| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/bg.gif |  185.246.188.124 | 200 OK | 854 kB |
URL GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/bg.gif IP185.246.188.124:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
File typeGIF image data, version 87a, 600 x 338 Size854 kB (854531 bytes) Hashfb515d8640e8153526073e3dba53cef1 065dcee1850b622ab7e96586cc5ae737dd335587 306d7910500ae32624462375434beaab45581fdfb743af6f3efa5b096a403721
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/bg.gif HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:53 GMT
Content-Type: image/gif
Content-Length: 854531
Last-Modified: Mon, 15 Jul 2024 09:34:00 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed08-d0a03"
Accept-Ranges: bytes
|
|
| |  172.67.182.44 | 307 Temporary Redirect | 4.5 kB |
IP172.67.182.44:443
CertificateIssuerGoogle Trust Services Subjectadsbull.com Fingerprint11:1E:CD:4F:43:1C:47:5B:34:85:6F:48:E4:FD:08:37:3F:DE:D8:A5 ValidityWed, 21 May 2025 12:12:54 GMT - Tue, 19 Aug 2025 13:10:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: io9kiubueu.adsbull.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Sun, 08 Jun 2025 22:30:51 GMT
location: https://jovialvalue.com/dt12au1ez?key=64ac12db8e7a93f5419c9ff7808909e9
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1PQuq4dVObNMPo64Q3dkzj6Kf8ChpS6OW22lRYKay4rRDjKFFAwFgeXRKtOaMJ6L00BYnBoehuVmC9FHL%2BhaCL1yQyj61e7ERD8jUH5ROEKJtA%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 94cbd608faf356bd-OSL
X-Firefox-Spdy: h2
|
|
| jovialvalue.com/api/users?token=L2R0MTJhdTFlej9rZXk9NjRhYzEyZGI4ZTdhOTNmNTQxOWM5ZmY3ODA4OTA5ZTkmcHN0PTE3NDk0MjE5MTEmcm10Yz10JnNodT02Njg3NWFmYzcxNDBkODhjNzQzY2MzNjY3NDNjYjg1OGUzMjMwYjQ2MTFhNjc2OWI3MDhlYTlhNjFjYjM3MDMwNDA4M2NiMTlmNTEyM2U1N2FlNzAzMmMxYTAzZDc1M2QyOGViN2ViNDY5OGY4NDc0NDE2MGY3MGMxMTE0Y2JlMzQ1OWYxNWQ4ODE5YjMwMzg5NDBjMzAyMjEyZTIzNzIwNTA2N2Q1ZDU2YjNhODg1NTRjNjQ2YyZwaWk9JmluPSZ1dWlkPQ |  172.240.127.234 | 302 Found | 20 kB |
URL User Request GET jovialvalue.com/api/users?token=L2R0MTJhdTFlej9rZXk9NjRhYzEyZGI4ZTdhOTNmNTQxOWM5ZmY3ODA4OTA5ZTkmcHN0PTE3NDk0MjE5MTEmcm10Yz10JnNodT02Njg3NWFmYzcxNDBkODhjNzQzY2MzNjY3NDNjYjg1OGUzMjMwYjQ2MTFhNjc2OWI3MDhlYTlhNjFjYjM3MDMwNDA4M2NiMTlmNTEyM2U1N2FlNzAzMmMxYTAzZDc1M2QyOGViN2ViNDY5OGY4NDc0NDE2MGY3MGMxMTE0Y2JlMzQ1OWYxNWQ4ODE5YjMwMzg5NDBjMzAyMjEyZTIzNzIwNTA2N2Q1ZDU2YjNhODg1NTRjNjQ2YyZwaWk9JmluPSZ1dWlkPQ IP172.240.127.234:443
CertificateIssuerLet's Encrypt Subjectjovialvalue.com Fingerprint41:D1:32:3A:87:2E:66:21:70:0A:1C:BC:23:04:FF:1F:52:6E:82:CF ValiditySat, 24 May 2025 22:00:10 GMT - Fri, 22 Aug 2025 22:00:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=L2R0MTJhdTFlej9rZXk9NjRhYzEyZGI4ZTdhOTNmNTQxOWM5ZmY3ODA4OTA5ZTkmcHN0PTE3NDk0MjE5MTEmcm10Yz10JnNodT02Njg3NWFmYzcxNDBkODhjNzQzY2MzNjY3NDNjYjg1OGUzMjMwYjQ2MTFhNjc2OWI3MDhlYTlhNjFjYjM3MDMwNDA4M2NiMTlmNTEyM2U1N2FlNzAzMmMxYTAzZDc1M2QyOGViN2ViNDY5OGY4NDc0NDE2MGY3MGMxMTE0Y2JlMzQ1OWYxNWQ4ODE5YjMwMzg5NDBjMzAyMjEyZTIzNzIwNTA2N2Q1ZDU2YjNhODg1NTRjNjQ2YyZwaWk9JmluPSZ1dWlkPQ HTTP/1.1
Host: jovialvalue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jovialvalue.com/api/users?token=L2R0MTJhdTFlej9rZXk9MTBhZmFlYzM1NDA0ZmZkNWVkYmFkMDEzMWJiMzhlZTYmc3VibWV0cmljPTE4OTQxMzU1
Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.Kl6Pnqf1e4nG02gIJV21oxQ97-C1ToBfO61AEtD8TPM; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
location: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1
