| poortatoeofficial.com/api/grabGoods/randomList |  172.67.185.88 | 200 OK | 6.1 kB |
URL GET poortatoeofficial.com/api/grabGoods/randomList IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hash2366280acc8a9d119eca8b3af18c97bc 28e65e9d722288d4c2ffee052895c9fe0458781e a86a09e8934ebc6217046fbb6296664a19ed8a3a264d9b2c00956ffad9a7bf4c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /api/grabGoods/randomList HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: id
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q1KRdtyygUTb03xyzUC9KOQbZWqCJTgTGDffUsLvNAnJDOvDS9N66vuVBpLNqyMzYKsIQDxCtZ83aA%2BFKzfyQxtZ74xFtXJMfBxw910HCXtFJB%2B5rUK9eeB%2BZV9tYwZrqcDTal75MD8%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e43f5de8569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2888&min_rtt=659&rtt_var=1807&sent=711&recv=327&lost=0&retrans=1&sent_bytes=550029&recv_bytes=29112&delivery_rate=137512&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6526&x=16"
|
|
| poortatoeofficial.com/css/chunk-7ebcf264.7f55b795.css | 172.67.185.88 | 200 OK | 228 B |
URL GET poortatoeofficial.com/css/chunk-7ebcf264.7f55b795.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashf50f7b25d10e1011c1213d3dc964e327 742a5a63bc41a56add9d12ec38d5970773b0eedf a70bf3ac1aabfc84ecb8d3cbaa65f6cb888b3f8973208634a3dd162570159dff
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-7ebcf264.7f55b795.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h%2B9M4lEVkrmufPaUYfD%2BKdgyYRiwsN9LafHVZNerkVvuIXYYhz6K8WxUCKcZEB2PYgkbxb38cImpz5s%2FQ%2B8pyzSSdjHSLQSHOV%2BzIeb8O0udCZnTMIi8LsqAii3u91zW7v76DmRDxWs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-e4"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44f5e82569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4610&min_rtt=659&rtt_var=3607&sent=1122&recv=382&lost=0&retrans=2&sent_bytes=977576&recv_bytes=38469&delivery_rate=787190&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9082&x=16"
|
|
| poortatoeofficial.com/js/chunk-2232cdce.e18fcaf3.js | 172.67.185.88 | 200 OK | 18 kB |
URL GET poortatoeofficial.com/js/chunk-2232cdce.e18fcaf3.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (17619), with no line terminators Hash00143820da7385f7be28bf1e4a8a972a b0b4706b8b2ff718a957d187d14ca552cf307c49 342eb92bdd7693ec213999e94ad0878ef1fe26916499569a6e2b4e70386f8856
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2232cdce.e18fcaf3.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QbEkU8%2BNKt0m%2BM1aNjzLhdZstCTHaEY6tIxG8DMe0YeRicm7Sojl820kmFpHwZydp2Ko7lwip4JyFXLbxuB6DQTAz23OvJUIueWH3RnsV1bqt5AgzQIQIbg06WItSc3DttZFEZmyRiM%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-4597"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45e1f1c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2120&min_rtt=659&rtt_var=1263&sent=1255&recv=449&lost=0&retrans=3&sent_bytes=1056010&recv_bytes=49151&delivery_rate=1181&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11205&x=16"
|
|
| poortatoeofficial.com/js/chunk-7ebcf264.92c23a2b.js | 172.67.185.88 | 200 OK | 12 kB |
URL GET poortatoeofficial.com/js/chunk-7ebcf264.92c23a2b.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (11394), with no line terminators Hash498a899df615cfafc276472b1be881c1 98fbccda6c5d4f420bb0369591076be6ceb7c746 9bd10b776c016be8f501f8bb5f36d42b210fc0ffa2c3423cd0056d1c8397967d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-7ebcf264.92c23a2b.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uJ65CzX9L8WvObGhcDNXAfh4%2FRG%2FGXanx0un11ehvCfH2izzn9ES9B3pRdnCrjJ1uuLogZn3zEsQCiM9uLnrGACNCk3rUjslgs%2FROwCAL0kPTWtLUqljYNvpITPFxyRq03KMgg3Il6c%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-2cd4"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46cefcd569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2067&min_rtt=659&rtt_var=702&sent=1456&recv=538&lost=0&retrans=3&sent_bytes=1183160&recv_bytes=61523&delivery_rate=1014&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13563&x=16"
|
|
| poortatoeofficial.com/lib/flexible.css | 172.67.185.88 | 200 OK | 1.0 kB |
URL GET poortatoeofficial.com/lib/flexible.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hash7524a2ba32138a0363ad48a78f4c7b9a aab46e82603b9de5b1880c0aaddc0d0f29dbf7a6 d68ca73f7b227d0da6b310867a0a588530657bc433fce241b3b2aea1502c10c6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /lib/flexible.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nzknIXQgQ7JGl76x%2F%2BggzAXHB%2FIDO5sAWjX5JWZZJbBullWkFjV254QoVsUifNdRUstnNyZBPZVqRgk%2BtiZs40fAOzoQTNaVqx7Oj2jTtuozSZ%2F%2BLwPLwt%2FenrfBM4htTg%2B%2FCs3b0%2BQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-408"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e41f5c17569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3775&min_rtt=659&rtt_var=2769&sent=180&recv=236&lost=0&retrans=0&sent_bytes=12767&recv_bytes=14350&delivery_rate=2147&cwnd=12000&unsent_bytes=0&cid=c63126c8867fa86d&ts=1408&x=16"
|
|
| poortatoeofficial.com/css/chunk-082f7c94.4fb78762.css | 172.67.185.88 | 200 OK | 4.2 kB |
URL GET poortatoeofficial.com/css/chunk-082f7c94.4fb78762.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (4176), with no line terminators Hash3bb0a325933a9ab0e88dc2ba85602ce5 a8c722a6abc46b8783857bbc0c5bcd45dc4e7c04 28e8c50ef6cb0ebc5145933d38ff0ad53754d5f3ab46d7dedff06df249183fba
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-082f7c94.4fb78762.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OGnUdAOlREk7KzcY%2FJiyka8kgMtlY5cCfqXWr0ZguQOMDr3fFLmH6Q5kXM6BBiC8UqJ6zGrYkCNBnriJr9K5jHgPAWMMdps2mJiU0NJj2iz9Dx0oBvMX8R4vt4Eghuey9SCQYYd9jqw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1050"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e434dd5b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2333&min_rtt=659&rtt_var=1349&sent=601&recv=275&lost=0&retrans=0&sent_bytes=477185&recv_bytes=19731&delivery_rate=14549&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4831&x=16"
|
|
| poortatoeofficial.com/css/chunk-250cd2dc.4cf16b04.css | 172.67.185.88 | 200 OK | 150 B |
URL GET poortatoeofficial.com/css/chunk-250cd2dc.4cf16b04.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash091f4c0d35cf00184a04622ae52b2624 176269dc52ce5d5f6d777745c61c10c2a04c7d25 54e7f16f1832e2a3fa11b2c114ad46c90142c333b5c155353bc0878662bfde4e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-250cd2dc.4cf16b04.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=00%2BbDHmT%2FSWNPgb7%2BF8X6bNtaNDnjBJKwnzAjlORuE5A1VzNr8xrttfBPcRs9usmhSBwKHzfnJoujkE%2Fs%2BmB1bIIk%2BH3UrzgTAyl9QawdF6Dn8sqkb3g%2ByiYydQsrrlD0kuaQbldbxw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-96"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e43b8db8569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4005&min_rtt=659&rtt_var=4406&sent=681&recv=310&lost=0&retrans=1&sent_bytes=530379&recv_bytes=26102&delivery_rate=8418&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5891&x=16"
|
|
| poortatoeofficial.com/static/customer/kf.png | 172.67.185.88 | 200 OK | 11 kB |
URL GET poortatoeofficial.com/static/customer/kf.png IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hashf7d80a98f6b59aaf05ab54c405bffe89 db5cfc26f716a362d10f81633934d9f01c523ae7 ab41101111ba6bf6ecb5ef0aa35ae339cb7b2f09517eff9914dd69c65271ee03
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/customer/kf.png HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: image/png
content-length: 10556
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nN13kiOnKFK1WyZTK7vO0mmT5XcxedgcDIRhwIBWd5FaAx5mf20WZFJE0%2B1EBJtz6r0sofO9fX0SV734LjXm7b%2BaxVosx%2FCJOMVXXV5%2Bdw3B%2FANaNVx%2BFg%2FMuNuNDeF4xRxIdrO7pjA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-293c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e43dcdcd569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3299&min_rtt=659&rtt_var=2745&sent=696&recv=324&lost=0&retrans=1&sent_bytes=535698&recv_bytes=28974&delivery_rate=121148&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6267&x=16"
|
|
| poortatoeofficial.com/js/chunk-210173e0.a5516b32.js | 172.67.185.88 | 200 OK | 8.1 kB |
URL GET poortatoeofficial.com/js/chunk-210173e0.a5516b32.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7977), with no line terminators Hash3856338d5b4912dcd744ac73432235a7 ca8e82e6caad4cb825f1b50fdfd244bc352c9b5f 3356599398fc293cd0d182d64272678ac8c5abe7865d48653f31abc3edd93ed5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-210173e0.a5516b32.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SqNJUM9ml1ltEtuxsOPo5OuPMTUqrEktFwrUDpp%2BVC9in2gMGxcWUvkDJlaROYCJG7ie752BV26%2Bo2l4qXx6mocPGhHTGPY%2BVEM5Di7xFOcuLKZ7Ob%2F494dCHqjs5aLTHLQ1XRaGxB4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1f8d"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45def18569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2344&min_rtt=659&rtt_var=1527&sent=1244&recv=447&lost=0&retrans=3&sent_bytes=1046764&recv_bytes=49060&delivery_rate=1180&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11176&x=16"
|
|
| poortatoeofficial.com/js/chunk-385c545a.49d701ac.js | 172.67.185.88 | 200 OK | 10 kB |
URL GET poortatoeofficial.com/js/chunk-385c545a.49d701ac.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (10417), with no line terminators Hashddb02e45d37e1639cd3384f733bdb3fe 9d991775f4ae663e220277c089e9073a500e6c9f 3282f4d68e030666db13fe7fd07d974a17c345ffadb4198fd8550b426dc29ba8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-385c545a.49d701ac.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AXXKejfCNRZKT0WBZOnXxw83xBVzHB38LhQDgBbnZiIV1U5SAW0LPrKTBK%2BZrqep%2FloRI3ErLQmZkhdhsp59nx9JEXqy4c6E9y1PxaYtTmqHRrj4uYO9jbjddKrvZ%2Fcv%2B527hhcJYPA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-28fb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e464bf87569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3694&min_rtt=659&rtt_var=3453&sent=1358&recv=493&lost=0&retrans=3&sent_bytes=1119573&recv_bytes=55909&delivery_rate=923&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12484&x=16"
|
|
| poortatoeofficial.com/js/chunk-6497b0e7.bd69cf3d.js | 172.67.185.88 | 200 OK | 34 kB |
URL GET poortatoeofficial.com/js/chunk-6497b0e7.bd69cf3d.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (33900), with no line terminators Hashc2cb98b6b5e532236f6cbc46116bcf6a ebc03c679661e156a049cc2ce40787d5653c5b77 3dcf536d9a58bc35045ad633ad7bf93c1b5ce6aa4d54128024c5d50f1814da3a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-6497b0e7.bd69cf3d.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GbvqkJcIV0o8oYrlr6z90zL5WFmM78qkyBxMZcbESMbAkLcaqK0v4vieTx2bOtPbx%2F%2FeUJrg6QtV3tNFynYcapVYZrLnfB63t4xOXwm5NeSIxyB9YryqzKZbjsEqKNKylmRGDo2Y93w%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-8598"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e468cfae569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3781&min_rtt=659&rtt_var=2837&sent=1391&recv=511&lost=0&retrans=3&sent_bytes=1138866&recv_bytes=58155&delivery_rate=925&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12920&x=16"
|
|
| poortatoeofficial.com/js/chunk-7dd52cfb.2bc62dc1.js | 172.67.185.88 | 200 OK | 3.6 kB |
URL GET poortatoeofficial.com/js/chunk-7dd52cfb.2bc62dc1.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3529), with no line terminators Hash7366e2843a611744e4283c9d3fafb6dc f801ab9804692885ff7960297da89067f6ca13ea c4c8ae0d46797a33adaad493835f11d1964158be41388fea2c098da31367c91a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-7dd52cfb.2bc62dc1.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lmVwQjn66SP1MsUlR2NKwv%2FrrLhtTEkI6mPNpBRRAN2CohjuZRV2E4HrPIZV%2BrtILeB7kLuLE42GgLcfhgwDww2UwRNHsMm8iF9AkU%2Bd3c4vGo0Jdh2ahryaJfU1XpPDqP1%2F32sfW6E%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-deb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46c8fca569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2227&min_rtt=659&rtt_var=655&sent=1449&recv=534&lost=0&retrans=3&sent_bytes=1180130&recv_bytes=61103&delivery_rate=33564&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13508&x=16"
|
|
| poortatoeofficial.com/js/chunk-9c1c641c.471bd454.js | 172.67.185.88 | 200 OK | 925 B |
URL GET poortatoeofficial.com/js/chunk-9c1c641c.471bd454.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (925), with no line terminators Hash1630e44870c051f166fa952f722d4725 bc968080544a2e59e8e026de0abe54359d28e39d 6c95e0a7e350c2c80e72c4240857bec35219ccbc7ad3fc34d61290e62a7c20c0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-9c1c641c.471bd454.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fssQ0gQJ6KpAemL8sweZ9NeVi6HuLIII1SYt7ehJWrH7nv6e2yJc4R4yIUKr66QAEUlP%2F5bh1FhUSzhM%2B%2BMSANsajJv46Gyo4NdbPj1OkPnAOYwS8%2BOdpzIv8D3DNjCfJru3mHar9nY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-39d"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
cf-ray: 9333e46e5fd6569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1993&min_rtt=659&rtt_var=675&sent=1462&recv=540&lost=0&retrans=3&sent_bytes=1186530&recv_bytes=61852&delivery_rate=663534&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13579&x=16"
|
|
| poortatoeofficial.com/js/chunk-dd580cf8.9799ae3d.js | 172.67.185.88 | 200 OK | 6.0 kB |
URL GET poortatoeofficial.com/js/chunk-dd580cf8.9799ae3d.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5874), with no line terminators Hash427c56710f73925610ee051dc5dac663 f5a8ee7e08d60ba732d993920d9f513eea3cadb4 06dbeafa1a3d4781512e7e9694f58e994449b19a6f232ffe412d7b7ced396b61
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-dd580cf8.9799ae3d.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B%2BR3OL9MW5pTWrWlW66yF2mlnmgEN7b2T80Ksq1YrsX1EATAG5Q%2BO%2BUKuspc%2BevKaKbtBCW6XRYSdc7ogvw0y%2Bxf9z2RaFhoqmFKwHOiNeQScEGFCb90gSa7L8LQsiy6%2BPkE0TELSsc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-175a"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4709fef569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2641&min_rtt=659&rtt_var=2581&sent=1536&recv=566&lost=0&retrans=3&sent_bytes=1243101&recv_bytes=65884&delivery_rate=1146&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14175&x=16"
|
|
| poortatoeofficial.com/js/chunk-07fcca66.3713bd62.js | 172.67.185.88 | 200 OK | 13 kB |
URL GET poortatoeofficial.com/js/chunk-07fcca66.3713bd62.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (12986), with no line terminators Hash36705a3e190a0763b7a84db8659258de ce14f2c6d403e0a3d0aa85232cf1f5e807d35a02 7321e0821f4d4e539f2db06b34a95ef7b946a3c0492a5b63fed8e271ea9ea145
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-07fcca66.3713bd62.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t1Ggl4RMSPQ3v0%2BwmNp0Ble3%2FRzzw6ZcCQHMv5ig2EkwaLAz4VY7%2FL7KbXxTX2Tdu2kwNGKh2St%2FxntctO3B9v%2F80uqLfo2QoSmDcrFrK7XLXHGL%2B4vChwI2NZNgLtwH9%2BiuLR9I750%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-32fc"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e458fedd569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2707&min_rtt=659&rtt_var=1373&sent=1190&recv=425&lost=0&retrans=3&sent_bytes=1010688&recv_bytes=45922&delivery_rate=1127&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10609&x=16"
|
|
| poortatoeofficial.com/css/app.d9dd8eaa.css | 172.67.185.88 | 200 OK | 124 kB |
URL GET poortatoeofficial.com/css/app.d9dd8eaa.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size124 kB (123856 bytes) Hash7516d2d1bae50dae31ca91bcdbf4ff0e 279374276ecc3831b934c68bc4f640e3c9c30f92 22b9bfa332cd539876872dec36d1f9fe32eac4fe0d7ce6d30b199fd699306dfc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/app.d9dd8eaa.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z6dwGIrCGPcRO9rbAuRMKdzwdt93jZSihJi0mbdOWEuIm1XMzJzGuvtXOEnhMlXbjpGQs6XA524tuPvOIz6hIl81%2Fwtdpj%2FktoWcQeG%2BG8USmOnFyQH4mQi4%2BOONL3fUfBAqaA%2BSRto%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1e3d0"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e41f5c19569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3233&min_rtt=659&rtt_var=2524&sent=196&recv=238&lost=0&retrans=0&sent_bytes=28108&recv_bytes=14439&delivery_rate=1331306&cwnd=12000&unsent_bytes=0&cid=c63126c8867fa86d&ts=1608&x=16"
|
|
| timephoriaofficial.com/api//file/cfg/202411/11/a1a09d699d87430c8bb3d748de36d444_.png | 172.67.143.184 | 200 OK | 269 kB |
URL GET timephoriaofficial.com/api//file/cfg/202411/11/a1a09d699d87430c8bb3d748de36d444_.png IP172.67.143.184:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjecttimephoriaofficial.com Fingerprint51:46:7A:B9:0A:9C:EE:AC:16:9A:10:33:CF:AA:79:76:C5:E7:D6:4F ValidityMon, 14 Apr 2025 04:52:47 GMT - Sun, 13 Jul 2025 05:43:56 GMT
File typePNG image data, 900 x 270, 8-bit/color RGBA, non-interlaced Size269 kB (268890 bytes) Hash6d7eb7056b27adefb7ac91f144df830f aa0abb93d96662d088359a37e9ec781bc30c78c6 19c2d5786ca95e5a8c6e5ecf74543f112b42e940c86e98bc8fc8b701048bc03e
GET /api//file/cfg/202411/11/a1a09d699d87430c8bb3d748de36d444_.png HTTP/1.1
Host: timephoriaofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: image/png
content-length: 268890
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1MVyn7DUam0rQpt7PsnwaZb6O2gQdutDRG%2FSwN3NRIiokYRfnOOYwomT%2FRmxBXx6GJh3JDbteFKh74MY39tZvByKRcB6B%2BVDAFf3MxiUFF4Bg9LE2ZF%2BlD8SthyXXHMGII2a6NGUYk9A"}],"group":"cf-nel","max_age":604800}
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Fri, 07 Feb 2025 21:01:28 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e4479d18b529-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11761&min_rtt=1981&rtt_var=12096&sent=187&recv=39&lost=0&retrans=0&sent_bytes=191358&recv_bytes=3839&delivery_rate=16245949&cwnd=96000&unsent_bytes=0&cid=cdd6ae20eff6ceb1&ts=1860&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d0b5a45.56c54e82.js | 172.67.185.88 | 200 OK | 3.0 kB |
URL GET poortatoeofficial.com/js/chunk-2d0b5a45.56c54e82.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2990), with no line terminators Hash94fce710d5a4657ee567a62c74db1020 7ba4b6cd93bbe00ec7526c06673b012e14cb2bc3 6ecd051eb49d14764dfe92c78184c6d25717d50084cdeea8959811337848641d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d0b5a45.56c54e82.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0UJqczjAOac82KUqkY%2BtCa6h92iuuS6M8jRO9FkwDkOyOOlOVJouRJszQs1ubBwAU3DljhWNGepZZBJ%2FYA3KkN3z8yFlbOd%2FdEFqdV4mFWZTZmuTZVJ3hLLRyBaaBim%2BUMtdwtkGVD4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-bbe"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45fff36569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2087&min_rtt=659&rtt_var=809&sent=1275&recv=457&lost=0&retrans=3&sent_bytes=1069293&recv_bytes=50703&delivery_rate=1147&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11502&x=16"
|
|
| poortatoeofficial.com/js/chunk-37bdd3b6.8da593e9.js | 172.67.185.88 | 200 OK | 2.0 kB |
URL GET poortatoeofficial.com/js/chunk-37bdd3b6.8da593e9.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (1955), with no line terminators Hash7b9c54390fb3760f7b24fb6ff534a1f2 8bc648894b0a00e669faefff31e5567ebaa7484b 2782db1d2b5d5dc87af62ede8da2b2f4a3bd5d95f974fa54a32c893a504fa85e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-37bdd3b6.8da593e9.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2CUN0hxtbjy2MwPFm8sUvtQqoU10Gsye3CKQwclkQzwEsL130uqgAyOUKZxSYNM2kW%2BQ7zwn47r%2B0YvuPkTTZPwoqyVHQCZ1WVgkMPKyn1frLFIjU0cfyqqBBByRMRYxkLPEUXMg3%2B0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-7a3"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e463af7d569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2050&min_rtt=659&rtt_var=1327&sent=1352&recv=489&lost=0&retrans=3&sent_bytes=1117842&recv_bytes=55007&delivery_rate=354708&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12315&x=16"
|
|
| poortatoeofficial.com/js/chunk-72dc411c.55be5a78.js | 172.67.185.88 | 200 OK | 3.5 kB |
URL GET poortatoeofficial.com/js/chunk-72dc411c.55be5a78.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3437), with no line terminators Hash8b4ea8ad78eaf5cbe82acd657598f6f6 11c20300ed90f7b6e8c4e4c68c82e19a104c8385 2e5535d67e19be4bd210ba0e3b58e674d7d737d73f000ef7bf3b9d481fee4a5f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-72dc411c.55be5a78.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JpKsLUG88a56Wx%2B0hpYD219quKRb8Y8dhh3gfubsy5BhZ7Jf%2BtTdCanKzNXaaHqM39nJHanTZSIHNcGSofSkMI1AFLLjEQjtyl91KL0kBP9XwAylOj4xG7k0SYfv3rw2uSndSjzqB3c%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-da5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46adfbd569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2530&min_rtt=659&rtt_var=1482&sent=1434&recv=525&lost=0&retrans=3&sent_bytes=1173499&recv_bytes=59743&delivery_rate=1165&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13239&x=16"
|
|
| poortatoeofficial.com/js/chunk-75292e3e.aec0c6fa.js | 172.67.185.88 | 200 OK | 6.9 kB |
URL GET poortatoeofficial.com/js/chunk-75292e3e.aec0c6fa.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (6711), with no line terminators Hash068d827e81f3643021999d1540fdd5ed 222d029f95be902ecc892bbf6394509c8ff96d2c 6c7c7cb24a4292a85aba6155e032cb866bf2801f93bc245ee8cbe94eb07bef35
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-75292e3e.aec0c6fa.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xLwpSaS%2BOsKNS0XBpFYzhJduQ5MKatp7yMLckP62aKocl3Vd3zCbLiLWHRTu5jajuiXW%2FUeTd8iovQsPl7QhgnemxtDdYJov1cTL3ltec2PjTMLCdnGxVJxJArccyDO%2FrvF3huQ5l2w%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1ac5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46befc6569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2367&min_rtt=659&rtt_var=1077&sent=1441&recv=531&lost=0&retrans=3&sent_bytes=1175844&recv_bytes=60966&delivery_rate=1117&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13420&x=16"
|
|
| poortatoeofficial.com/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css | 172.67.185.88 | 200 OK | 243 kB |
URL GET poortatoeofficial.com/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size243 kB (242926 bytes) Hash0005accf931955eec5ed86f897e0d360 7ae89839cacb8637600a3b0067fe8611edae2f65 277dccf22d817aecf00496f547b3704907d454570f579e5f9d147435de498557
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N2BpFRrY2noEBwKJti%2BuOlx3TX3xl%2FWPIUeOZgkWApoG019Vqfp9B3g96YadM8wofKbgupKl8nPovvT3me1U2kkhaUbIYbSTQfyx0xobOBF%2FXF6MVrsYFyoCIW%2FSg4NtU2P5w7CPids%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-3b4ee"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e41f4c15569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3239&min_rtt=659&rtt_var=1631&sent=256&recv=243&lost=0&retrans=0&sent_bytes=98382&recv_bytes=14662&delivery_rate=14650761&cwnd=36600&unsent_bytes=0&cid=c63126c8867fa86d&ts=1631&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js | 104.17.24.14 | 200 OK | 23 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (22712) Hashc019be63e713ce6f2aa221c0df8fa0cb e5471888945144f233714d470959059c010eb667 87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce
GET /ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 6201
cf-ray: 9333e41f8a775687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402b-5915"
last-modified: Mon, 04 May 2020 16:17:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 100337
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MxgTMV2%2BzP9RE%2B2t9OIJRVa3eKjgSSalI6UB2xoQUaqolYWMg6BH1KTYv93%2B40SpkUM2emQ3zSyTdTdAyaJHsfYS68lBEkhe5bfr%2B1E%2Fzz6hFxu88b5cps5lN2Xf7WzXKSQjEm0U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/js/chunk-9c1c641c.471bd454.js | 172.67.185.88 | 200 OK | 925 B |
