pki.goog/wr2

IP / ASN

142.250.74.131

#15169 GOOGLE

Requested byN/A

Resource Info

File typedata

First Seen2024-10-03

Last Seen2024-10-06

Times Seen742

Size471 B (471 bytes)

MD5b52b2a35d2317cc2fbabfc2a10d4b0ff

SHA18bd80582ff86252c57adec56072ea61aeafed8b9

SHA256d655303d881049f8da2792e73cf938086ae42e766111c7ccb1346f8273e10eee

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 04 Oct 2024 07:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/close.svg

185.246.188.124

200 OK

1.3 kB

URL

loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/close.svg

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeSVG Scalable Vector Graphics image

First Seen2023-04-07

Last Seen2025-08-02

Times Seen2011

Size1.3 kB (1279 bytes)

MD5369850b9873659adf0951d845f57dba1

SHA1a64257186daa33b6b318943a457b6cf8d80b26b6

SHA2569630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21

Certificate Info

IssuerLet's Encrypt

Subjectloadingscripts.com

FingerprintBB:33:30:CB:FF:8D:E5:D7:F0:FA:90:BB:39:8C:4B:25:7C:B8:57:1A

ValidityWed, 21 Aug 2024 05:44:18 GMT - Tue, 19 Nov 2024 05:44:17 GMT

HTTP Headers

GET /progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/close.svg HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:41 GMT
Content-Type: image/svg+xml
Content-Length: 1279
Last-Modified: Wed, 24 May 2023 13:06:32 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "646e0bd8-4ff"
Accept-Ranges: bytes

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/alertmicrosoft1.mp3

185.246.188.124

206 Partial Content

51 kB

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/alertmicrosoft1.mp3

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeAudio file with ID3 version 2.4.0, contains: - MPEG ADTS, layer III, v2, 48 kbps, 24 kHz, Monaural

First Seen2023-04-05

Last Seen2025-07-06

Times Seen268

Size51 kB (51165 bytes)

MD5fab1bbb4cc471451600f345364157ac7

SHA19c14c555d07a32ce52fabcd4398e476ada6bbb1f

SHA25668d390582507c5639dc5b624fd8e3b302678428fecb1ccedb75b23e90a8cdfbf

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/alertmicrosoft1.mp3 HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 206 Partial Content
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:41 GMT
Content-Type: audio/mpeg
Content-Length: 51165
Last-Modified: Mon, 15 Jul 2024 09:36:23 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed97-c7dd"
Content-Range: bytes 0-51164/51165

o.pki.goog/wr2

142.250.74.131

471 B

URL

o.pki.goog/wr2

IP / ASN

142.250.74.131

#15169 GOOGLE

Requested byN/A

Resource Info

File typedata

First Seen2024-10-03

Last Seen2024-10-06

Times Seen742

Size471 B (471 bytes)

MD5b52b2a35d2317cc2fbabfc2a10d4b0ff

SHA18bd80582ff86252c57adec56072ea61aeafed8b9

SHA256d655303d881049f8da2792e73cf938086ae42e766111c7ccb1346f8273e10eee

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 04 Oct 2024 07:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/download-gif.gif

185.246.188.124

200 OK

104 kB

URL

loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/download-gif.gif

IP / ASN

185.246.188.124

#200651 Flokinet Ltd

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeGIF image data, version 89a, 188 x 188

First Seen2023-05-25

Last Seen2025-07-06

Times Seen512

Size104 kB (104467 bytes)

MD52d00d3926dd5bb55e7ab4100bacb86a7

SHA19d3c247c6e1fe672b8ba0849f30ed18c45176883

SHA2560175bfd9afe9543559c705914fac010a6d609017f0a2edcffe599549561fb5d0

Certificate Info

IssuerLet's Encrypt

Subjectloadingscripts.com

FingerprintBB:33:30:CB:FF:8D:E5:D7:F0:FA:90:BB:39:8C:4B:25:7C:B8:57:1A

ValidityWed, 21 Aug 2024 05:44:18 GMT - Tue, 19 Nov 2024 05:44:17 GMT

HTTP Headers

GET /progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/download-gif.gif HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:41 GMT
Content-Type: image/gif
Content-Length: 104467
Last-Modified: Thu, 25 May 2023 10:24:54 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "646f3776-19813"
Accept-Ranges: bytes

