| ib.loginaacounts.top/index2.asp |  137.220.134.177 | 200 OK | 3.7 kB |
URL User Request GET HTTP/2ib.loginaacounts.top/index2.asp IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (8579), with CRLF line terminators Hashb040b3722e4d2089d3681f28cad70cd6 8b978cab47a691e832110676099582ff27660eed 34bbae5ad3694448e1d61f0a16895b6dd812783e5510ee1e9fb1fe31c675cca2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /index2.asp HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
content-type: text/html
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK; secure; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 3667
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/style.css | 137.220.134.177 | 200 OK | 64 kB |
URL GET HTTP/2ib.loginaacounts.top/au/style.css IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeUnicode text, UTF-8 text, with very long lines (1188), with CRLF, CR line terminators Hash666fe5c9c2bfe9d86d00786eaa64b8ae b6c88d01faf36c916c4f852c93905f52c64f2859 188085420290b0aa11de531762b180be97ba8c02c04464e552ac28cf613995cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/style.css HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 19:44:52 GMT
accept-ranges: bytes
etag: "012ec92c073d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 63919
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f.txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f.txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f.txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(1).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(1).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(1).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(2).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(2).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(2).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(3).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(3).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(3).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(4).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(4).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(4).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(5).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(5).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(5).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(6).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(6).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(6).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(7).txt | 137.220.134.177 | 200 OK | 17 kB |
URL GET HTTP/2ib.loginaacounts.top/au/f(7).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (1720) Hashaf0049cdf46400081ed8dd226e5b6c7a f9a3a8969dd786e779649b855b813d7ac4ccc946 186d5edffbc6e349675dbf628b0fce84bdae250be07c092e159702afb0f20181
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(7).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 16784
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(8).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(8).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(8).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:37 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(9).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(9).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(9).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(10).txt | 137.220.134.177 | 200 OK | 158 B |
URL GET HTTP/2ib.loginaacounts.top/au/f(10).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeASCII text, with no line terminators Hashad8b6f08655797587cdec719a94efe59 182adf5a140796f81e930649d05654dbf22fd5b7 77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(10).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 158
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/img_site-logo_pc.png | 137.220.134.177 | 200 OK | 2.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/img_site-logo_pc.png IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typePNG image data, 114 x 53, 8-bit/color RGBA, non-interlaced Hashc28e8a46a4e2f0651ba9e5444bfaff4d 310c4c8e958835a02849156931eec933755cfbdc c4da264867121b9f488748d2536849b092ba8df1e0529b45c4fa146d20d54b4c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/img_site-logo_pc.png HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 2154
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/img_site-logo_sp.png | 137.220.134.177 | 200 OK | 1.8 kB |
URL GET HTTP/2ib.loginaacounts.top/au/img_site-logo_sp.png IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typePNG image data, 100 x 33, 8-bit/color RGBA, non-interlaced Hashf93f54ac45449a0d95c1bf003b018ecf a17786c9af2656b8f62b85d40825cfcacaa3a806 e557e6c5f8c1025b144bbca671c314820302284a1ab5c6f4151bc39de0d7b413
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/img_site-logo_sp.png HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 1829
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/impression | 137.220.134.177 | 200 OK | 174 B |
URL GET HTTP/2ib.loginaacounts.top/au/impression IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeGIF image data, version 89a, 1 x 1 Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/impression HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 174
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adsct(1) | 137.220.134.177 | 200 OK | 177 B |
