| ebay.s-i.app/assets/js/app4.js |  172.67.138.133 | 200 OK | 3.5 kB |
URL GET HTTP/3ebay.s-i.app/assets/js/app4.js IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJavaScript source, ASCII text, with very long lines (1021) Hashf647564300e27df5d003203ab0eb627e 27bcb344b1b932f1f9de074b9726ecf7228adca2 39e28a4bfcc9a30d84f4777ab8097ca146acdd9e4bff7e31f0046e439cddd7c5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/js/app4.js HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: application/javascript
last-modified: Mon, 14 Jun 2021 12:44:46 GMT
vary: Accept-Encoding
etag: W/"60c74f3e-20df"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tSNz7CYjGBtfJRk7GJdktPUlAfLrvqyzC9b805sV9Gxk8cBvxjeN6DXuFBEVZnOxE1as%2B3P0%2FMxlLZ7EiUfGtoYYaIOFGupcCqmCPwiLVxeK3lJIfYHrTpC0tEPqLeU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae158107128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/js/app3.js | 172.67.138.133 | 200 OK | 36 kB |
URL GET HTTP/3ebay.s-i.app/assets/js/app3.js IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJavaScript source, ASCII text, with very long lines (1031) Hash4d3038040737d2f1f2dbcc376da7aeb9 12e7be22d24f91e343e05853b8eb4c470f4eada7 43efa0020c3a08acb8b42ad270aa514a16b792ee34920a5385fbd57e924f0cae
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/js/app3.js HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: application/javascript
last-modified: Mon, 14 Jun 2021 12:44:45 GMT
vary: Accept-Encoding
etag: W/"60c74f3d-17bc7"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9UiRaGpTdFp5uY7wXWkK%2BzqyO9Zl%2BFZKokuUtB9krtj1EhLPqNAIPegV2WxbcxlG34%2BamxJMjcH%2F7CkZ6ckShgKXzhrbW13t1AYsXzCn%2FYBvOmCIePVN%2Bf%2BSei1WbXc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae1580f7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/img/2.jpg | 172.67.138.133 | 200 OK | 22 kB |
URL GET HTTP/3ebay.s-i.app/assets/img/2.jpg IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJPEG image data, baseline, precision 8, 500x500, components 3 Hasha6e64289ea756f22fc9b40539f6180b7 3c5cd4d9e99d452e12ed3b435b142933ed764ec9 ce2a3ec586990198a807d56f3d171341cbe6cc1fb3cc8e23c0106dcfe149c85e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/img/2.jpg HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: image/jpeg
content-length: 22006
last-modified: Thu, 17 Jun 2021 08:38:19 GMT
etag: "60cb09fb-55f6"
expires: Wed, 16 Apr 2025 12:10:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=izaaxihZ26mNaLlTOfTlE%2FDQ5ExZH2uFaGZZn64fm834A4Tl8BG5euSomA6n5p23tnL86vI6V93kBY%2FBC0bwCPbsoMFbr62yrQXb0HMyJshMZgdlCU0D2PJZruujncs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae3cde97128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/img/5.jpg | 172.67.138.133 | 200 OK | 20 kB |
URL GET HTTP/3ebay.s-i.app/assets/img/5.jpg IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJPEG image data, baseline, precision 8, 500x500, components 3 Hash9c77ce7981605b2e80bcc6650ad8e5e6 ddb8821c075edfa2b3f598121f7e74a6d3f48f97 130c096cee8c15fec8bc5be456e2b1e4911c831f44fb1060f1a7b5d4693610f2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/img/5.jpg HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: image/jpeg
content-length: 20106
last-modified: Thu, 17 Jun 2021 08:38:22 GMT
etag: "60cb09fe-4e8a"
expires: Wed, 16 Apr 2025 12:10:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L2Bx%2FIBpYw4pDCZgSUreO%2BW4cQN%2BM%2FuKZ%2FCMA1v6WheZJOfMDNkxc12uMqDh5Fe%2Bg9r208wR4aWOMMe8cpAvGYrcmpB0ttYJ7NVuLaU3aB%2BO0E%2BK0tGiGflsMB9VQOM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae3cdf17128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/img/3.jpg | 172.67.138.133 | 200 OK | 18 kB |
URL GET HTTP/3ebay.s-i.app/assets/img/3.jpg IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJPEG image data, baseline, precision 8, 500x500, components 3 Hash9953707db01d22db2ab7b328f84f9989 0773d0fc625a8908e8de7580ad5d0a9eef364cd9 fb044468e435898939ef6e6bfc372efb729f45df11eb30050be0f2d35ff70ab2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/img/3.jpg HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: image/jpeg
content-length: 17562
last-modified: Thu, 17 Jun 2021 08:38:20 GMT
etag: "60cb09fc-449a"
