| r0y2epckzd.xyz/static/cdn/js/vant.min.js |  104.21.80.1 | 200 OK | 278 kB |
URL GET r0y2epckzd.xyz/static/cdn/js/vant.min.js IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
Size278 kB (277492 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/cdn/js/vant.min.js HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:07 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TjxV0xOcbWaZ4GSll2Z%2Bfgy%2F9cjsiESQF5kRw4rRKtR2TuvyZKWPk1MGTtNVYA%2BSHBTonFYBN3uW0qJLy73ingB919FosrevtWr0kmt975vXOSp5nBxwvbKUwnkNgXmPsg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: W/"67136182-43bf4"
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 92013bed391db4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/static/img/zb2.png | 104.21.80.1 | 200 OK | 2.6 kB |
URL GET r0y2epckzd.xyz/static/img/zb2.png IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typePNG image data, 356 x 48, 8-bit/color RGBA, non-interlaced Hash8a5bc601f532c9747bbebcc63f96f705 b50af210d6d63cda94f5c57f913f87165108bb31 379f832f36508310c768174d0afa2143f2d2913477b0054570ca8ef0b6d9b917
GET /static/img/zb2.png HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:08 GMT
content-type: image/png
content-length: 2605
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C8ouo0QbnqoMY0qbONerClRctvbuy9k8yQtbU7riZ9BNaGpZrujdMSWcZITfKPdQaINHsBo7NfPDcQAbkwLCgW4ONkpbL%2BBURnlZ5sYOd55boCGCPAOgqtQm%2BzZhr0wj9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: "67136182-a2d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 92013bf8a925b4f9-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.80.1 | 302 Found | 8.5 kB |
URL GET r0y2epckzd.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 14 Mar 2025 05:05:07 GMT
content-length: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u9oJmklHvTxryhn2PEykv0aQASSJikNbIt5h8BTblIjYxDv7TIMOBlGm3bTiLjHRvh1YHbFJoEkoN7anuWsd9v8t0x71S6wI5rR3cDPRmEbQwh1%2Fkv8PcULIlw4rCZO1qg%3D%3D"}],"group":"cf-nel","max_age":604800}
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
cf-ray: 92013bf8d929b4f9-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/cdn-cgi/challenge-platform/h/g/jsd/r/0.9098687050064032:1741926281:HepDcnZOdQybTfecbWf7Qcxcswt_2nU9cd95sMOMeog/92013be8c8e4b4f9 | 104.21.80.1 | 200 OK | 0 B |
URL POST r0y2epckzd.xyz/cdn-cgi/challenge-platform/h/g/jsd/r/0.9098687050064032:1741926281:HepDcnZOdQybTfecbWf7Qcxcswt_2nU9cd95sMOMeog/92013be8c8e4b4f9 IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.9098687050064032:1741926281:HepDcnZOdQybTfecbWf7Qcxcswt_2nU9cd95sMOMeog/92013be8c8e4b4f9 HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12092
Origin: https://r0y2epckzd.xyz
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:08 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=r0y2epckzd.xyz; HttpOnly; Secure; SameSite=None
cf_clearance=CYE.2SIdEUnFvPNMy.JFwW6n3.gxNrT5A358SjHV06c-1741928708-1.2.1.1-ZzCVASQJ9yW8_JMWef2ziWpQv3q7bpbDaoKxixgS1M20UKkdMYnMS7_CGpzj4tvgdiQMxbTGKa1ZKaZ35xXtSKgeYWTgJ6waXM3lP7_U1TWg3j4BoOd.rBdlWwLQnQHJljUqY6NSLDaNKjHGpo0OHCrSe_FwbWL12QDfyb5jfuCd.TlH0dBOxdNSUTvMMN2SBym8MTnbZA36yrYLT90DpcuQnkl92n8ETIJmlMZ93zQaLrkqEpjlSmJyn2tRYCLu6dDUSArtwV90i1xpi2BR0lH_QTgYCHQjZuhy7nYkv1pw1tNy2NkcPlmsgpIlHH3eB_ahaVoNYHIBd5Rvu4oVxw0sIlhHj6uPg.MQKC3CfDc; Path=/; Expires=Sat, 14-Mar-26 05:05:08 GMT; Domain=r0y2epckzd.xyz; HttpOnly; Secure; SameSite=None; Partitioned
cf-ray: 92013bfa492cb4f9-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7bPDml2C8p0Rf%2BEX3njUxPTLSfiNHrQki2Iu6%2FO6G9VRgJxw%2B2AkvGhrgYFcSozz3oghPFQegUaGyuLN%2BWeixPLGjsyu%2BJ4mp2oUrc63%2BbpSnnhHpRV%2F1ZzXKviIqwdPXw%3D%3D"}],"group":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| ptncvk.wokjcgrr1uyhtid.xyz/fast-endecode/main/request |  94.74.111.9 | 200 | 0 B |
