| dfreg.freechip2023.com/img/header/header1.jpg |  104.21.40.153 | 200 OK | 166 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/header/header1.jpg IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x650, components 3 Size166 kB (165553 bytes) Hash8176dd929a5ee9f45c2644dd54ae50d4 f369b9fc9e3ab92c100ceee2322487dffc460a05 3314deabdd3bbc9e25ad6b2a8c9b774f8a05f68172a26c84f21f898ab061601a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header1.jpg HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/jpeg
content-length: 165553
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Fri, 05 Apr 2024 17:11:36 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2BwI7OILx109%2FjWGBmR3D4P5re9QJLIHBnEkjg1jtRhFfUzeX2cc4SAG6gYLkDWxhcGnaHcnLlJmc5a9IMT58SOAbEIne9pmPz7EnO4op4ENyMrCNfZ2%2F9CZiRi0F0lnGvOG1%2BPtZdSO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ecea92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css | 104.17.25.14 | 200 OK | 19 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css IP104.17.25.14:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css; charset=utf-8
content-length: 18778
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64cac444-495a"
last-modified: Wed, 02 Aug 2023 21:01:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1022231
expires: Mon, 07 Apr 2025 06:17:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9h6Cd%2F0bW8W9ud4isbtS40s9zhRNsPaf8QaB9UkvuNZb%2BopnRd0Mx2iMbM3jDjpdhByttOt2LRcBVKRTrm3l4qmPvJm5oHYQW18CyBO%2BL0IaROubG9rGYR9NorT9PXupoyCp4yja"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875a4a985fdd92f2-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css | 104.17.25.14 | 200 OK | 5.8 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css IP104.17.25.14:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe9365fe85b7e4db79a87015e52c3db6c 2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9 dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 134843
expires: Mon, 07 Apr 2025 06:17:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IEuu7ZCURF%2BHLGOTaQFU4YKzvZD%2Fh9N0LQpWDL5i%2BS%2BS8Z7r%2FO5xmHHWsmSJXs39fFCvGU57GjQELUkjEoxtHlWWvA4%2FBbkOvPmtI5ebzANdf2mVNC4SpFyPyqRmHQQyemb5D%2BX%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875a4a986ff092f2-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.ibb.co/PYpHF6b/Twitter-Show-Password.png |  162.19.58.156 | 200 OK | 28 kB |
URL GET HTTP/2i.ibb.co/PYpHF6b/Twitter-Show-Password.png IP162.19.58.156:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint47:33:B4:39:55:FC:BC:18:08:79:9C:6C:9D:F3:CF:3A:89:C4:99:62 ValidityWed, 07 Feb 2024 12:41:56 GMT - Tue, 07 May 2024 12:41:55 GMT
File typePNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced Hash2fd203703821d5ce5d18bee2a51b779a a78d7b1369ce8bc34de57909af142043cae446f0 6b82611fa96f118128b0db9692dd982ca0fe79b1b4d8048946880600cc4f97c8
GET /PYpHF6b/Twitter-Show-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 28355
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/img/header/header4.jpg | 104.21.40.153 | 200 OK | 205 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/header/header4.jpg IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x650, components 3 Size205 kB (205130 bytes) Hash1b6571cafcf65a701bc16071e3aee3df 606158a977e05dad605a711a9e481157973fac25 0ab7050fc08e2a470ccb93889c7485b256ff8eaf3dd0dbc1bc45fd789095d917
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header4.jpg HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/jpeg
content-length: 205130
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Fri, 05 Apr 2024 17:11:34 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xmc28TtEbvtDusskTt%2FDJQ9i%2BbgARRz%2B3E07Mf10Mp8iGOJnO7ejuuSQtFj09aTEBTQWB9z1M6o%2BCJmeUAVnhL2cjFLO9OS1ZZgfKmaHDdVZJMTiYZXRx4UH7dahvyk5e%2BLFr6o6gEtK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ecf692ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/load.png | 104.21.40.153 | 200 OK | 3.0 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/load.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced Hashc5ac1db50750a1177795f474678b2be2 ef0ab1883cbc85bd4d0a53ca3963236d268d908c 9ee0b7416b35942defe3c7c7840abf3af799a478ebf8b9c437ccf96898b808fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/load.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 2996
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:56:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZiuooSDflsJaHHZlODCBKRuIRJmctUdfMePbvQBxrbsWzvch5vQe4VVtDUq0KGxXUhWC2NKF%2B0r83TR0pXpEnWIEarkX7Rt416CiggeoPtgc4qfelLuo8VqMpGKw2n0nhKY7teKRRVmK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ed0292ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| i.ibb.co/pZDr8sd/Twitter-Hide-Password.png | 162.19.58.156 | 200 OK | 28 kB |
URL GET HTTP/2i.ibb.co/pZDr8sd/Twitter-Hide-Password.png IP162.19.58.156:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint47:33:B4:39:55:FC:BC:18:08:79:9C:6C:9D:F3:CF:3A:89:C4:99:62 ValidityWed, 07 Feb 2024 12:41:56 GMT - Tue, 07 May 2024 12:41:55 GMT
File typePNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced Hash8d1f08b46884df302bf7300fc234832c 5735d57b6fa211c400d439095d5ff2f5bb57e691 e4cff1f68b85c3343554090b3479273a54e5eed2dbb3e56ceb9f86c4ebe8b0e7
GET /pZDr8sd/Twitter-Hide-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 28029
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/img/assets/title-re.png | 104.21.40.153 | 200 OK | 79 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/title-re.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3264x969, components 3 Hash813e38d50ab7aac7cde682307551839d aca54db2cc1fee5a72672471f9ed28ee16c104dd 918cd531af67a6eb2b0f92a27463fb800f4d02b2226c73f11399c0a73b1ecae9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/title-re.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 79119
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:56:12 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9NlQ%2BglPXBEOcLNwg8FRa%2FHChiaKe%2F2XSxmJMAg8AeUpsxoRFzaoaxbQ3F0md71MMjcWf%2B6L0tbCR6O9QgAtZaFqSZ3FG4eh%2F56qESg0Srko1iGany3kaapW9gEbRyd%2B0Vd5nXxzQZ9T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ed0792ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/title-st.png | 104.21.40.153 | 200 OK | 94 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/title-st.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3264x969, components 3 Hash2b7aa4a9277d2eba1f5ea448ccfc3303 0581115aea756a42843747eed0bc9447e9253749 b0f95848b91208b86f8f6bdfac9b5d37a891e725437a2dc468d02ecee51971c0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/title-st.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 94184
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:56:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2B%2FYRN5JELSkgBeaxInBs9Kk9HnqWs0uIzmPJypW8p99krk2CkBxyIyhFhsG7mEOcec9GZuBv%2F3i86YX58zOgPybLUfp%2BLJLXmLLDvBZknDDmoZo3ux1NPmN%2FYise%2BJBm3K8WjjaM30K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ed0e92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css | 104.17.25.14 | 200 OK | 5.8 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css IP104.17.25.14:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe9365fe85b7e4db79a87015e52c3db6c 2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9 dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfreg.freechip2023.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 134843
expires: Mon, 07 Apr 2025 06:17:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S4iae8gpvFzbbxpDyC7FUgGH1u3G%2BVXakHpzF9aAFZnOD5uGgsjy3w%2FQ0mMAeiixaEk%2Bp35cWye%2BWimVmAnvQxvSyB4nr0E9gKvZfIeDZ4jUu9MoAfk8ndM2RmjBE1qYqj6PbLSo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875a4a98ee1492d0-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-1.10.2.min.js |  151.101.194.137 | 200 OK | 33 kB |
URL GET HTTP/2code.jquery.com/jquery-1.10.2.min.js IP151.101.194.137:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32072) Hash628072e7212db1e8cdacb22b21752cda 0511abe9863c2ea7084efa7e24d1d86c5b3974f1 0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988
GET /jquery-1.10.2.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-16bb3"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 06:17:19 GMT
age: 18534034
x-served-by: cache-lga13622-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 1, 72232
x-timer: S1713334640.518068,VS0,VE0
vary: Accept-Encoding
content-length: 32788
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/img/assets/title-tt.png | 104.21.40.153 | 200 OK | 77 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/title-tt.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3264x969, components 3 Hash51fe9e47226219e3a7f796215dccbe82 5462a59a6bdd1c7d9a9d7739d050ff4e29fa6039 39dac63a656549139c6d32174721d6c0a78d71d5b4c9b7878c9391fd3a27e784
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/title-tt.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 76688
