| gg67ww5.xyz/ |  148.66.3.124 | | 169 B |
IP148.66.3.124:0
File typeHTML document, ASCII text, with CRLF line terminators Hashe2b2d66924b5bad7a8faa2c59f643055 a77ad5a69799f61612679c19cb2f3bf8e876c397 956e4fc6180dc45eb50c4e4071e0a2c90c871317dd63477e6b0ea6810b71dd14
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET / HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:03 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://gg67ww5.xyz/
|
|
| gg67ww5.xyz/ | 148.66.3.124 | | 13 kB |
IP148.66.3.124:0
File typeHTML document, ASCII text, with very long lines (7939) Hashacc9a3c9572ad1088d3831166352662b 1d4f7639d220e6cd302d82118e0e117303ab0827 589991f4fdd92cb958dd6f122c5ec8f25150a1e3d92424d00bccce99b6e59f5a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET / HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:03 GMT
Content-Type: text/html
Content-Length: 12772
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-31e4"
Accept-Ranges: bytes
|
|
| cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js |  104.17.25.14 | 200 OK | 6.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (22712) Hashc019be63e713ce6f2aa221c0df8fa0cb e5471888945144f233714d470959059c010eb667 87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce
GET /ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 6201
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402b-5915"
last-modified: Mon, 04 May 2020 16:17:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2797112
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2d49AIWYkvWDRceiNNbyYkWZZ0Eqldy1autLHYoGNF7q27xTkglZjXVwy4BEsVCpMAGCthX3UIPOqan3oP0NSXn8PgVPKb%2FSr%2FrjZWlaTeJoR5qGGwbDZqSJ7rmb3y1BwRLsxsN%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe27832b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js | 104.17.25.14 | | 17 kB |
URL cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js IP104.17.25.14:0
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (62696) Hashf0a01fa31e644ca44836356a172ba7c9 e81438a79e8a7f34423168c70696cff2a820dbf1 840ea076b43dbf564a909bb082dc287740a96f3c4483fcc024f7176306daecc7
GET /ajax/libs/sockjs-client/1.3.0/sockjs.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 16651
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd5-f54d"
last-modified: Mon, 04 May 2020 16:16:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 573882
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GoHPfo%2BmViK5ike3rNyrz%2BOU3rkQnRJsSKDA2gcNPYomHkxflotXP0ri3NosufkbMsu3b1d%2FqVHKRqtnY40yBxEpo9vsvvrtoVTT3Tjx517%2FYEQintb%2Fpg4gRPd8CafdqHjSrUFf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe27835b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js | 104.17.25.14 | 200 OK | 2.8 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (9815) Hashc66594705de51675f08e3b83b9b9b38c 40fa40f722043957a56324174ec6f80389391971 e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65
GET /ajax/libs/vuex/3.1.1/vuex.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 2776
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402f-2693"
last-modified: Mon, 04 May 2020 16:17:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1806234
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z9Z8NyEyncZcQavH44J%2FmY%2B00w4qZBzVgfPTfK4OK9q6R5p041Kaginy9xfOPpJdeXsm5SNvIbRviUTDb5Rq%2FQ8ogRw9eaOvpKxhSR91%2FCWqwsvgTM1ccjkTFc4nK3qiB5aoNM2b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe27831b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js | 104.17.25.14 | 200 OK | 1.3 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashfa93e8894edb6245ab03883633b12b6e e3ba4c7d1a8876090756fd31715b4f6af6fd649e 3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15
GET /ajax/libs/js-cookie/2.2.1/js.cookie.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 1299
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec5-f2b"
last-modified: Mon, 04 May 2020 16:11:49 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2840449
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NbxDHXeya2N5WycdsXhP2hXCNu4ESpJ%2BBb1lm%2F7GSMkxGGRsPSaoxEwcQJyngvnTM9xcriHn99s5xafBAj8M8gxaNPlES3VjcSTwDMIHJWsVjjixmMAestKStTiOlcF8TQ%2B8tNbZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe27839b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js | 104.17.25.14 | 200 OK | 29 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65269) Hash2ac19265b38d14235141d184bca54d9a c725eb5a33d093e331e25c3a5ef1272b0f1f648c e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e
GET /ajax/libs//Swiper/4.5.1/js/swiper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 28993
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf2-1f6e9"
last-modified: Mon, 04 May 2020 16:04:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1159180
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VVpUEEqkrtkLVhfNKOF2LlWWRGPoIxTW7UAlgQtt6CW0bncO6KK%2BCcHt8w%2BeRWCOqakgg6cZVdgQOmZBdUhmhuPNxwIweJXVOGSDk2CjjAEqWE9hofeWqTYmzQUY9YJT62YWtlg8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe27838b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js | 104.17.25.14 | 200 OK | 7.9 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (24752) Hash32e2eb91e6ed0512057b2ad1e6d1b242 27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6 e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5
GET /ajax/libs/vue-router/3.0.7/vue-router.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 7869
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402b-60f6"
last-modified: Mon, 04 May 2020 16:17:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 13172857
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CRk10EldJTBbqKxulljFSq9TYwRNAfhyWVAOxWHhD5PLcl4mnc8IUmKGxUm7GOrvpWQUIDiSF4phUrjjq8L0AoFNzT%2F7CU%2F2nKdl4UrE5iBW%2B5H01C35dZzs91ZtylUHcRJW8SYP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe27833b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.4/index.js | 104.17.25.14 | | 122 kB |
URL cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.4/index.js IP104.17.25.14:0
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators Size122 kB (121691 bytes) Hashc51f03d35129d9d1a9da65b24cef7fa7 1e1d550d978378980dc3aeb60012da86c2355c4b 339747e3a960dd82946bb6b06fcf1dda76b9ee786a337726b535a1d86d6b9c0c
GET /ajax/libs/element-ui/2.15.4/index.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 121691
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6109231c-1db5b"
last-modified: Tue, 03 Aug 2021 11:06:04 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7206727
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vT0mpZTv0xZBZsH1z7Da%2BHde9q23%2BnTPYhljx8k5o%2Fde8oOw9oC4DN9p52Ekly6VNxcDqi7jhvdmDhUIms%2FgNucXQItUssDYXPPwwsZb9k2lE6obLqb96htP7m%2FRhR9cUgZIHFQ7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe27836b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/index.min.css | 104.17.25.14 | | 40 kB |
URL cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/index.min.css IP104.17.25.14:0
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashfba0b10cfa931074254e7531f2cc9373 eceff9fb867e11786cbbae234d0c697f0dd445d5 7a6dee2202c1dfd3a499f873dee167942e255703859f86107d6bfc2272ea14f0
GET /ajax/libs/vant/2.13.2/index.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: text/css; charset=utf-8
content-length: 40107
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "652e0e9a-9cab"
last-modified: Tue, 17 Oct 2023 04:33:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 366772
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MdpPAIHP3iP83lxK9qTfPdXnKKyiLPFtz%2FCI2rn0DJxYmf8IY%2BYmzUNfB6bJnqM36afYTUxUBvr%2F1wkCUwAhB5NLFrJBvRR3RXPSQgntceTbv8astDWPbKqZCYKvsitUhF7JNoNb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe2783ab4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.14/theme-chalk/index.css | 104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.14/theme-chalk/index.css IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash07ced7e527d781115b5a9f3f3f559884 371b1a3e8d3453a2451e76320d9d7c0e301331b8 dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057
GET /ajax/libs/element-ui/2.15.14/theme-chalk/index.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: text/css; charset=utf-8
content-length: 28355
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64e78703-6ec3"
last-modified: Thu, 24 Aug 2023 16:36:19 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: MISS
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DAuY7ESNpdmBdg9i0rKNTvHDTndogs722jPwKP2CM%2B%2B1WxGczhDwrurfbvBAD4LkNPB%2BCqoGNZy9okQFqXbvQe9goxc0izvRFJ7ppxOP3cehdydmChMfRzUvt1dOE9%2BJYWuL%2FzR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe27830b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js | 104.17.25.14 | 200 OK | 31 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65449) Hash17e942ea0854bd9dce2070bae6826937 434cdec1669f2c6c7406297a72120936bc56ed52 72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26
GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 30769
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402c-16deb"
last-modified: Mon, 04 May 2020 16:17:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1190761
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FCnHK0%2FOikbmeZWlhieLiHQmSBdapq3%2F2xjK7kn5%2FmyhWKqeTbaaDWa%2BqHjSQyA4L7fbKzx8ZTmPPOExHGcdsBJ4mJxuG1GrYad031xuFus4viP%2BuWE%2BXlJ3faDASYuobb272EiO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe308d4b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js | 104.17.25.14 | 200 OK | 4.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10313) Hash334149adf44476f28bfbf16c7b0382c2 ad2ea246ebb53ed655ab50d44b33d4d6f942387d 6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6
GET /ajax/libs/axios/0.19.0-beta.1/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 4213
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d6a-3546"
last-modified: Mon, 04 May 2020 16:06:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3376808
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uu5Qwm4jbrb36GtbNUXs0QM3DxKVEkiYn45oiBYAdL2KQKEZJV8Q0SlqmvIWqqHXo9ubOx6Ud36T%2BJTC9JjaX%2Fh9YpwE24c%2FiKvs3OuLo7R%2BndNIp7Ls6DvU599biuzO5WPNbfXt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe308d6b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js | 104.17.25.14 | 200 OK | 27 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators Hash329c06718873ec3dfe923d49152cdfdb 20d0e92e2d8e818904d276c8a57a7aed5337f306 f9350b1319b20ff358c9b8aad6347aa88c620901ea9a36f7c86559c8ac8882ca