URL GET HTTP/2ib.loginaacounts.top/au/adsct(1) IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeGIF image data, version 89a, 1 x 1 Hash377d257f2d2e294916143c069141c1c5 b7cae69682cf31dd670b65088db8395acda6ed3e ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adsct(1) HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 177
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adsct(2) | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/adsct(2) IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adsct(2) HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/beacon | 137.220.134.177 | 200 OK | 174 B |
URL GET HTTP/2ib.loginaacounts.top/au/beacon IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeGIF image data, version 89a, 1 x 1 Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/beacon HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 174
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/0 | 137.220.134.177 | 200 OK | 0 B |
URL GET HTTP/2ib.loginaacounts.top/au/0 IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/0 HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adsct | 137.220.134.177 | 200 OK | 177 B |
URL GET HTTP/2ib.loginaacounts.top/au/adsct IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeGIF image data, version 89a, 1 x 1 Hash377d257f2d2e294916143c069141c1c5 b7cae69682cf31dd670b65088db8395acda6ed3e ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adsct HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 177
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adsct(3) | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/adsct(3) IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adsct(3) HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/f(7).txt | 137.220.134.177 | 200 OK | 17 kB |
URL GET HTTP/2ib.loginaacounts.top/au/f(7).txt IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (1720) Hashaf0049cdf46400081ed8dd226e5b6c7a f9a3a8969dd786e779649b855b813d7ac4ccc946 186d5edffbc6e349675dbf628b0fce84bdae250be07c092e159702afb0f20181
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/f(7).txt HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:38 GMT
content-length: 16784
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/0 | 137.220.134.177 | 200 OK | 0 B |
URL GET HTTP/2ib.loginaacounts.top/au/0 IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/0 HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
last-modified: Thu, 20 Apr 2023 14:34:24 GMT
accept-ranges: bytes
etag: "0d8c4339573d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/saved_resource.html | 137.220.134.177 | 200 OK | 617 B |
URL GET HTTP/2ib.loginaacounts.top/au/saved_resource.html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text, with very long lines (470) Hashbec6adee01227b9912fa718276845fae c60c22aeaa26b306480eb09fc76a5a5a281a4867 b7bd8efffcdd9e988716543068d7595a3f84ec2a969a80eab73cfab5580fce23
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/saved_resource.html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 617
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adv.html | 137.220.134.177 | 200 OK | 629 B |
URL GET HTTP/2ib.loginaacounts.top/au/adv.html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text Hash08e71c711cfba47ab48517e157f46e72 a2d92bf3803a05d757be0a42084f8c6d58ac569e 6a9b1f42df3c6529895e924d232cab42fd695be122219c4ae820a77b36cb757d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adv.html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 629
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/saved_resource(4).html | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/saved_resource(4).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/saved_resource(4).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adv(1).html | 137.220.134.177 | 200 OK | 626 B |
URL GET HTTP/2ib.loginaacounts.top/au/adv(1).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text Hash86166496c3d08dbcadc526fda043e971 bbf27b0c35f113adbab83b4649a087c1b961d490 5c83873e862d6b39f7b40841ab5872cbc41ff5f5ce9aaeeeda8e94cb867d45d5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adv(1).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 626
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adv(2).html | 137.220.134.177 | 200 OK | 629 B |
URL GET HTTP/2ib.loginaacounts.top/au/adv(2).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text Hash654326bd23d9c2627858e2236e436929 c1c0f2d984a23c95f936df3be9c12c08086984a1 87dfc3754b829049531a6a420e7ef0e2bcec91440efb2d09cce6af21b7df47d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adv(2).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 629
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adv(3).html | 137.220.134.177 | 200 OK | 626 B |
URL GET HTTP/2ib.loginaacounts.top/au/adv(3).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text Hash949491af948faee979fbb5d4e09c0469 2caa2da9646feac57e26a0cbe5cf8aedfe486986 2d9fd1b5ef66a4427b47bd170a141c46a03d2a7a3aa7f32d318018e883ee6e56
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adv(3).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 626
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/saved_resource(5).html | 137.220.134.177 | 200 OK | 617 B |
URL GET HTTP/2ib.loginaacounts.top/au/saved_resource(5).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text, with very long lines (470) Hash3191951ff3a57244652b32b9ae92875a 5d6a0e32c91391151fbcafa7b7f7a52472bd9cfe 549f0c43f7b1488e3a9f7a681ea0ad62fd29331d4ee36d8491d81a140b835744