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:56:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2FDDSjEg9rh7uD%2FA1Rptn4mVEyPxFh%2FIDs2aoILU2YtKhwe%2BRQ7e0Bh0jMtVLpy28zBLByuLPtyosyVsTx1T72%2FmiXWD2WLgrzO8OzMgsFHSzwbzV6SOvYofiBUWT%2F0oVeKYrAs3c9lA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97fd2792ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/mt.png | 104.21.40.153 | 200 OK | 22 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/mt.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 480 x 480, 8-bit colormap, non-interlaced Hashf2da3583c3a9efd372034ee83f2274ba 3d7688ff15393ad038a54851ba64128c116080e4 bfb551be6a0157558d4145e40555a5d6d5f08ab7820f36146938155d147e6d5c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/mt.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 22139
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:57:26 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HqN%2FBWsJ9ZcWIrIrCIT05F5lFNqCFox7mXGr0L%2FLtymn6Te4syRqjadFG53eOaDD4fyBgnnpOnLaza1%2B%2BtlvasLJpWVArYAqe9Bqhz3ri9SSdAESKd%2FjMZmFyCdVhZWI8%2ByvdkJAQJHI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97fd2d92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/close.png | 104.21.40.153 | 200 OK | 1.2 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/close.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 43 x 45, 8-bit/color RGBA, non-interlaced Hash68fb5b6f86421b10e17cb96a65cbe4d3 80dd39fc67e874953d49ceb2321a1147d0018821 d0eda953f3d7bb15aa078cb44b27702566108120d8b9b37e9a3324e2b767aa08
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/close.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 1170
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:58:52 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IignAhTlnfcYU5HJ9ceYVwa%2B7iZz2gBbqSBKsnOW4KcdrUstRqAqkyQ5XbY%2B0xWLx7Dke4Tm6Skq3Gj%2FWPSeJFy3MqcGzxIrvcrnpOudkMDEeXniUuEVGgmio0FcAcARCsDWwJ1Cdc8f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a980d4c92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/icon-twitter.png | 104.21.40.153 | 200 OK | 6.0 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/icon-twitter.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced Hash3102bd5ece1855fd21122d8f0e2f6b43 79e8a83aa0eaa45dd07914726ad40736fd0bcbcf 4b3a0f6de375b108b3fd927b85f45660478919a1dcc7051ff227e4bf8d49d9de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/icon-twitter.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 5997
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:55:52 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ULZvUs1tqNqPhr9pQ7DDg0qDN1hwVQNVQrsgmdsrN%2FvQfXGQnP0p%2F6JId78qgGRj1WqiCPyPikOAFmWyAQAWeN1V23%2BfbbpQjNpqU84WyCbc%2Fur9ALAwFDvpo1NALkFb4er1hbmmQ7DP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a981d6092ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/alert.png | 104.21.40.153 | 200 OK | 3.2 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/alert.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced Hash647348a6c16dc7ffa7582cef63d47247 8ef22a07be992cc94060b8b855be9ebfaed98d9c 5717e656143df2f6d333dc7d08fe1c25727cd8a2076e5d8242e65cf256e8a1ef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/alert.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 3209
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:55:44 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aSL3VsPY3wPmORH8nYcZmFqu4Lz8hQJoVMX1JHIbZuJuJPVYwVkGQzLIGYbNCJpST%2B0aeqYNHyNhfIoXmFQ%2F57o2SirzR9oX9Xt%2BfjGODS%2BFDWzsRdXrlxTdecWBSOKKlZK0hYYWL9Gt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a981d6b92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/icon-facebook.png | 104.21.40.153 | 200 OK | 5.5 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/icon-facebook.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 1024 x 1024, 8-bit colormap, non-interlaced Hash2d797a69acc678581d3a4ea0fb0636ed 3c13f1b3e8fa01cc284ed3492dcb2efd447d06bc 44a4d8218d1a959cd0ff8d764fcf5306aeb21e1689725b63825bd7ee79186baa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/icon-facebook.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 5468
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:55:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=USv9XEyBFIf69vLHeNzYo6u3pi56gL5I6Q3yg6%2BOYa0cLmKnyJmVsAJdJuAssXhwL4iwgG7rP4hjfKMBXOkp%2BI%2BvTnFX1s21gL%2Bs7eDSpl1v8NsugAv6Wm%2FcvdxneUv%2FAj3yj4ecHqRJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a981d6c92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/icon_fb.png | 104.21.40.153 | 200 OK | 4.5 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/icon_fb.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash55eef055b7e3c9a7b01e75bf1d946602 298bedf186fdcc606901513a2edbb5bc3ca233e6 9af17159dff494810a71a37678db1df805f264b935730d1c2e5a4d970305917f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/icon_fb.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 4549
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:55:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M7aI8ucBiaQv3n%2BF8T1bG6GFyVpeD5uvPOlfUrhP3zXW0tcVPJBV6hhrPHL6650vUfGZ13c6GM5iU7aiB9ayvMAYc4pSeu2V87pDUtla8DfYhWY646l%2FS3CAaUNZwyQGwQ%2B7OIYzOlt7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a981d6e92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png | 104.21.40.153 | 200 OK | 29 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 350x200, components 3 Hash766039d78bd5674c819db24244539ff4 31765fa105e4e0dfc7778ec77e89bdfe0ea399bb 680f159f2ffd2583ddcac5783bbd8ff63c9ae9be0d94ff56948d9b41051ccab7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 28733
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:56:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pvh3HxjOEfM3yj28sDUWua%2BBOL%2FsWW2k0nwZOKkPruKvljcwU3w6kIq7CazSWMgk3pRTBBb6wv2l1ZAwGTGvTJ%2B5Ndwv4MF88nAHNrk0oHhsTsXpR%2BWs9mN8JFrNz7XVvNhsXd2GYfT3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a982d7c92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/link.png | 104.21.40.153 | 200 OK | 6.5 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/link.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 77 x 74, 8-bit/color RGBA, non-interlaced Hash48c050386aace34c60f16a01fdf74c3f 53768d24571ce30d02d038a196cee350baf19d8f b318d6f5d2b095f2ee11e25716a02d4de816c93eb2d0ccd26459e03b65962b14
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/link.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 6526
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:56:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gwvGXUTCjuqJSfntY07L%2BGHYh7H%2FEL4%2Bs8BpFV3rsnaYj07Fh9jQm3zaKh6SNTCPxi2t7TnZAJA7I58eNV1VYPPcaugThn3wjtNlOJN8cV7b5G7qGbbs05Ng6%2BSmwTpeVrjY9wNQS3NW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a982d8292ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/load.gif | 104.21.40.153 | 200 OK | 6.5 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/load.gif IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeGIF image data, version 89a, 164 x 38 Hash144bb7d6f1e1cb408835fcd849acaf41 8bc47b81f5b2231fe6ef713f70dfff07961c6720 9a8c5f0bc8f65663a4bd8afee1623cfecb94f3c327e86705685f46a622ff6b66
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/load.gif HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/gif
content-length: 6518
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:56:02 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OUZx%2BzBbvHykY5u7e4tItm87751OHNZlvazJMvH%2FN%2FQv5zkgUjZOhY2jW40DmvJUjuGFnTdAJQJCnX974eh5l55ZVQGtSrh2tOgACZYVAo3IE71qgklnDeJoBV5hN4TSa1xUfmvrlvdZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a983d9d92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js | 142.250.74.42 | 200 OK | 33 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js IP142.250.74.42:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32089) Hash397754ba49e9e0cf4e7c190da78dda05 ae49e56999d82802727455f0ba83b63acd90a22b c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33018
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:15:23 GMT
expires: Wed, 16 Apr 2025 07:15:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 82916
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/img/assets/title-x.png | 104.21.40.153 | 200 OK | 78 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/title-x.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3264x969, components 3 Hashcb222b0b1bb219ca5d06b9e54b67dd97 fdbed6e791d4bef7aac2e17f71cbc9ce49511e4b 09eb116ad5b2b43f5aa834d9f0213ede5243c6db32d0257503a3a285c32c62ce
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/title-x.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 78525
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:56:20 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fyaidhrIwHOOsVyuNjsv1vDk0I2JMGJnJ9IME1Aa346MqNEznoeNDOanAPiHdJRYHKx8SmBIRf%2FfNCTJgku1KFvjhoyunVaoAge78YgBJ1Rs7ogR1sCepJKzwlX5Vb6P1kb62RHUqcM6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ed1192ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| www.pubgmobile.com/act/a20180515iggamepc/logo.png |  104.95.111.104 | 200 OK | 6.1 kB |
URL GET HTTP/2www.pubgmobile.com/act/a20180515iggamepc/logo.png IP104.95.111.104:443 ASN#20940 Akamai International B.V.