GET /ajax/libs/core-js/2.6.9/core.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 27060
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-16793"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3624608
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YGaIOVnNUYLvRv5RwuZqnsV9bJXohabzOt3GD9cBgafjg4jfAVPYmmRbPmFSVUFpZJJ8pPljeBdv9i16yTB0lCfopFPmUScGwiBF5plIlQf4XQc31mALx6N6YL%2F871HyBKPdbHDh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe308d5b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/vant.min.js | 104.17.25.14 | 200 OK | 68 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/vant.min.js IP104.17.25.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (57301) Hash644f13180f8d398c886f534b07044cdd 2d3349d384b50a385ed0b0d84a256be60a1e2201 f5d6379be3cba230a20bfd8bf264805de16223e0aa0277c0fb68c3c0751acff6
GET /ajax/libs/vant/2.13.2/vant.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:56:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 67900
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "652e0e9a-1093c"
last-modified: Tue, 17 Oct 2023 04:33:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: MISS
expires: Mon, 14 Apr 2025 16:56:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=94Mn2xozrnEZzvvkYdKC3O4BBUJPq56rQGelZHeUC7GtBjHent%2B9dSRgqN0F2Evm6yqBYS%2BYnS1dT6bj5pBpf%2FFWczNltMPs41BWlfEsQErRlBBiLWeqgpnC2kjNeZI5DF83UfUq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87979fe2783bb4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gg67ww5.xyz/lib/flexible.css | 148.66.3.124 | 200 OK | 1.0 kB |
URL GET HTTP/1.1gg67ww5.xyz/lib/flexible.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hash7524a2ba32138a0363ad48a78f4c7b9a aab46e82603b9de5b1880c0aaddc0d0f29dbf7a6 d68ca73f7b227d0da6b310867a0a588530657bc433fce241b3b2aea1502c10c6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /lib/flexible.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:04 GMT
Content-Type: text/css
Content-Length: 1032
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-408"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/lib/flexible.js?2222 | 148.66.3.124 | 200 OK | 4.1 kB |
URL GET HTTP/1.1gg67ww5.xyz/lib/flexible.js?2222 IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash1572c9446821f8b1dc1136b64b44e739 6a786ef63db48581f50e85601ef4a3effe8bf095 264ef2e4767a942ee634794619d94edbd7da642cb79277c16b974cac9795c246
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /lib/flexible.js?2222 HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:05 GMT
Content-Type: application/javascript
Content-Length: 4065
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-fe1"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css | 148.66.3.124 | 200 OK | 243 kB |
URL GET HTTP/1.1gg67ww5.xyz/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size243 kB (242926 bytes) Hash0005accf931955eec5ed86f897e0d360 7ae89839cacb8637600a3b0067fe8611edae2f65 277dccf22d817aecf00496f547b3704907d454570f579e5f9d147435de498557
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:04 GMT
Content-Type: text/css
Content-Length: 242926
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-3b4ee"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/lib/jquery-1.11.2.min.js | 148.66.3.124 | 200 OK | 96 kB |
URL GET HTTP/1.1gg67ww5.xyz/lib/jquery-1.11.2.min.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash6355f3cc28006e33bad2e765cde30e0d 909cd6318d5047f3c8e83528253b256981394414 39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /lib/jquery-1.11.2.min.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:05 GMT
Content-Type: application/javascript
Content-Length: 96382
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1787e"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/app.d3e3bdf9.js | 148.66.3.124 | 200 OK | 858 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/app.d3e3bdf9.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (54723), with no line terminators Size858 kB (858221 bytes) Hashda937410dbdb7470564fc9e4849e4f2b f79e0e5c9005a8596b4b7ec7f49a64e9ba1e4f15 ea1cd3b14a406ff537e51419efd2b1a724396b3d2f6f66dc0256c97033e4a37e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/app.d3e3bdf9.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:05 GMT
Content-Type: application/javascript
Content-Length: 858221
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-d186d"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/app.e3a45bc1.css | 148.66.3.124 | 200 OK | 111 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/app.e3a45bc1.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size111 kB (110790 bytes) Hashd1c0d1736244e163fbca6ced0e138b48 0fc9cad18516610af8e543744cad1209c1af67f0 6f1d0e206e4685fed3a792c33cb0fb6f9ac7f96a2606ed4e6f4be0aee55be517
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/app.e3a45bc1.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:06 GMT
Content-Type: text/css
Content-Length: 110790
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1b0c6"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/ | 148.66.3.124 | | 13 kB |
IP148.66.3.124:0
File typeHTML document, ASCII text, with very long lines (7939) Hashacc9a3c9572ad1088d3831166352662b 1d4f7639d220e6cd302d82118e0e117303ab0827 589991f4fdd92cb958dd6f122c5ec8f25150a1e3d92424d00bccce99b6e59f5a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET / HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:07 GMT
Content-Type: text/html
Content-Length: 12772
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-31e4"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/loading.png?2222 | 148.66.3.124 | 200 OK | 13 kB |
URL GET HTTP/1.1gg67ww5.xyz/loading.png?2222 IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeHTML document, ASCII text, with very long lines (7939) Hashacc9a3c9572ad1088d3831166352662b 1d4f7639d220e6cd302d82118e0e117303ab0827 589991f4fdd92cb958dd6f122c5ec8f25150a1e3d92424d00bccce99b6e59f5a
GET /loading.png?2222 HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/css/app.e3a45bc1.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:08 GMT
Content-Type: text/html
Content-Length: 12772
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-31e4"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-vendors.42f07336.js | 148.66.3.124 | 200 OK | 66 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-vendors.42f07336.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (29775) Hashbdaaed4e9e1d5e0322ea968e6f47ac0c 85c58af8151ed5badcdca952295e8c6e7b3e1e15 c9634af5f9b16a9f44d78311163effd76467a2441f744859c96fc066a3b58aa8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-vendors.42f07336.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:06 GMT
Content-Type: application/javascript
Content-Length: 65536
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-10000"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-06ae24a4.84535a18.css | 148.66.3.124 | 200 OK | 48 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-06ae24a4.84535a18.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (46623) Hash1462ce3dcd29f48e50af77a989d0e682 ccac4ee810b83d87beaffdbefb4e7467dc85f86d b747e656c22d0bd94722f019e09704b696de968a31c72473f109046db207158f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-06ae24a4.84535a18.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:08 GMT
Content-Type: text/css
Content-Length: 47755
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-ba8b"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/common/dictEnumMapAll | 148.66.3.124 | 200 OK | 5.9 kB |
URL POST HTTP/1.1gg67ww5.xyz/api/common/dictEnumMapAll IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hash955573b1b0b3402ce47fbe3f26d450a6 3e4eea32118e4e6233a28d3bcc0d1f88aca8ffbf 305d21b89e3c1bfbe41cf1b268dd17e65cb91af694deac62973e0702bef7f142
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
POST /api/common/dictEnumMapAll HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
Origin: https://gg67ww5.xyz
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://gg67ww5.xyz
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
|
|
| gg67ww5.xyz/js/chunk-06ae24a4.686330fb.js | 148.66.3.124 | 200 OK | 129 B |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-06ae24a4.686330fb.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash676e3a2df47d8e40c29c2d1a67127eec e54e8144ef939162c151a843933a98ff020a2641 6499fae751b066d09b0d93a067502c15d6fecd5b460c7f5a981dc1fb3b286fb4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-06ae24a4.686330fb.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: application/javascript
Content-Length: 129
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-81"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/websocket/server/info?t=1713977768797 | 148.66.3.124 | 200 OK | 76 B |
URL GET HTTP/1.1gg67ww5.xyz/api/websocket/server/info?t=1713977768797 IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashc88e185834ec5b3b5a65713033609cdc 0d58ce8eecc41ae7137a4c250b683bf0d667f219 0aecef2d39ec8b9b7136ed129f3cfeebabac6ef1804fd4df5a80f537f836e6be
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/websocket/server/info?t=1713977768797 HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 76
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
|
|
| gg67ww5.xyz/api/country/list | 148.66.3.124 | 200 OK | 444 B |
URL GET HTTP/1.1gg67ww5.xyz/api/country/list IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hash15c42e1b7531124858bfe9dfba0b4467 b74b47df21a1b3719148c7fe611551506db6f1b6 e23878f8c87c1801a2bbed8fd39bf9c58a5ca915d75013c38a6adf4d589d87fe
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/country/list HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| gg67ww5.xyz/css/chunk-11d62038.45ef5494.css | 148.66.3.124 | 200 OK | 2.8 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-11d62038.45ef5494.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (2802), with no line terminators Hash6ffe5081cd5b0dbf1607efc8611bd835 36aee7f32a413f68459fe958c470eb8fc2b5e189 b3e97880c6c80d6ce69351564ebebd0c71bb6cc13e13456614cde3d6da5ad3f3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-11d62038.45ef5494.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 2802