set-cookie: pdhtkv=true; expires=Mon, 09 Jun 2025 22:30:52 GMT; path=/
uncs=1; expires=Mon, 09 Jun 2025 22:30:52 GMT; path=/
pdhtkv28=true; expires=Mon, 09 Jun 2025 22:30:52 GMT; path=/
uncs28=1; expires=Mon, 09 Jun 2025 22:30:52 GMT; path=/
u_pl18941355=1; expires=Mon, 09 Jun 2025 22:30:52 GMT; path=/
x-envoy-upstream-service-time: 157
Host: jovialvalue.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 1bd5b8158ae9d938342aeedc57032df0
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ | 185.246.188.124 | 200 OK | 20 kB |
URL User Request GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ IP185.246.188.124:443
CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
File typeHTML document, ASCII text, with very long lines (1877) Hashc33f93b3c897fac2fd139d768c14596e 4e4072b6c6c7805c7b295063a0f0d77ec749a422 57f3beab79949364321ffc25d65e4f36ff51b480c578db0593615ad701826361
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jovialvalue.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: text/html
Last-Modified: Mon, 15 Jul 2024 09:33:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
ETag: W/"6694ed05-4e9c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/new_free.svg | 185.246.188.124 | 200 OK | 1.5 kB |
URL GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/new_free.svg IP185.246.188.124:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
File typeSVG Scalable Vector Graphics image Hashadd28f2b5b2a568a5d5b49bd7b40ec03 66ad7a5ce73b4f84f2f54e5e6150cd5cc923d25e 89bcc9a26f3ed7fb196ca1d744395e6fb79f4561ced17605eb27105a9f67e56e
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/new_free.svg HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: image/svg+xml
Content-Length: 1545
Last-Modified: Mon, 15 Jul 2024 09:34:01 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed09-609"
Accept-Ranges: bytes
|
|
| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/fav.png | 185.246.188.124 | 200 OK | 545 B |
URL GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/fav.png IP185.246.188.124:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hash418a1f510d301f62a0976ebcf9cda640 89b5dbdf41afda654ad9f95e1b2672ffe4c51c20 34ca666275595ea71b9787f7269141b947e95af772221947f5ddb060448ed77f
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/fav.png HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:53 GMT
Content-Type: image/png
Content-Length: 545
Last-Modified: Mon, 15 Jul 2024 09:34:00 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed08-221"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| i22-5-ctz3v--api.xdiv.link/bp/p/p/?token=AQQYEQpTX0MSS1hAQgocEBMID1cKHwFOKgAeCw0cRCQJDQwOBUEGH10GCExLWUJZ | 188.114.97.1 | 307 Temporary Redirect | 4.5 kB |
URL User Request GET i22-5-ctz3v--api.xdiv.link/bp/p/p/?token=AQQYEQpTX0MSS1hAQgocEBMID1cKHwFOKgAeCw0cRCQJDQwOBUEGH10GCExLWUJZ IP188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjectxdiv.link Fingerprint33:6D:9C:E5:B7:05:ED:20:64:6C:0B:23:33:A9:3C:25:F5:D2:48:04 ValiditySun, 25 May 2025 20:57:01 GMT - Sat, 23 Aug 2025 21:54:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bp/p/p/?token=AQQYEQpTX0MSS1hAQgocEBMID1cKHwFOKgAeCw0cRCQJDQwOBUEGH10GCExLWUJZ HTTP/1.1
Host: i22-5-ctz3v--api.xdiv.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Sun, 08 Jun 2025 22:30:50 GMT
location: https://io9kiubueu.adsbull.com/
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Pz7G03bPe0MmdPGA3gN82YDd4NQ6YqHm4Eft2XgwvRjHEWx4VRr%2B%2FVSsPD44y7B7zq53%2BsDNBRDortQfRrBiDm%2BoMX%2BlgN%2FfpKlZdo7MwSvBO4sQTqllGA%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 94cbd6089efe5696-OSL