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/saved_resource(5).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 617
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/saved_resource(6).html | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/saved_resource(6).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/saved_resource(6).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/saved_resource(7).html | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/saved_resource(7).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/saved_resource(7).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/saved_resource(8).html | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/saved_resource(8).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/saved_resource(8).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adsct(2) | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/adsct(2) IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adsct(2) HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/fonts/NotoSansCJKjp-RegularSubset.woff | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/fonts/NotoSansCJKjp-RegularSubset.woff IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /fonts/NotoSansCJKjp-RegularSubset.woff HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/style.css
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/fonts/NotoSansCJKjp-MediumSubset.woff | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/fonts/NotoSansCJKjp-MediumSubset.woff IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /fonts/NotoSansCJKjp-MediumSubset.woff HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/style.css
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adsct(3) | 137.220.134.177 | 404 Not Found | 1.2 kB |
URL GET HTTP/2ib.loginaacounts.top/au/adsct(3) IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ISO-8859 text, with CRLF line terminators Hash8363acaeab9cbb099b59b78a44127ca6 aef448ce5500e3734059ec285cf6ec0b547075f2 9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adsct(3) HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/index2.asp
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1163
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/top_attention.svg | 137.220.134.177 | 200 OK | 1.6 kB |
URL GET HTTP/2ib.loginaacounts.top/au/top_attention.svg IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeSVG Scalable Vector Graphics image Hash1b27ab595ad912ffc1c8bd9712785948 76b5f6e3de8cf66118b1b489c2df6648a619c5b8 95eeb2ddae5b7718ca5fbf521056ce5f90751055b2ff3d617c49115a3ce7df5a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/top_attention.svg HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/style.css
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 20 Apr 2023 14:58:56 GMT
accept-ranges: bytes
etag: "03826a19873d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1589
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/pixel(3) | 137.220.134.177 | 200 OK | 861 B |
URL GET HTTP/2ib.loginaacounts.top/au/pixel(3) IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/saved_resource.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (386), with CRLF, LF line terminators Hashab8e94ddec383224bcf40e1d402b2821 309556fe34524fc1c3ede2b3e3cfa0e4318c5bbd 381b43e792461512d50f6e620756a38d9c5698232fbf2bd83fad52e7a9008527
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/pixel(3) HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/saved_resource.html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 861
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/dgcore.js | 137.220.134.177 | 200 OK | 1.5 kB |
URL GET HTTP/2ib.loginaacounts.top/au/dgcore.js IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (4325), with no line terminators Hash2581179312a084332d7214496c5ee66c 2f383218b40bb452110f567b75a1c7feab0374be b81de6356b7fa0aed3892a34e9c9c45eb809f99e582675a78826bf6e63761bd6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/dgcore.js HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/adv.html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:22 GMT
accept-ranges: bytes
etag: "0ab93329573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1510
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adSiteVisit.js | 137.220.134.177 | 200 OK | 2.1 kB |
URL GET HTTP/2ib.loginaacounts.top/au/adSiteVisit.js IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (5752), with no line terminators Hashfd8603723ae62e9f4a16b79a7fc7afc3 406ebd98d862cd64843948a635a668dcdbbeb2be 0a1fd41c734d5f0dccc4f4c3828f6d4c2b1e7aaabbee9161cfc89f779434eb4c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adSiteVisit.js HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/adv.html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:22 GMT
accept-ranges: bytes
etag: "0ab93329573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 2120
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/dgcore.js | 137.220.134.177 | 200 OK | 1.5 kB |
URL GET HTTP/2ib.loginaacounts.top/au/dgcore.js IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (4325), with no line terminators Hash2581179312a084332d7214496c5ee66c 2f383218b40bb452110f567b75a1c7feab0374be b81de6356b7fa0aed3892a34e9c9c45eb809f99e582675a78826bf6e63761bd6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/dgcore.js HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/adv(1).html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:22 GMT
