Report - verify-account.chickenkiller.com/chasev3.zip

Report Overview

Submitted URL
verify-account.chickenkiller.com/chasev3.zip
IP
169.47.130.87
ASN
#36351 SOFTLAYER
Submitted
2024-03-29 10:25:26
Access
public
Website Title
Welcome to APWG & CMU's Phishing Education Landing Page
Final URL
phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
phish-education.apwg.org	unknown	2004-03-09	2013-10-16	2024-03-27	7.5 kB	134 kB	52.89.1.57
verify-account.chickenkiller.com	unknown	unknown	2020-11-24	2024-03-21	414 B	412 B	169.47.130.87
education.apwg.org	unknown	2004-03-09	2012-05-24	2024-03-27	538 B	688 B	54.191.217.223

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2024-03-29	medium	chickenkiller.com	Sinkholed

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (19)

URL IP Response Size

verify-account.chickenkiller.com/chasev3.zip

169.47.130.87

0 B

URL User Request GET
verify-account.chickenkiller.com/chasev3.zip
IP
169.47.130.87:0
ASN
#36351 SOFTLAYER

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
mnemonic secure dns	malicious	Sinkholed

HTTP Headers

GET /chasev3.zip HTTP/1.1
Host: verify-account.chickenkiller.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx/1.16.1
Date: Fri, 29 Mar 2024 10:25:05 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Cache-Control: public, max-age=15
X-Abuse: URL redirection provided by freedns.afraid.org - please report any misuse of this service
Location: http://education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

54.191.217.223

302 Found

369 B

URL User Request GET HTTP/1.1
education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
IP
54.191.217.223:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subjectdocs.apwg.org
Fingerprint93:8B:C7:EC:A9:CE:4B:18:E9:EB:5F:4A:4F:99:46:02:9B:38:B8:C8
ValidityMon, 18 Mar 2024 23:06:14 GMT - Sun, 16 Jun 2024 23:06:13 GMT

File type
HTML document, ASCII text
Size
369 B (369 bytes)
Hash
af029f1030bae39fa8e464ebaadff210
370199ec608b0e5164538aa8dafbe002324287c5
b7d7f9299332da2152b9ef075380b67375290db68ce58e837ec5284606bd3f35

HTTP Headers

GET /r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126 HTTP/1.1
Host: education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 29 Mar 2024 10:26:57 GMT
Server: Apache/2.4.7 (Ubuntu)
Location: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Content-Length: 369
Keep-Alive: timeout=5, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

52.89.1.57

200 OK

5.2 kB

URL User Request GET HTTP/1.1
phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (480)
Size
5.2 kB (5210 bytes)
Hash
602b2b810216294ef4a8d04203c9b221
b4b1b63c63f4b49b75287b86ecfe9fecfa226de9
5e74440e0c551b1798f4920bb460b257f5ccd332ed77559dc809e56e0811e182

HTTP Headers

GET /r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126 HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.29
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5210
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

phish-education.apwg.org/r/default/images/cobranding/default.jpg

52.89.1.57

200 OK

14 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/cobranding/default.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 361x83, components 3
Size
14 kB (13804 bytes)
Hash
97ec82196708000bd9650f6fc4267f82
ed5dd2b6d73dcd184855be2cd208ae0e2bba90b9
e96b30774b32f2498054edb47fa2ef80d0b2d6b878db4812807c80a84a8297a2

HTTP Headers

GET /r/default/images/cobranding/default.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:26 GMT
ETag: "35ec-472634bce9080"
Accept-Ranges: bytes
Content-Length: 13804
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/topbg.jpg

52.89.1.57

200 OK

6.9 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/topbg.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 896x265, components 3
Size
6.9 kB (6864 bytes)
Hash
29029805c2b9dd1ed0ed34ad5aeb8422
a4d3b3a7f88c5575f0674d877b787e549415832b
a86c917ea6144abc4f1225a0684ba5e4263ee95c10009de9e946f678ea34956a

HTTP Headers

GET /r/default/images/topbg.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:57 GMT
ETag: "1ad0-472634da79640"
Accept-Ranges: bytes
Content-Length: 6864
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/antiphishing-left.jpg

