| cdn.jsdelivr.net/gh/vli-platform/adb-analytics@29f6e17/v1.0.min.js | 151.101.65.229 | 200 OK | 8.0 kB |
URL GET cdn.jsdelivr.net/gh/vli-platform/adb-analytics@29f6e17/v1.0.min.js IP 151.101.65.229:443
Requested byhttps://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File typeJavaScript source, ASCII text, with very long lines (7690) Hash1b66e4eec1fdff6d8653e72250aa31e1 7cea63f6b05fb2ea11e6571d1b64fbfdb5374d0c 16cf995fda75815bf2a9f10d01b8be5dedb59ca828f8c61144aed16ddb95c68d
GET /gh/vli-platform/adb-analytics@29f6e17/v1.0.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hdplayerr.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 29f6e17
x-jsd-version-type: branch
etag: W/"1f5e-fOpj9rBfsuoR5lcdG2T7/bU3TQw"
content-encoding: br
accept-ranges: bytes
date: Wed, 16 Apr 2025 20:00:28 GMT
age: 5226
x-served-by: cache-fra-eddf8230054-FRA, cache-hel1410026-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3521
X-Firefox-Spdy: h2
|
|
| listenedarsonproceedings.com/3e8fa9705202b1d92f7f9b8f9dee537b/invoke.js | 192.243.61.225 | 200 OK | 25 kB |
URL GET listenedarsonproceedings.com/3e8fa9705202b1d92f7f9b8f9dee537b/invoke.js IP 192.243.61.225:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1
File typeJavaScript source, ASCII text, with very long lines (25203), with no line terminators Hash8ff9e08495e7c1c591e441a3af82b627 f78a36e261c917a974d45b73c94191fdcb7e8e26 089b1ccc95ee081c7ac9c6a51cc07d8927f59259807ea966bc49e242a8523e08
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /3e8fa9705202b1d92f7f9b8f9dee537b/invoke.js HTTP/1.1
Host: listenedarsonproceedings.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hdplayerr.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 16 Apr 2025 20:00:28 GMT
Content-Type: application/javascript
Content-Length: 10623
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: listenedarsonproceedings.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: edf73330be37c3131288ab10a23b83d7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| pushtorm.net/subscription.js | 142.132.255.57 | 200 OK | 15 kB |
URL GET pushtorm.net/subscription.js IP 142.132.255.57:443
ASN#24940 Hetzner Online GmbH
Requested byhttps://enhancechain-flow.com/robot-check/?clickid=d000onu071bc73asp7ng&domain=avd-1.bestchainconnection.com CertificateIssuerLet's Encrypt Subjectpushtorm.net Fingerprint34:0C:F7:D2:B7:7B:34:30:29:8D:DF:A1:37:3E:8C:C4:D0:33:0C:CD ValidityMon, 07 Apr 2025 16:11:59 GMT - Sun, 06 Jul 2025 16:11:58 GMT
File typeJavaScript source, ASCII text Hash4ed509cc4dfda85c155722fee5df972d e3be86f68f71d1f97a7d30998c527a131ebbd678 3a4c430db4bb2260d2f2156228f7cab59f4c51b711e299c940b8fa3c4bb187cd
GET /subscription.js HTTP/1.1
Host: pushtorm.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Wed, 16 Apr 2025 20:00:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: br
Last-Modified: Thu, 03 Oct 2024 16:16:16 GMT
Accept-Ranges: bytes
ETag: "1db15af929133bf"
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
|
|
| hdplayerr.xyz/aclib.js?v=11 | 188.114.97.1 | 200 OK | 182 kB |
URL GET hdplayerr.xyz/aclib.js?v=11 IP 188.114.97.1:443
Requested byhttps://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 CertificateIssuerGoogle Trust Services Subjecthdplayerr.xyz Fingerprint0E:F3:78:85:67:51:55:E9:F8:70:B2:87:DC:8C:93:82:95:C7:86:C1 ValidityMon, 17 Feb 2025 15:42:24 GMT - Sun, 18 May 2025 16:40:55 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (46404), with NEL line terminators Size182 kB (181812 bytes) Hash9beb27b3c002fa40eb81338ca71cf49c 1e7ecd1a3e949136dd5edb3c4aad65723a28a1ed 22a0f0a2a5a042ce74cee3bc3c550851f74bb0301e053b0c7ebfde686dbb34fe
GET /aclib.js?v=11 HTTP/1.1
Host: hdplayerr.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 20:00:28 GMT
content-type: application/javascript
server: cloudflare
last-modified: Wed, 16 Apr 2025 20:00:01 GMT
vary: Accept-Encoding
etag: W/"68000c41-2c634"
expires: Thu, 17 Apr 2025 08:00:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
cf-ray: 931644e22ce48d71-HEL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| listenedarsonproceedings.com/996927b366b66157a89e1a943b00f855/invoke.js | 192.243.61.225 | 200 OK | 26 kB |
URL GET listenedarsonproceedings.com/996927b366b66157a89e1a943b00f855/invoke.js IP 192.243.61.225:443
ASN#39572 DataWeb Global Group B.V.