URL OPTIONS ptncvk.wokjcgrr1uyhtid.xyz/fast-endecode/main/request IP94.74.111.9:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerZeroSSL Subject*.wokjcgrr1uyhtid.xyz FingerprintB7:FD:54:79:65:D1:B8:3A:8C:69:D0:C6:C5:B2:C5:F6:F8:58:4A:0C ValidityFri, 14 Mar 2025 00:00:00 GMT - Thu, 12 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fast-endecode/main/request HTTP/1.1
Host: ptncvk.wokjcgrr1uyhtid.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://r0y2epckzd.xyz/
Origin: https://r0y2epckzd.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.17.6
Date: Fri, 14 Mar 2025 05:05:09 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Vary: Origin
Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: content-type
|
|
| r0y2epckzd.xyz/static/cdn/css/vant/index.css | 104.21.80.1 | 200 OK | 144 kB |
URL GET r0y2epckzd.xyz/static/cdn/css/vant/index.css IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size144 kB (143534 bytes) Hash5654d331a48a5a10adcb064e5ba0be68 bfdf42b58ad4b60c3063d80b82978b56865b6fa0 2ac1d6d6a6d0441e007ccb5076eba4541bd1d076395b582a788178f7249e57a8
GET /static/cdn/css/vant/index.css HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:06 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wY0kw9zv78dd6u%2BVPQFQA7%2BpF3foE2hdeHskl1%2B8c8vbJFPorNrPpgR04hXDaO7aJF9UDeOcJpFZEvjve4Q0pKhqyYtQf5hkOOKCAXZ17WgCQcxmZtIgpZLjQKhX65%2BrAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: W/"67136182-230ae"
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 92013bed391cb4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/static/img/zb5.png | 104.21.80.1 | 200 OK | 7.0 kB |
URL GET r0y2epckzd.xyz/static/img/zb5.png IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typePNG image data, 364 x 61, 8-bit/color RGBA, non-interlaced Hashd894519d43b7a46a37ec0aa8eb7c928e 66e6c1f4a9e37e5d909cb71a015deb2f24279a8d 7ecec350edbd7b0f13acd8e4a0c1d0718cec996fd7bbb8bdd601dcadbd6594a6
GET /static/img/zb5.png HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:08 GMT
content-type: image/png
content-length: 6951
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=80vdowHJz2G8Vvmklh8Ipdyrczze1Nq3UEXtF%2Fx%2BMlH6KCBDs678oMbAeTbuBifDz7CXWAzT5a0okjje0vHVTysRMNhS6ec3oywOnZuqo3D87x8s3P1%2BonmFhDzNj%2BCL7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: "67136182-1b27"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 92013bf8b928b4f9-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/static/img/zb3.png | 104.21.80.1 | 200 OK | 3.7 kB |
URL GET r0y2epckzd.xyz/static/img/zb3.png IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typePNG image data, 352 x 36, 8-bit/color RGBA, non-interlaced Hash682623e9d9fe5d8f304c7261f20e96cd fdddeaadc13dd187932bce5e5e04da5bc149a204 90dcba37e59c9b18bf3b18423d9bbdad9ece87dc558db3a86882fca9c1fc1569
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/img/zb3.png HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:08 GMT
content-type: image/png
content-length: 3731
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CvgckN0XTIkEaSh5ZHb1PD8Fo3eJpGoe%2BDV9zYfoOGbsyxGFOH3RxQK4hvTiZB5cmDWhiJvmkcxwVJwzFSsKvBoWIdhrMy4awYmajfRUPba5HtH0tcMvfDUGXSiXG2KL5g%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: "67136182-e93"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 92013bf8a926b4f9-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/favicon.ico | 104.21.80.1 | 200 OK | 3.8 kB |
URL GET r0y2epckzd.xyz/favicon.ico IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typePNG image data, 90 x 90, 8-bit colormap, non-interlaced Hash47b453539b8944ecdc587a8db88022e0 7867d74e921338dfc1aff0bfa2e6a9ed2b357d34 5e1fe9bb70d664878f4704611ec4f086aeb4725e0a6d9c1555b9a0e1413a9989
