| www.googletagmanager.com/gtag/js?id= |  142.250.74.136 | 200 OK | 48 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id= IP142.250.74.136:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (2642) Hash361d0a4e5f3ba958b4efcb32760719f1 92c908a914b5ecbc9ea8b79b2bb27b3dbadf7207 4f35686b12f34b9fb899d67453eabbc93f2744de1e95ff6d085b00fe3169cd7f
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 05:18:35 GMT
expires: Fri, 26 Apr 2024 05:18:35 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48197
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/ONrso36MueWy5kJH4qzJM-9YYoq8rrVB_rGR7q9lJ3YOHq0NZ9sU6U2sqR-31cokYOsCpqxc3KaYLvV_FbicGQeGtm4f91VDoa2eV8Mp3baPLCZEI3HQ3vJ8.jpg |  45.130.41.9 | 200 OK | 239 kB |
URL GET HTTP/2lifecashharbor1.life/ONrso36MueWy5kJH4qzJM-9YYoq8rrVB_rGR7q9lJ3YOHq0NZ9sU6U2sqR-31cokYOsCpqxc3KaYLvV_FbicGQeGtm4f91VDoa2eV8Mp3baPLCZEI3HQ3vJ8.jpg IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 971x800, components 3 Size239 kB (239216 bytes) Hash5bc5721bb58d6d083ea9e929d2b78a5e 7639cbcc68698c36c4dbd11f27c463eb80e86e72 4754b2e9b0f9ac298b09c5335408e1ae8db1e1382570ea434380c5fad3bae8fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /ONrso36MueWy5kJH4qzJM-9YYoq8rrVB_rGR7q9lJ3YOHq0NZ9sU6U2sqR-31cokYOsCpqxc3KaYLvV_FbicGQeGtm4f91VDoa2eV8Mp3baPLCZEI3HQ3vJ8.jpg HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: image/jpeg
content-length: 239216
last-modified: Mon, 04 Mar 2024 16:31:56 GMT
etag: "65e5f77c-3a670"
expires: Sun, 26 May 2024 05:18:35 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 | 45.130.41.9 | 200 OK | 11 kB |
URL GET HTTP/2lifecashharbor1.life/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11028, version 1.0 Hash1f6d3cf6d38f25d83d95f5a800b8cac3 279f300ca2cbbdf9f5036ef2f438607fbf377daa 796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/font-roboto.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: application/font-woff2
content-length: 11028
last-modified: Mon, 04 Mar 2024 16:31:55 GMT
etag: "65e5f77b-2b14"
expires: Sun, 26 May 2024 05:18:35 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 | 45.130.41.9 | 200 OK | 11 kB |
URL GET HTTP/2lifecashharbor1.life/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11040, version 1.0 Hash5e22a46c04d947a36ea0cad07afcc9e1 6091d981c2a4ee975c7f6b56186ee698040bb804 0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/font-roboto.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: application/font-woff2
content-length: 11040
last-modified: Mon, 04 Mar 2024 16:31:55 GMT
etag: "65e5f77b-2b20"
expires: Sun, 26 May 2024 05:18:35 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2 | 45.130.41.9 | 200 OK | 6.6 kB |
URL GET HTTP/2lifecashharbor1.life/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2 IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 6620, version 1.0 Hash376ffe2ca0b038d08d5e582ec13a310f ec85284f360bada79122b5dca3088103c769ca8a 2f662599cf4323a18b4f7da381a998a8873c0277fff2d866336f7ee943a102d6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2 HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/font-roboto.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: application/font-woff2
content-length: 6620
last-modified: Mon, 04 Mar 2024 16:31:55 GMT
etag: "65e5f77b-19dc"
expires: Sun, 26 May 2024 05:18:35 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 | 45.130.41.9 | 200 OK | 6.5 kB |
URL GET HTTP/2lifecashharbor1.life/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 6460, version 1.0 Hash491a7a9678c3cfd4f86c092c68480f23 32e18ae407d782adfd54c78c6259c7be52db6bf3 41b5c3b25f4258190937deb900fa57a6db6d450ce7dd2af2259af760119a1c41
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/font-roboto.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: application/font-woff2
content-length: 6460
last-modified: Mon, 04 Mar 2024 16:31:55 GMT
etag: "65e5f77b-193c"
expires: Sun, 26 May 2024 05:18:35 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| telegram.org/img/apple-touch-icon.png |  149.154.167.99 | 200 OK | 5.6 kB |
URL GET HTTP/2telegram.org/img/apple-touch-icon.png IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://lifecashharbor1.life/ CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash295ccdb03006b8dfef45090dafbd46ac 491ab660270e47cbac6a5731c51cca71c1c1b2b1 a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