expires: Wed, 16 Apr 2025 12:10:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOtkOVu2z9Zu6gfi3ivm2v1iSEbefunlv1u3vpr0tkBguB884DvQncrYYgiXY18WzGBC3VHb1OCEJLertV2vyFNI4S1TujubgnhiVIUJ7f2u%2BKXapVMvUyVZ%2FlfGLh8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae3cdf57128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/img/4.jpg | 172.67.138.133 | 200 OK | 15 kB |
URL GET HTTP/3ebay.s-i.app/assets/img/4.jpg IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJPEG image data, baseline, precision 8, 500x500, components 3 Hash3a6eebbbece68b5795326870fd4f20ee 742d81f67cb346f3ae26d156f614349ca6496f68 297b568a4c24e64339abf4da52fc911c976751ff5117460183bbe582802bf746
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/img/4.jpg HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: image/jpeg
content-length: 14595
last-modified: Thu, 17 Jun 2021 08:38:21 GMT
etag: "60cb09fd-3903"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R%2FBfdnjit4%2FRCCdIoDkMXdYPOpyjV5bYjiO6RhaxTp1lh0%2BQ1QhcL5Mom%2B7YyG2RkpIPn2Sui7jAK6W54d%2BoH32BmpU0foVxF0HVKxYOmUkF6bbTkHYQ9bHdGu6GxZw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae3ddfa7128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/img/6.jpg | 172.67.138.133 | 200 OK | 19 kB |
URL GET HTTP/3ebay.s-i.app/assets/img/6.jpg IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJPEG image data, baseline, precision 8, 500x500, components 3 Hash767e1fa8c42471a621698dac9a25f200 43ee82a2e49f9a630bab1b93ef747679a1a9ca42 a42292fb7f81304563a149e4e66c4f4518613fa81e3fdff216ee00be23c44366
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/img/6.jpg HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: image/jpeg
content-length: 19438
last-modified: Thu, 17 Jun 2021 08:38:24 GMT
etag: "60cb0a00-4bee"
expires: Wed, 16 Apr 2025 12:10:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rtxULW10bW8tLY%2BJIcgmVmIeywzcJLrF1jk6GEZIEEWGUhYLL2UwoNfzDBISpZWwO%2FKikqggTE1APqEvUkbHJzngKtdHaTLPtHTj18JBwkpYUnDE8mdfQSnUbGA2YUM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae3de027128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/img/7.jpg | 172.67.138.133 | 200 OK | 26 kB |
URL GET HTTP/3ebay.s-i.app/assets/img/7.jpg IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJPEG image data, baseline, precision 8, 500x500, components 3 Hash17c399422e5c1731dada4db395bb5ebd 673101a3a1ef1e21e26a75bfc89ad5b5beff6efc 1c1efc38e934b47e4f86fe7bc0d96c112ab1a06b03e38dc075bee33b2103d0c9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/img/7.jpg HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: image/jpeg
content-length: 26182
last-modified: Thu, 17 Jun 2021 08:38:25 GMT
etag: "60cb0a01-6646"
expires: Wed, 16 Apr 2025 12:10:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SbqHkNLHL0ziUJxH9KdTnE%2BFAdsx1LulGcf%2FKGyEu6coXP2qWfO7k03VdHSiSPD8XysuDXsyKRsB3Zm0znio7JioJuSuD72ghBr160iZPtNSP%2FutrCbCbmRJ24lWxWw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae3de067128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/img/11.jpg | 172.67.138.133 | 200 OK | 32 kB |
URL GET HTTP/3ebay.s-i.app/assets/img/11.jpg IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJPEG image data, baseline, precision 8, 500x500, components 3 Hash60b9467981bdddad7321299e6b03147d d690a8531a7b7cb8e83beaac8b730c444d02ffe7 fdc8640432d0f734893d31dae57b112c73f28df4127ecfcffc64c6518fcc9014
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/img/11.jpg HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: image/jpeg
content-length: 32109
last-modified: Thu, 17 Jun 2021 08:38:18 GMT
etag: "60cb09fa-7d6d"
expires: Wed, 16 Apr 2025 12:10:00 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dKlYiqfiYqaYH%2BlD8Nv3TxxnZ8T3riVGnw3xE1eax1TQaNHy710NrBIVjm57rgdyw8EkSZZpbILRs2geyeL3MKgCU3TdjiKINcqnf8xHBjEOXaKya%2FPZo1rXqPAs3HE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae41e7d7128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/js/app5.js | 172.67.138.133 | 200 OK | 8.6 kB |
URL GET HTTP/3ebay.s-i.app/assets/js/app5.js IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJavaScript source, ASCII text, with very long lines (985) Hash968843b5d67d6bb187e055292e40daa0 7a13ded157d79751debca0b65b5846942bdd7001 760c2ec9acabc401b601c14470f51f2ddbe5410b7cdddd51086068becc643819