URL GET poortatoeofficial.com/js/chunk-9c1c641c.471bd454.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (925), with no line terminators Hash1630e44870c051f166fa952f722d4725 bc968080544a2e59e8e026de0abe54359d28e39d 6c95e0a7e350c2c80e72c4240857bec35219ccbc7ad3fc34d61290e62a7c20c0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-9c1c641c.471bd454.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i78dM7VJw%2FzGl7Ls8w2vgLtKtSQS%2B5fFYwvqfxIymiqISper2Lk5Ec1xvkDNY1L3jtZmd0Ni60epFqhp8Tlk%2BsEvqxj82gJswYK1kjiSnUUqX9cA1AEdWcjV4LgvPgPHF2AznEXiHL0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-39d"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e438dd93569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2669&min_rtt=659&rtt_var=1357&sent=626&recv=289&lost=0&retrans=0&sent_bytes=488317&recv_bytes=22711&delivery_rate=8587&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5249&x=16"
|
|
| timephoriaofficial.com/api//file/cfg/202503/27/9b8aad32f9d84464bb5d4b3f17aa2c51_.jpg | 172.67.143.184 | 200 OK | 66 kB |
URL GET timephoriaofficial.com/api//file/cfg/202503/27/9b8aad32f9d84464bb5d4b3f17aa2c51_.jpg IP172.67.143.184:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjecttimephoriaofficial.com Fingerprint51:46:7A:B9:0A:9C:EE:AC:16:9A:10:33:CF:AA:79:76:C5:E7:D6:4F ValidityMon, 14 Apr 2025 04:52:47 GMT - Sun, 13 Jul 2025 05:43:56 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 900x270, components 3 Hash43bc7ac254f8883470a7a985d896d2b0 10acd1fbf2c44ac051d2394a8b07674b6343272b d86c0e5eb8c2162b0ea5f868b0792b57bc361c2ec4099b18df384cb99cfe3225
GET /api//file/cfg/202503/27/9b8aad32f9d84464bb5d4b3f17aa2c51_.jpg HTTP/1.1
Host: timephoriaofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: image/jpeg
content-length: 65711
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QdoDSjgyZltoOvcPlmBuTpc2ICRTeLk9DJ2yjnfX1GmuPJPueuSoAiu0X%2FQ%2F7JJrWGUNZA8u2uWGnDUdh3vgUPzq876s7XiC4Ee%2BQTaOIrdY8NYkaSPKDPXlGegpKA%2FKXjB%2FNP9iFZNE"}],"group":"cf-nel","max_age":604800}
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Thu, 27 Mar 2025 14:54:46 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e4477d15b529-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10865&min_rtt=1981&rtt_var=10863&sent=215&recv=40&lost=0&retrans=0&sent_bytes=223550&recv_bytes=3885&delivery_rate=6221759&cwnd=96000&unsent_bytes=0&cid=cdd6ae20eff6ceb1&ts=1880&x=16"
|
|
| poortatoeofficial.com/static/theme4/vip/vip2.png | 172.67.185.88 | 200 OK | 198 kB |
URL GET poortatoeofficial.com/static/theme4/vip/vip2.png IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typePNG image data, 650 x 412, 8-bit colormap, non-interlaced Size198 kB (198171 bytes) Hash8e8868ae8ab2b29bb6ec8c41413224ca 777c75b0add4a8600f7b15956e9612e4077a1875 2d058109cd0204553665bd8a649b218bfae8ea505990e179072c536a47563a03
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme4/vip/vip2.png HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: image/png
content-length: 198171
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z9WCtwrJxl%2Fv7twajBAn1%2BKwoee%2B%2BY%2By%2FE2iBjAvAgyXQHiHlAGlrKOV4pMVH98sAX3USUGz19t0EvKzBS238rrZH8VnbuMIa91gB5Q5AwgZONifLUaiyaf1w9EwR4gdTqoF4TzRTso%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-3061b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e4482e3c569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4595&min_rtt=659&rtt_var=4118&sent=900&recv=360&lost=0&retrans=1&sent_bytes=737384&recv_bytes=34843&delivery_rate=865000&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8122&x=16"
|
|
| poortatoeofficial.com/css/chunk-2232cdce.9ea87d6e.css | 172.67.185.88 | 200 OK | 675 B |
URL GET poortatoeofficial.com/css/chunk-2232cdce.9ea87d6e.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (675), with no line terminators Hash1c45f5d00044828f6731d3b19fbb5d20 a54da32a2c9a2cf722946ba08e0dfc786151f32a 8dab559fa7fd40bddc56d28a07aab471b6269e17c14689034f08da90989d763e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-2232cdce.9ea87d6e.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E0tJx4hdUiMLQk4O1KFHucPZIf2WiUURPUc5wrTb2xL9xu9OnH6urh1LgusHp5Sr8YOn4%2Ftw0pVMaUkYAvxHW0f7HIQstEEe5V3%2FxMq1n5eYkWni90fcPeefZ2RO4OAzC3crZJZtOb8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-2a3"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e43b4db4569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4294&min_rtt=659&rtt_var=5104&sent=679&recv=309&lost=0&retrans=1&sent_bytes=528658&recv_bytes=26056&delivery_rate=407705&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5851&x=16"
|
|
| poortatoeofficial.com/api/poster/notice | 172.67.185.88 | 200 OK | 10 B |
URL GET poortatoeofficial.com/api/poster/notice IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hashb9e754add75d51d888ce7585dc9dfe41 0fd53114199a1a46e887032b7efa05f1fd74c807 7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /api/poster/notice HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: id
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j7N%2B95WjUpib0uCBmNkPg1dQVH3iYdbsC3G%2BnxsBCONltIMckDjeQlXb7qO5plSDsf%2BMDzWhqFBWXxgq52YIjSVwsnOhifx9JnldnAS%2Fp8XSticAEJ2UnAga4%2Fz4yYqwYU6Q8f%2F9saE%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e43e8dd8569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3270&min_rtt=659&rtt_var=3756&sent=692&recv=321&lost=0&retrans=1&sent_bytes=532309&recv_bytes=28836&delivery_rate=24581&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6158&x=16"
|
|
| poortatoeofficial.com/css/chunk-22eab366.3de4d22d.css | 172.67.185.88 | 200 OK | 6.0 kB |
URL GET poortatoeofficial.com/css/chunk-22eab366.3de4d22d.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (5975), with no line terminators Hashf700f2caf779c7992215aa33a3895de8 69b05d8641d3d9f715e6e33238d3625d285d6ff2 0418c1c7a267365c8d7bd2a87fc8d29c684f713fb99ec4438bf2ef8d90f1add0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-22eab366.3de4d22d.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o24fX%2Fsru22aRrv6Wf26VXLHODmg2HT%2FNY2UAYvVfeD8Cct8B%2F4hMgh%2BEa%2FtFqjHkmj7iC%2BBptvGArYiYrKV8CB7oHzue81qhq3IaauA45ztQFR%2B0kPOzPZ0Dm5zabaz2q2%2BICpf6Sw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1757"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
cf-ray: 9333e43b8db7569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1987&min_rtt=659&rtt_var=753&sent=653&recv=302&lost=0&retrans=0&sent_bytes=506924&recv_bytes=24496&delivery_rate=1144642&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5621&x=16"
|
|
| poortatoeofficial.com/css/chunk-2f854f93.59a5b0d0.css | 172.67.185.88 | 200 OK | 148 B |
URL GET poortatoeofficial.com/css/chunk-2f854f93.59a5b0d0.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash91335324eaa697b13a8476e9ca26b46f 58ab7b787cf8b7905a4860b093ba05d49538a07e 11fce1fa144053c50cbffca168b6a326485b431a7d0a0b58f83d916cd6b16a4a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-2f854f93.59a5b0d0.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xd8vJJWCuorctU1hcM%2Btnii4ZwzGFwcG%2B69FQORS7tgky3GB%2FTvuMHEN1T4Sax%2BwF2gmu67EA22ntquy5V0Ni08NMG8spj9j0tvNZUxkiEFphVmtFfiH50JQLAtp2cKPK9mu0g3TvNc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-94"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e43b8db9569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4005&min_rtt=659&rtt_var=4406&sent=680&recv=310&lost=0&retrans=1&sent_bytes=529631&recv_bytes=26102&delivery_rate=8418&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5886&x=16"
|
|
| poortatoeofficial.com/static/theme3/tabbar/order.png | 172.67.185.88 | 200 OK | 379 B |
URL GET poortatoeofficial.com/static/theme3/tabbar/order.png IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typePNG image data, 64 x 64, 8-bit colormap, non-interlaced Hash549ffb680d0527849f31e5995d16799e 5b9749927e26c7f219f9170784f37a9dc1861c6d c5ee884416417d216686fbbdc70e12525210e9c016655a7020f729d95e5d025e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme3/tabbar/order.png HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: image/png
content-length: 379
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6HMYwVBo4qmAclPrL7LukSF3DAYyKJm2ulZC%2BoS6Dkzjrdw0PQxqk0bVdqkahVpDiqsyZJUiTJ5GA%2BaH6QeU%2FfNfqnR%2FEjGNDxc5%2FfkmGY3DuCusbcGbOajyyegQ7jGEfL%2F2SE5lzXQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-17b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e442ce05569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7171&min_rtt=659&rtt_var=6646&sent=865&recv=342&lost=0&retrans=1&sent_bytes=718383&recv_bytes=32093&delivery_rate=34245&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7060&x=16"
|
|
| poortatoeofficial.com/css/chunk-62a9efce.a1c2f75c.css | 172.67.185.88 | 200 OK | 3.4 kB |
URL GET poortatoeofficial.com/css/chunk-62a9efce.a1c2f75c.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (3443), with no line terminators Hasha3c7f40f0c8b465b29b017b388f3b3df c9bae219f9bfad67f0d5e60a87dad18b81c08bdc b1c75d71125796bf67ed3f98227622683636475f7be80b9f026167f5164b69f3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-62a9efce.a1c2f75c.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RXai4ksN2yGpaVfv6mJUQsDg0D2mJIqc18oCoxQynaZSftxSbddFyJ5k1Hu6QY354MHNadlvDXrVXK9zJYAPX3ACTkYJEWTMvBK5ZZizRjLozExBdYZOnBBN0GIo1e1l2wRwPb1qMQQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-d73"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4498e4a569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4595&min_rtt=659&rtt_var=4118&sent=928&recv=360&lost=0&retrans=1&sent_bytes=769677&recv_bytes=34843&delivery_rate=865000&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8125&x=16"
|
|
| poortatoeofficial.com/css/chunk-ea10d27c.3f957fea.css | 172.67.185.88 | 200 OK | 253 B |
URL GET poortatoeofficial.com/css/chunk-ea10d27c.3f957fea.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash86eb66b3c6d53d42ebe6a71244d90efd 3253262a2522f786af490caf5627567895081dac 59400816d68cb071f60a8e22fa661be479c8bc9ec6d8531edb2776e28c20c1c9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-ea10d27c.3f957fea.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v2GYmVn7J43r77tIHVOD2gBG15x3JFuuQ7ZxMhPLMmEfHgvBfPv9yU8OamdyJx33EMAEZSP7mKIDICTPE546vuF6qr%2FlMT%2FFh0Ir80QVwft%2BuZE%2BmXPXMO9Ag3DWEbzRISsWTmCZEI0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-fd"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4559ec1569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4305&min_rtt=659&rtt_var=3574&sent=1153&recv=406&lost=0&retrans=2&sent_bytes=990105&recv_bytes=42663&delivery_rate=24501&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10056&x=16"
|
|
| poortatoeofficial.com/js/chunk-1208543e.43571b0f.js | 172.67.185.88 | 200 OK | 3.3 kB |
URL GET poortatoeofficial.com/js/chunk-1208543e.43571b0f.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3324), with no line terminators Hashbe975a74c0a808d6e18bc308100f1a0d b59e8ea3b99405f507e081fdfc2ad6996be8fb15 ba5fad0d7a49a3add3dba0c5b1d31279d314011a0938844ff1d3a5f3e143dd33
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-1208543e.43571b0f.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EYVhdCvOfAuFbFSKptVuOrry5hNeYQWiwwdEhEGWzBKJuBi0ATt69pCA2Vz%2B0ZBAAdWrNAdGPShK7nsAbLWLcZSukCEv9ILp4t4DUjBw6llkmPTuiskBuXUzefQWhtw1LrMdzr3D6s4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-d08"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45a9eed569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2394&min_rtt=659&rtt_var=1819&sent=1215&recv=434&lost=0&retrans=3&sent_bytes=1029789&recv_bytes=47044&delivery_rate=1309488&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10879&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d237720.3ddd2a7f.js | 172.67.185.88 | 200 OK | 2.8 kB |
URL GET poortatoeofficial.com/js/chunk-2d237720.3ddd2a7f.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2772), with no line terminators Hash921620e96be524fffd62ac1e3eb4ee5f 511b2be8f54ff6670d29086f78c2448d8824ca3f 246d5330e04910431a9ccba22bb57791ccdb1d0fa6322ad451b38e962fcd7d1e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d237720.3ddd2a7f.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=btOkmtl%2FgCubAmpgAihyPeOwP0InUtJOcGty5%2FU5%2Fqym5RcF9%2FzsecVs0FMDPmmaJX27ZBxs2gBqXF4O6Gs1qchTeiv12ZZARYYjrPJ6%2BiSogGsksnfNscIWM1tAjcN4Y0wl8s%2FSMYA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-ade"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e461ff5f569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2156&min_rtt=659&rtt_var=1360&sent=1321&recv=477&lost=0&retrans=3&sent_bytes=1097926&recv_bytes=53512&delivery_rate=10845&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12026&x=16"
|
|
| poortatoeofficial.com/js/chunk-b81b8d9e.66ba2cd9.js | 172.67.185.88 | 200 OK | 4.8 kB |
URL GET poortatoeofficial.com/js/chunk-b81b8d9e.66ba2cd9.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4774), with no line terminators Hashc527d2ee0b84ab00c0bddc8904c3a5b1 4c26e31f41e24ba0258fc88cb8348b57e18753e0 ab8a9a7286dbb0b3778af36ceb8736f7bb613c0ecb600e9b18f73d1915cd0c24
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-b81b8d9e.66ba2cd9.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WYfs%2By75f%2F%2Fh%2FgGcvxT2YzEZCjt9J55h%2BMq5rFQXyGDd0%2FodEP%2Bunbw1NLmOyjVvs47gd1ID%2FOQkv%2B14kRLrTrhG4vpYu9BZVF8XdfON%2FRL1YbOIb83kG%2BMuKgyEXEpNCY9dIYEmhRA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-12d8"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46ebfda569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2896&min_rtt=659&rtt_var=2299&sent=1473&recv=547&lost=0&retrans=3&sent_bytes=1190395&recv_bytes=63121&delivery_rate=12070&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13857&x=16"
|
|
| poortatoeofficial.com/js/app.5b2e15f2.js | 172.67.185.88 | 200 OK | 1.1 MB |
URL GET poortatoeofficial.com/js/app.5b2e15f2.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (55220), with no line terminators Size1.1 MB (1054958 bytes) Hash1e449fe4b88396450a23236e6c8edbb8 1974188847e95f8e3c860bbea197d4e0362fd1af f397553a86a42d38a16ee75920aab93e27cdb57340edc4e2966e12632c21a6e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/app.5b2e15f2.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qce%2F4TGZ5GK%2F%2BXzWQ80KX2qR2MXFZ4VjJpRanslcNLpmzDq%2BfKg2XuD00%2Baq3HgWywk%2FzgbIP1PSmPM4p%2BvxDdmbhcScSa7TFFCwxk09Bisi7UWibUIwPa8lcDTnfnVbMRKQQmvnDQE%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1018ee"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e41f5c1a569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3239&min_rtt=659&rtt_var=1631&sent=286&recv=243&lost=0&retrans=0&sent_bytes=133783&recv_bytes=14662&delivery_rate=14650761&cwnd=36600&unsent_bytes=0&cid=c63126c8867fa86d&ts=1637&x=16"
|
|
| poortatoeofficial.com/css/chunk-543bfd0b.0b806ae0.css | 172.67.185.88 | 200 OK | 110 B |
URL GET poortatoeofficial.com/css/chunk-543bfd0b.0b806ae0.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash816d80b42a21f216380a30e6500d6f7a 3756ef95852f0629166368525773a88d8e0bdd89 4b85d91cb2ba95400d06be06c2c8ebccb68766c332ac2a914cc9678316febe8f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-543bfd0b.0b806ae0.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7tAaN3RFoyIJ8C3l9kH8QgQQmptsIPa2xOUm%2BWOD4cWxHyydZoYwMJMK4V8RwHMyqfJGT4CPmX00Ir%2FuSAbKAS00VtiWhZkK%2BXsnXogTiOPoRsOvhP9QMPMg8m76lSmakk%2BboipFSzw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-6e"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4486e3f569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6177&min_rtt=659&rtt_var=4955&sent=888&recv=355&lost=0&retrans=1&sent_bytes=730964&recv_bytes=34379&delivery_rate=39212&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7733&x=16"
|
|
| poortatoeofficial.com/css/chunk-dd580cf8.3b8d239b.css | 172.67.185.88 | 200 OK | 385 B |
URL GET poortatoeofficial.com/css/chunk-dd580cf8.3b8d239b.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (385), with no line terminators Hashda304e91f724c981b86055b5b892242b 09113eb4172667d4e4b89785a76899e15a16706d 2f621728e4a02dcb2938d8d5e36bd42b2d74ff924d44bafeb4dacce343ecbc6a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-dd580cf8.3b8d239b.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gCiY9xhtstP%2FpfrRaraKxeyjeFCLPabr8KCFt8XQ4X%2BDOyB5Rn3GiDzjtI%2Bi78%2BbCANF7bYS2s5qSWHSz12wFGjXwz6ysGUEwdSKY0a6%2FRigNgw700SPDz5khjBboSclQUr7dw084VU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-181"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e453ceb6569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3468&min_rtt=659&rtt_var=2612&sent=1135&recv=392&lost=0&retrans=2&sent_bytes=982501&recv_bytes=40354&delivery_rate=34451&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9543&x=16"
|
|
| poortatoeofficial.com/js/chunk-189a2af1.95ec99fb.js | 172.67.185.88 | 200 OK | 2.8 kB |
URL GET poortatoeofficial.com/js/chunk-189a2af1.95ec99fb.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (2805), with no line terminators Hash468f6b31fc895c922124770cf6c2e8cb 08df2fe814f49ce944d01335fb57de8c217c3fb5 880c31a4e7c722887deea7342f8e3f11d548a36d5373cbeab820cbbe242adb26
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-189a2af1.95ec99fb.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nV4sDResSWyago2VuY8feubiQtBAjoz9iQYaA92YkXEV246fjCufqDIHzmok5qt%2BdU02j3ZRU%2BO%2Bjz3iimIitEKnT%2BQy%2BgslVmj%2F0xmZTYDb55gb6U9wS2eDKmlWEq1%2FKvFeQu2hPIg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-af5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45c0f04569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2394&min_rtt=659&rtt_var=1819&sent=1213&recv=434&lost=0&retrans=3&sent_bytes=1027999&recv_bytes=47044&delivery_rate=1309488&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10877&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d0c0c19.34f94ab7.js | 172.67.185.88 | 200 OK | 4.9 kB |
URL GET poortatoeofficial.com/js/chunk-2d0c0c19.34f94ab7.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (4892), with no line terminators Hash125ff31db350cf9597538aa922abc1ab 6a5ee9c564ee56ce697f4469e6fcd2e8648b967e b184355349c8e7751662b720d1dcb2cf653711a979e77f39ab0cf929c60b9824
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d0c0c19.34f94ab7.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EhRzrYABELxJr6XxR7Z%2FjPN%2Bxn%2B3lC6x2nTMxMTSfyUlIo5RaMcBwU4owSis8lBGE8G99kWuMYSf0q%2BDI3aGUe%2BL6QrPcxqnXYSoKLNcvUHex41fVwgG0v5peF6s1ZAPAm9z1ChH0W8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-131c"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45fff38569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2087&min_rtt=659&rtt_var=809&sent=1277&recv=457&lost=0&retrans=3&sent_bytes=1071427&recv_bytes=50703&delivery_rate=1147&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11503&x=16"
|
|
| poortatoeofficial.com/js/chunk-604fc2c2.29fdfcc1.js | 172.67.185.88 | 200 OK | 37 kB |
URL GET poortatoeofficial.com/js/chunk-604fc2c2.29fdfcc1.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (36809), with no line terminators Hashdac4f479b205a55ca708ac53c565a5b7 94cf2bcef9ef38e7098f470cf2e1e5677fdfa78c 3df6967a960199028dedba01971050eacb5695a09abc9c288d80577be886add8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-604fc2c2.29fdfcc1.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2BDz8ApdR6a%2B4Vb0FtNgLXf2ZdvalmJfnPHVWJXaJkhdu%2BLaWl01fD5L4SjhiBcUrMQk%2FrNaMi5agmkAbKx34KuXgikmUJXDjX4mCA0KPcGI4%2BfP8zFtYyHh6QKffnAGReIDSy09Tj0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-9153"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e467bfa1569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3495&min_rtt=659&rtt_var=2699&sent=1398&recv=512&lost=0&retrans=3&sent_bytes=1145661&recv_bytes=58200&delivery_rate=3616555&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12936&x=16"
|
|
| poortatoeofficial.com/js/chunk-ea10d27c.78d39e0f.js | 172.67.185.88 | 200 OK | 11 kB |
URL GET poortatoeofficial.com/js/chunk-ea10d27c.78d39e0f.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (10785), with no line terminators Hash5582c866f958f4fac17ccfab44b6bf65 941554a136521be2ea345957cd8ae31b6610df2f 3d66d606b04a9129f9857949ade52a6022553fc4d9aee0716a045e7fef687462
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-ea10d27c.78d39e0f.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z50Qkl3ZP8TOCX1yUFR8tBlaoK%2FfPM1j8KgwlNWHX2XwysiynQc5FWAcq7yYa1y4eD74QDXv7DUd16Wkc4TFoh%2BH2ZpOd143nKPMu9hUXWuYfM1LnR7EjDkXGUx6bSx3DSXTCX1%2FUAk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-2a6f"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4720803569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2148&min_rtt=659&rtt_var=1475&sent=1572&recv=576&lost=0&retrans=3&sent_bytes=1277281&recv_bytes=67051&delivery_rate=1163&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14375&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js | 104.17.24.14 | 200 OK | 63 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.3.0/sockjs.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (62696) Hashf0a01fa31e644ca44836356a172ba7c9 e81438a79e8a7f34423168c70696cff2a820dbf1 840ea076b43dbf564a909bb082dc287740a96f3c4483fcc024f7176306daecc7
GET /ajax/libs/sockjs-client/1.3.0/sockjs.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 16651
cf-ray: 9333e41fdae85687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd5-f54d"
last-modified: Mon, 04 May 2020 16:16:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 221206
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eX%2B1JUJJgtk5ZM0euFAD67fN%2FRUR9A%2BdMyJwhH3JWgQl%2FB0LF%2FRV2AaKbO7af%2F8UFAPjcLAb%2F93%2FaTiKJDTKYp912uxmuZU72He3lkie4T8Lx0AKmXYPu6YljVixP3TTXIycgY0N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/loading.png?2222 | 172.67.185.88 | 200 OK | 14 kB |
URL GET poortatoeofficial.com/loading.png?2222 IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeHTML document, ASCII text, with very long lines (8611) Hash1636a003f1d39d2080015dc1e934e08f d01ac5823f610b4193b13cb6f22b590879f4cdb2 eb578c44441fd74595b4c4c5ae564b0019caceea4e8aceb5aff02c09b8125219
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /loading.png?2222 HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/css/app.d9dd8eaa.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:20 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EXBDrx9neRVPWEuIHsgHhm7NVb5uAqy%2FS%2B94qgE6KW8g3Bi0mNOri8pVk%2FImXztPvDw3kErUX%2FLTPjZzWgXeYEzyOcROn4t%2BMFCkEI6XxoDdn9RobvjUiNL1%2BXOed59gRpVPLPKZytU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9333e42c4c8a569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3130&min_rtt=659&rtt_var=2104&sent=560&recv=255&lost=0&retrans=0&sent_bytes=454799&recv_bytes=15453&delivery_rate=9423412&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=3447&x=16"
|
|
| poortatoeofficial.com/css/chunk-14939100.86727a02.css | 172.67.185.88 | 200 OK | 181 B |
URL GET poortatoeofficial.com/css/chunk-14939100.86727a02.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashd767b20d058befb6c98cae9d3540410e 684d5509c3be8409e6a48c75f83c4cf6af2de9a8 84c397df3adc89e32d1c2389561375aa1e4e6dfca8abf83904d6823b23ebabd9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-14939100.86727a02.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yk5Z%2BolMFq8%2FbOEKde4rqbwZEf5tlYorImjCj4Kb6ts6POwU9KlqEnLkS9thFoQwUHpw%2FvntYJTaS2aEKNoHYMp%2BOQUq%2FYUaLbwcLoGi8nNXAcXsoeGe%2BSTGNw0TxXZWNf4yxlHI1ys%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-b5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4387d8c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2367&min_rtt=659&rtt_var=1307&sent=629&recv=291&lost=0&retrans=0&sent_bytes=490142&recv_bytes=22802&delivery_rate=520250&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5386&x=16"
|
|
| poortatoeofficial.com/css/chunk-fb459430.bd9969bf.css | 172.67.185.88 | 200 OK | 470 B |