accept-ranges: bytes
etag: "0ab93329573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1510
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adSiteVisit.js | 137.220.134.177 | 200 OK | 2.1 kB |
URL GET HTTP/2ib.loginaacounts.top/au/adSiteVisit.js IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (5752), with no line terminators Hashfd8603723ae62e9f4a16b79a7fc7afc3 406ebd98d862cd64843948a635a668dcdbbeb2be 0a1fd41c734d5f0dccc4f4c3828f6d4c2b1e7aaabbee9161cfc89f779434eb4c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adSiteVisit.js HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/adv(1).html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:22 GMT
accept-ranges: bytes
etag: "0ab93329573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 2120
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/dgcore.js | 137.220.134.177 | 200 OK | 1.5 kB |
URL GET HTTP/2ib.loginaacounts.top/au/dgcore.js IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (4325), with no line terminators Hash2581179312a084332d7214496c5ee66c 2f383218b40bb452110f567b75a1c7feab0374be b81de6356b7fa0aed3892a34e9c9c45eb809f99e582675a78826bf6e63761bd6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/dgcore.js HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/adv(2).html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:22 GMT
accept-ranges: bytes
etag: "0ab93329573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1510
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adSiteVisit.js | 137.220.134.177 | 200 OK | 2.1 kB |
URL GET HTTP/2ib.loginaacounts.top/au/adSiteVisit.js IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (5752), with no line terminators Hashfd8603723ae62e9f4a16b79a7fc7afc3 406ebd98d862cd64843948a635a668dcdbbeb2be 0a1fd41c734d5f0dccc4f4c3828f6d4c2b1e7aaabbee9161cfc89f779434eb4c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adSiteVisit.js HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/adv(2).html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:22 GMT
accept-ranges: bytes
etag: "0ab93329573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 2120
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/dgcore.js | 137.220.134.177 | 200 OK | 1.5 kB |
URL GET HTTP/2ib.loginaacounts.top/au/dgcore.js IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (4325), with no line terminators Hash2581179312a084332d7214496c5ee66c 2f383218b40bb452110f567b75a1c7feab0374be b81de6356b7fa0aed3892a34e9c9c45eb809f99e582675a78826bf6e63761bd6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/dgcore.js HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/adv(3).html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:22 GMT
accept-ranges: bytes
etag: "0ab93329573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 1510
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adSiteVisit.js | 137.220.134.177 | 200 OK | 2.1 kB |
URL GET HTTP/2ib.loginaacounts.top/au/adSiteVisit.js IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (5752), with no line terminators Hashfd8603723ae62e9f4a16b79a7fc7afc3 406ebd98d862cd64843948a635a668dcdbbeb2be 0a1fd41c734d5f0dccc4f4c3828f6d4c2b1e7aaabbee9161cfc89f779434eb4c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adSiteVisit.js HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/adv(3).html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:22 GMT
accept-ranges: bytes
etag: "0ab93329573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 2120
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/pixel(4) | 137.220.134.177 | 200 OK | 861 B |
URL GET HTTP/2ib.loginaacounts.top/au/pixel(4) IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/au/saved_resource(5).html CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeJavaScript source, ASCII text, with very long lines (386), with CRLF, LF line terminators Hashab8e94ddec383224bcf40e1d402b2821 309556fe34524fc1c3ede2b3e3cfa0e4318c5bbd 381b43e792461512d50f6e620756a38d9c5698232fbf2bd83fad52e7a9008527
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/pixel(4) HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/au/saved_resource(5).html
Cookie: ASPSESSIONIDCGRCQBRR=HOMJMLNBDJFLIBAOPCEOKFGK
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
content-length: 861
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/tr_xid.ashx?sid=27409 |  54.230.111.71 | 200 OK | 46 B |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/tr_xid.ashx?sid=27409 IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(2).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
Hash90dbbc8914e62eec8a75825e73b7d536 572fc8128bedf502eeeec9299a62908f3cd8c401 03ed2eece46d7780192c9f3747a93cd8017890af686d6e8a57e6abea1dcbb07c
GET /tr_xid.ashx?sid=27409 HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ib.loginaacounts.top
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 46
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
server: Microsoft-IIS/7.5
p3p: CP = "NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
access-control-allow-origin: https://ib.loginaacounts.top
access-control-allow-credentials: true