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
Hasha74329a2054a9e096a43ba8742dd9523 4ccac3041bf854721b91dcb45286b8488dd9f072 cde9945e91f0e51058869d687cd24c8f58804f25623999f1291c71b3697093b6
GET /act/a20180515iggamepc/logo.png HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "5ff6baa2-3bf2"
last-modified: Mon, 08 May 2023 08:25:46 GMT
server: Akamai Image Manager
x-serial: 910
x-check-cacheable: YES
content-length: 6055
content-type: image/avif
cache-control: private, no-transform, max-age=43200
expires: Wed, 17 Apr 2024 18:17:19 GMT
date: Wed, 17 Apr 2024 06:17:19 GMT
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/img/tokens.png | 104.21.40.153 | 200 OK | 30 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/tokens.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 135 x 130, 8-bit/color RGBA, non-interlaced Hashd02c9d4d558a113e2aebd45c7d8237dc edd72f80a319adf3fec2f3f061c1b82d6bf59aa7 7fb8131422bba9cda088005359870721b090dcd043d3cea030367be68c6328a6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/tokens.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 29942
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:59:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5fsgbu8yknMBuSGtV3pfSQssALHG6wMzL%2FhiGuJYd04ZWtxJHunwYBXJX%2Fx4SJp5r477cBQbEOCgkqgfuikZzbE%2FtoPujNhOfHsKHKCPxHjh%2BcTx43G4Q2PNFPJeUmWpbWtmIZBGj2gZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97fd2e92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/icon_2.jpg | 104.21.40.153 | 200 OK | 42 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/icon_2.jpg IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3 Hasha3f64c4dbc59578bde87272fab800586 3d458492b06598b93382b3675e5b59aad8aac436 0fa244d4efd45a45b32d1319ec495e307381445f62dceb071892f47e431daa81
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/icon_2.jpg HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/jpeg
content-length: 41672
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:55:54 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ic0eX8XhbeenLF%2B7OpTzrzFpLm7sld8rFEe2yTsI1sUMcQh%2F8VGWbp2%2FYXeMP%2FJ%2BCfKSmhdywRhMDQE49T1pDcQjVnH9nvsvwj69Pxj7J7%2B4Z6uHDLFgj7UcXafZVwmFeAlURgfYNM6W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a981d6592ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js | 142.250.74.42 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js IP142.250.74.42:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32061) Hashe40ec2161fe7993196f23c8a07346306 afb90752e0a90c24b7f724faca86c5f3d15d1178 874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4
GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:32:09 GMT
expires: Fri, 11 Apr 2025 17:32:09 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 477910
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js | 142.250.74.42 | 200 OK | 30 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js IP142.250.74.42:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (32180) Hash32015dd42e9582a80a84736f5d9a44d7 41b4bfbaa96be6d1440db6e78004ade1c134e276 8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 18:35:20 GMT
expires: Thu, 10 Apr 2025 18:35:20 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 560519
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/img/guide/e4eb1c730c28901ed581443a28f421d3.png | 104.21.40.153 | 200 OK | 42 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/guide/e4eb1c730c28901ed581443a28f421d3.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 350x200, components 3 Hash2cffdf981f6e507ab0e247efd0abb1d6 16e29910c12456808fc0b4264c80701dcf18ae0c 16168eac028d2dc822d14f510caa506dc8e2a706c1883108f7e43d8f4649e700
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/guide/e4eb1c730c28901ed581443a28f421d3.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 41758
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:56:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2B1GMKtGzwWD2ywMgQtRA9Sm%2FLjwEMgvuNJM0gh%2BKj2TaZbHAtFOqImsIYQxWSShdJdr3il3Nr0%2B2tTM2cvlrUnZCDQuyKeSE4iZj44rBnvJta5dq8%2FSz8HKu5nGUVTU2mleEXonbANu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a982d7692ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/header/header3.jpg | 104.21.40.153 | 200 OK | 147 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/header/header3.jpg IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x650, components 3 Size147 kB (147039 bytes) Hash699a55dbdf4c22742be0fc5aa549b1dc be5ea96c090d9de800f3351b30662e4025a3c709 f9c7a799dddd73dbf7a9553c63a8f590d4a9f8a4db5ed2dab272bcd5a1b2aa62
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header3.jpg HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/jpeg
content-length: 147039
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Fri, 05 Apr 2024 17:11:34 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HXas%2BlPMhlRY4r%2FTuCnFy%2FAtPKevqTEdzvW5Z1ZL6xpYqO%2Ff7V23gCjmflF8dFMlUpy2jAXBcO8W4%2BBZZpzv3GkhxdJFaeiOsG5gcz8mrdvQFtGde3afxdMYMKe5Rnm1sBhAv6UdybVe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ecef92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/title-pr.png | 104.21.40.153 | 200 OK | 91 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/title-pr.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3264x969, components 3 Hash5274dc4799481c8b6289c421aeec6dae b2ba12d0b9d3fe35d59e630f75f74a463a5457dd d94f31c064ad1574add683910e41e894f5a3db65bc12bab172c88280285b18f5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/title-pr.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 91048
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:56:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g8uTo%2F9fl8cvfCwhI4a9Ugt%2Fo7hRXqxXaDX1iSA7H8GMnK1dqZPYWP2Ff%2BtV2%2FnapZniJb28vz%2BeNDMRSyDzUHX0%2Fn7fpMQyH5oquzUcuoaqBNuXvSGmLo%2BdHE0b2rbrWQo77XejSnG3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97fd2992ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/footer-login.png | 104.21.40.153 | 200 OK | 63 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/footer-login.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 1280 x 54, 8-bit/color RGBA, non-interlaced Hash9c9b804ab29f89bbaf74631f98574278 1ade26603615d5f820880201137c48f4bfa80a60 a7204f9c6e9885587b2d096189b97f58c5b3bdda908df5bd355066723900dfef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/footer-login.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 63387
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:55:46 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AshRsUByv%2BBk45VNMoiNm6DNojATtfc5kYUQjqnM6%2FAoXceODaxF1btVgcJet8MB1mH35K1Y2m165WkryrSW62JocL4UrarTOO%2FT0EmZA9rFGYBbN6ekhe9raA0xIz7CzDM4R3ysO9c6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a982d8392ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/title-ig.png | 104.21.40.153 | 200 OK | 95 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/title-ig.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3264x969, components 3 Hashae910c1590d5f78ad2877b8409d7687e a92c3fa0fb61915f7574fb1ca8237c4d9a667ca5 486d6cff340af4c74ba58c778e086585947292e0d481aff7b69d7e9cc1216a03
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/title-ig.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 95318
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:56:08 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t%2BItjSXVwsjsSd8OapFt5gepJz3XRX0vS0vX9f9QLmT5GmtwfXoYH%2BDG9qann0fB%2FWmy0WFmL1Q%2B2VIsdOH%2FKKzYzvsdF26RUM%2Blk65M4KiW78vvNAfi6lIgPCzu6USib4ffl7GgvbOY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ed1092ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/header/headerfronts.png | 104.21.40.153 | 200 OK | 144 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/header/headerfronts.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 1280 x 650, 8-bit colormap, non-interlaced Size144 kB (143707 bytes) Hashf0966b7b828d888372c3242f781edbf8 11759fa3f970ffb8847ee72c7a96202f8a943fda 6a33b191188afc97ab1c48d4f1b469ea121882e1110e786bb4e13a990c90d02e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/headerfronts.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 143707