Requested byhttps://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 CertificateIssuerLet's Encrypt Subjectlistenedarsonproceedings.com Fingerprint7E:95:6C:AB:69:C4:4F:51:A8:0B:31:85:F6:2D:4B:BA:62:56:6C:A9 ValidityFri, 28 Feb 2025 12:20:42 GMT - Thu, 29 May 2025 12:20:41 GMT
File typeJavaScript source, ASCII text, with very long lines (25473), with no line terminators Hash24b0cb1cc3de35bd85573842c5a7c168 6752e9eb3b1d1e6e1736a3b49032b799654d8ad5 01530f6b90e3b2bf4768c68c51e8abefe84cca652d8fe0cd095800af0d089862
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /996927b366b66157a89e1a943b00f855/invoke.js HTTP/1.1
Host: listenedarsonproceedings.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hdplayerr.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 16 Apr 2025 20:00:28 GMT
Content-Type: application/javascript
Content-Length: 10613
Connection: keep-alive
Content-Encoding: gzip
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Host: listenedarsonproceedings.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: de40060c35f7a2b91905aacc794c768f
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 | 188.114.97.1 | 200 OK | 12 kB |
URL User Request GET hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 IP 188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjecthdplayerr.xyz Fingerprint0E:F3:78:85:67:51:55:E9:F8:70:B2:87:DC:8C:93:82:95:C7:86:C1 ValidityMon, 17 Feb 2025 15:42:24 GMT - Sun, 18 May 2025 16:40:55 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2144) Hashb5d6b6a0003e97aa65512561b2d38649 1240bb2e2a3141cddd57c5c59a2e2639274c90ca e1c560ddd00ae08bf519812bbef3aa87d51b2121ca530ab4f5e2224e37692f23
GET /totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 HTTP/1.1
Host: hdplayerr.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 20:00:28 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 931644e02cbbfeb3-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| enhancechain-flow.com/robot-check/?clickid=d000onu071bc73asp7ng&domain=avd-1.bestchainconnection.com | 104.21.32.1 | 200 OK | 49 kB |
URL User Request GET enhancechain-flow.com/robot-check/?clickid=d000onu071bc73asp7ng&domain=avd-1.bestchainconnection.com IP 104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectenhancechain-flow.com FingerprintE3:02:04:1F:38:F7:CF:91:1A:A3:E0:A7:DC:15:03:28:C2:5E:DB:BE ValidityFri, 21 Feb 2025 07:37:06 GMT - Thu, 22 May 2025 08:35:45 GMT
File typeHTML document, ASCII text, with very long lines (20242) Hash517397ba66f1825430ccb6f7344822e4 4069bb95c89d8ede7c3b9ad51b5c0ce9fbf7c9dc d78df8e9be4c0b34f57624f069846b0c114968b683e1ea884dfcb83d16e5ce6b
GET /robot-check/?clickid=d000onu071bc73asp7ng&domain=avd-1.bestchainconnection.com HTTP/1.1
Host: enhancechain-flow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nannyirrationalacquainted.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 20:00:31 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 931644f6dc0cad9f-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.7.1.js | 151.101.130.137 | 200 OK | 285 kB |
URL GET code.jquery.com/jquery-3.7.1.js IP 151.101.130.137:443
