| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/IZLMtatxGM1y1qcj4EcEm/_ssgManifest.js |  76.76.21.93 | 200 OK | 811 B |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/IZLMtatxGM1y1qcj4EcEm/_ssgManifest.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (811), with no line terminators Hash4ff78952953e795b22ef97391aaf260b 7fcab2c58b662ce9861f15c3b29304458bc29f7d 8f1d5756562f822c21b0c1d0fae404402b2c981a5df0e45228587643d9598e9d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/IZLMtatxGM1y1qcj4EcEm/_ssgManifest.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 27425
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_ssgManifest.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: "4ff78952953e795b22ef97391aaf260b"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/IZLMtatxGM1y1qcj4EcEm/_ssgManifest.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412133346-316f3a8052aa
content-length: 811
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Kanit:wght@400;600&display=swap | 142.250.74.106 | 200 OK | 986 B |
URL GET HTTP/2fonts.googleapis.com/css2?family=Kanit:wght@400;600&display=swap IP142.250.74.106:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hash0fcc983e72a88c867fc06e794f0044dc c37ab9511cfd47285d695d5b7449a419f6518d9a 96a14a53fe24ec8572d688818eec00428de21749c612e736135574b2068c2381
GET /css2?family=Kanit:wght@400;600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 03:48:53 GMT
date: Thu, 18 Apr 2024 03:48:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 | 216.58.207.227 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19388, version 1.0 Hashf816f16f297c801aaf01ff43c9fcd563 2e9e2c80bc5aa5f01f75cd486baa1769f53dea5e ae7b918efe7cd287651e014ed269c923e1a925c8eee1a474ad11184f04659d3e
GET /s/kanit/v15/nKKZ-Go6G5tXcraVGwA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19388
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:28:47 GMT
expires: Fri, 11 Apr 2025 17:28:47 GMT
cache-control: public, max-age=31536000
age: 555606
last-modified: Thu, 20 Jul 2023 20:53:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/_app-d21bca908dc69ade.js | 76.76.21.93 | 200 OK | 798 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/_app-d21bca908dc69ade.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (45953) Size798 kB (797930 bytes) Hash5ccb3933ed0f6943f5fc3accdd668805 c0d653bde07f1bc940d3c9a9805dda3fde3e6e68 12f43356d31fb7bf87a503efe3781403f42d246f3f3d19053c094723a70882b4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-d21bca908dc69ade.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27425
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_app-d21bca908dc69ade.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"5ccb3933ed0f6943f5fc3accdd668805"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/_app-d21bca908dc69ade.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713412133322-5aceba07c305
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4253-ece81cd4224dfe83.js | 76.76.21.93 | 200 OK | 125 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4253-ece81cd4224dfe83.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size125 kB (125185 bytes) Hash6b95044fdd2e3177e2dddb81e433471b ab23c2120631d65e7dda01def810f201358cb8f7 ee528067473d3731453305be2e5c8f23df782b3cba5875f614d049149e909fab
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4253-ece81cd4224dfe83.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4253-ece81cd4224dfe83.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"6b95044fdd2e3177e2dddb81e433471b"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4253-ece81cd4224dfe83.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::4t9hj-1713412133323-7a2b401c2041
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2967-fe946b395aaeebd1.js | 76.76.21.93 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2967-fe946b395aaeebd1.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (9853) Hash578d63ca0493490ce8053c7c7b719eed d68048d2f9de8dc1f98f2890e9db7c29a212d991 640b1be41cc2dd921633b48af99a5b99b6a167f76f4b83e85ea99efe51e73d7e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2967-fe946b395aaeebd1.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13515
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2967-fe946b395aaeebd1.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"578d63ca0493490ce8053c7c7b719eed"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/2967-fe946b395aaeebd1.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412133328-67074a57d8f4
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/trading-reward-05569f342fec4735.js | 76.76.21.93 | 200 OK | 24 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/trading-reward-05569f342fec4735.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (18464) Hash4739335c4cd79d9a34e440d0f4a71227 960c61baf28521d928281105c0b491c5bacbeda9 04d296397dad9776ff55bf754621b087a7c69af66a449229e16a2348bb0414f4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/trading-reward-05569f342fec4735.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="trading-reward-05569f342fec4735.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"4739335c4cd79d9a34e440d0f4a71227"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/trading-reward-05569f342fec4735.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::9d6kb-1713412133338-79d1210f4fb5
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-TLF66T4 | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-TLF66T4 IP142.250.74.168:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (10853) Hash0d2d96dbf2ecb230b75aff04421a1700 69b13b3812b1a252a6fb44cbcf82c8332989aaa8 8dafac770ffab01f2af8c267c5f2d22bb16b18625f399830a5c8649daf90b661
GET /gtm.js?id=GTM-TLF66T4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 03:48:55 GMT
expires: Thu, 18 Apr 2024 03:48:55 GMT
cache-control: private, max-age=900
last-modified: Thu, 18 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78354
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6933-b3dbf85f4e75ee3d.js | 76.76.21.93 | 200 OK | 150 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6933-b3dbf85f4e75ee3d.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8224) Size150 kB (150384 bytes) Hashf81a05613e145b49831331f9452483f0 d263e28d0f5a429bba0758f1f9bc8431db56efa1 ce760546f992cbb8e97fd192eee9051af16f3d0752dfba69c7f6407ee2a7107f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6933-b3dbf85f4e75ee3d.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="6933-b3dbf85f4e75ee3d.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"f81a05613e145b49831331f9452483f0"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/6933-b3dbf85f4e75ee3d.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412133327-4cabadcfbdda
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star1.png | 76.76.21.93 | 200 OK | 4.2 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star1.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 202 x 201, 8-bit colormap, non-interlaced Hash179200526e9cef73c1eccb27ddef68fa 8f718fe1b417dfb03a2bcb6c9472cb14ffd669d9 f0ef7034f329aedfafc622eb242f89e38309294cc151c8007824c23f8c747a3b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/star1.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26186
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star1.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "179200526e9cef73c1eccb27ddef68fa"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/star1.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412135433-5b209b1b17ab
content-length: 4159
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star2.png | 76.76.21.93 | 200 OK | 1.7 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star2.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 86 x 86, 8-bit colormap, non-interlaced Hash650786098ffb691758847570b740053a a732543d4a9a44662d6d2a0f552ba092ba182c26 fad7ef7a63909b71ab45ed16c12bd0f76d58446f66082812b42f92046cead4ca
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/star2.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star2.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "650786098ffb691758847570b740053a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/star2.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412135433-13ea378447d7
content-length: 1689
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/IZLMtatxGM1y1qcj4EcEm/_buildManifest.js | 76.76.21.93 | 200 OK | 7.8 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/IZLMtatxGM1y1qcj4EcEm/_buildManifest.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (16238), with no line terminators Hash9dab99c08ee63b509f9746c9e439da9e bac29bc5acb8a284fb276a41104f0a4f2b8ce148 7a3a7af0c7440fac81ce3fe8b5b16ae49a14bac75d91b70a890a93dca0a43b8e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/IZLMtatxGM1y1qcj4EcEm/_buildManifest.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27425
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_buildManifest.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"9dab99c08ee63b509f9746c9e439da9e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/IZLMtatxGM1y1qcj4EcEm/_buildManifest.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412133342-c72613a57119
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter-1.png | 76.76.21.93 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter-1.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 186 x 168, 8-bit/color RGBA, non-interlaced Hashc8984d06c2dfa60a3062055e43d7b5e1 559796701fb7515e21eded960fe1a226881ca2a2 296c21246e29ca49e0c5784a65832d54e0385afaecd69f164234b8d88a7557bd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/butter-1.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26186
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="butter-1.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "c8984d06c2dfa60a3062055e43d7b5e1"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/butter-1.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412135436-1bbc18731a81
content-length: 9952
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter-2.png | 76.76.21.93 | 200 OK | 33 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter-2.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 167 x 261, 8-bit/color RGBA, non-interlaced Hash66bddd9fe89684cfd9387ffc819c32cc 53d96abc5dce715dedbbfd57452706dcd99d41df f9b7998bf11b41e5369dd1176d7e0a07b6bafa9b71f2b989f61126331a9a3025
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/butter-2.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="butter-2.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "66bddd9fe89684cfd9387ffc819c32cc"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/butter-2.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412135436-99e95c0e5a85
content-length: 32797
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-ed675b153cc8567b.js | 76.76.21.93 | 200 OK | 266 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-ed675b153cc8567b.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size266 kB (265638 bytes) Hash33d9bbcbcef3a9304bc8bcd2a6c9cecb c3c9e58d36f1aad04dba2b03204b4cb0ef29b334 7fd9ce983f68bb663f6064458935dfd3af549941887c4a93a6085da7e4959592
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/worker-chunks-ed675b153cc8567b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27425
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="worker-chunks-ed675b153cc8567b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"33d9bbcbcef3a9304bc8bcd2a6c9cecb"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/worker-chunks-ed675b153cc8567b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::9d6kb-1713412133319-79fc690f4883
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter.png | 76.76.21.93 | 200 OK | 16 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 396 x 388, 8-bit colormap, non-interlaced Hash3eb4d8db68674440a697a4d1e91e551a ce586758d101e1472c12ab541bd415777df4b10e 72d92324673e4e5650f8647fa88be948ab6f54a565d101b60464f16e95f3e2f2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/butter.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="butter.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "3eb4d8db68674440a697a4d1e91e551a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/butter.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xjvfg-1713412135448-31dc9bae0467
content-length: 15471
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19572, version 1.0 Hash24ad3fea714cb5e100aa16f832531bf3 a5475cd37afb39fc2472ef8391a4a3fd900122eb 7196c3002f08704f9f99de95b6357969a512eaa9a766eee693921dce72927cea
GET /s/kanit/v15/nKKU-Go6G5tXcr5KPxWnVaE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19572
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:49 GMT
expires: Fri, 18 Apr 2025 02:38:49 GMT
cache-control: public, max-age=31536000
age: 4206
last-modified: Thu, 20 Jul 2023 20:50:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star1.png | 76.76.21.93 | 200 OK | 4.2 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star1.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 202 x 201, 8-bit colormap, non-interlaced Hash179200526e9cef73c1eccb27ddef68fa 8f718fe1b417dfb03a2bcb6c9472cb14ffd669d9 f0ef7034f329aedfafc622eb242f89e38309294cc151c8007824c23f8c747a3b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/star1.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26186
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star1.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "179200526e9cef73c1eccb27ddef68fa"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/star1.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hl429-1713412135713-1f8e6a57c023
content-length: 4159
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star2.png | 76.76.21.93 | 200 OK | 1.7 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star2.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 86 x 86, 8-bit colormap, non-interlaced Hash650786098ffb691758847570b740053a a732543d4a9a44662d6d2a0f552ba092ba182c26 fad7ef7a63909b71ab45ed16c12bd0f76d58446f66082812b42f92046cead4ca
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/star2.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star2.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "650786098ffb691758847570b740053a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/star2.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412135714-5cfe772f448e
content-length: 1689
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star3.png | 76.76.21.93 | 200 OK | 3.0 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/star3.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 92 x 90, 8-bit colormap, non-interlaced Hasheaffb38a5b16a685a1517a91323b71f4 18664bff2669e62190e4abcd9fd216bc9f362751 48905946c1cca868a85e4536da6a34d2eaeeb1511ed2c7389ad352c63b848fbb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/star3.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26186