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-af2"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-06ae24a4.84535a18.css | 148.66.3.124 | 200 OK | 48 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-06ae24a4.84535a18.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (46623) Hash1462ce3dcd29f48e50af77a989d0e682 ccac4ee810b83d87beaffdbefb4e7467dc85f86d b747e656c22d0bd94722f019e09704b696de968a31c72473f109046db207158f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-06ae24a4.84535a18.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 47755
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-ba8b"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-07f01604.ae4a2d4b.css | 148.66.3.124 | | 50 B |
URL gg67ww5.xyz/css/chunk-07f01604.ae4a2d4b.css IP148.66.3.124:0
File typeASCII text, with no line terminators Hash3bd570c6967ae39b5fcfa9cebedae3e9 b7ac2cb7559f4ea4435cb998a3d269631b3438c3 ac0ca1996105308274f8785c20413f7713649699265206279f286f7cf77e0784
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-07f01604.ae4a2d4b.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 50
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-32"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-08d95777.f5012141.css | 148.66.3.124 | 200 OK | 1.5 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-08d95777.f5012141.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (1544), with no line terminators Hash3eb6ba970730292a23d44a5c7e0cbae4 d96cda9dbebfa42b9429e1ca3d952161ccb24a75 bde2e3fb26caaef078a6885fa66517d7dbda64ca44337fd2c98a209fd4495756
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-08d95777.f5012141.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 1544
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-608"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-07d0be5d.def0be03.css | 148.66.3.124 | 200 OK | 56 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-07d0be5d.def0be03.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hasha8a38969a69ca8894a4809c83951dcda de2470e05a3dec3d2156a04d254a17eacfa40958 3af13f2e0c992b31ab909e732df7f6390811ebc6d75cf6913efc9945f24997d2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-07d0be5d.def0be03.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 56
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-38"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-18b6f8cf.9cfbd666.css | 148.66.3.124 | 200 OK | 181 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-18b6f8cf.9cfbd666.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hashb691e87fbfe71913497ae06826eaebea 678489d6a28f1262ee3e950d3fe144bbb13f4f60 f82a42953e00adc0c9cc3eda4f4604e80e76ab0429b2d180d52f2c603d1dd07a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-18b6f8cf.9cfbd666.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 181
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-b5"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/translation/list | 148.66.3.124 | 200 OK | 10 B |
URL GET HTTP/1.1gg67ww5.xyz/api/translation/list IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashb9e754add75d51d888ce7585dc9dfe41 0fd53114199a1a46e887032b7efa05f1fd74c807 7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/translation/list HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| gg67ww5.xyz/css/chunk-1a7f66aa.41cbac71.css | 148.66.3.124 | 200 OK | 675 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-1a7f66aa.41cbac71.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (675), with no line terminators Hashd074a19968551387ce3a9cba0acb1f6c ddfa7353483f62118df882596d7f1957ac836caf c52b9895b93921f8d10c5ff63aded9db2a9fe980c5a88f156da42e48211eb13e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-1a7f66aa.41cbac71.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 675
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-2a3"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-2086cc72.c77dae64.css | 148.66.3.124 | 200 OK | 150 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-2086cc72.c77dae64.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash650673d6cc9e51e99ae9906687aa1e6c 4724a114b61e9f1122436ed6eba564aef88a453c 2e96b175eae2c3297079069ac8e816d69e5dc833fd6a96025f74d8f9dba2c975
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-2086cc72.c77dae64.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 150
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-96"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-24a05e9e.ae12cb06.css | 148.66.3.124 | 200 OK | 150 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-24a05e9e.ae12cb06.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash53408636f29a3645c8865fa48f157215 e8208bf36e9ce51efdf0fd5653c64dcd7c37ac6a 563fb7d5eb8b9e3f0acca2e2e806167a050b23e94dbb8237b640a50a7c03d8b3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-24a05e9e.ae12cb06.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 150
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-96"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-3027fb46.c663eefe.css | 148.66.3.124 | 200 OK | 3.2 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-3027fb46.c663eefe.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (3246), with no line terminators Hash27050921ef5a0736487c9fff7d13c71b a76125ca31102c876bf9bc993884f18c9c982b6e 7a0aac4d31c9f66a790a8dea6188f8d276385e8e15348f8df7443e6c79525ceb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-3027fb46.c663eefe.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 3246
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-cae"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-279a4994.b65c66e2.css | 148.66.3.124 | 200 OK | 2.6 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-279a4994.b65c66e2.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (2615), with no line terminators Hash336022c00c2cdcf21efb5b26b214fd3f 738b4b879a8508bf9d7ef9ebdf47f5c6e9bc3800 7b099cd175373f06fcf29a39b3ad009e6495af407cfdd4df702767657704fbcb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-279a4994.b65c66e2.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 2615
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-a37"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-31e856fa.ebffb057.css | 148.66.3.124 | 200 OK | 110 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-31e856fa.ebffb057.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash26c35c516dcd6fd320794a25ab78abde d754e110e0c5e78b938c7a06b9750221ed9a421b d27bae7c162c46ed113dbc378602804881e3578c42d3130a07a2c0cddb7fe209
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-31e856fa.ebffb057.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: text/css
Content-Length: 110
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-6e"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/common/dict/allMap | 148.66.3.124 | 200 OK | 12 kB |
URL POST HTTP/1.1gg67ww5.xyz/api/common/dict/allMap IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hash39877dca1e6e6c40dced56786d81fa42 e0a05b086af7f46e54d5e6670644648eeb04b045 cb5ba12c5338fb93b14e28f93d1c9afb47df13da5e4fb6e999023b53cc7f155c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
POST /api/common/dict/allMap HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
Origin: https://gg67ww5.xyz
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:09 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://gg67ww5.xyz
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
|
|
| gg67ww5.xyz/css/chunk-35bd79c3.a4cb1307.css | 148.66.3.124 | 200 OK | 757 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-35bd79c3.a4cb1307.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (757), with no line terminators Hashd2c8caef5f875f57185b468db1aa944d 2f93ecfdfb59e37e08f65022c2e1f18745dcd36c 37a20b862df57c22555a0d2cb186382a9710c75234dbd9e1c6cabd64fb66fdf4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-35bd79c3.a4cb1307.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:10 GMT
Content-Type: text/css
Content-Length: 757
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-2f5"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-35f97614.6b639e8d.css | 148.66.3.124 | 200 OK | 1.9 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-35f97614.6b639e8d.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (1933), with no line terminators Hashfc914446936656ba1f5ba5b6c8ac28ab 6facf5b78f9f7322078ff7f569c2809c5a09186c 13ec08ea81390f9ad8029f949bd76710be71f47f4c6b0ddea4a4f6052ad949e9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-35f97614.6b639e8d.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:10 GMT
Content-Type: text/css
Content-Length: 1933
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-78d"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-3a4ca03e.e607986f.css | 148.66.3.124 | | 242 B |
URL gg67ww5.xyz/css/chunk-3a4ca03e.e607986f.css IP148.66.3.124:0
File typeASCII text, with no line terminators Hash85537953780b378b92d8dfb2452ef87f 8b634a74248562a30f92019f6c02604f0e8f2e39 8fcbc2632b240a903c6cab313571a34ae12ab647fcfc8fa5729c3c7b96589e32
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-3a4ca03e.e607986f.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:10 GMT
Content-Type: text/css
Content-Length: 242
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-f2"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-45a24f30.bc009502.css | 148.66.3.124 | 200 OK | 3.2 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-45a24f30.bc009502.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (3173), with no line terminators Hash8590d1a5d05b1613b3d1b0791ad7735a b75c49d2104f74cb10922757217dc747c352eca8 53776c002d072d1afa9974719d89ab8bd303251c84cb39bf6afee210ca894927
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-45a24f30.bc009502.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:10 GMT
Content-Type: text/css
Content-Length: 3173
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-c65"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-3ba48570.5b9bf82d.css | 148.66.3.124 | 200 OK | 243 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-3ba48570.5b9bf82d.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hashb8901b3823757d5f837487ced574adda e78d0c3abadc1108b637c4f3fa151ababbf9a70f 0501c9258dba83079a93439098564ba2d4f40ea059bf3409387e9c43f8114478
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-3ba48570.5b9bf82d.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:10 GMT
Content-Type: text/css
Content-Length: 243