Requested byhttps://enhancechain-flow.com/robot-check/?clickid=d000onu071bc73asp7ng&domain=avd-1.bestchainconnection.com CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Size285 kB (285314 bytes) Hash12e87d2f3a4c8b347ab13a0764d420a3 4be715e11048c057fdf2ee0fbbfad4dbf3504c55 78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe
GET /jquery-3.7.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://enhancechain-flow.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-45a82"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 16 Apr 2025 20:00:32 GMT
age: 4623058
x-served-by: cache-lga21929-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 14, 18720
x-timer: S1744833632.272924,VS0,VE0
vary: Accept-Encoding
content-length: 83619
X-Firefox-Spdy: h2
|
|
| hdplayerr.xyz/css/style.css?ver=1.1.6 | 188.114.97.1 | 200 OK | 1.2 MB |
URL GET hdplayerr.xyz/css/style.css?ver=1.1.6 IP 188.114.97.1:443
Requested byhttps://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 CertificateIssuerGoogle Trust Services Subjecthdplayerr.xyz Fingerprint0E:F3:78:85:67:51:55:E9:F8:70:B2:87:DC:8C:93:82:95:C7:86:C1 ValidityMon, 17 Feb 2025 15:42:24 GMT - Sun, 18 May 2025 16:40:55 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Size1.2 MB (1217905 bytes) Hashf60b6e4883cb6409a11fa27ea3e47701 db12aaa13c2da914691a4ba4d896b84b210fb4d9 a3d4bbfe9292507daae7625527174c0fb6e38261a99348f4ed4016e984ea95f5
GET /css/style.css?ver=1.1.6 HTTP/1.1
Host: hdplayerr.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 20:00:28 GMT
content-type: text/css
server: cloudflare
last-modified: Wed, 25 Sep 2024 15:56:44 GMT
vary: Accept-Encoding
etag: W/"66f432bc-129571"
expires: Thu, 17 Apr 2025 08:00:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: MISS
priority: u=2,i=?0
cf-ray: 931644e22cdb8d71-HEL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| aparttent.com/footy.js | 104.21.16.1 | 200 OK | 1.2 kB |
IP 104.21.16.1:443
Requested byhttps://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 CertificateIssuerGoogle Trust Services Subjectaparttent.com Fingerprint75:C4:D6:08:C5:77:3E:52:CF:60:CF:E0:06:5E:CE:94:BE:E8:52:41 ValidityThu, 20 Feb 2025 06:12:11 GMT - Wed, 21 May 2025 07:08:22 GMT
File typeASCII text, with very long lines (320) Hashc5920a649ffeae5012c6ac9c11d0f254 89f297324a54098ca2bfbc5f3e63094065c6e422 e81f2835e8ec56afec3fedd7aa20b00f6cdc5ebaae78dd4c300cd887adb86b02
GET /footy.js HTTP/1.1
Host: aparttent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hdplayerr.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 20:00:28 GMT
content-type: application/javascript
server: cloudflare
x-frame-options: ALLOW-FROM https://aparttent.com/
last-modified: Fri, 25 Oct 2024 07:00:00 GMT
vary: Accept-Encoding
etag: W/"671b41f0-4df"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 6655
access-control-allow-origin: https://aparttent.com/
content-security-policy: frame-ancestors *;
cross-origin-resource-policy: cross-origin
permissions-policy: geolocation=(), microphone=(), camera=()
referrer-policy: same-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