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/js/app5.js HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: application/javascript
last-modified: Mon, 14 Jun 2021 12:44:46 GMT
vary: Accept-Encoding
etag: W/"60c74f3e-5b34"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0bJPLlP5u7u54rfQdgkj3O4jD8RQB67fhIOOvGb43SNji%2BsJ18G7pMP%2BPYgAGRnOomryS0kD4%2FB1%2BMA%2BxSKsZHuXP3Cc2zy0ZdiMj1QTWPr2Qh2933n7GsiNzxBO%2BWs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae158127128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cs.ns1p.net/p.js?a=c4cra1 |  18.192.91.145 | 200 OK | 3.3 kB |
URL GET HTTP/2cs.ns1p.net/p.js?a=c4cra1 IP18.192.91.145:443
CertificateIssuerDigiCert Inc Subject*.ns1p.net FingerprintDA:D3:11:45:E3:DE:CD:97:E1:34:EB:34:60:A7:F4:AE:89:57:2B:F0 ValidityTue, 13 Jun 2023 00:00:00 GMT - Sat, 13 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (8768), with no line terminators Hash7b54470b022b5415a8051b0437fdf16f f67ad78faf2a0af4b8cdfe4044c2f3b814c07cf2 3f5479ec31a06584b33450b875452ac3923666e27c87ec472abca67c6dd80212
GET /p.js?a=c4cra1 HTTP/1.1
Host: cs.ns1p.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 17:22:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 3340
cache-control: public, max-age=86400
content-encoding: gzip
x-envoy-upstream-service-time: 0
timing-allow-origin: *
server: envoy
X-Firefox-Spdy: h2
|
|
| s.ns1p.net/?v=1695317842&a=c4cra1 | 3.121.72.41 | 200 OK | 171 B |
URL GET HTTP/2s.ns1p.net/?v=1695317842&a=c4cra1 IP3.121.72.41:443
CertificateIssuerDigiCert Inc Subject*.ns1p.net FingerprintDA:D3:11:45:E3:DE:CD:97:E1:34:EB:34:60:A7:F4:AE:89:57:2B:F0 ValidityTue, 13 Jun 2023 00:00:00 GMT - Sat, 13 Jul 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashd48b07114c8cbfc7121eb3838c9a2654 f99f73a93e978fb430ca3b7fcc42070047c60527 01a06d8dd48a3e782d3fd47e126c68655c0850bd83ed54ee9f3ab1ccb120ee86
GET /?v=1695317842&a=c4cra1 HTTP/1.1
Host: s.ns1p.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ebay.s-i.app
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 17:22:01 GMT
content-type: application/javascript
content-length: 171
server: envoy
x-envoy-upstream-service-time: 0
timing-allow-origin: *
access-control-allow-origin: https://ebay.s-i.app
X-Firefox-Spdy: h2
|
|
| ebay.s-i.app/assets/js/def1.js | 172.67.138.133 | 200 OK | 138 kB |
URL GET HTTP/3ebay.s-i.app/assets/js/def1.js IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJavaScript source, ASCII text, with very long lines (1254) Size138 kB (137639 bytes) Hash1a9e54407e18893d246fa1408598fbe4 1e546a1c331af1576a3eddc538da5e3717f7fcf0 652a4da60cd463b4118921d219b283897a03caba9453303bebcc85518a3fc583
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/js/def1.js HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: application/javascript
last-modified: Mon, 14 Jun 2021 12:44:46 GMT
vary: Accept-Encoding
etag: W/"60c74f3e-23330"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=acl%2FO9qAmZKfOQy7zLwMJB%2BlE9JVhJdKsrpmvK7O7slcNK%2FySiE58gHdZMmHNfiVdspviTKsXoC38Sdntaob4Nd%2FKGnxHXdgFjI8F4KBIJwv2SXgm7htavlrNaw%2Frp0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae158147128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/fonts/MarketSans-Regular-WebS.woff2 | 172.67.138.133 | 404 Not Found | 111 kB |
URL GET HTTP/3ebay.s-i.app/assets/fonts/MarketSans-Regular-WebS.woff2 IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeHTML document, ASCII text, with very long lines (55220) Size111 kB (111109 bytes) Hashde5ef1d63d1ee1f2f86fa80cd3cb92b6 6afe31cf16b6ebb4f304d467118d3c78f95bdd2c a68f6fe59dc634735fc47f86194eb2dc3479058349da43e003deaa64b34825e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/fonts/MarketSans-Regular-WebS.woff2 HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/assets/style/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 16 Apr 2024 17:22:01 GMT
content-type: text/html
vary: Accept-Encoding
x-httpd-modphp: 1
host-header: 6b7412fb82ca5edfd0917e3957f05d89
x-proxy-cache: EXPIRED
x-proxy-cache-info: 0 NC:000000 UP:
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yDf84%2BVbb3ikEQCavNIEV5oPK%2BKnfYTU976lMpRIjw%2BFOiASrt4sWbTR0EjtAYSUTikmRNq23F%2BNUPnY2YGPcehHHIk%2BGlk0%2Bs3ktY%2BnOMYXQF2uHbsgkaDsgbP4GEA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae44ec07128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/fonts/MarketSans-SemiBold-WebS.woff | 172.67.138.133 | 200 OK | 28 kB |