GET /img/apple-touch-icon.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: image/png
content-length: 5644
last-modified: Thu, 21 Apr 2022 13:47:47 GMT
etag: "62616083-160c"
expires: Tue, 30 Apr 2024 05:18:35 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/bootstrap.min.css | 45.130.41.9 | 200 OK | 17 kB |
URL GET HTTP/2lifecashharbor1.life/bootstrap.min.css IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typegzip compressed data, from Unix Hash159bbde565233d2718678a148d6cec7f 76715d4ca4b11dda4f73951b13961e316f529c38 4c572dee5f64f8ce24a508dbd7a0c1f1b9c8115881d8f91b2b35205e0f6b5a28
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /bootstrap.min.css HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: text/css
last-modified: Mon, 04 Mar 2024 16:31:55 GMT
vary: Accept-Encoding
etag: W/"65e5f77b-a61b"
expires: Fri, 03 May 2024 05:18:35 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/website_icon.svg | 45.130.41.9 | 200 OK | 1.9 kB |
URL GET HTTP/2lifecashharbor1.life/website_icon.svg IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeSVG Scalable Vector Graphics image Hash5caca7ae1cffb3da0b06150a15020005 04cfb934f238d33209406393a3fbf78454815739 1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /website_icon.svg HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Mar 2024 16:31:57 GMT
vary: Accept-Encoding
etag: W/"65e5f77d-768"
expires: Fri, 03 May 2024 05:18:35 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/telegram.css | 45.130.41.9 | 200 OK | 104 kB |
URL GET HTTP/2lifecashharbor1.life/telegram.css IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
Size104 kB (103889 bytes) Hash45b86819d21a5da7d15a24658b7646e4 8c81b3405804538ac799ea8b6770169d128461b0 dbbf648c593827beb37ea045eb343d2c9e2d6de6d94ec879029ac889f461f2a0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /telegram.css HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: text/css
last-modified: Mon, 04 Mar 2024 16:31:57 GMT
vary: Accept-Encoding
etag: W/"65e5f77d-195d1"
expires: Fri, 03 May 2024 05:18:35 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/pattern.svg | 45.130.41.9 | 200 OK | 231 kB |
URL GET HTTP/2lifecashharbor1.life/pattern.svg IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeSVG Scalable Vector Graphics image Size231 kB (230871 bytes) Hash7410ea0072f4df1e149a15a2bd924738 8878c8b4987cdb3c467fb5f14becedf9202e576f daa086b24cbd2610eb3261446100ff513a4526c5b2bce41e758629f5cd8a6a20
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /pattern.svg HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/telegram.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Mar 2024 16:31:56 GMT
vary: Accept-Encoding
etag: W/"65e5f77c-385d7"
expires: Fri, 03 May 2024 05:18:35 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 45.130.41.9 | 200 OK | 7.0 kB |
URL User Request GET HTTP/2IP45.130.41.9:443
CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7150), with no line terminators Hash3914cf79758e79378731a48ae39351b8 f721cb22933284496d7fa62b730f7a7f53117198 58703ff7fc72270c093885b09ab6adc203eb1b3808403a6abdd59d0572d9d262
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| lifecashharbor1.life/font-roboto.css | 45.130.41.9 | 200 OK | 5.8 kB |
URL GET HTTP/2lifecashharbor1.life/font-roboto.css IP45.130.41.9:443
Requested byhttps://lifecashharbor1.life/ CertificateIssuerLet's Encrypt Subjectlifecashharbor1.life FingerprintAF:4D:89:19:EB:5E:C9:FD:86:DB:13:4B:FC:4D:EB:E4:EE:C5:34:DC ValidityFri, 29 Mar 2024 08:19:57 GMT - Thu, 27 Jun 2024 08:19:56 GMT
File typeASCII text, with very long lines (6060), with no line terminators Hash1e491f3f5d75746249c7329c0e3d3fc5 6a57933513126c4db7bc97fe71355da165e4faaf 4bed372ad13bd47832c2b642630aff5074a7a27f5a5d36ff3531d16d9ec78fce
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /font-roboto.css HTTP/1.1
Host: lifecashharbor1.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lifecashharbor1.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx-reuseport/1.21.1
date: Fri, 26 Apr 2024 05:18:35 GMT
content-type: text/css
last-modified: Mon, 04 Mar 2024 16:31:55 GMT
vary: Accept-Encoding
etag: W/"65e5f77b-16c6"
expires: Fri, 03 May 2024 05:18:35 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
|
|