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-f3"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-7721dd77.65ab4f83.css | 148.66.3.124 | 200 OK | 13 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-7721dd77.65ab4f83.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (13156), with no line terminators Hash03109fc7cf9126ae26be9d520f8cca6c a3277878cba2617b04404759798e4e47e5e83db5 5881e44fd9a928f62e79514610154d5646ba725ba2124e876fee47b42c924d93
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-7721dd77.65ab4f83.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:10 GMT
Content-Type: text/css
Content-Length: 13156
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-3364"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-7721dd77.0e3d8694.js | 148.66.3.124 | 200 OK | 104 B |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-7721dd77.0e3d8694.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash50a232a7a5154e825f186f95acf29aee 802fa9205750afec336d36539e1a913906088396 ea9c81db3bf4e708fccee76f211080e15889d6a7efb7134d71e6d728fc0ec5b1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-7721dd77.0e3d8694.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:10 GMT
Content-Type: application/javascript
Content-Length: 104
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-68"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-b1c84cc8.ca0e9708.js | 148.66.3.124 | 200 OK | 29 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-b1c84cc8.ca0e9708.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (28399), with no line terminators Hashc9b873b4dc7abc70fc076d72799cae19 3df0c8791a1c621ae0434b0f56462ba79e1cecb0 ddeb49e3f383499a5c57a928484e5ac9a2e3d6100d77fe2016268f1ed3dd0873
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-b1c84cc8.ca0e9708.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:10 GMT
Content-Type: application/javascript
Content-Length: 28713
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-7029"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-4abbcf6a.f264f502.css | 148.66.3.124 | 200 OK | 4.2 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-4abbcf6a.f264f502.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (4176), with no line terminators Hashb87b5ad4d93e9eef93ed73afa164de31 ae55e3b7e6d265a7632f328a6a72a315fd866d9e 2eca365a7f18d21ee0b032f58665b8d3c3fcefe7273af05cf9135a6a75aedc12
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-4abbcf6a.f264f502.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: text/css
Content-Length: 4176
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1050"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-b1c84cc8.566d7f73.css | 148.66.3.124 | 200 OK | 5.5 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-b1c84cc8.566d7f73.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (5474), with no line terminators Hashf80ddd6e72d59fdab4821f2455972c30 3094c8458ac37bfedc8c478aaa7b0f13c7ca0bfa e8ef0ca50153843e7a9f6b66151e214c533679754094a6dddfae3232c1b7c50d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-b1c84cc8.566d7f73.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: text/css
Content-Length: 5474
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1562"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-586d3a0a.ef1ebbe8.css | 148.66.3.124 | 200 OK | 154 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-586d3a0a.ef1ebbe8.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash7925d7f93e05982a8617a67374c76414 4de55424b1d06c5cee677118d9d489a5ef675ba7 0de3c86520035a4f407d85b454986216c063b7d30db75ff9f35cefaf926b3f50
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-586d3a0a.ef1ebbe8.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: text/css
Content-Length: 154
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-9a"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-4cf47742.91d9df15.css | 148.66.3.124 | 200 OK | 195 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-4cf47742.91d9df15.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash869c7fadd57785bb6fa0c9c1bad46e33 fe86c8a1b91a871294d37cadfddc9f797bb1536c ba60bf188be0c8bb3c2b797d0ac1f95ef8fc058cd46e6ba38dc63731115a823f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-4cf47742.91d9df15.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: text/css
Content-Length: 195
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-c3"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-51454bdc.4a19b0cd.css | 148.66.3.124 | 200 OK | 424 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-51454bdc.4a19b0cd.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (424), with no line terminators Hash63768b78762519cf4603acfc48995bcc 9ae9769aff89008916d2414ff344a472fc9ff1d4 8e9d60e3c5870a07de8d82ab712c318db6bf50dc2a1a894f8480fd8b3c425986
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-51454bdc.4a19b0cd.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: text/css
Content-Length: 424
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1a8"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/mobile/home/ic_recharge.png | 148.66.3.124 | 200 OK | 5.3 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/mobile/home/ic_recharge.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced Hash4b2c9005ff99756304faef3c4ff5ea48 08a7267332c03d7be5085eeed922fc2b24877551 3c2b701213291eea397239d25d29bf856dbbfc98aec1ff8d4c53b640b906330d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/home/ic_recharge.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: image/png
Content-Length: 5306
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-14ba"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-56caa6ee.ddb4e8e9.css | 148.66.3.124 | 200 OK | 228 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-56caa6ee.ddb4e8e9.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash5a442c376a1766484238500e6757a025 91717e486caeb005ad931fc05c35f90bd8cc46be 77aeda544a9b59cbbef8cda2fc96db9b4deeeaebe1567ffd83a7d0e7d3ba804d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-56caa6ee.ddb4e8e9.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: text/css
Content-Length: 228
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-e4"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/country/en-US.png | 148.66.3.124 | 200 OK | 2.4 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/country/en-US.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 151 x 100, 8-bit/color RGBA, non-interlaced Hashe6cbb60ed6688551f887619d1dac8409 eb9aab9aae2965ca1b6b03b3525a6b37cfa108ba 1381be5e8673bb2f021b77fcd5a664beed6a0d89cf057fee421fa4f634f4c1e9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/country/en-US.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: image/png
Content-Length: 2390
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-956"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/mobile/home/ic_withdraw.png | 148.66.3.124 | 200 OK | 5.2 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/mobile/home/ic_withdraw.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced Hash9a75fc569b8f4ecea7026516d4b5dd52 516f53b7cc6839eedd60da4a1a11473ab4260c4e 69a67733a115e7d5eb1207a708519d220e39badd1b105968e7f4c47312294a43
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/home/ic_withdraw.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: image/png
Content-Length: 5218
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1462"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-5eaf9d4c.af823744.css | 148.66.3.124 | 200 OK | 181 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-5eaf9d4c.af823744.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hashf7d3bd76a58bd6218a37c2ba40a4b45e 489bcdf94bdb943ba0c52cafb1d960bbd2cc9636 b7f7d6492db464b916f5be0ea8cc795f3140d5cfc37f3bedfcde19061c8904b9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-5eaf9d4c.af823744.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:12 GMT
Content-Type: text/css
Content-Length: 181
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-b5"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-68c9645e.7b5db455.css | 148.66.3.124 | | 751 B |
URL gg67ww5.xyz/css/chunk-68c9645e.7b5db455.css IP148.66.3.124:0
File typeASCII text, with very long lines (751), with no line terminators Hash0fcd766e411e62100d4aad714b4d2733 b982effdef302d48122cd714e61e204dca06b320 ed44bc2012555635cc3c0086dd67249db3d34c114147f45b322b9bd54e44a1e5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-68c9645e.7b5db455.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:12 GMT
Content-Type: text/css
Content-Length: 751
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-2ef"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-6e4f04a4.5a255384.css | 148.66.3.124 | | 117 B |
URL gg67ww5.xyz/css/chunk-6e4f04a4.5a255384.css IP148.66.3.124:0
File typeASCII text, with no line terminators Hash61e2bba3a72b590e1223e0428d00de84 36ee41d679d6e52cb18d786a076641e54ec932ca d2e81b03a1686104de770d618c2b38bdf2a667382dd24ddf24913420bfa5fe54
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-6e4f04a4.5a255384.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:12 GMT
Content-Type: text/css
Content-Length: 117
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-75"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/customer/kf.png | 148.66.3.124 | 200 OK | 11 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/customer/kf.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf7d80a98f6b59aaf05ab54c405bffe89 db5cfc26f716a362d10f81633934d9f01c523ae7 ab41101111ba6bf6ecb5ef0aa35ae339cb7b2f09517eff9914dd69c65271ee03
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/customer/kf.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: image/png
Content-Length: 10556
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-293c"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-7226ca96.fc10e0e2.css | 148.66.3.124 | 200 OK | 259 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-7226ca96.fc10e0e2.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hashcec156fb6f0f65694e4fa688745f613d a7bc3021f175d623aa70874037c20e4ab9b1abe1 aebcbcf151089f8f82c1ca2efb8d7bedb70fe3c9dfb2bb56184794bb9098b8db
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-7226ca96.fc10e0e2.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:12 GMT
Content-Type: text/css
Content-Length: 259