URL GET poortatoeofficial.com/css/chunk-fb459430.bd9969bf.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (470), with no line terminators Hash70d16a216ef809a3099eb454f0301556 bc079753a85ae41c1dea8010f4aa40ddd030f15b a7e8304da6921b1aadae0552aff571ad2dd3744e0941d37b2595bf3138279c6c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-fb459430.bd9969bf.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2vEEC2SwItLkqB2fR92j2nMSom5U1t4Y0U5sn9FVoiteVjVVOwaE8HIVfGWuOu21YXz%2BX0gSo0zxnpW0GzVoDMsX%2BXX5ifqGy6SUXwir%2BwbGq%2BYkdHS4fPwElC8o4jgxpRDZMbqn6Kg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1d6"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e455cec7569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4238&min_rtt=659&rtt_var=2713&sent=1156&recv=408&lost=0&retrans=2&sent_bytes=990985&recv_bytes=42755&delivery_rate=1104&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10095&x=16"
|
|
| poortatoeofficial.com/js/chunk-079fc55c.5fe16b39.js | 172.67.185.88 | 200 OK | 5.3 kB |
URL GET poortatoeofficial.com/js/chunk-079fc55c.5fe16b39.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5214), with no line terminators Hash485d627c42962ee0200dac66adf41dd4 ca8e716c2fce7870f27ce6b489a333033a9254c4 4a2b5528bff5b712a661c2f48dea798bb01eb6b7483c95050a4393eef0f39c81
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-079fc55c.5fe16b39.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dt8vbnt8IikB65s43gx%2BS5Zv%2B80zA762yt7hwWL%2FKqW0j37NxUOljT6JFmuRWQ5tBbWZEFPTsyyr3PZF4IHvWVFU5CqvzHZ8vbQvgyowa7BRIGZ5%2F11wuS72rS6txN5qIRkKAgR1pyA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-14ce"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e458dedb569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3312&min_rtt=659&rtt_var=1745&sent=1171&recv=417&lost=0&retrans=3&sent_bytes=997762&recv_bytes=44606&delivery_rate=1067&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10368&x=16"
|
|
| poortatoeofficial.com/js/chunk-14939100.2c0515be.js | 172.67.185.88 | 200 OK | 3.4 kB |
URL GET poortatoeofficial.com/js/chunk-14939100.2c0515be.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3416), with no line terminators Hash93d0e224bd12c00a770a74d8c1dace6b e6c2e8385f949bfd4d44ff1ffc0fe6ea44ed6d5d cf1a24a9260bb4e2cf1b78f2734d48d182578e8c43348928c7e4c3fe616d2649
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-14939100.2c0515be.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Ze9IQNhL%2BC1uv7xR6ka01I4ufe4xhbHxSJtAYU28zIOyGvOOPM0zOw4qpVYzP%2BlyFCHI0bhIRaLZkuXcJO8nXSp6h2dy46uL6hw5A39Xxj6DghGpkzpC1kSdvsVcpjyQUo2bWqTAPA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-d6a"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45bff03569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1959&min_rtt=659&rtt_var=1265&sent=1204&recv=433&lost=0&retrans=3&sent_bytes=1019383&recv_bytes=46998&delivery_rate=1151&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10865&x=16"
|
|
| poortatoeofficial.com/js/chunk-3453ed2c.d478876b.js | 172.67.185.88 | 200 OK | 15 kB |
URL GET poortatoeofficial.com/js/chunk-3453ed2c.d478876b.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (14785), with no line terminators Hash11972a853726f49db327c52c1b1c3176 3d4842aca1436a72c6e3545fcdd4deab25686caf 5c5cd98400fdf71776beaa37bcadde362d9432ceb90094c70338ac4f53af785f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-3453ed2c.d478876b.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UnMKN34B9p61mFX3skXxwTk2h%2F40v8S6AS2iP%2Fv%2Fzvc42bXaJHnZ%2B4wz32zn8iUY7HwM%2FJ04RPIgjxd5l7%2FttjDHevBnghBQHEDjlzPqFZ2rWioG0mj1YRD%2BHiLZKxRAgjyek8cahPU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-3adf"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4635f75569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2020&min_rtt=659&rtt_var=1061&sent=1330&recv=481&lost=0&retrans=3&sent_bytes=1102870&recv_bytes=53932&delivery_rate=3364&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12041&x=16"
|
|
| poortatoeofficial.com/js/chunk-51454bdc.23d1a141.js | 172.67.185.88 | 200 OK | 5.8 kB |
URL GET poortatoeofficial.com/js/chunk-51454bdc.23d1a141.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5642), with no line terminators Hash3ec0eeb7153814edef2ca2c843a6c148 311219b2402dbe49c012be2f3032f21cb8301d0d 517eb1f96f887ef09fd920c87c025ab8209e739971b2d8d7e9ca82be49c74ea3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-51454bdc.23d1a141.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HH70rTz8xEhGUHlbOw3KMpWbBCywC5XY3UMPzYAKm%2BwtwhB3%2FVjjWe65G5vXl6EiObdVSpRIR1sMoIy%2FiNd9spfEPNd9J0IObx8oWEb5Ia%2BwYcRhX4M3WZ41rBPBKQPrzji16oOozmk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-16a4"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4652f8c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3251&min_rtt=659&rtt_var=2123&sent=1367&recv=497&lost=0&retrans=3&sent_bytes=1125656&recv_bytes=56329&delivery_rate=743179&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12520&x=16"
|
|
| poortatoeofficial.com/lib/flexible.js?2222 | 172.67.185.88 | 200 OK | 4.1 kB |
URL GET poortatoeofficial.com/lib/flexible.js?2222 IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hash1572c9446821f8b1dc1136b64b44e739 6a786ef63db48581f50e85601ef4a3effe8bf095 264ef2e4767a942ee634794619d94edbd7da642cb79277c16b974cac9795c246
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /lib/flexible.js?2222 HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6opJeWGN7nTVCOjuS5YzTv0aL7TBRRYC9JbStPYqfKqOO%2BE7EGY0ye6iVPaG20fZ2%2BreFHysUagyRu1nh1VCzCRB3j8R0EFGMze%2BpD0lGdG05zx2XFhrSeDOCFl7INz%2FLyjTAl%2Fs0sM%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-fe1"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e41f5c18569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3539&min_rtt=659&rtt_var=2550&sent=183&recv=237&lost=0&retrans=0&sent_bytes=14077&recv_bytes=14395&delivery_rate=2665&cwnd=12000&unsent_bytes=0&cid=c63126c8867fa86d&ts=1412&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js | 104.17.24.14 | 200 OK | 9.9 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (9815) Hashc66594705de51675f08e3b83b9b9b38c 40fa40f722043957a56324174ec6f80389391971 e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65
GET /ajax/libs/vuex/3.1.1/vuex.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 2776
cf-ray: 9333e41f8a6d5687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402f-2693"
last-modified: Mon, 04 May 2020 16:17:51 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 305569
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rFZ5owr3nKZmU7POWCsLNN%2FJGkaB6nAbijHzxo347MSyXu7FRGxARSQxrP%2F02JByKim7dLFinCMMbWcxo%2F1WMTxGVqtaOv0Icrpb7%2B9jBj%2BXxnMhkAY39e0wFJF5zBewCv3ZqQKX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/css/chunk-06ae24a4.fd43ee93.css | 172.67.185.88 | 200 OK | 48 kB |
URL GET poortatoeofficial.com/css/chunk-06ae24a4.fd43ee93.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (46623) Hash177ff7e3310c02d7e6a139a3237e0d38 375c1fac3912c4b63c01d7bc241aa43ed0055460 db079d71523907889a19e611a38e528a3405d89d22506634a177248f03f93226
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-06ae24a4.fd43ee93.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DqFuKKi26%2BNf8ULqGwrzgkgNp172kjgf78AlKvBp%2Bv8vKrXRleCBZPeQtsoHPFTQSfgTP0uM%2F47O6tSaur%2FQ7sBDEUxcb07Jk3wOpu9%2FaNAViAegEiQkqKCh7DNawK4RvXJARhoUVg0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-bb0e"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
cf-ray: 9333e434cd56569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2645&min_rtt=659&rtt_var=1420&sent=586&recv=268&lost=0&retrans=0&sent_bytes=469438&recv_bytes=18189&delivery_rate=927542&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4366&x=16"
|
|
| poortatoeofficial.com/css/chunk-210173e0.537894f3.css | 172.67.185.88 | 200 OK | 343 B |
URL GET poortatoeofficial.com/css/chunk-210173e0.537894f3.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (343), with no line terminators Hash643a797580011f455a862f50acd92063 461f0575f4d431d9dbc27709700cfa1d70e919b6 0566ae96aaaeed7044a777f84e0d99bcf9e1e15b991615e46d88c8b146eeb72e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-210173e0.537894f3.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R6OrU1U644pSqCVf%2BRYOdRIzWGGYQtwDw32bfAsI0p7SCL4BUCcXTSu1R%2Bk4J%2FKf9F63CYEEW7IeU9WvFL9LFXx6%2F33bqx21owjaV13RAA9dw%2Bkds0O2OzLWyELuEzVD7bQzcZgod%2FM%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-157"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4389d90569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2311&min_rtt=659&rtt_var=1092&sent=634&recv=293&lost=0&retrans=0&sent_bytes=493364&recv_bytes=23132&delivery_rate=193368&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5416&x=16"
|
|
| poortatoeofficial.com/css/chunk-1ae0d026.b7b2afed.css | 172.67.185.88 | 200 OK | 510 B |
URL GET poortatoeofficial.com/css/chunk-1ae0d026.b7b2afed.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (510), with no line terminators Hashc92ecb7cfe406e6db3138f17bb8c156f 3843aec44f19cb9f0e1e2faa9869f67764c3256b ee9b5957ed2f73d18209811c66d7ddb231089550f344c21a8be6878da3c514e4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-1ae0d026.b7b2afed.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FNBdneqOqcKJnxXKACisntuBK1fZamelEaDUYLjZu6ksyW7QkAgx4Qx8brGduclz2kU717PXfH8L1RifipWh4ecmiOVa4RUExgWCmoaGZQP6C8nPlTbWNQEwcaq8wKzoScyZcdu9w%2Bw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1fe"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4387d8f569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2367&min_rtt=659&rtt_var=1307&sent=630&recv=291&lost=0&retrans=0&sent_bytes=490931&recv_bytes=22802&delivery_rate=520250&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5392&x=16"
|
|
| poortatoeofficial.com/css/chunk-6849d582.97746849.css | 172.67.185.88 | 200 OK | 56 B |
URL GET poortatoeofficial.com/css/chunk-6849d582.97746849.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash6f5eac1a0bc7fd5bcfa72e8d381d3492 f21a840caacf71b07464c0b927fe1cc72e791950 32996bec3551596c0e9140a4e7bb630946a92d65e3e268efe149c74cb717e520
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-6849d582.97746849.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xeTr5fUlpdyZ0Vq5jqwy5TJojf8yERoRey%2BQr2OZMVvmi0qYLcDUBCMRbEJcDd9sAODXTZnS%2FUcSQhGaXB4kblhD6jfOj95TsgQeuAd7O5LrJOOQFI%2FxP%2BYYq4d%2FhZ6Lo6oZbU%2F5fSo%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-38"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44c9e73569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4530&min_rtt=659&rtt_var=3792&sent=1086&recv=370&lost=0&retrans=1&sent_bytes=946180&recv_bytes=36492&delivery_rate=4108270&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8579&x=16"
|
|
| poortatoeofficial.com/css/chunk-d646062a.fd7ecd59.css | 172.67.185.88 | 200 OK | 117 B |
URL GET poortatoeofficial.com/css/chunk-d646062a.fd7ecd59.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash1db8ba3fc65dbf3f188380bcdf134406 2cbb507f86ecf66a1d8754c4ca55989642a4db24 34d7a991e8686b0c722898afb4868d324b4cee6053c5e0aeb37f76b0245233c3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-d646062a.fd7ecd59.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KrHt6U8g3azMYEW8TsHhze1V7c3dt%2FsJGfPh0KVSsv%2FexYbCBhXYiMxx6VOjYTeq2NhnIOoEn0K5LOQkS2YozVyMIgPNysLRRW5dBHu56qt3QeNH%2FtgqB9uPgU2X0B8f0hxOWBTu%2FF0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-75"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e453aeb4569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3468&min_rtt=659&rtt_var=2612&sent=1133&recv=392&lost=0&retrans=2&sent_bytes=981717&recv_bytes=40354&delivery_rate=34451&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9536&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d0e923e.be4ae108.js | 172.67.185.88 | 200 OK | 5.1 kB |
URL GET poortatoeofficial.com/js/chunk-2d0e923e.be4ae108.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5106), with no line terminators Hash584af06a2616deb23eaff27c770b2713 31211da93d53b1b6f3fb06cfa0deb1a69770d4cf b57124fa023feb12a78b04ff14e182e2d061778e7256906f4dff5c65b6d461c4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d0e923e.be4ae108.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g9nYTymE9wjXgwjIiSXnBe5gaa8MTSAsFjdT8NYcrew4pb6tKEYqMUW5Y8CEaxO4WFdQ%2FHx5THXiU9civ5wYJxhS1KaR4SCBcPur2ytIC3Dntwci4Zuzw%2B%2BZFo48%2FnRwtQqLi6PSFDE%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-13f2"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4602f3d569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2342&min_rtt=659&rtt_var=1736&sent=1286&recv=460&lost=0&retrans=3&sent_bytes=1076835&recv_bytes=50838&delivery_rate=367606&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11529&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d21d0c2.090e3250.js | 172.67.185.88 | 200 OK | 20 kB |
URL GET poortatoeofficial.com/js/chunk-2d21d0c2.090e3250.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (20140), with no line terminators Hash98fc4f7d659f3ff5fe223a0005d30e5f 8464c1b8138ce0a4b902c403fbbd61887b215a6f 3b4fea3e5f45315e8243cf56781d0df5722e6133942671dc592ff479ba8213e5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d21d0c2.090e3250.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qpoh7OOkYSAx9%2FFdP%2BDg%2B0OvuRjbGOd9fF6fudyE%2BQf0%2B3SZmJDKuJ5y3ETZ04XGRYzVY1OX3yHMLFVEGA5II%2FKIgcXtClaIh7gIsp7QSrVz7lcFvn7ws9Trodz0GuakPPUVnQFCX3Q%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-4eac"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e461ef5d569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2223&min_rtt=659&rtt_var=1612&sent=1307&recv=472&lost=0&retrans=3&sent_bytes=1088137&recv_bytes=52809&delivery_rate=66542&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11825&x=16"
|
|
| poortatoeofficial.com/js/chunk-2f854f93.9c08c169.js | 172.67.185.88 | 200 OK | 2.3 kB |
URL GET poortatoeofficial.com/js/chunk-2f854f93.9c08c169.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (2278), with no line terminators Hashc0ad238b572499e5ba56003129da1022 984c2488512612e849ee4cd03cbee962945cf647 3d261d791532f1087f89ab56c7dd54ca963523f3f9bf9f4a446a4bccc98a8a82
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2f854f93.9c08c169.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k7Fqsc90EG%2BBQ%2FQbyLX0fvPkIyvdWSjmBzQT20UU%2FtzkmcsNo%2FWxZgwkpN3X9d3w3WfKs6EgPAYIHKYPUzcKRCdEFbozH8gEc5MqGIx5kowlbPVTr4hauOt4yQjRX1a%2BaOnQhwfkPfs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-8e6"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4632f72569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2220&min_rtt=659&rtt_var=1645&sent=1318&recv=476&lost=0&retrans=3&sent_bytes=1096175&recv_bytes=53467&delivery_rate=1049&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12014&x=16"
|
|
| poortatoeofficial.com/static/theme3/tabbar/chat.png | 172.67.185.88 | 200 OK | 1.3 kB |
URL GET poortatoeofficial.com/static/theme3/tabbar/chat.png IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typePNG image data, 68 x 67, 8-bit colormap, non-interlaced Hash9a9a3c68d20119ec90a21aabb59aa872 8d3d8da5e2cfff13f62d0230a8f50fb6eb850bb8 c8fcf8de83cd1d7b76eafd9fc6cc4b69cbe6ade29a885d7a709125d9de8cfe39
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme3/tabbar/chat.png HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: image/png
content-length: 1345
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gmmlQoVeTgp3MUD1uHlp7OpT3NicK4jwTzaQoLZpPJXe1hn6fRV5j3SxkhRKX0cnYnMdOx026XZEBuIF8%2BwBOqm6uyTCc3eu6dQ%2Fy%2FyifFnxNb73AfzzP2xqKeSx7nOx%2FQRcZhvnBQU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-541"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e443ee13569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7285&min_rtt=659&rtt_var=6228&sent=868&recv=344&lost=0&retrans=1&sent_bytes=720735&recv_bytes=32184&delivery_rate=101420&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7224&x=16"
|
|
| poortatoeofficial.com/js/chunk-e8d5acac.ea639e84.js | 172.67.185.88 | 200 OK | 4.0 kB |
URL GET poortatoeofficial.com/js/chunk-e8d5acac.ea639e84.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3960), with no line terminators Hash9a493e13d192a52543e6af27c5842065 ed9bbe77069ca7fffa0013536561505fbde0658e 542fb2826e1f57a6fa9b9d7986213b1f7c6f94e6395d7f837891eeaf20da7c18
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-e8d5acac.ea639e84.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NwoI28MnosfShuYPKI0FJfwqPUgpvcz%2B6FDXNQ03UZblu62huhlgFYlTyFUFe7zH8asvB%2Fk%2BhGQuHtf5LXG%2BTwA6Z7UHJSIKZrhs07Tkf4ADEEsZWEPy8T3N5CWZHpDtsnSM0ylegWg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-f82"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e470fff8569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2885&min_rtt=659&rtt_var=2624&sent=1540&recv=568&lost=0&retrans=3&sent_bytes=1246108&recv_bytes=65975&delivery_rate=962&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14216&x=16"
|
|
| poortatoeofficial.com/css/chunk-08d95777.f5012141.css | 172.67.185.88 | 200 OK | 1.5 kB |
URL GET poortatoeofficial.com/css/chunk-08d95777.f5012141.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (1544), with no line terminators Hash3eb6ba970730292a23d44a5c7e0cbae4 d96cda9dbebfa42b9429e1ca3d952161ccb24a75 bde2e3fb26caaef078a6885fa66517d7dbda64ca44337fd2c98a209fd4495756
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-08d95777.f5012141.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNIn45SzZPN59K%2FnBKHDodXPYZdcMy4LAXYkH0Gv4FjQfUYKpHF0UTUoUfDh7JJ2PVilnQf0dEcra6ye5Ml5BMz6QU6wOSB%2FMkNrtfJcIExHwQBPEXtTbZWtXoDu7upL558c%2FKzJtmg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-608"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e434fd5d569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2333&min_rtt=659&rtt_var=1349&sent=604&recv=275&lost=0&retrans=0&sent_bytes=478994&recv_bytes=19731&delivery_rate=14549&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4840&x=16"
|
|
| timephoriaofficial.com/api//file/cfg/202503/28/bb391d19bccd406cab61eb5794a23b34_.jpg | 172.67.143.184 | 200 OK | 8.9 kB |
URL GET timephoriaofficial.com/api//file/cfg/202503/28/bb391d19bccd406cab61eb5794a23b34_.jpg IP172.67.143.184:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjecttimephoriaofficial.com Fingerprint51:46:7A:B9:0A:9C:EE:AC:16:9A:10:33:CF:AA:79:76:C5:E7:D6:4F ValidityMon, 14 Apr 2025 04:52:47 GMT - Sun, 13 Jul 2025 05:43:56 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 193x183, components 3 Hash9a0d81576286200ae6089d8654b4d568 cdc953397203ff646ab743b46fda046a9f1576b7 f70c89ab011f4adde399d1cd34d312ba5c01cb549de70b5745bf6a1b87c45665
GET /api//file/cfg/202503/28/bb391d19bccd406cab61eb5794a23b34_.jpg HTTP/1.1
Host: timephoriaofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: image/jpeg
content-length: 8870
server: cloudflare
accept-ranges: bytes
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Fri, 28 Mar 2025 04:02:43 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 9333e43d8daa568d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/static/theme3/tabbar/home-sel.png | 172.67.185.88 | 200 OK | 1.6 kB |
URL GET poortatoeofficial.com/static/theme3/tabbar/home-sel.png IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash6574fcb80425e6206b04ffa027d6ed75 82038c848b5a9bc4b46a1e4573f092e3960cabc9 5d55b0390f109a8c6564d8d09b0e062dca23adb2624edfee5955d52d3648e8c7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme3/tabbar/home-sel.png HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: image/png
content-length: 1644
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mljdTO75b4HimzF%2BPYOHDg2OnKhXtPXBMUdXezgSj2IbSNVo%2FcZgbwfzfTSrFLWDGJTjc4LeLEQRNqwa0v2b1AvdzuiyApOhDqhylvcPZZDkLQxQp4hACIcNK0pruJ02y8fQ%2B56F3PI%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-66c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e442ae02569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7258&min_rtt=659&rtt_var=8629&sent=862&recv=340&lost=0&retrans=1&sent_bytes=716034&recv_bytes=31764&delivery_rate=65677&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7020&x=16"
|
|
| poortatoeofficial.com/css/chunk-ffc2961e.07a681bf.css | 172.67.185.88 | 200 OK | 234 B |
URL GET poortatoeofficial.com/css/chunk-ffc2961e.07a681bf.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash335494c83d0ab57b3041100fa7d6263d 373d0eb5ca7ed8340fdb1300fd652339d2de7c81 4223177d0678c350c634f558c6055589630047e94a59dc32aa6c6db44f020dc6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-ffc2961e.07a681bf.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ve9errS7Vj2lEsXeucV7JR4zWZWJbQOiZvQ8NNEWVjjUNt1pSckec2m9jHDhBB0%2BeGPnD4oQOJmKT5g3AdZXr8FtGme55kfK%2FEU26x5wSNaurCd51VW5wIhrBNpvpF1Yv8lkcuVOtOA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-ea"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4576ed0569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3312&min_rtt=659&rtt_var=1745&sent=1168&recv=417&lost=0&retrans=3&sent_bytes=994774&recv_bytes=44606&delivery_rate=1067&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10342&x=16"
|
|
| poortatoeofficial.com/js/chunk-06ae24a4.686330fb.js | 172.67.185.88 | 200 OK | 129 B |
URL GET poortatoeofficial.com/js/chunk-06ae24a4.686330fb.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash676e3a2df47d8e40c29c2d1a67127eec e54e8144ef939162c151a843933a98ff020a2641 6499fae751b066d09b0d93a067502c15d6fecd5b460c7f5a981dc1fb3b286fb4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-06ae24a4.686330fb.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FXr%2FpT9eSlTdaA2MV1pr0JSRc6ihiTBPD0WFWvZvDFIquptYcx8YV1Nnb2vCSE9ALG0mIHJlY6ySETo1TNY6aSZSCfQM%2BJY8k3a%2BIyYU5dFpjYMnEVEJRwvPYlzL1ww5NFW7Phz7%2Bpw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-81"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
cf-ray: 9333e458deda569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3799&min_rtt=659&rtt_var=2912&sent=1161&recv=411&lost=0&retrans=3&sent_bytes=992853&recv_bytes=43856&delivery_rate=48903&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10153&x=16"
|
|
| poortatoeofficial.com/js/chunk-35107d1e.4b3683b6.js | 172.67.185.88 | 200 OK | 32 kB |
URL GET poortatoeofficial.com/js/chunk-35107d1e.4b3683b6.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (31143), with no line terminators Hashf2c0c4f60ab8fc9b751e2a46fc4a38be b98f3a16ffa7a0c04ad7d8acf98e739137c28af1 9adc5c7aa7b30e099fb576a10d6bc51af371093bc950ab3b67f3fff39e02a850
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-35107d1e.4b3683b6.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EFyTO44sf2G1DVlQa%2FatiY1PKaj%2Bevu6TdJPT64js%2FsEwzOONxU9YYICRCcYrriNWXMUG0yA4IWLIG4Y%2Bfbwbq2VhN%2FbuJaKNeca1v7rW3zyJDDSP%2FJWg4nhbcAyLZ8dpOyMfY8CXw4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-7bdb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4638f7b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1755&min_rtt=659&rtt_var=833&sent=1340&recv=487&lost=0&retrans=3&sent_bytes=1108163&recv_bytes=54917&delivery_rate=1906&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12297&x=16"
|
|
| poortatoeofficial.com/js/chunk-6698de45.61cc3b34.js | 172.67.185.88 | 200 OK | 17 kB |
URL GET poortatoeofficial.com/js/chunk-6698de45.61cc3b34.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (17043), with no line terminators Hash5f3fe7b4391a1b7304abcd9c3c6f55cd f2de771ca78295b85e6cc623d79f4fe6af541b07 38c6a2d4960cfb06cf15e5e3efab2a5ab8bfddc1b4bb68489722bb1109c01239
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-6698de45.61cc3b34.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7G27cquszyoatPSOQNhHJLOmcArR3exMxZG9wzQEaXnJao0n7sVe1%2BrtCEfnwJCPErkIakmn1h2uVsEMtf03KUktJBbXiHRelJFhxAG67qncBZHd7QOjOLEEyl5BFcCZ70NPc1tQuu4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-4347"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46a0fb6569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3292&min_rtt=659&rtt_var=1655&sent=1416&recv=519&lost=0&retrans=3&sent_bytes=1159841&recv_bytes=59232&delivery_rate=1097&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13104&x=16"