URL GET HTTP/3ebay.s-i.app/assets/fonts/MarketSans-SemiBold-WebS.woff IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeWeb Open Font Format, TrueType, length 27806, version 1.0 Hash2ad0bab623481b9eb27f198ed645ab9d 6435807dda5c8b689958f56c9ebc53bd8bce6458 1effea1a1bfac61cb2fb327f63ceffef848d8e731ff226e1f732f1b90aa7c32d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/fonts/MarketSans-SemiBold-WebS.woff HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/assets/style/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:01 GMT
content-type: font/woff
content-length: 27806
last-modified: Mon, 14 Jun 2021 12:44:50 GMT
etag: "60c74f42-6c9e"
expires: Wed, 16 Apr 2025 17:22:01 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cJYT%2FsbahJ5CnSO8EfR2c63XM7Y4asBuOPJSi9wQhWodMhlld4%2FKazBpoeHfcbrhqEgAG75ep4CMgHaHzd%2F8L3ygdjlProxlKnXLn4o0T86SonDcT%2BCsJdDzEpPk7EE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae588e97128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| akamai-static.ebaycdn.net/images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=0zxctf |  23.38.201.25 | 200 OK | 80 kB |
URL GET HTTP/2akamai-static.ebaycdn.net/images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=0zxctf IP23.38.201.25:443
CertificateIssuerSectigo Limited Subjectwww.ebay.com FingerprintCE:57:5A:BB:0A:4D:DD:5A:A7:3F:96:BA:53:72:18:4F:3C:8D:4D:AA ValidityWed, 02 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 500x301, components 3 Hashb7e1ff62db1d0d6a2950e1f0f078d22a 4525ca8f5f886ac22822c6eadc667c56a48d21b3 5983b28477e76f0453b65072bc0f1b6241061918143dadd3740406ad8b8ef267
GET /images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=0zxctf HTTP/1.1
Host: akamai-static.ebaycdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
rlogid: t6q4%7Cjfaofpse%3D9vjdq4%7Cjfaofpse*%3B03%7F%7B%28rbpv6610-17f2fdc845c-0x144
x-ebay-c-version: 1.0.0
last-modified: Fri, 20 Apr 2018 16:50:32 GMT
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
expires: Sat, 25 Feb 2023 07:50:55 GMT
content-type: image/jpeg
content-length: 80384
server: ebay-proxy-server
x-envoy-upstream-service-time: 13
x-ebay-pop-id: UFES2-DUS-zoe-anycast
x-edgeconnect-cache-status: 1
date: Tue, 16 Apr 2024 17:22:01 GMT
strict-transport-security: max-age=31536000
x-cdn: AKAMAI
akamai-grn: 0.044f2417.1713288121.10c7661
X-Firefox-Spdy: h2
|
|
| akamai-static.ebaycdn.net/images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=9szc4d | 23.38.201.25 | 200 OK | 80 kB |
URL GET HTTP/2akamai-static.ebaycdn.net/images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=9szc4d IP23.38.201.25:443
CertificateIssuerSectigo Limited Subjectwww.ebay.com FingerprintCE:57:5A:BB:0A:4D:DD:5A:A7:3F:96:BA:53:72:18:4F:3C:8D:4D:AA ValidityWed, 02 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 500x301, components 3 Hashb7e1ff62db1d0d6a2950e1f0f078d22a 4525ca8f5f886ac22822c6eadc667c56a48d21b3 5983b28477e76f0453b65072bc0f1b6241061918143dadd3740406ad8b8ef267
GET /images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=9szc4d HTTP/1.1
Host: akamai-static.ebaycdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
rlogid: t6q4%7Cjfaofpse%3D9vjdq4%7Cjfaofpse*%3B03%7F%7B%28rbpv6610-17f2fdc845c-0x144
x-ebay-c-version: 1.0.0
last-modified: Fri, 20 Apr 2018 16:50:32 GMT
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
expires: Sat, 25 Feb 2023 07:50:55 GMT
content-type: image/jpeg
content-length: 80384
server: ebay-proxy-server
x-envoy-upstream-service-time: 13
x-ebay-pop-id: UFES2-DUS-zoe-anycast
x-edgeconnect-cache-status: 1
date: Tue, 16 Apr 2024 17:22:01 GMT
strict-transport-security: max-age=31536000
x-cdn: AKAMAI
akamai-grn: 0.044f2417.1713288121.10c7793
X-Firefox-Spdy: h2
|
|
| akamai-static.ebaycdn.net/images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=r92khq | 23.38.201.25 | 200 OK | 80 kB |
URL GET HTTP/2akamai-static.ebaycdn.net/images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=r92khq IP23.38.201.25:443