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="star3.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "eaffb38a5b16a685a1517a91323b71f4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/star3.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jdrn7-1713412135714-14e6be757365
content-length: 2985
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/main-0785997221e18e7f.js | 76.76.21.93 | 200 OK | 47 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/main-0785997221e18e7f.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash46788ca3201af8ee2b7bd75d99ec91f9 607baf6837cb956f791773c1cbcfee5a3b53e89d 2b7ce862a23bf3a1e95d2f516165021c9e2e40061740c003d3ec48589ee271ed
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-0785997221e18e7f.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27426
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="main-0785997221e18e7f.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"46788ca3201af8ee2b7bd75d99ec91f9"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/main-0785997221e18e7f.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::4t9hj-1713412133316-40abf5e45f6d
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter-1.png | 76.76.21.93 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter-1.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 186 x 168, 8-bit/color RGBA, non-interlaced Hashc8984d06c2dfa60a3062055e43d7b5e1 559796701fb7515e21eded960fe1a226881ca2a2 296c21246e29ca49e0c5784a65832d54e0385afaecd69f164234b8d88a7557bd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/butter-1.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26186
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="butter-1.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "c8984d06c2dfa60a3062055e43d7b5e1"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/butter-1.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hl429-1713412135716-896837888bfc
content-length: 9952
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 | 216.58.207.227 | 200 OK | 20 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19636, version 1.0 Hash22aeb837a470326fe42ab217a37cea2a 46a4d8b6f9fc8f7bd2471be93a63fed40126e415 ae193f732cb0b2f333c561c7fb758f3a83e841a79da350e7030c492d3446fea9
GET /s/kanit/v15/nKKU-Go6G5tXcr5KPxWpVaF5NQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19636
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:53:37 GMT
expires: Fri, 18 Apr 2025 02:53:37 GMT
cache-control: public, max-age=31536000
age: 3318
last-modified: Thu, 20 Jul 2023 20:54:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5298-309e53b67e4c2392.js | 76.76.21.93 | 200 OK | 21 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5298-309e53b67e4c2392.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (46912) Hash5b3d0e7658b834ddf95ad288d7a7bf0e 0ce802786dcdaf74961b06a2bf87ac07c92e56c4 cd284958f7187362f3a10d504382b8fef07a1751e8d5042ed6b5f436c7c4d648
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5298-309e53b67e4c2392.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5298-309e53b67e4c2392.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"5b3d0e7658b834ddf95ad288d7a7bf0e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5298-309e53b67e4c2392.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::vp4j6-1713412133326-c654bb29ebc0
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter-2.png | 76.76.21.93 | 200 OK | 33 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter-2.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 167 x 261, 8-bit/color RGBA, non-interlaced Hash66bddd9fe89684cfd9387ffc819c32cc 53d96abc5dce715dedbbfd57452706dcd99d41df f9b7998bf11b41e5369dd1176d7e0a07b6bafa9b71f2b989f61126331a9a3025
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/butter-2.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="butter-2.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "66bddd9fe89684cfd9387ffc819c32cc"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/butter-2.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hl429-1713412135719-3f2820e46fc4
content-length: 32797
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/left-bunny.png | 76.76.21.93 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/left-bunny.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 186 x 486, 8-bit colormap, non-interlaced Hash73fb3978d0f854e8267f636998e1b9c5 d263540919316ac07a55a5e36ec85a227182a6a4 e745e86d83763b28d6208ce5903767a5fdcc5000f0d88ef2a2d66b4fea6ff450
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/left-bunny.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26186
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="left-bunny.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "73fb3978d0f854e8267f636998e1b9c5"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/left-bunny.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hl429-1713412135723-ed47a889c211
content-length: 12482
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4911-8ecd771e5592d2e4.js | 76.76.21.93 | 200 OK | 11 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4911-8ecd771e5592d2e4.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (2882) Hasha23f0c4d76ae5bf7131fbeba364d96a8 f29c9498b8a402372114e7e50a5abadc4b306c3e a05babfa44269c8caf01f1a39ff6630d9f9e444f13336ba2c663b1f8e732978c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4911-8ecd771e5592d2e4.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4911-8ecd771e5592d2e4.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"a23f0c4d76ae5bf7131fbeba364d96a8"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4911-8ecd771e5592d2e4.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::vp4j6-1713412133329-efad0e3a97d9
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/right-bunny.png | 76.76.21.93 | | 85 kB |
URL GET pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/right-bunny.png IP76.76.21.93:0
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 449 x 448, 8-bit/color RGBA, non-interlaced Hasha2b244656ccca76f768d8166d61e7ec1 0b45add2e2fa6d1860a2a1b88f34b1c835eea3f7 3593770784fd3994e2464b6152c1cdf44a3b2d2a53fdeb1e403f40d925ee9d11
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/right-bunny.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26174
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="right-bunny.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "a2b244656ccca76f768d8166d61e7ec1"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/right-bunny.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::g7nth-1713412135729-ae99e4d29ec0
content-length: 85271
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/love-butter.png | 76.76.21.93 | | 27 kB |
URL GET pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/love-butter.png IP76.76.21.93:0
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 685 x 702, 8-bit colormap, non-interlaced Hash7010643de5f4efbf411c2fa7d4cd6925 8ebc6b09f4aff6f1d2f692d855bc901ddb8c02a7 7a538d1301f92e126744f6083b24ddcad98a19eaec4efe708c8118e412f3e71f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/love-butter.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26174
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="love-butter.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "7010643de5f4efbf411c2fa7d4cd6925"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/love-butter.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jdrn7-1713412135731-53db402b86e6
content-length: 26974
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter.png | 76.76.21.93 | 200 OK | 16 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/butter.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 396 x 388, 8-bit colormap, non-interlaced Hash3eb4d8db68674440a697a4d1e91e551a ce586758d101e1472c12ab541bd415777df4b10e 72d92324673e4e5650f8647fa88be948ab6f54a565d101b60464f16e95f3e2f2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/butter.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="butter.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "3eb4d8db68674440a697a4d1e91e551a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/butter.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xjvfg-1713412135803-55553821a402
content-length: 15471
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/513-f2c020b94324c178.js | 76.76.21.93 | 200 OK | 16 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/513-f2c020b94324c178.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (15832) Hash2e027a266c81244343f222f9e9153662 e4d63d2c95b47ca4303ce0811ec13423c9675761 88c84f6d3e3a3d2baed86f3269aba8401bf617326a0a9c9ce768457a6c0d2584
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/513-f2c020b94324c178.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="513-f2c020b94324c178.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"2e027a266c81244343f222f9e9153662"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/513-f2c020b94324c178.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jhvdv-1713412133337-6a936c014c83
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/9119-2c0de954c7240fcd.js | 76.76.21.93 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/9119-2c0de954c7240fcd.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (24040) Hash299f0ad3de19b53ce6fce255ad6c5761 e4fa592932a09540611fb2c9a40de26a62a9e577 165588aae2def601728fb18ce4f6dcadd51c3c397b83e123fe9becaca73f24e7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9119-2c0de954c7240fcd.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="9119-2c0de954c7240fcd.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"299f0ad3de19b53ce6fce255ad6c5761"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/9119-2c0de954c7240fcd.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::4t9hj-1713412133324-6f124e638f8b
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/f15ae5acfa72202a.css | 76.76.21.93 | 200 OK | 41 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/f15ae5acfa72202a.css IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash40eb3e05a48057f33a952ad321a0a9c5 dd84ac5bb29de4c4987f4b51f226488bb8f3bd34 4f9445c8e4d2c918dbe08691d7efd12dbc63b6c0c0c85846fb7c5d35e45bc3fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/f15ae5acfa72202a.css HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27426
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="f15ae5acfa72202a.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"40eb3e05a48057f33a952ad321a0a9c5"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/f15ae5acfa72202a.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::9d6kb-1713412133312-b6b13525106d
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/pool-1.png | 76.76.21.93 | 200 OK | 37 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/pool-1.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 615 x 391, 8-bit colormap, non-interlaced Hash6df5c7e2c43434c2a6e425ff88af96bc 3571eceecdb84f376b5e9e4496d70e06f19386aa c91e72425c38fba31ad788a3c24d719f91bed4ac1e2d4f822d9339df58b15e69
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/pool-1.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="pool-1.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "6df5c7e2c43434c2a6e425ff88af96bc"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/pool-1.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412135827-5347f87e7e31
content-length: 37293
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/pool-2.png | 76.76.21.93 | | 10 kB |
URL GET pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/pool-2.png IP76.76.21.93:0
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 212 x 204, 8-bit colormap, non-interlaced Hash60420d79026e07313d74fa706ef17240 4b749d7b734c082658486e383d178bd08f8f6b4b b99592347559cbe41776650e38cfbf0ba46e9cddd8a64e6afa83d5d2ed0b465b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/pool-2.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="pool-2.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "60420d79026e07313d74fa706ef17240"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/pool-2.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412135832-a694f09e74d1
content-length: 10316
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/coinbase.png | 172.67.75.76 | 200 OK | 2.1 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/wallets/coinbase.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash851ec2ffeb2f50e208bc1ff7c32c87d9 2ac03d14ca3e43b8a650adb46e386be7f6ff177a 29846f0225d4caa8399bc44926889b023b6f5fd7e92666bd31170273716768da
GET /web/wallets/coinbase.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:55 GMT
content-type: image/png
content-length: 2135
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "37d02187a2f00581e51815d50b840da5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ts57Ziw4mxGA9LM72jcaezLeZjWERICjx5KFp3GaIAU5cgKrScIO8eCsiTNIq1RM2M0Zq6iOewqsBkQyKCRmDMhO8hRaOYaTlrmDSIT5vp0OWqBOS1%2FzVOX%2FArNetFTlZVVGUm3Mh%2FtFo8MHxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 6011
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae99cbc856a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/trust.png | 172.67.75.76 | 200 OK | 2.2 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/wallets/trust.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hasha5c44f3a69730488cf69035aa91acdfa 74c6ccff8f5c3227d0216f63fd9a9000205ae011 c0a5155f81490256cb607244e502bbd86998e6e3c5c826cfd3fa86fb2993c739
GET /web/wallets/trust.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:55 GMT
content-type: image/png
content-length: 2177
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "62f570988d31ae1821180d7c1b61ef8f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uHwtXZTSju3V7xRsxoCsRJR0qpmAaRoVNAIysTW9H1bA%2F3HfkLdFhMLAPmXutf9pptKWRP3fOyQYpPDVYYfgpaHDOq4EA8vGHccqcV6RVXM0h3GuMvkhDUDf%2Fvr3FuL58mjT7TE3lUz2Y601XQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 6048
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae99cbca56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/webpack-d8440d89d291090e.js | 76.76.21.93 | 200 OK | 7.3 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/webpack-d8440d89d291090e.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8594) Hash6954362172b178b32b1d54a12494c54a c34c7f8697acb0b620597eff6600bd3510561431 509288c24f58c62c52b3d1b45e2d5000dafbee758821cb477c3fdaaa00dac30f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-d8440d89d291090e.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27426
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="webpack-d8440d89d291090e.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"6954362172b178b32b1d54a12494c54a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/webpack-d8440d89d291090e.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::qs5mn-1713412133314-23d297654c54
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/walletconnect.png | 172.67.75.76 | 200 OK | 1.6 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/wallets/walletconnect.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash78af89866774086b393a771bf2dc0eca 5f708af6b8f0586466aa0fe022d4e6b6ecfa07bf 7cfe65f11aafe9006a6ef242ce1b12374c571fdb919aa089acc7ccf9052aa5a5