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:57:08 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BB%2BcbLiPvN8JXXlWpEuWqcxhwvfTckjNJx7ERz9Jo0N36DelpZXYMD5ZMuiXpUPoe%2BjuClbH91tpwvJq56%2BAupkFRI5HAi%2BsLfYpyl%2F3ry7CBBHoKCPYejWNY3B5xmY1vuOYSiQAgD3d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ecff92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/header/header5.jpg | 104.21.40.153 | 200 OK | 155 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/header/header5.jpg IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x650, components 3 Size155 kB (155307 bytes) Hash2f46c894fb8d31eb2353e972c92f7ee0 d5f1ed4b59e5cc7e9f691b40c393d35acf5604d9 be1cc2215a399661502a82097e6c9d33a9dec6a9bccd0ba45d57e4bdc54aedf2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header5.jpg HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/jpeg
content-length: 155307
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Fri, 05 Apr 2024 17:11:34 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ea1qe%2BR3p8ua6KpcXEt1oOwlhXrjHW7zuyxYCg2%2BjP9qkjlVmGeOpu9lwuhauAldBDi8paQXC9Ouv1OxIGUCJsjUoOP25LQQELxA5l%2FgWF6UQC%2Bhly4g2VRYuCxYFdZyxTKD4OByXCzi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ecfd92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/assets/kotak.png | 104.21.40.153 | 200 OK | 111 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/assets/kotak.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 396 x 396, 8-bit/color RGBA, non-interlaced Size111 kB (110688 bytes) Hash10cb6a2da72f74f0783993831c68ee01 a8bb4739cdbd42beef1c9c26397ac47db610bf3d f8d5fdd7704bc05e7bf6b331e65af394ec5d09b67917cc53e711ffca7f97f99a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/assets/kotak.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/png
content-length: 110688
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:55:58 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TXBuOYfhNyMJFdVV9UR9LIGUXvDXTpPdAvqCAacsu6lL5vP689zNhN1nd1LITLUgRxqBKBQnHxJiYtCVN5X05wjK6yoen%2FN9%2FKevOvOOOCDRD42pUcGA3p5yoPBRmJKD8YsnE77y52NW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a982d8e92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/header/header2.jpg | 104.21.40.153 | 200 OK | 193 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/header/header2.jpg IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x650, components 3 Size193 kB (192846 bytes) Hashbfff4e742ebde9de07839e64a7a48f06 e11ed3be2e0905367e009a3b0e4d0549cb45c7d3 913b47312e53a3baff06015e4afef51c00a81bae40ab4365c343fa0bd21bf7c0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/header/header2.jpg HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: image/jpeg
content-length: 192846
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Fri, 05 Apr 2024 17:11:36 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BMadUBoY%2FT8MONJJyKQr4San%2B4F%2FzVLZuQRLKj6pCn8uBlz5y8ECGUAJ9w0xGb0gEtyVuCz5XODxvNTHKZexGMf5cBT54ALrr2mwXRNIgP6eyGWUhzxC7bS8FBYZVUhCNJtNfi00LM7R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a97ecec92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/js/codeflag-link.js | 104.21.40.153 | 200 OK | 61 kB |
URL GET HTTP/3dfreg.freechip2023.com/js/codeflag-link.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1591) Hash5674ef5a95b8f48ba0a8405d056ba0ce 9991445667304928434eb128a38ab05902c38391 595f1377e816f8f8f50b3cc558c4cf3f4a83a20ac45675b3e558b6aed1d0d42a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/codeflag-link.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:54:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VcJY7nlLhwBJ4LZpwQ4bW1ORP77J%2F4nPd1oS69QIzB0rktGzaZZj5TM2a6chQW7RoIP1dpOOpK%2FPbJCfQca7o8boXMu%2BXJlWPUEyOv9VzBG8RvvwvEIdklTcAWulNp7VXTYlWUAAPMN7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a984daf92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff | 104.21.40.153 | 200 OK | 25 kB |
URL GET HTTP/3dfreg.freechip2023.com/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeWeb Open Font Format, TrueType, length 24996, version 1.40 Hash2018d35e708e07985693c6bc12a59861 12faf69d54217b30d4458fffad689e758b8a91c6 c2293fa86d99d0f1f06b2ac7f85ae0517e4a3bacfd9946de7b012f04aa2d831c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:20 GMT
content-type: font/woff
content-length: 24996
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:53:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393260
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jVCNC7MEi15ChXXnD3RdUc0E%2FeCUs6PqPv9J%2B8Cl3fC6hiFzgx%2Fx6AOxQctERv5WP9xVkvOIEuUh%2FPN6XZOpZwl86zuZ7y0zLcwfdZSsuJif7aUkAbhB8GVKnwdgIUpU%2BPyYsnYmSq19"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a9cbd2d92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 104.21.40.153 | 200 OK | 1.2 kB |
URL GET HTTP/3dfreg.freechip2023.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typegzip compressed data, from Unix Hash09cb4fd15d0ac0f75c3de7332c4cb664 6da91c324e40c80991dd7d5421f0e3391820ee3a abdb2b3d341a20da46023397fb83e9a202aefc75e43a80a05aec748720dda6d3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: application/javascript
last-modified: Mon, 15 Apr 2024 08:31:34 GMT
etag: W/"661ce5e6-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lyfGjYtX5pzxdwNMBF6XKr2fi0c8KLenlLYi2DZ7DI%2BH3HDhbXnXkDIAfvjnmlUg%2FNB1Xw1CCzzKJ4jghEA%2FMoyH%2FMOYBH1V5mxuezIINY4z01hNz4oIdw8frVltgC8v4Njb5uZCpyIZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a982d7492ce-CPH
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 19 Apr 2024 06:17:19 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfreg.freechip2023.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:27:38 GMT
expires: Wed, 16 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 49782
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/js/scripts.js | 104.21.40.153 | 200 OK | 6.3 kB |
URL GET HTTP/3dfreg.freechip2023.com/js/scripts.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJavaScript source, ASCII text Hash713da5406f59ec303ad4d966e9bcd452 5d562589e0144d07f5151f0d00cf68959300d204 d2fe2d180334a8f5a594522b569c0a889863b1989222ba69b24ca8f54c55c3ec
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/scripts.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Mon, 22 Apr 2024 04:13:55 GMT
last-modified: Mon, 19 Feb 2024 17:17:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 180204
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=no06TW9cLBYe5ltGLM2x5pM%2BADWdRz6L%2BQF86uOVEGiv%2FNFHB9pZhQohwlAKqRY8AOerI7LI2Z8Wb%2BqQ0uf5bhA9UdQ64ND56MJnbOyzpgmyMCAp4ZyG8yyfxHNEy2ci1TQT3kHRkn57"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a984db292ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 104.21.40.153 | 200 OK | 8.4 kB |
URL GET HTTP/3dfreg.freechip2023.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typegzip compressed data, from Unix Hash0db1f257d9dfe5150ec3e66a0ef64889 0a173875cc99d28a483247486c957161563c1543 d833ddef76bfbb480b8f630a7386e389e50bb98f712b3bd261ceaf5267d5c0cd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:20 GMT
content-type: application/javascript
last-modified: Mon, 15 Apr 2024 08:31:34 GMT
etag: W/"661ce5e6-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4tFuKCi26w%2FvvGqnOb9TLCVoLxG0n1TEKn4NRofe5k61UpTLAyEWsRpLk1tVYFXqtmhLMs71tP8TbzzmsbrDAhJwUh8QxCs9usOkNNWB20JLjRMdVgWyA6MO3aagAMaFNpAxNRil6i3F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a9ced7892ce-CPH
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 19 Apr 2024 06:17:20 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| dfreg.freechip2023.com/js/scriptv1.js | 104.21.40.153 | 200 OK | 7.0 kB |