set-cookie: xid=b984f764-8045-4f0a-a338-7957eed978bd; domain=i-mobile.co.jp; expires=Sun, 26-Apr-2026 15:00:00 GMT; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:40 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nFoJght6YMYYvMGFwJ7xUujCZU2LOD9A7pyB5b2YCNORX95mnqxuDQ==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/tr_xid.ashx?sid=27409 | 54.230.111.71 | 200 OK | 46 B |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/tr_xid.ashx?sid=27409 IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(2).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
Hash52c22c4bd8354d0d954826607d05f7b0 59b31c7e669b38592fe14ac2c4281e91fc7e5d0d 503b9ff0bf2191c350f2ed520b5858d8b702badba828b5a5e9b22da93e998605
GET /tr_xid.ashx?sid=27409 HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ib.loginaacounts.top
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 46
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
server: Microsoft-IIS/7.5
p3p: CP = "NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
access-control-allow-origin: https://ib.loginaacounts.top
access-control-allow-credentials: true
set-cookie: xid=4994a4bf-b327-4f36-bc55-37523207c3d3; domain=i-mobile.co.jp; expires=Sun, 26-Apr-2026 15:00:00 GMT; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kcNzs_s57ExM5drTcVvJ4YjwOk_SbLn-bdJAu-_3j-dsbUPKxTHZng==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/tr_xid.ashx?sid=27409 | 54.230.111.71 | 200 OK | 46 B |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/tr_xid.ashx?sid=27409 IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(2).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
Hasheefec66261adfc37fdafefa1197f6fbb be06f782005dd22d116f19f7595bc8a737bb8891 96682b848bf1eb10bf599e3bbb129961cc63dda8640550aa19fd62e6c3610439
GET /tr_xid.ashx?sid=27409 HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ib.loginaacounts.top
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 46
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
server: Microsoft-IIS/7.5
p3p: CP = "NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
access-control-allow-origin: https://ib.loginaacounts.top
access-control-allow-credentials: true
set-cookie: xid=3868c721-cb11-423b-be54-4587dcbda0da; domain=i-mobile.co.jp; expires=Sun, 26-Apr-2026 15:00:00 GMT; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:21:36 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B6J9DeXCwUnV-OxEUvKDqcJELFoYFIkryOsa_SnFMDKl_tiG8BBTKg==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/tr_xid.ashx?sid=27409 | 54.230.111.71 | 200 OK | 46 B |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/tr_xid.ashx?sid=27409 IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(2).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
Hash1c0d24cd97f93f9c7cb7e78dfc872f4d 322dd318553f70b8ffba0ad0dfed1efddf50b392 42c2ab3b1efbfa29922910ba819dbd0be1f919f14c271a2a1d32a30af33671ae
GET /tr_xid.ashx?sid=27409 HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ib.loginaacounts.top
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 46
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
server: Microsoft-IIS/7.5
p3p: CP = "NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
access-control-allow-origin: https://ib.loginaacounts.top
access-control-allow-credentials: true
set-cookie: xid=748f1daa-a18a-4741-9783-0e3e5c1c4315; domain=i-mobile.co.jp; expires=Sun, 26-Apr-2026 15:00:00 GMT; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:39 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ggAVES6QAPzeQCNEC7THAXe4JcxKRhymd97Ex68__lB2__B4DSQZfw==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/tr_adv.ashx?sid=27409&xid=748f1daa-a18a-4741-9783-0e3e5c1c4315&cq=regist%3D2&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp | 54.230.111.71 | 200 OK | 46 B |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/tr_adv.ashx?sid=27409&xid=748f1daa-a18a-4741-9783-0e3e5c1c4315&cq=regist%3D2&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(2).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
Hash1c0d24cd97f93f9c7cb7e78dfc872f4d 322dd318553f70b8ffba0ad0dfed1efddf50b392 42c2ab3b1efbfa29922910ba819dbd0be1f919f14c271a2a1d32a30af33671ae
GET /tr_adv.ashx?sid=27409&xid=748f1daa-a18a-4741-9783-0e3e5c1c4315&cq=regist%3D2&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ib.loginaacounts.top
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 46
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
server: Microsoft-IIS/7.5
p3p: CP = "NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
access-control-allow-origin: https://ib.loginaacounts.top
access-control-allow-credentials: true
set-cookie: xid=748f1daa-a18a-4741-9783-0e3e5c1c4315; domain=i-mobile.co.jp; expires=Sun, 26-Apr-2026 15:00:00 GMT; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:41 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JQxaxKR2dYZ-T8LXhdSJxDQfiNDqKS8DSa1eomNFiBJdE1gypplkwA==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/script/sync.js | 54.230.111.71 | 200 OK | 1.2 kB |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/script/sync.js IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(1).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1186), with no line terminators Hash195b0ebdcee35c2f2289ba9a490fe7d3 47513d08d25d68a106ce2fdd18bde4663f60ff9a fc7f0912225dc8f01fd76015543b549fa7f90a1e0f0369f9b733058f899c12b8
GET /script/sync.js HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 1186