GET /web/wallets/walletconnect.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 1580
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ef943e7c5cf7b187cf20a8c6308a03ac"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GNB3RsAwo%2BnIaei0uDUCwtcFRbjjmzSCVyB025kQNpCrwXGSkNHhw1p01ywAZBbd3yJ2%2Bue1WAoAobBJqZR0QvV8DPWma8nk5Dc14LPrhGgJ7CwLl3RtubWNsMkNIN7Kvrw52W%2BxMvSyBNdBHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 6049
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae99fbde56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/metamask.png | 172.67.75.76 | 200 OK | 5.7 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/wallets/metamask.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash94915cd04c09db3b051619b5473e1eba e2704378fc1d79faa2e3b054299eba38da0c0084 3241b9711fff18a21c24c8331f9c6ed6c79cd2647008818bd68b15ee0291dd26
GET /web/wallets/metamask.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 5738
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "42f9ce2617d6202af597e10d33973b34"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NEy93jDpadfIWLTDhlhe5VPpZlekjv54%2F3Nx6NE5A%2FsFDFuOTgGekZtaPRUBPh8q47LOf7KJNJJvkLYmGsTLCnaTWZAvMzVHxidL11usLuKp9u201n8Oh%2BbQqiVy9l8qyNuoRydnpIgl9ajCkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 6049
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae99fbe056a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/ledger.png | 172.67.75.76 | 200 OK | 1.1 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/wallets/ledger.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit gray+alpha, non-interlaced Hash05c6aca3b2fc8f03e01b480dc905625b 1aff06fe61565ce1951622b1759a5889f81e61bb 9f515d462e131ea77573fca64bb2a138dc497434b928c372ecdf8a83e33217df
GET /web/wallets/ledger.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 1061
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "fc5d6f0a18bc8c7811331e13d9d7c96f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V42tCBKXSCJE0S4J5a4u36T8auwPIqd1feFNNFJOs0ezPNuLae6FDNO%2FZEPhBR6O3UukzkN8K3Sg4iR9t59dufnSEAmWZpKkPAchxhmcTZkfuDw1dN6sRCin%2Bds07XhKMg7S%2BOV3CXSwLvlm4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae99dbd256a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7545-3bfaff3f1913e080.js | 76.76.21.93 | 200 OK | 9.3 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7545-3bfaff3f1913e080.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (12040) Hash9f5f8702cd0d7f8b1f9f1644627cbfed 3b10624457c79ce1930fb8e6d147638ac031b00d 7eb03ed3e7560f38d35c4a649de0bcee09464eafa83fa6fbdd740f3caa5dd631
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7545-3bfaff3f1913e080.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13513
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7545-3bfaff3f1913e080.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"9f5f8702cd0d7f8b1f9f1644627cbfed"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7545-3bfaff3f1913e080.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412133627-7517e3399495
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/binance.png | 172.67.75.76 | 200 OK | 1.6 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/wallets/binance.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hash355630229f4891e998c71d378b7a4e16 0a2c961f6fefb268075675fa3cab150c100157e9 820f2729d566b9d78993e53ec403b1b84def82ea1a181adce24ed558f7d58c5e
GET /web/wallets/binance.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 1588
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5c6735d127234cb2d01c5a96a1eb48c8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2BMgj2X%2B6lBtW47HaUmSqrqYjSiFu5m8M%2BA1pdbAJHcgLy9OZjNZN9OZjWinLGHLAg0KyQNNHOFlkMVQ%2FPoA%2FGBhdJEzeiQ5EgUTFyvEYma0uAYPt%2B3MW8ILdNCH%2FAt%2F3JiZqHF3mQ7%2B%2BL7bOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae99dbd356a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/framework-9910fad42761648c.js | 76.76.21.93 | 200 OK | 47 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/framework-9910fad42761648c.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65200) Hash46b92cd043fe51d3018c33c2faccb623 2e49e403cd93b8bd131b754c8bb2cd95ad527c1f 6a002e3da5cdfbe42873232c822d868fd714564876f69f22a7187b989fa393ba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-9910fad42761648c.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27426
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="framework-9910fad42761648c.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"46b92cd043fe51d3018c33c2faccb623"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/framework-9910fad42761648c.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::vp4j6-1713412133316-483b314fd192
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| hub.snapshot.org/graphql |  104.26.13.125 | 204 No Content | 0 B |
IP104.26.13.125:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecthub.snapshot.org Fingerprint51:92:07:17:6E:EC:8E:CB:EB:58:16:46:A8:FD:FD:5C:48:F4:F4:69 ValiditySat, 30 Mar 2024 23:28:55 GMT - Fri, 28 Jun 2024 23:28:54 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /graphql HTTP/1.1
Host: hub.snapshot.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:56 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: content-type
access-control-max-age: 86400
x-do-app-origin: 9134fcd0-e6bb-11ec-b1dc-0c42a19a82a7
cache-control: private
x-do-orig-status: 204
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OmYrDjvA88JJiJzEkbyh3PYaXDNEermntyjGlzIUYZ9Y4sWoEvtlDMlxx4JM9EYE7sxP%2FUom0p2m30mjK8LsMGx%2FSgEysEqoVM17LLX%2BtNTqqBh2xUThvz1RCezdLlDaMkI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761ae9a0ccb569b-OSL
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/decorations/phishing-warning-bunny.webp | 76.76.21.93 | 200 OK | 4.9 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/decorations/phishing-warning-bunny.webp IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hashc73199f7cfd8a30afa8182b0b5d9e2e5 52a839df66e697b6a63c609fc3f978bf43b5edae bae96bf0ec8c48d43751e0a3be260ce9c57feaf129b80f6e6dea7f1612c8dd39
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/decorations/phishing-warning-bunny.webp HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 27406
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="phishing-warning-bunny.webp"
content-type: image/webp
date: Thu, 18 Apr 2024 03:48:56 GMT
etag: "c73199f7cfd8a30afa8182b0b5d9e2e5"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/decorations/phishing-warning-bunny.webp
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412136426-28818c3ed8ea
content-length: 4850
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8394-2b149c4bb6108264.js | 76.76.21.93 | 200 OK | 97 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8394-2b149c4bb6108264.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (44056) Hashca02cb21718db3ab448c7d8204be089e 1e3060cccd6eb155b6f35cdc6d1c33bf7dca49ba 530475dd121227c652eb45b2241e84f8c01b5c5d8937762d304e7b71b43b442d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8394-2b149c4bb6108264.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27406
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8394-2b149c4bb6108264.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"ca02cb21718db3ab448c7d8204be089e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8394-2b149c4bb6108264.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jhvdv-1713412133322-5fcc832d6335
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/chains/1.png | 172.67.75.76 | 200 OK | 1.2 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/1.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit colormap, non-interlaced Hash236ecd183d696e37d949d8cf70a2bbd5 8eaa89051b171e1a35e226ca5d2eba058f7a6253 4540f0e53f6ed66e0dea773269c2b0d5698ebb1f7025cafe2358d6b78ac421d6
GET /web/chains/1.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 1179
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "27a3beb7256d43dbe9c6e41a4550d156"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2BdvzhyI5NnpjIqVvZcvIH2vdoS%2F41VDl1sbYtYIzyUoTpRxQKK1bzkfLZhGxsq75r6DIMkd76dEe7Ccex0JB2zeRHljHJ4yjy5UNk9YP7b2PvRZlGlvbsHQRpzZ9hKZIU%2F1Mc5HWoNCcA7m3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5938
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae9cbf8b1bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/324.png | 172.67.75.76 | 200 OK | 738 B |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/324.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hash140504c38ceb01bbbe1632ebfd047ec5 f301254d5972ead4839dad92b9c322dde76a6e75 ad9d9c13aed41cdaaa4749bb6337aced91d1fe7ad378e1e1ac5525a706a21fe0
GET /web/chains/324.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 738
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "141f703bc2926deca57513a5c3c8eb04"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3abSMnwVKxIFYCTz4NZS22RBt6H8YtPqQrYp8NR2Ffhdai3EgZ6JRxfZfNHfXLVJI95RKlmvthbwxo7vbXx6HqhpEiBNqMO6uIw9PHnNxVUbF%2BlCBaCXPFQuU3kOp4jFrSn9r6ey0qPZQ1alBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5938
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae9cbf8c1bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/59140.png | 172.67.75.76 | 200 OK | 4.0 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/59140.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash1ceb847edb47e9c5c20a1fb57a1f7deb 828fdeffb61d6e22b516daf84e6471692bc2a4e7 d278067eb81dbb2506b25e1fc008f941ccb491c1d1bad680482661119209f346
GET /web/chains/59140.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 4007
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "6f83df69f71339cb5769c76cd3cc84d5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MZaLM7NxR5L8degC%2BC9hDnI7Cilx9kH4g06bvW2ibTh5bfJ4p53hC1oY3CDIwmgEIfKOCGs1zeJEXWIzvWnNLXUDcdXjlKCu0geeGAlKxCLl9G4cxyfAf8sSq20pMwAoptG4cyWhrT0HGw2pYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5244
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae9cbf8e1bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| assets.pancakeswap.finance/web/chains/1101.png | 172.67.75.76 | 200 OK | 86 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/1101.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced Hash8d6cd83ec34994330abbebd0a65c2f7b 9a84b286c689dba40169902e89a36022a474371e 476e4017b3f83e891214f87e60bcfcd1624f905065f436f745491222f0736f6a
GET /web/chains/1101.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 86383
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "7e76b94cdc0f9628ecef8c8bb234f3ba"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qoa2WTvXokOlmO%2FrErfDqQiTCeUA1qXXc%2BTJEzNV2cK90%2FRJGhpn%2BsgpkDckyytSwFybVsWo0EWk6G6SdZYD3OlPbV4n2KFsQbaancQiJIvAcaoS%2FHTevfqBs9Euw%2B7Al%2FjGc18oCKZ5DAVXcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5938
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae9cbf8d1bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 91 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash24792c65efe9e9f130d7fe0c30c55fe1 f78158dd48372e4c3bf73d3e8f0b3b4b83836ea6 3b15e751702fdbe761f6502c1c665b8ef993f48a84f3c8eddde5a9598c550edf
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 1032
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| aptos.pancakeswap.finance/images/apt.png | 172.67.75.76 | 200 OK | 808 B |
URL GET HTTP/2aptos.pancakeswap.finance/images/apt.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintCA:F7:DB:93:BF:AB:FF:53:F2:3D:11:7D:D7:8C:62:B7:F4:3B:80:3F ValidityMon, 12 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced Hash74168d688d61e90d33aa8c00dbc38d76 9dba71d2bd1ae649f81a36a966faad7049cf705a 260092dadbeeabbf5bc49e2cec9342dcdc2e0a561d9dc24cb290eab6021ec7b4
GET /images/apt.png HTTP/1.1
Host: aptos.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 808
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="apt.png"
etag: "74168d688d61e90d33aa8c00dbc38d76"
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/apt.png
x-vercel-cache: HIT
x-vercel-id: arn1::qv26q-1712337244438-95e4b0a0b093
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3O%2BkftNFz8miYdpc1j4KvGkN7WKihn13yk%2BlAMgDX2bMtUW86KzEnaaWyF4MWYu4%2FsUqy9KXrCCUUveUnIjmJ%2FlKGl0qeZAQ4vtjC%2F0g7efjLWA67kVACRpgpHbfK8vZUJhd%2FvBWpkI%2FJ%2BA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761ae9d1efb56ab-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWttc0Q2Z1Fab0xYZ2lYekZKWlRmQjFMMlNZM3FlRWlRcjFnVk5ibnV2TjVvUSIsInN1YiI6IjQ5MWJjZTk3YjM5NzNjODc4MTAzOWYyMDkwYmVmZmQzNTlmMDE4M2RjODQ3NWFmYTgzZDJjNDQ3YmRkYWM5NjYiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.WxukkLlfC-1-G_1Lnfa96w8I78EJ0-r3ZvZee1F4C_-JPjS2EJbO93QRkdzkYwFukx6An61HOhLF1aTdF1-BCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true |  3.73.141.134 | | 0 B |
URL relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWttc0Q2Z1Fab0xYZ2lYekZKWlRmQjFMMlNZM3FlRWlRcjFnVk5ibnV2TjVvUSIsInN1YiI6IjQ5MWJjZTk3YjM5NzNjODc4MTAzOWYyMDkwYmVmZmQzNTlmMDE4M2RjODQ3NWFmYTgzZDJjNDQ3YmRkYWM5NjYiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.WxukkLlfC-1-G_1Lnfa96w8I78EJ0-r3ZvZee1F4C_-JPjS2EJbO93QRkdzkYwFukx6An61HOhLF1aTdF1-BCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP3.73.141.134:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWttc0Q2Z1Fab0xYZ2lYekZKWlRmQjFMMlNZM3FlRWlRcjFnVk5ibnV2TjVvUSIsInN1YiI6IjQ5MWJjZTk3YjM5NzNjODc4MTAzOWYyMDkwYmVmZmQzNTlmMDE4M2RjODQ3NWFmYTgzZDJjNDQ3YmRkYWM5NjYiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.WxukkLlfC-1-G_1Lnfa96w8I78EJ0-r3ZvZee1F4C_-JPjS2EJbO93QRkdzkYwFukx6An61HOhLF1aTdF1-BCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4lkoN9sbNgOiAtekZ6VU2Q==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: Nc+EdAqvqQEmNTS1U0QBymG6Jbc=
date: Thu, 18 Apr 2024 03:48:55 GMT
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4602-da9d21c9de1fa6ac.js | 76.76.21.93 | 200 OK | 64 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4602-da9d21c9de1fa6ac.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (20340) Hashd62a68cae530b67f21ca4356527d246d 1b071289a4dc4feeb4a532484cb7c5d1ea1e927e 6b835fb8b29443bd9fd373acbfa7bff964916ee5a36cb2129665ca8292c57f6c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4602-da9d21c9de1fa6ac.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4602-da9d21c9de1fa6ac.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"d62a68cae530b67f21ca4356527d246d"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4602-da9d21c9de1fa6ac.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412133334-3f5d20efe34e
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:56 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt3OVhxdGloOTF5S1ZhNVpEV0I2S3pNQlFZRVhjZDdQV1pNOWlVWGhNaWhhZSIsInN1YiI6ImI0OTMyNzZjOTNiNDM1MjM2YTUyMjE1MjZjZjk2MDc5ODhhYzg2OTgzNTQ0MTI2MDkxN2I1OWVhNjc0MDczOTUiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.9-620D1TaG5ro9MeRrdsyA89M3mjuUHvuqhWYRWLwKqz_jsrnrIlaDdrf_4AWX4FWr7OWviCzGnbSZlxFV0jBQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true | 3.124.182.184 | | 0 B |