GET /favicon.ico HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Cookie: cf_clearance=CYE.2SIdEUnFvPNMy.JFwW6n3.gxNrT5A358SjHV06c-1741928708-1.2.1.1-ZzCVASQJ9yW8_JMWef2ziWpQv3q7bpbDaoKxixgS1M20UKkdMYnMS7_CGpzj4tvgdiQMxbTGKa1ZKaZ35xXtSKgeYWTgJ6waXM3lP7_U1TWg3j4BoOd.rBdlWwLQnQHJljUqY6NSLDaNKjHGpo0OHCrSe_FwbWL12QDfyb5jfuCd.TlH0dBOxdNSUTvMMN2SBym8MTnbZA36yrYLT90DpcuQnkl92n8ETIJmlMZ93zQaLrkqEpjlSmJyn2tRYCLu6dDUSArtwV90i1xpi2BR0lH_QTgYCHQjZuhy7nYkv1pw1tNy2NkcPlmsgpIlHH3eB_ahaVoNYHIBd5Rvu4oVxw0sIlhHj6uPg.MQKC3CfDc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:08 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XpILaeO7uDUq3oeaJFA%2Bpjy8qamKJNoYFYQzwblvyTKP3f2ohsJ9wmoMewGYFGF0DBaC0JkJ9bVvQ3OHnIUwoVaIq3REllVS8qWXn%2FWNcIWKWouYCdiR%2FcMxtYz5vfDUZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: W/"67136182-eb0"
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 92013bfcf92db4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| ptncvk.wokjcgrr1uyhtid.xyz/fast-endecode/main/request | 94.74.111.9 | 200 | 2.1 kB |
URL POST ptncvk.wokjcgrr1uyhtid.xyz/fast-endecode/main/request IP94.74.111.9:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerZeroSSL Subject*.wokjcgrr1uyhtid.xyz FingerprintB7:FD:54:79:65:D1:B8:3A:8C:69:D0:C6:C5:B2:C5:F6:F8:58:4A:0C ValidityFri, 14 Mar 2025 00:00:00 GMT - Thu, 12 Jun 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2130), with no line terminators Hash764601ae66ed17f6c623d5708cd8b4f6 9983674542634d90d2303ef8a1d53246d43ba60b 53d2b94c313047dc7b9ae12767592b663052c62649fff665a2f52cd06f87b2ca
POST /fast-endecode/main/request HTTP/1.1
Host: ptncvk.wokjcgrr1uyhtid.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 96
Origin: https://r0y2epckzd.xyz
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Server: nginx/1.17.6
Date: Fri, 14 Mar 2025 05:05:10 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Vary: Origin
X-Application-Context: cloud-module-endecode:41134
|
|
| r0y2epckzd.xyz/static/js/enter.js?t=202409091529 | 104.21.80.1 | 200 OK | 11 kB |
URL GET r0y2epckzd.xyz/static/js/enter.js?t=202409091529 IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/js/enter.js?t=202409091529 HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:06 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YvJ3W9blokt1pvnRJTtac4%2B78Ytb55tJzeTUuJ2JitRrDB3usvRARzmh3K%2BelDSNYBGJkz%2F3yiKEJoPuPBX%2BhckU5RO6zBGzxS1%2BuL%2BGNu3fhgKkMwQivOddL9wJiAlQyA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: W/"67136182-2bcb"
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 92013bed491fb4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/static/cdn/js/axios.min.js | 104.21.80.1 | 200 OK | 18 kB |
URL GET r0y2epckzd.xyz/static/cdn/js/axios.min.js IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typeJavaScript source, ASCII text, with very long lines (17808) Hashd1e71c0ca404956d46e475dbe30566b8 474c81de5ff1418895a10cb6e03f9ab522914b69 1d389f625c1d774224d32527657e7398e57a65c718a07748f0ad7faecce8de3e
GET /static/cdn/js/axios.min.js HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:06 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9vnML9RTjx4Ts2DGB0kf0Hs9XAYrKcnnP15ZVHnqF6WGarGZkbss2v0fvNCWm%2BiNyIpkjD%2F1whyJZDuw%2B3r7ZDD8sjKCO%2FPM3LH6zJlFcXP7ztNYmiLV359OvqIS4bMq8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: W/"67136182-45b3"
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 92013bed391ab4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/static/cdn/js/vue-clipboard.min.js | 104.21.80.1 | 200 OK | 14 kB |
URL GET r0y2epckzd.xyz/static/cdn/js/vue-clipboard.min.js IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typeJavaScript source, ASCII text, with very long lines (13748), with no line terminators Hash8856c5f65c23d45fe8f4eec0c6dc6a44 015add8db60dfd6b903f201f84b4bcfa10cde132 7122add2d588267de45bc07c225bc54761a51516ed7c704342b639e48f501759