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/bg.gif

194.63.143.96

200 OK

854 kB

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/bg.gif

IP / ASN

194.63.143.96

#50113 NTX Technologies s.r.o.

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeGIF image data, version 87a, 600 x 338

First Seen2023-04-07

Last Seen2025-07-06

Times Seen692

Size854 kB (854531 bytes)

MD5fb515d8640e8153526073e3dba53cef1

SHA1065dcee1850b622ab7e96586cc5ae737dd335587

SHA256306d7910500ae32624462375434beaab45581fdfb743af6f3efa5b096a403721

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/bg.gif HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:40 GMT
Content-Type: image/gif
Content-Length: 854531
Last-Modified: Mon, 15 Jul 2024 09:36:24 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed98-d0a03"
Accept-Ranges: bytes

GET press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/fav.png

194.63.143.96

200 OK

545 B

URL

press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/fav.png

IP / ASN

194.63.143.96

#50113 NTX Technologies s.r.o.

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced

First Seen2023-04-25

Last Seen2025-07-27

Times Seen894

Size545 B (545 bytes)

MD5418a1f510d301f62a0976ebcf9cda640

SHA189b5dbdf41afda654ad9f95e1b2672ffe4c51c20

SHA25634ca666275595ea71b9787f7269141b947e95af772221947f5ddb060448ed77f

Certificate Info

IssuerLet's Encrypt

Subject2a6rwlv7ew4w.top

Fingerprint53:DE:A3:F9:C5:29:D7:4E:74:FA:68:D3:8C:6C:9B:A2:ED:1F:1B:E4

ValidityWed, 25 Sep 2024 20:46:27 GMT - Tue, 24 Dec 2024 20:46:26 GMT

HTTP Headers

GET /e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/assets/fav.png HTTP/1.1
Host: press-continue.2a6rwlv7ew4w.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 04 Oct 2024 07:12:41 GMT
Content-Type: image/png
Content-Length: 545
Last-Modified: Mon, 15 Jul 2024 09:36:24 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed98-221"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

GET fonts.googleapis.com/css2?family=Roboto:wght@300&display=swap

142.250.74.106

200 OK

2.3 kB

URL

fonts.googleapis.com/css2?family=Roboto:wght@300&display=swap

IP / ASN

142.250.74.106

#15169 GOOGLE

Requested byhttps://press-continue.2a6rwlv7ew4w.top/e102479204fcec81f6dfb01f2462a2dfa451531d/ww1/

Resource Info

File typeASCII text, with very long lines (2407), with no line terminators

First Seen2024-08-03

Last Seen2024-10-15

Times Seen57

Size2.3 kB (2344 bytes)

MD51199761e18c07e7c588cad20c66671ce

SHA1d05501192c0162a0240c9509d5af9b98756f00c9

SHA256b843f384f7a4f65ece4c150c5f62c12a11803a6a8e0d2f1b572e980a85f4dee4

Certificate Info

IssuerGoogle Trust Services

Subjectupload.video.google.com

FingerprintC6:E8:36:27:AB:3A:34:33:0B:85:2C:D8:6C:0A:74:34:71:6A:F5:62

ValidityMon, 26 Aug 2024 07:12:45 GMT - Mon, 18 Nov 2024 07:12:44 GMT

HTTP Headers

GET /css2?family=Roboto:wght@300&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.2a6rwlv7ew4w.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 04 Oct 2024 07:12:41 GMT
date: Fri, 04 Oct 2024 07:12:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2