URL GET HTTP/3dfreg.freechip2023.com/js/scriptv1.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJavaScript source, ASCII text Hash4c4b232227e4b91b2bdb5785a7a88a0d d0764dfc12a8b54419eb85e62abe2498293ab050 a44b13570f1ef023ea8c8b13e577c8b0e96700cb946477432a130e63a24280e4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/scriptv1.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Fri, 05 Apr 2024 19:56:30 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=759Fu5BM8EZD7o4VoP6KmRR0ROybvuEzBjZ6gvzic4o%2BLisq%2B2zS%2BXv1qJV1W%2BJk%2Bx6ScKeZeFoT1v8hx4NJSV1dg1C8jcpeT%2Frg1U5VYz7HSrN8YX61P1uZDycLS16HMDzhLqwbqFu2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a984dc192ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.21.40.153 | 302 Found | 0 B |
URL GET HTTP/3dfreg.freechip2023.com/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 17 Apr 2024 06:17:20 GMT
content-length: 0
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a1e0%2FLWpv9R8UH31mZC3vXtzseZjtqaSESLtppQw16O5CLaybemuF4mhju%2BnaxwlQ9%2BbpVQbgZakpz40CcIEYPy5qQA3U4lXLNcVLJZ4jXLyCo0Ia6aj044tNXt6mMOWm99QZ5KbPBQN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a9e1f2a92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/media/close.mp3 | 104.21.40.153 | 206 Partial Content | 13 kB |
URL GET HTTP/3dfreg.freechip2023.com/media/close.mp3 IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo Hash2056bdcfbd551273ee207f8c6ff9d257 6fe68c9917d3409710aee4147ada311093d33ba6 d7633fdf0d543880acc3fdaf578728d7becc1ff429ba054921d3313f73a5a4a7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /media/close.mp3 HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Wed, 17 Apr 2024 06:17:20 GMT
content-type: audio/mpeg
content-length: 12675
last-modified: Sun, 02 Oct 2022 09:58:58 GMT
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: REVALIDATED
content-range: bytes 0-12674/12675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tiEA3Yts7weA%2BqIEf4198O9oxGqDfoqEk8Mfyf8zGBQrvpXrAgrr2o6y%2FxRSRSIJ6eMUQr9n4x4aFZCYXVEKeZYLI2Yf9czhBIzYjKiIZUIRQ8LOhxiXZ8NuJ%2B5qsUA4swPCiTXXpR1b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a9e1f2f92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/media/open.mp3 | 104.21.40.153 | 206 Partial Content | 13 kB |
URL GET HTTP/3dfreg.freechip2023.com/media/open.mp3 IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo Hash58418a30e1310bf4fafa9fa0e57c18d6 b477e72668b181c3080d6b921e2edf15ef134f17 d5ad34e8bb64fba432c1a12b24cd1e532104d0183045e73abaaec72aa824df1d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /media/open.mp3 HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Wed, 17 Apr 2024 06:17:20 GMT
content-type: audio/mpeg
content-length: 12675
last-modified: Sun, 02 Oct 2022 09:58:58 GMT
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
content-range: bytes 0-12674/12675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oFL1XFUYXSnqzCDcMQFcY5QwZmb%2B4fVKDuBJAcpbiSn01s5jP9O1TghIxgiIWX5K24QXpDbXtdJzzfwN7SqLTJX53gZqSJeLWud1B1GHMZjp2qV8jJhftUpfXGyaoXlQWJdqzJ2olDuB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4a9e1f2d92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/bg-item.png | 104.21.40.153 | 200 OK | 22 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/bg-item.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x1632, components 3 Hashf87c3bd48ae8e7641800a4f4b813aa0e 1142306c70534889c6cf8d5a4a9bf3546b02d131 21bd3cc6ce5f914e39c22b6af807e63201b5fddfa419c983de92996e497ca04c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/bg-item.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/css/shop.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:21 GMT
content-type: image/png
content-length: 21675
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:02 GMT
last-modified: Thu, 15 Feb 2024 09:58:48 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bImNkqBvLv8UdB4lkGnHqKGixIoa7ip7AZtL6WBjLNOSo4J%2FSnsANfpApacsYeN8Bjo8yBYGPabwEFxy2A0wq9pg1%2B5B3f%2BvO%2B7Y1kMHaXzyQhKqeJiPmx2kthUXePuQyutj6n7lM%2BJ%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4aa3f99c92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/bg-pop-btn-m.png | 104.21.40.153 | 200 OK | 1.5 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/bg-pop-btn-m.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typePNG image data, 597 x 79, 8-bit colormap, non-interlaced Hash94ec8b608e632076dd8f56d86708cfd3 01b83a99d1b6eb20b7ab4d0f0e3004b64e34a0c0 042262bf97d7754173565e479cb19b63cf577067d946453696bf83b0581edd66
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/bg-pop-btn-m.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:21 GMT
content-type: image/png
content-length: 1472
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:02 GMT
last-modified: Thu, 15 Feb 2024 09:58:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iBhlnAP%2BufPdvAO7FiMbxNPENXZWVX%2Ba9Gz3KSvoBbiHYVhfwXBOkTy1jPt3jikI%2B4IxL3WwXVUhqelZp0ANmCdG%2FJ1E7lmKDJwBbidtT3e2qlB179jOozdAZl%2BHgRoHaTOZuIfViKXy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4aa3f9a192ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/fonts/selow.woff2 | 104.21.40.153 | 200 OK | 22 kB |
URL GET HTTP/3dfreg.freechip2023.com/fonts/selow.woff2 IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22220, version 1.0 Hash345579e8566a3dd6dc9feb5362fbe7e1 df075dd0c26e72fd7df19948f07904c1eaa72ded 1d0dfcc32b3be2bf3b3dbc371e9b7c5ce205f4bc6f7c8ce0226256cc7064c3e4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /fonts/selow.woff2 HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:21 GMT
content-type: font/woff2
content-length: 22220
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:21 GMT
last-modified: Thu, 15 Feb 2024 09:53:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SkG%2B%2BIOYA56L8ytciu7%2F7nhVx%2BAZeKtbPKobJZArESe%2FR45fIw%2BBAN4yN2PbRH8BpBw0kMs4O86MLAfYniJzhaMETBunvZvNPC5mgyCx1fmRkOpgockMt9ieXTigslYHpTwxX5m1O1tM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4aa419ce92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/popup-login.jpg | 104.21.40.153 | 200 OK | 32 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/popup-login.jpg IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3 Hash6228bae3ba8e07247f5676192f280278 5484053ff552f9a3cf3163826815fd0e1d8b5292 18753c91e057bb8d2624123a41ad748e0e40de025713389c90583a5e6f477d43
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/popup-login.jpg HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:21 GMT
content-type: image/jpeg
content-length: 32008
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:21 GMT
last-modified: Fri, 05 Apr 2024 15:22:08 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Bfsl6QQC20GATwg2yudz3Q0nOwjYqU1pRxWnRaxIAAwl6vMWmuHKF5zdAaCwJnBRyjbgxlvQprhXxTBpjCfJJqGQxd4fVd5QhuNzF6PpD3lfU5STTZ4BMWSCeOE%2FeOEE8NIZlzcZ%2FJT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4aa419cc92ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| site-assets.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 | 172.64.147.188 | 200 OK | 111 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.4.2/webfonts/fa-brands-400.woff2 IP172.64.147.188:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 110932, version 772.1280 Size111 kB (110932 bytes) Hashf022fca674f561d3f3f9f187a7fa3222 9dc6a6750e7d1b22fe3ae3fab7bd13ed1452915f 063b9237e402c98dfb77a66e5de0d02d953640fc8fe44911808c2fdcb80df26e
GET /releases/v6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dfreg.freechip2023.com
DNT: 1
Connection: keep-alive
Referer: https://site-assets.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 06:17:21 GMT
content-type: font/woff2
content-length: 110932
x-amz-id-2: MUgVD7Fs7tnwFI+p4ASlxqPWLzwTKlnSC3Wlh24u39Cp4IstrPgLjfDkvNvI8F4IzcWTeUq6xi0=
x-amz-request-id: E7JYYQW3B1H2TG9T
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 01 Aug 2023 19:22:32 GMT
etag: "f022fca674f561d3f3f9f187a7fa3222"
x-amz-server-side-encryption: AES256
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 875a4aa4199a92d6-CPH
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.cn/ | 47.246.3.21 | | 471 B |
IP47.246.3.21:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hash63acc1f4887799fa0e5d06329941214e 73cca0c1d5d34a8a5b456a0ef0467b18315eac70 681c1085c2b096dd160ecb023b8bb8e40e38e2676a52ace3abfebf5588143be8
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 06:17:21 GMT