|
|
| poortatoeofficial.com/js/chunk-fb459430.cef4effa.js | 172.67.185.88 | 200 OK | 14 kB |
URL GET poortatoeofficial.com/js/chunk-fb459430.cef4effa.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (13991), with no line terminators Hashe0896caee41fd2b5c18a1a1ece8d5eef 41a0de622fedf52315e0a4f62541c73f18ee7ef3 a7a9094befb4167c4068cd80039c8c781fa539da1c4ff740e2504611a601d2d1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-fb459430.cef4effa.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S2N4bPJEmHwAqyw8HvV643CT84n7SET9ZwTJ2ooYDHdBHtJx8TQP5HrvTR1k92%2Fu4ZLeMWx3nl%2BRQ4%2FBrf2FQAGjhmQ8waEyIbU%2Fz98Q3UYYbgp4WeEnNmqDd499Yw5CtGESUtBauro%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-37b1"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e472a80e569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2174&min_rtt=659&rtt_var=1411&sent=1585&recv=582&lost=0&retrans=3&sent_bytes=1285329&recv_bytes=67563&delivery_rate=1210595&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14494&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js | 104.17.24.14 | 200 OK | 129 kB |
URL GET cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65269) Size129 kB (128745 bytes) Hash2ac19265b38d14235141d184bca54d9a c725eb5a33d093e331e25c3a5ef1272b0f1f648c e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e
GET /ajax/libs//Swiper/4.5.1/js/swiper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 28993
cf-ray: 9333e41feb105687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf2-1f6e9"
last-modified: Mon, 04 May 2020 16:04:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 932724
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1REtQPyjSx76HMkDR8tK5fJu5GJzTOXLcD5N0KacoIqBEgmPZqcSbaA8p1%2B1SNJRzOdcfBvlMHspY6kdPZok1a3f4nciRvqTPHOG31D92HBmdSI3QE1s%2Bz0fmvPkTmdw7lEHTKJx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/js/chunk-06ae24a4.686330fb.js | 172.67.185.88 | 200 OK | 129 B |
URL GET poortatoeofficial.com/js/chunk-06ae24a4.686330fb.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash676e3a2df47d8e40c29c2d1a67127eec e54e8144ef939162c151a843933a98ff020a2641 6499fae751b066d09b0d93a067502c15d6fecd5b460c7f5a981dc1fb3b286fb4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-06ae24a4.686330fb.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C%2BuM2LMRwQGBmOTjn1NwFTtzG%2BaYm%2FBBtYVWWQ0JmU6Sv8fhXfhu1WIPhiAsztriKL1J%2FOUCGeDUmquEMH6UoRlFK%2BORS7rwTS5V2yIsQyROs4aD%2Fl2y8xM5cWF%2F8dNZJbI43d0EQd8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-81"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e430ad11569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2967&min_rtt=659&rtt_var=1501&sent=574&recv=262&lost=0&retrans=0&sent_bytes=462225&recv_bytes=16959&delivery_rate=16123&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4028&x=16"
|
|
| poortatoeofficial.com/css/chunk-07f01604.ae4a2d4b.css | 172.67.185.88 | 200 OK | 50 B |
URL GET poortatoeofficial.com/css/chunk-07f01604.ae4a2d4b.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash3bd570c6967ae39b5fcfa9cebedae3e9 b7ac2cb7559f4ea4435cb998a3d269631b3438c3 ac0ca1996105308274f8785c20413f7713649699265206279f286f7cf77e0784
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-07f01604.ae4a2d4b.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DeyGXX7kVNrida4CY5o96BXe6hbsWPjBV90uSzztqv9h1pJ8pGRneDuBuLnaSfchmKX7M5IUu9fvw8n7aSaQw7eXXB0FLKXuF1Q%2BTXuy%2BRZQg7CgmsUooT7Agm5DT2YEQE5VTL7dS%2Fs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-32"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e434cd58569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2333&min_rtt=659&rtt_var=1349&sent=599&recv=275&lost=0&retrans=0&sent_bytes=476445&recv_bytes=19731&delivery_rate=14549&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4827&x=16"
|
|
| wss://poortatoeofficial.com/api/websocket/server/458/44dmsdzj/websocket | 172.67.185.88 | 101 Switching Protocols | 0 B |
URL GET wss://poortatoeofficial.com/api/websocket/server/458/44dmsdzj/websocket IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/websocket/server/458/44dmsdzj/websocket HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://poortatoeofficial.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1I33s7FXVzCLCVeyTBN9tw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 20 Apr 2025 10:17:22 GMT
Connection: upgrade
Origin: https://poortatoeofficial.com
Upgrade: WebSocket
Sec-Websocket-Accept: DMmkJjUMWgU83bLlc94E4YNwl9U=
Access-Control-Allow-Origin: https://poortatoeofficial.com
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Sec-Websocket-Location: ws://poortatoeofficial.com//websocket/server/458/44dmsdzj/websocket
Access-Control-Allow-Credentials: true
Cf-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F2cbjw%2B2ep%2BmJs0XLCxYt8SH%2Bu9DFyAjUaBNEGZGYWuY%2BzJHunaQ2QEMXX3zjPDt3pNA%2BSxU3T%2F6Kuol%2FfHpSXgg978rg2PIptOyaPcs%2BO%2BGFuMkdd7oc2qgPkpLtQ6k8KQ5qav33fg%3D"}],"group":"cf-nel","max_age":604800}
Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
Cf-Ray: 9333e436acc0b50b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=562&min_rtt=530&rtt_var=207&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2853&recv_bytes=1201&delivery_rate=4119487&cwnd=251&unsent_bytes=0&cid=8098e93dfc4e9491&ts=509&x=0"
|
|
| poortatoeofficial.com/js/chunk-22eab366.1f696fc2.js | 172.67.185.88 | 200 OK | 53 kB |
URL GET poortatoeofficial.com/js/chunk-22eab366.1f696fc2.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (52609), with no line terminators Hashe1cc2090fe3cf2dd8e53c91bd8928bbe b5f98ab2cebf6cc71188268157fc25305e707770 c304901acfe5cad5501c9152ebaca385b4fdd382b8c103b3ba0ad7e4df3abd21
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-22eab366.1f696fc2.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BffB%2B1DADZbIm1XxjehxXNqbIWX4vY5GlapmeP3ims4ptizzwr5XRcxfducDXLdHw9hdeaIgtu1owvJN%2Fwmmf3hY10p1kXzoIkhTchJ4cYrY66UtHMHVMrL9ryfevgpaiJERB5PRWzk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-cf87"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4395d97569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2183&min_rtt=659&rtt_var=730&sent=640&recv=300&lost=0&retrans=0&sent_bytes=494356&recv_bytes=24404&delivery_rate=1026&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5512&x=16"
|
|
| poortatoeofficial.com/static/country/id.png | 172.67.185.88 | 200 OK | 208 B |
URL GET poortatoeofficial.com/static/country/id.png IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typePNG image data, 151 x 100, 4-bit colormap, non-interlaced Hashec86910990aa46ace7ede9b7376c1019 6f3fb36ece67a129f0c58a77c6f617cd04f23731 cccf07d963c80baaa0dab594a4a8d58725716b95934338bc95ab5f71dbdadc7d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/country/id.png HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: image/png
content-length: 208
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nU5YFylFJHlqOOx5UtTLCmF6nT%2F7J6TtcpnzWKld8Rqqkybp09QmzkUARC0ynkiU2whn8AZgCtLcs0cBoiBsA4s2APSzz5VsumWDp0XUhU8w1HGMLUI1nlHWvUUq6bmHouaxVmCiDxI%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-d0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e43d8dcb569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3525&min_rtt=659&rtt_var=3326&sent=693&recv=322&lost=0&retrans=1&sent_bytes=532993&recv_bytes=28882&delivery_rate=3682&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6208&x=16"
|
|
| poortatoeofficial.com/css/chunk-bedbebc6.48674e8a.css | 172.67.185.88 | 200 OK | 535 B |
URL GET poortatoeofficial.com/css/chunk-bedbebc6.48674e8a.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (535), with no line terminators Hash7cb492e49c4bc238ac1ba446cc87dafa 77d8a8a65d2941059b5f5b179d936f860cfd875d 5f4460de1cd15a1a2479448f3237db59d780599a49e8ddd4f3953635cc67a1d6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-bedbebc6.48674e8a.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BmJTmh%2Fsw8b4MtoxnpnA2nRg%2FqLmymuYYUwidygh3ooQ4OZeRfsocQPfzJs1momngXYSLibTyLl9qF5%2Bfh9GOqpIF995n9wj9eDyDv%2BlpRaCbKvLo%2BqeMo2mpicjyLkCfa39GH4HP3E%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-217"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4525ea3569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3486&min_rtt=659&rtt_var=2838&sent=1138&recv=394&lost=0&retrans=2&sent_bytes=984187&recv_bytes=40444&delivery_rate=776722&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9557&x=16"
|
|
| poortatoeofficial.com/css/chunk-dcd191bc.a3d95352.css | 172.67.185.88 | 200 OK | 229 B |
URL GET poortatoeofficial.com/css/chunk-dcd191bc.a3d95352.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash44d18e73f11f336ed1636b2a65187c12 0e8cb1477395fd97064278ec893771e52426ef6e b17c5035fddf95cbfc4d571e19fedb0f4be2eb90896943d948225a49134c71e9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-dcd191bc.a3d95352.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MkcmxfszJEJKPSBTXyUbj%2FrvkRFo1%2F5mK1mSbj5R9WO9NmmvZEbcB15y9ZqFcby%2BYLz8yaK0TOzUDZqe3IucN94el4q4IHkfoUspeHZtn4sUY%2F4h5mHlV5ehLptWo38HTHUEVOwwO3E%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-e5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e453beb5569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3869&min_rtt=659&rtt_var=2761&sent=1136&recv=393&lost=0&retrans=2&sent_bytes=983372&recv_bytes=40399&delivery_rate=3262&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9544&x=16"
|
|
| poortatoeofficial.com/js/chunk-250cd2dc.c8ab105d.js | 172.67.185.88 | 200 OK | 15 kB |
URL GET poortatoeofficial.com/js/chunk-250cd2dc.c8ab105d.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (14654), with no line terminators Hash4724bcd21055c96f1e1a25b9386c256b 24fc973af86900a162067f41cd2661776ca02714 1ea37a8dc1be62800d18f16269869838e61eeda63fd25cd470253a179febd668
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-250cd2dc.c8ab105d.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=thfO0FEfUD8nVLlkFqQzL6w8NAknj%2BXaoRZgKsdvIrsfTLpfU3VcJPqA2bHJaE6JIT5NY4HNPQNv%2FeCoiBSFKuqZBEKU9Kn6%2F8EllbPBx%2BWVxVfJkD70Lv%2FXj8md95r4agQ90yYt%2BOo%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-3a0c"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45e2f1e569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2120&min_rtt=659&rtt_var=1263&sent=1260&recv=449&lost=0&retrans=3&sent_bytes=1061899&recv_bytes=49151&delivery_rate=1181&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11206&x=16"
|
|
| poortatoeofficial.com/js/chunk-543bfd0b.915a88c3.js | 172.67.185.88 | 200 OK | 5.1 kB |
URL GET poortatoeofficial.com/js/chunk-543bfd0b.915a88c3.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5042), with no line terminators Hashacba08223d64cb5bdf9a3c3c259769ec f4803920d88373beee4a148c8e8f08989a06154b 0110e7a3b8f793d5663658b622b15ab0098d3d651ad72ce03afc3d9bb3e97df2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-543bfd0b.915a88c3.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lG5GnJS%2B0u%2B0CPhuDQP%2Bc%2BjrsqksrOu0C%2FHAINXGe6GW5b0OXNISKnmmZKyQgg93loNOKGihesx4fcSPTdRWUETi%2FT2m7qTS2xOEerjJX63q0shxeCU7yNzFhVHiyNTkFwloNm9kow8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-13c0"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e466ef9c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3855&min_rtt=659&rtt_var=2161&sent=1382&recv=504&lost=0&retrans=3&sent_bytes=1134094&recv_bytes=57361&delivery_rate=950&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12835&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/index.min.css | 104.17.24.14 | 200 OK | 147 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/index.min.css IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size147 kB (146877 bytes) Hashfba0b10cfa931074254e7531f2cc9373 eceff9fb867e11786cbbae234d0c697f0dd445d5 7a6dee2202c1dfd3a499f873dee167942e255703859f86107d6bfc2272ea14f0
GET /ajax/libs/vant/2.13.2/index.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: text/css; charset=utf-8
content-length: 40107
cf-ray: 9333e41ffb275687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "652e0e9a-9cab"
last-modified: Tue, 17 Oct 2023 04:33:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 100337
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4qTOZJe14M%2BiJknOcJP6Ui%2B8QdQPfaF7%2FSQIpP5FiJFEGR715GenQbhBVrdJQgNRDx860UJcUjGn3rfoT85ZDWdM3%2BrxFqzXmJH6gjKqPk6CQhebliHdIdJ6Jd3fCid1R1yynghV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/api/translation/list | 172.67.185.88 | 200 OK | 1.2 kB |
URL GET poortatoeofficial.com/api/translation/list IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hashb175b46a4755eaa71e4b9d99121f285f 3dd65b697e3aded3d4b6f2f7d438314754dbc8e0 6c6ff3b17d6de6136a5c924457116bf1a13f651f17bea644fd6668176474acff
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /api/translation/list HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7uWRtyTXr1jyN4UvSfKICt7XOU6pcEnteinIir5s08G3P0bBaINVgI2erdKg%2FuMv5MITCW8U2tzXnOCdIP8tiEJMtC3VACWY283WVoMhKE9zmT%2B5gUUyv1rHoA0MpUDxbKxDhQtS7%2Bk%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e433dd46569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2497&min_rtt=659&rtt_var=1362&sent=594&recv=272&lost=0&retrans=0&sent_bytes=474255&recv_bytes=19086&delivery_rate=35226&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4445&x=16"
|
|
| poortatoeofficial.com/css/chunk-22eab366.3de4d22d.css | 172.67.185.88 | 200 OK | 6.0 kB |
URL GET poortatoeofficial.com/css/chunk-22eab366.3de4d22d.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (5975), with no line terminators Hashf700f2caf779c7992215aa33a3895de8 69b05d8641d3d9f715e6e33238d3625d285d6ff2 0418c1c7a267365c8d7bd2a87fc8d29c684f713fb99ec4438bf2ef8d90f1add0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-22eab366.3de4d22d.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tom0SYg%2FSJfF81GRixkMj0o8lnuzJANQc6WglXN%2BYosjPt9UZldALBdHR3X9Bz76G%2FoCs6ODjFLeLnx%2FS9nl82kYAVEUGXg60h%2FESNTKaV6944stoou0rkzVHgOL2g%2FcN0%2BC9iuh%2BxY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1757"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4395d96569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2085&min_rtt=659&rtt_var=743&sent=649&recv=301&lost=0&retrans=0&sent_bytes=504012&recv_bytes=24450&delivery_rate=4693621&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5531&x=16"
|
|
| poortatoeofficial.com/js/chunk-1ae0d026.8cd6f0bf.js | 172.67.185.88 | 200 OK | 2.9 kB |
URL GET poortatoeofficial.com/js/chunk-1ae0d026.8cd6f0bf.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2938), with no line terminators Hash1cdb27ecc836ba8a76674653178fa40d 4f58ff0c140cffa78fbfcd3b191339d134f10544 52aae7c29ebf7d6a2242adf285ae523ed6e1546e480daf21c9ef4643db76bd26
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-1ae0d026.8cd6f0bf.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oYiMdDarUmpUOuifnHaaye9RXp5h81ocrP%2BfkW9kFuAL8ogI5U8hR1PkMb1e5BPkRVjCafNzumYgQb8PqfCmMumFJfMQ8%2Fhw1AKQpqZQnxg%2BFBjwoXiXg%2FH8N1nWRdHm1NPEYn8Iz68%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-b82"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45ccf0b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2053&min_rtt=659&rtt_var=1081&sent=1266&recv=450&lost=0&retrans=3&sent_bytes=1067090&recv_bytes=49197&delivery_rate=4363392&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11217&x=16"
|
|
| poortatoeofficial.com/js/chunk-6849d582.93ddfad1.js | 172.67.185.88 | 200 OK | 16 kB |
URL GET poortatoeofficial.com/js/chunk-6849d582.93ddfad1.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15867), with no line terminators Hash56ba1b4f9ae9ca696b7f8e67c9793461 a5d4cb1c1c3f27e1e3a8e0f3f3160c4ac3340269 a4316613d0c30fc60149225cfb230e8f14d1ac304ec8670cc97f82c80dbf97cf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-6849d582.93ddfad1.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XKnh0U6VztgQ5%2BmeK7EI%2FoetPpUNTOU0bgZyqIpexgZRvZWNKyJIrriZO%2FaTq8xvWEc5QOt2F5Dr8zgGPPz2WejqbkYgrs1jINHVGr03foepdlg16ntuWnKOvOfePYQ%2BD64CbYsPHNg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-3ebd"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46a0fb7569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3292&min_rtt=659&rtt_var=1655&sent=1421&recv=519&lost=0&retrans=3&sent_bytes=1165518&recv_bytes=59232&delivery_rate=1097&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13112&x=16"
|
|
| poortatoeofficial.com/js/chunk-cefa4dd6.40e779fb.js | 172.67.185.88 | 200 OK | 3.7 kB |
URL GET poortatoeofficial.com/js/chunk-cefa4dd6.40e779fb.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3630), with no line terminators Hashc7f69205f475f482c05d51dcb8484961 6d530241b630019e437f2b8543a543f73ce148b7 cb22d21841975cd5f299a45ec3da20a1a55ad797e17448752b0644ffcaa64f66
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-cefa4dd6.40e779fb.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SyFl7GVPjxukG108CjUYzuxLMmTwz2HaybDmufmHJtkQcgPYFFyswl2Tk%2FPs843jIuccYrCxYvHgsGrgok5q91ajPjkkhL%2BFfTY29Dup%2F30C%2FuC3Eb8fJySC8e1FFiBPqMTUD44xYtk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-e4a"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4704fea569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1932&min_rtt=659&rtt_var=1151&sent=1521&recv=559&lost=0&retrans=3&sent_bytes=1235000&recv_bytes=64854&delivery_rate=16287847&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14121&x=16"
|
|
| poortatoeofficial.com/js/chunk-fbee9466.a95acbc7.js | 172.67.185.88 | 200 OK | 22 kB |
URL GET poortatoeofficial.com/js/chunk-fbee9466.a95acbc7.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21600), with no line terminators Hash83b9c68c01c2a63e26911e8625844b16 318cfc0098c1cd278772f658e07b2cf6a7ec73cf 9b4f5bc2096377f6086a9e07281ab6f92ee41b32e699a2da01d8bc2f8c548713
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-fbee9466.a95acbc7.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k6NU5DBGoJB4G0e8Pk9RY%2FlC5nAMw%2BY4EtUSkJhXiE1vWmmOukZkgtJ7G6rMLXk0nEeuWzswbng95lRtk3YV6M9bm8FDJDC6hFyU8zEiHsN9EGiu6uiG%2BTtq45zP%2FPx0yS1BUpXkATg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-54ee"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4733817569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2444&min_rtt=659&rtt_var=2099&sent=1591&recv=585&lost=0&retrans=3&sent_bytes=1290454&recv_bytes=67701&delivery_rate=1184&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14582&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js | 104.17.24.14 | 200 OK | 94 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (65449) Hash17e942ea0854bd9dce2070bae6826937 434cdec1669f2c6c7406297a72120936bc56ed52 72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26
GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 30769
cf-ray: 9333e41f7a605687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402c-16deb"
last-modified: Mon, 04 May 2020 16:17:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 307320
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1F8oUAAy3k%2BfuD3crLCUusjDaHpgmSW3yvyWpIFlDQFDS%2FYghIxvWRS0T28UsFzQYFXTMfmsWJXs4sM1y%2BcLscYM71YeiK1W7%2BTSVMMTW4qt6Et820xfMBUG1hNkgmUPiYrE8u9g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.4/index.js | 104.17.24.14 | 200 OK | 586 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.4/index.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators Size586 kB (585656 bytes) Hashc51f03d35129d9d1a9da65b24cef7fa7 1e1d550d978378980dc3aeb60012da86c2355c4b 339747e3a960dd82946bb6b06fcf1dda76b9ee786a337726b535a1d86d6b9c0c
GET /ajax/libs/element-ui/2.15.4/index.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 121691
cf-ray: 9333e41feb015687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6109231c-1db5b"
last-modified: Tue, 03 Aug 2021 11:06:04 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 144436
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MZTMT1CVelmw35QjsBGMAIBtU3MGkDc90JMf%2Fp6iNsV8oO9ssZHlJwUeKOkc6FlJnesRcs6NLIZuAK6Q89sQfHiEmlbgsK4HFIIBg6JT9AEQGNN7PHuJccpLXBu6cTPpQrojABya"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/css/chunk-084d1f6a.31bb29e7.css | 172.67.185.88 | 200 OK | 2.2 kB |
URL GET poortatoeofficial.com/css/chunk-084d1f6a.31bb29e7.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (2233), with no line terminators Hash6d1e84fc4b61c6683564a45c32f0097d 7e26ddd6edb9b8ae436078ecc7f082340241d77f 4b1e9de73b5606cca982dfd7e671a632ddbe0f9283371590d28f327fefd0e5cd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-084d1f6a.31bb29e7.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4uAx%2BWbt%2BL2Vl%2FB1rSAX%2FdFmAhhYUyjZVV5maekJxOD9qttxCLBNyrbRQMcf55O%2FHcLVe%2FP5E0yCsL19cVzayZkSUWYzO%2FV%2BJwDDg0LEMlPMA1ILGjeIII0%2BnCscCJrR5Npvo2qOQDs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-8b9"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e434fd5c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2927&min_rtt=659&rtt_var=2201&sent=605&recv=276&lost=0&retrans=0&sent_bytes=480175&recv_bytes=19777&delivery_rate=11916&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4846&x=16"
|
|
| poortatoeofficial.com/js/chunk-07f01604.9b138a1e.js | 172.67.185.88 | 200 OK | 4.0 kB |
URL GET poortatoeofficial.com/js/chunk-07f01604.9b138a1e.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (4014), with no line terminators Hash2195639468928533275ba7f071087cc3 0e525068ca00f15f91772aaf6759025082fa02c7 920bef6bb84844bd331f8f43f7c0e46aef7d6492426090103683ee1f28daba2c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-07f01604.9b138a1e.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2LipqZWX8fW3zYAh1rzA1sYJmxiOTrj4eg5ygyopYDOQ2lXjNiwgOS8j715aBs0Tq89AdCnSPiXmrheuoC%2BOTTx3frwx6MW6G3GPiWJkzagQWLO4B7%2Fq6TbS9mGzB%2FDWX7LIs5o3GcY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-fae"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e458dedc569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3312&min_rtt=659&rtt_var=1745&sent=1169&recv=417&lost=0&retrans=3&sent_bytes=995583&recv_bytes=44606&delivery_rate=1067&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10365&x=16"
|
|
| poortatoeofficial.com/js/chunk-134ebb5b.6c394388.js | 172.67.185.88 | 200 OK | 13 kB |
URL GET poortatoeofficial.com/js/chunk-134ebb5b.6c394388.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (12745), with no line terminators Hash9181b68796845b6668c8056c9af3f470 2628b73886423469a7d5598edf0b6223304bb8a7 6d803d6675f97dcdd566cd96bb7c0a78ead32b4ee24505f864a1ae64ff860b62
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-134ebb5b.6c394388.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ko55Wk%2Fu6ODcYJWHvc1ArjjWSrcXiEGKwwDenBF8eATxtVKJB0gck94SxZgVTgfvBWdMOqWqAUZf1cmG20mBXxJVtLjD%2Bv1F2cD1p%2Bf%2FfTFTlTqjB51ek3OkW2XrrfhtEFXxApFOkfs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-3205"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45acef0569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2067&min_rtt=659&rtt_var=1314&sent=1220&recv=437&lost=0&retrans=3&sent_bytes=1031991&recv_bytes=47180&delivery_rate=5065&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10890&x=16"
|
|
| poortatoeofficial.com/js/chunk-586d3a0a.8cf19088.js | 172.67.185.88 | 200 OK | 2.9 kB |