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-103"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-74d1c393.2928084f.css | 148.66.3.124 | 200 OK | 1.3 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-74d1c393.2928084f.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (1298), with no line terminators Hash1fe245f2830b10534ae77924560ec401 1feacb8014a296352318b1697944b097d55ba92b a7bf0d2d8a328645eb9822334530a707baf64fac7625855b717fedbfb321525c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-74d1c393.2928084f.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:12 GMT
Content-Type: text/css
Content-Length: 1298
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-512"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-67e09e79.41c64f26.css | 148.66.3.124 | 200 OK | 343 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-67e09e79.41c64f26.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (343), with no line terminators Hash28a3a82cd083b48d66154747d1c0a6c5 d6b40cdaf6fbc7720de136729bfd0a77b23a1bc5 631422d917ea2553084996b7f7bf9ffa2f5b18e1b10c691cbefebf466b773924
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-67e09e79.41c64f26.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:12 GMT
Content-Type: text/css
Content-Length: 343
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-157"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-7ea1f554.a4a2d99c.css | 148.66.3.124 | 200 OK | 245 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-7ea1f554.a4a2d99c.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hashd17de0ae5866f3f98b60aecedd9c3e0a 1f279f2ae343da503c6d9fdfbd4fbf811b8dc5db 40c8ab3671da1417668c39e5e542e658f34182106639872ced4fbfbb3895fe3c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-7ea1f554.a4a2d99c.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:12 GMT
Content-Type: text/css
Content-Length: 245
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-f5"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-7fdc37de.8bee70a0.css | 148.66.3.124 | 200 OK | 148 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-7fdc37de.8bee70a0.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash39997076fa4c7d3caf22a944c7cb8000 597d48097d148da55d31d6dd5e1cd9603709d400 16fcaae4122f7a1cb9c707ea12904b78c709616a61e353fd4fb37d6ebf3ef397
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-7fdc37de.8bee70a0.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:13 GMT
Content-Type: text/css
Content-Length: 148
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-94"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-7721dd77.65ab4f83.css | 148.66.3.124 | 200 OK | 13 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-7721dd77.65ab4f83.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (13156), with no line terminators Hash03109fc7cf9126ae26be9d520f8cca6c a3277878cba2617b04404759798e4e47e5e83db5 5881e44fd9a928f62e79514610154d5646ba725ba2124e876fee47b42c924d93
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-7721dd77.65ab4f83.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:12 GMT
Content-Type: text/css
Content-Length: 13156
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-3364"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-89f5efd2.48691dbf.css | 148.66.3.124 | 200 OK | 470 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-89f5efd2.48691dbf.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (470), with no line terminators Hash25cdebacbcf51e948ca1204fa6735f2c 7bf8e4dc92f81c7cb18deb213f7bf78137df78e7 fcc5d0b03d2645a357469e2f32620fc9699753844d15bcdefceaf3472df492bc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-89f5efd2.48691dbf.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:13 GMT
Content-Type: text/css
Content-Length: 470
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1d6"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-925a3b70.11d3217e.css | 148.66.3.124 | 200 OK | 117 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-925a3b70.11d3217e.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hashed7f88f9b7f99042eda629536d2dc0a9 c61d47c506e1148456c852656b484d574c28abcd a1a2ab3daa36c4ec3c95db0848653e6c47a8592b7b43c8e068f6c777661bb463
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-925a3b70.11d3217e.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:13 GMT
Content-Type: text/css
Content-Length: 117
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-75"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-9e3eb6fe.20b762eb.css | 148.66.3.124 | 200 OK | 520 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-9e3eb6fe.20b762eb.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (520), with no line terminators Hash1c201c64051f39d0f7cc6a3c1df14e63 e6830d23bc89749828213acaaed61d8070d26754 c50da15b8a8b53aa08595c63b1a904ccd1011372cd7cbaf3c8600160f2d8a903
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-9e3eb6fe.20b762eb.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:13 GMT
Content-Type: text/css
Content-Length: 520
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-208"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-a94b6614.59243c25.css | 148.66.3.124 | 200 OK | 229 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-a94b6614.59243c25.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash40e68fecb85438c857d5716191ac91db 31e2bf51d952258eb0b4a008c3744c25fec9d335 e4c2438e5660ec715386a813c87cac72ef94024a7155f21bd381abf68c12b39a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-a94b6614.59243c25.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:13 GMT
Content-Type: text/css
Content-Length: 229
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-e5"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-b1c84cc8.566d7f73.css | 148.66.3.124 | 200 OK | 5.5 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-b1c84cc8.566d7f73.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (5474), with no line terminators Hashf80ddd6e72d59fdab4821f2455972c30 3094c8458ac37bfedc8c478aaa7b0f13c7ca0bfa e8ef0ca50153843e7a9f6b66151e214c533679754094a6dddfae3232c1b7c50d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-b1c84cc8.566d7f73.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:13 GMT
Content-Type: text/css
Content-Length: 5474
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1562"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/logo.png | 148.66.3.124 | 200 OK | 70 kB |
IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hash86bcc6c2a39a29acd339c77504b2dc4f 7b7deb599e7e431b65fcdf9be52708573b6911b5 c1d22a04e6def89d6671c5741e440c5ff774b1337ce9bb9086df69fe201da312
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /logo.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:11 GMT
Content-Type: image/png
Content-Length: 70376
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-112e8"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-d646062a.fd7ecd59.css | 148.66.3.124 | | 117 B |
URL gg67ww5.xyz/css/chunk-d646062a.fd7ecd59.css IP148.66.3.124:0
File typeASCII text, with no line terminators Hash1db8ba3fc65dbf3f188380bcdf134406 2cbb507f86ecf66a1d8754c4ca55989642a4db24 34d7a991e8686b0c722898afb4868d324b4cee6053c5e0aeb37f76b0245233c3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-d646062a.fd7ecd59.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: text/css
Content-Length: 117
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-75"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-c5c0ecd6.2ea0ed93.css | 148.66.3.124 | 200 OK | 814 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-c5c0ecd6.2ea0ed93.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (814), with no line terminators Hash8ad920d3141fcfb6940483b0ee0008ff e45b43be13dc2cd8033b3eb424bfdc4b9456b645 6de363de93ecc1ea90d66315d79b726f1d0829281515795ca9ff2f597b1096e2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-c5c0ecd6.2ea0ed93.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: text/css
Content-Length: 814
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-32e"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/poster/notice | 148.66.3.124 | 200 OK | 10 B |
URL GET HTTP/1.1gg67ww5.xyz/api/poster/notice IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashb9e754add75d51d888ce7585dc9dfe41 0fd53114199a1a46e887032b7efa05f1fd74c807 7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/poster/notice HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| gg67ww5.xyz/api/banner/list | 148.66.3.124 | 200 OK | 10 B |
URL GET HTTP/1.1gg67ww5.xyz/api/banner/list IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashb9e754add75d51d888ce7585dc9dfe41 0fd53114199a1a46e887032b7efa05f1fd74c807 7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/banner/list HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| gg67ww5.xyz/css/chunk-da787ca2.04f5b5d9.css | 148.66.3.124 | 200 OK | 234 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-da787ca2.04f5b5d9.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash43d5958393560e2e38d0497199b4c7f1 52d9875292ee6d4e650c0c4b7472590e89451bea 0cedd4266129935e661f3875bd6aa597b833b5fd57d8fb2ce42c12e113ae30bb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-da787ca2.04f5b5d9.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: text/css
Content-Length: 234
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-ea"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/commission/list | 148.66.3.124 | 200 OK | 11 kB |
URL GET HTTP/1.1gg67ww5.xyz/api/commission/list IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hash2168b4d7d399f5d37ed8f7dee1ee7a95 bbdb2130be78148f5f62a093e02b0e444afafbbf 4afaf2470765ed386241f073b4566ee0bdd937fa43fd71da80758bd2240d7c7a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/commission/list HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| gg67ww5.xyz/css/chunk-e1143fec.6e1b7d0d.css | 148.66.3.124 | | 2.3 kB |
URL gg67ww5.xyz/css/chunk-e1143fec.6e1b7d0d.css IP148.66.3.124:0
File typeASCII text, with very long lines (2348), with no line terminators Hash9bd2d239721e002d4eb76512da5ae138 fceebe0dbf71b187df7a26a0554b580136f9c66b ce228f9fb4d383b41b25d29326ee7a9f32a1d21aee07c74215c7b56cebed6d40
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-e1143fec.6e1b7d0d.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: text/css
Content-Length: 2348
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-92c"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/banner/3.jpg | 148.66.3.124 | 200 OK | 36 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/banner/3.jpg IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, progressive, precision 8, 600x300, components 3 Hash7ccb351f6bcb0362b922474524814389 550a26f7fe3c3efc58de38cf5df24612f317de9a 8743436aa5fc80d84a92118c71586c3c1551f2a99d0f1e2395e230484a76e8f3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/banner/3.jpg HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: image/jpeg
