URL User Request GET HTTP/2IP104.21.62.171:443
CertificateIssuerGoogle Trust Services LLC Subjectmy5353.com Fingerprint48:C0:34:7F:99:EC:66:05:74:20:77:BA:C6:FB:CA:01:B6:8B:BC:B3 ValiditySat, 09 Mar 2024 05:43:06 GMT - Fri, 07 Jun 2024 05:43:05 GMT
Size577 kB (576820 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cbhmZ HTTP/1.1
Host: my5353.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Tue, 23 Apr 2024 18:12:31 GMT
content-type: text/html; charset=utf-8
location: https://jklmp.dvrlists.com/lougthy/
x-powered-by: PHP/7.3.31
set-cookie: _session_id=Y8QYwERxLWiTYlbDjRkcyi3g8ekjfs9E2TtUCyILyMq3ChL69sdq15xps6E9ly6n
last_visit_time=1713895951
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pVpHcBV7oUnSQY1zxJNsxlLA1xpB2i7iq4WAWkEX8qBGf0u%2BGDQ9V%2FU1l8%2FFK5XU9bY5HhGkBhcE7dGqX3R9iMwiWzRapR0pVFsEd0uYUn99OteYIWAMumRXVW2y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878fd27c2afc56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| jklmp.dvrlists.com/lougthy/ | 45.133.200.3 | 200 OK | 577 kB |
URL User Request GET HTTP/2jklmp.dvrlists.com/lougthy/ IP45.133.200.3:443
CertificateIssuerLet's Encrypt Subjectjklmp.dvrlists.com Fingerprint60:34:25:0D:3C:3E:12:AB:B1:02:1C:99:83:DB:D7:60:21:B7:61:48 ValidityFri, 19 Apr 2024 02:45:04 GMT - Thu, 18 Jul 2024 02:45:03 GMT
Size577 kB (576820 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Societe Generale |
GET /lougthy/ HTTP/1.1
Host: jklmp.dvrlists.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:12:31 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sat, 23 Mar 2024 07:36:44 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: EXPIRED
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
|
| jklmp.dvrlists.com/lougthy/ssg_files/jquery.min.js | 45.133.200.3 | 200 OK | 88 kB |
URL GET HTTP/2jklmp.dvrlists.com/lougthy/ssg_files/jquery.min.js IP45.133.200.3:443
Requested byhttps://jklmp.dvrlists.com/lougthy/ CertificateIssuerLet's Encrypt Subjectjklmp.dvrlists.com Fingerprint60:34:25:0D:3C:3E:12:AB:B1:02:1C:99:83:DB:D7:60:21:B7:61:48 ValidityFri, 19 Apr 2024 02:45:04 GMT - Thu, 18 Jul 2024 02:45:03 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash2f772fed444d5489079f275bd01e26cc a8927ac2830b2fdd4a729eb0eb7f80923539ceb9 2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Societe Generale |
GET /lougthy/ssg_files/jquery.min.js HTTP/1.1
Host: jklmp.dvrlists.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jklmp.dvrlists.com/lougthy/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:12:31 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 23 Mar 2024 07:36:42 GMT
expires: Thu, 23 May 2024 18:12:31 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: HIT
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
|
| jklmp.dvrlists.com/lougthy/ssg_files/cmd.js | 45.133.200.3 | 200 OK | 3.7 kB |
URL GET HTTP/2jklmp.dvrlists.com/lougthy/ssg_files/cmd.js IP45.133.200.3:443
Requested byhttps://jklmp.dvrlists.com/lougthy/ CertificateIssuerLet's Encrypt Subjectjklmp.dvrlists.com Fingerprint60:34:25:0D:3C:3E:12:AB:B1:02:1C:99:83:DB:D7:60:21:B7:61:48 ValidityFri, 19 Apr 2024 02:45:04 GMT - Thu, 18 Jul 2024 02:45:03 GMT
File typeJavaScript source, ASCII text, with very long lines (3831), with no line terminators Hash9d62e80b97f231e9fd154c2887fcbe9a 67717337f7073ccac8703bd4b471304d83e227f8 5490f4f3783994b6279970599b592268331e817af05dc03bf2075c77d7174ddb
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Societe Generale |
GET /lougthy/ssg_files/cmd.js HTTP/1.1
Host: jklmp.dvrlists.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jklmp.dvrlists.com/lougthy/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 18:12:31 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 23 Mar 2024 07:39:22 GMT
expires: Thu, 23 May 2024 18:12:31 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: HIT
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
|