URL GET poortatoeofficial.com/js/chunk-586d3a0a.8cf19088.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (2918), with no line terminators Hash8b3565a80309c1c7f27e0907f0c7e6e9 f4a368725d0259c94747b402360a2277212d7fd6 20bd1ca6e1b5fda1b5b59b1880e07a12f810d57d09a817367f9423e6b0483c8c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-586d3a0a.8cf19088.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WXHH4Y0Lwcw9jJDcQn%2BAo3%2FQWgVgI3qBmBDMLkVnO0PB1xFZiKxmwte6XMv454HhY9Jt3JkpcqDNq5audiH8RXHA2dmkaOIca45co4angJKZfSL1P8mKIcDKqAh2jfPbpwwNB%2BjA3eI%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-b66"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4672f9f569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3405&min_rtt=659&rtt_var=2330&sent=1373&recv=501&lost=0&retrans=3&sent_bytes=1128690&recv_bytes=56986&delivery_rate=956&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12640&x=16"
|
|
| poortatoeofficial.com/js/chunk-c5c0ecd6.f36be8dd.js | 172.67.185.88 | 200 OK | 3.6 kB |
URL GET poortatoeofficial.com/js/chunk-c5c0ecd6.f36be8dd.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (3587), with no line terminators Hash41fcdae977e717a12a1004b9651eb9a0 af9a14f6643ea30a0d58ac26b2a11c6b6e85f65d 23b68516d5c626627904ec97e44374bc1b120f088bc64e085b77805c895ab0a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-c5c0ecd6.f36be8dd.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tj4nwA%2FwjIy8ytarUjUYWf3YeQGg5NALEY0h49BepZ2ZUwyjVFtZcw4ACjWQLCZWvHczi5oY4492u4uDxh8z5WZQZKmSeObOiJHG72p1EgCL9l0BGcHqWeTsidWhLjkBsVor9Pw%2BWis%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-e03"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46eefdd569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=659&rtt_var=1862&sent=1483&recv=552&lost=0&retrans=3&sent_bytes=1195974&recv_bytes=64062&delivery_rate=1173&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13905&x=16"
|
|
| poortatoeofficial.com/css/chunk-9fd116e2.be26ba7f.css | 172.67.185.88 | 200 OK | 333 B |
URL GET poortatoeofficial.com/css/chunk-9fd116e2.be26ba7f.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (333), with no line terminators Hashad2d88123d51a4b6e8e3495e9ebece3d d16ec779eefb27ab84d6b438d233184a3e31d559 0835e15c3a5c71c15aec5f475c0d5f02d5044d78cc4739a345343b69543d7a38
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-9fd116e2.be26ba7f.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4oHxCY8FXHSLa1f0Uy4AyG7J2sHHq8JVtyKJSXnvoaE%2F54mN9MK9iMJTsjzULfVJOhMCij%2FQDP9ElTv%2F9vjcTDqrKcn1ZloKND98xS8e5vtEpJZMZSDG7EJKx8zYAJF%2FZi4DRvn9nus%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-14d"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4520e9f569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3726&min_rtt=659&rtt_var=2795&sent=1129&recv=388&lost=0&retrans=2&sent_bytes=980764&recv_bytes=39456&delivery_rate=496867&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9281&x=16"
|
|
| poortatoeofficial.com/js/chunk-dcd191bc.2c9c6bce.js | 172.67.185.88 | 200 OK | 7.3 kB |
URL GET poortatoeofficial.com/js/chunk-dcd191bc.2c9c6bce.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (7327), with no line terminators Hash83e9734e6a1e977599bfb45e593d220d 3b81330b2acd67fc275102846cdc134d1f42dd9c b60ffbfdd9729a79e92f69e84bc7ce1907f0d28be1775360a99c33fa37133245
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-dcd191bc.2c9c6bce.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BBzoy9F%2BMGr8fEAigpLXVps1xIc8DqhKpY3JAH4%2BZN6CheogDmbl4%2FN6Sxri6IolWtQ4RPsM9qNtVvez5UnL74DIv%2FgkC0cnCCsbxyMM9uZTrCh%2BwnKGO8%2FqT23RpVF8wXO5jKQAlj0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1c9f"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4705fec569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2488&min_rtt=659&rtt_var=1976&sent=1524&recv=560&lost=0&retrans=3&sent_bytes=1237338&recv_bytes=64899&delivery_rate=341830&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14128&x=16"
|
|
| poortatoeofficial.com/js/chunk-ea349f08.45c98ef7.js | 172.67.185.88 | 200 OK | 2.2 kB |
URL GET poortatoeofficial.com/js/chunk-ea349f08.45c98ef7.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2128), with no line terminators Hash69719cda5f48df75402dbb854d393961 88dafda9b3e29fdd65ad515d43f05237de75150b a11f76bfd4fb7e4110a084ea19ea48bfafe80b262a06420953ebd96c413a5bf9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-ea349f08.45c98ef7.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pB%2F9FdygHgueDQFIC08Cr%2FXid0uXZw0d%2F4HaJbP7lYyNlDGfp61504c6qWONy9GAeZ00mpIGaFELA7JRPGfurvYE4N%2FrYHUJXiEQJPFsylg6d0mqaVj3a4du2HZmj4IwaXE%2FbFEfjH8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-87a"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4721804569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1952&min_rtt=659&rtt_var=1167&sent=1578&recv=579&lost=0&retrans=3&sent_bytes=1281405&recv_bytes=67426&delivery_rate=1107&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14400&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.14/theme-chalk/index.css | 104.17.24.14 | 200 OK | 240 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.14/theme-chalk/index.css IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size240 kB (240033 bytes) Hash07ced7e527d781115b5a9f3f3f559884 371b1a3e8d3453a2451e76320d9d7c0e301331b8 dc86d4797565d05e88d63598128328e2ed6f02f7f6d950a36a1c4ca9eb9c8057
GET /ajax/libs/element-ui/2.15.14/theme-chalk/index.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:17 GMT
content-type: text/css; charset=utf-8
content-length: 28355
cf-ray: 9333e41f4a0b5687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64e78703-6ec3"
last-modified: Thu, 24 Aug 2023 16:36:19 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 144435
expires: Fri, 10 Apr 2026 10:17:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KYL0LtbP7KBej%2BSVLoxbKiZaCVgWB0FuJg8Kywc0F7Ie6CI1Vsz5kkUSICk1hGSiz%2BX5XI9GKo%2BUZ6hWar3HkR0vXNJzFb82dfrG8EM5TwLjj6uALnTCjNaD9XURU4RIGh9yAP%2BS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js | 104.17.24.14 | 200 OK | 25 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (24752) Hash32e2eb91e6ed0512057b2ad1e6d1b242 27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6 e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5
GET /ajax/libs/vue-router/3.0.7/vue-router.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 7869
cf-ray: 9333e41f8a7f5687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb0402b-60f6"
last-modified: Mon, 04 May 2020 16:17:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 969610
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G2tLxinEmZIVwjXZEY0eGshcqw0715ii8mXW%2B%2FQ%2B%2FWYTUJL5wCGMBCZOkljz39f2OPg84vxyMiQi%2BMh57Zi%2FbYJbgkAE3CZdzSqA8Ieeq1wTUuX%2FmNlvB1ezgXwDVv8QYG49L5Pc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| timephoriaofficial.com/api//file/cfg/202411/11/b82d3bf10b604646b0623aef223e5fb6_.png | 172.67.143.184 | 200 OK | 188 kB |
URL GET timephoriaofficial.com/api//file/cfg/202411/11/b82d3bf10b604646b0623aef223e5fb6_.png IP172.67.143.184:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjecttimephoriaofficial.com Fingerprint51:46:7A:B9:0A:9C:EE:AC:16:9A:10:33:CF:AA:79:76:C5:E7:D6:4F ValidityMon, 14 Apr 2025 04:52:47 GMT - Sun, 13 Jul 2025 05:43:56 GMT
File typePNG image data, 900 x 270, 8-bit/color RGB, non-interlaced Size188 kB (187886 bytes) Hash2d701ac2e6210f33c9992f43fc303286 5e6f6aac623c6530f8fd5e5c934e39a1b02cee40 e370bc706254968f1c4c8109314587a9693922fbab68a0e52d0cb1d297891865
GET /api//file/cfg/202411/11/b82d3bf10b604646b0623aef223e5fb6_.png HTTP/1.1
Host: timephoriaofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: image/png
content-length: 187886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lbHfj8SsYfv2Q4FDGrcP8gWhaFbEZNtVLgkpfbnj60ZdpGZXcd9smBlUOnYxyVJ8aBl1r2hz%2FfONVSGvh1VpqM6W4Ob0WevZ6xsHN2Q7ZdOsthqBCanbOpMk%2BAxO1bEFuY8%2Fl%2F192HIh"}],"group":"cf-nel","max_age":604800}
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Fri, 07 Feb 2025 21:01:27 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e4478d17b529-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10924&min_rtt=1981&rtt_var=8264&sent=272&recv=41&lost=0&retrans=0&sent_bytes=291550&recv_bytes=3931&delivery_rate=6000433&cwnd=96000&unsent_bytes=0&cid=cdd6ae20eff6ceb1&ts=1892&x=16"
|
|
| poortatoeofficial.com/css/chunk-fbee9466.89eabb0d.css | 172.67.185.88 | 200 OK | 751 B |
URL GET poortatoeofficial.com/css/chunk-fbee9466.89eabb0d.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (751), with no line terminators Hash924a3a05affe03bd5d73e3d3c5a58867 79a19ff62890e2545a230789cf9bd2ce2db3d904 cd346f52cceb6960c66bec2dff6ab02da4060a163e410ed1ff334be24e0e4452
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-fbee9466.89eabb0d.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=congOKMJAwlsV%2Ber9bVL1LRy4dS5FyURTA9TLC2rc%2BP0V%2BLkiG%2Fb3yDBxqt0ZtmyvIqdHcqGvInGCPCyUzwFzs83N8uND%2BMPtSyFzL5mmDtCWJ9HpHXuYuCdIKKlX0%2BBA4nZu0hproA%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-2ef"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e456becc569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3169&min_rtt=659&rtt_var=2710&sent=1164&recv=414&lost=0&retrans=3&sent_bytes=993668&recv_bytes=44231&delivery_rate=1168&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10254&x=16"
|
|
| poortatoeofficial.com/js/chunk-08d95777.308f1de2.js | 172.67.185.88 | 200 OK | 3.9 kB |
URL GET poortatoeofficial.com/js/chunk-08d95777.308f1de2.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3850), with no line terminators Hash3894e895cf59daf5d1aac34d8d0c703b ab33614f3a9ab14d2adb2228a7fe289af9132b76 5583f58f0735d4c6ed2ec37748287c7e80b3e9420e8f6594e6abed75f300303d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-08d95777.308f1de2.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B2Zn8BIfo9Or6LWdBUWN2AVacuaWjAajOMbV%2B9te3PB08sk8g9V1jdOlSHnRirt7p%2Bsdy%2FHL8TVvKW%2BeGyC2G709OcLTMykxTAYYwpYTsjccr%2BzLCO5V%2FcKK8HzEDfgBBmHY%2FbTV7FU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-f42"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45a6ee9569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2622&min_rtt=659&rtt_var=1200&sent=1195&recv=426&lost=0&retrans=3&sent_bytes=1014537&recv_bytes=45967&delivery_rate=22734&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10618&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d0b3a3c.b31586c1.js | 172.67.185.88 | 200 OK | 5.8 kB |
URL GET poortatoeofficial.com/js/chunk-2d0b3a3c.b31586c1.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5707), with no line terminators Hashf97d5322939eb50d1d04e0500f994d9b 10869657061793411b2a16b952a9c5649c078bb7 acf8c01ba6f3190a31ae470d6b126edc9db1ba45639108cbf9c0fff19fb0e92d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d0b3a3c.b31586c1.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6UfPq4V2qekTd5dlftYnkvBArv8TiMMc4udfZt47w%2BekW8tBF%2BDf3q08I%2FugyoiLGzUm7o9DiCqdXEsglmkRAFf%2F0dX7PqtX57cZfjlo8IhnciCwvixWiDhMEvIOXChBSVjeVdyZ18w%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-16b7"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45e8f20569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1821&min_rtt=659&rtt_var=925&sent=1282&recv=459&lost=0&retrans=3&sent_bytes=1074052&recv_bytes=50793&delivery_rate=11133&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11506&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d207f61.c221ee64.js | 172.67.185.88 | 200 OK | 2.9 kB |
URL GET poortatoeofficial.com/js/chunk-2d207f61.c221ee64.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2875), with no line terminators Hashce951bda38552a6d5eb495a81b60a04f 64216cbe03d5dd49be3d3f79ea27d9da9d2f586a 1cd3b784101271e03ea653d67d3cc374af0d49c93d8eb1480c5f5f21cccc53dd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d207f61.c221ee64.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAdBYWaa1p5kuboHCyQalbMTQyKmnNRGa31KSVjlDe6EJ5SoIULiw2X%2FzwYwW8z3KQ7Ln41zPPBi7Sv2lqknTdRGwoPE4LXIAm7lTHDhrCCnDeFnXaMaYaXWK1y1ZAARABju8SPodoY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-b4b"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e461ef5c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2384&min_rtt=659&rtt_var=1719&sent=1303&recv=470&lost=0&retrans=3&sent_bytes=1086096&recv_bytes=52480&delivery_rate=1163&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11807&x=16"
|
|
| poortatoeofficial.com/js/chunk-932adb64.652b48dc.js | 172.67.185.88 | 200 OK | 14 kB |
URL GET poortatoeofficial.com/js/chunk-932adb64.652b48dc.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (13595), with no line terminators Hash3db019dd6954f9874e67fcb54cc10431 e16e55da7ba80c46c6231385c1a32045c79a31b5 c28857661ba5c6e48d7e449816878c9cb7b64529e216f9bdab600752abf40266
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-932adb64.652b48dc.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QRtBgf3MtTNS2S192LKJQuQCvcCMZfTvXLuR8FrKzqThZbFBaLTHQtuUoQexOaegUosMottP0SPgKv7pekPzSOvtpfkSqBFGAQZHq4O9NRuY2BPQ1RdqVl6BMSZDhfmYpb9gADOYc28%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-3597"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46e1fd5569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2196&min_rtt=659&rtt_var=1727&sent=1488&recv=555&lost=0&retrans=3&sent_bytes=1198038&recv_bytes=64435&delivery_rate=1184&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13972&x=16"
|
|
| poortatoeofficial.com/api/common/dictEnumMapAll | 172.67.185.88 | 200 OK | 7.9 kB |
URL POST poortatoeofficial.com/api/common/dictEnumMapAll IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hash10c2c1eb498f591614884b6070244fdf 28967788fe3ca20c81dedc76863b295c5b85057c bd9db150bfddf207adf9f5108b4279d29ea9843337df12f75039a493c5f65095
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
POST /api/common/dictEnumMapAll HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
Origin: https://poortatoeofficial.com
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:20 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9njuU%2FdO%2FXzre7MTR0sToW0nNaHLCEzZhq7qnaLjdVE%2F3VXI%2BA8klfFLnmkJBMFAXw%2Fb4bRkSrhLSEcUepkvAIhV4f9GoOnciwa3empyOVERaCx%2FwTccHHeW11ZVUgdx1udZ0baTDtE%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://poortatoeofficial.com
access-control-allow-credentials: true
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e430bd13569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3112&min_rtt=659&rtt_var=1614&sent=569&recv=261&lost=0&retrans=0&sent_bytes=458142&recv_bytes=16914&delivery_rate=7083&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=3945&x=16"
|
|
| timephoriaofficial.com/api//file/cfg/202411/11/713d687f339b49029b69069063e95692_.png | 172.67.143.184 | 200 OK | 137 kB |
URL GET timephoriaofficial.com/api//file/cfg/202411/11/713d687f339b49029b69069063e95692_.png IP172.67.143.184:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjecttimephoriaofficial.com Fingerprint51:46:7A:B9:0A:9C:EE:AC:16:9A:10:33:CF:AA:79:76:C5:E7:D6:4F ValidityMon, 14 Apr 2025 04:52:47 GMT - Sun, 13 Jul 2025 05:43:56 GMT
File typePNG image data, 900 x 270, 8-bit/color RGB, non-interlaced Size137 kB (137272 bytes) Hashccfb47dde193e1793c02d902efc03cd8 c90188b56266b917f5a8ad7f01dcddea65a66ad8 06495953e7b518def5ad45f54b0bc2d253aefd26bc428139c6cb44686ba5905d
GET /api//file/cfg/202411/11/713d687f339b49029b69069063e95692_.png HTTP/1.1
Host: timephoriaofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: image/png
content-length: 137272
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IF7RXjW%2FOQYwDkNvsvIa4Bg6fK4ldz%2FVcYAAM%2Bp64Nib4ehCMJlm1%2FUZixBQzmK99%2FMnb6aoK76YvrAoeikMf1G6rYIGFPIZ4D%2FduhqV6aO4a2XhQOOUC03s7f7TgJKFWBQiOXvWxH5S"}],"group":"cf-nel","max_age":604800}
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Fri, 07 Feb 2025 21:01:28 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e447ad19b529-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13158&min_rtt=2315&rtt_var=12403&sent=159&recv=38&lost=0&retrans=0&sent_bytes=159159&recv_bytes=3794&delivery_rate=3224547&cwnd=96000&unsent_bytes=0&cid=cdd6ae20eff6ceb1&ts=1824&x=16"
|
|
| poortatoeofficial.com/js/chunk-f045b624.c8e1e4bb.js | 172.67.185.88 | 200 OK | 3.5 kB |
URL GET poortatoeofficial.com/js/chunk-f045b624.c8e1e4bb.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3501), with no line terminators Hash554a2852a05af8553e8e9f6cbf2b5132 1206ffd47ce7ab7de3d8f0229614d79219600aef 49c61b9fb83317412a6cb9cda4815f38c69ec4ee61c95ccf42aa9facf4ad9a0d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-f045b624.c8e1e4bb.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UltVbulzozPsQZt%2BTTFfZHsZfv4dDRMHRco56GKVvcilRuDXy5yzA40riioww2UukQEAOkCF%2BVCA%2FUwVWl9eZvVd5DE4xrIoQkcBghJwNu3MKdSpHGeFhDGZLpTg%2BGxJ10E1kLCL12A%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-dd3"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e472880a569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2291&min_rtt=659&rtt_var=1569&sent=1582&recv=581&lost=0&retrans=3&sent_bytes=1283229&recv_bytes=67518&delivery_rate=994&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14465&x=16"
|
|
| poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css | 172.67.185.88 | 200 OK | 73 kB |
URL GET poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash40a8a31b7a9679c113e2d3229e975b83 cfc7c81d0168602f79d42f6f2dffe48afcc33f84 caba92689ffb39e5d145129ad0bfb1cc50d7522aed3e5fbd69d25e1f9462fed8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-9c1c641c.eaa3329a.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WqGdzUpy%2FK6H8Z5xHNcKC88caT%2Fg6zsRgNQI2%2FCxiCAqsvzPsadVq1y6fHoKmfen8mjUE7Hb4auH0jpFgfr3rc3fIvsxBGfVxJ8v7fqBrVP9QZv687TjoC7fkqiNHoJrXGUjinXqtmQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-11bec"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e438dd92569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1968&min_rtt=659&rtt_var=602&sent=655&recv=303&lost=0&retrans=0&sent_bytes=509008&recv_bytes=24542&delivery_rate=323151&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5695&x=16"
|
|
| poortatoeofficial.com/js/chunk-22eab366.1f696fc2.js | 172.67.185.88 | 200 OK | 53 kB |
URL GET poortatoeofficial.com/js/chunk-22eab366.1f696fc2.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (52609), with no line terminators Hashe1cc2090fe3cf2dd8e53c91bd8928bbe b5f98ab2cebf6cc71188268157fc25305e707770 c304901acfe5cad5501c9152ebaca385b4fdd382b8c103b3ba0ad7e4df3abd21
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-22eab366.1f696fc2.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yLMyI%2BsBDezZAjmi6RXIqjgvktMS5KHoAn92QX%2FEBUvd2XrGYxeGn9xy9%2B3Fd9CJd2Bre233TMU9ijQEVYO0h2ucoONM4cvNQ%2Bf2A9g3JsH6054p09PgyETc80ffkQ6o%2BJUXLCEKFug%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-cf87"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
cf-ray: 9333e45e1f1d569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2243&min_rtt=659&rtt_var=1415&sent=1232&recv=444&lost=0&retrans=3&sent_bytes=1037019&recv_bytes=48686&delivery_rate=1036&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10985&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d2293a9.8a39969f.js | 172.67.185.88 | 200 OK | 7.1 kB |
URL GET poortatoeofficial.com/js/chunk-2d2293a9.8a39969f.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (6962), with no line terminators Hashbf61bb7d7011eb3caddf20678825b4ab 8de941084181a6dda6a59d94b98357e10f97a8a9 05c8ba7ba82bbed59a6597f915e1d4ceeeea47fb7c248defc482627f5bf1aa5b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d2293a9.8a39969f.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1N01LrjmVWOCa9lpR2C3vCV58CZfE3N5IV2bsdp6GrmmjvKOf81MkqHwic6%2BtobkaqzF8uoxS8QKg6e4Qx0HLDH8uDMUThfsGnSuXPCLRW6E0t6pWcaGACd3DrpmV%2F8Fany7KbRuvMk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1b8e"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e461ef5e569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2156&min_rtt=659&rtt_var=1360&sent=1323&recv=477&lost=0&retrans=3&sent_bytes=1099879&recv_bytes=53512&delivery_rate=10845&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12028&x=16"
|
|
| poortatoeofficial.com/js/chunk-3ba48570.c25f362d.js | 172.67.185.88 | 200 OK | 5.1 kB |
URL GET poortatoeofficial.com/js/chunk-3ba48570.c25f362d.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4977), with no line terminators Hashaae37e163f751665260e8a9f0113796c 2624ce3c3c29d4d74acfe9b87e0afc83376dbfd5 208f6ba3163d5be49e343ffb77a56a901833583bd02780bed4e2a979ab4bd2f3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-3ba48570.c25f362d.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gU6vJO%2BtyLXrRtX6OKxOiUVoF9p7cMAIWKbgycwgHf34lKnMTn8NO1KlRXkN%2BCI4K%2FSu3L%2Bv2edQcLbfGLn5QqNeyP2TkdPiHpMJ73grCE%2BhZHYPV5b9tBVSBy5wyn8MZ8UYs0tmJvM%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-13e7"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e464ef89569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3239&min_rtt=659&rtt_var=2798&sent=1363&recv=496&lost=0&retrans=3&sent_bytes=1122758&recv_bytes=56283&delivery_rate=1141&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12512&x=16"
|
|
| poortatoeofficial.com/js/chunk-9fd116e2.cbfd958f.js | 172.67.185.88 | 200 OK | 7.3 kB |
URL GET poortatoeofficial.com/js/chunk-9fd116e2.cbfd958f.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7258), with no line terminators Hash6292f7d901ec6aa7e1792e247f1f7813 af6b1d49c095e8e24b9cf461eedbbe970d0c7da0 205421f27996f9c325621bbd21e5c1dfed12b03a3c987b17ee7dac58edc95b40
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-9fd116e2.cbfd958f.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0qmE1U6CajROqxltNgPwiJU5xJUkN0b1sN6lLgeXl6bJVdDG1mcwLL25mw18i0IZGZog%2BIlWmBYZiGEYhZlGtQjdqgzEaE7v1H9bbx60vZeIUmXGjmeeGsBx0E%2FNm42QOJQZpWrBYoU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1c66"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46eafd8569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2896&min_rtt=659&rtt_var=2299&sent=1473&recv=547&lost=0&retrans=3&sent_bytes=1190395&recv_bytes=63121&delivery_rate=12070&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13857&x=16"
|
|
| poortatoeofficial.com/css/chunk-06ae24a4.fd43ee93.css | 172.67.185.88 | 200 OK | 48 kB |
URL GET poortatoeofficial.com/css/chunk-06ae24a4.fd43ee93.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (46623) Hash177ff7e3310c02d7e6a139a3237e0d38 375c1fac3912c4b63c01d7bc241aa43ed0055460 db079d71523907889a19e611a38e528a3405d89d22506634a177248f03f93226
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-06ae24a4.fd43ee93.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g2Yo%2FBSuaqxIY3n6mHLzp33fTBWlNcx1oPz1qXiZeDOYnHxrU4q37aM6ZZwiZr7pkRCpBjHBn8fnJShXQEHNfsh08%2BgdrDwEUjrJ0Giu8BC28Y9KbkiFCw%2BDidUlk%2BMTdVRMF%2FkYKqI%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-bb0e"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4309d0d569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2832&min_rtt=659&rtt_var=1395&sent=576&recv=263&lost=0&retrans=0&sent_bytes=463786&recv_bytes=17005&delivery_rate=34762&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4157&x=16"
|
|
| poortatoeofficial.com/css/chunk-189a2af1.2e2a949a.css | 172.67.185.88 | 200 OK | 2.8 kB |
URL GET poortatoeofficial.com/css/chunk-189a2af1.2e2a949a.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (2802), with no line terminators Hash966516d12c4531cb81cf6ed4b46ab92d b8ed7747738ba4f4d5826a71013a5193efcb474c 972fb6c2f201749077d73381916e96c62b0271d542500f660aebbe9d6aa3267a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-189a2af1.2e2a949a.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sHD%2BCUYuYILJKhqqf1hHmiTxx%2BL59LkOeEhc34tnS%2B46hHRJmYP6YsLuTe3k0w5wTb97tYEjRve7jB9nuf%2FjYj399q83YxV31%2BeZTGJmAdc0OuvsuXhyjWNs79nhwoillPPRPVkDzKQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-af2"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4387d8e569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2311&min_rtt=659&rtt_var=1092&sent=632&recv=293&lost=0&retrans=0&sent_bytes=491891&recv_bytes=23132&delivery_rate=193368&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5415&x=16"