URL relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt3OVhxdGloOTF5S1ZhNVpEV0I2S3pNQlFZRVhjZDdQV1pNOWlVWGhNaWhhZSIsInN1YiI6ImI0OTMyNzZjOTNiNDM1MjM2YTUyMjE1MjZjZjk2MDc5ODhhYzg2OTgzNTQ0MTI2MDkxN2I1OWVhNjc0MDczOTUiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.9-620D1TaG5ro9MeRrdsyA89M3mjuUHvuqhWYRWLwKqz_jsrnrIlaDdrf_4AWX4FWr7OWviCzGnbSZlxFV0jBQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP3.124.182.184:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt3OVhxdGloOTF5S1ZhNVpEV0I2S3pNQlFZRVhjZDdQV1pNOWlVWGhNaWhhZSIsInN1YiI6ImI0OTMyNzZjOTNiNDM1MjM2YTUyMjE1MjZjZjk2MDc5ODhhYzg2OTgzNTQ0MTI2MDkxN2I1OWVhNjc0MDczOTUiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.9-620D1TaG5ro9MeRrdsyA89M3mjuUHvuqhWYRWLwKqz_jsrnrIlaDdrf_4AWX4FWr7OWviCzGnbSZlxFV0jBQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Qrygdb7PY1j8FElj4he23g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: 0Z3kW4XHvcsrP9OxFO8MNpa85Q8=
date: Thu, 18 Apr 2024 03:48:56 GMT
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/data/IZLMtatxGM1y1qcj4EcEm/swap.json?showTradingReward=true | 76.76.21.93 | 200 OK | 96 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/data/IZLMtatxGM1y1qcj4EcEm/swap.json?showTradingReward=true IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashb63c32e9ce9dfff48067fc6d9cbe2beb 354e002917a7bfad4098cc0b9769d8e3e552ddf2 ddcb0aa7a69da12d7becf4ffd3dbd84c6fa98dc86dfb08480f1806e96702d27b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/data/IZLMtatxGM1y1qcj4EcEm/swap.json?showTradingReward=true HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
purpose: prefetch
x-middleware-prefetch: 1
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
date: Thu, 18 Apr 2024 03:48:56 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /swap
x-middleware-skip: 1
x-robots-tag: noindex
x-vercel-id: arn1::hl429-1713412136542-354cd4174c1d
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-ed675b153cc8567b.js | 76.76.21.93 | 200 OK | 253 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/worker-chunks-ed675b153cc8567b.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size253 kB (253346 bytes) Hash33d9bbcbcef3a9304bc8bcd2a6c9cecb c3c9e58d36f1aad04dba2b03204b4cb0ef29b334 7fd9ce983f68bb663f6064458935dfd3af549941887c4a93a6085da7e4959592
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/worker-chunks-ed675b153cc8567b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 27428
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="worker-chunks-ed675b153cc8567b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:56 GMT
etag: W/"33d9bbcbcef3a9304bc8bcd2a6c9cecb"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/worker-chunks-ed675b153cc8567b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412136482-028d9475b6b8
X-Firefox-Spdy: h2
|
|
| www.walletlink.org/rpc | 104.18.37.8 | | 0 B |
IP104.18.37.8:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rpc HTTP/1.1
Host: www.walletlink.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MMnAqT+pv6XRReSOkh3nrQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 18 Apr 2024 03:48:57 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OoLmlwevugnI283ljy1G4hz8ypw=
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=uIhNslRzjEjqvnq9JJhzXbM_U9_uCYm8zbEiIsCeaw4-1713412137-1.0.1.1-l9iteOXQBdi_rF_00QcA82GRruSQDG6V8Fmho9eMPXOL2P.mEN4_lHx49oq0sGdmY8xwhshbyUmMdlYkstIgig; path=/; expires=Thu, 18-Apr-24 04:18:57 GMT; domain=.walletlink.org; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 8761ae9e0e627127-OSL
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:57 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:48:57 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-334KNG3DMQ&cid=1652407748.1713412137>m=45je44f0v873867766z8834067533za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=547673380 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-334KNG3DMQ&cid=1652407748.1713412137>m=45je44f0v873867766z8834067533za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=547673380 IP142.250.74.163:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint0E:DD:25:54:7B:C3:7F:EC:27:35:B1:EC:15:C4:B7:D2:09:71:3B:68 ValidityMon, 04 Mar 2024 07:26:33 GMT - Mon, 27 May 2024 07:26:32 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-334KNG3DMQ&cid=1652407748.1713412137>m=45je44f0v873867766z8834067533za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=547673380 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 18 Apr 2024 03:48:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 47 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash8a8490d3e9cb840dc74f151d1552aa9b ebfd755c2e5578cee5135f5d462e69ab323c55ca c3989cfb67b210583ab007eeba865b7386847ea9fe42cda598496db0ab312373
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 51
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1972-9e91c3e6853df63a.js | 76.76.21.93 | 200 OK | 18 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1972-9e91c3e6853df63a.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (12206) Hashf48d620de69ab88820f7e9e05ae9500a 0361e49e3be4effe80f3c3ad796035641f38b286 5430085c62aed6e8a0f531b6ef9b0903f49c4b59ff23b07113c537b40b87f331
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1972-9e91c3e6853df63a.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13516
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1972-9e91c3e6853df63a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"f48d620de69ab88820f7e9e05ae9500a"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1972-9e91c3e6853df63a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412137353-ba2c154e9a61
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/b6ee4efc-f53e-475b-927b-a7ded6211700?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 9.2 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/b6ee4efc-f53e-475b-927b-a7ded6211700?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hash835880c74b2b75b4b6f5f0af0115438c 3cbb7c955c08ccbd8e4e0a2031bf8daa0754aafb 8c8d2bda4f39810c8650a74cece803ff55b40bd234f9ca35068b6155e0bc7555
GET /w3m/v1/getWalletImage/b6ee4efc-f53e-475b-927b-a7ded6211700?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 9194
cf-ray: 8761aeab2a8156a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 34865
cache-control: public, max-age=31536000
etag: "cf9TnuhjIqeWjX901zZxsJee5JUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=23+0 c=5+25 v=2024.3.2 l=9194
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=DRQWio2CcoIOrOB.UtTe_J7nWixrOybP9V8.7yoT4XA-1713412138-1.0.1.1-WCKQXcaITgnF7BbPr57ehYlPIGJInurexaaZVlw7bzQ2WKF35yXbyV18tT5uOOiKdQkWX7Npsl7uxtezM41r7g; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8530-6fe22d42fec42cf6.js | 76.76.21.93 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8530-6fe22d42fec42cf6.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (4050) Hashc992e122cf3123cf16b6d1b8bc000bc2 1185a5a9eb5deb8301d5948f53c547b22b7a9509 399c78707bb4395617a5b14f9a9bae85fec3cae331b1024c717ebf340f2bd9a7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8530-6fe22d42fec42cf6.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13516
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8530-6fe22d42fec42cf6.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"c992e122cf3123cf16b6d1b8bc000bc2"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8530-6fe22d42fec42cf6.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hl429-1713412137505-e29dbff7d96d
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/fbd441cc-e861-46dc-48ae-a04228ddb500?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 9.7 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/fbd441cc-e861-46dc-48ae-a04228ddb500?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hash2c5be8f0d595a9248edba92d0419c9a7 422f1ca635998f8cdaeec9e7b37e200d0d5842ea 9584c8da5e38495a93fa58ed0efe855fd33a41aa972bcd33ad1d867828964517
GET /w3m/v1/getWalletImage/fbd441cc-e861-46dc-48ae-a04228ddb500?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 9660
cf-ray: 8761aeab2a8356a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 34865
cache-control: public, max-age=31536000
etag: "cfFJ943IWAd-AliTnsJ2QbJY_MUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=13+0 c=3+20 v=2024.3.2 l=9660
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=IjSad1p29UwblV16PP3QJT.0f5dEsRm8oAQJaPTowVI-1713412138-1.0.1.1-l3R_VAKBwtqVdlljJlYAi7Nf225ok4WrsXLPoiZc2a4Dow.wBNUhFzbj1E3hdKpyhPN2TDMPoORCpxHscsH.5A; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 2.1 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hash2052ea08b332c87388dc42097624cb20 8b82e1e2dd5a482ae90433c763b268b99f6cf093 11a824e4c63932ec7c2684c8c9554c84461efb5d731d15387d77bb5c3e78f9d5
GET /w3m/v1/getWalletImage/a7f416de-aa03-4c5e-3280-ab49269aef00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 2090
cf-ray: 8761aeab2a8556a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 19013
cache-control: public, max-age=31536000
etag: "cfeV6YXTHd_vyfarpvxqg62GCGUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=271+0 c=0+23 v=2024.3.2 l=2090
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=UJglUkb9G_er3CgaG7gzEjSw3aALnDgfswEA8gGJ2J4-1713412138-1.0.1.1-2gAIp2g6zLvhVr8iXr97tJ_LPYbEtXiyNbGqjgxIQpgVPN6gX4J6SsLNEFt5EohGYOgc5yAaFtDfaqCrw.8H3w; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1518-807be149c1b04211.js | 76.76.21.93 | 200 OK | 7.8 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1518-807be149c1b04211.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10590) Hash3f46977d9b0661718797f9f6a81def97 7827f12721ec5a28d8fc5164f18ad9457c59b6a7 099d9417752b9ce255dfb29a959d0dc91a2baaa6ac71b8d9e408e7ff87044ba8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1518-807be149c1b04211.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13516
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1518-807be149c1b04211.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"3f46977d9b0661718797f9f6a81def97"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1518-807be149c1b04211.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412137349-8395aa1b4e6a
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8210-a585b5bf27b841b8.js | 76.76.21.93 | 200 OK | 6.6 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8210-a585b5bf27b841b8.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (2348) Hash413d76e3c613fdf5a99563847e8bb75d 48bd792083c91a80588c5b74127d7fcc3dc7f9d9 d42bde03006cc07bcbdbbb411c5614374a10220e7034423208abd735728de480
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8210-a585b5bf27b841b8.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13517
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8210-a585b5bf27b841b8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"413d76e3c613fdf5a99563847e8bb75d"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8210-a585b5bf27b841b8.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412137491-f1e429550b1c
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/c39b3a16-1a38-4588-f089-cb7aeb584700?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 5.1 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/c39b3a16-1a38-4588-f089-cb7aeb584700?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hash7cd3960a5002ec8ffd672267dbd184cf 9c353d573e5f9cb57df4068ced24b2455b6f3ddd 1562ed280e5486999bfa41e9eddf46996b078b54e14fff9748b427c793bc6969
GET /w3m/v1/getWalletImage/c39b3a16-1a38-4588-f089-cb7aeb584700?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 5054
cf-ray: 8761aeab4a9256a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 34865
cache-control: public, max-age=31536000
etag: "cfzxenqWecI6yJVG_C8-69sArsUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=22+0 c=0+12 v=2024.3.2 l=5054
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=BJipBty4KKd5swuG4B8xXDeNfbUQd18JtrySbhEBWe0-1713412138-1.0.1.1-Kxs_3vHbTGMrj8Wd8I73RkGK_6fy1yLTinnITl3hUgkwXJfcbiJtsy4A7JtxwfAKS5IVMKDHl_Jr3KratmgqzQ; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/cmc.json | 104.26.3.169 | 200 OK | 425 kB |
URL GET HTTP/2tokens.pancakeswap.finance/cmc.json IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size425 kB (425269 bytes) Hash2fe572f06d5051baa2ccd9f664963484 f0a0ce856c2e8356f0c2dad7b7ca5e215624fad5 2fe7a8899a8220c3c8019270ee0ce7d602526f2a0bd2311f8b04de6e715f4179
GET /cmc.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f63eedff26a5bbfc2fdea60fd05839a7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vPXhK5yfUVbDS9L%2BoHsxUMfb7o1AFZz%2B3oQ4FhmNOEf8CTcUQVRL1qqbw4wTcaMhaL%2Bfo7XSLyKqJjKPKZP6CZdbqFR96vT1O9DikscE2Zx46OgSQXxv%2BTU2Nzq2TPdgwED6mrIJnoSZKR%2FxWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761aea05dac5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1866-e72e60159ba8eed1.js | 76.76.21.93 | 200 OK | 9.4 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1866-e72e60159ba8eed1.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5640) Hash87db549cda1723529f9dd114926526b8 228404ee3857db527e42152b0f6c5c456bb2c322 648171548c3f43a03fd1e2686905dee45c048aa70640c61cd67a4c456d4a5ad7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1866-e72e60159ba8eed1.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1866-e72e60159ba8eed1.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"87db549cda1723529f9dd114926526b8"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1866-e72e60159ba8eed1.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412138764-6bcc9c3343ea
X-Firefox-Spdy: h2
|
|
| pancake-trading-fee-rebate-api.pancakeswap.com/api/v1/campaign/status/0/type/rb | 76.76.21.98 | 500 Internal Server Error | 56 B |
URL GET HTTP/2pancake-trading-fee-rebate-api.pancakeswap.com/api/v1/campaign/status/0/type/rb IP76.76.21.98:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjectpancake-trading-fee-rebate-api.pancakeswap.com FingerprintA5:FC:37:2C:1A:5E:1C:05:39:EA:D0:56:25:28:0B:6C:A7:EF:C0:F3 ValiditySun, 31 Mar 2024 15:51:36 GMT - Sat, 29 Jun 2024 15:51:35 GMT
Hash2b6bca77cf7ed26b3abb200e2d0bd0ab c86dda9b97300585e3c2d102725da0c4a9d16409 4b74840efef56a2c27780c7ad4b19c350eee08a3eaf4f7c93898cc66cc21180b
GET /api/v1/campaign/status/0/type/rb HTTP/1.1
Host: pancake-trading-fee-rebate-api.pancakeswap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
access-control-allow-headers: Accept, Content-Type, Origin
access-control-allow-methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
cache-control: public, max-age=0, must-revalidate
content-type: text/plain; charset=utf-8
date: Thu, 18 Apr 2024 03:49:01 GMT
pragma: no-cache
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-error: FUNCTION_INVOCATION_FAILED
x-vercel-id: arn1::4hk2v-1713412136020-e6b6883e6d07
content-length: 56
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:01 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 10 kB |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash70b8f0ff2e15562774e1dbf3cd9806b5 e9544fb77edb17410ff2594d4ecf707eac859f4f 24690f3223d4718ff0d7b1c0fbfae248c4348f38027bce0c1d7babce555aa7c2