Content-Length: 35518
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-8abe"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-bedbebc6.48674e8a.css | 148.66.3.124 | 200 OK | 535 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-bedbebc6.48674e8a.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (535), with no line terminators Hash7cb492e49c4bc238ac1ba446cc87dafa 77d8a8a65d2941059b5f5b179d936f860cfd875d 5f4460de1cd15a1a2479448f3237db59d780599a49e8ddd4f3953635cc67a1d6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-bedbebc6.48674e8a.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:15 GMT
Content-Type: text/css
Content-Length: 535
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-217"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/banner/1.jpg | 148.66.3.124 | 200 OK | 67 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/banner/1.jpg IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 600 x 300, 8-bit colormap, non-interlaced Hash920a0aacde8cf5083003328b1a23bd0c 71c146a65de07bf942c1d31416888a0403b4a7f4 d9062aeec4dde5e533b8354f9b4328a0f80039d58c128d3b5e1eeee9b936a724
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/banner/1.jpg HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: image/jpeg
Content-Length: 67352
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-10718"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-dd580cf8.3b8d239b.css | 148.66.3.124 | 200 OK | 385 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-dd580cf8.3b8d239b.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (385), with no line terminators Hashda304e91f724c981b86055b5b892242b 09113eb4172667d4e4b89785a76899e15a16706d 2f621728e4a02dcb2938d8d5e36bd42b2d74ff924d44bafeb4dacce343ecbc6a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-dd580cf8.3b8d239b.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:15 GMT
Content-Type: text/css
Content-Length: 385
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-181"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-ebba634e.e41daa24.css | 148.66.3.124 | 200 OK | 518 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-ebba634e.e41daa24.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (518), with no line terminators Hash1cff30261d21415f988a27c746136d7d 250599fd8cfcce855ba83d23054e5289a43901df 7ab6e1e006ffa59c7345873208908764abc61e8213beaec8ce3d6a0c142ccfbc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-ebba634e.e41daa24.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:15 GMT
Content-Type: text/css
Content-Length: 518
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-206"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-f045b624.fcc4b9c8.css | 148.66.3.124 | 200 OK | 120 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-f045b624.fcc4b9c8.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash7a2294f71fa3fcb9df3f49fc4b6af4a0 e3737db7515fb7f5ee71f08e997263adc7859680 53d54f04576875a8355e595f7a10f2530c5f8468f1e5bf954669f7f119b5c8e8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-f045b624.fcc4b9c8.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:15 GMT
Content-Type: text/css
Content-Length: 120
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-78"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-93a62c82.4b496f61.css | 148.66.3.124 | 200 OK | 65 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-93a62c82.4b496f61.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (64711), with no line terminators Hashafdd5c5599d725619d9a3a0081fa79fa 9835b8efaf7cf6a42f14d104bdad5b9a32472ca6 df1ec096bff6344f6ccc9455b490991e26036d78d0d4ecc877e2a112eb9db897
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-93a62c82.4b496f61.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: text/css
Content-Length: 64711
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-fcc7"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-fdd9bb64.941781ba.css | 148.66.3.124 | 200 OK | 1.9 kB |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-fdd9bb64.941781ba.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (1924), with no line terminators Hashd3438618c06adf435ba916139ea9d202 db02b6968c70a5423c0bd501f8c04a4c739af4b5 79ac0e5686aafa271fb1d4dcea318023d048a87243eafd14ace9533081a6803e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-fdd9bb64.941781ba.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:15 GMT
Content-Type: text/css
Content-Length: 1924
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-784"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/css/chunk-fe68f3a8.e0d42232.css | 148.66.3.124 | 200 OK | 675 B |
URL GET HTTP/1.1gg67ww5.xyz/css/chunk-fe68f3a8.e0d42232.css IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with very long lines (675), with no line terminators Hashb0235568896b1cd5b526ebc64e5b7812 a9b576923b25c9563d48d75df62e7f66db507324 ae1390a6fac295409d27d79cd2987b3aa445aececf0bb06cdea5829c5c69ac9a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-fe68f3a8.e0d42232.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:15 GMT
Content-Type: text/css
Content-Length: 675
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-2a3"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/websocket/server/445/qbz534pg/websocket | 148.66.3.124 | | 0 B |
URL gg67ww5.xyz/api/websocket/server/445/qbz534pg/websocket IP148.66.3.124:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/websocket/server/445/qbz534pg/websocket HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://gg67ww5.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ppSvOVajNR1XbsBH68r/4w==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Connection: upgrade
Origin: https://gg67ww5.xyz
Upgrade: WebSocket
Sec-WebSocket-Accept: RUOWb4TPeJnjW8M1xE3Zq4Jm1bI=
Access-Control-Allow-Origin: https://gg67ww5.xyz
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Sec-WebSocket-Location: ws://gg67ww5.xyz/websocket/server//445/qbz534pg/websocket
Access-Control-Allow-Credentials: true
|
|
| gg67ww5.xyz/js/chunk-06ae24a4.686330fb.js | 148.66.3.124 | 200 OK | 129 B |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-06ae24a4.686330fb.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeASCII text, with no line terminators Hash676e3a2df47d8e40c29c2d1a67127eec e54e8144ef939162c151a843933a98ff020a2641 6499fae751b066d09b0d93a067502c15d6fecd5b460c7f5a981dc1fb3b286fb4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-06ae24a4.686330fb.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 129
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-81"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-079fc55c.cb32cbff.js | 148.66.3.124 | | 5.3 kB |
URL gg67ww5.xyz/js/chunk-079fc55c.cb32cbff.js IP148.66.3.124:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5214), with no line terminators Hash485d627c42962ee0200dac66adf41dd4 ca8e716c2fce7870f27ce6b489a333033a9254c4 4a2b5528bff5b712a661c2f48dea798bb01eb6b7483c95050a4393eef0f39c81
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-079fc55c.cb32cbff.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 5326
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-14ce"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-07d0be5d.935e0655.js | 148.66.3.124 | 200 OK | 16 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-07d0be5d.935e0655.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15470), with no line terminators Hashd5ad4899b05e63b254875d716bc7715a bc9ec4b915a74540aa2c4b794b43f32be87f4932 b41b56a4367f523f7fcfc443ce540ec6fa2ec89375f7a8bb49dddce43d0aa50c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-07d0be5d.935e0655.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 15660
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-3d2c"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-07f01604.862733e4.js | 148.66.3.124 | | 4.0 kB |
URL gg67ww5.xyz/js/chunk-07f01604.862733e4.js IP148.66.3.124:0
File typeJavaScript source, ASCII text, with very long lines (4014), with no line terminators Hash2195639468928533275ba7f071087cc3 0e525068ca00f15f91772aaf6759025082fa02c7 920bef6bb84844bd331f8f43f7c0e46aef7d6492426090103683ee1f28daba2c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-07f01604.862733e4.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 4014
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-fae"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/banner/2.jpg | 148.66.3.124 | 200 OK | 61 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/banner/2.jpg IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 600 x 300, 8-bit colormap, non-interlaced Hash441fb20fdc10f3dac86f39f4a7ac8465 3217c9c21f864d726346faca9b95fddd39e4ffca e27adf8aed9b93f2baebbf27cddc2a7c39e57d02d2c243f6b56841bf560ed86e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/banner/2.jpg HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:14 GMT
Content-Type: image/jpeg
Content-Length: 61083
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-ee9b"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-08d95777.508492c1.js | 148.66.3.124 | 200 OK | 3.9 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-08d95777.508492c1.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3850), with no line terminators Hash3894e895cf59daf5d1aac34d8d0c703b ab33614f3a9ab14d2adb2228a7fe289af9132b76 5583f58f0735d4c6ed2ec37748287c7e80b3e9420e8f6594e6abed75f300303d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-08d95777.508492c1.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 3906
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-f42"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/userLevel/list | 148.66.3.124 | 200 OK | 10 B |
URL GET HTTP/1.1gg67ww5.xyz/api/userLevel/list IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashb9e754add75d51d888ce7585dc9dfe41 0fd53114199a1a46e887032b7efa05f1fd74c807 7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/userLevel/list HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| gg67ww5.xyz/js/chunk-11d62038.16b92453.js | 148.66.3.124 | 200 OK | 2.9 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-11d62038.16b92453.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, ASCII text, with very long lines (2879), with no line terminators Hash922af09907a7da912955dbb1ab974767 bbcf060c7eac5cae251a44cab5abba3124b23b3b 553599d2a1d322d331ee58ec177de1ed3e7870bf01267876e18b5de2d031c6a4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-11d62038.16b92453.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 2879