|
|
| poortatoeofficial.com/css/chunk-5915ee8d.4006cc4e.css | 172.67.185.88 | 200 OK | 4.8 kB |
URL GET poortatoeofficial.com/css/chunk-5915ee8d.4006cc4e.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (4754), with no line terminators Hashf2cf758791111fd2d848603463e99178 6efa309eee6c7aebb25f7eb378ebb367680cea9f be18a5cd6c8dd5547446a18363472d5ee56a0d2008b3d187fda6f866ed32facc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-5915ee8d.4006cc4e.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dQKZ2tSl4Q3HKBB69IIYWJ7%2BQPY1HqbkGaRLO5QovUw6K7Aou4wQIJKim8Jkz6cJrJ0QFXWOVZadnq4t6OxZk7C5XW8R3LvFaHFnOlCXArXRRtAI26UmqDwg8vlAyI8aRl23ZwdZL5M%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1292"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4497e46569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5062&min_rtt=659&rtt_var=4244&sent=897&recv=359&lost=0&retrans=1&sent_bytes=735826&recv_bytes=34798&delivery_rate=324914&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8119&x=16"
|
|
| poortatoeofficial.com/css/chunk-c5c0ecd6.2ea0ed93.css | 172.67.185.88 | 200 OK | 814 B |
URL GET poortatoeofficial.com/css/chunk-c5c0ecd6.2ea0ed93.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (814), with no line terminators Hash8ad920d3141fcfb6940483b0ee0008ff e45b43be13dc2cd8033b3eb424bfdc4b9456b645 6de363de93ecc1ea90d66315d79b726f1d0829281515795ca9ff2f597b1096e2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-c5c0ecd6.2ea0ed93.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZWdpUQP9KsGUZ3cxCFAmSHZDgLkfhtwLWpaaoXo5DKIEh3tRFxMDXpmxc90xAG39LoZfBnkWlv%2BmjhEubzLX3CrcMF4u2hFQqtbY4AwoZT2umEDBUOOjMWUWVBm%2BDOLlTznymzACK0o%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-32e"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e452eeaa569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3254&min_rtt=659&rtt_var=2592&sent=1139&recv=395&lost=0&retrans=2&sent_bytes=985081&recv_bytes=40490&delivery_rate=66977&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9595&x=16"
|
|
| poortatoeofficial.com/css/chunk-cefa4dd6.ceb1f577.css | 172.67.185.88 | 200 OK | 1.5 kB |
URL GET poortatoeofficial.com/css/chunk-cefa4dd6.ceb1f577.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (1544), with no line terminators Hash4f5c3e0936d5f86c34c8a8a3e48eb731 d986b9f658e4860865d5ba3b70d01c23480d9183 0a2683401ed89953e511402e3a9590f56a867918b623a36b5b69f2cb5f2493c4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-cefa4dd6.ceb1f577.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4UzxJJu3QcnI9jvqZsiyHzMRpQkN2dIewhQvCvJGS1D3trCdGUcO2qdmPa9%2BNHRs45YbR%2BCK75Uk5WI3q3L8yuKsMMAdmuIbOxCc7AQvzcIORTAt%2FE06CO9p7%2FLobz1UuXwbfL3Ng1w%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-608"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4538eb3569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3014&min_rtt=659&rtt_var=2424&sent=1146&recv=401&lost=0&retrans=2&sent_bytes=986279&recv_bytes=41957&delivery_rate=536657&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9744&x=16"
|
|
| poortatoeofficial.com/js/chunk-0b64ae5e.015af9f9.js | 172.67.185.88 | 200 OK | 20 kB |
URL GET poortatoeofficial.com/js/chunk-0b64ae5e.015af9f9.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (19481), with no line terminators Hash885d96191753c3e793532a46181264a0 30c2a186785836e69a94b8a656819f48792d551b 4c211ca36d8faf4b10c4f1bb91a6a26884ae0152f2164017902419119ecd9704
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-0b64ae5e.015af9f9.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9q1o7a1x1oSqexyUS5G3K%2BUgoufI%2FcRiIlvPlDmXvqUC7%2FK0TG4BgsgUhQ3aOxCA6D4ZgVVkv0JnkaHS38mg0Nup93sEVgpY%2FAfz189H2UQXzF2CNxrL%2F2WaDiy%2Fo2HEiL%2B9koi5kiM%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-4d0b"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45a8eec569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1959&min_rtt=659&rtt_var=1265&sent=1206&recv=433&lost=0&retrans=3&sent_bytes=1021363&recv_bytes=46998&delivery_rate=1151&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10865&x=16"
|
|
| poortatoeofficial.com/js/chunk-7721dd77.0e3d8694.js | 172.67.185.88 | 200 OK | 104 B |
URL GET poortatoeofficial.com/js/chunk-7721dd77.0e3d8694.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash50a232a7a5154e825f186f95acf29aee 802fa9205750afec336d36539e1a913906088396 ea9c81db3bf4e708fccee76f211080e15889d6a7efb7134d71e6d728fc0ec5b1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-7721dd77.0e3d8694.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pLQbcPwOMk%2BNdAugHfzKLS4FmLMW1s3n1TxncFo6TAujYSP2ufALCxsCh5ON%2FwkKV%2F%2BJWABTfKstxXWe5Asq6x25u%2B3IdUiDG5wGWHdtEMFQYoJXyS2xafWAlf0seoX81%2BVH5cg7ROc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-68"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46c8fc9569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2227&min_rtt=659&rtt_var=655&sent=1451&recv=534&lost=0&retrans=3&sent_bytes=1182302&recv_bytes=61103&delivery_rate=33564&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13514&x=16"
|
|
| poortatoeofficial.com/js/chunk-d646062a.56ad9b90.js | 172.67.185.88 | 200 OK | 5.0 kB |
URL GET poortatoeofficial.com/js/chunk-d646062a.56ad9b90.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5021), with no line terminators Hashf271f4c8af58d5f880409e37228914e6 99dbb0a93a7d68e349d6d7a630e504a3e4502dcb a8426489a32da765bf60f13c8fde7f581bc961a2e4792a8773151f2259c6ff60
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-d646062a.56ad9b90.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eh7on2zQQxceAG55drkhT1Km9umcUnQBYCxS%2BVJ9AQoEVqf0YzEnQjfR3N8Zifg5lRZ%2B4vqiQu7o2nC6et5yEjbAk%2BZ5M8RhWID1h3eEVy0X54nFk1s07AbjROrK%2BO4sUpqf%2BvOctT4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-139d"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4705feb569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3190&min_rtt=659&rtt_var=2885&sent=1529&recv=561&lost=0&retrans=3&sent_bytes=1240389&recv_bytes=64944&delivery_rate=349580&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14139&x=16"
|
|
| poortatoeofficial.com/js/chunk-vendors.42f07336.js | 172.67.185.88 | 200 OK | 66 kB |
URL GET poortatoeofficial.com/js/chunk-vendors.42f07336.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (29775) Hashbdaaed4e9e1d5e0322ea968e6f47ac0c 85c58af8151ed5badcdca952295e8c6e7b3e1e15 c9634af5f9b16a9f44d78311163effd76467a2441f744859c96fc066a3b58aa8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-vendors.42f07336.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tI3WpKHY5nCV%2BlhaIm0v6aV3TznOmohoI7MWctYqTxYzXmcMp5S7WMIwY3H1scgetFulIXQNil4IunTsH95Mpi4YMeV522XLmzeqlHSYVrM9ZhIrFJuJvo0%2B4xDB%2F%2BqkmmxwBenfEgk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-10000"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e41f6c1b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3233&min_rtt=659&rtt_var=2524&sent=186&recv=238&lost=0&retrans=0&sent_bytes=16108&recv_bytes=14439&delivery_rate=1331306&cwnd=12000&unsent_bytes=0&cid=c63126c8867fa86d&ts=1606&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js | 104.17.24.14 | 200 OK | 3.9 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text Hashfa93e8894edb6245ab03883633b12b6e e3ba4c7d1a8876090756fd31715b4f6af6fd649e 3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15
GET /ajax/libs/js-cookie/2.2.1/js.cookie.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 1299
cf-ray: 9333e41ffb225687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec5-f2b"
last-modified: Mon, 04 May 2020 16:11:49 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 925383
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c%2FNfBORvDYrl3Y%2B7gD1QXoYAhTnDvXY8f1QPgJ0PL%2FDjDoGormHFitziPLmtvS03Aq22qJeIw15AUb%2BNxCkm%2FqtB9ha13JDUC9hTOyMgNUxobAk37%2FcMSpjO2f5dAKmxGcjr%2F%2F1p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/api/userLevel/list | 172.67.185.88 | 200 OK | 411 B |
URL GET poortatoeofficial.com/api/userLevel/list IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hash8fa12ffce0fad7d14fdab3926a1b06ca c9897206b2dec41950c26781df9165682c9279d9 b3f2ace88f30303d299f033d914c58df8a559d144ddc029e7b1e93d6d466c49d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /api/userLevel/list HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: id
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=chpmVGm4cIPcQ32zQJz9kI%2FAdGKddFfdwwdC%2FYOGQujcMLjIXQlpc0heBekXTxbY%2BoIfSZ1f3syVKMRfGozUp1taIyhe5nsg4eNW%2B7KVlriuoNfsbP0Nd4Wqx73G5TEulU44XdcUVpk%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e43f2de5569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3646&min_rtt=659&rtt_var=2736&sent=695&recv=323&lost=0&retrans=1&sent_bytes=534792&recv_bytes=28928&delivery_rate=34708&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6246&x=16"
|
|
| poortatoeofficial.com/css/chunk-3ba48570.5b9bf82d.css | 172.67.185.88 | 200 OK | 243 B |
URL GET poortatoeofficial.com/css/chunk-3ba48570.5b9bf82d.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashb8901b3823757d5f837487ced574adda e78d0c3abadc1108b637c4f3fa151ababbf9a70f 0501c9258dba83079a93439098564ba2d4f40ea059bf3409387e9c43f8114478
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-3ba48570.5b9bf82d.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ReyMssvnJhfptBoZsXYlscJXWYQqmSsO%2B3l3%2FHsi1JDgg1qwZISV7eZHWgQhQKk8feMHI7r68acfuDRybzCGqdsSe9oUFtb7idipGyNBRbBOTf0cuQP3rHnkA%2BJCAGiSk6n9G1ZJxJI%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-f3"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4450e20569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7043&min_rtt=659&rtt_var=6162&sent=877&recv=346&lost=0&retrans=1&sent_bytes=729034&recv_bytes=32275&delivery_rate=639689&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7398&x=16"
|
|
| poortatoeofficial.com/css/chunk-74d1c393.2928084f.css | 172.67.185.88 | 200 OK | 1.3 kB |
URL GET poortatoeofficial.com/css/chunk-74d1c393.2928084f.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (1298), with no line terminators Hash1fe245f2830b10534ae77924560ec401 1feacb8014a296352318b1697944b097d55ba92b a7bf0d2d8a328645eb9822334530a707baf64fac7625855b717fedbfb321525c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-74d1c393.2928084f.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=poaTkdJvlvnyl5lPWQKD%2BjcYM92Y3%2F15uhggX2WuJxr9C8f6QFnNRJk3hqYu2iswDTs4For1ruBMxNiZmMV8f9229G8pLYfiE%2FXo37tp5Om7DXuEK9CAudoJLhZ0Afmyz6aPwI8D4JQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-512"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44e4e7b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4032&min_rtt=659&rtt_var=2737&sent=1101&recv=377&lost=0&retrans=2&sent_bytes=956894&recv_bytes=37765&delivery_rate=71074&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8884&x=16"
|
|
| poortatoeofficial.com/js/chunk-62a9efce.1b7df6e4.js | 172.67.185.88 | 200 OK | 8.3 kB |
URL GET poortatoeofficial.com/js/chunk-62a9efce.1b7df6e4.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8133), with no line terminators Hashad32ff19be2eddffd24c1b5177e1a5fd d095f2b2a1c5cfd4234b5306b91930a37a6f6db2 8967594add188a7f22cc1247c43d0aa55c52cf8bfcc6daeabade9944a0d08dff
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-62a9efce.1b7df6e4.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFtVHUQvCk4N3ltrC8zXUrgcr8GRA%2BPVL8w5JElgnEnWlIscJXGXZJ0nHlpG6v%2BbRy3qD1%2FFEFVZug005dXuupmp86HICK0iBsicLQoIa4NzCXwhyT%2BS7dbl8ROj6GbunfkHQOq%2FD5w%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-2043"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4684fa9569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3855&min_rtt=659&rtt_var=2161&sent=1378&recv=504&lost=0&retrans=3&sent_bytes=1130773&recv_bytes=57361&delivery_rate=950&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12833&x=16"
|
|
| poortatoeofficial.com/js/chunk-74d1c393.217d77e2.js | 172.67.185.88 | 200 OK | 106 B |
URL GET poortatoeofficial.com/js/chunk-74d1c393.217d77e2.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashbff42bacd79f07fce7ce3f63cd11e1df 709f2f4f8984cd122f4b23db3422913ab869b1db 947aa535d6bac3e5cc1a59fb1aeeef43edb1735ff58581096ff111744e2c5811
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-74d1c393.217d77e2.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wvi4ln29VYx38yecIxfiD3QS9Uv9ls4CCcwl4eO8lokw5qx4nqlSZkkpxAO98JTEvptNlOVXpFmsSPM90YFBG0VcdV2hkRPwzkGnUvbAiOFPVPC9hKf5ZxqYijhzvKDJozwUOKuVNjo%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-6a"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46affbf569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2219&min_rtt=659&rtt_var=852&sent=1447&recv=533&lost=0&retrans=3&sent_bytes=1179357&recv_bytes=61057&delivery_rate=1881&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13473&x=16"
|
|
| poortatoeofficial.com/css/chunk-0b64ae5e.99f4f967.css | 172.67.185.88 | 200 OK | 150 B |
URL GET poortatoeofficial.com/css/chunk-0b64ae5e.99f4f967.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashc855a7a6192f3ceecc3f545d08a13dcf 336c977e1a4ff6fdea77d9814a9fe37299e3c4cd 6b1bdd95fd64566b2e6983b118e4264f4afdb0c643c443e98bab31d10408da35
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-0b64ae5e.99f4f967.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rVPczl7Y2iGczh9%2FZ4cnLxJL81pSdMXE3gN4ZCvSLQRZM2GsVRCGXGt1dC5wEQrptsNd3IF3UtPOaYzYxmaeOTbwPle8DfzVRQd%2BI40p5%2BHfQf366GKqBq0nPvNSV3KSpF8lMar45Wc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-96"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e435ed69569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2763&min_rtt=659&rtt_var=1561&sent=619&recv=283&lost=0&retrans=0&sent_bytes=487366&recv_bytes=21287&delivery_rate=267947&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4996&x=16"
|
|
| poortatoeofficial.com/static/theme3/tabbar/grab.png | 172.67.185.88 | 200 OK | 8.2 kB |
URL GET poortatoeofficial.com/static/theme3/tabbar/grab.png IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typePNG image data, 159 x 159, 8-bit/color RGBA, non-interlaced Hashf87c05415ee878598e29ce3791fc53c4 97fe54863a15d90fe280aa05079182b1808f197c 2cd9a7df3546f4a8cd17791972ad5badcb8fc3660bda450e8c8fadcf1545e6cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme3/tabbar/grab.png HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: image/png
content-length: 8241
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oyOjlSTvGfh6vfAGimyM870uuBk7XGXGh2DV%2FkIn42l%2BWuKabAQaqj9xmEEs1%2BMSjnwc5NTpEBga1MkzcL%2F7ArMfAjef8%2B8vb4aoXYHxc%2FscFFjpxqrvglWBfrh3GzXzXT6OK2TwnWY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-2031"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e4435e0c569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8116&min_rtt=659&rtt_var=9219&sent=852&recv=337&lost=0&retrans=1&sent_bytes=706886&recv_bytes=31150&delivery_rate=963564&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=6921&x=16"
|
|
| timephoriaofficial.com/api//file/cfg/202411/21/869fc3e9bdd74bb797d65c06b2ea8e16_.png | 172.67.143.184 | 200 OK | 150 kB |
URL GET timephoriaofficial.com/api//file/cfg/202411/21/869fc3e9bdd74bb797d65c06b2ea8e16_.png IP172.67.143.184:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjecttimephoriaofficial.com Fingerprint51:46:7A:B9:0A:9C:EE:AC:16:9A:10:33:CF:AA:79:76:C5:E7:D6:4F ValidityMon, 14 Apr 2025 04:52:47 GMT - Sun, 13 Jul 2025 05:43:56 GMT
File typePNG image data, 752 x 417, 8-bit/color RGBA, non-interlaced Size150 kB (150095 bytes) Hash31cac9079822350b3a28ab52672b99d2 3a6066ec038b20e9ed3ed4e32c438d4db70e9371 372267f3e5f1bc84dd309cacbf9f35b47288e81d67000dfad258da012bb4cf12
GET /api//file/cfg/202411/21/869fc3e9bdd74bb797d65c06b2ea8e16_.png HTTP/1.1
Host: timephoriaofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: image/png
content-length: 150095
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jnAFFCl2a7VSdwv2KmwbojK8Mskwpdr2NjSGDDi8dOrhe4pEio64WZnxbFyLvQX1f37xjqU501wGJl9FSpyhD7ijNKEPZuiquxiV4NqV4K9ucEfrIMJU8924pd592rBZfjNNHxO%2F2y9o"}],"group":"cf-nel","max_age":604800}
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Fri, 07 Feb 2025 21:01:30 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
cf-ray: 9333e4482d24b529-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=20353&min_rtt=18209&rtt_var=9331&sent=30&recv=34&lost=0&retrans=0&sent_bytes=4638&recv_bytes=3616&delivery_rate=1516&cwnd=12000&unsent_bytes=0&cid=cdd6ae20eff6ceb1&ts=1531&x=16"
|
|
| poortatoeofficial.com/css/chunk-6698de45.417e0788.css | 172.67.185.88 | 200 OK | 625 B |
URL GET poortatoeofficial.com/css/chunk-6698de45.417e0788.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (625), with no line terminators Hash64a929a7d54bbd849dd6eabdbda4d9c8 14052f0e049a7fb4123bb08f26f7cd9fafc12495 1728e8eac8bcb6f1d4dccde1cabe92163f790ac8cc0029dda71c9186392dc32d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-6698de45.417e0788.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i5H9KgLSmEdJOApkWTm2tbJW6CjWgjA%2FrU560S5jqaGvow5QNM9V5QDO37bX05y1X5VF01QdfXwmOZMM0TMVKGodhL0qrU9XzQj%2FqP%2BsjDEdEZk3V6Zcv%2FbX3u44QG8Jb9R6qan7FJ4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-271"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44c6e6f569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5027&min_rtt=659&rtt_var=3733&sent=1083&recv=367&lost=0&retrans=1&sent_bytes=945159&recv_bytes=35878&delivery_rate=579519&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8362&x=16"
|
|
| poortatoeofficial.com/css/chunk-932adb64.d362d6ae.css | 172.67.185.88 | 200 OK | 2.6 kB |
URL GET poortatoeofficial.com/css/chunk-932adb64.d362d6ae.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (2625), with no line terminators Hash6baf6301c2e215f8e8ecec373a734e7c 8eee0eca4c9b0fc3a69866a730afd72b88a5635f 0576a55858af13ef94bb893a1d0a1e30e77872294ffb95be0d0ac7d4a4c208df
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-932adb64.d362d6ae.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=buh8D5SWDxs74ls67AI%2Fmk2laEFebGwfVkMYfVcufgepBeRAo%2F1CGIlCYPvg9Bf7lgR7c3ky5Hch2fuVviL11inHhvI5adGYb9uwTiscsat02BtiweOlobTM7ejhT%2Br%2FnvXVmWdo5J0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-a41"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4506e8c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3925&min_rtt=659&rtt_var=3196&sent=1126&recv=386&lost=0&retrans=2&sent_bytes=979200&recv_bytes=39126&delivery_rate=29368&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9248&x=16"
|
|
| poortatoeofficial.com/css/chunk-ebba634e.e41daa24.css | 172.67.185.88 | 200 OK | 518 B |
URL GET poortatoeofficial.com/css/chunk-ebba634e.e41daa24.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (518), with no line terminators Hash1cff30261d21415f988a27c746136d7d 250599fd8cfcce855ba83d23054e5289a43901df 7ab6e1e006ffa59c7345873208908764abc61e8213beaec8ce3d6a0c142ccfbc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-ebba634e.e41daa24.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FSFfhU0h7ibXfafXkq7qaDHnU7ZLnDp7ewsy5m3tiPegKwK8DfQ41Lenf5lpneNFAatzEca5%2BrJTFT5CmNH%2B868uUDgDfUOnKkhbEZDYY6zA8Qel%2FkWwE8yD05DJjeN%2F0VTFXlkoGJ8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-206"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4559ec2569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4305&min_rtt=659&rtt_var=3574&sent=1150&recv=406&lost=0&retrans=2&sent_bytes=988271&recv_bytes=42663&delivery_rate=24501&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10049&x=16"
|
|
| poortatoeofficial.com/js/chunk-ffc2961e.d294708a.js | 172.67.185.88 | 200 OK | 11 kB |
URL GET poortatoeofficial.com/js/chunk-ffc2961e.d294708a.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (10654), with no line terminators Hash881474b27e9e004327f03f6ef6698400 8756e7d95bd51485c00488a4437493fdc20c58e2 08c6496487409059e483e74dbadc14d9e467756921397eeea737289ee6b9b616
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-ffc2961e.d294708a.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EQJdtVcMd3OCeE5bNnB0ZtdwEnET4zqgoaYbDGpD7Yu%2BpqiRXXRdncNAvmJxaH0FqIZzjniQuyFJWjPGoWjcS56Rnp5qu9SENH7oOYwOZv0xbtKRxv41x6B9pMpyxRctzQ5JMvx0Nvg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-29de"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e473781b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2404&min_rtt=659&rtt_var=1306&sent=1598&recv=587&lost=0&retrans=3&sent_bytes=1295468&recv_bytes=67793&delivery_rate=1134&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14627&x=16"
|
|
| poortatoeofficial.com/css/chunk-6e4f04a4.5a255384.css | 172.67.185.88 | 200 OK | 117 B |
URL GET poortatoeofficial.com/css/chunk-6e4f04a4.5a255384.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash61e2bba3a72b590e1223e0428d00de84 36ee41d679d6e52cb18d786a076641e54ec932ca d2e81b03a1686104de770d618c2b38bdf2a667382dd24ddf24913420bfa5fe54
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-6e4f04a4.5a255384.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y3m%2BUm2mEOYOsOnXsKS3%2BVE%2FTVkOkqWFXiSK4IsYLbjZNpcwKE0YxM1kX0OcIVR0OmB5cIEVnctLPGidf1%2BG6aHTidCrytTZ%2FjstUUSFKO49VhLEiUkJX7GK2qZxwixtUseyDcsFc7w%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-75"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44cbe74569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4232&min_rtt=659&rtt_var=3441&sent=1090&recv=373&lost=0&retrans=2&sent_bytes=947691&recv_bytes=37106&delivery_rate=3975&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8633&x=16"
|
|
| poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css | 172.67.185.88 | 200 OK | 73 kB |
URL GET poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash40a8a31b7a9679c113e2d3229e975b83 cfc7c81d0168602f79d42f6f2dffe48afcc33f84 caba92689ffb39e5d145129ad0bfb1cc50d7522aed3e5fbd69d25e1f9462fed8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-9c1c641c.eaa3329a.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oWHmCIOHwEVQLABlheroKezULoX0%2FP3RTyw3P5mb3u%2B8HS12435o4xWIBGUtAUwNtOYLQ4lKs3D9MDzAOATzxm%2BZAF0rMw%2Fkkqak6VZruuVzFOx%2BLPUlaiCVfDsZFSEFvOB3Ue3rBHU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-11bec"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
cf-ray: 9333e451ae9c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3680&min_rtt=659&rtt_var=2329&sent=1105&recv=380&lost=0&retrans=2&sent_bytes=959292&recv_bytes=38139&delivery_rate=927396&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8992&x=16"
|
|
| poortatoeofficial.com/css/chunk-f045b624.fcc4b9c8.css | 172.67.185.88 | 200 OK | 120 B |
URL GET poortatoeofficial.com/css/chunk-f045b624.fcc4b9c8.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash7a2294f71fa3fcb9df3f49fc4b6af4a0 e3737db7515fb7f5ee71f08e997263adc7859680 53d54f04576875a8355e595f7a10f2530c5f8468f1e5bf954669f7f119b5c8e8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-f045b624.fcc4b9c8.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fXb6QASY70hW8BEe0aSROXC5AkLBZKB6Rn1HnGMS8ZWQOKQxni44dNT9VzKuGoBl5%2F0eibdciA%2FDjANGTa7F2diwX86BnLf%2BvlzjIAlCKixSgS1WgBSsph1ZOAstcmQHezqiLPxSUqs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-78"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e455bec4569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3375&min_rtt=659&rtt_var=2286&sent=1148&recv=404&lost=0&retrans=2&sent_bytes=987489&recv_bytes=42333&delivery_rate=1140&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9856&x=16"
|
|
| poortatoeofficial.com/lib/jquery-1.11.2.min.js | 172.67.185.88 | 200 OK | 96 kB |