GET /static/cdn/js/vue-clipboard.min.js HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:06 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nLnEZTWqPT1L9n7a%2BI7mt67HW1SYJSki5Ox9oxnIKI8wbkVvNZK9hKq%2B8LZPmpY8HXbgimxRNxBtHYSu%2BDa5CjqZSkCMuNGuVPCVShKDOZh48ohxqhKLi3LfImezbNB%2FMg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: W/"67136182-35b4"
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 92013bed491eb4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| hmrh52eh9nz2k8.top/ | 20.255.208.2 | 200 OK | 227 B |
IP20.255.208.2:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerZeroSSL Subject52medhmvvqp51p.top FingerprintEB:59:8F:1A:E5:FE:FA:A8:AC:91:9E:57:2D:29:D3:2C:A4:EC:A3:4D ValidityThu, 13 Mar 2025 00:00:00 GMT - Wed, 11 Jun 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash241c893f6a3c8f9de25f803f3bb9ba64 415f70ca0fb2047dc6134b60fbf77ab135e94c40 50841c286a31b90eff5d9922762289458b8cffa78f9266776e87eed634179f27
GET / HTTP/1.1
Host: hmrh52eh9nz2k8.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://r0y2epckzd.xyz/
Origin: https://r0y2epckzd.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 23
Cloudservicediscount: CDN
Content-Disposition: attachment
Content-Length: 227
Content-Type: text/plain
Date: Fri, 14 Mar 2025 05:05:08 GMT
Etag: "12b8b819c1f1dd24a317ea2c66d2e149"
Last-Modified: Fri, 14 Mar 2025 02:55:24 GMT
Nginx-Hit: 1
Server: openresty
Via: EA-HKG-EDGE1-CACHE1[3],EA-HKG-EDGE1-CACHE2[0,TCP_HIT,1],EA-HKG-GLOBAL1-CACHE22[57],EA-HKG-GLOBAL1-CACHE23[50,TCP_MISS,57]
X-Amz-Id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
X-Amz-Request-Id: 000001959294EABA95442B9729580B04
X-Amz-Tagging-Count: 0
X-Ccdn-Cachettl: 60
X-Ccdn-Req-Id-46b1: 000a9076b659bab401c3766ff264a278
X-Hcs-Proxy-Type: 1
X-Reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc
|
|
| r0y2epckzd.xyz/static/img/zb1.png | 104.21.80.1 | 200 OK | 6.4 kB |
URL GET r0y2epckzd.xyz/static/img/zb1.png IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typePNG image data, 364 x 95, 8-bit/color RGBA, non-interlaced Hashebb1b9066ac37a22a5ba0c2c419cb7af ee621f80857dfe4d36721afb4da97bbbca1fed2c 8bd85f4ff0e271ecdb9473b34e875ce82ebe82c1e3c09399286fd1a99fcc7caf
GET /static/img/zb1.png HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:08 GMT
content-type: image/png
content-length: 6359
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UOOf1qtM8k71YqEF9RhSkq48A3XmZRwa2YU2QszhL4sHMnzlmCAt0uuIzjk6Dy1cRxUSjwDqKe8WYlgXLbbHKvTtx7J3DzL1pdPyLaML57BHfxCN24oR4jxk1kPhbaqwJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: "67136182-18d7"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 92013bf8a924b4f9-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/static/img/zb4.png | 104.21.80.1 | 200 OK | 3.9 kB |
URL GET r0y2epckzd.xyz/static/img/zb4.png IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typePNG image data, 362 x 59, 8-bit/color RGBA, non-interlaced Hashec7d5ce45f04077f610d351f6fead7b4 f23728808d14a0d78f283a913c74ca42054eae50 9ad5196e9c615c673214814cf83d9ac81678f9ef38b1cd3ce92b17cd92bd57a4
GET /static/img/zb4.png HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:08 GMT
content-type: image/png
content-length: 3920
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1g6WW9%2FGxGIFYD31zv204vFIFlRc7J2kb5zJ0s2GXCdg5Y7A0DDbf4jB9lnbgdKuMbg1RIpEyR3MmGUcVf8xmiZtRn%2BnQwucZFAGG5BGCkILNXJmYKL14ShLLLkcpnCL0g%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: "67136182-f50"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 92013bf8a927b4f9-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js? | 104.21.80.1 | 200 OK | 8.5 kB |