52.89.1.57

200 OK

17 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/antiphishing-left.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 340x81, components 3
Size
17 kB (17130 bytes)
Hash
9185ef9afc1beb01f9a0a60218d193db
32d62ff18358d1b97c4830c5c2b4bfc28b9a2b93
441b5cf9420f27b0454484138026c7ad38477fa8774cac4b1bf08cfa542befb4

HTTP Headers

GET /r/default/images/antiphishing-left.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Thu, 13 Feb 2014 06:10:34 GMT
ETag: "42ea-4f2438c18aa80"
Accept-Ranges: bytes
Content-Length: 17130
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/owl.jpg

52.89.1.57

200 OK

13 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/owl.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 261x183, components 3
Size
13 kB (12689 bytes)
Hash
a5aacea9215a490c389e36e632167257
1d2309b0458b12a740ee1a8f0f24faf635906acd
2ae294fe82168e3c7449a62e81a22de90ab271a3a30b250ceee26f3b79662584

HTTP Headers

GET /r/default/images/owl.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:46 GMT
ETag: "3191-472634cffbd80"
Accept-Ranges: bytes
Content-Length: 12689
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/monitorbase.jpg

52.89.1.57

200 OK

470 B

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/monitorbase.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 214x9, components 3
Size
470 B (470 bytes)
Hash
54f6f4d41e94f456eba5a2efb0f3cf3a
6dd1d2e9306ad8835332688fc432c62d202362c4
35bcdcff1a66d73da80dc27ca777de2dfd6f1cd06ec0a2b4eae23af01c3aa8e4

HTTP Headers

GET /r/default/images/monitorbase.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:45 GMT
ETag: "1d6-472634cf07b40"
Accept-Ranges: bytes
Content-Length: 470
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/antiphishing-right.jpg

52.89.1.57

200 OK

18 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/antiphishing-right.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 195x82, components 3
Size
18 kB (18374 bytes)
Hash
b4a42d6a93ae1becb489c2732a4156d2
7b05bd40045a53514dfe5aa557d563343af9923f
0908e2233d4dc1645649e4b75ca63c6a907cb32fc42fe08fa3ef37544cb61890

HTTP Headers

GET /r/default/images/antiphishing-right.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:17:59 GMT
ETag: "47c6-472634a3293c0"
Accept-Ranges: bytes
Content-Length: 18374
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/advisory3.jpg

52.89.1.57

200 OK

4.5 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/advisory3.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 237x41, components 3
Size
4.5 kB (4473 bytes)
Hash
6bc12bb02f06e08fa58393cc81950b49
c4067df7133d1ea69ae3f6e185f8ec871a3bc425
ec400b464a3468a5a362c9f7101cb130b54565a4b5bfcdf30b2528de06c5014c

HTTP Headers

GET /r/default/images/advisory3.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:17:54 GMT
ETag: "1179-4726349e64880"
Accept-Ranges: bytes
Content-Length: 4473
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/ccedge.jpg

52.89.1.57

200 OK

1.3 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/ccedge.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 50x54, components 3
Size
1.3 kB (1252 bytes)
Hash
b4072527176ab3b0d447af34aa61ab7d
fc26d9fe2ceb180e932c81833fbd360352022c3e
363a175f8d38ceaee7704c4098f566ff59c9d02d4ae47cd040f3286d56e946cc

HTTP Headers

GET /r/default/images/ccedge.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:07 GMT
ETag: "4e4-472634aaca5c0"
Accept-Ranges: bytes
Content-Length: 1252
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/advisory4.jpg

52.89.1.57

200 OK

3.2 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/advisory4.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 237x41, components 3
Size
3.2 kB (3232 bytes)
Hash
51f36747cd53f0a052cc08ceebd527b1
8f66707edb8eef61f18628b97acb705b4b9aa9e1
5ef9eff9698965846daaa079f29152060946dd4bcaf71a9ec20470a61c53e4f2

HTTP Headers

GET /r/default/images/advisory4.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:17:55 GMT
ETag: "ca0-4726349f58ac0"
Accept-Ranges: bytes
Content-Length: 3232
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/sidebar1bg.jpg

52.89.1.57

200 OK

15 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/sidebar1bg.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 234x356, components 3
Size
15 kB (14898 bytes)
Hash
364f5000ce70f3c23c676fa61ca40641
00da3e35ee8994a8f9e244c7591204814b6ba298
a9e8edf6f14164477de1daef6d98cc63628323c3bca93ffab4dc079725b63550