X-Firefox-Spdy: h2
|
|
| loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/style.css | 185.246.188.125 | 200 OK | 4.1 kB |
URL GET loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/style.css IP185.246.188.125:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subjectloadingscripts.com FingerprintEA:8D:28:71:26:10:9B:6E:B1:FF:D3:C6:9C:53:9E:D1:3D:A7:B6:31 ValiditySun, 20 Apr 2025 22:24:36 GMT - Sat, 19 Jul 2025 22:24:35 GMT
File typeASCII text, with CRLF line terminators Hash79d9dfa9f91948462f9069fd3e5f61ae 6c8c5a83d3c8180a16dd7e6c3065c81ad38bcc94 8c8549291722875346b6e050a092cdda6088d579aba282a66304299616c55871
GET /progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/style.css HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: text/css
Last-Modified: Thu, 25 May 2023 12:41:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
ETag: W/"646f577b-fe7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/loading.svg | 185.246.188.124 | 200 OK | 386 B |
URL GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/loading.svg IP185.246.188.124:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
File typeSVG Scalable Vector Graphics image Hash484f8bcb59050331f28ec35ae84c3ef0 e083f687af91382e8485515369daffde1899a12a d4d917c84ef07493d6dc83306cb754ddddc1cdb4fc879e09f5b54a0b6f11d451
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/loading.svg HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: image/svg+xml
Content-Length: 386
Last-Modified: Mon, 15 Jul 2024 09:34:01 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed09-182"
Accept-Ranges: bytes
|
|
| loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/download-gif.gif | 185.246.188.125 | 200 OK | 104 kB |
URL GET loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/download-gif.gif IP185.246.188.125:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subjectloadingscripts.com FingerprintEA:8D:28:71:26:10:9B:6E:B1:FF:D3:C6:9C:53:9E:D1:3D:A7:B6:31 ValiditySun, 20 Apr 2025 22:24:36 GMT - Sat, 19 Jul 2025 22:24:35 GMT
File typeGIF image data, version 89a, 188 x 188 Size104 kB (104467 bytes) Hash2d00d3926dd5bb55e7ab4100bacb86a7 9d3c247c6e1fe672b8ba0849f30ed18c45176883 0175bfd9afe9543559c705914fac010a6d609017f0a2edcffe599549561fb5d0
GET /progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/download-gif.gif HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Sun, 08 Jun 2025 22:30:53 GMT
Content-Type: image/gif
Content-Length: 104467
Last-Modified: Thu, 25 May 2023 10:24:54 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "646f3776-19813"
Accept-Ranges: bytes
|
|
| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1 | 185.246.188.124 | 301 Moved Permanently | 20 kB |
URL User Request GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1 IP185.246.188.124:443
CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1 HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jovialvalue.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: text/html
Content-Length: 169
Location: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/
Connection: keep-alive
Keep-Alive: timeout=10
|
|
| loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js | 185.246.188.125 | 200 OK | 2.8 kB |