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-b3f"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-18b6f8cf.8507091c.js | 148.66.3.124 | 200 OK | 3.3 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-18b6f8cf.8507091c.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3232), with no line terminators Hashcd5d7b71f13b45ad05d9ac8c87ab31f8 8602b984ad95356a3367d4eb6d842414b8e4496c f286af09205388c768ff3ddaeee966916acb2166e005da127d335788cce5e86a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-18b6f8cf.8507091c.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 3250
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-cb2"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/poster/homeList | 148.66.3.124 | 200 OK | 976 B |
URL POST HTTP/1.1gg67ww5.xyz/api/poster/homeList IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hash31f376fa98a4a733435a72fc52c97dd9 dd8a721d5e7a4503557dab458783f9b3c293bf35 c5e21e0dd6a9d619fbdb03b6009d38629b7ce57e8cdf480cd31585eab5bb54be
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
POST /api/poster/homeList HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
Origin: https://gg67ww5.xyz
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://gg67ww5.xyz
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Credentials: true
|
|
| gg67ww5.xyz/static/mobile/home/ic_invite.png | 148.66.3.124 | | 3.2 kB |
URL gg67ww5.xyz/static/mobile/home/ic_invite.png IP148.66.3.124:0
File typePNG image data, 89 x 89, 8-bit/color RGBA, non-interlaced Hashd73ff53d803db37cbab27a5ebc1d26d3 b00816d9b06adffbdaa0273e2925190df5eb964d 18b8a075156603bc63109ed5488517007e71285a75e7c27b800f8a4fb08e3856
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/home/ic_invite.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: image/png
Content-Length: 3173
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-c65"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-24a05e9e.ecf94b12.js | 148.66.3.124 | 200 OK | 15 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-24a05e9e.ecf94b12.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (14867), with no line terminators Hash6d2a4ebe669de2d915513def0ae15b59 8e89a694a55ac9aa449ec379f93a03f2510ed095 b3fd1c9b7ba33b88d8f26cfaa44c69eb522672335a0536db64175c54e6497fe1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-24a05e9e.ecf94b12.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:17 GMT
Content-Type: application/javascript
Content-Length: 15073
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-3ae1"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-1208543e.66b7af66.js | 148.66.3.124 | 200 OK | 3.3 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-1208543e.66b7af66.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3324), with no line terminators Hashbe975a74c0a808d6e18bc308100f1a0d b59e8ea3b99405f507e081fdfc2ad6996be8fb15 ba5fad0d7a49a3add3dba0c5b1d31279d314011a0938844ff1d3a5f3e143dd33
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-1208543e.66b7af66.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:17 GMT
Content-Type: application/javascript
Content-Length: 3336
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-d08"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-1a7f66aa.7b79edf5.js | 148.66.3.124 | 200 OK | 17 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-1a7f66aa.7b79edf5.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (16986), with no line terminators Hash2b80c3b4881c7dc0fd8f5c2ce79f9b2b ae4727d82d0480d04aab6fd82a6f47948dccb27b 572025534d4567172970be32f614ed02563e2ebbe838ba30084675ef96142f56
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-1a7f66aa.7b79edf5.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 17166
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-430e"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-2086cc72.0b5d41ce.js | 148.66.3.124 | 200 OK | 18 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-2086cc72.0b5d41ce.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (17566), with no line terminators Hash389121cedc28e2328cdcf0cceffe7c5c 843b5d24cdba51cb52f29a49e79138a15e6df833 b28c5bf7297a3d639f84b3d63c4553e2365e808e42220606685394e06bf306ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2086cc72.0b5d41ce.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:16 GMT
Content-Type: application/javascript
Content-Length: 17776
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-4570"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/mobile/link/2.png | 148.66.3.124 | 200 OK | 36 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/mobile/link/2.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced Hashff2583db35c4acd87cbf195af9e9b202 accfcd83b3d9f5de5aefe233ab1add6f800486c4 8ce9d693209b66c96c19a29f83c57bf0389d81fc8e5ce4dcea63a4cc2c821928
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/link/2.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:17 GMT
Content-Type: image/png
Content-Length: 36342
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-8df6"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-2d0b3a3c.b3184351.js | 148.66.3.124 | | 5.4 kB |
URL gg67ww5.xyz/js/chunk-2d0b3a3c.b3184351.js IP148.66.3.124:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5354), with no line terminators Hashcac567fc96abb4ec4eac9f208b3213df 2ea1cbc484c52d3f8eebe0c2a72155768222b70d baf5dc2850c88c1b744922c1d7aad97831398befb618457aacd024dc818068c8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d0b3a3c.b3184351.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:17 GMT
Content-Type: application/javascript
Content-Length: 5446
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-1546"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-2d0b5a45.4625df1f.js | 148.66.3.124 | 200 OK | 3.0 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-2d0b5a45.4625df1f.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2963), with no line terminators Hash2ffea2625a39403b9c95a106806ec2a2 ca61ac3ee84661f59aac227c4d95644e1d593144 465267ea9a865e333ade9abc3891944cae43901d869b486b0fee825f48ceb1a0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d0b5a45.4625df1f.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:17 GMT
Content-Type: application/javascript
Content-Length: 2979
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-ba3"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/mobile/link/3.png | 148.66.3.124 | | 8.9 kB |
URL gg67ww5.xyz/static/mobile/link/3.png IP148.66.3.124:0
File typePNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced Hashe4a31cebcd48ee42064cf018c7f7ca39 cfdfe2bc0addceae1a278b3200f26e892442a012 4817a82e06c2b1293ba0c004e25171fad0907185d9f908071da98073c97af82e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/link/3.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:17 GMT
Content-Type: image/png
Content-Length: 8867
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-22a3"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-279a4994.6b5a0111.js | 148.66.3.124 | 200 OK | 13 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-279a4994.6b5a0111.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (12610), with no line terminators Hashde1e8f7aa3965232f4bbcec421f87adc 3f34d51c642f3f6bb8269706a027352c6d789981 75cc16240dc9eb412bc84e3d5294ce4a2cb44bf976bff8f00cc449da2fb9a7ff
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-279a4994.6b5a0111.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:18 GMT
Content-Type: application/javascript
Content-Length: 12728
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-31b8"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/mobile/link/1.png | 148.66.3.124 | 200 OK | 19 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/mobile/link/1.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced Hash3959345f02bfd3d6d23caea239421486 6b3a7d485bf821b44756370daafe7887eac3faef 9c31875158648f5fd608decaa75ef24630d45a12a9950f301fce4ac2814c827f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/link/1.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:17 GMT
Content-Type: image/png
Content-Length: 18722
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-4922"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-2d0c0c19.34f6450f.js | 148.66.3.124 | 200 OK | 4.9 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-2d0c0c19.34f6450f.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, ASCII text, with very long lines (4892), with no line terminators Hash125ff31db350cf9597538aa922abc1ab 6a5ee9c564ee56ce697f4469e6fcd2e8648b967e b184355349c8e7751662b720d1dcb2cf653711a979e77f39ab0cf929c60b9824
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d0c0c19.34f6450f.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:18 GMT
Content-Type: application/javascript
Content-Length: 4892
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-131c"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/mobile/link/4.png | 148.66.3.124 | 200 OK | 6.5 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/mobile/link/4.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced Hashf8f831ea05790e70229847bdded8073e 10cb798a5a3b8a15f053cf23617f908982dc8651 60f0bef1d94953c9a8d6e3ddb33b2ded547e7d5e69a90abddb580bf00ae3d697
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/link/4.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:18 GMT
Content-Type: image/png
Content-Length: 6495
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-195f"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-2d0e923e.c86437a6.js | 148.66.3.124 | 200 OK | 5.1 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-2d0e923e.c86437a6.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, ASCII text, with very long lines (5097), with no line terminators Hash6707dc0f4e10e0ac5d264b7ebf5a7f18 5f635730966f0fc36b9717233a00b7ab0787623f 933cd1dbb41e95298de5c94253ea37cbcfa99a33f15db402ac75b0997def8da8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d0e923e.c86437a6.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:18 GMT
Content-Type: application/javascript
Content-Length: 5097