HTTP Headers

GET /r/default/images/sidebar1bg.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:07 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:51 GMT
ETag: "3a32-472634d4c08c0"
Accept-Ranges: bytes
Content-Length: 14898
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/attachment.jpg

52.89.1.57

200 OK

3.2 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/attachment.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 52x69, components 3
Size
3.2 kB (3157 bytes)
Hash
f25e1aae4ec228a3800a5724fbaab2b6
a39197a2fa05a059b9af927c3ef990bb476410f9
5ef53c29a8276ec1a32bc560eadd48c017d62b63048c9b46bdcb141b2bfab6c4

HTTP Headers

GET /r/default/images/attachment.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:08 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:06 GMT
ETag: "c55-472634a9d6380"
Accept-Ranges: bytes
Content-Length: 3157
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/sidebar2bg.jpg

52.89.1.57

200 OK

4.9 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/sidebar2bg.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 215x124, components 3
Size
4.9 kB (4885 bytes)
Hash
36b303df6b1bff091d52e9751b4cf561
0ae9e1b1ea090bcc3069a7a09612fffee4138b8e
bc24eeb4fc391336fc09fe30e74bd8d0dd1255405d2c781486bbbeee05b69b20

HTTP Headers

GET /r/default/images/sidebar2bg.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:08 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:53 GMT
ETag: "1315-472634d6a8d40"
Accept-Ranges: bytes
Content-Length: 4885
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/arrow.jpg

52.89.1.57

200 OK

620 B

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/arrow.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 16x16, components 3
Size
620 B (620 bytes)
Hash
c8415dda6e7b1fb69a6d51a6fb5ab71b
f0fe68b0cf0d857d8cc0ce4450eaccae59b819d4
237bb30c624eb75479d20b28866ae6deb0afdce1f0e06de8692782f2f65cccca

HTTP Headers

GET /r/default/images/arrow.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:08 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:05 GMT
ETag: "26c-472634a8e2140"
Accept-Ranges: bytes
Content-Length: 620
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/ccnotice.jpg

52.89.1.57

200 OK

1.5 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/ccnotice.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 88x31, components 3
Size
1.5 kB (1456 bytes)
Hash
04463f5e247d8e153cd0eb3030d2732c
1570eed3ee3bce88f622d802b5b5f679759e4acd
de72a572f7a84fc3d3450fe644da6be4e78e46468dd35ff06b214709d65e8507

HTTP Headers

GET /r/default/images/ccnotice.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:08 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:10 GMT
ETag: "5b0-472634ada6c80"
Accept-Ranges: bytes
Content-Length: 1456
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/r/default/images/sidebar3bg.jpg

52.89.1.57

200 OK

20 kB

URL GET HTTP/1.1
phish-education.apwg.org/r/default/images/sidebar3bg.jpg
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 330x304, components 3
Size
20 kB (19967 bytes)
Hash
4965d7c79a2422855bb73e7f33c9b410
3cfed82ed56e9f58e4f0dd454fd90452ceb8ca98
96733b2875a443a50bbdad2ef18b4d44e8d115683bf225d14267bcd7a2367895

HTTP Headers

GET /r/default/images/sidebar3bg.jpg HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 10:25:08 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Sun, 30 Aug 2009 22:18:55 GMT
ETag: "4dff-472634d8911c0"
Accept-Ranges: bytes
Content-Length: 19967
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

phish-education.apwg.org/favicon.ico

52.89.1.57

404 Not Found

298 B

URL GET HTTP/1.1
phish-education.apwg.org/favicon.ico
IP
52.89.1.57:80
ASN
#16509 AMAZON-02

Requested by
http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126

File type
HTML document, ASCII text
Size
298 B (298 bytes)
Hash
15d0ad395eb8220dc09ce1d99831c0fc
4f3751b56e204e59240796a81f5813943147b9d0
5ea959a2fcc125b987f3582133e1247bbb34a86b24d895d95a1588d29c3bdc00

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: phish-education.apwg.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phish-education.apwg.org/r/?verify-account.chickenkiller.com/chasev3.zip&cobranding=497126
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Fri, 29 Mar 2024 10:25:08 GMT
Server: Apache/2.4.7 (Ubuntu)
Content-Length: 298
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (19)

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size