URL GET r0y2epckzd.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js? IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typeJavaScript source, ASCII text, with very long lines (8470), with no line terminators Hash874ce8f9b5fa68c79463708bbc1312fb bcd37c8ff4d1cb7992b080ddcd8c549cdf6787b9 9c1d94260d5a4a5610132b3a7591283e32e0f53f329712c3509a1ec617b2a880
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js? HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:07 GMT
content-type: application/javascript; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BVhDFM9%2FrgIvSwG%2FD4XTGWap77VoYysjswYqhzclAiMaFH0stZLmNTVzysnK4O43qmbZm3B%2B%2BESaWb7LiJmVEUQjXTlGexLopmSfeRYJqIbe0CMaOjziB8tuj3UX2Om7VQ%3D%3D"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
content-encoding: br
cf-ray: 92013bf8f92ab4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/enter.html | 104.21.80.1 | 200 OK | 5.2 kB |
URL User Request GET r0y2epckzd.xyz/enter.html IP104.21.80.1:443
CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typeHTML document, ASCII text, with very long lines (5618), with no line terminators Hash60da8e27479d05bf8aff6159bd5292f2 24731e6a33be0f1fa4a6f1efc6bae2d8db99a386 390cbef70a1224bb2006dc8b033be723db6a9f4b241810b33b102e1fa6ff820a
GET /enter.html HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:05 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NQcbW3AtbMJfJ3I9Rfqlb9sk3bbsvuxlw7I8ux8NZIkxnZ57uuNNpizgNI0yfwHHDQhoWqNEh9xpDzaQ3DSkgJVNWYHyvirxvozt2uOtgqEo5%2F6%2F6gk%2B2knn3DlSJ6M7nw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 92013be8c8e4b4f9-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/static/cdn/js/crypto-js.min.js | 104.21.80.1 | 200 OK | 48 kB |
URL GET r0y2epckzd.xyz/static/cdn/js/crypto-js.min.js IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typeJavaScript source, ASCII text, with very long lines (47576), with no line terminators Hashc8b215ef1c396901ab19c41a7ac42cd7 00e971d00ca3e26ef1bc0f7586e16c5e30296ebe 817c88066f7a344d4471bb20d30652e641f498eedd9c28e5a6ed661c67795010
GET /static/cdn/js/crypto-js.min.js HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:07 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ss9KMsZiyf5ELc45ZRTvumnrEBTbqV1AxmI4DWVlNONUbmLDvPVLj1JBBOWGjpPN2g46wc8UxUGiaAaWwK1jrX%2BJ7jhd8xfw8sVGEXHz4djJtPIU37NXvwWnqGxtE9LfIg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: W/"67136182-b9d8"
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 92013bed391bb4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| r0y2epckzd.xyz/static/cdn/js/vue.min.js | 104.21.80.1 | 200 OK | 94 kB |
URL GET r0y2epckzd.xyz/static/cdn/js/vue.min.js IP104.21.80.1:443
Requested byhttps://r0y2epckzd.xyz/enter.html CertificateIssuerGoogle Trust Services Subjectr0y2epckzd.xyz Fingerprint70:56:21:EE:96:14:B4:3E:6D:DB:A5:0F:2A:FE:9E:84:E8:FB:BE:43 ValiditySat, 08 Mar 2025 08:40:38 GMT - Fri, 06 Jun 2025 09:38:16 GMT
File typeJavaScript source, ASCII text, with very long lines (65449) Hashb21b8531847604ab5f2f5caaef51ba31 da8d7a59f4e6cc55ea58abec33ef9cebb9ba67c1 9174c425c445377df4562ad9165ea08fdf9433a808296d7de5f619791df10e17
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/cdn/js/vue.min.js HTTP/1.1
Host: r0y2epckzd.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://r0y2epckzd.xyz/enter.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Mar 2025 05:05:07 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JZoJfYhvPSHNVGsw7Wp3v5Wf0MwQpYISd%2BwbZyXE4yd62BVlCkxRguzqenNJXaIiJW6JAKz4ftoisLXO8MZQICzYvVPJE8Ne1Sgv0eyQNXc8qYMOwDvCTC7XdV0CecbXWA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 19 Oct 2024 07:36:34 GMT
etag: W/"67136182-16fc7"
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 92013bed3919b4f9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0