cf-ray: 931644e2d941fffd-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| avd-1.bestchainconnection.com/index?cid=632d523b3f24aab6a440&extclickid=4f4cec88ff88cf1d9c27d3890dec7f7e&t1=23387097&t2=3262419&type=default&publisher=474644&advertiser=514634&campaign_id=1189391&zoneid=3899983&category=Streaming&cost=0.200000 | 168.119.149.123 | 307 Temporary Redirect | 49 kB |
URL User Request GET avd-1.bestchainconnection.com/index?cid=632d523b3f24aab6a440&extclickid=4f4cec88ff88cf1d9c27d3890dec7f7e&t1=23387097&t2=3262419&type=default&publisher=474644&advertiser=514634&campaign_id=1189391&zoneid=3899983&category=Streaming&cost=0.200000 IP 168.119.149.123:443
ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectavd-1.bestchainconnection.com Fingerprint08:0D:A1:08:9F:E8:BC:2A:CA:52:06:1D:66:C7:02:17:99:E3:EE:1A ValiditySat, 01 Mar 2025 14:55:13 GMT - Fri, 30 May 2025 14:55:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /index?cid=632d523b3f24aab6a440&extclickid=4f4cec88ff88cf1d9c27d3890dec7f7e&t1=23387097&t2=3262419&type=default&publisher=474644&advertiser=514634&campaign_id=1189391&zoneid=3899983&category=Streaming&cost=0.200000 HTTP/1.1
Host: avd-1.bestchainconnection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nannyirrationalacquainted.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Wed, 16 Apr 2025 20:00:31 GMT
location: https://enhancechain-flow.com/robot-check/?clickid=d000onu071bc73asp7ng&domain=avd-1.bestchainconnection.com
server: Caddy
set-cookie: uclick=kOvbk15ebN8117CnbGCYsFJZQ7HLq6CPWaBpyrx6YMJwWtu6NhVcsZh964r4BTXCsIs8MhRRVA==; Max-Age=31536000; SameSite=Lax
bcid=d000onu071bc73asp7ng; Max-Age=31536000; SameSite=Lax
x-request-id: 963cf886-80ed-4c46-b676-ee114a0b135f
content-length: 0
X-Firefox-Spdy: h2
|
|
| jy.satyrsretell.com/tWNg6XBIYMmzrkL6/118368 | 172.255.103.103 | 200 OK | 5 B |
URL GET jy.satyrsretell.com/tWNg6XBIYMmzrkL6/118368 IP 172.255.103.103:443
Requested byhttps://hdplayerr.xyz/totwatch.php?value=bbtsp1https://hdplayerr.xyz/totwatch.php?value=bbtsp1 CertificateIssuerLet's Encrypt Subjectjy.satyrsretell.com Fingerprint66:D4:F2:8F:BD:D3:EE:49:49:18:5B:A2:43:65:13:B8:A6:9F:8E:E2 ValidityFri, 21 Feb 2025 04:02:32 GMT - Thu, 22 May 2025 04:02:31 GMT
File typeASCII text, with no line terminators Hashf7a2939527fd9e68723da600e96d76bd a9e717b6364d2895ee0a716050db32ca0ef1bb42 d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /tWNg6XBIYMmzrkL6/118368 HTTP/1.1
Host: jy.satyrsretell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hdplayerr.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 16 Apr 2025 20:00:28 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://hdplayerr.xyz
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2B2dUFnYQDeASKlPDqi1fwkRT6B%2BtCuykV9PYSE32bTH6T8TwvKB7gb8kZ4afgeGKsbdqaV21ZD62o%2Br5tGl72vC1ZxceR46zWzol%2BJhfhtC7Cus5tES4TabJq6AYjKcPjof6aqza7jhD3VmiZIV4OMWdIe2v2lWwRItJiIaSvytJovg4hPoxFyJ7rIyt9ZL9EYNYizO%2BQviktj2V%2BQcDKPE883N9m4UZjl07JxEc8WSEJ%2FgtOg3A0GfuNVNJ6deYGmFl2%2F%2F73ONxZiUTSpgZCbNw72R%2B3Z03l; expires=Thu, 17-Apr-2025 20:00:28 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Thu, 17-Apr-2025 20:00:28 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|