last-modified: Fri, 06 Aug 2021 05:05:52 GMT
accept-ranges: bytes
etag: "2de4b7ba808ad71:0"
server: Microsoft-IIS/7.5
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:41 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PPPUGLYukJwrKzzbH60Oo-EKMeu2yWZLCWshS1XU6FQSOKxnJPhVMQ==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/script/sync.js | 54.230.111.71 | 200 OK | 1.2 kB |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/script/sync.js IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(1).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1186), with no line terminators Hash195b0ebdcee35c2f2289ba9a490fe7d3 47513d08d25d68a106ce2fdd18bde4663f60ff9a fc7f0912225dc8f01fd76015543b549fa7f90a1e0f0369f9b733058f899c12b8
GET /script/sync.js HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 1186
last-modified: Fri, 06 Aug 2021 05:05:52 GMT
accept-ranges: bytes
etag: "2de4b7ba808ad71:0"
server: Microsoft-IIS/7.5
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:21:36 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LGBJvLzffOWBnYMqYj0nvVAFdGX50AuVRFejFm9jhGLaIOnP4DevhQ==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/script/sync.js | 54.230.111.71 | 200 OK | 1.2 kB |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/script/sync.js IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(1).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1186), with no line terminators Hash195b0ebdcee35c2f2289ba9a490fe7d3 47513d08d25d68a106ce2fdd18bde4663f60ff9a fc7f0912225dc8f01fd76015543b549fa7f90a1e0f0369f9b733058f899c12b8
GET /script/sync.js HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 1186
last-modified: Fri, 06 Aug 2021 05:05:52 GMT
accept-ranges: bytes
etag: "2de4b7ba808ad71:0"
server: Microsoft-IIS/7.5
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:41 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rLEa9Ae-p5IUiWlmQAJUB5CrEqvu8eIfyQlzMic_NlI8ryDg71MScw==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/tr_adv.ashx?sid=27409&xid=3868c721-cb11-423b-be54-4587dcbda0da&cq=top%3D2&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp | 54.230.111.71 | 200 OK | 46 B |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/tr_adv.ashx?sid=27409&xid=3868c721-cb11-423b-be54-4587dcbda0da&cq=top%3D2&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(3).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
Hasheefec66261adfc37fdafefa1197f6fbb be06f782005dd22d116f19f7595bc8a737bb8891 96682b848bf1eb10bf599e3bbb129961cc63dda8640550aa19fd62e6c3610439
GET /tr_adv.ashx?sid=27409&xid=3868c721-cb11-423b-be54-4587dcbda0da&cq=top%3D2&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ib.loginaacounts.top
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 46
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
server: Microsoft-IIS/7.5
p3p: CP = "NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
access-control-allow-origin: https://ib.loginaacounts.top
access-control-allow-credentials: true
set-cookie: xid=3868c721-cb11-423b-be54-4587dcbda0da; domain=i-mobile.co.jp; expires=Sun, 26-Apr-2026 15:00:00 GMT; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:41 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dktD5BCBwj_baC5re3T99PF9Xe-zPMlav5BMtbm-fNasvFNO7quPtA==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/tr_adv.ashx?sid=27409&xid=4994a4bf-b327-4f36-bc55-37523207c3d3&cq=regist%3D1&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp | 54.230.111.71 | 200 OK | 46 B |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/tr_adv.ashx?sid=27409&xid=4994a4bf-b327-4f36-bc55-37523207c3d3&cq=regist%3D1&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv.html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
Hash52c22c4bd8354d0d954826607d05f7b0 59b31c7e669b38592fe14ac2c4281e91fc7e5d0d 503b9ff0bf2191c350f2ed520b5858d8b702badba828b5a5e9b22da93e998605
GET /tr_adv.ashx?sid=27409&xid=4994a4bf-b327-4f36-bc55-37523207c3d3&cq=regist%3D1&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ib.loginaacounts.top
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 46
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
server: Microsoft-IIS/7.5
p3p: CP = "NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
access-control-allow-origin: https://ib.loginaacounts.top
access-control-allow-credentials: true
set-cookie: xid=4994a4bf-b327-4f36-bc55-37523207c3d3; domain=i-mobile.co.jp; expires=Sun, 26-Apr-2026 15:00:00 GMT; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:41 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RUvri10GjHUndRg2w7BhOZlmTyw-3UtFtZoqq0XzelCxliVvNuod2w==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/script/sync.js | 54.230.111.71 | 200 OK | 1.2 kB |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/script/sync.js IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(1).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1186), with no line terminators Hash195b0ebdcee35c2f2289ba9a490fe7d3 47513d08d25d68a106ce2fdd18bde4663f60ff9a fc7f0912225dc8f01fd76015543b549fa7f90a1e0f0369f9b733058f899c12b8
GET /script/sync.js HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 1186
last-modified: Fri, 06 Aug 2021 05:05:52 GMT
accept-ranges: bytes
etag: "2de4b7ba808ad71:0"
server: Microsoft-IIS/7.5
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:21:36 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Fiv4CcsskvitrFveObsFlO9mw5rPlC4SC4yki7dFThlj1KV4Gxoyug==