CertificateIssuerSectigo Limited Subjectwww.ebay.com FingerprintCE:57:5A:BB:0A:4D:DD:5A:A7:3F:96:BA:53:72:18:4F:3C:8D:4D:AA ValidityWed, 02 Aug 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 500x301, components 3 Hashb7e1ff62db1d0d6a2950e1f0f078d22a 4525ca8f5f886ac22822c6eadc667c56a48d21b3 5983b28477e76f0453b65072bc0f1b6241061918143dadd3740406ad8b8ef267
GET /images/g/gY4AAOSwNkxa2hpY/s-l500.jpg?t=r92khq HTTP/1.1
Host: akamai-static.ebaycdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
rlogid: t6q4%7Cjfaofpse%3D9vjdq4%7Cjfaofpse*%3B03%7F%7B%28rbpv6610-17f2fdc845c-0x144
x-ebay-c-version: 1.0.0
last-modified: Fri, 20 Apr 2018 16:50:32 GMT
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
expires: Sat, 25 Feb 2023 07:50:55 GMT
content-type: image/jpeg
content-length: 80384
server: ebay-proxy-server
x-envoy-upstream-service-time: 13
x-ebay-pop-id: UFES2-DUS-zoe-anycast
x-edgeconnect-cache-status: 1
date: Tue, 16 Apr 2024 17:22:01 GMT
strict-transport-security: max-age=31536000
x-cdn: AKAMAI
akamai-grn: 0.044f2417.1713288121.10c77bc
X-Firefox-Spdy: h2
|
|
| b.ns1p.net/?v=1695317842&x=goi089&r=c4cra1,s3x4pb,1b10t5n:i5k,yn,5j|i5k,17c,f|i5k,17u,l | 3.121.72.41 | 204 No Content | 0 B |
URL GET HTTP/2b.ns1p.net/?v=1695317842&x=goi089&r=c4cra1,s3x4pb,1b10t5n:i5k,yn,5j|i5k,17c,f|i5k,17u,l IP3.121.72.41:443
CertificateIssuerDigiCert Inc Subject*.ns1p.net FingerprintDA:D3:11:45:E3:DE:CD:97:E1:34:EB:34:60:A7:F4:AE:89:57:2B:F0 ValidityTue, 13 Jun 2023 00:00:00 GMT - Sat, 13 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?v=1695317842&x=goi089&r=c4cra1,s3x4pb,1b10t5n:i5k,yn,5j|i5k,17c,f|i5k,17u,l HTTP/1.1
Host: b.ns1p.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ebay.s-i.app
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Tue, 16 Apr 2024 17:22:01 GMT
x-envoy-upstream-service-time: 0
access-control-allow-origin: https://ebay.s-i.app
access-control-expose-headers: x-envoy-upstream-service-time
server: envoy
X-Firefox-Spdy: h2
|
|
| srv.uk.ebayrtm.com/rtm?RtmCmd&a=json&l=@@__@@__@@&uf=0&g=f6cd45311790ac0f80f2d9aaf5e3f83b&cg=17c7c8011790a12add73a376ff3c1635&c=1H4sIAAAAAAAAAzVPwU4CMRC971dM4gUS6c60XbpgelAPqLjxAIkeTEhZamhY2ga6Ifj1do2e5r2XeTPv3TTBw0vvgSRw5AQo55zPKwmLZj1BhQijJvQ%2BGedhlYzfmdMO1u5ox0UU9VRjEXkl9DUzgboJ367rTFmxwWda51M47%2B%2Fg2SfbQRbgbQUfQLihaqPGcB9jZ9%2FtdulSWQnFxBRGy6d183oLnTtYWNj2EMbwuD%2BFoy1nxJBJqTgjJFiZL3Nyf7YiEteiiFKQpqkaAP8HQls%2FWTwMUOad1u20qD97RKQcPmuTPKkWmosasVIDyVc44lCK631K8Twvy8vlwuzWXFkbWH8oh%2F7q1yvy05oY1SwnnKniByur2VxVAQAA&p=19392:19393:19394:19395:19396:19397:19398:19399:19400:19401:20858&di=19392:19393:19394:19395:19396:19397:19398:19399:19400:19401:20858&v=4&enc=UTF-8&cb=window.HL_CAT_NAV_RTM_CALLBACK | 66.211.166.8 | 200 OK | 14 kB |
URL GET HTTP/1.1srv.uk.ebayrtm.com/rtm?RtmCmd&a=json&l=@@__@@__@@&uf=0&g=f6cd45311790ac0f80f2d9aaf5e3f83b&cg=17c7c8011790a12add73a376ff3c1635&c=1H4sIAAAAAAAAAzVPwU4CMRC971dM4gUS6c60XbpgelAPqLjxAIkeTEhZamhY2ga6Ifj1do2e5r2XeTPv3TTBw0vvgSRw5AQo55zPKwmLZj1BhQijJvQ%2BGedhlYzfmdMO1u5ox0UU9VRjEXkl9DUzgboJ367rTFmxwWda51M47%2B%2Fg2SfbQRbgbQUfQLihaqPGcB9jZ9%2FtdulSWQnFxBRGy6d183oLnTtYWNj2EMbwuD%2BFoy1nxJBJqTgjJFiZL3Nyf7YiEteiiFKQpqkaAP8HQls%2FWTwMUOad1u20qD97RKQcPmuTPKkWmosasVIDyVc44lCK631K8Twvy8vlwuzWXFkbWH8oh%2F7q1yvy05oY1SwnnKniByur2VxVAQAA&p=19392:19393:19394:19395:19396:19397:19398:19399:19400:19401:20858&di=19392:19393:19394:19395:19396:19397:19398:19399:19400:19401:20858&v=4&enc=UTF-8&cb=window.HL_CAT_NAV_RTM_CALLBACK IP66.211.166.8:443
CertificateIssuerSectigo Limited Subjectadcmd.befr.ebay.be Fingerprint18:45:A2:A2:80:E4:04:F7:74:60:02:0E:7F:F2:66:BD:5D:EA:CC:40 ValidityMon, 31 Jul 2023 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1379) Hash4159775ced5f259b4f4f4bda82cf21c4 1e11b086a06fbc5d7fcf4842b932dbe8f9dd7b5b 404f5bb4898f092d89cab2212e1f081355b36b724b5ac647665543e8c19456e7
GET /rtm?RtmCmd&a=json&l=@@__@@__@@&uf=0&g=f6cd45311790ac0f80f2d9aaf5e3f83b&cg=17c7c8011790a12add73a376ff3c1635&c=1H4sIAAAAAAAAAzVPwU4CMRC971dM4gUS6c60XbpgelAPqLjxAIkeTEhZamhY2ga6Ifj1do2e5r2XeTPv3TTBw0vvgSRw5AQo55zPKwmLZj1BhQijJvQ%2BGedhlYzfmdMO1u5ox0UU9VRjEXkl9DUzgboJ367rTFmxwWda51M47%2B%2Fg2SfbQRbgbQUfQLihaqPGcB9jZ9%2FtdulSWQnFxBRGy6d183oLnTtYWNj2EMbwuD%2BFoy1nxJBJqTgjJFiZL3Nyf7YiEteiiFKQpqkaAP8HQls%2FWTwMUOad1u20qD97RKQcPmuTPKkWmosasVIDyVc44lCK631K8Twvy8vlwuzWXFkbWH8oh%2F7q1yvy05oY1SwnnKniByur2VxVAQAA&p=19392:19393:19394:19395:19396:19397:19398:19399:19400:19401:20858&di=19392:19393:19394:19395:19396:19397:19398:19399:19400:19401:20858&v=4&enc=UTF-8&cb=window.HL_CAT_NAV_RTM_CALLBACK HTTP/1.1