URL GET poortatoeofficial.com/lib/jquery-1.11.2.min.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash6355f3cc28006e33bad2e765cde30e0d 909cd6318d5047f3c8e83528253b256981394414 39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /lib/jquery-1.11.2.min.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4MOWK0ZhsGIzZkMxtXFMD6h%2B%2BJMxuktFflZEVupry2Vy3lLSNrXg%2Br5cJvOUOAN0Z88gDzeWdw7a3cFwHsBld3nTcPaD4DS9Kdl8vIsRXA%2FUByyWUXwVsWDzNniaZvmN9EVkl6CivAs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1787e"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e41f7c1c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3501&min_rtt=659&rtt_var=2146&sent=226&recv=241&lost=0&retrans=0&sent_bytes=63446&recv_bytes=14572&delivery_rate=5364163&cwnd=36600&unsent_bytes=0&cid=c63126c8867fa86d&ts=1624&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js | 104.17.24.14 | 200 OK | 14 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, ASCII text, with very long lines (10313) Hash334149adf44476f28bfbf16c7b0382c2 ad2ea246ebb53ed655ab50d44b33d4d6f942387d 6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6
GET /ajax/libs/axios/0.19.0-beta.1/axios.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 4213
cf-ray: 9333e41f8a685687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d6a-3546"
last-modified: Mon, 04 May 2020 16:06:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 173082
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8RN6EcWjhrK4kUuvdzKOl645uEmQkV92chm%2B6fB0qYzN9KTBUJol5erEKaaC9U0jf5x6oMNHr3cFOYjJa6HBU4t%2Fh%2FcfkZt2wUkE4Iy7cergwx%2BJfYiIq1%2BbyoCZpzWV71Q3RUno"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/css/chunk-22063c7a.f2176577.css | 172.67.185.88 | 200 OK | 245 B |
URL GET poortatoeofficial.com/css/chunk-22063c7a.f2176577.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashb80bc10f501df69c1b9c0dc57419c213 0f0eb0b6ff984ae2024c7b400f2075b3947c961a 359a4721b6efb68a47af23185097df7ecf39d5714c742b878e57c2d47a3a9818
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-22063c7a.f2176577.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rOFiGGKxg1jDeoq7ox6DuKuOjVXUz7ufqBYn7Vvr2HfsHcKn5AU8lgtlBrztgO%2Fqa4peAGgJXWOqPeuDg2nkawnuXGQ5uyoXTaQ6tcsT2SBrhU9AeRZQUZGqR35SyUs13nlfCXPRRMc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-f5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e439ed9e569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1987&min_rtt=659&rtt_var=753&sent=651&recv=302&lost=0&retrans=0&sent_bytes=506096&recv_bytes=24496&delivery_rate=1144642&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5618&x=16"
|
|
| poortatoeofficial.com/css/chunk-51454bdc.4a19b0cd.css | 172.67.185.88 | 200 OK | 424 B |
URL GET poortatoeofficial.com/css/chunk-51454bdc.4a19b0cd.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (424), with no line terminators Hash63768b78762519cf4603acfc48995bcc 9ae9769aff89008916d2414ff344a472fc9ff1d4 8e9d60e3c5870a07de8d82ab712c318db6bf50dc2a1a894f8480fd8b3c425986
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-51454bdc.4a19b0cd.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j0jiPd6doe0Td0AssN0CQfhW2YJ3WSzvaEznQxnONIMkWFCa00UYyLC5FU%2B5eDGe06d7sb%2Bi7Ybq%2FX7XJOt4tJJWElpMEFyBrrZna25c5jIWGZqxgXd51suycjR%2B%2FdbfzuVX76Ula6E%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1a8"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4457e27569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6556&min_rtt=659&rtt_var=5594&sent=880&recv=348&lost=0&retrans=1&sent_bytes=729921&recv_bytes=32630&delivery_rate=239319&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7483&x=16"
|
|
| poortatoeofficial.com/css/chunk-604fc2c2.a4b4e3a9.css | 172.67.185.88 | 200 OK | 3.8 kB |
URL GET poortatoeofficial.com/css/chunk-604fc2c2.a4b4e3a9.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (3793), with no line terminators Hash0b2102b102f5b23caa1f39cadecb75ac fa151273a14bef5cf2c71247a0e226a2d42a623d 88146ad7576caf74130473e68384707ee55465e20bff4eb34c040c8ac03782b3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-604fc2c2.a4b4e3a9.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VRTlN8Qw4sP7qlAY5bEjVtD30jZG6D2q8bHMt4fYr2H2hcTU3HhLGtdO7GC6WJxl63HnmeySO7baaNNEwc%2Ba2Tycl4s8uz9rHz4OE%2BBUp%2BqEd6y02Ka2m%2FRCeavDGkTwpag8808PKP8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-ed1"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4497e48569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6254&min_rtt=659&rtt_var=3870&sent=891&recv=357&lost=0&retrans=1&sent_bytes=731769&recv_bytes=34708&delivery_rate=3237&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7898&x=16"
|
|
| poortatoeofficial.com/css/chunk-75292e3e.702a8b86.css | 172.67.185.88 | 200 OK | 1.9 kB |
URL GET poortatoeofficial.com/css/chunk-75292e3e.702a8b86.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (1933), with no line terminators Hash1cad8313ce8f33330685a969429cdca2 1ea22dc3dc29789c9f94dcebc85425b5d90a4d03 296bf0db8829d0c816826333b799ac3675121ecc33f3fbcd3c96023e159fe153
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-75292e3e.702a8b86.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BB8yPjG4AJqknpt%2BEZY%2BwKQeXMYs5sW5mCsUI0eBa0ctWCqODGmovVJr5R5lDL82ObihpEJUrMUCf6EFo4XzBmiGu3YW7x%2BW3G9PsXnHRrBmkuyF%2FdqHgREIaXgerPb0PUcaKlGjQko%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-78d"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44e5e7c569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4057&min_rtt=659&rtt_var=2103&sent=1102&recv=378&lost=0&retrans=2&sent_bytes=957938&recv_bytes=37811&delivery_rate=43084&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8915&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d0c4262.c00fff0a.js | 172.67.185.88 | 200 OK | 10 kB |
URL GET poortatoeofficial.com/js/chunk-2d0c4262.c00fff0a.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (9867), with no line terminators Hash730bf2c8c0534fa69c3ad586b798dd05 0ad4aaafa9bcff708743abfe8a8befd1f510db7b 3078924dcb57f6bd87c237097462d69fe25dd9e1f45e8295488a5e228effe49c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d0c4262.c00fff0a.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bHhMXLVcuQvN0h5jlulzAnF0Jh0n8c4kFc7oqs2AyhPeL8wfkGeEUCQ55e9CKu1tkZJJmCb%2BaFg1x%2FlCrzNS0sF3H%2F21BrWjUMJZ0uBgoGoTrQ0vUSiYVL%2FnTqP2wxCymUMLp58SUK4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-2703"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4601f39569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2723&min_rtt=659&rtt_var=2040&sent=1298&recv=467&lost=0&retrans=3&sent_bytes=1083137&recv_bytes=52106&delivery_rate=24196&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11752&x=16"
|
|
| poortatoeofficial.com/js/chunk-082f7c94.5f042451.js | 172.67.185.88 | 200 OK | 38 kB |
URL GET poortatoeofficial.com/js/chunk-082f7c94.5f042451.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (37923), with no line terminators Hash848811af1ef0d2462b2d2b68b6fe2187 67c9f1766dc68e90922e71bde19be5a4a5a97c65 b31c98ee1d0fe2ae990f17ec861302677e25f443ec1ad18f914b1e3f83285055
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-082f7c94.5f042451.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kCKmn%2BQouO0Ie7kJeZKs6jODbps4mlc9E%2FC68n6Qn8UjVAvUvCzRt9NRAw7hI%2FI0LVUgAzI5Zi00ZcXZrnh0FDu6kyaRd637wGPpdXJbzxfl8SFzyVBCD28XMWCtlIof220XYoQ3ivY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-95cd"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4593ede569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2998&min_rtt=659&rtt_var=1597&sent=1178&recv=422&lost=0&retrans=3&sent_bytes=1000848&recv_bytes=45547&delivery_rate=1170&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10417&x=16"
|
|
| poortatoeofficial.com/js/chunk-084d1f6a.5b478328.js | 172.67.185.88 | 200 OK | 4.5 kB |
URL GET poortatoeofficial.com/js/chunk-084d1f6a.5b478328.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4519), with no line terminators Hashec3ae05446f1b917438c1a29ece9c604 0b177280325f840517358451d2b3597826aceedf 3233e51497870d2d87f17ea03441d0e91e7b5435c3d327a4897e9f19eeccfc75
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-084d1f6a.5b478328.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CLGDh9rgEP6va8lmJJ48Y7ClHGy4MxD5zvN4MY52GSUMZEdgt0XxmfMAegPcaqtknUAEHI%2BdbKfoez06rOpfOjTgEZb0fy6hB0%2BBIDK9mpz4rcYQ4%2Bqi96XMnUX7iFsoqhVLZDQi%2Bx0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-11c4"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e459dee5569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2246&min_rtt=659&rtt_var=1351&sent=1200&recv=430&lost=0&retrans=3&sent_bytes=1017001&recv_bytes=46623&delivery_rate=1163&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10744&x=16"
|
|
| poortatoeofficial.com/js/chunk-22063c7a.40b838aa.js | 172.67.185.88 | 200 OK | 23 kB |
URL GET poortatoeofficial.com/js/chunk-22063c7a.40b838aa.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (22275), with no line terminators Hashca8d3e79747b805ee06d82c2de96099b d6885f453d6c2a7982f3a6a9e98ee12cd6a4a9a9 97ff3a6b2a0b442aff7b0d57a117e3d03efda212b34fb96e3b5d9c57da5d35c3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-22063c7a.40b838aa.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cYxoPccTBrtb46fQuU3lXdKlqKw%2BIm3NGXklUVHNJsFk08coEPrSr22T8UcEi%2BPFZMLiNXnpZ0OTxAAMJNKLUe2%2Fam3X1fEkAzVgLWDP8SRmRt1Cx71nJctIlVH3n51YOeA7ZsV87MQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-582b"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e45e0f1b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2344&min_rtt=659&rtt_var=1527&sent=1248&recv=447&lost=0&retrans=3&sent_bytes=1049991&recv_bytes=49060&delivery_rate=1180&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11179&x=16"
|
|
| poortatoeofficial.com/css/chunk-07fcca66.6825ffca.css | 172.67.185.88 | 200 OK | 757 B |
URL GET poortatoeofficial.com/css/chunk-07fcca66.6825ffca.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (757), with no line terminators Hash07cd650bb43efc46dab630cf3b2f5a08 9e247ab2b96183bed241ff81d5cac8f7f4f42e6e ab49fa15ce79c78639878dee40db78770bef5cdb73454f1d2642d91ccf9841ad
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-07fcca66.6825ffca.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qRve5mFPT0qba5qT%2BVSGozvB9Ds8h02HGntVB5IdSHBFYLW%2BrJ9o1WtlJp5cgHYlx6Q%2FAniSiY30foP76c4EY5S%2FN9pJZG%2B%2FR367XgxuLBnBZEojdjnfokJADieuyI6y9KsvsJYXrf4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-2f5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e434cd59569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2333&min_rtt=659&rtt_var=1349&sent=598&recv=275&lost=0&retrans=0&sent_bytes=475415&recv_bytes=19731&delivery_rate=14549&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4808&x=16"
|
|
| poortatoeofficial.com/api/banner/1/list | 172.67.185.88 | 200 OK | 827 B |
URL GET poortatoeofficial.com/api/banner/1/list IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hashb6faf7e7c577d34edb6e08014b1eb502 2c766fff06af64a73e03722098c17ed21fa72497 ba2e527698ca1a787fe47e21b0fe392f98d91975608b3b2def830992202e7e83
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /api/banner/1/list HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: id
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2FFNyxJy9t9Ah2oiAxNa8CAXHMvUb8Q4LBgxSkBNdJ2OwnFboQYmCksd0o1%2FzX7pExUSM3jegp7JWnoZqLJ2tvqxoVZrX6zOmfBm0anI44wZ%2BKDQ6tFSxzSHkHq6ZwNgN0RqDAFwN3k%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e43f0de2569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3646&min_rtt=659&rtt_var=2736&sent=694&recv=323&lost=0&retrans=1&sent_bytes=533843&recv_bytes=28928&delivery_rate=34708&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6233&x=16"
|
|
| poortatoeofficial.com/api/banner/5/list | 172.67.185.88 | 200 OK | 10 B |
URL GET poortatoeofficial.com/api/banner/5/list IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hashb9e754add75d51d888ce7585dc9dfe41 0fd53114199a1a46e887032b7efa05f1fd74c807 7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /api/banner/5/list HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: id
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=frUhBpnybLHc3fCT2p5ml7gNgR%2FyKQ1FE3ddo1ceROZPVmc55PQ52k6%2Be6lw%2Bj3UbR2xQ49moV%2BpxAdfWylusvoKNcHZlArhnOTocA87P6RBtW4klh5%2FTYt8cPrJt80deQT9v8D2itc%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e43f4de7569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3066&min_rtt=659&rtt_var=1935&sent=708&recv=326&lost=0&retrans=1&sent_bytes=548647&recv_bytes=29066&delivery_rate=34279&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6491&x=16"
|
|
| poortatoeofficial.com/api/poster/homeList | 172.67.185.88 | 200 OK | 10 B |
URL POST poortatoeofficial.com/api/poster/homeList IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hashb9e754add75d51d888ce7585dc9dfe41 0fd53114199a1a46e887032b7efa05f1fd74c807 7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
POST /api/poster/homeList HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: id
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
Origin: https://poortatoeofficial.com
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2wbQUgKr84pMIWOhlGsfGaLGknSHjfCPTJYLsPGQY92i%2F%2BUl5lSAeQCmMeOzI%2BY6VcBbS9YYTSdy7ZOzvLnsOn6QXrfmpBHP66kww7S8etAZxlEgiKobE9GTdJEgGS5C347JLCelNg0%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://poortatoeofficial.com
access-control-allow-credentials: true
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e43f2de6569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3066&min_rtt=659&rtt_var=1935&sent=707&recv=326&lost=0&retrans=1&sent_bytes=547937&recv_bytes=29066&delivery_rate=34279&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6478&x=16"
|
|
| poortatoeofficial.com/js/chunk-479f5bfc.8c2ce3be.js | 172.67.185.88 | 200 OK | 4.4 kB |
URL GET poortatoeofficial.com/js/chunk-479f5bfc.8c2ce3be.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4325), with no line terminators Hash59bf213112e2ef3441b335100f9ab202 ca9f95b09ed50f4b322a9f10a34676167c72d989 29246ca645696659bc40e853672ef76e2b9915fa9ab97c75d501c394d1008761
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-479f5bfc.8c2ce3be.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XYaZ5Ir8xsYtVPigNocTbh%2BN%2Bbttpg828WB209ZiN6Sz7T1DluvjDcsEgDOiGe%2B97HE0c1u7NE4H4rudugc05OZKers0tIEy%2BVMZkVV9NVVXhdpC1A5jK%2FXSpJTRrejBPn4DF%2BJDa%2Fk%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1102"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e464ff8a569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2169&min_rtt=659&rtt_var=1453&sent=1348&recv=488&lost=0&retrans=3&sent_bytes=1115570&recv_bytes=54962&delivery_rate=31929&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12307&x=16"
|
|
| poortatoeofficial.com/js/chunk-6e4f04a4.38c741c3.js | 172.67.185.88 | 200 OK | 5.0 kB |
URL GET poortatoeofficial.com/js/chunk-6e4f04a4.38c741c3.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5029), with no line terminators Hash1f64a4dd650fd3886e5b07b635ef4396 2d6efe25ef9f27bdee3cc815608a85a922646ad2 cace7cdb6c61f09be8915ca4c5cb63a2c69b83fa26ab8b5e6226b51ceea5918f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-6e4f04a4.38c741c3.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WHDI5sGLgLasFYWS8d3ZNVLGebH03X7j3dVcf1jFxnb96NJYbWN5qvFikBUcY2XY7oXUHVGp%2Bba7lGJ55OzC064ffMgAADBZwK810k3PFXH6bs63oziYJ1Gcy706VVnd1Y2dV9pk3kg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-13a5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46a6fba569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2907&min_rtt=659&rtt_var=1494&sent=1430&recv=523&lost=0&retrans=3&sent_bytes=1170871&recv_bytes=59652&delivery_rate=1550&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13184&x=16"
|
|
| poortatoeofficial.com/js/chunk-ebba634e.6b0df3a2.js | 172.67.185.88 | 200 OK | 1.8 kB |
URL GET poortatoeofficial.com/js/chunk-ebba634e.6b0df3a2.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (1815), with no line terminators Hash5740f904c8262dc6212f3829d30d1baf ce66dfd5774e04ce19c15b61fd8a062b7be2e27a b5ab173e2a2b74cb72eed68c93b32ac85d30481083f88822e28b7322cea06124
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-ebba634e.6b0df3a2.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nuHk8aK1fTUa4XsFzGr5VNwPm0d%2B5bFkWUWHpmFYFWkc%2Bvf5KODYmleu%2FVxKXoNht1eNKH4si8xalU5cYidZQ4sSRSsAT7wykM4V0PNZv4HTcSgZGI62mCmDgivpO2nH1KUEb0j%2BO%2FI%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-717"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4721805569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2252&min_rtt=659&rtt_var=1285&sent=1603&recv=588&lost=0&retrans=3&sent_bytes=1299547&recv_bytes=67838&delivery_rate=2547024&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14635&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js | 104.17.24.14 | 200 OK | 92 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators Hash622c4c9d5dc4b1ee29a2eb908186ec88 491753a3f979f7d180af11e1929ffff85e30f921 794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a
GET /ajax/libs/core-js/2.6.9/core.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 27060
cf-ray: 9333e41f7a5e5687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-16793"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 313339
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HbT5H75rbRSvMB4VXswY98x8GroFHaZdMEf2WLp6xrkcBsG50w7zVc1g%2B4oGNfmz7aCCCMNZGAzHCl4K0mUDE09jDVPTRKWkQpI%2BrEBCu4kzpXLLbyhckfVoO4z%2BLoEzc3rCWBPw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/api/country/list | 172.67.185.88 | 200 OK | 147 B |
URL GET poortatoeofficial.com/api/country/list IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hash912d1d576bda3bd5dac3f3c4d8a25471 faffcdfd23dfc9473cd3cc05d94826d39fd21e88 ed884f83264cf1c0489d42dd14166a297ff0b57fbb3060bc5df391119fde580c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /api/country/list HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4I%2BrHLMo9SwWAQ0jhfsVjiQeGPnGJnlMiuNT5%2FTkLrcDr5FTYxRmaRGOW%2FLpLV23hi9mv3zAR%2FBVLQvxVI2TY7ChKmnQbqu7iUbOtmCZuH3kmjgAquRi%2FD4zp5S1AavU6mkn%2F8piwcQ%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e430bd14569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2832&min_rtt=659&rtt_var=1395&sent=575&recv=263&lost=0&retrans=0&sent_bytes=462986&recv_bytes=17005&delivery_rate=34762&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4153&x=16"
|
|
| poortatoeofficial.com/api/websocket/server/info?t=1745144240839 | 172.67.185.88 | 200 OK | 78 B |
URL GET poortatoeofficial.com/api/websocket/server/info?t=1745144240839 IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hash7f9314f8bb3660d4c66d8fe80504e8fa 4e1fd3ab48ada113b977ff68dc155f0bfa681616 c838a59e0978990a7e1dcb6cc4e5a182c349f5b7cc48c2635c2a5a4cfdb7a038
GET /api/websocket/server/info?t=1745144240839 HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: application/json;charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iyhXEYsnt4Zh%2FtBwjOqGnCUmGgRowh7Li5dYbsAYDOg0C%2BJ4Qlex%2F%2FRswssTROMB3Ejgc2Ff%2B3FdyIRP6Z42Wi24FqrsTeaPCHx3qyYfMyDjbYPE5hJKIAU4EjleATkPHlrD8Bqfwfo%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
cache-control: no-store, no-cache, must-revalidate, max-age=0
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e431dd24569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2645&min_rtt=659&rtt_var=1420&sent=582&recv=265&lost=0&retrans=0&sent_bytes=468552&recv_bytes=17339&delivery_rate=927542&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4347&x=16"
|
|
| poortatoeofficial.com/static/theme3/index3/2.jpg | 172.67.185.88 | 200 OK | 45 kB |
URL GET poortatoeofficial.com/static/theme3/index3/2.jpg IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x660, components 3 Hasha08a4a726b811a0e10698d09e5958611 185b45ee72ebcfd6d5df7634e458562d924c8036 3a3ba46b2e35899abc8187960376a4ad92cabf8e018b4114a400242adfbb0e4f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme3/index3/2.jpg HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: image/jpeg
content-length: 44912
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yTLDwwqtesvU5sGPFz9vkuF3gT8sET%2B9RJaL6p6fkTG%2FfZDCjn9ncRVn7TxssjGyDWxPB4uVz0rKNaUrtKAn8dBbU1wwZqi1A1jpjN68yWO7kMeGVuNai5SVi%2B5M7eG6WkH%2FNX7ehEw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-af70"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e43dedd0569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3524&min_rtt=659&rtt_var=3150&sent=719&recv=331&lost=0&retrans=1&sent_bytes=554432&recv_bytes=29830&delivery_rate=873883&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6673&x=16"
|
|
| poortatoeofficial.com/static/theme3/index3/1-3.jpg | 172.67.185.88 | 200 OK | 47 kB |
URL GET poortatoeofficial.com/static/theme3/index3/1-3.jpg IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 537x378, components 3 Hasha7f2c505fc4bddc550b902c81f0fed50 8443f7f5b2b42cd7125016703535d4a70d6faea1 13657cefe8bc16f181cd20e55c29261cd0bed1e71bcee1919a64ee84c721c1fe
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme3/index3/1-3.jpg HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: image/jpeg
content-length: 47068
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bU8rxj1KJFCojmgWlON8hMzDvlFGReycobN6jL%2FNo9WfqjOMdoK0l%2FNGbMphDGMl8v6oZdljp1%2B6APqycn7WSmdaFZHzMAzQjp%2Ba%2F9lgPH7Vvwa%2FZtn3f8wmzFOp4HUkTZPiTH9Xkek%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-b7dc"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e43dedd2569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3321&min_rtt=659&rtt_var=2769&sent=760&recv=333&lost=0&retrans=1&sent_bytes=601178&recv_bytes=30188&delivery_rate=483923&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6694&x=16"
|
|
| poortatoeofficial.com/css/chunk-37bdd3b6.ab3049c9.css | 172.67.185.88 | 200 OK | 195 B |
URL GET poortatoeofficial.com/css/chunk-37bdd3b6.ab3049c9.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashbb2937d5e125d43804baced3df0e2324 f05644aab014d7d97bbc85608cf6780c493a05d2 e00bf1fa5fb4cfdbc444c4bec56187a9791039e97da5321313d77004d0c64465
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-37bdd3b6.ab3049c9.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V68%2F7ZnsWoNef4a%2B8v835H35iwCSjH%2Bf7NXMoNuNqRztQBAj9jH8C5y8kE2WfOJNNLf4gJSEC72RlCsTkgV8SVge3YBvPATj5GxMbdJ6D%2FSDxUeSQrk1gFDuCub28XFVa%2FF3oKWLwk8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-c3"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e43fbded569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3148&min_rtt=659&rtt_var=2361&sent=706&recv=325&lost=0&retrans=1&sent_bytes=547166&recv_bytes=29020&delivery_rate=2606520&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6337&x=16"
|
|
| poortatoeofficial.com/css/chunk-479f5bfc.2dca234c.css | 172.67.185.88 | 200 OK | 2.2 kB |
URL GET poortatoeofficial.com/css/chunk-479f5bfc.2dca234c.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (2233), with no line terminators Hashac99ddf2ce101c2c7a635e984f458ca2 8c8b48207bec3bdfc96e782a13fef81bf270022d ef2504ed4aa5d021524832a4351b4d5cd9bdfacb6d5532e985177f890ce4107c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-479f5bfc.2dca234c.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Njyp6%2BfVbg30b3CDbIqgEzi0waxMDKnidLt2fm%2Fz61Dj84tI4EyFk%2FmwkKp6YTxwyFWTdRjclHM5TD9TIVovCnZDRbS7xES2LvMD5rDQzZS7d%2BiDkNivYSsONkr3VcYeuzAXmm5HHOY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-8b9"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4452e22569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6525&min_rtt=659&rtt_var=6277&sent=866&recv=343&lost=0&retrans=1&sent_bytes=719416&recv_bytes=32139&delivery_rate=18905&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7193&x=16"
|
|
| poortatoeofficial.com/css/chunk-586d3a0a.ef1ebbe8.css | 172.67.185.88 | 200 OK | 154 B |