Ali-Swift-Global-Savetime: 1713334641
Via: cache13.l2fr1[34,33,200-0,M], cache13.l2fr1[35,0], cache5.ru4[90,90,200-0,M], cache5.ru4[91,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 17 Apr 2024 06:17:21 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039917133346415651389e
|
|
| ocsp.digicert.cn/ | 47.246.3.21 | | 471 B |
IP47.246.3.21:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hash63acc1f4887799fa0e5d06329941214e 73cca0c1d5d34a8a5b456a0ef0467b18315eac70 681c1085c2b096dd160ecb023b8bb8e40e38e2676a52ace3abfebf5588143be8
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 06:17:21 GMT
Ali-Swift-Global-Savetime: 1713334641
Via: cache12.l2fr1[33,33,200-0,M], cache12.l2fr1[34,0], cache9.ru4[91,91,200-0,M], cache9.ru4[92,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 17 Apr 2024 06:17:21 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039d17133346415648354e
|
|
| ocsp.digicert.cn/ | 47.246.3.21 | | 471 B |
IP47.246.3.21:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hash63acc1f4887799fa0e5d06329941214e 73cca0c1d5d34a8a5b456a0ef0467b18315eac70 681c1085c2b096dd160ecb023b8bb8e40e38e2676a52ace3abfebf5588143be8
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 06:17:21 GMT
Ali-Swift-Global-Savetime: 1713334641
Via: cache26.l2fr1[34,34,200-0,M], cache26.l2fr1[35,0], cache2.ru4[92,91,200-0,M], cache2.ru4[92,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 17 Apr 2024 06:17:21 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039617133346415644563e
|
|
| cdn.midasbuy.com/images/footer-reddit.d66cdc0d.png |  43.152.136.130 | 200 OK | 5.0 kB |
URL GET HTTP/2cdn.midasbuy.com/images/footer-reddit.d66cdc0d.png IP43.152.136.130:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hashd66cdc0d92659b0e64d7aefab70a60f6 f8dcf359bb72ed8aa3ef84a6d3f79102869a82f0 642703b53950fc841394918d79cbabec6060242e45c8ded41d324e7d6dce8924
GET /images/footer-reddit.d66cdc0d.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 03:12:26 GMT
content-type: image/png
content-length: 5043
accept-ranges: bytes
x-nws-log-uuid: 9127197584062647868
server: Lego Server
date: Wed, 17 Apr 2024 06:17:21 GMT
x-cache-lookup: Cache Hit
x-serverip: 43.152.136.130
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/footer-tiktok-white.7743a9ae.png | 43.152.136.130 | 200 OK | 2.1 kB |
URL GET HTTP/2cdn.midasbuy.com/images/footer-tiktok-white.7743a9ae.png IP43.152.136.130:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash7743a9aef9d3b6d89f6567e7514036d4 08fea638e8c8f7641edaae510c80879686ddeb77 f10cdb32b8d7212970310db9166bb421eaea8128f1767604c22001fac1d5aa97
GET /images/footer-tiktok-white.7743a9ae.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 26 Sep 2022 03:12:26 GMT
content-type: image/png
content-length: 2135
accept-ranges: bytes
x-nws-log-uuid: 7148780534444112819
server: Lego Server
date: Wed, 17 Apr 2024 06:17:21 GMT
x-cache-lookup: Cache Hit
x-serverip: 43.152.136.130
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-ins-new.png | 43.152.136.130 | 200 OK | 7.6 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-ins-new.png IP43.152.136.130:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hashcc70b37c298ba08069f3c91b1df297fe d7c87f6337f5a48f94190eca6a1b74eef9323f38 f2ad27dbb5397878470e88c31ca3c398f490f9e720ba0ca649ec6bf137f4d6bc
GET /oversea_web/static/images/footer/footer-ins-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
content-type: image/png
content-length: 7625
accept-ranges: bytes
x-nws-log-uuid: 15678813203717550428
server: Lego Server
date: Wed, 17 Apr 2024 06:17:21 GMT
x-cache-lookup: Cache Hit
x-serverip: 43.152.136.130
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/Discord.8277bca0.png | 43.152.136.130 | 200 OK | 5.2 kB |
URL GET HTTP/2cdn.midasbuy.com/images/Discord.8277bca0.png IP43.152.136.130:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash8277bca0aac01af0b679d71f4de55459 e06892977682cd5f57c31245ff7cc8efb14c92f0 25157739816315d396c664fd1f45336d8ab8bf9d768aa911e93cbebc95614a58
GET /images/Discord.8277bca0.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 22 Apr 2022 08:25:18 GMT
content-type: image/png
content-length: 5224
accept-ranges: bytes
x-nws-log-uuid: 11248702615398157166
server: Lego Server
date: Wed, 17 Apr 2024 06:17:21 GMT
x-cache-lookup: Cache Hit
x-serverip: 43.152.136.130
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.cn/ | 47.246.3.21 | | 471 B |
IP47.246.3.21:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hash63acc1f4887799fa0e5d06329941214e 73cca0c1d5d34a8a5b456a0ef0467b18315eac70 681c1085c2b096dd160ecb023b8bb8e40e38e2676a52ace3abfebf5588143be8
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 06:17:21 GMT
Ali-Swift-Global-Savetime: 1713334641
Via: cache22.l2fr1[229,229,200-0,M], cache22.l2fr1[230,0], cache10.ru4[288,288,200-0,M], cache10.ru4[289,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 17 Apr 2024 06:17:21 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039e17133346415652302e
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-fb-new.png | 43.152.136.130 | 200 OK | 2.9 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-fb-new.png IP43.152.136.130:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash9be2c56c1a42fab7e2f5b764573dea4d 16f58f9b1f5fd465d3a8bc765b972eadb5166f24 cc8830f258c471b9cb15d69cda554d5181bd680996dd0041e3b9986b3b0769bf
GET /oversea_web/static/images/footer/footer-fb-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
content-type: image/png
content-length: 2899
accept-ranges: bytes
x-nws-log-uuid: 2967818653635908697
server: Lego Server
date: Wed, 17 Apr 2024 06:17:21 GMT
x-cache-lookup: Cache Hit
x-serverip: 43.152.136.130
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-youtube-new.png | 43.152.136.130 | 200 OK | 4.0 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-youtube-new.png IP43.152.136.130:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hashb6f18fca57bb1657d719961d350bda7c 1e99ce9e9852ea8615b1c8c6f361058019d92dab 0e888a266c4ad5136be1cf650faf222ed0d644c54d83068f0dfabc0fae53e90c
GET /oversea_web/static/images/footer/footer-youtube-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
content-type: image/png
content-length: 3955
accept-ranges: bytes
x-nws-log-uuid: 12264366072058917926
server: Lego Server
date: Wed, 17 Apr 2024 06:17:21 GMT
x-cache-lookup: Cache Hit
x-serverip: 43.152.136.130
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/oversea_web/static/images/footer/footer-email-subscribe.png | 43.152.136.130 | 200 OK | 3.3 kB |
URL GET HTTP/2cdn.midasbuy.com/oversea_web/static/images/footer/footer-email-subscribe.png IP43.152.136.130:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash150e097b432034e3fedf6443b4551a16 a4299dadb4feda18e484362ce6892c52b507d5e6 b9ca6c3a516ec9dfbe4f33e318d560f265836d51627cb9fa3d881062a2fd98e2
GET /oversea_web/static/images/footer/footer-email-subscribe.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 18 Mar 2024 11:02:30 GMT
content-type: image/png
content-length: 3349
accept-ranges: bytes
x-nws-log-uuid: 18031767792210862967
server: Lego Server
date: Wed, 17 Apr 2024 06:17:21 GMT
x-cache-lookup: Cache Hit
x-serverip: 43.152.136.130
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.cn/ | 47.246.3.21 | | 471 B |
IP47.246.3.21:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hash63acc1f4887799fa0e5d06329941214e 73cca0c1d5d34a8a5b456a0ef0467b18315eac70 681c1085c2b096dd160ecb023b8bb8e40e38e2676a52ace3abfebf5588143be8
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 06:17:21 GMT
Ali-Swift-Global-Savetime: 1713334641
Via: cache6.l2fr1[374,374,200-0,M], cache6.l2fr1[375,0], cache4.ru4[431,431,200-0,M], cache4.ru4[432,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 17 Apr 2024 06:17:21 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6039817133346415654410e
|
|
| www.pubgmobile.com/common/images/icon_logo.jpg | 104.95.111.104 | 200 OK | 982 kB |
URL GET HTTP/2www.pubgmobile.com/common/images/icon_logo.jpg IP104.95.111.104:443 ASN#20940 Akamai International B.V.