X-Firefox-Spdy: h2
|
|
| spdmg-backend.i-mobile.co.jp/tr_adv.ashx?sid=27409&xid=b984f764-8045-4f0a-a338-7957eed978bd&cq=top%3D1&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp | 54.230.111.71 | 200 OK | 46 B |
URL GET HTTP/2spdmg-backend.i-mobile.co.jp/tr_adv.ashx?sid=27409&xid=b984f764-8045-4f0a-a338-7957eed978bd&cq=top%3D1&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp IP54.230.111.71:443
Requested byhttps://ib.loginaacounts.top/au/adv(1).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
Hash90dbbc8914e62eec8a75825e73b7d536 572fc8128bedf502eeeec9299a62908f3cd8c401 03ed2eece46d7780192c9f3747a93cd8017890af686d6e8a57e6abea1dcbb07c
GET /tr_adv.ashx?sid=27409&xid=b984f764-8045-4f0a-a338-7957eed978bd&cq=top%3D1&referrer=https%3A%2F%2Fib.loginaacounts.top%2Findex2.asp HTTP/1.1
Host: spdmg-backend.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ib.loginaacounts.top
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 46
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
server: Microsoft-IIS/7.5
p3p: CP = "NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC"
access-control-allow-origin: https://ib.loginaacounts.top
access-control-allow-credentials: true
set-cookie: xid=b984f764-8045-4f0a-a338-7957eed978bd; domain=i-mobile.co.jp; expires=Sun, 26-Apr-2026 15:00:00 GMT; path=/
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:32:41 GMT
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XXucrWvnoeZbWsmZ2k-pF4uAUXuCliDpNrWz0psAElrzc9-iPhpFSg==
X-Firefox-Spdy: h2
|
|
| xid.i-mobile.co.jp/SaveXidToLocalStorage.html | 54.230.111.101 | 200 OK | 1.3 kB |
URL GET HTTP/2xid.i-mobile.co.jp/SaveXidToLocalStorage.html IP54.230.111.101:443
Requested byhttps://ib.loginaacounts.top/au/adv(3).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashb01ef08b7ce7fe2c03231ca71148d60f 6a8e7ae38a881fb7818cb0a5b8e77460f01371cf 72c6c343bd9b197339c3410ddbdc1a082aa139ff2252ebcb259c6a8cc383d164
GET /SaveXidToLocalStorage.html HTTP/1.1
Host: xid.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1305
last-modified: Thu, 01 Feb 2024 03:52:04 GMT
accept-ranges: bytes
server: Microsoft-IIS/8.5
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:14:33 GMT
etag: "0cab14c254da1:0"
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BrkfX8cPiztYmOtjVPLGVQw_4VHuqsdRCXaS5Go_8oB4aaYQniHYXQ==
age: 1088
X-Firefox-Spdy: h2
|
|
| xid.i-mobile.co.jp/SaveXidToLocalStorage.html | 54.230.111.101 | 200 OK | 1.3 kB |
URL GET HTTP/2xid.i-mobile.co.jp/SaveXidToLocalStorage.html IP54.230.111.101:443
Requested byhttps://ib.loginaacounts.top/au/adv(3).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashb01ef08b7ce7fe2c03231ca71148d60f 6a8e7ae38a881fb7818cb0a5b8e77460f01371cf 72c6c343bd9b197339c3410ddbdc1a082aa139ff2252ebcb259c6a8cc383d164
GET /SaveXidToLocalStorage.html HTTP/1.1
Host: xid.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1305
last-modified: Thu, 01 Feb 2024 03:52:04 GMT
accept-ranges: bytes
server: Microsoft-IIS/8.5
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:14:33 GMT
etag: "0cab14c254da1:0"
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O0yfy-coAJdiGkwh4UwdmsDitHAjW8Nx8yVfSOF-cxSNYG8Rr06HCw==
age: 1088
X-Firefox-Spdy: h2
|
|
| xid.i-mobile.co.jp/SaveXidToLocalStorage.html | 54.230.111.101 | 200 OK | 1.3 kB |
URL GET HTTP/2xid.i-mobile.co.jp/SaveXidToLocalStorage.html IP54.230.111.101:443
Requested byhttps://ib.loginaacounts.top/au/adv(3).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashb01ef08b7ce7fe2c03231ca71148d60f 6a8e7ae38a881fb7818cb0a5b8e77460f01371cf 72c6c343bd9b197339c3410ddbdc1a082aa139ff2252ebcb259c6a8cc383d164
GET /SaveXidToLocalStorage.html HTTP/1.1
Host: xid.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1305
last-modified: Thu, 01 Feb 2024 03:52:04 GMT
accept-ranges: bytes
server: Microsoft-IIS/8.5
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:14:33 GMT
etag: "0cab14c254da1:0"
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yoRsBVnQz6WphKcZHzHzOLrs_72a9vU-xx_FtvKZStorGk4RsN21cw==
age: 1088
X-Firefox-Spdy: h2
|
|
| xid.i-mobile.co.jp/SaveXidToLocalStorage.html | 54.230.111.101 | 200 OK | 1.3 kB |
URL GET HTTP/2xid.i-mobile.co.jp/SaveXidToLocalStorage.html IP54.230.111.101:443
Requested byhttps://ib.loginaacounts.top/au/adv(3).html CertificateIssuerJapan Registry Services Co., Ltd. Subject*.i-mobile.co.jp Fingerprint69:2A:D1:11:60:A0:83:C5:D7:20:2E:B3:D2:7D:9C:59:FC:A4:9F:E4 ValidityTue, 05 Mar 2024 02:56:27 GMT - Mon, 31 Mar 2025 14:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashb01ef08b7ce7fe2c03231ca71148d60f 6a8e7ae38a881fb7818cb0a5b8e77460f01371cf 72c6c343bd9b197339c3410ddbdc1a082aa139ff2252ebcb259c6a8cc383d164
GET /SaveXidToLocalStorage.html HTTP/1.1
Host: xid.i-mobile.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1305
last-modified: Thu, 01 Feb 2024 03:52:04 GMT
accept-ranges: bytes
server: Microsoft-IIS/8.5
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:14:33 GMT
etag: "0cab14c254da1:0"
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uhywY-bocDbSog8geahFfpOPgPIcxSNWwgtHO3IC_-6qR4KF0PN51A==
age: 1088
X-Firefox-Spdy: h2
|
|
| sib.jibunbank.co.jp/images/favicon.ico?2023042103 |  23.36.79.19 | 200 OK | 7.4 kB |
URL GET HTTP/1.1sib.jibunbank.co.jp/images/favicon.ico?2023042103 IP23.36.79.19:443 ASN#20940 Akamai International B.V.
