| GET askjxbf.com/hls.min.js | 23.145.232.129 | 200 OK | 249 kB |
IP 23.145.232.129:443
Requested byhttps://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 CertificateIssuerLet's Encrypt Subjectaskjxbf.com FingerprintAA:24:A4:28:1A:AF:9E:64:0B:27:0F:BB:E4:76:1B:CA:18:45:45:66 ValiditySat, 31 May 2025 05:30:27 GMT - Fri, 29 Aug 2025 05:30:26 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators Size249 kB (249357 bytes) Hashd943e8947dfbbeebd51a90ba478aa25b 1e353d8a98fc0630e9789c9957ba9d7ae460f23e a6bf4d607916476c704fe0dd7d9a293c890817e0a0f4c4268d9085f3e4118657
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /hls.min.js HTTP/1.1
Host: askjxbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Jun 2025 08:17:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 11 Jan 2024 08:49:57 GMT
ETag: W/"659fabb5-3ce0d"
Server: cdn
X-Cache-Status: HIT
Content-Encoding: gzip
|
|
| GET askjxbf.com/DPlayer.min.css | 23.145.232.129 | 200 OK | 45 kB |
URL GET askjxbf.com/DPlayer.min.css IP 23.145.232.129:443
Requested byhttps://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 CertificateIssuerLet's Encrypt Subjectaskjxbf.com FingerprintAA:24:A4:28:1A:AF:9E:64:0B:27:0F:BB:E4:76:1B:CA:18:45:45:66 ValiditySat, 31 May 2025 05:30:27 GMT - Fri, 29 Aug 2025 05:30:26 GMT
File typeASCII text, with very long lines (36675) Hash31ac9b1a5a7f018dcc9a0e0f66261c08 f7d19655f873b813ffba5d1a17145c91f82631b8 fba0d89e59046d8bd52df0d3b28850b3af41aa4959233634286087af7d741b03
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /DPlayer.min.css HTTP/1.1
Host: askjxbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Jun 2025 08:17:39 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 11 Jan 2024 08:49:44 GMT
ETag: W/"659faba8-b0c1"
Server: cdn
X-Cache-Status: HIT
Content-Encoding: gzip
|
|
| GET askjxbf.com/DPlayer.min.js | 23.145.232.129 | 200 OK | 117 kB |
URL GET askjxbf.com/DPlayer.min.js IP 23.145.232.129:443
Requested byhttps://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 CertificateIssuerLet's Encrypt Subjectaskjxbf.com FingerprintAA:24:A4:28:1A:AF:9E:64:0B:27:0F:BB:E4:76:1B:CA:18:45:45:66 ValiditySat, 31 May 2025 05:30:27 GMT - Fri, 29 Aug 2025 05:30:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size117 kB (116760 bytes) Hash9de01b490ec0d69975796cd2807cbe59 0df59b62051c5fdd8df6c79cb4007051c8be0761 1628985126d759559a0b54b496ed7a75bf0d6a4e620ca83f3eccfffd8f9ef5cf
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /DPlayer.min.js HTTP/1.1
Host: askjxbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Jun 2025 08:17:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 11 Jan 2024 08:56:38 GMT
ETag: W/"659fad46-1c818"
Server: cdn
X-Cache-Status: HIT
Content-Encoding: gzip
|
|
| GET bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 | 64.112.76.21 | 200 OK | 118 B |
URL GET bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 IP 64.112.76.21:443
Requested byhttps://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 CertificateIssuerUnizeto Technologies S.A. Subjectbfaskbwerve.com Fingerprint17:BE:B5:B6:72:C2:AD:F5:0C:31:68:24:C8:2B:3D:2F:EB:BD:D8:B6 ValidityWed, 12 Mar 2025 23:24:33 GMT - Sat, 11 Apr 2026 23:24:32 GMT
Hash6f12a042f2f4d1504a38cd225cf618f6 76e63fcc18c11a38688ee88255a1747d9d73b24d 7990fcd39d1b4bf96e1b75305f9cd3a69c3851632cb633db54628e18b0b9c7db
GET /20250619/JVkLA4iv/index.m3u8 HTTP/1.1
Host: bfaskbwerve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://askjxbf.com
DNT: 1
Connection: keep-alive
Referer: https://askjxbf.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 08:17:40 GMT
content-type: application/vnd.apple.mpegURL
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
cache: HIT
X-Firefox-Spdy: h2
|
|
| GET askjxbf.com/favicon.ico | 23.145.232.129 | 404 Not Found | 146 B |
IP 23.145.232.129:443
Requested byhttps://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 CertificateIssuerLet's Encrypt Subjectaskjxbf.com FingerprintAA:24:A4:28:1A:AF:9E:64:0B:27:0F:BB:E4:76:1B:CA:18:45:45:66 ValiditySat, 31 May 2025 05:30:27 GMT - Fri, 29 Aug 2025 05:30:26 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: askjxbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 22 Jun 2025 08:17:40 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
Server: cdn