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subjectwetv.acc.qq.com Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File typeJPEG image data, baseline, precision 8, 1024x1024, components 3 Size982 kB (982437 bytes) Hashb83d8d3e9beecfac081f4e742d27661c 448330670bef8c2ee17baf6d2410ca974341cb88 5899c82b2f0563679a9c1ee79b5b28f2545864d95c7627c1a70e36a2f034497d
GET /common/images/icon_logo.jpg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 982437
last-modified: Mon, 30 Nov 2020 12:10:45 GMT
etag: "5fc4e145-efda5"
accept-ranges: bytes
cache-control: max-age=113
expires: Wed, 17 Apr 2024 06:19:15 GMT
date: Wed, 17 Apr 2024 06:17:22 GMT
X-Firefox-Spdy: h2
|
|
| cdn.midasbuy.com/images/twitter.80d9b5e6.png | 43.152.136.130 | 200 OK | 2.2 kB |
URL GET HTTP/2cdn.midasbuy.com/images/twitter.80d9b5e6.png IP43.152.136.130:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.midasbuy.com Fingerprint3A:C6:DF:87:FC:11:BE:AD:FB:6C:B9:CB:37:B6:E0:B7:DE:0A:D0:AA ValidityMon, 15 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash80d9b5e608e0427576ce2f7d56d0a592 4c1ce1d06cb6b2b3d4cca8636b14e109bc500d50 cfcb8009151ebab2ac10399ffa57e2724834ad374e720e77e5c0900e21ed6fde
GET /images/twitter.80d9b5e6.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 04 Jan 2024 08:58:58 GMT
content-type: image/png
content-length: 2167
accept-ranges: bytes
x-nws-log-uuid: 10037314672745835953
server: Lego Server
date: Wed, 17 Apr 2024 06:17:22 GMT
x-cache-lookup: Cache Hit
x-serverip: 43.152.136.130
client-ip: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/css/twitter.css | 104.21.40.153 | 200 OK | 7.1 kB |
URL GET HTTP/3dfreg.freechip2023.com/css/twitter.css IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with very long lines (7671), with no line terminators Hash8a5881213470e6dc7783f31cc8f93813 02c3574c7943483db6ff4ca77ea22b5e7eab975d 8037e240ea15aa7e27adacf2793482db351923460d54b7840453d445b1237840
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/twitter.css HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Sun, 18 Feb 2024 18:22:14 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N9ysaFqPLdXDEgE%2BEOPCHhkGVohxylQ0OFrrF3Nj%2Fos30IRbLAteXZlr9HH9eg6Yhm2U%2F%2FKv50k9SdVeF%2B9TxIBwZIUuybHf%2BOvRQtyPhR32UlxEaN7vvV72u1QAwUGtA0kPJlWW1hDP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a97dcd992ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css | 104.18.11.207 | 200 OK | 31 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css IP104.18.11.207:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 03/18/2024 12:28:12
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9e01696f4dd85a48838a9ea9ee82ef4a
cdn-cache: HIT
cf-cache-status: HIT
age: 1253149
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875a4a98795a92f7-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| site-assets.fontawesome.com/releases/v6.4.2/css/all.css | 172.64.147.188 | 200 OK | 512 kB |
URL GET HTTP/2site-assets.fontawesome.com/releases/v6.4.2/css/all.css IP172.64.147.188:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeASCII text, with very long lines (52040) Size512 kB (511995 bytes) Hashbf2a5dfaa82bf7a17ae051d0fc06aa60 26751288b759e1429f408258ecb3d654239f56b8 f5044ae8cd744eb4bb6a0741f4ce3b8b41145e460aea7205fb198005d10a0bde
GET /releases/v6.4.2/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dfreg.freechip2023.com
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
x-amz-id-2: j2C+gHWdo+2SaFwWwrjCOv3eieeQBnR36fJxbVtvNcw0pmlxz4+x5m0SJI9ftmQquHo480jaokeosOzQl3e+mw==
x-amz-request-id: NRF763EHZDNR77FD
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 01 Aug 2023 19:17:11 GMT
etag: W/"bf2a5dfaa82bf7a17ae051d0fc06aa60"
x-amz-server-side-encryption: AES256
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 875a4a986f8692d6-CPH
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/css/shop.css | 104.21.40.153 | 200 OK | 2.1 kB |
URL GET HTTP/3dfreg.freechip2023.com/css/shop.css IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with very long lines (2350), with no line terminators Hasha89c4eff0ea395db200c92276788d4fa 2f8196b4206f8a5325f2dfa7b063815672a7a56e 42f7cc81b0934cbc1d20c9c45c91de208ea4f3642b1cc5756bbef9328f048596
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/shop.css HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 16:09:42 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yO7LncSN4ErAk8C%2BcBl7%2Bd7nTJeo5ZzFMeB%2FROHDMCeb8TW9sBGbqgrg41mUu2ssuGA7HuB320R3B97gif6iI8y%2FBJ89TED4aLqfN1u6whGMSm%2FC676LLhEUYWXSGvJEI4fajR7caRFJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a97dcdb92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/js/link.js | 104.21.40.153 | 200 OK | 3.2 kB |
URL GET HTTP/3dfreg.freechip2023.com/js/link.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (3361), with no line terminators Hash30bd9c5ff40cb1632dbd99689716bd82 183ad39a590f3938209fe8e1d0151920b15353b7 4aefd7e8b90551dea5d0cfbb141841c00faa3fce18adb11e061bf23b4d2bb64f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/link.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Fri, 05 Apr 2024 19:55:40 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jTYMejeXByt8v2DVvOmmnIw6kxMvJmLNN5rB6TuqBF0FPyF0wam%2BqXoQM%2FQjrI5oBOQzpcYql9kSzg40Tyo%2FIrkZ%2BO220tMlmr3eyIpTMT3FfC25zcM7z47iBeBRoFwZIQwTYDDWpLDz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a984dc992ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/css/codeflag-link.css | 104.21.40.153 | 200 OK | 21 kB |
URL GET HTTP/3dfreg.freechip2023.com/css/codeflag-link.css IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with CRLF line terminators Hash2ede4c4f04b8d4e0a7f3ba17cf7e10de b2aad0fc115b0f5123dafe2ffa827b5fb005c342 3603cdff3f7af5e18bc120728099ef179c02dfa4dbf105a51093d5e501ffa032
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/codeflag-link.css HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 10:02:54 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AgrneM7VedtntNvzqwXzevOHosYhOUNxgm9vhuu8rO%2FZ7X0wSygb0FTc6Af%2Bc1lQHQbGNdGFvS6W4dRHc5A8%2F4fxS2%2BU79f96tkvVjtZRRn1pRb7LE9YIsIV7TsRMXrNnwTvDkUXbDkH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a97ccbd92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/js/slide-notif-zone.js | 104.21.40.153 | 200 OK | 572 B |
URL GET HTTP/3dfreg.freechip2023.com/js/slide-notif-zone.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with very long lines (603), with no line terminators Hashadad3401106cf64d14e5ef6cce4a90df 2f9253ba8f6a5b7259ba9cd06da7c6811af01c92 c22e0834829a44a4e37ff5ae9e491eeb29312ee16216f35d35844eb5cfd53614
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/slide-notif-zone.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Mon, 22 Apr 2024 04:13:55 GMT
last-modified: Thu, 15 Feb 2024 09:54:28 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 180204
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dpUSon9ICeJLCGMMrtzV1AV%2FcFOGl2okO7HvClQVV4q2m8e6HWm7JwNhp0G%2FZ3lg%2F0OgRRSZOX7r79mmYWwj4AOahBBUqDiZ3%2FcY27Mt%2BrhH%2BU3MxgUNtOqcLxeviWWBb0B5uQ0QXq%2B8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a984dcb92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js | 104.21.40.153 | 200 OK | 7.9 kB |
URL GET HTTP/3dfreg.freechip2023.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeJavaScript source, ASCII text, with very long lines (7892), with no line terminators Hash0c62fe8cf9dd489f3dbd5513a693b7af 054728ca17479b41870c29780c69cb67327672e0 4d192c6b7c25420ff04e4f4def7fb772fb7c705a753d059a785e3fab55018a35
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:20 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: br