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 649
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:01 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/swap-1de892e78c30cd84.js | 76.76.21.93 | 200 OK | 38 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/pages/swap-1de892e78c30cd84.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (28018) Hash7fb4171fd9c17d8138eeddda4b3a30be 6548c094a275376b238995e1a16a7b78220c366a b5bd9eb5081685cca9f3a2a9f4404b5f0e43f8e9c9be303d9fd116651d971137
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/swap-1de892e78c30cd84.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13517
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="swap-1de892e78c30cd84.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"7fb4171fd9c17d8138eeddda4b3a30be"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/pages/swap-1de892e78c30cd84.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412138788-b59d1817f62c
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1383-da8ddc1e8fa88ba8.js | 76.76.21.93 | 200 OK | 20 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1383-da8ddc1e8fa88ba8.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8427) Hash81775f0243f7ae5c7c890580871eede4 06161a1b0242d78deb1e47eff177e7762d446650 613bef79874b81063b390dd2f2d37a432702a1742a5bdd43fa58ca4d389b960a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1383-da8ddc1e8fa88ba8.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1383-da8ddc1e8fa88ba8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"81775f0243f7ae5c7c890580871eede4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1383-da8ddc1e8fa88ba8.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412138772-ba72eb8439ff
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1978-e2ac2c2e731961b2.js | 76.76.21.93 | 200 OK | 3.3 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1978-e2ac2c2e731961b2.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (2266) Hashaa17dba3c6bb132a0184dab2c3711b02 fe901e0a57bc68163662a90cfabc28a03e5bb4e8 9287c2d5c8c36d8453d96be82de48fa1d1333f6d7094df460cd37f6de934f527
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1978-e2ac2c2e731961b2.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1978-e2ac2c2e731961b2.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"aa17dba3c6bb132a0184dab2c3711b02"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1978-e2ac2c2e731961b2.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412138785-f43a398041ad
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:05 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 50 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash6a5564d4873aaa3f0bc9678315f2e5a0 994f87cc80cc0a4920f9fd2a46400289576dd63b ebab68b538f6fe84c4fd557c42c81100265579b1170635f7cd3fb2f3746f3b86
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:01 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 79 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash0c187f41c55d68fe29035f88169a4c0b 0f13a15aaf9691e8615334900d81ee95f3da36a8 ae42b465fa2ddc61856b3eac9feef3c82d39e2050e13bce3f380422366856867
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 649
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:05 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 50 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash5e1b67a5d68729302d2169ddf2c6a6f5 dac988e39377da6d5e06794e3c33ebff84e7cc7a 10e390aff046593e6ed96b676f2410ba245addbbb829ef0715d4c1b5ea16010c
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:02 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8210-a585b5bf27b841b8.js | 76.76.21.93 | 200 OK | 15 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8210-a585b5bf27b841b8.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (2348) Hash413d76e3c613fdf5a99563847e8bb75d 48bd792083c91a80588c5b74127d7fcc3dc7f9d9 d42bde03006cc07bcbdbbb411c5614374a10220e7034423208abd735728de480
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8210-a585b5bf27b841b8.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8210-a585b5bf27b841b8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"413d76e3c613fdf5a99563847e8bb75d"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8210-a585b5bf27b841b8.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412138768-3c201df3b9ba
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6074-142cf53623178492.js | 76.76.21.93 | 200 OK | 21 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6074-142cf53623178492.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7862) Hashe5b6187761df30c4fb5bfa3174d5d3cd 23401999d77ea9f407c0f5f3aa8966e5ac4c6f20 e6d19d72140ab70e8aac44b134148e1ea1fa307c4aec7b3feee9cdfe575a10fb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6074-142cf53623178492.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 1
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="6074-142cf53623178492.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"e5b6187761df30c4fb5bfa3174d5d3cd"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/6074-142cf53623178492.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412138780-9172796e4f92
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 77 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashe5cbffd5120fbf7d8d8120d3bccbd250 79dea98898af291dcd59f5a357f92753eded0754 30ef8ae0e2a4896573f3e2c126bb5824c66c427458ce171847743bcd1990ecc4
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 649
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:05 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 47 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashb3f7405e230e315eebb1375e70c57050 9a7f56f2b85b75f5f28f0f52555bc9374c535727 a40d1a9fddb279f6a4651f86a677be338f9f0cebf6836ad276511910fa75f257
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:08 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:09 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:13 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 49 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash8282aba27184b6b672f296a1fd1132e6 5cd5fc9c4ab32046d4557916631b78281684f24e abe2532668389a2d5c57392b980e72c6e5d1f00d7d57cb4c946fdf2a38e56b36
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:13 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:14 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:15 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 49 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash5dddf5b4fb7d0224a8f9619db0fe58cd 4e197f38f23ce5702b7d40d758457743b52769c6 161737f754c627edeb69daf8eebe7c18af303d98c8e66a2ac5918fdce1febb1a
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 52
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:14 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 144 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash4fb15297b1e584e86b7c759a80c8af39 40afe3a9a87c72e6cc87b6641503ceccad7edf4b 2b855120ef7f42c6bf34fdb8935de42e7cb8bd89e9bdba934dd0f90bbecc5497
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 1865
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:15 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:20 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:21 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 0 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 18 Apr 2024 03:49:21 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| bsc-dataseed1.defibit.io/ | 75.2.38.186 | 200 OK | 225 B |
URL POST HTTP/2bsc-dataseed1.defibit.io/ IP75.2.38.186:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectdefibit.io FingerprintF7:D5:85:A1:FD:D2:03:6C:59:FA:82:F2:19:D2:77:B3:DF:8C:23:24 ValidityWed, 12 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Hash76ff1b2255eaecbd8eb527580b619bf1 b9d86c64057e02d4df1682f6a4a62109908af099 d76a405cc3c9c36d048f681d8809ee4ee0668162599e9f422d22c88c53c7cec5
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Content-Type: application/json
Content-Length: 1865
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:49:05 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 42 B |
URL aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text Hashf8f24fa0c857d8f2ee493e131b85ab62 cb6049f830a54d14a19d4104fc0bb5ab5fdedbe6 e0dadbc9cd1f1bd8ce3118cc3383e0d0f6d147f055265d498d99deea956ba00f
GET /update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 03:49:22 GMT
content-type: text/xml; charset=utf-8
content-length: 42
rule-id: unknown
rule-data-version: unknown
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7875-e604b8271f71ca63.js | 76.76.21.93 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7875-e604b8271f71ca63.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10313), with no line terminators Hash896a854ebbb38fc1965137a8fab64789 5d9f4394da8ff66fc2e7c24693feff3e43155302 54fc8b94e6f9031526cb84c32f641c23a4d17b17a753eeeb289a776711b5cb94
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7875-e604b8271f71ca63.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7875-e604b8271f71ca63.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"b00edc9b681c54e9a79de581d19f89b3"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7875-e604b8271f71ca63.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412137496-39c733e20a31
X-Firefox-Spdy: h2
|
|
| verify.walletconnect.com/e542ff314e26ff34de2d4fba98db70bb | 52.57.86.163 | 200 OK | 0 B |
URL GET HTTP/2verify.walletconnect.com/e542ff314e26ff34de2d4fba98db70bb IP52.57.86.163:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectverify.walletconnect.com FingerprintAF:A5:B3:2A:56:4F:A2:53:AF:7F:63:AD:1B:CA:9C:F3:24:76:E3:42 ValidityMon, 05 Feb 2024 00:00:00 GMT - Wed, 05 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: verify.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: text/html; charset=utf-8
content-length: 190
content-security-policy: frame-ancestors https://*.pancakeswap.finance https://pancakeswap.finance
x-csrf-token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE3MTM0MTU3MzZ9.qIBjVAPU0_UmGKy1yUVyHAkDFdpnhSO0SQAjgpnW_vQ
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/coin.png | 0.0.0.0 | | 0 B |
URL GET pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/coin.png IP0.0.0.0:0
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/coin.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js | 76.76.21.93 | 200 OK | 96 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash64d5b55a7f111087b544cf4b0184342e 35b50a5dc5480a08260d268b607863b4bfed23c8 ca53a6b9c69209f3131643e0f774fd9a98553247d75c104043aa6c318b083843
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4568.796287f6c5d648ca.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4568.796287f6c5d648ca.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"64d5b55a7f111087b544cf4b0184342e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4568.796287f6c5d648ca.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412137042-b706a42b44ea
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/8ab97594b6c016e8.css | 76.76.21.93 | 200 OK | 1.5 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/css/8ab97594b6c016e8.css IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (1460), with no line terminators Hash19ebf48c6941de89e944b419de9f69c0 1b5ae64edc5c8816bfb710884a2a5cca01bb709b 99821de931eb52e74868ab47007e1283af568141c0e9b67fb902b3c32048d951
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/8ab97594b6c016e8.css HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8ab97594b6c016e8.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"2afb49d6892e65c4154a498a99f55985"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/css/8ab97594b6c016e8.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jhvdv-1713412138788-5c16b962b39d
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWttc0Q2Z1Fab0xYZ2lYekZKWlRmQjFMMlNZM3FlRWlRcjFnVk5ibnV2TjVvUSIsInN1YiI6IjQ5MWJjZTk3YjM5NzNjODc4MTAzOWYyMDkwYmVmZmQzNTlmMDE4M2RjODQ3NWFmYTgzZDJjNDQ3YmRkYWM5NjYiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.WxukkLlfC-1-G_1Lnfa96w8I78EJ0-r3ZvZee1F4C_-JPjS2EJbO93QRkdzkYwFukx6An61HOhLF1aTdF1-BCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true | 3.73.141.134 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWttc0Q2Z1Fab0xYZ2lYekZKWlRmQjFMMlNZM3FlRWlRcjFnVk5ibnV2TjVvUSIsInN1YiI6IjQ5MWJjZTk3YjM5NzNjODc4MTAzOWYyMDkwYmVmZmQzNTlmMDE4M2RjODQ3NWFmYTgzZDJjNDQ3YmRkYWM5NjYiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.WxukkLlfC-1-G_1Lnfa96w8I78EJ0-r3ZvZee1F4C_-JPjS2EJbO93QRkdzkYwFukx6An61HOhLF1aTdF1-BCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP3.73.141.134:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectrelay.walletconnect.com FingerprintA3:38:A5:E6:60:04:20:E0:86:C9:9C:9E:6A:D7:35:A4:D4:04:A2:A5 ValidityMon, 07 Aug 2023 00:00:00 GMT - Thu, 05 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWttc0Q2Z1Fab0xYZ2lYekZKWlRmQjFMMlNZM3FlRWlRcjFnVk5ibnV2TjVvUSIsInN1YiI6IjQ5MWJjZTk3YjM5NzNjODc4MTAzOWYyMDkwYmVmZmQzNTlmMDE4M2RjODQ3NWFmYTgzZDJjNDQ3YmRkYWM5NjYiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.WxukkLlfC-1-G_1Lnfa96w8I78EJ0-r3ZvZee1F4C_-JPjS2EJbO93QRkdzkYwFukx6An61HOhLF1aTdF1-BCw&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4lkoN9sbNgOiAtekZ6VU2Q==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: Nc+EdAqvqQEmNTS1U0QBymG6Jbc=
date: Thu, 18 Apr 2024 03:48:55 GMT
|
|
| www.googletagmanager.com/gtag/js?id=G-334KNG3DMQ&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 287 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-334KNG3DMQ&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7711) Size287 kB (286791 bytes) Hashe1cf1d14ca8aa7e8958c0dd7178c909b 65201d8ab1588e333151f453b54fa399d126171c 2d4224aaab15b7767697c233baa535c0b42c7f3c994beceec63f1ea137d032f3
GET /gtag/js?id=G-334KNG3DMQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 03:48:56 GMT
expires: Thu, 18 Apr 2024 03:48:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 96489
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5168-df49aea4480b567a.js | 76.76.21.93 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5168-df49aea4480b567a.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10931) Hash49f28ccea58e4a050eda6adb87875688 a9eead0a11a7a042ffc7490aca1e58e0e9de8455 9f1f213f235f2d4ed66bbc7dc5ef843147bdd5791f2efe05766c79bde1152cea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5168-df49aea4480b567a.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5168-df49aea4480b567a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"49f28ccea58e4a050eda6adb87875688"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5168-df49aea4480b567a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412138606-80a6d7898fda
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=undefined | 142.250.74.168 | 404 Not Found | 0 B |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=undefined IP142.250.74.168:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gtm.js?id=undefined HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