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerDigiCert, Inc. Subjectsib.jibunbank.co.jp Fingerprint95:84:84:0A:72:26:5A:08:2E:9E:BB:89:12:6F:11:86:B7:69:CC:CD ValidityFri, 30 Jun 2023 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 48x48, 24 bits/pixel Hash4a3c17b3b1e35c233d469ba466c1aaa3 2cf2106d6a198ec3d029e21a8f3edc0577c49029 a73b8750f14482e6ccfd7c3b227a7019714160a3be1a85dc45fdc145d30dfe1c
GET /images/favicon.ico?2023042103 HTTP/1.1
Host: sib.jibunbank.co.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ib.loginaacounts.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Thu, 17 Dec 2020 11:46:45 GMT
ETag: "1cbe-5b6a78bd58a77"
Accept-Ranges: bytes
Content-Length: 7358
X-FRAME-OPTIONS: DENY
Content-Type: image/vnd.microsoft.icon
Date: Sat, 27 Apr 2024 04:32:42 GMT
Connection: keep-alive
|
|
| ib.loginaacounts.top/au/adv(2).html | 137.220.134.177 | 200 OK | 629 B |
URL GET HTTP/2ib.loginaacounts.top/au/adv(2).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text Hash654326bd23d9c2627858e2236e436929 c1c0f2d984a23c95f936df3be9c12c08086984a1 87dfc3754b829049531a6a420e7ef0e2bcec91440efb2d09cce6af21b7df47d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adv(2).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:33:00 GMT
content-length: 629
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adv(3).html | 137.220.134.177 | 200 OK | 626 B |
URL GET HTTP/2ib.loginaacounts.top/au/adv(3).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text Hash949491af948faee979fbb5d4e09c0469 2caa2da9646feac57e26a0cbe5cf8aedfe486986 2d9fd1b5ef66a4427b47bd170a141c46a03d2a7a3aa7f32d318018e883ee6e56
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adv(3).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:33:00 GMT
content-length: 626
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adv.html | 137.220.134.177 | 200 OK | 629 B |
URL GET HTTP/2ib.loginaacounts.top/au/adv.html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text Hash08e71c711cfba47ab48517e157f46e72 a2d92bf3803a05d757be0a42084f8c6d58ac569e 6a9b1f42df3c6529895e924d232cab42fd695be122219c4ae820a77b36cb757d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adv.html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:33:00 GMT
content-length: 629
X-Firefox-Spdy: h2
|
|
| ib.loginaacounts.top/au/adv(1).html | 137.220.134.177 | 200 OK | 626 B |
URL GET HTTP/2ib.loginaacounts.top/au/adv(1).html IP137.220.134.177:443 ASN#64050 BGPNET Global ASN
Requested byhttps://ib.loginaacounts.top/index2.asp CertificateIssuerLet's Encrypt Subjectib.loginaacounts.top Fingerprint3B:C7:68:17:14:31:DD:32:BE:BA:2E:AC:84:5D:BF:CE:3F:4A:B0:DC ValiditySat, 20 Apr 2024 12:16:32 GMT - Fri, 19 Jul 2024 12:16:31 GMT
File typeHTML document, ASCII text Hash86166496c3d08dbcadc526fda043e971 bbf27b0c35f113adbab83b4649a087c1b961d490 5c83873e862d6b39f7b40841ab5872cbc41ff5f5ce9aaeeeda8e94cb867d45d5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | au Jibun Bank |
GET /au/adv(1).html HTTP/1.1
Host: ib.loginaacounts.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-encoding: gzip
last-modified: Thu, 20 Apr 2023 14:34:26 GMT
accept-ranges: bytes
etag: "05f6349573d91:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 27 Apr 2024 04:33:00 GMT
content-length: 626
X-Firefox-Spdy: h2
|
|