URL GET loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js IP185.246.188.125:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subjectloadingscripts.com FingerprintEA:8D:28:71:26:10:9B:6E:B1:FF:D3:C6:9C:53:9E:D1:3D:A7:B6:31 ValiditySun, 20 Apr 2025 22:24:36 GMT - Sat, 19 Jul 2025 22:24:35 GMT
File typeJavaScript source, ASCII text, with very long lines (2801), with no line terminators Hash01a2c61eb40ce8e341a0801f78da7735 1cb39b0674bc20c3208c16c53c131e74704759ed 03d593cbf7b72d3c70caedac0c0259330ce8b1a45b708e92e3f19245b6ca9929
GET /progress_p/pwa_links/default_scripts/notification.js HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: application/javascript
Content-Length: 2801
Last-Modified: Fri, 24 Mar 2023 17:31:52 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "641dde88-af1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/qr2.png | 185.246.188.124 | 200 OK | 7.2 kB |
URL GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/qr2.png IP185.246.188.124:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
File typePNG image data, 1160 x 1160, 8-bit/color RGB, non-interlaced Hashe8f6261c7f1f8a7621aa7f2fa7e1ba8e f149d15d01844eacf10330c9663961e84d233f28 bbb8033431308d56b3ca1ca801be7c56eb232aae77d2226bf2884dcf68aecd8f
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/qr2.png HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: image/png
Content-Length: 7192
Last-Modified: Mon, 15 Jul 2024 09:34:01 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed09-1c18"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/1.png | 185.246.188.124 | 200 OK | 50 kB |
URL GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/1.png IP185.246.188.124:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
File typePNG image data, 980 x 980, 8-bit/color RGBA, non-interlaced Hash1143a7b3bc5051147099facc8dc1432e 3a01609fb60f785d3233a788dff4351a1d79d4c9 ff708dfd7d816c51832a47cebfaf051422ddd0ab0d96588b55a1a2b89c1f3f73
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/1.png HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: image/png
Content-Length: 49867
Last-Modified: Mon, 15 Jul 2024 09:33:59 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "6694ed07-c2cb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/close.svg | 185.246.188.125 | 200 OK | 1.3 kB |
URL GET loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/close.svg IP185.246.188.125:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subjectloadingscripts.com FingerprintEA:8D:28:71:26:10:9B:6E:B1:FF:D3:C6:9C:53:9E:D1:3D:A7:B6:31 ValiditySun, 20 Apr 2025 22:24:36 GMT - Sat, 19 Jul 2025 22:24:35 GMT
File typeSVG Scalable Vector Graphics image Hash369850b9873659adf0951d845f57dba1 a64257186daa33b6b318943a457b6cf8d80b26b6 9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21
GET /progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/close.svg HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Sun, 08 Jun 2025 22:30:53 GMT
Content-Type: image/svg+xml
Content-Length: 1279
Last-Modified: Wed, 24 May 2023 13:06:32 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "646e0bd8-4ff"
Accept-Ranges: bytes
|
|
| jovialvalue.com/dt12au1ez?key=64ac12db8e7a93f5419c9ff7808909e9 | 172.240.127.234 | 200 OK | 4.5 kB |
URL User Request GET jovialvalue.com/dt12au1ez?key=64ac12db8e7a93f5419c9ff7808909e9 IP172.240.127.234:443
CertificateIssuerLet's Encrypt Subjectjovialvalue.com Fingerprint41:D1:32:3A:87:2E:66:21:70:0A:1C:BC:23:04:FF:1F:52:6E:82:CF ValiditySat, 24 May 2025 22:00:10 GMT - Fri, 22 Aug 2025 22:00:09 GMT