date: Thu, 18 Apr 2024 03:48:55 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1580
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/chains/56.png | 172.67.75.76 | 200 OK | 1.2 kB |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/56.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 48 x 48, 8-bit colormap, non-interlaced Hash241ddcd7ff9541b1839703882d91d404 5b6ada17f54077b5e020d91af0c8ebe99b06bb88 8b7f54e9045d2beca6b4d124b97c84b9c2e84d14c709b6f3b160fae209ff08e0
GET /web/chains/56.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 1158
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2eba283c17774595a0733544bc896fba"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sf28G9Oq8uq3HDegoraP4oRWR4%2BDgYDQTWwcc94l7AtxmAvZY3tBHKARor%2FQk%2FAnrmBlSOhE27LbovOcuuITAkTd00byq%2BKrpoNV7RwS7wjp1uK73S%2FLvUJhhPdaFZwivnKxEnwz%2FRYYR9j43A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5938
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae9cbf891bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.93 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:56 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412136771-1a43dad99c46
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js | 76.76.21.93 | 200 OK | 96 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4568.796287f6c5d648ca.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash64d5b55a7f111087b544cf4b0184342e 35b50a5dc5480a08260d268b607863b4bfed23c8 ca53a6b9c69209f3131643e0f774fd9a98553247d75c104043aa6c318b083843
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4568.796287f6c5d648ca.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4568.796287f6c5d648ca.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"64d5b55a7f111087b544cf4b0184342e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4568.796287f6c5d648ca.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hl429-1713412137041-e855c4901244
X-Firefox-Spdy: h2
|
|
| api.thegraph.com/subgraphs/name/pancakeswap/pottery | 104.18.40.31 | 200 OK | 136 B |
URL POST HTTP/2api.thegraph.com/subgraphs/name/pancakeswap/pottery IP104.18.40.31:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectthegraph.com FingerprintAD:37:9B:F1:15:0A:93:00:64:CE:AF:AB:3C:14:FB:F0:C5:09:42:51 ValidityWed, 27 Mar 2024 23:12:53 GMT - Wed, 26 Jun 2024 00:11:13 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash191a0dc93a9f2b1512f8360627f02322 652cbc4091f112ce5f10bac4366c84cdb9fa360f 1f843043494a92cb617eadc03b120a636902f12da0d2f6026c3720274830215f
POST /subgraphs/name/pancakeswap/pottery HTTP/1.1
Host: api.thegraph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
content-type: application/json
Content-Length: 287
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: application/json
cf-ray: 8761ae9bcd32568e-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
graph-attestable: true
set-cookie: __cf_bm=_tWU7x3RxOYLqXxWFoFtTVcKS8L0GJxSa0wwqHygCM4-1713412136-1.0.1.1-ts1GIBbvgmNtzODzg3f0XvE8n0oympD.Saw6j7ZqrLwpzphcVxKkq5Tbo_4OSUBf2Io0EfmmB4_jWt5F75tp5w; path=/; expires=Thu, 18-Apr-24 04:18:56 GMT; domain=.thegraph.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-bnb-mm.json | 104.26.3.169 | 200 OK | 2.6 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-bnb-mm.json IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
File typeASCII text, with very long lines (2826), with no line terminators Hash2fbf6d360c108b0878de1ad59870325f 4b4d03ad4727cd19ff23072c541bfc1b22bdd122 d4c4ca6a56be0f07e367bd39d0446bf879bf428f8e24cfee17ab54cb45c50410
GET /pancakeswap-bnb-mm.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"faf77b0d59ffb744af6dfc91e89864da"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cOwwZSMMVc8sOKjPEZofqf949DGfruryrn4t6CkJwJIMI01y%2BIzzh3qioQLKHrYvHT%2BW%2Ft2EJSmIZH8FrRDvtytKGXcpmuMntmVyULLvE5ICpvWwGc893RBGSwbCtmHflpdD81aRK%2BChfn0b4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761aea04da25693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-extended.json | 104.26.3.169 | 200 OK | 113 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-extended.json IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size113 kB (112965 bytes) Hash4cd5c7c42fe392bbbcb089bfd6c2fcfe e656f87d73358d6996c656643ac8ca1d62235fda 85bff99f144d96a85ccb3c737cfa70f9a5279c03f7bacefb336a83033a2f98e6
GET /pancakeswap-extended.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f337df90a89a252279b03ca9ceaf71bd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gI6wn7Kyzl4UQWdC15ZLODFjyneZrzulAPx8luztVpzzmtyCq47zHWJeu3ZyjNsIYOiQC%2BRsW1qjVvwBbOjYwDpPzUK%2FJYrmebO9gvTL0Ify7PyJ3mP7OqS6M3QDw5lpXiogBLAyao1T5axE7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761aea04d9f5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3676.bfc136fe6917fba7.js | 76.76.21.93 | 200 OK | 142 B |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3676.bfc136fe6917fba7.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hash24d6a4793454886507bd9328d64a417f fab42afb4ca6da0409cfabb386b23b917517c4dc 3ebc9a16d6dec44f8ce35537c4a1775180c00fcd1346d2678fe900ddcdbb3a42
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3676.bfc136fe6917fba7.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 27408
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="3676.bfc136fe6917fba7.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "24d6a4793454886507bd9328d64a417f"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/3676.bfc136fe6917fba7.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412135269-b6b1cddf48c2
content-length: 142
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-extended.json | 104.26.3.169 | 200 OK | 113 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-extended.json IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size113 kB (112965 bytes) Hash4cd5c7c42fe392bbbcb089bfd6c2fcfe e656f87d73358d6996c656643ac8ca1d62235fda 85bff99f144d96a85ccb3c737cfa70f9a5279c03f7bacefb336a83033a2f98e6
GET /pancakeswap-extended.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f337df90a89a252279b03ca9ceaf71bd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jZ%2BXWfZIfPFp3sYWjTLK9lFZ8uv2qiVSyDXJhWtZJhgEk%2FNTgrDBZ%2BRNBvwNoTpjQuTltqE0UP%2BoLggDZyPkBEir2jGc9ee6ebG0J7jxOVxkzGFhEX3n%2FJp3Cv31EjeF8mXZWCWBZfLA%2FeTvew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761aea04da55693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.walletlink.org/rpc | 104.18.37.8 | 101 Switching Protocols | 0 B |
IP104.18.37.8:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerCloudflare, Inc. Subjectwalletlink.org FingerprintB8:73:73:A6:43:5F:26:A6:7B:B4:63:F2:19:C1:AE:68:20:D1:2A:EE ValiditySun, 10 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rpc HTTP/1.1
Host: www.walletlink.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MMnAqT+pv6XRReSOkh3nrQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 18 Apr 2024 03:48:57 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OoLmlwevugnI283ljy1G4hz8ypw=
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=uIhNslRzjEjqvnq9JJhzXbM_U9_uCYm8zbEiIsCeaw4-1713412137-1.0.1.1-l9iteOXQBdi_rF_00QcA82GRruSQDG6V8Fmho9eMPXOL2P.mEN4_lHx49oq0sGdmY8xwhshbyUmMdlYkstIgig; path=/; expires=Thu, 18-Apr-24 04:18:57 GMT; domain=.walletlink.org; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 8761ae9e0e627127-OSL
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/4725dda0-4471-4d0f-7adf-6bbe8b929c00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 3.8 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/4725dda0-4471-4d0f-7adf-6bbe8b929c00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hashda70910749e573bddd422e3be5867a44 da34c9ed83957d53bc31a9b59fd320ce02288a3f bfbc9631cd59d2c9b3d7472e49a53ff4e9680ab19c92b8af870d4a068a2a0a71
GET /w3m/v1/getWalletImage/4725dda0-4471-4d0f-7adf-6bbe8b929c00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 3798
cf-ray: 8761aeab3a8e56a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 34865
cache-control: public, max-age=31536000
etag: "cfVY6bvtQgA-Z381nmE5duLVCtUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=258+0 c=10+30 v=2024.3.2 l=3798
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=NhAd4iKe5V5mradoN_DvC0EycQQwrX032APQMWxPTJI-1713412138-1.0.1.1-nPRiz3t5mxC_LBZo_OBAB2eIlpGsNZz64r.7IcbnUtRPntlJ7EvS6zD_XagRoTnL131vucHpwPOaeSmEAGy9jQ; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5185.17a9876281b49b94.js | 76.76.21.93 | 200 OK | 119 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5185.17a9876281b49b94.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size119 kB (119438 bytes) Hash1cc2b2fc08b0a0772dcb49c0a2cc406e 02c4c094e825ca5343f5278f024f9ec2010298ce 6c8e7944580e21fe25821fd97a14dee32539407d22db0a6a3c64d39d4c72ae30
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5185.17a9876281b49b94.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27398
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5185.17a9876281b49b94.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:56 GMT
etag: W/"1cc2b2fc08b0a0772dcb49c0a2cc406e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5185.17a9876281b49b94.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412136542-6229185a50f9
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4861-3efb5f77e6bf6644.js | 76.76.21.93 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4861-3efb5f77e6bf6644.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (14258) Hash2e5f13e529de38f4c7a898034d048c61 de7104d674d9ae064d85726165f7b8eb14ed28b1 64cee8b66ce8ba35aefd2b129fd35cb40711119d777a296802ffcfff6e6e68cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4861-3efb5f77e6bf6644.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13516
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4861-3efb5f77e6bf6644.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"2e5f13e529de38f4c7a898034d048c61"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4861-3efb5f77e6bf6644.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jdrn7-1713412137359-db9a4e502ab2
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/logo.png | 76.76.21.93 | 200 OK | 23 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/logo.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash64b883944b59c73896ec40af9f94aab3 e0dfeea62f1ba1942c99d1e6cf14c2decb023d08 39c08d280e7f4636908c7648d8c779fa7b01a90ba04d869a94e461d4637de199
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /logo.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 23130
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="logo.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:54 GMT
etag: "64b883944b59c73896ec40af9f94aab3"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /logo.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412134480-429ca414a71d
content-length: 22919
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/favicon.ico | 76.76.21.93 | 200 OK | 19 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/favicon.ico IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeMS Windows icon resource - 6 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashfca50d530ea4525965eb6e11edde9601 9a975c80755a5deca6a0635e580c6dd5b57596a4 e11b366176c2f300801c5229aae56ebc008ccb5ccfd217c0aae0ebe4ae009f02
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 6228
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="favicon.ico"
content-encoding: br
content-type: image/vnd.microsoft.icon
date: Thu, 18 Apr 2024 03:48:54 GMT
etag: W/"fca50d530ea4525965eb6e11edde9601"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /favicon.ico
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hl429-1713412134481-c2b055d7889c
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3804.5c782b135a9ecacd.js | 76.76.21.93 | 200 OK | 86 B |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/3804.5c782b135a9ecacd.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hash51248ca3a7069f90dac31e324b5d577e e8b0cf2d6212a3e931fab48c0d669b6fdca6c11a ea6d7b09d0b72b833bd863e5a50eeca94556472bc275e70297b3f4cd22304b1c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3804.5c782b135a9ecacd.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 27411
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="3804.5c782b135a9ecacd.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:54 GMT
etag: "51248ca3a7069f90dac31e324b5d577e"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/3804.5c782b135a9ecacd.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xjvfg-1713412134848-0de7d8aa4ab5
content-length: 86
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.93 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:56 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::hl429-1713412136776-911a115216ed
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2892.b79a9cb802c91f90.js | 76.76.21.93 | 200 OK | 1.1 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/2892.b79a9cb802c91f90.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1153), with no line terminators Hash08b5d0123ca5a71e88799fe3bac7318d 7cefe7e92584e803bca1fc694e1a1783dc6e7b0c 2ccec688040b5ac85db3dbf5c90ba35bcfa4c1bf5e2fcbe689412e1edac9ad93
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2892.b79a9cb802c91f90.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27408
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2892.b79a9cb802c91f90.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: W/"7edeb49623cf722b6cd8833bdff0620c"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/2892.b79a9cb802c91f90.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xjvfg-1713412135704-8939187d644c
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/blocto.png | 172.67.75.76 | 200 OK | 5.0 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/wallets/blocto.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 232 x 232, 8-bit/color RGBA, non-interlaced Hashd87c961f741da9f48ee0b84b2d8c5d97 0af6331b85523be30d072fc3d844157c1fe76cac b06b94134a2e5d91e6809f04b080866fb12d42a875c3fd98ad65ffc6f3e0a0ee
GET /web/wallets/blocto.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: image/png
content-length: 5015
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a9d3ccbc66959bb406ed1966e0f92fcc"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XPwvz7t2tJqgio%2FIDuu28m4ccNFXXiAn3yYJy6Kc0rrDK2tPYNlL0tXuraHG0UU2nxQ%2FxB1Ev9vinIa%2F%2FWzQzVOkkSrDL72f1y%2FFN%2BRFPJKEx03VnNsgZkOMlcSMCNDGL4mzylPMEF%2B0VG9Tcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae99dbd456a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWoVaF5NQ.woff2 | 216.58.207.227 | 200 OK | 11 kB |
URL GET HTTP/2fonts.gstatic.com/s/kanit/v15/nKKU-Go6G5tXcr5KPxWoVaF5NQ.woff2 IP216.58.207.227:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 10572, version 1.0 Hash8a0a6eaf18306910de756b986bbef9b2 2eeca7d47e919a37d7ba91d4ecfec47da2019721 825df5cc06c5d4e5ace9ecc77ce4e06d83425e333ee13a35b0190df2e6a56d16
GET /s/kanit/v15/nKKU-Go6G5tXcr5KPxWoVaF5NQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10572