X-Cache-Status: MISS
|
|
| GET bfaskbwerve.com/20250619/JVkLA4iv/2000kb/hls/index.m3u8 | 64.112.76.21 | 200 OK | 26 kB |
URL GET bfaskbwerve.com/20250619/JVkLA4iv/2000kb/hls/index.m3u8 IP 64.112.76.21:443
Requested byhttps://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 CertificateIssuerUnizeto Technologies S.A. Subjectbfaskbwerve.com Fingerprint17:BE:B5:B6:72:C2:AD:F5:0C:31:68:24:C8:2B:3D:2F:EB:BD:D8:B6 ValidityWed, 12 Mar 2025 23:24:33 GMT - Sat, 11 Apr 2026 23:24:32 GMT
Hashe83ce5bd8e1dbcd417948e5fd62e66e8 2b9296fb89192e31b6cfb3ab250b1dc37c336907 e5ea7a524f8c40a6b763f5e8f0868fb107c18acc221f21699104bcc2b94a9450
GET /20250619/JVkLA4iv/2000kb/hls/index.m3u8 HTTP/1.1
Host: bfaskbwerve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://askjxbf.com
DNT: 1
Connection: keep-alive
Referer: https://askjxbf.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 08:17:40 GMT
content-type: application/vnd.apple.mpegURL
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
cache: HIT
X-Firefox-Spdy: h2
|
|
| GET bfaskbwerve.com/20250619/2t2vbiQc/1000kb/hls/afSIEStP.ts | 64.112.76.21 | 200 OK | 118 kB |
URL GET bfaskbwerve.com/20250619/2t2vbiQc/1000kb/hls/afSIEStP.ts IP 64.112.76.21:443
Requested byhttps://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 CertificateIssuerUnizeto Technologies S.A. Subjectbfaskbwerve.com Fingerprint17:BE:B5:B6:72:C2:AD:F5:0C:31:68:24:C8:2B:3D:2F:EB:BD:D8:B6 ValidityWed, 12 Mar 2025 23:24:33 GMT - Sat, 11 Apr 2026 23:24:32 GMT
Size118 kB (118252 bytes) Hash761f64ffba5d9a383bf6b52469b7c311 e64ddca15bbac63cfc290ef7a79be6fdc3a2ec15 b71455a913e820609eb387b18446cad96b22f7e1612e8d0b93053ba399102d9c
GET /20250619/2t2vbiQc/1000kb/hls/afSIEStP.ts HTTP/1.1
Host: bfaskbwerve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://askjxbf.com
DNT: 1
Connection: keep-alive
Referer: https://askjxbf.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 08:17:41 GMT
content-type: video/mp2t
content-length: 118252
last-modified: Fri, 20 Jun 2025 06:08:54 GMT
etag: "6854faf6-1cdec"
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
x-server-cache: c209
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| GET askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 | 23.145.232.129 | 200 OK | 1.1 kB |
URL User Request GET askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 IP 23.145.232.129:443
CertificateIssuerLet's Encrypt Subjectaskjxbf.com FingerprintAA:24:A4:28:1A:AF:9E:64:0B:27:0F:BB:E4:76:1B:CA:18:45:45:66 ValiditySat, 31 May 2025 05:30:27 GMT - Fri, 29 Aug 2025 05:30:26 GMT
File typeHTML document, Unicode text, UTF-8 text Hash07622db4a6b2d3e6bf39729a469cd893 d9b128ad5cbe0cda70f1308bf1005d1cca89a519 46012c62438492484ebfb68bd07970b89ea7a271c5b9ea93b575eacfc945412d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 HTTP/1.1
Host: askjxbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Jun 2025 08:17:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 26 Aug 2024 22:00:51 GMT
ETag: W/"66ccfb13-444"
Server: cdn
X-Cache-Status: MISS
Content-Encoding: gzip
|
|
| GET bfaskbwerve.com/20250619/2t2vbiQc/1000kb/hls/TefNKzgk.ts | 64.112.76.21 | 200 OK | 125 kB |
URL GET bfaskbwerve.com/20250619/2t2vbiQc/1000kb/hls/TefNKzgk.ts IP 64.112.76.21:443
Requested byhttps://askjxbf.com/play.html?url=https://bfaskbwerve.com/20250619/JVkLA4iv/index.m3u8 CertificateIssuerUnizeto Technologies S.A. Subjectbfaskbwerve.com Fingerprint17:BE:B5:B6:72:C2:AD:F5:0C:31:68:24:C8:2B:3D:2F:EB:BD:D8:B6 ValidityWed, 12 Mar 2025 23:24:33 GMT - Sat, 11 Apr 2026 23:24:32 GMT
Size125 kB (124644 bytes) Hash111e4c8863b7de76cf3f642ee4a05466 a41dab2afbb8e6649820f8e89eeafcb33a214d1b 29ff916d982e6059e321bba28297ab7851bf6949e34bdd566792dfd0b52c883e
GET /20250619/2t2vbiQc/1000kb/hls/TefNKzgk.ts HTTP/1.1
Host: bfaskbwerve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://askjxbf.com
DNT: 1
Connection: keep-alive
Referer: https://askjxbf.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jun 2025 08:17:41 GMT
content-type: video/mp2t
content-length: 124644
last-modified: Fri, 20 Jun 2025 06:08:54 GMT
etag: "6854faf6-1e6e4"
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
access-control-allow-methods: POST, GET, OPTIONS
x-server-cache: c209
cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|