File typeHTML document, ASCII text, with very long lines (4497) Hash719cfd293178eff741a76b8aa82f5ce6 574a6424760c3d40280621223a9f7902e6b961dd 60ab6a519059bbed1aa8123f5cf077946ec2ae6938053561d148425ebb880100
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /dt12au1ez?key=64ac12db8e7a93f5419c9ff7808909e9 HTTP/1.1
Host: jovialvalue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
set-cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.Kl6Pnqf1e4nG02gIJV21oxQ97-C1ToBfO61AEtD8TPM; expires=Sun, 08 Jun 2025 22:31:51 GMT; path=/
x-envoy-upstream-service-time: 1
Host: jovialvalue.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: a5b02cf5b6b242d08ce6f431ebcb47c7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/animate.css | 185.246.188.124 | 200 OK | 79 kB |
URL GET press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/animate.css IP185.246.188.124:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subject564a5a0rut08.top Fingerprint10:54:07:65:70:3F:59:27:DD:EE:41:D1:6C:EB:2E:5D:31:20:EF:2F ValiditySat, 24 May 2025 20:40:01 GMT - Fri, 22 Aug 2025 20:40:00 GMT
Hash97d64faca1f1a0422ecf3ae998026899 61bc4cbfc9fc6e0db503aa67ba92c7c768a4c7e1 d1413e8c95a61b36e4ea9441e9ead3cce29089e85043b0706453597016c01fdb
GET /e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/assets/animate.css HTTP/1.1
Host: press-continue.564a5a0rut08.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: text/css
Last-Modified: Mon, 15 Jul 2024 09:33:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
ETag: W/"6694ed07-1361f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/pwa_custom.js | 185.246.188.125 | 200 OK | 1.8 kB |
URL GET loadingscripts.com/progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/pwa_custom.js IP185.246.188.125:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerLet's Encrypt Subjectloadingscripts.com FingerprintEA:8D:28:71:26:10:9B:6E:B1:FF:D3:C6:9C:53:9E:D1:3D:A7:B6:31 ValiditySun, 20 Apr 2025 22:24:36 GMT - Sat, 19 Jul 2025 22:24:35 GMT
File typeASCII text, with CRLF line terminators Hash8dc402b92b1ed0b13627e2ba1b928cc7 35d1e71cdea9a15b778c6137baaaac1eda4aabb3 b1d3e86c81061bd76770790bf5e2f0ffa7b45f2c4e3fc3400a7142bf9b3a53fb
GET /progress_p/pwa_links/main/cinema/custom_cinema_fullpage/1/pwa_custom.js HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Sun, 08 Jun 2025 22:30:52 GMT
Content-Type: application/javascript
Content-Length: 1801
Last-Modified: Thu, 25 May 2023 12:47:54 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "646f58fa-709"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@300&display=swap | 142.250.178.106 | 200 OK | 5.7 kB |
URL GET fonts.googleapis.com/css2?family=Roboto:wght@300&display=swap IP142.250.178.106:443
Requested byhttps://press-continue.564a5a0rut08.top/e102479204fcec81f6dfb01f2462a2dfa451531d/qq1/ CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint1C:09:46:89:AD:F3:B6:3E:B4:89:F7:49:AC:15:E7:4E:A6:D2:AA:73 ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
File typeASCII text, with very long lines (1572) Hashf16142d531f42f7e8a6acfef5cca07de db7a93e4c246b8b8d624d8225e9245166fe7dc24 f6a29411897001b8f35b4a207de032c1d678c3f9ef601608a41d5b41c8b9f264
GET /css2?family=Roboto:wght@300&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://press-continue.564a5a0rut08.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 08 Jun 2025 22:30:53 GMT
date: Sun, 08 Jun 2025 22:30:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|