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-13e9"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-2d207f61.b1d247e5.js | 148.66.3.124 | 200 OK | 2.9 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-2d207f61.b1d247e5.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2851), with no line terminators Hash253f287dd167c7aa037896d105d9fcd2 f055a1fbced2299f88c9763d8b2ea23f9ecb985b db8c0cc6d5847450d97354446aaef109318b958bd354a4651425724674da6063
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d207f61.b1d247e5.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:18 GMT
Content-Type: application/javascript
Content-Length: 2867
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-b33"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-2d0d2ed4.a4d535c0.js | 148.66.3.124 | 200 OK | 9.8 kB |
URL GET HTTP/1.1gg67ww5.xyz/js/chunk-2d0d2ed4.a4d535c0.js IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (9730), with no line terminators Hash0943c5a8a9156a991191403e235cccb8 cc0c9a87c6dd872c5cc041e8ce138a000fee865f 00c43dd0790b47e5b29c3d3280f3ac0c84c87e4f90d2d9645905c6b965e7ad80
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d0d2ed4.a4d535c0.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:18 GMT
Content-Type: application/javascript
Content-Length: 9808
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-2650"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/mobile/link/6.png | 148.66.3.124 | 200 OK | 14 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/mobile/link/6.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 220 x 136, 8-bit/color RGBA, non-interlaced Hash567f222c91a0adf2736760e9bd1ebf4e 8f8df5a135c97c0b14c0fb5573ca00e822a19e9b cee5b962a078c675d90e9a0f9cefda41478d9a93e80ee69a0131e8931a531aef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/link/6.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:18 GMT
Content-Type: image/png
Content-Length: 14547
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-38d3"
Accept-Ranges: bytes
|
|
| yaoifhiaowi352.icu/api//file/cfg/202402/22/db022868fa4f42af85ef1268878a7a30_.png | 148.66.3.124 | | 3.6 kB |
URL yaoifhiaowi352.icu/api//file/cfg/202402/22/db022868fa4f42af85ef1268878a7a30_.png IP148.66.3.124:0
File typePNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced Hash1d887f6301dad442c92809a30aa8a13f 9e52ac9c02e6d8caeb490469cb977d9335486ef1 7964f1ef06e267a42833e31402676b5b52227c2a5f5473d017c45f2047b9e656
GET /api//file/cfg/202402/22/db022868fa4f42af85ef1268878a7a30_.png HTTP/1.1
Host: yaoifhiaowi352.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:19 GMT
Content-Type: image/png
Content-Length: 3557
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Thu, 22 Feb 2024 15:45:35 GMT
Accept-Ranges: bytes
|
|
| yaoifhiaowi352.icu/api//file/cfg/202402/22/6f605f545a154f7285df12e50035125a_.png | 148.66.3.124 | 200 OK | 3.9 kB |
URL GET HTTP/1.1yaoifhiaowi352.icu/api//file/cfg/202402/22/6f605f545a154f7285df12e50035125a_.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectyaoifhiaowi352.icu FingerprintB8:C3:75:51:13:CE:BF:D1:C1:50:2C:D8:4C:94:A8:03:E9:D8:24:AB ValidityFri, 01 Mar 2024 14:52:30 GMT - Thu, 30 May 2024 14:52:29 GMT
File typePNG image data, 89 x 89, 8-bit/color RGBA, non-interlaced Hashd24c58bc85b0a5411d51747cd5daccea ee0c09639b41fc73190dfa3d4b22bcebad71a260 32ab3f7c74869f1b10b52b187a99ed56eb862c1cadc4435c11e770a6fb99d594
GET /api//file/cfg/202402/22/6f605f545a154f7285df12e50035125a_.png HTTP/1.1
Host: yaoifhiaowi352.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:19 GMT
Content-Type: image/png
Content-Length: 3921
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Thu, 22 Feb 2024 15:45:57 GMT
Accept-Ranges: bytes
|
|
| yaoifhiaowi352.icu/api//file/cfg/202402/22/3751cbc0084d4180a98c5b7c7ac0369b_.jpg | 148.66.3.124 | 200 OK | 83 kB |
URL GET HTTP/1.1yaoifhiaowi352.icu/api//file/cfg/202402/22/3751cbc0084d4180a98c5b7c7ac0369b_.jpg IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectyaoifhiaowi352.icu FingerprintB8:C3:75:51:13:CE:BF:D1:C1:50:2C:D8:4C:94:A8:03:E9:D8:24:AB ValidityFri, 01 Mar 2024 14:52:30 GMT - Thu, 30 May 2024 14:52:29 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1056x816, components 3 Hashb66c0ee1b329db2bdf4c1e2cb708a7c7 28f94555b14ab0812adb3dc745590d41de8d7b05 c6fe13d9ce9176cba7df958cd9338833863f2377956ce2d69f4c9cea1cd27302
GET /api//file/cfg/202402/22/3751cbc0084d4180a98c5b7c7ac0369b_.jpg HTTP/1.1
Host: yaoifhiaowi352.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:19 GMT
Content-Type: image/jpeg
Content-Length: 82997
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Thu, 22 Feb 2024 15:46:08 GMT
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/static/mobile/link/5.png | 148.66.3.124 | 200 OK | 80 kB |
URL GET HTTP/1.1gg67ww5.xyz/static/mobile/link/5.png IP148.66.3.124:443
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typePNG image data, 1280 x 787, 8-bit colormap, non-interlaced Hashaf912194c0220ac8509ef46e55f12d0e cd38228a5fb07c66972682299373defedb825281 d55a75cd237e29955dcaefcb734cfb17a07a9e1046e8b049458070d726b5a076
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /static/mobile/link/5.png HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:18 GMT
Content-Type: image/png
Content-Length: 80247
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-13977"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/api/websocket/server/iframe.html | 148.66.3.124 | | 490 B |
URL gg67ww5.xyz/api/websocket/server/iframe.html IP148.66.3.124:0
File typeHTML document, ASCII text Hash096cbd37f2a5218c33bb0826a7c74cbf d649e7ab32dbcb8a85c0cfe3b77301b72cff5a3c 0fcbfa74fd8765b0f3ac8ff076bf4f20f383a8ae40f396f1753fa0177611f1d6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /api/websocket/server/iframe.html HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:21 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 490
Connection: keep-alive
ETag: "0096cbd37f2a5218c33bb0826a7c74cbf"
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
|
|
| cdn.jsdelivr.net/sockjs/1.0.0/sockjs.min.js |  151.101.65.229 | | 18 kB |
URL cdn.jsdelivr.net/sockjs/1.0.0/sockjs.min.js IP151.101.65.229:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32001) Hash7e2fe2d521dfde2d63b511c47ded0b30 c5baa2f5600c89f5b18de2cd46fa594d7f6df587 bd289e47cb97387a5f3945b686fde071e849eda64ce51aab12d43dac701f93ca
GET /sockjs/1.0.0/sockjs.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"e364-xbqi9WAMifWxjeLNRvpZTX9t9Yc"
content-encoding: br
accept-ranges: bytes
date: Wed, 24 Apr 2024 16:56:21 GMT
age: 1594377
x-served-by: cache-fra-eddf8230156-FRA, cache-hel1410020-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 18536
X-Firefox-Spdy: h2
|
|
| yaoifhiaowi352.icu/api//file/cfg/202402/22/b000aa15a0524389b6b8241a84530009_.png | 148.66.3.124 | | 2.2 kB |
URL yaoifhiaowi352.icu/api//file/cfg/202402/22/b000aa15a0524389b6b8241a84530009_.png IP148.66.3.124:0
File typePNG image data, 90 x 89, 8-bit/color RGBA, non-interlaced Hashb9aa2bafb22abd29550b9f1902ea932f 1a5a9292082a1559e918026ec8cc25352df74528 877ba514034aa229ac529fd19dd9fe9e3f1c25c5475a66e03a3faab5c0af0a05
GET /api//file/cfg/202402/22/b000aa15a0524389b6b8241a84530009_.png HTTP/1.1
Host: yaoifhiaowi352.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:22 GMT
Content-Type: image/png
Content-Length: 2230
Connection: keep-alive
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Thu, 22 Feb 2024 15:45:45 GMT
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/favicon.ico | 148.66.3.124 | | 13 kB |
IP148.66.3.124:0
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
File typeHTML document, ASCII text, with very long lines (7939) Hashacc9a3c9572ad1088d3831166352662b 1d4f7639d220e6cd302d82118e0e117303ab0827 589991f4fdd92cb958dd6f122c5ec8f25150a1e3d92424d00bccce99b6e59f5a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /favicon.ico HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.3
Date: Wed, 24 Apr 2024 16:56:23 GMT
Content-Type: text/html
Content-Length: 12772
Last-Modified: Sun, 31 Mar 2024 14:40:44 GMT
Connection: keep-alive
ETag: "660975ec-31e4"
Accept-Ranges: bytes
|
|
| gg67ww5.xyz/js/chunk-2d21d0c2.090e3250.js | 0.0.0.0 | | 0 B |
URL GET gg67ww5.xyz/js/chunk-2d21d0c2.090e3250.js IP0.0.0.0:0
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d21d0c2.090e3250.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| gg67ww5.xyz/js/chunk-2d2293a9.0f135bc7.js | 0.0.0.0 | | 0 B |
URL GET gg67ww5.xyz/js/chunk-2d2293a9.0f135bc7.js IP0.0.0.0:0
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d2293a9.0f135bc7.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.106 | 200 OK | 565 B |
URL GET HTTP/2fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (588), with no line terminators Hash959a533a3dc02649e0cc3f8f67d942af 34db49ff64aed8b51beaba5b9928ad504a4df335 24864ed3ee6fab66640980d4c24640e579e5583764a8ee8c4f09decf27977247
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 16:56:04 GMT
date: Wed, 24 Apr 2024 16:56:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gg67ww5.xyz/js/chunk-2d237720.471883da.js | 0.0.0.0 | | 0 B |
URL GET gg67ww5.xyz/js/chunk-2d237720.471883da.js IP0.0.0.0:0
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d237720.471883da.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| gg67ww5.xyz/css/chunk-547f3add.b11823af.css | 0.0.0.0 | | 0 B |
URL GET gg67ww5.xyz/css/chunk-547f3add.b11823af.css IP0.0.0.0:0
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /css/chunk-547f3add.b11823af.css HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| gg67ww5.xyz/js/chunk-2d0c4262.e109ef69.js | 0.0.0.0 | | 0 B |
URL GET gg67ww5.xyz/js/chunk-2d0c4262.e109ef69.js IP0.0.0.0:0
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Amazon.com Inc. |
GET /js/chunk-2d0c4262.e109ef69.js HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| gg67ww5.xyz/api/websocket/server/445/mmnbs5f4/xhr_streaming?t=1713977772578 | 0.0.0.0 | | 0 B |
URL POST gg67ww5.xyz/api/websocket/server/445/mmnbs5f4/xhr_streaming?t=1713977772578 IP0.0.0.0:0
CertificateIssuerLet's Encrypt Subjectgg67ww5.xyz Fingerprint0B:A6:9C:B8:1F:AC:AB:93:5B:F5:D1:E5:73:24:02:1D:BF:60:76:98 ValiditySun, 07 Apr 2024 05:33:42 GMT - Sat, 06 Jul 2024 05:33:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/websocket/server/445/mmnbs5f4/xhr_streaming?t=1713977772578 HTTP/1.1
Host: gg67ww5.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gg67ww5.xyz
DNT: 1
Connection: keep-alive
Referer: https://gg67ww5.xyz/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
|
|