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 03:16:08 GMT
expires: Fri, 18 Apr 2025 03:16:08 GMT
cache-control: public, max-age=31536000
age: 1967
last-modified: Thu, 20 Jul 2023 20:50:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/wallets/opera.png | 172.67.75.76 | 200 OK | 3.3 kB |
URL GET HTTP/2assets.pancakeswap.finance/web/wallets/opera.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
File typePNG image data, 150 x 150, 8-bit colormap, non-interlaced Hashb8c2ee0a8b6673889f895e1c5ffed2c6 a2a4069ababd5db01f0b3d8fd4392964e1c334e1 3a93e883601c13e72381165bd035155f531e30560acd737401d4ac93053b9be5
GET /web/wallets/opera.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:55 GMT
content-type: image/png
content-length: 3287
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a3bf28b12102f3e4cf1ccaa356175d44"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YzVKLRRpGYT3OmLKraSFI6YY4j7%2B1FWCLKCqxjyf1ISMXwsx8iuyIgaTayZ4OlaGeg7fHhfZglP7ShJpujkUi%2BwjoGaym5MsvJc4Zmdu4NsnsIBPaOcjcCZed7yWEP3Wtatl0tSAhj8YHlwsZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 6011
accept-ranges: bytes
server: cloudflare
cf-ray: 8761ae99dbcd56a4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/coin.png | 76.76.21.93 | 200 OK | 28 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/images/trading-reward/coin.png IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 310 x 297, 8-bit colormap, non-interlaced Hash440e25228fe7ed206ab13478d39a97cb 64d11945dcd31587a718f1b04c68ab73c06be3a1 6d068cdbaa7b7eea5c198613f0d60251d146825c43b0a64a595ef56079b86ac8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /images/trading-reward/coin.png HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 26171
cache-control: public, immutable, max-age=31536000
content-disposition: inline; filename="coin.png"
content-type: image/png
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "440e25228fe7ed206ab13478d39a97cb"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /images/trading-reward/coin.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xjvfg-1713412135823-e275a030c4b2
content-length: 28247
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/782.11a99be71c87365b.js | 76.76.21.93 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/782.11a99be71c87365b.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (13606) Hash71fdaa3dcdc98dee1fab697481b187cf e62a88cd0ed83f49ff45893cf065c62e9000f2f3 e0094c07b564c63ab21863bb5b4166184db600a3192dd1e6b0c3611891184d5d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/782.11a99be71c87365b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27404
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="782.11a99be71c87365b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:56 GMT
etag: W/"71fdaa3dcdc98dee1fab697481b187cf"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/782.11a99be71c87365b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412136823-f171bd089299
X-Firefox-Spdy: h2
|
|
| assets.pancakeswap.finance/web/chains/4002.png | 172.67.75.76 | 404 Not Found | 0 B |
URL GET HTTP/3assets.pancakeswap.finance/web/chains/4002.png IP172.67.75.76:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectassets.pancakeswap.finance Fingerprint62:58:8A:23:51:75:94:A4:7B:AD:60:8B:1A:7B:66:06:34:B6:98:0B ValidityWed, 27 Mar 2024 10:44:32 GMT - Tue, 25 Jun 2024 10:44:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web/chains/4002.png HTTP/1.1
Host: assets.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 03:48:56 GMT
content-length: 0
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wCUF0TFCmKMbXMLnvK0G6xBij4oewTL5I3TsCKURh11U6aUhMx7MdBplRUOVgFoKmExev9biduL3SCJNjJVSHz4CRu0a3xgRG3nSQYE2GJZZ16Y9VxWBCxly5A77EHYtVHmwuPqHsFtxStSjmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 8761ae9cbf8f1bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713412135258&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1652407748.1713412137&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713412136&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2Ftrading-reward&dt=PancakeSwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4113 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713412135258&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1652407748.1713412137&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713412136&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2Ftrading-reward&dt=PancakeSwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4113 IP216.239.32.36:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-334KNG3DMQ>m=45je44f0v873867766z8834067533za200&_p=1713412135258&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1652407748.1713412137&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713412136&sct=1&seg=0&dl=https%3A%2F%2Fpay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app%2Ftrading-reward&dt=PancakeSwap&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=4113 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
date: Thu, 18 Apr 2024 03:48:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/900-011ae1c0fe9f9296.js | 76.76.21.93 | 200 OK | 8.0 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/900-011ae1c0fe9f9296.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (8014), with no line terminators Hashcca4b92f68f40a1a4f477d4ebd1e2a2f 42d762815164a81acf8f9ba5233c3cf47a5f6572 88a2af421a2d9d5c6e309f0ef39e90aed4ef3b53a70c417cf961c782a1da914d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/900-011ae1c0fe9f9296.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27411
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="900-011ae1c0fe9f9296.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:54 GMT
etag: W/"e75f525b1cebd7a66b61d6c6c82fdd83"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/900-011ae1c0fe9f9296.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::4t9hj-1713412134844-fe33effa199f
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-banner-bunny.21cb8cfb.png&w=750&q=75 | 76.76.21.93 | 200 OK | 39 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-banner-bunny.21cb8cfb.png&w=750&q=75 IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeRIFF (little-endian) data, Web/P image Hasha092b9eb161bd32045dbd54a54c57a5f e2c6b4665d8f769a446ac12cdd22083418519ad6 2d02d7acc0f001794cb29e17f510c48b2dac6fe582f99482b07d0aa8317913ee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Ftrading-reward-banner-bunny.21cb8cfb.png&w=750&q=75 HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 2570641
cache-control: public,max-age=31536000,immutable
content-disposition: attachment; filename="trading-reward-banner-bunny.webp"
content-security-policy: script-src 'none'; frame-src 'none'; sandbox;
content-type: image/webp
date: Thu, 18 Apr 2024 03:48:56 GMT
last-modified: Tue, 19 Mar 2024 09:44:54 GMT
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept
x-content-type-options: nosniff
x-matched-path: /_next/static/media/trading-reward-banner-bunny.21cb8cfb.png
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412136482-fa1234c2ba3e
content-length: 38754
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.93 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13520
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713412138761-14fabf2cef3a
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 7.2 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hash342152b7fdcb21b38fb77d6b55dab77b c98e9cc318eef9dbe98df17fe6c3afc699dbee33 a1962f56716c3fc8e93e593dd611f7b45a8632bacf8df45b56f9dcc5b3c10958
GET /w3m/v1/getWalletImage/9f259366-0bcd-4817-0af9-f78773e41900?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 7170
cf-ray: 8761aeab4a9556a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 34865
cache-control: public, max-age=31536000
etag: "cftQTt3un0HlQqBazMK6bKNWLiUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=19+0 c=2+29 v=2023.9.8 l=7170
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=_AAdzZiBT99gpYxXPIwxmD4YlfNzty8jmkwgMHRNgq4-1713412138-1.0.1.1-hcsakTcfg.i9AL8PJX4bZ8O78O6dEEYSyVlvQXPyxAM1XmGHoZTVevLOqGRxw2xwxEj1IAhoGRILDVsL2oMLWg; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| api.thegraph.com/subgraphs/name/pancakeswap/pottery | 104.18.40.31 | 200 OK | 0 B |
URL OPTIONS HTTP/2api.thegraph.com/subgraphs/name/pancakeswap/pottery IP104.18.40.31:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectthegraph.com FingerprintAD:37:9B:F1:15:0A:93:00:64:CE:AF:AB:3C:14:FB:F0:C5:09:42:51 ValidityWed, 27 Mar 2024 23:12:53 GMT - Wed, 26 Jun 2024 00:11:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /subgraphs/name/pancakeswap/pottery HTTP/1.1
Host: api.thegraph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:56 GMT
content-type: text/html; charset=utf-8
cf-ray: 8761ae99cc86568e-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-headers: Content-Type, User-Agent
access-control-allow-methods: GET, OPTIONS, POST
set-cookie: __cf_bm=bTC5Ktu8wKzGSAoQLgKz6lxDrtd2za90kF8xzpfrab0-1713412136-1.0.1.1-3Dna_BHxl1F3FN.Xu3Q2DDGemKaAwxHjHstgREdQahi.oN4L_48Y..3mgBSIJpf7eoN7wIy88u6Z8q3b3zNoNg; path=/; expires=Thu, 18-Apr-24 04:18:56 GMT; domain=.thegraph.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5370.6f2ed6a12f926b71.js | 76.76.21.93 | 200 OK | 138 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5370.6f2ed6a12f926b71.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size138 kB (137476 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5370.6f2ed6a12f926b71.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27399
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5370.6f2ed6a12f926b71.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"97ab784a3e1abdbbc0b6d3af2348572b"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5370.6f2ed6a12f926b71.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412137052-8fb2ec09191b
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4861-3efb5f77e6bf6644.js | 76.76.21.93 | 200 OK | 14 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4861-3efb5f77e6bf6644.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (14258) Hash2e5f13e529de38f4c7a898034d048c61 de7104d674d9ae064d85726165f7b8eb14ed28b1 64cee8b66ce8ba35aefd2b129fd35cb40711119d777a296802ffcfff6e6e68cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4861-3efb5f77e6bf6644.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4861-3efb5f77e6bf6644.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"2e5f13e529de38f4c7a898034d048c61"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4861-3efb5f77e6bf6644.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412138766-8058635fed36
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js | 76.76.21.93 | 200 OK | 26 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (25929) Hash63c3a4ce0da82887fce6748caa0cd005 43a32cbb7cf8d5186d99f245bbb3ce0c578be4f3 eff2b341ff03249262f314d9527c98f30778a6192e1c5cd7716dc130d7a8ff12
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27412
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="quote-worker.1ac00aeec6a8b8d4.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: W/"63c3a4ce0da82887fce6748caa0cd005"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412135219-d9526ef8e4a5
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js | 76.76.21.93 | 200 OK | 12 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/8940-2680582ce3921897.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (11903) Hash4af0d04550602a4e4023aae8ef321f77 78e4304151cad34afe52345efeb22cdb312c879c 1669b1d79728b734d369c85406cfa634f6455c3487057db9c9a95d47335693aa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8940-2680582ce3921897.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8940-2680582ce3921897.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"4af0d04550602a4e4023aae8ef321f77"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/8940-2680582ce3921897.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xjvfg-1713412137354-a542a6e6197e
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js | 76.76.21.93 | 200 OK | 26 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (25929) Hash63c3a4ce0da82887fce6748caa0cd005 43a32cbb7cf8d5186d99f245bbb3ce0c578be4f3 eff2b341ff03249262f314d9527c98f30778a6192e1c5cd7716dc130d7a8ff12
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27412
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="quote-worker.1ac00aeec6a8b8d4.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: W/"63c3a4ce0da82887fce6748caa0cd005"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/quote-worker.1ac00aeec6a8b8d4.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::6f8b9-1713412135222-b3b83a8d67e3
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7875-e604b8271f71ca63.js | 76.76.21.93 | 200 OK | 10 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7875-e604b8271f71ca63.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10313), with no line terminators Hash896a854ebbb38fc1965137a8fab64789 5d9f4394da8ff66fc2e7c24693feff3e43155302 54fc8b94e6f9031526cb84c32f641c23a4d17b17a753eeeb289a776711b5cb94
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7875-e604b8271f71ca63.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 1
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7875-e604b8271f71ca63.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"b00edc9b681c54e9a79de581d19f89b3"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7875-e604b8271f71ca63.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412138780-d81dbcce8cbc
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 2.6 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image Hashd62bfd6a0d4e300d8e50b60fbe10eab0 251de0bd2dba5194b0dc337e371b017f673d2b40 9407c0251bd7b695a38698d04bbb15514ed472e11797aef7793b9acb2b04fcff
GET /w3m/v1/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 2632
cf-ray: 8761aeab4a9156a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 34865
cache-control: public, max-age=31536000
etag: "cfmeYviP6kCNFgjEWLRBgPUJnDUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=1341+0 c=0+15 v=2024.2.2 l=2632
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=LrYtfDLafoQkBX5lDJQTDSxCnz1YSN4YB9YGCV.o3fc-1713412138-1.0.1.1-0W9MuKhOrZR3aHd0lTw.aid6JQlS.zY6kMveCy_.bRz.d9v5PHUjzjSUHFqtW.cpb.TaaPacM7KlN8hPZ9wl1A; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7444-360c3f79697d7d4b.js | 76.76.21.93 | 200 OK | 2.5 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7444-360c3f79697d7d4b.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (2587), with no line terminators Hash4de8a53fb41ebd759027d91f2ec64781 3299bcc68e0d15a9685ff8ac6d49a484fa15611c 6ede75d2417932635664704622abb242b024e5a7f5bf177ab3b3cb4f4f7c2df0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7444-360c3f79697d7d4b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7444-360c3f79697d7d4b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"cf3d137988a48807f06a3e8663fb24c4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7444-360c3f79697d7d4b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412138764-1f1fe100b008