Host: srv.uk.ebayrtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
rlogid: t6ndbulkgb%7Bq%3C%3Dpiejbathmdc%7Fw%28%3Fswa2*w%60ut3527-18ee7ee0cd7-0x2342
down-rlogids: MadronaExt-To-Madrona=t6mwrj9%3Fuk%60ktsn%28%60mdsj*w%60ut3522-18ee7ee0cda-0x1a2;
content-type: application/x-javascript;charset=UTF-8
date: Tue, 16 Apr 2024 17:22:01 GMT
x-envoy-upstream-service-time: 110
server: ebay-proxy-server
x-ebay-pop-id: SLBSLCAZ03
transfer-encoding: chunked
|
|
| srv.uk.ebayrtm.com/rtm?RtmCmd&a=json&l=@@__@@__@@&uf=0&g=f6cd45311790ac0f80f2d9aaf5e3f83b&cg=17c7c8011790a12add73a376ff3c1635&c=1H4sIAAAAAAAAAzVPwU4CMRC971dM4gUS6c60XbpgelAPqLjxAIkeTEhZamhY2ga6Ifj1do2e5r2XeTPv3TTBw0vvgSRw5AQo55zPKwmLZj1BhQijJvQ%2BGedhlYzfmdMO1u5ox0UU9VRjEXkl9DUzgboJ367rTFmxwWda51M47%2B%2Fg2SfbQRbgbQUfQLihaqPGcB9jZ9%2FtdulSWQnFxBRGy6d183oLnTtYWNj2EMbwuD%2BFoy1nxJBJqTgjJFiZL3Nyf7YiEteiiFKQpqkaAP8HQls%2FWTwMUOad1u20qD97RKQcPmuTPKkWmosasVIDyVc44lCK631K8Twvy8vlwuzWXFkbWH8oh%2F7q1yvy05oY1SwnnKniByur2VxVAQAA&p=1650&di=1650&v=4&enc=UTF-8&cb=window.HL_AD_TRACKING_CALLBACK | 66.211.166.8 | 200 OK | 116 B |
URL GET HTTP/1.1srv.uk.ebayrtm.com/rtm?RtmCmd&a=json&l=@@__@@__@@&uf=0&g=f6cd45311790ac0f80f2d9aaf5e3f83b&cg=17c7c8011790a12add73a376ff3c1635&c=1H4sIAAAAAAAAAzVPwU4CMRC971dM4gUS6c60XbpgelAPqLjxAIkeTEhZamhY2ga6Ifj1do2e5r2XeTPv3TTBw0vvgSRw5AQo55zPKwmLZj1BhQijJvQ%2BGedhlYzfmdMO1u5ox0UU9VRjEXkl9DUzgboJ367rTFmxwWda51M47%2B%2Fg2SfbQRbgbQUfQLihaqPGcB9jZ9%2FtdulSWQnFxBRGy6d183oLnTtYWNj2EMbwuD%2BFoy1nxJBJqTgjJFiZL3Nyf7YiEteiiFKQpqkaAP8HQls%2FWTwMUOad1u20qD97RKQcPmuTPKkWmosasVIDyVc44lCK631K8Twvy8vlwuzWXFkbWH8oh%2F7q1yvy05oY1SwnnKniByur2VxVAQAA&p=1650&di=1650&v=4&enc=UTF-8&cb=window.HL_AD_TRACKING_CALLBACK IP66.211.166.8:443
CertificateIssuerSectigo Limited Subjectadcmd.befr.ebay.be Fingerprint18:45:A2:A2:80:E4:04:F7:74:60:02:0E:7F:F2:66:BD:5D:EA:CC:40 ValidityMon, 31 Jul 2023 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT
Hashf7d737bb164bf15fa4fb8612d9dcc0d6 0200f9cd13362644f1b0e8bc74279f805d4cd77e 810432a6bbf475cc4fa66dacec8f80424a0c42450065c977f594b440fa138a57
GET /rtm?RtmCmd&a=json&l=@@__@@__@@&uf=0&g=f6cd45311790ac0f80f2d9aaf5e3f83b&cg=17c7c8011790a12add73a376ff3c1635&c=1H4sIAAAAAAAAAzVPwU4CMRC971dM4gUS6c60XbpgelAPqLjxAIkeTEhZamhY2ga6Ifj1do2e5r2XeTPv3TTBw0vvgSRw5AQo55zPKwmLZj1BhQijJvQ%2BGedhlYzfmdMO1u5ox0UU9VRjEXkl9DUzgboJ367rTFmxwWda51M47%2B%2Fg2SfbQRbgbQUfQLihaqPGcB9jZ9%2FtdulSWQnFxBRGy6d183oLnTtYWNj2EMbwuD%2BFoy1nxJBJqTgjJFiZL3Nyf7YiEteiiFKQpqkaAP8HQls%2FWTwMUOad1u20qD97RKQcPmuTPKkWmosasVIDyVc44lCK631K8Twvy8vlwuzWXFkbWH8oh%2F7q1yvy05oY1SwnnKniByur2VxVAQAA&p=1650&di=1650&v=4&enc=UTF-8&cb=window.HL_AD_TRACKING_CALLBACK HTTP/1.1
Host: srv.uk.ebayrtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
rlogid: t6ndbulkgb%7Bq%3C%3Dqkijbathmdc%7Fw%28jq%60kl*w%60ut3550-18ee7ee0d63-0x232a
down-rlogids: MadronaExt-To-Madrona=t6mwrj9%3Ftilktsn%28%3Fpmo%60*w%60ut3550-18ee7ee0d66-0x1af;
content-type: application/x-javascript;charset=UTF-8
content-length: 116
date: Tue, 16 Apr 2024 17:22:00 GMT
x-envoy-upstream-service-time: 63
server: ebay-proxy-server
x-ebay-pop-id: SLBSLCAZ03
|
|
| ocsrest.ebay.co.uk/ocsrsapp/o2/inflow/inflowcomponent?input=%7B%22pageId%22%3A2387624%2C%22surveyTitle%22%3A%22Tell%20us%20what%20you%20think%22%2C%22posTop%22%3A504%7D&callback=Inflow.cb | 209.140.129.53 | 200 OK | 4.4 kB |
URL GET HTTP/1.1ocsrest.ebay.co.uk/ocsrsapp/o2/inflow/inflowcomponent?input=%7B%22pageId%22%3A2387624%2C%22surveyTitle%22%3A%22Tell%20us%20what%20you%20think%22%2C%22posTop%22%3A504%7D&callback=Inflow.cb IP209.140.129.53:443
CertificateIssuerSectigo Limited Subjectocsrest.ebay.com FingerprintBB:CE:1E:EB:D2:D3:FC:C1:EC:45:BB:1E:92:D7:0A:B4:AA:2D:2E:A1 ValidityMon, 08 Apr 2024 00:00:00 GMT - Tue, 08 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1602) Hash9f3271a5bbefc25ae0d086ae8b69a089 f31d9b27d31f66f9bb9a11920e35931dd2290d46 ea78d57dcbfeea4696347a5f652c937eda14f6816d42270b2a6570583c137fc1
GET /ocsrsapp/o2/inflow/inflowcomponent?input=%7B%22pageId%22%3A2387624%2C%22surveyTitle%22%3A%22Tell%20us%20what%20you%20think%22%2C%22posTop%22%3A504%7D&callback=Inflow.cb HTTP/1.1
