| ethroqq.uber.space/favicon.ico |  185.26.156.14 | 404 Not Found | 196 B |
URL GET HTTP/2ethroqq.uber.space/favicon.ico IP185.26.156.14:443
Requested byhttps://ethroqq.uber.space/-/clients/login.php CertificateIssuerLet's Encrypt Subjectethroqq.uber.space Fingerprint9E:94:D9:6D:FE:90:EA:00:C3:BA:EF:A2:99:2F:F8:D4:03:F1:DF:F0 ValidityWed, 17 Apr 2024 18:59:39 GMT - Tue, 16 Jul 2024 18:59:38 GMT
File typeHTML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /favicon.ico HTTP/1.1
Host: ethroqq.uber.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ethroqq.uber.space/-/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=vtjd11adccv5dlv7o42mvu4nb9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Apr 2024 21:41:15 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: nginx
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
|
| ethroqq.uber.space/-/clients/login.php | 185.26.156.14 | 200 OK | 34 kB |
URL User Request GET HTTP/2ethroqq.uber.space/-/clients/login.php IP185.26.156.14:443
CertificateIssuerLet's Encrypt Subjectethroqq.uber.space Fingerprint9E:94:D9:6D:FE:90:EA:00:C3:BA:EF:A2:99:2F:F8:D4:03:F1:DF:F0 ValidityWed, 17 Apr 2024 18:59:39 GMT - Tue, 16 Jul 2024 18:59:38 GMT
File typegzip compressed data, from Unix Hash62a7c286f5595bf5e051015d4b76a695 95ecc251980d5c30de71d16cd759f9a508dd3181 9d9d1a5f21c4a1b7f3ea393122c093db49f4a2ebe61bb687ebb86511d0c005b9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /-/clients/login.php HTTP/1.1
Host: ethroqq.uber.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ethroqq.uber.space/-/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=vtjd11adccv5dlv7o42mvu4nb9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 21:41:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
server: nginx
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|
| ethroqq.uber.space/-/clients/login.php | 185.26.156.14 | 200 OK | 0 B |
URL GET HTTP/2ethroqq.uber.space/-/clients/login.php IP185.26.156.14:443
Requested byhttps://ethroqq.uber.space/-/clients/login.php CertificateIssuerLet's Encrypt Subjectethroqq.uber.space Fingerprint9E:94:D9:6D:FE:90:EA:00:C3:BA:EF:A2:99:2F:F8:D4:03:F1:DF:F0 ValidityWed, 17 Apr 2024 18:59:39 GMT - Tue, 16 Jul 2024 18:59:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Salesforce |
GET /-/clients/login.php HTTP/1.1
Host: ethroqq.uber.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ethroqq.uber.space/-/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=vtjd11adccv5dlv7o42mvu4nb9
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 21:41:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
server: nginx
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
X-Firefox-Spdy: h2
|