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5569.1a233de1fa5a4a3f.js | 76.76.21.93 | 200 OK | 474 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5569.1a233de1fa5a4a3f.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size474 kB (474242 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5569.1a233de1fa5a4a3f.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27407
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5569.1a233de1fa5a4a3f.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: W/"2387c017008ccf08111d6a96213c431d"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5569.1a233de1fa5a4a3f.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412135265-a3bc8f7fc1b8
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1732.580bc0b12da6139f.js | 76.76.21.93 | 200 OK | 189 B |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/1732.580bc0b12da6139f.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashfd09ac22cb7386ceb9e1b8b399b15faa 1d8e92e7b6f424aed8bdc8df5fbe31dad3fbf091 a7d1082561fac45f18a5a72224aeca09ea3d6ddec479f42ea60621dc6c94b685
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1732.580bc0b12da6139f.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 27408
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1732.580bc0b12da6139f.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:55 GMT
etag: "193e391c62b77e9bf00ad62c66275408"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/1732.580bc0b12da6139f.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::cwpxj-1713412135261-cab87559b476
content-length: 189
X-Firefox-Spdy: h2
|
|
| relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt3OVhxdGloOTF5S1ZhNVpEV0I2S3pNQlFZRVhjZDdQV1pNOWlVWGhNaWhhZSIsInN1YiI6ImI0OTMyNzZjOTNiNDM1MjM2YTUyMjE1MjZjZjk2MDc5ODhhYzg2OTgzNTQ0MTI2MDkxN2I1OWVhNjc0MDczOTUiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.9-620D1TaG5ro9MeRrdsyA89M3mjuUHvuqhWYRWLwKqz_jsrnrIlaDdrf_4AWX4FWr7OWviCzGnbSZlxFV0jBQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true | 3.124.182.184 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt3OVhxdGloOTF5S1ZhNVpEV0I2S3pNQlFZRVhjZDdQV1pNOWlVWGhNaWhhZSIsInN1YiI6ImI0OTMyNzZjOTNiNDM1MjM2YTUyMjE1MjZjZjk2MDc5ODhhYzg2OTgzNTQ0MTI2MDkxN2I1OWVhNjc0MDczOTUiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.9-620D1TaG5ro9MeRrdsyA89M3mjuUHvuqhWYRWLwKqz_jsrnrIlaDdrf_4AWX4FWr7OWviCzGnbSZlxFV0jBQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true IP3.124.182.184:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerAmazon Subjectrelay.walletconnect.com FingerprintA3:38:A5:E6:60:04:20:E0:86:C9:9C:9E:6A:D7:35:A4:D4:04:A2:A5 ValidityMon, 07 Aug 2023 00:00:00 GMT - Thu, 05 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWt3OVhxdGloOTF5S1ZhNVpEV0I2S3pNQlFZRVhjZDdQV1pNOWlVWGhNaWhhZSIsInN1YiI6ImI0OTMyNzZjOTNiNDM1MjM2YTUyMjE1MjZjZjk2MDc5ODhhYzg2OTgzNTQ0MTI2MDkxN2I1OWVhNjc0MDczOTUiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTcxMzQxMjEzNSwiZXhwIjoxNzEzNDk4NTM1fQ.9-620D1TaG5ro9MeRrdsyA89M3mjuUHvuqhWYRWLwKqz_jsrnrIlaDdrf_4AWX4FWr7OWviCzGnbSZlxFV0jBQ&projectId=e542ff314e26ff34de2d4fba98db70bb&ua=wc-2%2Fjs-2.8.6%2Flinux-firefox-96.0.0%2Fbrowser%3Apay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app&useOnCloseEvent=true HTTP/1.1
Host: relay.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Qrygdb7PY1j8FElj4he23g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
connection: upgrade
upgrade: websocket
sec-websocket-accept: 0Z3kW4XHvcsrP9OxFO8MNpa85Q8=
date: Thu, 18 Apr 2024 03:48:56 GMT
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6325-f990ad1ec660ecd4.js | 76.76.21.93 | 200 OK | 56 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/6325-f990ad1ec660ecd4.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6325-f990ad1ec660ecd4.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13512
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="6325-f990ad1ec660ecd4.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:53 GMT
etag: W/"8e1a71cb36bfcb216aa40d7f0693ed6f"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/6325-f990ad1ec660ecd4.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jdrn7-1713412133331-2f6545cbc8e2
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/73f6f52f-7862-49e7-bb85-ba93ab72cc00?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 2.8 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/73f6f52f-7862-49e7-bb85-ba93ab72cc00?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hashf5c89ff82dee2a99c7fd3d8c2572cadb f508f5771e1d44c1b018f9b76c0059bfaf661cfb cb9fb4000086474f84dcae9a54dd2862d09878bc505f1d4b5525755a5723eca9
GET /w3m/v1/getWalletImage/73f6f52f-7862-49e7-bb85-ba93ab72cc00?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 2762
cf-ray: 8761aeab1a7e56a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 34865
cache-control: public, max-age=31536000
etag: "cfRMNMx7h0m2-_fAD9P7SygyPPUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=20+0 c=0+17 v=2024.3.2 l=2762
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=j_NmAOVMpwY_BnGOpF_9c_GGcfXLQX6tMbyE2kpKViM-1713412138-1.0.1.1-0QKypCNy.a4vSM0amPTW.v.bcjlbanX5Zv.VuhlawAawZEuE5Shqwin9v2RxNLdj3VXVXb9elot4gU0ul.fuXg; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4768.d9b1d54b7879d92a.js | 76.76.21.93 | 200 OK | 294 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/4768.d9b1d54b7879d92a.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size294 kB (293660 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4768.d9b1d54b7879d92a.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 27411
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4768.d9b1d54b7879d92a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:54 GMT
etag: W/"17e900bb83eff348221206d7eeea9bab"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/4768.d9b1d54b7879d92a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412134845-4a6bd7a1aec2
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-extended.json | 104.26.3.169 | 200 OK | 113 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-extended.json IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size113 kB (112965 bytes) Hash4cd5c7c42fe392bbbcb089bfd6c2fcfe e656f87d73358d6996c656643ac8ca1d62235fda 85bff99f144d96a85ccb3c737cfa70f9a5279c03f7bacefb336a83033a2f98e6
GET /pancakeswap-extended.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f337df90a89a252279b03ca9ceaf71bd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bWUHyS7dYZCVCOpOhY42JCkMFUvmFD3h%2FGVjhZqcn%2FoH1cvnmNSu0lE28s0N5Q1io6ljFwn2mgdimDs5%2BjOGwQfFu%2BjmnxoGTG6wtudtDRb11vCd4NMU14CtqKsBBA8c5NEmDV0grq3CSZtBpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761aea04d9b5693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/coingecko.json | 104.26.3.169 | 200 OK | 936 kB |
URL GET HTTP/2tokens.pancakeswap.finance/coingecko.json IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size936 kB (935984 bytes) Hash1a456b5475b664c90b860d8a72e728dc 6fb67d2bb121c1dc10354873498524a0fb83f953 e4b5399f99da6974ab4fb4ed4290098469927abd953660a497feede17b8a2e05
GET /coingecko.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"48a02cbf567e574ebe81170ecee30139"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4pci1sUtkruOgmmnKr9JJ0WLb98fDEWt0G2rKGfZ4wW0UGWRjs0hoy%2FC20JqVoLaovk5osoSUAivWOd5sA09AejmkuN38WikBgtKITDD%2F6zAACwPF%2FOy%2BKJ4ClzZ%2BkaemnsWrycGfGwJV6Z1Xw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761aea04d995693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 | 104.18.27.46 | 200 OK | 6.9 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (7634), with no line terminators Hash60b91996618dc7eb312ba928a7e1c408 2fdd2884d5dead88b86c42ec5e83c5fddae2eaac ff7ad4613fa8c85a87814fcd8c62f8c3bbbcc23aaacd956f3288d7171e4133bb
GET /w3m/v1/getDesktopListings?projectId=e542ff314e26ff34de2d4fba98db70bb&page=1&entries=9&version=2 HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=43200, s-maxage=21600
x-robots-tag: noindex
set-cookie: __cf_bm=4rs63sKhI5xExvBortAGuyABZoZ3kWj8MP5D0DbdUhs-1713412137-1.0.1.1-n4u3w.4R1nTKG4iAzCWx1m8iUpaIdReYepZM_OEddAYSxmmehObcF2OqCXXZhcONY3uXg3RaXMmJ79avSrreEg; path=/; expires=Thu, 18-Apr-24 04:18:57 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761aea28cacb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5168-df49aea4480b567a.js | 76.76.21.93 | 200 OK | 27 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/5168-df49aea4480b567a.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (10931) Hash49f28ccea58e4a050eda6adb87875688 a9eead0a11a7a042ffc7490aca1e58e0e9de8455 9f1f213f235f2d4ed66bbc7dc5ef843147bdd5791f2efe05766c79bde1152cea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5168-df49aea4480b567a.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5168-df49aea4480b567a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:58 GMT
etag: W/"49f28ccea58e4a050eda6adb87875688"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/5168-df49aea4480b567a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::4t9hj-1713412138786-fcf7ec5fa900
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7444-360c3f79697d7d4b.js | 76.76.21.93 | 200 OK | 2.5 kB |
URL GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/_next/static/chunks/7444-360c3f79697d7d4b.js IP76.76.21.93:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (2587), with no line terminators Hash4de8a53fb41ebd759027d91f2ec64781 3299bcc68e0d15a9685ff8ac6d49a484fa15611c 6ede75d2417932635664704622abb242b024e5a7f5bf177ab3b3cb4f4f7c2df0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7444-360c3f79697d7d4b.js HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: _ga_334KNG3DMQ=GS1.1.1713412136.1.0.1713412136.60.0.0; _ga=GA1.1.1652407748.1713412137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 13516
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7444-360c3f79697d7d4b.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 03:48:57 GMT
etag: W/"cf3d137988a48807f06a3e8663fb24c4"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /_next/static/chunks/7444-360c3f79697d7d4b.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::4t9hj-1713412137358-bfbc47436045
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/pancakeswap-extended.json | 104.26.3.169 | 200 OK | 113 kB |
URL GET HTTP/2tokens.pancakeswap.finance/pancakeswap-extended.json IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size113 kB (112965 bytes) Hash4cd5c7c42fe392bbbcb089bfd6c2fcfe e656f87d73358d6996c656643ac8ca1d62235fda 85bff99f144d96a85ccb3c737cfa70f9a5279c03f7bacefb336a83033a2f98e6
GET /pancakeswap-extended.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f337df90a89a252279b03ca9ceaf71bd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BnO1XNtts22zgwD2D8pj3rxMFmWhtTUx8s7shNznpAITWRFI9esB%2BIVgNgz0DSYqY3WQyDHDlmCRSCQHO%2FU4N7SKAyzlZBAib0JUbX1gtQYCBb1wg2IBLK0wr5pi9wwVNr4Ru56oStm2iYLDHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761aea04d985693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tokens.pancakeswap.finance/coingecko.json | 104.26.3.169 | 200 OK | 936 kB |
URL GET HTTP/2tokens.pancakeswap.finance/coingecko.json IP104.26.3.169:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerLet's Encrypt Subjecttokens.pancakeswap.finance Fingerprint16:4E:75:1C:22:7A:65:1F:A3:EE:D9:84:E5:17:6B:94:18:D4:CB:75 ValidityTue, 02 Apr 2024 17:48:58 GMT - Mon, 01 Jul 2024 17:48:57 GMT
Size936 kB (935984 bytes) Hash1a456b5475b664c90b860d8a72e728dc 6fb67d2bb121c1dc10354873498524a0fb83f953 e4b5399f99da6974ab4fb4ed4290098469927abd953660a497feede17b8a2e05
GET /coingecko.json HTTP/1.1
Host: tokens.pancakeswap.finance
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
Origin: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:57 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"48a02cbf567e574ebe81170ecee30139"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AclVJ2cJ9Ng5pMY0yU9p5ouXS9mf6Q5wYebKP1Yb6%2FOVDGFSBR%2BoOjOD38xGvsujpzqUBLrHgoV7JxNUpQqrZxRza2ORUD0WSTyEv8t6B9MCOOqQ1gEPREtAF1frSujsltANhZnjXj1MsGwLFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8761aea04da15693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward | 76.76.21.93 | 200 OK | 6.6 kB |
URL User Request GET HTTP/2pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward IP76.76.21.93:443
CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (6886), with no line terminators Hashcfafa75c582f7e234f35e10d16b72149 629207a161110cd9d294d7a6c1c7777d0d9125a7 696abe17d3741a8f86b541b268eb77796c7ab4da230c92a8324228dd1caa9f13
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /trading-reward HTTP/1.1
Host: pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 15205
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="trading-reward"
content-encoding: br
content-type: text/html; charset=utf-8
date: Thu, 18 Apr 2024 03:48:52 GMT
etag: W/"a60c8f4016dd68ce0f2a6f7e9744602b"
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-matched-path: /trading-reward
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::pz72c-1713412132954-2d00a520d5e1
X-Firefox-Spdy: h2
|
|
| explorer-api.walletconnect.com/w3m/v1/getWalletImage/204b2240-5ce4-4996-6ec4-f06a22726900?projectId=e542ff314e26ff34de2d4fba98db70bb | 104.18.27.46 | 200 OK | 9.3 kB |
URL GET HTTP/2explorer-api.walletconnect.com/w3m/v1/getWalletImage/204b2240-5ce4-4996-6ec4-f06a22726900?projectId=e542ff314e26ff34de2d4fba98db70bb IP104.18.27.46:443
Requested byhttps://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/trading-reward CertificateIssuerGoogle Trust Services LLC Subjectwalletconnect.com FingerprintED:B4:3C:64:2E:D4:9E:75:2A:0F:E4:F1:85:B7:CD:B6:A8:91:DE:37 ValidityTue, 27 Feb 2024 02:22:47 GMT - Mon, 27 May 2024 02:22:46 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp Hashf8d4c3c7b0a8ffc1da0f3fddeb9df5f0 e9656a24390cdddef52d3190e7059dedbef85d16 32efe5b98531569d4ee92ffd791b6c3ad191a5178b224377fc427918ae4e2caf
GET /w3m/v1/getWalletImage/204b2240-5ce4-4996-6ec4-f06a22726900?projectId=e542ff314e26ff34de2d4fba98db70bb HTTP/1.1
Host: explorer-api.walletconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay8-2v-9jkc4ukd3-ekontetevi-gmailcom.vercel.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:48:58 GMT
content-type: image/webp
content-length: 9300
cf-ray: 8761aeab2a8056a4-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 34865
cache-control: public, max-age=31536000
etag: "cfHSK7haDWQDA9lEEikk-9BEcPUG7FeV1c8ZwDJoU7DQ"
expires: Fri, 18 Apr 2025 03:48:58 GMT
vary: Accept, Accept-Encoding
cf-bgj: imgq:86,h2pri
cf-images: internal=ok/- q=0 n=24+0 c=4+22 v=2024.3.2 l=9300
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
x-robots-tag: noindex
x-wc-r2-status: HIT
set-cookie: __cf_bm=ofS5eUVV4nwHYug5cLYcqI0swLQk58WQ6mC8RTB8iGA-1713412138-1.0.1.1-aXULEqCY8y1s7DG1ZpvuOi5enaNZQ69cx165zhL3zrkG6wTlziXd1ytAYP7eQKe_N.LGBTJ1ZH_HDtgWSwf6pA; path=/; expires=Thu, 18-Apr-24 04:18:58 GMT; domain=.walletconnect.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2
|
|
0.0.0.0