URL GET poortatoeofficial.com/css/chunk-586d3a0a.ef1ebbe8.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hash7925d7f93e05982a8617a67374c76414 4de55424b1d06c5cee677118d9d489a5ef675ba7 0de3c86520035a4f407d85b454986216c063b7d30db75ff9f35cefaf926b3f50
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-586d3a0a.ef1ebbe8.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R5eCT%2BpHbVabLnXiH4ySi8ON4X3F5rnc4EWWat2HLIyHTAd8qbPdvcdX2IBzYVG2ygkGvJxwcxITFF5TkdJSy%2BrHLDaX0NpPJpF7pzY7pd%2B7uR%2Fw6%2Fj1sDDlTf%2BOkhcZWlr50AyXPDw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-9a"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4489e42569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5622&min_rtt=659&rtt_var=4167&sent=894&recv=358&lost=0&retrans=1&sent_bytes=733367&recv_bytes=34753&delivery_rate=15079&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8013&x=16"
|
|
| poortatoeofficial.com/js/chunk-64026ac8.aed102aa.js | 172.67.185.88 | 200 OK | 29 kB |
URL GET poortatoeofficial.com/js/chunk-64026ac8.aed102aa.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (28364), with no line terminators Hash2a0f30451cd1683096c7893ddad5a500 1081ae6db77f085652edef83d04184d2f49bd181 4222bc781c4cf24e08a3f6c52c022383be2e68ceb04b18091fa1e17f6fcac1f2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-64026ac8.aed102aa.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bG5PPqnumviKWKuClAp2%2BKjPPjVQBhqOsZLpiVgl1y1z1bstOWEjlueqy1SkRfGY6jMIEUd6RLQWqVZ0V0S%2F2WHdBgWY2TQtvq%2FmKgGfAFkFQbEYylRvn85VPCHT5DekZTy%2BbFg0OcY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-6ffe"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4686faa569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3528&min_rtt=659&rtt_var=2247&sent=1409&recv=517&lost=0&retrans=3&sent_bytes=1153249&recv_bytes=59140&delivery_rate=1094&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13063&x=16"
|
|
| fonts.googleapis.com/icon?family=Material+Icons |  142.250.178.42 | 200 OK | 565 B |
URL GET fonts.googleapis.com/icon?family=Material+Icons IP142.250.178.42:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
Hash736c83e15fc300de505f6ce9762a9396 31c0f11ada78e92970ff42d990116d77c169c6d7 c31266310101d0b1607937a7baf07f1601b7637bd2373176696488a07d7b4302
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 20 Apr 2025 10:17:19 GMT
date: Sun, 20 Apr 2025 10:17:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/static/theme3/index3/1-1.jpg | 172.67.185.88 | 200 OK | 55 kB |
URL GET poortatoeofficial.com/static/theme3/index3/1-1.jpg IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 537x762, components 3 Hash01939cdef146de3d565c9dd341c6d24d 266e193a8a20bb95764a6ceb5c7a1541077fad7b 34b274f0ed2c8f92bb2516be3a0c5fc9015ac98f49335fd39402bdb993f9c8b2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme3/index3/1-1.jpg HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: image/jpeg
content-length: 54665
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OEADKGGeZzn%2BuYuub0ztL3z6Zx%2BE%2BlARTADdMxHjJ2nqZo9pU6cxGcde%2Fk5IJESEkuHZrC6RY6NztUCE%2Fm1wQ175FoEMwMhkxITaiHhp6piY47yaszaz0NzT7SVNDqjkWUOHd1lEEBQ%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-d589"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e43dddce569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3321&min_rtt=659&rtt_var=2769&sent=801&recv=333&lost=0&retrans=1&sent_bytes=650086&recv_bytes=30188&delivery_rate=483923&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6721&x=16"
|
|
| poortatoeofficial.com/css/chunk-35107d1e.c93d9f2d.css | 172.67.185.88 | 200 OK | 1.9 kB |
URL GET poortatoeofficial.com/css/chunk-35107d1e.c93d9f2d.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (1900), with no line terminators Hash2695b69ab6cc407af7900adc00d2eade 0a3a656074478e281e0241e49322bf1ec5d0e92c 7ad604467ef4ebcfc87d2e61ffa90019bda26410c04df2372beffe2137760092
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-35107d1e.c93d9f2d.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0gTqQDt5bxppD7L%2B6pEOgVQqp3UTYzbHfb8ePom75FQUtPhdhbbmbv%2FUz2ueM0g6ElX8vvMcj3WDY699ehqXxJrv%2BjGIHSQWQwVR%2FSBeHZh41uBL5SxmN%2FsQe4uJ8ZIjD0EXuuLVQvc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-76c"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e43fadec569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3861&min_rtt=659&rtt_var=3302&sent=714&recv=328&lost=0&retrans=1&sent_bytes=553002&recv_bytes=29157&delivery_rate=267444&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6562&x=16"
|
|
| poortatoeofficial.com/css/chunk-64026ac8.d38b9aa7.css | 172.67.185.88 | 200 OK | 5.5 kB |
URL GET poortatoeofficial.com/css/chunk-64026ac8.d38b9aa7.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (5474), with no line terminators Hash8beaae88454e6461177b3d253f6c38e7 f72332d804a564ca4303779111455398229ecf74 60e9d8c3c24d1432f73c1a56a24513a55b346d29bb22d4e09caae22d4f4e9631
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-64026ac8.d38b9aa7.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=29KqnvtBzyINCf2NoWTmLUchQUkPbto5HNMKm6V9uM4L1Lp%2Fgm8JuC83EVwQKc6rmozeFLlw8AGEDZiJqqwXRl1Tq%2F1k1BKywUtXyEK8lSLNnzwWSgZuPpejR711cW3XXrMyHkGj5Os%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1562"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4499e4b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5670&min_rtt=659&rtt_var=4837&sent=933&recv=363&lost=0&retrans=1&sent_bytes=771497&recv_bytes=35218&delivery_rate=2067807&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8148&x=16"
|
|
| poortatoeofficial.com/css/chunk-6497b0e7.9051d76b.css | 172.67.185.88 | 200 OK | 4.0 kB |
URL GET poortatoeofficial.com/css/chunk-6497b0e7.9051d76b.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (3982), with no line terminators Hashd6e4c0779b605fb4cb780a4497ac49c6 2d7cbb4d0cce2fa849083622a974d6ea4929e6a9 64da468e8530be7c3730eb426ce82e544e95d0681afef2da7365e9fa934fd089
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-6497b0e7.9051d76b.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k9XhwgNfkQM0lSgiwtPTu8cduu06CD0iLhNcKcjTknStT7IO%2Br1m9EtH%2BaB7JSRG6HTGz1PitASjTLSQPWcoppYpX0WuJCrHkduAkfrfTUbL%2FYNckxWtVRpCJ5ymH5GwQOo7ml9Fdd4%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-f8e"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44a3e50569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5622&min_rtt=659&rtt_var=4167&sent=895&recv=358&lost=0&retrans=1&sent_bytes=734134&recv_bytes=34753&delivery_rate=15079&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8019&x=16"
|
|
| poortatoeofficial.com/js/chunk-925a3b70.0bf77f69.js | 172.67.185.88 | 200 OK | 5.0 kB |
URL GET poortatoeofficial.com/js/chunk-925a3b70.0bf77f69.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, ASCII text, with very long lines (5029), with no line terminators Hashae10f24df8163b26c0a8acec88ebfc61 c0c320097f42858a0bea9dcf3856a9c368e93d9f 16683f30f4b68a618f21dc64abd32a57b9cede65c70e5200e4091ed79815f796
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-925a3b70.0bf77f69.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LKvJxVJ0dF9ruv51%2BQ3qIKRv0GP4kNseBMdlAqjlwXRabnbSPBbMOy6AMI5OblLAbrg8e17Y8fUes3tz2Dtcd47cOvP3BA5d93zx47Sbr%2BVPy%2FaWbvN7WjPb%2FRkOjJt0VULFPw3Yzds%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-13a5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46d1fcf569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2121&min_rtt=659&rtt_var=999&sent=1468&recv=546&lost=0&retrans=3&sent_bytes=1187736&recv_bytes=63076&delivery_rate=1052&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=13832&x=16"
|
|
| timephoriaofficial.com/api//file/cfg/202411/20/6d09d6fe5b6649dcbb84b71ce9ff4fd2_.png | 172.67.143.184 | 200 OK | 116 kB |
URL GET timephoriaofficial.com/api//file/cfg/202411/20/6d09d6fe5b6649dcbb84b71ce9ff4fd2_.png IP172.67.143.184:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjecttimephoriaofficial.com Fingerprint51:46:7A:B9:0A:9C:EE:AC:16:9A:10:33:CF:AA:79:76:C5:E7:D6:4F ValidityMon, 14 Apr 2025 04:52:47 GMT - Sun, 13 Jul 2025 05:43:56 GMT
File typePNG image data, 369 x 419, 8-bit/color RGBA, non-interlaced Size116 kB (115481 bytes) Hashee3a2d560b5e66b5f9f6d084818ad092 7182f32f8e9851eb7d065104a015a97628f55cd0 a4566856dad489f8bd214b381e01a2db27b3c356daf48e1bf3243e0ded952ff7
GET /api//file/cfg/202411/20/6d09d6fe5b6649dcbb84b71ce9ff4fd2_.png HTTP/1.1
Host: timephoriaofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:32 GMT
content-type: image/png
content-length: 115481
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fv18zwE369Pe6%2FIaqY0scxwt9%2Bq%2BXLonHek84BZZoSBOJ5pA6aAAzh1YTQ2rv%2BKNiKGASEj%2BVNMzEQZFHsq6LznRauDwkQGs7BGszk3a1UeZEyzlP8pzci%2FnQQvYiaJPThWTthhpzvUL"}],"group":"cf-nel","max_age":604800}
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Fri, 07 Feb 2025 21:01:23 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e4753f3db529-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17906&min_rtt=1409&rtt_var=21404&sent=733&recv=55&lost=0&retrans=1&sent_bytes=839344&recv_bytes=4836&delivery_rate=1786776&cwnd=163200&unsent_bytes=0&cid=cdd6ae20eff6ceb1&ts=9163&x=16"
|
|
| cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/vant.min.js | 104.17.24.14 | 200 OK | 280 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/vant/2.13.2/vant.min.js IP104.17.24.14:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (57301) Size280 kB (279653 bytes) Hash644f13180f8d398c886f534b07044cdd 2d3349d384b50a385ed0b0d84a256be60a1e2201 f5d6379be3cba230a20bfd8bf264805de16223e0aa0277c0fb68c3c0751acff6
GET /ajax/libs/vant/2.13.2/vant.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Apr 2025 10:17:18 GMT
content-type: application/javascript; charset=utf-8
content-length: 67900
cf-ray: 9333e41ffb2f5687-OSL
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "652e0e9a-1093c"
last-modified: Tue, 17 Oct 2023 04:33:30 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 169276
expires: Fri, 10 Apr 2026 10:17:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TmcnmWh8fh%2FadkV%2B5ItInACtrkmcqNqGuC6M1Z%2BQPz9LAgWm%2BV%2Fiv1npY7Ad6UimOnvSAjGkPhMp%2Bjxq7OcLBB%2Flk2Gaff09mFelso0K3w%2Fk3qDSmwpvq1pZd3%2Bf94YWO2MBApRX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| poortatoeofficial.com/api/banner/bottom_nav/list | 172.67.185.88 | 200 OK | 10 B |
URL GET poortatoeofficial.com/api/banner/bottom_nav/list IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hashb9e754add75d51d888ce7585dc9dfe41 0fd53114199a1a46e887032b7efa05f1fd74c807 7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /api/banner/bottom_nav/list HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: id
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/m/index
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:23 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=syomenbJBrJD1rlaQxj227nhblMYBYt7hJrloifwYF1FrOjYf0D3rcDBkeYVxPBcvCjWGSUfksRv2N0x2GbXpDa17jliwA4MhUnhGi38HDoXnKeQoAqU9Tx%2Fpy9lcJYuIoWGBKJ0po0%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e43f5dea569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3066&min_rtt=659&rtt_var=1935&sent=708&recv=326&lost=0&retrans=1&sent_bytes=548647&recv_bytes=29066&delivery_rate=34279&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=6491&x=16"
|
|
| poortatoeofficial.com/css/chunk-385c545a.3ac6232c.css | 172.67.185.88 | 200 OK | 242 B |
URL GET poortatoeofficial.com/css/chunk-385c545a.3ac6232c.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashd215a57d93ebcae1ff01af2069948880 79cacd45cbf0667d37ecdff1beb261415b2f37be 78ac4ee0e05eae300b279d241d924a449cd33093ef41d3f2a2db8eca643e9485
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-385c545a.3ac6232c.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vzeqBquGWlbx5N8p3vBxIQr1E9ApVkfGh3h4FQvpT293NrM2SGFj4jlvnwftqCO39zlTRcLHLo52%2Bv5ZnpH5YM%2FAv0p1y0a2ZZkNcx9UwFor%2FlOLJ7l3uZIQ1sEu2eBxSx%2BExdU2UR8%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-f2"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e443fe15569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7906&min_rtt=659&rtt_var=5914&sent=875&recv=345&lost=0&retrans=1&sent_bytes=728185&recv_bytes=32230&delivery_rate=470520&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7242&x=16"
|
|
| poortatoeofficial.com/css/chunk-e8d5acac.c6c9a35e.css | 172.67.185.88 | 200 OK | 520 B |
URL GET poortatoeofficial.com/css/chunk-e8d5acac.c6c9a35e.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (520), with no line terminators Hash0aa99da893d97d2ee75b3f0641966e72 281bb879c04d2837ca5cd425d28f7a74731a95cc 98a2280b90f3147a37da96395b719e3b2f0dabd40ad15c1e023724f1740cf468
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-e8d5acac.c6c9a35e.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:27 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WPAnZ3GX2E0etXy98kO8nljIvYnQNcCxxGKdrh7opwpK2rVNEFMSl4nvYqIENDFzXf5fIdBXpp9L9pogpb7eCKaOHbc56ay1f0GI3ubU0CNNKDXfQvHnYP5RNV9FCgEohpgCHnLgoFE%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-208"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4558ec0569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4305&min_rtt=659&rtt_var=3574&sent=1152&recv=406&lost=0&retrans=2&sent_bytes=989192&recv_bytes=42663&delivery_rate=24501&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=10054&x=16"
|
|
| poortatoeofficial.com/static/theme3/tabbar/mine.png | 172.67.185.88 | 200 OK | 4.7 kB |
URL GET poortatoeofficial.com/static/theme3/tabbar/mine.png IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typePNG image data, 138 x 134, 8-bit/color RGBA, non-interlaced Hash9257d7d41f0aeb65c674ea3ee19ef1b4 826e3ae0ef20a7f48f69fd5740ff48212d05ecb0 f4e0220e488ebe9e5176c587603b0756cc755a8649c13344aea8652d57cd5562
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /static/theme3/tabbar/mine.png HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/css/chunk-9c1c641c.eaa3329a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:24 GMT
content-type: image/png
content-length: 4660
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nRWnuO5z4Jbv2%2BhWIJ%2BGLNMqp%2BMWYbFPCmfvA2HJNrmmFRmeQH4UbBmoR5%2B3iFSU8ZGbJljwKPYOuQoXJFGpFKjKezgUvmPkum5mWHKgcMWsbakje7mkgeM07q6%2BR0AubxoMV%2BqZmt0%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
etag: "67ed4275-1234"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
cf-ray: 9333e443ee12569a-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7285&min_rtt=659&rtt_var=6228&sent=870&recv=344&lost=0&retrans=1&sent_bytes=722759&recv_bytes=32184&delivery_rate=101420&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=7224&x=16"
|
|
| poortatoeofficial.com/css/chunk-3453ed2c.b941ffea.css | 172.67.185.88 | 200 OK | 470 B |
URL GET poortatoeofficial.com/css/chunk-3453ed2c.b941ffea.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (470), with no line terminators Hash23161aef41ce1f74cb5c3722e6598d73 1f28849a67e4240a906c62c4136022e45e93a70c 041edcfb82967f94a42dd09ba566b63863ea5508cf97ea0cd6026a2e12b75401
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-3453ed2c.b941ffea.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FT%2BSO8Mq0g80sN%2B7FRtAVPSKg5iP2ZREV9bP7WXUaBn%2B4RPkcxQM8l%2BDkustuUyJ6Wc0l1Xn0rLeipqZTp0dtGjrbX%2B6tVj7zu18jMaCi2uHeWSgx2ioaF8WTZeVTO8iWMebgNmzA7g%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-1d6"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e43b8dba569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3621&min_rtt=659&rtt_var=4072&sent=682&recv=311&lost=0&retrans=1&sent_bytes=531175&recv_bytes=26148&delivery_rate=245679&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5906&x=16"
|
|
| poortatoeofficial.com/css/chunk-925a3b70.11d3217e.css | 172.67.185.88 | 200 OK | 117 B |
URL GET poortatoeofficial.com/css/chunk-925a3b70.11d3217e.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashed7f88f9b7f99042eda629536d2dc0a9 c61d47c506e1148456c852656b484d574c28abcd a1a2ab3daa36c4ec3c95db0848653e6c47a8592b7b43c8e068f6c777661bb463
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-925a3b70.11d3217e.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:26 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tH5BNqcNMFrgl443dY8Sq133chiHiFNh7xKlqLOXIr6njBvtgk8UtkE65CpfMTOKn0Bdv2iEUPw2r3PDSTM1oiosWW7UdWojvf0MUCSIxVsg9VeOO5CVPnVgdpRF2iKSg28pgJi7wbw%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-75"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44ffe89569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4204&min_rtt=659&rtt_var=3519&sent=1124&recv=384&lost=0&retrans=2&sent_bytes=978423&recv_bytes=38798&delivery_rate=16486&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=9157&x=16"
|
|
| poortatoeofficial.com/js/chunk-2d0d2ed4.cd6a3271.js | 172.67.185.88 | 200 OK | 10 kB |
URL GET poortatoeofficial.com/js/chunk-2d0d2ed4.cd6a3271.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (10190), with no line terminators Hash384bf574926c68cd5e7db110dc2e27e3 9cb3d5750fed636d5cf4f743d1f00a6b04f6d315 60546466f95a5faae9083aa116d9c8a5c3a27f60435ad455645ac5a73866e288
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-2d0d2ed4.cd6a3271.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:28 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wZKelxWittZIBcwhR8X42D%2Bt78p%2FbeA%2Bgr9XvEAyKfoWKiikkFXoDoVwINj8Afya9dKLvJakRDs7AM18Jd5x7ywEUiyzJ%2FEoBTxp%2FQ6QgVtf7bs3etDW0sL%2FN7Ci%2FOppIA2cyw9jL5U%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-2838"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4601f3b569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2951&min_rtt=659&rtt_var=2111&sent=1293&recv=466&lost=0&retrans=3&sent_bytes=1079115&recv_bytes=52061&delivery_rate=960&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=11745&x=16"
|
|
| poortatoeofficial.com/api/common/dict/allMap | 172.67.185.88 | 200 OK | 12 kB |
URL POST poortatoeofficial.com/api/common/dict/allMap IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
Hash6049bfefcc10efe64a07b929c89216a4 d9fa362c6b187bcc7ec9380872a8cd8084affec5 13bea8d22c63eb0da6186c6ef767ebabcbe5df0ca3d2f39a681c533b974e7fa6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
POST /api/common/dict/allMap HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
X-USER-TOKEN: undefined
Origin: https://poortatoeofficial.com
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:21 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2FlwWDvga1Ew0p9iMQQ%2FAgXqZLuHdjkJZE1ghbZFQE54gYzl0xVEtTnlnCmhLqybyXL1JuQ%2BAZgZlQCJ2g1H9KthiglrQbgr5G1CgfxpmkSae0KN8ZDxHbDH%2Fs9LL7xTAJCmhlqRkU4%3D"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://poortatoeofficial.com
access-control-allow-credentials: true
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 9333e4367d6f569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2916&min_rtt=659&rtt_var=1674&sent=608&recv=277&lost=0&retrans=0&sent_bytes=481528&recv_bytes=19822&delivery_rate=265761&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=4857&x=16"
|
|
| poortatoeofficial.com/css/chunk-134ebb5b.033b1400.css | 172.67.185.88 | 200 OK | 66 B |
URL GET poortatoeofficial.com/css/chunk-134ebb5b.033b1400.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with no line terminators Hashbc8f367bf615641ab42ec602bd037fa2 94db204a7e2294fded4a9cbd4ce2b5e84e94266d 3fbae052426494e80dfd7b283a3738bcaf8b2894808ba80978d570eb69fcdd2c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-134ebb5b.033b1400.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:22 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4dU3%2FoHKdxTwAMWg2%2FoiaVsRfF8JBh6jV%2BQ4tpYEXUlrX4ABZfAoibpuzsvaUsawgSfU%2BRcv805ToiyKIemgTTX3dEhkgLMPgM8WToTCqfND7rJqnuG7nuggkJY2zyjPVRQM67fdecU%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-42"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4382d86569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2546&min_rtt=659&rtt_var=1264&sent=627&recv=290&lost=0&retrans=0&sent_bytes=489385&recv_bytes=22757&delivery_rate=4105&cwnd=103200&unsent_bytes=0&cid=c63126c8867fa86d&ts=5356&x=16"
|
|
| poortatoeofficial.com/css/chunk-7721dd77.435b277e.css | 172.67.185.88 | 200 OK | 13 kB |
URL GET poortatoeofficial.com/css/chunk-7721dd77.435b277e.css IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeASCII text, with very long lines (13122), with no line terminators Hashafa8c144cb9a731467483205850e245f ba2b45fdaf5dd66d052b9c61fce85ca0ffffe883 b3bd51359c248396e2ae630372f5e6dc315c35e7ca4cb9cb305a52f05827551b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /css/chunk-7721dd77.435b277e.css HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:25 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PM2KN5qXfB8NW9gfNJEHAvwOGYSKeYmPB6eP9tK1vRhKxQnAwDZ4SWNdsOKpofHEHjjPnfLZ9wP75czv%2FBjlVZcvy8%2BQjc2kRlLfJNY7n2xTzLuA%2BIJX%2Fedhc4wx2qqdto%2BMLS225Nc%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-3342"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e44f3e81569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4347&min_rtt=659&rtt_var=2810&sent=1093&recv=376&lost=0&retrans=2&sent_bytes=948503&recv_bytes=37720&delivery_rate=7809&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=8830&x=16"
|
|
| poortatoeofficial.com/js/chunk-5915ee8d.0a9e012b.js | 172.67.185.88 | 200 OK | 1.2 kB |
URL GET poortatoeofficial.com/js/chunk-5915ee8d.0a9e012b.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1092), with no line terminators Hash8b5e78b24520aacf7bec8f2419e1be5c 62903d24b0f133599f40b273d371b21fb174ec25 2fa561a50af8cb8d65d1565fcaf942bc2639da23d62626aa5cb772cd6228e024
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-5915ee8d.0a9e012b.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:29 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zafvM4iCjAkoONJwQuRxtLBeLaZ11g0TxwguLFKTpj1KdLwHm06KHedwEQjJmIMFGebEh64N1iKizByA%2FGyjLzBTtyf9Sj2kAuP3WT%2FDSLAnqaMGc2KfYx2Bmzpsqjcxtjp7NG0UDwg%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-4b4"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e4672f9e569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3640&min_rtt=659&rtt_var=2544&sent=1388&recv=508&lost=0&retrans=3&sent_bytes=1137503&recv_bytes=57780&delivery_rate=943&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=12878&x=16"
|
|
| poortatoeofficial.com/js/chunk-bedbebc6.27a59b0d.js | 172.67.185.88 | 200 OK | 237 kB |
URL GET poortatoeofficial.com/js/chunk-bedbebc6.27a59b0d.js IP172.67.185.88:443
Requested byhttps://poortatoeofficial.com/ CertificateIssuerGoogle Trust Services Subjectpoortatoeofficial.com FingerprintFF:8E:E2:65:D7:69:CF:F0:A6:30:50:E1:B3:9B:DC:C3:23:CC:36:3C ValidityThu, 10 Apr 2025 08:58:01 GMT - Wed, 09 Jul 2025 09:56:29 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (30282) Size237 kB (236950 bytes) Hasha3ce4dca291588667e2a51997d335a67 c50ca102bbee68c3d916494dfd7c7bc0a8ac5d43 52b685798ee01f0b26ddeba59a95a3fe01069408bf884365845398846b24f7de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Shopee |
GET /js/chunk-bedbebc6.27a59b0d.js HTTP/1.1
Host: poortatoeofficial.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://poortatoeofficial.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 20 Apr 2025 10:17:31 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OUscgLc%2BBr0nZLoZaxFg9HzSs1XPEoKZbdAF31T1FUxfyUKMEGTnvqqrSkUL9ikJnaZDrG%2FiIHQ8JgoZnJAQR%2FVUSjBTG8ZQtHtTJ2%2Bd9vMv7VpE0N%2FpPDnqep%2Fk6dQCWI%2BIc202CIY%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 02 Apr 2025 13:58:13 GMT
vary: Accept-Encoding
etag: W/"67ed4275-39d96"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 9333e46edfdc569a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2029&min_rtt=659&rtt_var=1276&sent=1494&recv=558&lost=0&retrans=3&sent_bytes=1202876&recv_bytes=64809&delivery_rate=1148&cwnd=121800&unsent_bytes=0&cid=c63126c8867fa86d&ts=14110&x=16"
|
|
0.0.0.0