Host: ocsrest.ebay.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-ebay-c-request-id: ri=Z1R6WL76pkzb,rci=2ec0bc71c4da6009
rlogid: t6lfuupdvw9%3Ftiljetqvgws%28dsngv*w%60ut3550-18ee7ee0dcb-0x243
x-ebay-c-version: 1.0.0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ch: sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-ua-full-version
set-cookie: ebay=%5Esbf%3D%23%5E;Domain=.ebay.co.uk;Path=/; Secure
dp1=bu1p/QEBfX0BAX19AQA**69e11ab9^bl/NO69e11ab9^;Domain=.ebay.co.uk;Expires=Thu, 16-Apr-2026 17:22:01 GMT;Path=/; Secure
s=CgAD4ACBmIAU5ZTdlZTBkYmQxOGUwYTBkYTJiYTVjNDUzZmZmZDEzMjlOmX8R;Domain=.ebay.co.uk;Path=/; Secure; HttpOnly
nonsession=CgADKACBp4Rq5ZTdlZTBkYmQxOGUwYTBkYTJiYTVjNDUzZmZmZDEzMjkAywABZh66wTFthwVW;Domain=.ebay.co.uk;Expires=Thu, 16-Apr-2026 17:22:01 GMT;Path=/; Secure; HttpOnly
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Tue, 16 Apr 2024 17:22:01 GMT
server: ebay-proxy-server
x-envoy-upstream-service-time: 102
x-ebay-pop-id: SLBRNOAZ03
strict-transport-security: max-age=31536000
transfer-encoding: chunked
|
|
| ebay.s-i.app/assets/js/sc2.js | 172.67.138.133 | 200 OK | 92 kB |
URL GET HTTP/3ebay.s-i.app/assets/js/sc2.js IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/js/sc2.js HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: application/javascript
last-modified: Thu, 17 Jun 2021 12:35:50 GMT
vary: Accept-Encoding
etag: W/"60cb41a6-1677d"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dQOWfOI0Ffr0yFIIce6hTFcVIwMHhYHPTIKJawOUIiGRZOMyG%2BnbDccpJltegqjgA8iY3lG4%2B4SDgb%2FX17GbCBUZeIcq4xW28YWT09jMJy0A0WheX%2BN%2FvgrZ6yVQDI8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae1581a7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/fonts/MarketSans-Regular-WebS.woff | 172.67.138.133 | 200 OK | 27 kB |
URL GET HTTP/3ebay.s-i.app/assets/fonts/MarketSans-Regular-WebS.woff IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeWeb Open Font Format, TrueType, length 27309, version 1.0 Hashd2e9d30dc91e2de12d8c0900ae8be6f1 b66ffa81fd5ae48cad2357e1e57adfbd7749f6c0 cd2e2da669eb741404b164a3f956dc77cfd9b693ec84d9e902fb84420f2033c4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/fonts/MarketSans-Regular-WebS.woff HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/assets/style/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:01 GMT
content-type: font/woff
content-length: 27309
last-modified: Mon, 14 Jun 2021 12:44:49 GMT
etag: "60c74f41-6aad"
expires: Wed, 16 Apr 2025 17:22:01 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJa4QJCbS4qeYckiuSTVWoN6UO6DJrPK7CtBdXTR9eip8pqvlpfj5BXxh9Yzr6w2py7LqkoS5%2Fk%2FX15O%2FZZZ7x%2F1%2FtpMN2781u7t4xSv94zexpKwTMAETRE0IfCY9vo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755dae588e37128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/js/app2.js | 172.67.138.133 | 200 OK | 357 kB |
URL GET HTTP/3ebay.s-i.app/assets/js/app2.js IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJavaScript source, ASCII text, with very long lines (2292) Size357 kB (356709 bytes) Hash0085a1b484d910d9ac2f6c82cc341724 f5f7ec1f0fb2d5989cb9beca934d7685d2d08530 b9fc13e51c16fd652ac5310b939ecf8cd9f79b60cfe689eb428ce74c3100cdcc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/js/app2.js HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: application/javascript
last-modified: Mon, 14 Jun 2021 12:44:46 GMT
vary: Accept-Encoding
etag: W/"60c74f3e-57165"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=of93MsPegA8aFOLnt3mV55eH7zB6ICnmMtJ2PY24VVZY9njhHUtu5brx0UcIHW5t0CKTwN3i2grCy2j1NWi%2Ft5lS3w1wLA6H2YKhFPhuT5p%2BuHZvgLftcNR%2FGdm8c9k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae1580c7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 172.67.138.133 | 200 OK | 266 kB |
URL User Request GET HTTP/2IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
Size266 kB (266449 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET / HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=2592000
x-httpd-modphp: 1
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PI65sdloAonRWkYX0TEEy%2BjlvoSuxgJXl37ThvjZczB8NkOFp9Nas9GKAnQVbbJu2fjcuSQAxSbynnkml8uLgZ7eLfHkoF3qRwgjJe7KKJcRTPmArSbvcs9oKVVEdms%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dadecad20afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ebay.s-i.app/assets/style/style.css | 172.67.138.133 | 200 OK | 189 kB |