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wsS9E%2FGBPTokVGKb2S%2BMoL%2F%2FS6cZMEo5nJuUxUCX7mZIxWxjYMdVuSKMy1b5pGELW5%2FlKOTjQLL5MH%2FjKaFDnsu6n1gMFRyn%2BdYvYTIrz6MD1Ubvu1I9ax2ZL%2BGSgOw9Bxs4Ki1LjSbF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a9e5f8292ce-CPH
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/css/link.css | 104.21.40.153 | 200 OK | 5.4 kB |
URL GET HTTP/3dfreg.freechip2023.com/css/link.css IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with very long lines (5919), with no line terminators Hash27130b4be5a332ab81ed149065658197 3f9ffa1d6adb24c1893d0819504f719d0fdf41ed fa928f659614a7257dc6fcc55c40e0fa3669e8cc63fc90bded816780d33b9aae
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/link.css HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 10:03:04 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2%2BAEQfBtjityVxP4Sx5OTIXpoH%2FrZGyu4RVw9wtA4fZXt7BV8mP2PkELzV4M7kehG%2FMOS0eTDBfljX%2FJMuDIXFCz3QnHSQtIe3%2B1ji0a50pDAAqsyPmfqwf%2FEYKlxyV1U0gFoWrI6QxZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a97dcda92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/css/loader.css | 104.21.40.153 | 200 OK | 5.9 kB |
URL GET HTTP/3dfreg.freechip2023.com/css/loader.css IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with very long lines (6291), with no line terminators Hashb826d1007d8a9126130d22ebee63dab3 14b0700fda1536b780ac91eb4e81bf65878280d0 47612bd596ebe1386fe3be8b4369df40da66b72c7e459801e324386720d5ccbe
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/loader.css HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Mon, 22 Apr 2024 04:13:55 GMT
last-modified: Thu, 15 Feb 2024 10:03:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 180204
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IxPh%2BO8z8IYmW%2BPj3Y82xlxW11krr7oUiv7ziq4QW0rHvlOEY16mf6uC5ta%2BnwQ%2BQY69QowXovu8skcyw%2B7xC4NQp%2FbAReCfF2%2F3mtp9vBq3vpHh%2BW9I2e7o6IdcnxQh5ph3CWTCsX%2B7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a97dccb92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/js/slide-header-zone.js | 104.21.40.153 | 200 OK | 463 B |
URL GET HTTP/3dfreg.freechip2023.com/js/slide-header-zone.js IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with very long lines (481), with no line terminators Hash8baa03d011132f29a95f654d89e1b8b0 260c762a5f3e874a9f06d7485829dd5f35f55045 dd6eac571b075bad3573cce217d2e830fc6626a64e800b67ca203845d937ff2b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /js/slide-header-zone.js HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 19 Apr 2024 17:03:00 GMT
last-modified: Thu, 15 Feb 2024 09:54:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 393259
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cqoToiAzPXzGct7QLN8s%2FNuAsYf9DQvXlZYLqAIkDBuLatNcDJShdx6oAPO0T3ek%2FI1GgizCTFoUiyfO9HQyqYcNrbTmWoJTnDb9HaA9mFr7ZsHLioeaatdm45jDw7Bxb64It0vzet4B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a985dda92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.40.153 | 200 OK | 119 kB |
URL User Request GET HTTP/2IP104.21.40.153:443
CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
Size119 kB (119055 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET / HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2GzI%2F4tcKAXoAovaH%2Fdf1HBC7qgaOXWV9vDEnZX68RVKhLT6SvtwtBrGuOjgDT8orlAjLUyAoJUGlwNGDo%2FaxT%2BN82dNkJ2FnUXKUUVHTAoV%2BO%2BABg3fdE5sDnWYBBRXaX5BDtPzkNzN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a94cdf29300-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/css/animate.css | 104.21.40.153 | 200 OK | 80 kB |
URL GET HTTP/3dfreg.freechip2023.com/css/animate.css IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
Hashca763b35dde8eb037a15a37a4a4a4ead 96f79daac19b3c1750ce7fcb97c432afb8340e98 b1dff1fceb1103ae1939d6f02695597e7724f07e4e6f66f4893a5648ec7066b4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/animate.css HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 10:02:28 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R78nU6RXfoaR06lCYEsdPgTvo9SYbQS9Su2jG7pEon5cXMTFPRFTgAKJJMbDXahWACCIXZUNTyIFp%2Fj4Yjo0qdrUqdbOiy%2BHHVMb8u49Msv2KleimWaBX%2FwYfmeyCJAkTy6RqOhssyyC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a97ccc192ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/css/style-kangcopy.css | 104.21.40.153 | 200 OK | 60 kB |
URL GET HTTP/3dfreg.freechip2023.com/css/style-kangcopy.css IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with very long lines (913) Hashe2b6d994f4ff53bbdba659f6a99206f6 7f88cfd46491c5384bba78a46f3418c1a5969cd9 426638149c896d190460f82d5ae22bab4a132e0c95f94d2383590476977b9fbf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/style-kangcopy.css HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Thu, 15 Feb 2024 09:53:34 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CVs%2FPOaIXDRe0L7DBYwLeintOt2H5bEKV5xryN2k599%2BxZeMlFF1%2BE3gbYPx4NotNPaVITpNLxVEo%2FeNXWG9PaVzbMIYy%2BGstNSaHn1FEsnoy7%2FkRWoJVb8vHLBLMHqcnQ9sVkLF5bZC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a97ccbe92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| dfreg.freechip2023.com/img/popup-navbar1.png | 104.21.40.153 | 404 Not Found | 1.2 kB |
URL GET HTTP/3dfreg.freechip2023.com/img/popup-navbar1.png IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeHTML document, ASCII text, with very long lines (1276), with no line terminators Hash24b426fea67958554911ff4c943fdfe4 b92889146d4c1bbddccabe58ca15c814ea066f72 335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /img/popup-navbar1.png HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Apr 2024 06:17:21 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yhngn4nFLR0eyxIRoRoB29RB26cBSNRe%2FUz8%2F0u3167vyi3Tkf3yeWUhB7sc46zvBm%2BahZmMLX0GEIYra93IhLUHJNeXOMguvZToOHJ3HNuLTIY96i7Lj6W9uJQSr2Gg8iBrNCbic%2FFc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a4aa419c692ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500 | 142.250.74.106 | 200 OK | 12 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500 IP142.250.74.106:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hash807349734f3707b50b73c3fd626526e8 2f3ab67f0ffa01bc1f0c180cae9085ecc8d96d63 ce7d7e11e41b1b3619cbdf436bbf2557fda2d97d434e65fab281207ffae5c0d0
GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 06:17:19 GMT
date: Wed, 17 Apr 2024 06:17:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dfreg.freechip2023.com/css/facebook.css | 104.21.40.153 | 200 OK | 5.0 kB |
URL GET HTTP/3dfreg.freechip2023.com/css/facebook.css IP104.21.40.153:443
Requested byhttps://dfreg.freechip2023.com/ CertificateIssuerLet's Encrypt Subjectfreechip2023.com Fingerprint58:12:9D:79:D7:C5:32:E7:B5:D6:14:41:12:1A:C6:B9:89:03:7A:14 ValidityWed, 21 Feb 2024 12:51:10 GMT - Tue, 21 May 2024 12:51:09 GMT
File typeASCII text, with very long lines (5323), with no line terminators Hash4d209b2758119613723ddb62f835fe47 a5c984c6ad4ea8352b932c0273f28e08637797dd 09ccb32cc6540ca62377175b8fed56e0c7467a8e74dc5479a2c249ffea52d33e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Tencent |
GET /css/facebook.css HTTP/1.1
Host: dfreg.freechip2023.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dfreg.freechip2023.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 17 Apr 2024 06:17:19 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 06:17:19 GMT
last-modified: Tue, 30 Jan 2024 05:35:16 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=olENiEoGt965880qyCnCX%2BMTeDFsbYra%2BewbAH3dgdjfFsuqLvlt6JRFdKuP6DEiT%2Bp2dj9hdX%2FcYAZ1cl%2BaRsry8%2FcyQShD4zjPBcOrTa76SKQb89jZovEKEC5I%2FGtftRVzhKJv7xMl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875a4a97dccf92ce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|