URL GET HTTP/3ebay.s-i.app/assets/style/style.css IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeASCII text, with very long lines (65363) Size189 kB (188718 bytes) Hash7c5d3b6400a6686e7148ea15130df25b cea40f6ac89d9d2b6ed1230d3323cfc87c9ef26b 63948f6381ab91194d57f40c456cdaac9dfe19c72921b838b95f44ef7d7472b6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/style/style.css HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: text/css
last-modified: Mon, 14 Jun 2021 12:44:47 GMT
vary: Accept-Encoding
etag: W/"60c74f3f-2e12e"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OlZ47X5XkIu9ju4fj0EtPYio91ELiaMN2JV6pxJQyQim3a9dI%2FYUXHt18%2BPF8CoX%2F6py8Q91oM1b3%2BLiB8o%2BQAGXSqyS1c5KDeLe3UTwE4JEOFt1VJ5z0hHKnv32osU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae14ff87128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/fonts/MarketSans-SemiBold-WebS.woff2 | 172.67.138.133 | 404 Not Found | 84 kB |
URL GET HTTP/3ebay.s-i.app/assets/fonts/MarketSans-SemiBold-WebS.woff2 IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeHTML document, ASCII text, with very long lines (55220) Hash3282565ce91f318e21c86df715d1bc6d e082e007cde9080f12f9fd3927b7f4a61228b1bd b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/fonts/MarketSans-SemiBold-WebS.woff2 HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ebay.s-i.app/assets/style/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 16 Apr 2024 17:22:01 GMT
content-type: text/html
vary: Accept-Encoding
x-httpd-modphp: 1
host-header: 6b7412fb82ca5edfd0917e3957f05d89
x-proxy-cache: EXPIRED
x-proxy-cache-info: 0 NC:000000 UP:
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qdiZl5k7Jl4XWt2OnhfjjTJiB%2B1wg20NjvkH%2F16PfUR9%2Btj7XHiJdn5K8pLts%2FODy0YlsaT2Rnkp6%2BAGd8lHkuyOTGtE7uOmf8%2BiWR0RDPEmVCCFfeqDKDBE1k5tk%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae44ec77128-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/js/app1.js | 172.67.138.133 | 200 OK | 34 kB |
URL GET HTTP/3ebay.s-i.app/assets/js/app1.js IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJavaScript source, ASCII text, with very long lines (2128) Hash1ede75a85c799c24d7bf510380ae2c34 9b20c0cf7a8cf07c1450bdc893186ef9eb427058 d3a639ec9ff3cfe2adef78abe3e0f9d3c811891dd361a72097c3248953d7daff
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/js/app1.js HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: application/javascript
last-modified: Mon, 14 Jun 2021 12:44:46 GMT
vary: Accept-Encoding
etag: W/"60c74f3e-82c9"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NJC%2FOFPbTxy6t7AjpVuz5am%2FDpzBgcvNYT39X%2F6G9wZMOKdrzEisZpZQy5WsX%2BHkcLCfwQIx2bObdIzCLnMGt4e30jCONYkh%2Bc8cUExb0m0s%2FjLaBO6Be3ly6PRqGEw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae158087128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ebay.s-i.app/assets/js/def2.js | 172.67.138.133 | 200 OK | 3.8 kB |
URL GET HTTP/3ebay.s-i.app/assets/js/def2.js IP172.67.138.133:443
CertificateIssuerLet's Encrypt Subjects-i.app FingerprintEF:C2:14:BD:A9:5D:66:1B:67:DF:D4:A6:75:42:6E:8B:88:B9:2C:D6 ValiditySun, 31 Mar 2024 10:57:04 GMT - Sat, 29 Jun 2024 10:57:03 GMT
File typeJavaScript source, ASCII text, with very long lines (3943), with no line terminators Hashe39640084960f17e9636c70ef1c78e26 d48a4158f256cae9fb1c09bf5000b0bbdf8e8f12 dda6133182bcd04666940fe43931024f9eb57555e80c98c66d5f2a2e2e6534f7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | eBay Inc. |
GET /assets/js/def2.js HTTP/1.1
Host: ebay.s-i.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ebay.s-i.app/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 17:22:00 GMT
content-type: application/javascript
last-modified: Mon, 14 Jun 2021 12:44:45 GMT
vary: Accept-Encoding
etag: W/"60c74f3d-ef6"
expires: Wed, 16 Apr 2025 12:09:59 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
cf-cache-status: HIT
age: 18721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hdWsKHsTg5OzQt1Xnx7TLX4aHy4WCYf%2FtQfcpP5L53lmnYIZQfxaf27Unz8eXZ%2BGqXgtvUcmCX0wEoYvVLRUd2jZNLzKcUU0GAHjFEwkkTHCt2T5r98ciHVvoyaaS1w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8755dae158167128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
104.21.54.121